@mandujs/core 0.54.32 → 0.55.0-beta.1

package/src/agent/types.ts

@@ -32,43 +32,43 @@ export interface AgentProjectSummary {
   configFile: string | null;
 }
 
-export interface AgentRouteSummary {
-  id: string;
-  pattern: string;
-  kind: "page" | "api" | "metadata" | string;
+export interface AgentRouteSummary {
+  id: string;
+  pattern: string;
+  kind: "page" | "api" | "metadata" | string;
   module: string;
   methods?: string[];
   hydration?: {
     strategy?: string;
     priority?: string;
-  };
-  hasClientModule: boolean;
-  hasContractModule: boolean;
-  boundaryCount?: number;
-  boundaries?: AgentRouteBoundarySummary[];
-  layoutDepth: number;
-  metadataKind?: string;
-}
-
-export interface AgentRouteBoundarySummary {
-  id: string;
-  module: string;
-  importSpecifier?: string;
-  exportName: string;
-  localName: string;
-  ordinal: number;
-  hydrate: string;
-  propsSource: string;
-  propsKeys: string[];
-  hasSpreadProps: boolean;
-  source: {
-    file: string;
-    line: number;
-    column: number;
-  };
-}
-
-export interface AgentArtifactSummary {
+  };
+  hasClientModule: boolean;
+  hasContractModule: boolean;
+  boundaryCount?: number;
+  boundaries?: AgentRouteBoundarySummary[];
+  layoutDepth: number;
+  metadataKind?: string;
+}
+
+export interface AgentRouteBoundarySummary {
+  id: string;
+  module: string;
+  importSpecifier?: string;
+  exportName: string;
+  localName: string;
+  ordinal: number;
+  hydrate: string;
+  propsSource: string;
+  propsKeys: string[];
+  hasSpreadProps: boolean;
+  source: {
+    file: string;
+    line: number;
+    column: number;
+  };
+}
+
+export interface AgentArtifactSummary {
   path: string;
   kind: "partial" | "island" | "slot" | "contract";
 }
@@ -173,11 +173,21 @@ export interface AgentVerifyCheck {
   details?: Record<string, unknown>;
 }
 
-export interface AgentSuggestedCommand {
-  command: string;
-  reason: string;
-  required: boolean;
-}
+export interface AgentSuggestedCommand {
+  command: string;
+  reason: string;
+  required: boolean;
+}
+
+export interface AgentVerificationStep extends AgentSuggestedCommand {
+  id: string;
+  kind?: "agent.verify";
+  changedOnly?: boolean;
+  includeDiagnose?: boolean;
+  includeGit?: boolean;
+  includeGuard?: boolean;
+  includeContract?: boolean;
+}
 
 export interface AgentChangedFileReason {
   file: string;
@@ -212,7 +222,12 @@ export interface BuildAgentVerifyOptions {
   staged?: boolean;
 }
 
-export type AgentRepairStatus = "ready" | "nothing_to_repair" | "input_missing";
+export type AgentRepairStatus =
+  | "ready"
+  | "nothing_to_repair"
+  | "input_missing"
+  | "rolled_back"
+  | "rollback_conflict";
 
 export interface AgentRepairAction {
   diagnosticCode: string;
@@ -233,15 +248,17 @@ export interface AgentRepairReport {
   sourceReport: string;
   diagnostics: AgentDiagnostic[];
   actions: AgentRepairAction[];
-  appliedActions: AgentRepairAction[];
-  warnings: string[];
+  appliedActions: AgentRepairAction[];
+  rollback?: AgentRollbackResult;
+  warnings: string[];
   nextVerifyCommand: string;
 }
 
-export interface BuildAgentRepairOptions {
-  from?: string;
-  apply?: boolean;
-}
+export interface BuildAgentRepairOptions {
+  from?: string;
+  apply?: boolean;
+  rollbackId?: string;
+}
 
 export type AgentDomain =
   | "route"
@@ -257,56 +274,187 @@ export type AgentDomain =
   | "db"
   | "unknown";
 
-export interface AgentPlanRisk {
-  level: "low" | "medium" | "high";
-  reason: string;
-}
-
-export interface AgentPlan {
-  schemaVersion: 1;
-  framework: "mandu";
-  generatedAt: string;
-  intent: string;
-  domains: AgentDomain[];
-  filesToRead: string[];
-  filesToCreate: string[];
-  filesToModify: string[];
-  mcpTools: string[];
-  risks: AgentPlanRisk[];
-  verification: AgentSuggestedCommand[];
-  notes: string[];
-  executable: false;
-}
-
-export interface BuildAgentPlanOptions {
-  intent: string;
-}
-
-export interface AgentApplyReport {
-  schemaVersion: 1;
-  framework: "mandu";
-  generatedAt: string;
-  ok: boolean;
-  dryRun: boolean;
-  sourcePlan: string;
-  intent: string;
-  domains: AgentDomain[];
-  actions: Array<{
-    kind: "mcp_tool" | "read_file" | "manual_edit" | "verify";
-    description: string;
-    tool?: string;
-    file?: string;
-    command?: string;
-    applied: false;
-  }>;
-  warnings: string[];
-  nextVerifyCommand: string;
-}
-
-export interface BuildAgentApplyOptions {
-  from?: string;
-  dryRun?: boolean;
-}
+export interface AgentPlanRisk {
+  level: "low" | "medium" | "high";
+  reason: string;
+}
+
+export type AgentOperationKind =
+  | "file.create"
+  | "file.patch-with-hash"
+  | "route.create"
+  | "api.create"
+  | "contract.update"
+  | "guard.safe-fix"
+  | "generated.refresh";
+
+export interface AgentPermission {
+  kind: "read" | "write";
+  path: string;
+}
+
+export interface AgentOperationPrecondition {
+  exists: boolean;
+  contentHash?: string;
+}
+
+export interface AgentOperationEffect {
+  type: "write";
+  content: string;
+  encoding: "utf8";
+}
+
+export interface AgentRollbackDescriptor {
+  strategy: "restore-snapshot";
+}
+
+export interface AgentOperation {
+  id: string;
+  kind: AgentOperationKind;
+  target: string;
+  precondition: AgentOperationPrecondition;
+  effect: AgentOperationEffect;
+  rollback: AgentRollbackDescriptor;
+}
+
+export interface AgentOperationInput {
+  id?: string;
+  kind: AgentOperationKind;
+  target: string;
+  effect: AgentOperationEffect;
+}
+
+export type AgentRollbackPolicy = "automatic" | "manual";
+
+export interface AgentPlan {
+  schemaVersion: 1;
+  framework: "mandu";
+  generatedAt: string;
+  id: string;
+  intent: string;
+  baseRevision: string | null;
+  idempotencyKey: string | null;
+  scope: string[];
+  permissions: AgentPermission[];
+  operations: AgentOperation[];
+  rollbackPolicy: AgentRollbackPolicy;
+  domains: AgentDomain[];
+  filesToRead: string[];
+  filesToCreate: string[];
+  filesToModify: string[];
+  mcpTools: string[];
+  risks: AgentPlanRisk[];
+  verification: AgentVerificationStep[];
+  notes: string[];
+  executable: boolean;
+}
+
+export interface BuildAgentPlanOptions {
+  intent: string;
+}
+
+export interface BuildExecutableAgentPlanOptions {
+  intent: string;
+  operations: AgentOperationInput[];
+  idempotencyKey?: string;
+  rollbackPolicy?: AgentRollbackPolicy;
+  verification?: AgentVerificationStep[];
+}
+
+export type AgentOperationStatus =
+  | "planned"
+  | "applied"
+  | "failed"
+  | "rolled_back"
+  | "skipped";
+
+export interface AgentOperationReceipt {
+  operationId: string;
+  kind: AgentOperationKind;
+  target: string;
+  status: AgentOperationStatus;
+  beforeHash: string | null;
+  afterHash: string | null;
+  error?: string;
+}
+
+export interface AgentVerificationResult {
+  id: string;
+  kind: "agent.verify";
+  required: boolean;
+  ok: boolean;
+  checks: AgentVerifyCheck[];
+  diagnostics: AgentDiagnostic[];
+}
+
+export interface AgentRollbackReceipt {
+  id: string | null;
+  snapshotPath: string | null;
+  policy: AgentRollbackPolicy;
+  attempted: boolean;
+  ok: boolean | null;
+  restoredFiles: string[];
+  conflicts: string[];
+}
+
+export type AgentApplyStatus =
+  | "preview"
+  | "applied"
+  | "blocked"
+  | "failed"
+  | "rolled_back";
+
+export interface AgentApplyAction {
+  kind: "mcp_tool" | "read_file" | "manual_edit" | "verify" | AgentOperationKind;
+  description: string;
+  tool?: string;
+  file?: string;
+  command?: string;
+  applied: boolean;
+}
+
+export interface ApplyReceipt {
+  schemaVersion: 1;
+  framework: "mandu";
+  generatedAt: string;
+  receiptId: string;
+  planId: string | null;
+  idempotencyKey: string | null;
+  baseRevision: string | null;
+  startedAt: string;
+  completedAt: string;
+  ok: boolean;
+  status: AgentApplyStatus;
+  dryRun: boolean;
+  replayed: boolean;
+  sourcePlan: string;
+  intent: string;
+  domains: AgentDomain[];
+  actions: AgentApplyAction[];
+  operations: AgentOperationReceipt[];
+  touchedFiles: string[];
+  changedFiles: string[];
+  verification: AgentVerificationResult[];
+  rollback: AgentRollbackReceipt;
+  warnings: string[];
+  nextVerifyCommand: string;
+}
+
+export type AgentApplyReport = ApplyReceipt;
+
+export interface BuildAgentApplyOptions {
+  from?: string;
+  dryRun?: boolean;
+  /** Test-only deterministic failure injection; adapters never expose this option. */
+  failureAfterOperations?: number;
+}
+
+export interface AgentRollbackResult {
+  rollbackId: string;
+  ok: boolean;
+  restoredFiles: string[];
+  conflicts: string[];
+}
 
 export type AgentSyncTarget = "codex" | "claude" | "gemini" | "all";
 

package/src/agent/verify.ts

@@ -245,17 +245,17 @@ function commandSuggestions(
   if (files.some((file) => file.startsWith("packages/mcp/"))) {
     add("bun test packages/mcp/tests", "MCP package files changed.", true);
   }
-  if (files.some((file) => file.includes("package.json") || file === "bun.lock")) {
-    add("bun run check:publish", "Package metadata or lockfile changed.", true);
-  }
-  if (files.some(isHydrationSensitiveEdit)) {
-    add("bun run test:hydration-boundary", "Hydration-sensitive runtime/router/bundler files changed.", true);
-    add("bun run test:hydration-e2e", "Hydration-sensitive changes need browser-level validation.", true);
-    add("bun run check:publish", "Pre-publish hydration gates should pass before release.", true);
-  }
-  if (changedFileReasons.some((entry) => entry.internalApi)) {
-    add("bun run check:public-api && bun run check:target-boundaries", "Internal framework boundaries changed.", true);
-  }
+  if (files.some((file) => file.includes("package.json") || file === "bun.lock")) {
+    add("bun run check:publish", "Package metadata or lockfile changed.", true);
+  }
+  if (files.some(isHydrationSensitiveEdit)) {
+    add("bun run test:hydration-boundary", "Hydration-sensitive runtime/router/bundler files changed.", true);
+    add("bun run test:hydration-e2e", "Hydration-sensitive changes need browser-level validation.", true);
+    add("bun run check:publish", "Pre-publish hydration gates should pass before release.", true);
+  }
+  if (changedFileReasons.some((entry) => entry.internalApi)) {
+    add("bun run check:public-api && bun run check:target-boundaries", "Internal framework boundaries changed.", true);
+  }
   if (diagnostics.some((d) => d.severity === "error" || d.severity === "fatal")) {
     add("mandu agent repair --from .mandu/agent-verify.json", "Verification produced repairable diagnostics.", false);
   }
@@ -263,40 +263,40 @@ function commandSuggestions(
   return out;
 }
 
-function isInternalApiEdit(file: string): boolean {
-  return [
-    "packages/core/src/runtime/",
-    "packages/core/src/bundler/",
+function isInternalApiEdit(file: string): boolean {
+  return [
+    "packages/core/src/runtime/",
+    "packages/core/src/bundler/",
     "packages/core/src/server/",
     "packages/core/src/guard/",
     "packages/core/src/spec/",
     "packages/core/src/router/",
     "packages/core/src/internal/",
-  ].some((prefix) => file.startsWith(prefix));
-}
-
-function isHydrationSensitiveEdit(file: string): boolean {
-  return [
-    "packages/core/src/runtime/page-render-response.ts",
-    "packages/core/src/runtime/server.ts",
-    "packages/core/src/runtime/ssr.ts",
-    "packages/core/src/runtime/streaming-ssr.ts",
-    "packages/core/src/internal/client-boundary.ts",
-    "packages/core/src/bundler/build.ts",
-    "packages/core/src/bundler/client-boundary-transform.ts",
-    "packages/core/src/router/client-entry.ts",
-    "packages/core/src/router/fs-routes.ts",
-    "packages/core/src/router/fs-scanner.ts",
-    "packages/core/src/client/serialize.ts",
-    "packages/core/src/client/props-serialization.ts",
-    "packages/core/src/client/runtime-entry.ts",
-  ].includes(file);
-}
-
-function changedFileReason(file: string): AgentChangedFileReason {
-  const normalized = normalizePath(file) ?? file;
-  const reasons: string[] = [];
-  const recommendedChecks: string[] = [];
+  ].some((prefix) => file.startsWith(prefix));
+}
+
+function isHydrationSensitiveEdit(file: string): boolean {
+  return [
+    "packages/core/src/runtime/page-render-response.ts",
+    "packages/core/src/runtime/server.ts",
+    "packages/core/src/runtime/ssr.ts",
+    "packages/core/src/runtime/streaming-ssr.ts",
+    "packages/core/src/internal/client-boundary.ts",
+    "packages/core/src/bundler/build.ts",
+    "packages/core/src/bundler/client-boundary-transform.ts",
+    "packages/core/src/router/client-entry.ts",
+    "packages/core/src/router/fs-routes.ts",
+    "packages/core/src/router/fs-scanner.ts",
+    "packages/core/src/client/serialize.ts",
+    "packages/core/src/client/props-serialization.ts",
+    "packages/core/src/client/runtime-entry.ts",
+  ].includes(file);
+}
+
+function changedFileReason(file: string): AgentChangedFileReason {
+  const normalized = normalizePath(file) ?? file;
+  const reasons: string[] = [];
+  const recommendedChecks: string[] = [];
 
   if (/\.(ts|tsx|js|jsx)$/.test(normalized)) {
     reasons.push("Source code changed.");
@@ -318,21 +318,21 @@ function changedFileReason(file: string): AgentChangedFileReason {
     reasons.push("User-facing documentation changed.");
     recommendedChecks.push("bun run check:docs-drift");
   }
-  if (normalized === "package.json" || normalized === "bun.lock" || normalized.endsWith("/package.json")) {
-    reasons.push("Package metadata or dependency graph changed.");
-    recommendedChecks.push("bun run check:publish");
-  }
-  if (isHydrationSensitiveEdit(normalized)) {
-    reasons.push("Hydration/runtime/client boundary behavior changed.");
-    recommendedChecks.push(
-      "bun run test:hydration-boundary",
-      "bun run test:hydration-e2e",
-      "bun run check:publish",
-    );
-  }
-
-  const internalApi = isInternalApiEdit(normalized);
-  if (internalApi) {
+  if (normalized === "package.json" || normalized === "bun.lock" || normalized.endsWith("/package.json")) {
+    reasons.push("Package metadata or dependency graph changed.");
+    recommendedChecks.push("bun run check:publish");
+  }
+  if (isHydrationSensitiveEdit(normalized)) {
+    reasons.push("Hydration/runtime/client boundary behavior changed.");
+    recommendedChecks.push(
+      "bun run test:hydration-boundary",
+      "bun run test:hydration-e2e",
+      "bun run check:publish",
+    );
+  }
+
+  const internalApi = isInternalApiEdit(normalized);
+  if (internalApi) {
     reasons.push("Framework internal API changed.");
     recommendedChecks.push("bun run check:public-api && bun run check:target-boundaries");
   }

package/src/auth/__tests__/login.test.ts

@@ -25,7 +25,7 @@ import {
 } from "../login";
 import { session } from "../../middleware/session";
 import type {
-  Session} from "../../filling/session";
+  Session} from "../../filling/session";
 import {
   createCookieSessionStorage,
   type SessionStorage,

package/src/auth/__tests__/password.test.ts

@@ -18,11 +18,11 @@ const BCRYPT_PREFIX_RE = /^\$2[aby]\$/;
 // Minimum argon2 cost params — keep tests fast without changing behavior.
 const FAST_ARGON2 = {
   algorithm: "argon2id",
-  memoryCost: 4,
+  memoryCost: 8,
   timeCost: 2,
 } as const;
 
-describe("@mandujs/core/auth/password — hashPassword", () => {
+describe("@mandujs/core/compat/auth/password — hashPassword", () => {
   it("produces an argon2id hash by default", async () => {
     const h = await hashPassword("hunter2", FAST_ARGON2);
     expect(h.startsWith(ARGON2ID_PREFIX)).toBe(true);
@@ -67,14 +67,24 @@ describe("@mandujs/core/auth/password — hashPassword", () => {
     // We assert the timeCost is preserved end-to-end.
     const h = await hashPassword("same-password", {
       algorithm: "argon2id",
-      memoryCost: 4,
+      memoryCost: 8,
       timeCost: 3,
     });
-    expect(h).toMatch(/\$argon2id\$v=\d+\$m=4,t=3,p=\d+\$/);
+    expect(h).toMatch(/\$argon2id\$v=\d+\$m=8,t=3,p=\d+\$/);
+  });
+
+  it("rejects Argon2 memoryCost values below Bun 1.4's minimum", async () => {
+    await expect(
+      hashPassword("same-password", {
+        algorithm: "argon2id",
+        memoryCost: 4,
+        timeCost: 2,
+      }),
+    ).rejects.toThrow(/memoryCost must be at least 8/);
   });
 });
 
-describe("@mandujs/core/auth/password — verifyPassword", () => {
+describe("@mandujs/core/compat/auth/password — verifyPassword", () => {
   it("returns true for a matching argon2id roundtrip", async () => {
     const h = await hashPassword("correct-horse-battery-staple", FAST_ARGON2);
     const ok = await verifyPassword("correct-horse-battery-staple", h);

package/src/auth/__tests__/reset.test.ts

@@ -34,7 +34,7 @@ const SECRET = "reset-flow-test-secret-32-bytes-or-more!!";
 const URL_TEMPLATE = "https://app.example.com/reset?token={token}";
 const FROM = "noreply@example.com";
 const ARGON2ID_PREFIX = "$argon2id$";
-const FAST_ARGON2 = { algorithm: "argon2id", memoryCost: 4, timeCost: 2 } as const;
+const FAST_ARGON2 = { algorithm: "argon2id", memoryCost: 8, timeCost: 2 } as const;
 
 interface Fixture {
   store: AuthTokenStore;
@@ -54,7 +54,7 @@ function makeFixture(): Fixture {
   };
 }
 
-describeIfBun("@mandujs/core/auth/reset — createPasswordReset", () => {
+describeIfBun("@mandujs/core/compat/auth/reset — createPasswordReset", () => {
   let fx: Fixture;
 
   beforeEach(() => {