@msn-control/liftoff 0.10.3 → 0.11.1

package/assets/governance/single-maintainer-gitflow/assessment-controls.json

@@ -0,0 +1,39 @@
+{
+  "schemaVersion": 1,
+  "profile": "single-maintainer-gitflow",
+  "policyVersion": "6",
+  "policyDigest": "9444e7339ea7747e49b8c11bada6ebc2f52e3e53cee7e1e8fd593353ce1ab149",
+  "families": ["azure", "deployment", "documentation", "dora", "environments", "evidence", "gitflow", "governance", "health", "identity", "monitoring", "promotion", "release", "retention", "rollback", "runner", "security"],
+  "controls": [
+    {"id":"identity.activation","title":"Recorded activation identity","policySection":"Liftoff activation protocol","severity":"warning","applicability":"always","evaluator":"identity","proofLayers":["recorded"],"expected":"installed-activation-identity","phaseIds":[],"supported":true,"exceptionAllowed":false,"ownership":"managed-core","recommendation":"Inspect the found and installed identities. Use a release with an explicit compatibility mapping; assessment cannot migrate state."},
+    {"id":"identity.managed-core","title":"Managed governance file drift","policySection":"Liftoff activation protocol","severity":"warning","applicability":"always","evaluator":"managed-core","proofLayers":["recorded","declared"],"expected":"installed-managed-artifacts","phaseIds":[],"supported":true,"exceptionAllowed":false,"ownership":"managed-core","recommendation":"Run liftoff update --check and review exact managed-core drift. Force cannot acquire unowned files or bypass compatibility."},
+    {"id":"gitflow.default-branch","title":"Default integration branch","policySection":"Phase 1 - Branching model","severity":"error","applicability":"always","evaluator":"default-branch","proofLayers":["live"],"expected":"develop","phaseIds":["phase-0-complete"],"supported":true,"exceptionAllowed":false,"ownership":"remote","recommendation":"Review the repository default branch through a separately approved governance change."},
+    {"id":"gitflow.protected-refs","title":"Protected GitFlow refs","policySection":"Phase 5 - Governance as code","severity":"error","applicability":"always","evaluator":"protected-refs","proofLayers":["declared","live"],"expected":true,"phaseIds":["rulesets-applied","live-readback"],"supported":true,"exceptionAllowed":false,"ownership":"remote","recommendation":"Review repository rulesets for develop, main, release/** and hotfix/** with deletion and force-push protection, strict checks, and no bypass actors."},
+    {"id":"governance.single-maintainer","title":"Single-maintainer pull request rules","policySection":"Fixed context - Single-maintainer repositories","severity":"error","applicability":"always","evaluator":"single-maintainer","proofLayers":["declared","live"],"expected":true,"phaseIds":["rulesets-applied"],"supported":true,"exceptionAllowed":false,"ownership":"remote","recommendation":"Keep required approving reviews at zero, code-owner review false, and last-push approval false. Automated checks remain the gate."},
+    {"id":"governance.no-codeowners","title":"No CODEOWNERS approval dependency","policySection":"Fixed context - Do not require human approval","severity":"warning","applicability":"always","evaluator":"no-codeowners","proofLayers":["declared"],"expected":false,"phaseIds":["workflow-source-ready"],"supported":true,"exceptionAllowed":false,"ownership":"project-owned","recommendation":"Review CODEOWNERS usage without introducing another human merge or deployment gate."},
+    {"id":"release.tag-controls","title":"Separate release tag creation and immutability rules","policySection":"Phase 5 - Governance as code","severity":"error","applicability":"always","evaluator":"tag-controls","proofLayers":["declared","live"],"expected":true,"phaseIds":["rulesets-applied"],"supported":true,"exceptionAllowed":false,"ownership":"remote","recommendation":"Review separate v* creation and immutable-tag rules; only the verified GitHub Actions application may bypass creation."},
+    {"id":"governance.required-contexts","title":"Observed exact required check contexts","policySection":"Phase 5 - Fail-closed sequencing","severity":"error","applicability":"always","evaluator":"required-contexts","proofLayers":["declared","live"],"expected":true,"phaseIds":["green-red-proof","rulesets-applied"],"supported":true,"exceptionAllowed":false,"ownership":"remote","recommendation":"Bind required check names and application identities to observed runs on the exact assessed commit. Review missing or skipped contexts before ruleset changes."},
+    {"id":"security.push-protection","title":"GitHub Secret Protection","policySection":"Phase 4 - Security pipeline","severity":"error","applicability":"always","evaluator":"push-protection","proofLayers":["live"],"expected":true,"phaseIds":["green-red-proof"],"supported":true,"exceptionAllowed":false,"ownership":"remote","recommendation":"Review GitHub secret scanning and push-protection settings using existing licensed capability; do not substitute duplicate scanners."},
+    {"id":"security.workflow-permissions","title":"Explicit bounded workflow permissions","policySection":"Fixed context - Automation identity","severity":"warning","applicability":"always","evaluator":"workflow-permissions","proofLayers":["declared"],"expected":true,"phaseIds":["workflow-source-ready"],"supported":true,"exceptionAllowed":false,"ownership":"project-owned","recommendation":"Review explicit least-privilege workflow and job permissions; broad write-all permissions are not a safe default."},
+    {"id":"security.action-pinning","title":"Immutable action references","policySection":"Phase 4 - SLSA L3 generator exception","severity":"warning","applicability":"always","evaluator":"action-pinning","proofLayers":["declared"],"expected":true,"phaseIds":["workflow-source-ready"],"supported":true,"exceptionAllowed":true,"ownership":"project-owned","recommendation":"Review immutable action references. The only permitted action-reference exception is the exact official SLSA generator with scoped, expiring approval."},
+    {"id":"security.fail-open-flags","title":"Required-job fail-open configuration","policySection":"Phase 5 - No required check may fail open","severity":"error","applicability":"always","evaluator":"fail-open-flags","proofLayers":["declared"],"expected":false,"phaseIds":["workflow-source-ready","green-red-proof"],"supported":true,"exceptionAllowed":false,"ownership":"project-owned","recommendation":"Review continue-on-error and unresolved conditions on required jobs. Static inspection does not establish full script failure semantics."},
+    {"id":"security.pipeline","title":"Declared security stage and tool inventory","policySection":"Phase 4 - Security pipeline","severity":"warning","applicability":"always","evaluator":"pipeline","proofLayers":["declared","live"],"expected":true,"phaseIds":["workflow-source-ready","green-red-proof"],"supported":true,"exceptionAllowed":false,"ownership":"project-owned","recommendation":"Review the canonical GitHub, Checkov, Trivy, report-only Grype, ZAP, attestation and Scorecard roles. Unresolved reusable workflows or scripts need separate evidence."},
+    {"id":"environments.configuration","title":"Applicable deployment environments and review gates","policySection":"Phase 3 - Promotion","severity":"error","applicability":"api","evaluator":"environments","proofLayers":["live"],"expected":"project-environments-without-reviewers","phaseIds":["staging-qualified","production-rehearsed"],"supported":true,"exceptionAllowed":false,"ownership":"remote","recommendation":"Review the project's declared environments and GitHub environment restrictions without human reviewer gates."},
+    {"id":"runner.private-assignment","title":"Repository-bound private runner assignment","policySection":"Private Staging runner provisioning contract","severity":"error","applicability":"private-dast","evaluator":"runner","proofLayers":["recorded","live"],"expected":true,"phaseIds":["runner-ready"],"supported":true,"exceptionAllowed":false,"ownership":"remote","recommendation":"Review the exact hosted-runner, group, network, labels and selected-repository bindings. Assessment does not create or broaden assignments."},
+    {"id":"azure.providers","title":"Required provider registration states","policySection":"Private Staging runner provisioning contract","severity":"error","applicability":"api","evaluator":"providers","proofLayers":["live"],"expected":"Registered","phaseIds":["provider-ready"],"supported":true,"exceptionAllowed":false,"ownership":"remote","recommendation":"Review only the namespaces needed by explicitly bound resources. Provider registration requires a separately approved execution plan."},
+    {"id":"azure.storage-redundancy","title":"Bound storage redundancy","policySection":"Pre-answered platform defaults","severity":"error","applicability":"api","evaluator":"storage","proofLayers":["live"],"expected":{"state":"ZRS in every environment","application":{"dev":"LRS","staging":"ZRS","prod":"ZRS"}},"phaseIds":["remote-ready","application-foundation"],"supported":true,"exceptionAllowed":false,"ownership":"remote","recommendation":"Compare the explicitly bound storage role and environment before planning redundancy changes; never provision an unused service."},
+    {"id":"azure.network-egress","title":"Explicit private runner egress","policySection":"Private Staging runner provisioning contract - explicit outbound mode","severity":"error","applicability":"private-dast","evaluator":"network","proofLayers":["recorded","live"],"expected":true,"phaseIds":["bootstrap-local","runner-ready"],"supported":true,"exceptionAllowed":false,"ownership":"remote","recommendation":"Review explicit outbound access and mutually exclusive NAT/Firewall routing using validated Staging bindings; never share another repository's firewall."},
+    {"id":"evidence.governance","title":"Current authoritative governance evidence","policySection":"Liftoff activation protocol","severity":"warning","applicability":"always","evaluator":"evidence","proofLayers":["evidence"],"expected":true,"phaseIds":[],"supported":true,"exceptionAllowed":false,"ownership":"project-owned","recommendation":"Refresh missing or stale proof through supported setup operations after reviewing blockers; reports and task checkboxes are not phase evidence."},
+    {"id":"documentation.inventory","title":"Required operational and security documentation","policySection":"Phase 6 - Documentation","severity":"warning","applicability":"always","evaluator":"documentation","proofLayers":["declared"],"expected":true,"phaseIds":["workflow-source-ready"],"supported":true,"exceptionAllowed":false,"ownership":"project-owned","recommendation":"Review missing governance, scanning, alerting, health, audit-evidence, acceptable-use and rollback runbook documents in a separate project change."},
+    {"id":"release.provenance","title":"Release version and verified attestation binding","policySection":"Phase 2 - Release versioning on main","severity":"warning","applicability":"always","evaluator":"unsupported","proofLayers":["evidence"],"expected":"verified version, candidate SHA, deployed digest and signer binding","phaseIds":["production-rehearsed"],"supported":false,"exceptionAllowed":false,"ownership":"project-owned","recommendation":"Supply independently verifiable release and attestation evidence; file or asset presence alone does not verify provenance."},
+    {"id":"promotion.identical-artifact","title":"Build-once identical artifact promotion","policySection":"Phase 3 - Promotion","severity":"warning","applicability":"always","evaluator":"unsupported","proofLayers":["evidence"],"expected":"same qualified digest across environments","phaseIds":["staging-qualified","production-rehearsed"],"supported":false,"exceptionAllowed":false,"ownership":"project-owned","recommendation":"Verify immutable candidate and deployed digest records. Assessment does not build, scan, dispatch, or deploy artifacts."},
+    {"id":"deployment.blue-green-canary","title":"Blue-green and canary execution proof","policySection":"Deployment strategy - blue-green mechanism, canary exposure","severity":"warning","applicability":"api","evaluator":"unsupported","proofLayers":["evidence"],"expected":"validated rollout observations","phaseIds":["production-rehearsed"],"supported":false,"exceptionAllowed":false,"ownership":"project-owned","recommendation":"Review real rollout and traffic evidence; declarative files alone do not prove behavior."},
+    {"id":"rollback.rehearsal","title":"Ungated rollback rehearsal","policySection":"Roll back first, debug later","severity":"warning","applicability":"always","evaluator":"unsupported","proofLayers":["evidence"],"expected":"dated successful rollback by prior digest","phaseIds":["production-rehearsed"],"supported":false,"exceptionAllowed":false,"ownership":"project-owned","recommendation":"Provide rollback rehearsal evidence; assessment never triggers a rollback or adds a reviewer gate."},
+    {"id":"monitoring.alert-delivery","title":"Runtime monitoring and end-to-end alerts","policySection":"Runtime monitoring and alerting","severity":"warning","applicability":"always","evaluator":"unsupported","proofLayers":["evidence"],"expected":"observed health signals and alert delivery","phaseIds":["production-rehearsed"],"supported":false,"exceptionAllowed":false,"ownership":"project-owned","recommendation":"Supply verified alert delivery and monitoring evidence without exposing webhook or credential values."},
+    {"id":"health.deep-checks","title":"Deep dependency health and recovery order","policySection":"Service health model","severity":"warning","applicability":"api","evaluator":"unsupported","proofLayers":["evidence"],"expected":"validated component and dependency health","phaseIds":["application-foundation"],"supported":false,"exceptionAllowed":false,"ownership":"project-owned","recommendation":"Review observed deep health and dependency recovery evidence; do not infer it from endpoint names."},
+    {"id":"dora.measurements","title":"Delivery performance measurements","policySection":"Delivery performance - DORA four keys","severity":"info","applicability":"always","evaluator":"unsupported","proofLayers":["evidence"],"expected":"source-bound delivery metrics","phaseIds":[],"supported":false,"exceptionAllowed":false,"ownership":"project-owned","recommendation":"Review measured delivery outcomes; no DORA measurement adapter is available in this assessment version."},
+    {"id":"runner.private-reachability","title":"Private DNS and Staging reachability proof","policySection":"Private Staging runner provisioning contract - Prove isolation and the private path","severity":"warning","applicability":"private-dast","evaluator":"unsupported","proofLayers":["evidence"],"expected":"live private path proof from the assigned runner","phaseIds":["private-backend-proof","staging-qualified"],"supported":false,"exceptionAllowed":false,"ownership":"project-owned","recommendation":"Provide current runner-origin private reachability evidence; assessment does not schedule DAST or infer reachability from a VNet."},
+    {"id":"retention.bootstrap-disposal","title":"Bootstrap state custody and day-30 disposal","policySection":"Pre-answered platform defaults","severity":"warning","applicability":"state-path","evaluator":"unsupported","proofLayers":["evidence"],"expected":"validated encrypted custody and disposal evidence","phaseIds":["bootstrap-state-disposed"],"supported":false,"exceptionAllowed":false,"ownership":"project-owned","recommendation":"Review non-secret retention and deletion evidence. Assessment never reads state payloads or encryption keys."},
+    {"id":"security.fail-closed-execution","title":"Deliberate negative required-check proof","policySection":"Phase 5 - Prove each check fails","severity":"warning","applicability":"always","evaluator":"unsupported","proofLayers":["evidence"],"expected":"green and deliberate red proof for exact required contexts","phaseIds":["green-red-proof"],"supported":false,"exceptionAllowed":false,"ownership":"project-owned","recommendation":"Use existing authoritative negative-test evidence; assessment must not plant violations or trigger validation workflows."}
+  ]
+}

package/assets/supported-stack.json

@@ -84,7 +84,9 @@
         "dependencies": {
           "@inquirer/prompts": "^8.6.0",
           "cross-spawn": "^7.0.6",
-          "picocolors": "^1.1.1"
+          "picocolors": "^1.1.1",
+          "smol-toml": "1.8.0",
+          "yaml": "^2.9.0"
         },
         "devDependencies": {
           "@types/cross-spawn": "^6.0.6",
@@ -98,7 +100,9 @@
         "dependencies": {
           "@inquirer/prompts": "8.7.0",
           "cross-spawn": "7.0.6",
-          "picocolors": "1.1.1"
+          "picocolors": "1.1.1",
+          "smol-toml": "1.8.0",
+          "yaml": "2.9.0"
         },
         "devDependencies": {
           "@types/cross-spawn": "6.0.6",
@@ -231,130 +235,6 @@
         },
         "devDependencies": {}
       }
-    },
-    "power-apps-code-app": {
-      "manifestPathParts": [
-        "assets",
-        "power-apps-code-app",
-        "3438c352483e40982f6c5c0fc36fd71f8e7adbbb",
-        "starter",
-        "package.json"
-      ],
-      "lockPathParts": [
-        "assets",
-        "power-apps-code-app",
-        "3438c352483e40982f6c5c0fc36fd71f8e7adbbb",
-        "starter",
-        "package-lock.json"
-      ],
-      "freshnessPolicy": "declared-range",
-      "requirements": {
-        "dependencies": {
-          "@microsoft/power-apps": "^1.2.5",
-          "@radix-ui/react-checkbox": "^1.3.3",
-          "@radix-ui/react-dialog": "^1.1.15",
-          "@radix-ui/react-dropdown-menu": "^2.1.16",
-          "@radix-ui/react-label": "^2.1.7",
-          "@radix-ui/react-popover": "^1.1.15",
-          "@radix-ui/react-progress": "^1.1.7",
-          "@radix-ui/react-select": "^2.2.6",
-          "@radix-ui/react-separator": "^1.1.7",
-          "@radix-ui/react-slot": "^1.2.3",
-          "@radix-ui/react-tabs": "^1.1.13",
-          "@radix-ui/react-tooltip": "^1.2.8",
-          "@tailwindcss/vite": "^4.1.16",
-          "@tanstack/react-query": "^5.90.5",
-          "@tanstack/react-table": "^8.21.3",
-          "class-variance-authority": "^0.7.1",
-          "clsx": "^2.1.1",
-          "cmdk": "^1.1.1",
-          "date-fns": "^4.1.0",
-          "lucide-react": "^0.546.0",
-          "react": "^19.1.1",
-          "react-day-picker": "^9.11.1",
-          "react-dom": "^19.1.1",
-          "react-router-dom": "^7.9.4",
-          "recharts": "^2.15.4",
-          "sonner": "^2.0.7",
-          "tailwind-merge": "^3.3.1",
-          "tailwindcss": "^4.1.16",
-          "zustand": "^5.0.10"
-        },
-        "devDependencies": {
-          "@eslint/js": "^9.36.0",
-          "@microsoft/power-apps-vite": "^1.0.2",
-          "@types/node": "^24.6.0",
-          "@types/react": "^19.1.16",
-          "@types/react-dom": "^19.1.9",
-          "@vitejs/plugin-react": "^5.0.4",
-          "eslint": "^9.36.0",
-          "eslint-plugin-react-hooks": "^5.2.0",
-          "eslint-plugin-react-refresh": "^0.4.22",
-          "globals": "^16.4.0",
-          "picocolors": "^1.1.1",
-          "tw-animate-css": "^1.4.0",
-          "typescript": "~5.9.3",
-          "typescript-eslint": "^8.45.0",
-          "vite": "^7.1.7"
-        }
-      },
-      "resolved": {
-        "dependencies": {
-          "@microsoft/power-apps": "1.2.7",
-          "@radix-ui/react-checkbox": "1.3.11",
-          "@radix-ui/react-dialog": "1.1.23",
-          "@radix-ui/react-dropdown-menu": "2.1.24",
-          "@radix-ui/react-label": "2.1.15",
-          "@radix-ui/react-popover": "1.1.23",
-          "@radix-ui/react-progress": "1.1.16",
-          "@radix-ui/react-select": "2.3.7",
-          "@radix-ui/react-separator": "1.1.15",
-          "@radix-ui/react-slot": "1.3.3",
-          "@radix-ui/react-tabs": "1.1.21",
-          "@radix-ui/react-tooltip": "1.2.16",
-          "@tailwindcss/vite": "4.3.3",
-          "@tanstack/react-query": "5.102.2",
-          "@tanstack/react-table": "8.21.3",
-          "class-variance-authority": "0.7.1",
-          "clsx": "2.1.1",
-          "cmdk": "1.1.1",
-          "date-fns": "4.4.0",
-          "lucide-react": "0.546.0",
-          "react": "19.2.8",
-          "react-day-picker": "9.14.0",
-          "react-dom": "19.2.8",
-          "react-router-dom": "7.18.2",
-          "recharts": "2.15.4",
-          "sonner": "2.0.8",
-          "tailwind-merge": "3.6.0",
-          "tailwindcss": "4.3.3",
-          "zustand": "5.0.15"
-        },
-        "devDependencies": {
-          "@eslint/js": "9.39.5",
-          "@microsoft/power-apps-vite": "1.0.2",
-          "@types/node": "24.13.3",
-          "@types/react": "19.2.18",
-          "@types/react-dom": "19.2.5",
-          "@vitejs/plugin-react": "5.2.0",
-          "eslint": "9.39.5",
-          "eslint-plugin-react-hooks": "5.2.0",
-          "eslint-plugin-react-refresh": "0.4.26",
-          "globals": "16.5.0",
-          "picocolors": "1.1.1",
-          "tw-animate-css": "1.4.0",
-          "typescript": "5.9.3",
-          "typescript-eslint": "8.67.0",
-          "vite": "7.3.6"
-        }
-      },
-      "selectionExceptions": {
-        "@microsoft/power-apps": {
-          "selectedVersion": "1.2.7",
-          "reviewedCandidateVersion": "1.3.0",
-          "reason": "Power Apps SDK 1.2.12 and newer remove the project-local power-apps CLI required by the current Liftoff workload contract; adopting the new global pa CLI requires a separate reviewed workload migration."
-        }
-      }
     }
   },
   "pythonProjects": {
@@ -696,16 +576,5 @@
       "source": "https://hub.docker.com/_/node"
     }
   },
-  "upstreams": {
-    "power-apps-code-app": {
-      "repository": "https://github.com/microsoft/PowerAppsCodeApps",
-      "path": "templates/starter",
-      "commit": "3438c352483e40982f6c5c0fc36fd71f8e7adbbb",
-      "compatibleSourceCommits": [
-        "3438c352483e40982f6c5c0fc36fd71f8e7adbbb",
-        "22e5c0bc0ef7ba516d9ad6281d6b0c4eb114df55"
-      ],
-      "source": "https://github.com/microsoft/PowerAppsCodeApps/commit/3438c352483e40982f6c5c0fc36fd71f8e7adbbb"
-    }
-  }
+  "upstreams": {}
 }

package/dist/adapters/azure/governance-assessment.d.ts

@@ -0,0 +1,2 @@
+import type { ExternalCommand } from '../../domain/project/contracts.js';
+export declare function azureAssessmentGetCommand(url: string): ExternalCommand;

package/dist/adapters/azure/governance-assessment.js

@@ -0,0 +1,21 @@
+export function azureAssessmentGetCommand(url) {
+    const parsed = new URL(url);
+    if (parsed.origin !== 'https://management.azure.com' ||
+        !parsed.pathname.startsWith('/subscriptions/') ||
+        parsed.username ||
+        parsed.password ||
+        parsed.hash) {
+        throw new Error('Azure assessment URL must use an explicitly scoped ARM subscription path.');
+    }
+    return {
+        executable: 'az',
+        args: [
+            'rest',
+            '--method', 'GET',
+            '--url', parsed.href,
+            '--output', 'json',
+            '--only-show-errors'
+        ]
+    };
+}
+//# sourceMappingURL=governance-assessment.js.map

package/dist/adapters/azure/governance-assessment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-assessment.js","sourceRoot":"","sources":["../../../src/adapters/azure/governance-assessment.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,yBAAyB,CAAC,GAAW;IACnD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IACE,MAAM,CAAC,MAAM,KAAK,8BAA8B;QAChD,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAC9C,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,IAAI,EACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO;QACL,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE;YACJ,MAAM;YACN,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,MAAM,CAAC,IAAI;YACpB,UAAU,EAAE,MAAM;YAClB,oBAAoB;SACrB;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/filesystem/atomic-write.d.ts

@@ -0,0 +1,2 @@
+export declare function replaceFileAtomically(targetPath: string, content: string | Buffer): Promise<void>;
+export declare function createFileAtomically(targetPath: string, content: string | Buffer, mode: number, onCreated?: () => void): Promise<void>;

package/dist/adapters/filesystem/atomic-write.js

@@ -0,0 +1,74 @@
+import { randomUUID } from 'node:crypto';
+import { link, lstat, mkdir, open, rename, unlink } from 'node:fs/promises';
+import path from 'node:path';
+function errorCode(error) {
+    return typeof error === 'object' && error !== null && 'code' in error ? error.code : undefined;
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+export async function replaceFileAtomically(targetPath, content) {
+    let mode;
+    try {
+        const existing = await lstat(targetPath);
+        if (!existing.isFile())
+            throw new Error('Atomic replacement requires a regular-file destination.');
+        mode = existing.mode & 0o7777;
+    }
+    catch (error) {
+        if (errorCode(error) !== 'ENOENT')
+            throw error;
+    }
+    return writeAtomicFile(targetPath, content, mode, (temporary) => rename(temporary, targetPath), true);
+}
+export async function createFileAtomically(targetPath, content, mode, onCreated) {
+    return writeAtomicFile(targetPath, content, mode, async (temporary) => {
+        await link(temporary, targetPath);
+        // Track the destination even if the subsequent temporary-file cleanup fails.
+        onCreated?.();
+        await unlink(temporary);
+    });
+}
+async function writeAtomicFile(targetPath, content, mode, commit, createParents = false) {
+    const temporaryPath = path.join(path.dirname(targetPath), `.${path.basename(targetPath)}.liftoff-${process.pid}-${randomUUID()}.tmp`);
+    let handle;
+    let ownsTemporaryPath = false;
+    try {
+        if (createParents)
+            await mkdir(path.dirname(targetPath), { recursive: true });
+        handle = await open(temporaryPath, 'wx', mode);
+        ownsTemporaryPath = true;
+        if (mode !== undefined)
+            await handle.chmod(mode);
+        await handle.writeFile(content);
+        await handle.close();
+        handle = undefined;
+        await commit(temporaryPath);
+    }
+    catch (error) {
+        const cleanupFailures = [];
+        if (handle) {
+            try {
+                await handle.close();
+            }
+            catch (closeError) {
+                cleanupFailures.push(`close: ${errorMessage(closeError)}`);
+            }
+        }
+        if (ownsTemporaryPath) {
+            try {
+                await unlink(temporaryPath);
+            }
+            catch (cleanupError) {
+                if (errorCode(cleanupError) !== 'ENOENT') {
+                    cleanupFailures.push(`unlink: ${errorMessage(cleanupError)}`);
+                }
+            }
+        }
+        const detail = cleanupFailures.length
+            ? ` Temporary-file cleanup also failed: ${cleanupFailures.join('; ')}`
+            : '';
+        throw new Error(`${errorMessage(error)}${detail}`, { cause: error });
+    }
+}
+//# sourceMappingURL=atomic-write.js.map

package/dist/adapters/filesystem/atomic-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-write.js","sourceRoot":"","sources":["../../../src/adapters/filesystem/atomic-write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE5E,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACjG,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,UAAkB,EAAE,OAAwB;IACtF,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACnG,IAAI,GAAG,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACjD,CAAC;IACD,OAAO,eAAe,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;AACxG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAkB,EAClB,OAAwB,EACxB,IAAY,EACZ,SAAsB;IAEtB,OAAO,eAAe,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QACpE,MAAM,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAClC,6EAA6E;QAC7E,SAAS,EAAE,EAAE,CAAC;QACd,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,UAAkB,EAClB,OAAwB,EACxB,IAAwB,EACxB,MAAgD,EAChD,aAAa,GAAG,KAAK;IAErB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAC7B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAC3E,CAAC;IACF,IAAI,MAA8B,CAAC;IACnC,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,CAAC;QACH,IAAI,aAAa;YAAE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,iBAAiB,GAAG,IAAI,CAAC;QACzB,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,eAAe,CAAC,IAAI,CAAC,UAAU,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,IAAI,SAAS,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACzC,eAAe,CAAC,IAAI,CAAC,WAAW,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM;YACnC,CAAC,CAAC,wCAAwC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACtE,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC"}

package/dist/adapters/filesystem/errors.d.ts

@@ -0,0 +1,2 @@
+export declare function errorCode(error: unknown): string | undefined;
+export declare function errorMessage(error: unknown): string;

package/dist/adapters/filesystem/errors.js

@@ -0,0 +1,8 @@
+export function errorCode(error) {
+    return typeof error === 'object' && error !== null && 'code' in error &&
+        typeof error.code === 'string' ? error.code : undefined;
+}
+export function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=errors.js.map

package/dist/adapters/filesystem/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/adapters/filesystem/errors.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;QACnE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/adapters/filesystem/manifest-file.d.ts

@@ -0,0 +1 @@
+export declare function readManifestFile(projectRoot: string): Promise<unknown>;

package/dist/adapters/filesystem/manifest-file.js

@@ -0,0 +1,21 @@
+import { lstat } from 'node:fs/promises';
+import path from 'node:path';
+import { FileSystemError } from '../../domain/project/errors.js';
+import { errorMessage } from './errors.js';
+import { readProjectFile } from './project-files.js';
+export async function readManifestFile(projectRoot) {
+    try {
+        const marker = await lstat(path.join(projectRoot, 'liftoff.manifest.json'));
+        if (!marker.isFile()) {
+            throw new FileSystemError('liftoff.manifest.json must be a regular file, not a directory, symlink, or junction.');
+        }
+        const bytes = await readProjectFile(projectRoot, ['liftoff.manifest.json']);
+        if (bytes === undefined)
+            throw new Error('file does not exist');
+        return JSON.parse(bytes.toString('utf8'));
+    }
+    catch (error) {
+        throw new FileSystemError(`Unable to read liftoff.manifest.json: ${errorMessage(error)}`);
+    }
+}
+//# sourceMappingURL=manifest-file.js.map

package/dist/adapters/filesystem/manifest-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-file.js","sourceRoot":"","sources":["../../../src/adapters/filesystem/manifest-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,WAAmB;IACxD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,eAAe,CAAC,sFAAsF,CAAC,CAAC;QACpH,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAC5E,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CAAC,yCAAyC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC"}

package/dist/adapters/filesystem/project-config.d.ts

@@ -0,0 +1,4 @@
+import type { ProjectOptions } from '../../domain/project/contracts.js';
+import type { ProjectCatalog } from '../../domain/project/catalog.js';
+export type ProjectConfigCatalog = Pick<ProjectCatalog, 'canonicalizeCodingAgents' | 'getApiStack' | 'getCodingAgent' | 'getEnvironment' | 'getGovernanceProfile' | 'getPattern' | 'getProjectType' | 'getProvider' | 'getSpecWorkflow' | 'resolveRegion'>;
+export declare function loadProjectConfigOptions(configPath: string, cwd: string, catalog: ProjectConfigCatalog): Promise<ProjectOptions>;

package/dist/adapters/filesystem/project-config.js

@@ -0,0 +1,157 @@
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { PlanValidationError } from '../../domain/project/planning.js';
+import { isRetiredPowerAppsWorkload, retiredPowerAppsMessage } from '../../domain/project/retired-workload.js';
+const CONFIG_FIELDS = new Set([
+    'projectName',
+    'projectType',
+    'apiStack',
+    'pattern',
+    'cloud',
+    'region',
+    'includeFrontend',
+    'environments',
+    'specWorkflow',
+    'agents',
+    'defaultAgent',
+    'governanceProfile'
+]);
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function optionalConfigString(config, field) {
+    const value = config[field];
+    if (value === undefined) {
+        return undefined;
+    }
+    if (typeof value !== 'string' || value.trim().length === 0) {
+        throw new PlanValidationError([`Configuration field ${field} must be a non-empty string.`]);
+    }
+    return value;
+}
+function resolveConfigCatalogValue(config, field, resolver) {
+    const value = optionalConfigString(config, field);
+    if (value === undefined) {
+        return undefined;
+    }
+    const resolved = resolver(value);
+    if (!resolved) {
+        throw new PlanValidationError([`Configuration field ${field} has unsupported value ${JSON.stringify(value)}.`]);
+    }
+    return resolved.id;
+}
+export async function loadProjectConfigOptions(configPath, cwd, catalog) {
+    const { canonicalizeCodingAgents, getApiStack, getCodingAgent, getEnvironment, getGovernanceProfile, getPattern, getProjectType, getProvider, getSpecWorkflow, resolveRegion } = catalog;
+    const resolvedPath = path.resolve(cwd, configPath);
+    let raw;
+    try {
+        raw = await readFile(resolvedPath, 'utf8');
+    }
+    catch (error) {
+        throw new PlanValidationError([
+            `Unable to read configuration ${resolvedPath}: ${error instanceof Error ? error.message : String(error)}`
+        ]);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (error) {
+        throw new PlanValidationError([
+            `Unable to parse configuration ${resolvedPath}: ${error instanceof Error ? error.message : String(error)}`
+        ]);
+    }
+    if (!isRecord(parsed)) {
+        throw new PlanValidationError(['Configuration root must be a JSON object.']);
+    }
+    if (isRetiredPowerAppsWorkload(parsed.projectType)) {
+        throw new PlanValidationError([retiredPowerAppsMessage(String(parsed.projectType))]);
+    }
+    if (Object.hasOwn(parsed, 'codeAppsPlugin')) {
+        throw new PlanValidationError([
+            'Configuration field codeAppsPlugin was removed because Power Apps code apps are retired and unsupported.'
+        ]);
+    }
+    const unknownFields = Object.keys(parsed).filter((field) => !CONFIG_FIELDS.has(field));
+    if (unknownFields.length > 0) {
+        throw new PlanValidationError([`Unknown configuration field${unknownFields.length === 1 ? '' : 's'}: ${unknownFields.join(', ')}.`]);
+    }
+    const projectName = optionalConfigString(parsed, 'projectName');
+    const projectType = resolveConfigCatalogValue(parsed, 'projectType', getProjectType);
+    const apiStack = resolveConfigCatalogValue(parsed, 'apiStack', getApiStack);
+    const pattern = resolveConfigCatalogValue(parsed, 'pattern', getPattern);
+    const cloud = resolveConfigCatalogValue(parsed, 'cloud', getProvider);
+    const specWorkflow = resolveConfigCatalogValue(parsed, 'specWorkflow', getSpecWorkflow);
+    const defaultAgent = resolveConfigCatalogValue(parsed, 'defaultAgent', getCodingAgent);
+    const governanceProfile = resolveConfigCatalogValue(parsed, 'governanceProfile', getGovernanceProfile);
+    const includeFrontendValue = parsed.includeFrontend;
+    if (includeFrontendValue !== undefined && typeof includeFrontendValue !== 'boolean') {
+        throw new PlanValidationError(['Configuration field includeFrontend must be a boolean.']);
+    }
+    let selectedEnvironments;
+    if (parsed.environments !== undefined) {
+        if (!Array.isArray(parsed.environments) || parsed.environments.length === 0) {
+            throw new PlanValidationError(['Configuration field environments must be a non-empty string array.']);
+        }
+        selectedEnvironments = parsed.environments.map((value, index) => {
+            if (typeof value !== 'string') {
+                throw new PlanValidationError([`Configuration field environments[${index}] must be a string.`]);
+            }
+            const environment = getEnvironment(value);
+            if (!environment) {
+                throw new PlanValidationError([`Configuration field environments contains unsupported value ${JSON.stringify(value)}.`]);
+            }
+            return environment.id;
+        });
+        if (new Set(selectedEnvironments).size !== selectedEnvironments.length) {
+            throw new PlanValidationError(['Configuration field environments must not contain duplicates.']);
+        }
+    }
+    let selectedAgents;
+    if (parsed.agents !== undefined) {
+        if (!Array.isArray(parsed.agents) || parsed.agents.length === 0) {
+            throw new PlanValidationError(['Configuration field agents must be a non-empty string array.']);
+        }
+        const values = parsed.agents.map((value, index) => {
+            if (typeof value !== 'string') {
+                throw new PlanValidationError([`Configuration field agents[${index}] must be a string.`]);
+            }
+            return value;
+        });
+        const resolved = canonicalizeCodingAgents(values);
+        if (resolved.unknown.length > 0) {
+            throw new PlanValidationError([
+                `Configuration field agents contains unsupported value ${JSON.stringify(resolved.unknown[0])}.`
+            ]);
+        }
+        selectedAgents = resolved.agents.map((agent) => agent.id);
+    }
+    let region = optionalConfigString(parsed, 'region');
+    const provider = cloud ? getProvider(cloud) : getProvider('azure');
+    if (region && provider?.status === 'available') {
+        const resolution = resolveRegion(provider.id, region);
+        if (resolution.status !== 'resolved') {
+            throw new PlanValidationError([
+                resolution.status === 'ambiguous'
+                    ? `Configuration field region ${JSON.stringify(region)} is ambiguous. Use one of: ${resolution.matches.map((match) => match.slug).join(', ')}.`
+                    : `Configuration field region has unsupported value ${JSON.stringify(region)}.`
+            ]);
+        }
+        region = resolution.region.slug;
+    }
+    return {
+        projectName,
+        projectType,
+        apiStack,
+        pattern,
+        cloud,
+        region,
+        includeFrontend: includeFrontendValue,
+        environments: selectedEnvironments,
+        specWorkflow,
+        agents: selectedAgents,
+        defaultAgent,
+        governanceProfile
+    };
+}
+//# sourceMappingURL=project-config.js.map

package/dist/adapters/filesystem/project-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-config.js","sourceRoot":"","sources":["../../../src/adapters/filesystem/project-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACxB,MAAM,0CAA0C,CAAC;AAgBlD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,aAAa;IACb,aAAa;IACb,UAAU;IACV,SAAS;IACT,OAAO;IACP,QAAQ;IACR,iBAAiB;IACjB,cAAc;IACd,cAAc;IACd,QAAQ;IACR,cAAc;IACd,mBAAmB;CACpB,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAA+B,EAC/B,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,mBAAmB,CAAC,CAAC,uBAAuB,KAAK,8BAA8B,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB,CAChC,MAA+B,EAC/B,KAAa,EACb,QAAuD;IAEvD,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,mBAAmB,CAAC,CAAC,uBAAuB,KAAK,0BAA0B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,QAAQ,CAAC,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,UAAkB,EAClB,GAAW,EACX,OAA6B;IAE7B,MAAM,EACJ,wBAAwB,EACxB,WAAW,EACX,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,UAAU,EACV,cAAc,EACd,WAAW,EACX,eAAe,EACf,aAAa,EACd,GAAG,OAAO,CAAC;IACZ,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACnD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,mBAAmB,CAAC;YAC5B,gCAAgC,YAAY,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAC1G,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,mBAAmB,CAAC;YAC5B,iCAAiC,YAAY,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAC3G,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,mBAAmB,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,0BAA0B,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,mBAAmB,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,mBAAmB,CAAC;YAC5B,0GAA0G;SAC3G,CAAC,CAAC;IACL,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACvF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,mBAAmB,CAAC,CAAC,8BAA8B,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvI,CAAC;IAED,MAAM,WAAW,GAAG,oBAAoB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,yBAAyB,CAAC,MAAM,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,yBAAyB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,yBAAyB,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,yBAAyB,CAAC,MAAM,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;IACxF,MAAM,YAAY,GAAG,yBAAyB,CAAC,MAAM,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IACvF,MAAM,iBAAiB,GAAG,yBAAyB,CACjD,MAAM,EACN,mBAAmB,EACnB,oBAAoB,CACrB,CAAC;IAEF,MAAM,oBAAoB,GAAG,MAAM,CAAC,eAAe,CAAC;IACpD,IAAI,oBAAoB,KAAK,SAAS,IAAI,OAAO,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACpF,MAAM,IAAI,mBAAmB,CAAC,CAAC,wDAAwD,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,oBAA0C,CAAC;IAC/C,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,mBAAmB,CAAC,CAAC,oEAAoE,CAAC,CAAC,CAAC;QACxG,CAAC;QACD,oBAAoB,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,IAAI,mBAAmB,CAAC,CAAC,oCAAoC,KAAK,qBAAqB,CAAC,CAAC,CAAC;YAClG,CAAC;YACD,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,mBAAmB,CAAC,CAAC,+DAA+D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3H,CAAC;YACD,OAAO,WAAW,CAAC,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,IAAI,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,MAAM,EAAE,CAAC;YACvE,MAAM,IAAI,mBAAmB,CAAC,CAAC,+DAA+D,CAAC,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAED,IAAI,cAAoC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,mBAAmB,CAAC,CAAC,8DAA8D,CAAC,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,IAAI,mBAAmB,CAAC,CAAC,8BAA8B,KAAK,qBAAqB,CAAC,CAAC,CAAC;YAC5F,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,mBAAmB,CAAC;gBAC5B,yDAAyD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG;aAChG,CAAC,CAAC;QACL,CAAC;QACD,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACnE,IAAI,MAAM,IAAI,QAAQ,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACrC,MAAM,IAAI,mBAAmB,CAAC;gBAC5B,UAAU,CAAC,MAAM,KAAK,WAAW;oBAC/B,CAAC,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,8BAA8B,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBAC/I,CAAC,CAAC,oDAAoD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG;aAClF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;IAClC,CAAC;IAED,OAAO;QACL,WAAW;QACX,WAAW;QACX,QAAQ;QACR,OAAO;QACP,KAAK;QACL,MAAM;QACN,eAAe,EAAE,oBAAoB;QACrC,YAAY,EAAE,oBAAoB;QAClC,YAAY;QACZ,MAAM,EAAE,cAAc;QACtB,YAAY;QACZ,iBAAiB;KAClB,CAAC;AACJ,CAAC"}

package/dist/adapters/filesystem/project-discovery.d.ts

@@ -0,0 +1,2 @@
+export declare function resolveTargetRoot(cwd: string, projectName: string): string;
+export declare function findProjectRoot(startDir: string): Promise<string | undefined>;

package/dist/adapters/filesystem/project-discovery.js

@@ -0,0 +1,30 @@
+import { lstat } from 'node:fs/promises';
+import path from 'node:path';
+import { FileSystemError } from '../../domain/project/errors.js';
+import { errorCode, errorMessage } from './errors.js';
+export function resolveTargetRoot(cwd, projectName) {
+    return path.resolve(cwd, projectName);
+}
+export async function findProjectRoot(startDir) {
+    let current = path.resolve(startDir);
+    while (true) {
+        try {
+            const marker = await lstat(path.join(current, 'liftoff.manifest.json'));
+            if (!marker.isFile()) {
+                throw new FileSystemError('liftoff.manifest.json must be a regular file, not a directory, symlink, or junction.');
+            }
+            return current;
+        }
+        catch (error) {
+            if (errorCode(error) !== 'ENOENT' && errorCode(error) !== 'ENOTDIR') {
+                throw new FileSystemError(`Unable to inspect ${current} for a Liftoff manifest: ${errorMessage(error)}`);
+            }
+            const parent = path.dirname(current);
+            if (parent === current) {
+                return undefined;
+            }
+            current = parent;
+        }
+    }
+}
+//# sourceMappingURL=project-discovery.js.map

package/dist/adapters/filesystem/project-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-discovery.js","sourceRoot":"","sources":["../../../src/adapters/filesystem/project-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,WAAmB;IAChE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB;IACpD,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrC,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAC;YACxE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;gBACrB,MAAM,IAAI,eAAe,CACvB,sFAAsF,CACvF,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpE,MAAM,IAAI,eAAe,CAAC,qBAAqB,OAAO,4BAA4B,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC3G,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC"}