@msn-control/liftoff 0.10.4 → 0.11.2

package/dist/application/update/planning.js

@@ -0,0 +1,293 @@
+import { createHash } from 'node:crypto';
+import { getEnvironment } from '../project/catalog.js';
+import { captureProjectFileSnapshot } from '../../adapters/filesystem/project-transaction.js';
+import { manifestDisplayPath } from '../../domain/project/paths.js';
+import { readProjectFile } from '../../adapters/filesystem/project-files.js';
+import { resolveProjectPath } from '../../adapters/filesystem/project-paths.js';
+import { liftoffVersion } from '../../version.js';
+import { assessInfrastructureLayout, infrastructureProvisioningGate, sharedApplicationModuleIdentities } from '../../domain/project/infrastructure-layout.js';
+import { buildArtifacts } from '../../templates.js';
+import { renderGovernanceContext } from '../../repository-governance.js';
+export function buildUpdateArtifacts(plan, manifest) {
+    const infrastructureLayout = assessInfrastructureLayout(manifest).kind;
+    return buildArtifacts(plan).map((artifact) => artifact.logicalName === 'repository-governance-context'
+        ? {
+            ...artifact,
+            content: infrastructureLayout === 'independent'
+                ? renderGovernanceContext(plan)
+                : renderGovernanceContext(plan, { infrastructureLayout })
+        }
+        : artifact);
+}
+export function requestedProvisioningGroups(manifest, plan) {
+    const provisioned = new Set(manifest.projectArtifacts.map((artifact) => artifact.provisioningGroup));
+    const groups = [];
+    if (plan.includeFrontend &&
+        !manifest.project.workload.frontend &&
+        !provisioned.has('frontend')) {
+        groups.push({ group: 'frontend', status: 'ready' });
+    }
+    const recordedEnvironments = new Set(manifest.project.workload.environments);
+    for (const environment of plan.environments) {
+        const group = `environment:${environment.id}`;
+        if (!recordedEnvironments.has(environment.id) &&
+            !provisioned.has(group)) {
+            const gate = infrastructureProvisioningGate(manifest, environment.id);
+            groups.push({
+                group,
+                status: gate.status,
+                ...(gate.status === 'migration-required' ? { reason: gate.reason } : {})
+            });
+        }
+    }
+    return groups;
+}
+export async function inspectProvisioningGroups(projectRoot, render, groups, options = {}) {
+    const readFile = options.readFile ?? readProjectFile;
+    const projectArtifacts = render.filter((artifact) => artifact.lifecycle === 'project');
+    const plans = [];
+    for (const request of groups) {
+        const group = request.group;
+        const artifacts = projectArtifacts.filter((artifact) => artifact.provisioningGroup === group);
+        if (artifacts.length === 0) {
+            throw new Error(`Provisioning group ${group} did not render any project artifacts.`);
+        }
+        if (request.status === 'migration-required') {
+            plans.push({
+                group,
+                entries: [],
+                blocked: true,
+                reason: request.reason
+            });
+            continue;
+        }
+        if (group.startsWith('environment:')) {
+            const missingSharedModule = [];
+            for (const identity of sharedApplicationModuleIdentities) {
+                if (await readFile(projectRoot, [...identity.pathParts]) === undefined) {
+                    missingSharedModule.push(identity.pathParts.join('/'));
+                }
+            }
+            if (missingSharedModule.length > 0) {
+                plans.push({
+                    group,
+                    entries: [],
+                    blocked: true,
+                    reason: `Recorded shared application module files are missing: ${missingSharedModule.join(', ')}. An explicit reviewed infrastructure migration is required; no environment root was created.`
+                });
+                continue;
+            }
+        }
+        const entries = await Promise.all(artifacts.map(async (artifact) => {
+            const disk = await readFile(projectRoot, artifact.pathParts);
+            if (disk === undefined) {
+                return {
+                    group,
+                    status: 'create',
+                    rendered: artifact,
+                    reason: 'destination is absent'
+                };
+            }
+            if (disk.toString('utf8') === artifact.content) {
+                return {
+                    group,
+                    status: 'adopt',
+                    rendered: artifact,
+                    reason: 'destination already matches the selected component'
+                };
+            }
+            return {
+                group,
+                status: 'conflict',
+                rendered: artifact,
+                reason: 'destination contains project-owned bytes'
+            };
+        }));
+        plans.push({
+            group,
+            entries,
+            blocked: entries.some((entry) => entry.status === 'conflict')
+        });
+    }
+    return plans;
+}
+export function provisioningJson(plans) {
+    return plans.map((plan) => ({
+        group: plan.group,
+        status: plan.blocked ? 'blocked' : 'ready',
+        ...(plan.reason ? { reason: plan.reason } : {}),
+        entries: plan.entries.map((entry) => ({
+            status: entry.status,
+            path: manifestDisplayPath(entry.rendered.pathParts),
+            reason: entry.reason
+        }))
+    }));
+}
+function projectProvenanceFor(artifact) {
+    return {
+        logicalName: artifact.logicalName,
+        category: artifact.category,
+        pathParts: artifact.pathParts,
+        generatedBy: liftoffVersion,
+        generationHash: `sha256:${createHash('sha256').update(artifact.content, 'utf8').digest('hex')}`,
+        provisioningGroup: artifact.provisioningGroup
+    };
+}
+export function appendProvisionedProjectArtifacts(existing, plans) {
+    const byName = new Map(existing.map((artifact) => [artifact.logicalName, artifact]));
+    for (const plan of plans) {
+        if (plan.blocked) {
+            continue;
+        }
+        for (const entry of plan.entries) {
+            if (!byName.has(entry.rendered.logicalName)) {
+                byName.set(entry.rendered.logicalName, projectProvenanceFor(entry.rendered));
+            }
+        }
+    }
+    return [...byName.values()];
+}
+export function sameWorkloadIntent(left, right) {
+    if (left.kind !== right.kind) {
+        return false;
+    }
+    return left.apiStack === right.apiStack &&
+        left.cloud === right.cloud &&
+        left.region === right.region &&
+        left.frontend === right.frontend &&
+        left.environments.length === right.environments.length &&
+        left.environments.every((environment, index) => environment === right.environments[index]) &&
+        (left.kind !== 'genai' || right.kind !== 'genai' || left.pattern === right.pattern);
+}
+export function planWithBlockedProvisioning(plan, recordedWorkload, provisioningPlans) {
+    const blockedGroups = new Set(provisioningPlans
+        .filter((group) => group.blocked)
+        .map((group) => group.group));
+    const hasBlockedEnvironment = [...blockedGroups].some((group) => group.startsWith('environment:'));
+    const environments = hasBlockedEnvironment
+        ? recordedWorkload.environments.map((id) => {
+            const environment = getEnvironment(id);
+            if (!environment) {
+                throw new Error(`Recorded environment ${id} is no longer supported.`);
+            }
+            return environment;
+        })
+        : plan.environments;
+    return {
+        ...plan,
+        includeFrontend: blockedGroups.has('frontend')
+            ? recordedWorkload.frontend
+            : plan.includeFrontend,
+        environments
+    };
+}
+export function isUnownedUpdateConflict(entry, recordedByName) {
+    if (entry.status === 'moved') {
+        return entry.destinationOccupied === true && entry.destinationMatches !== true;
+    }
+    if (entry.status !== 'conflict') {
+        return false;
+    }
+    const recorded = recordedByName.get(entry.logicalName);
+    return !recorded ||
+        recorded.category !== entry.rendered?.category ||
+        recorded.pathParts.join('\0') !== entry.pathParts.join('\0');
+}
+export async function preflightUpdate(projectRoot, entries, force, recordedByName) {
+    for (const entry of entries) {
+        if (isUnownedUpdateConflict(entry, recordedByName)) {
+            continue;
+        }
+        const writesDestination = entry.status === 'new' ||
+            entry.status === 'missing' ||
+            entry.status === 'upgrade' ||
+            entry.status === 'moved' && (entry.cleanMove === true || force) ||
+            entry.status === 'conflict' && force;
+        const deletesDestination = entry.status === 'retired' ||
+            entry.status === 'retired-conflict' && force;
+        if (writesDestination) {
+            await resolveProjectPath(projectRoot, entry.pathParts);
+        }
+        if (deletesDestination) {
+            await resolveProjectPath(projectRoot, entry.pathParts);
+        }
+        if (entry.previousPathParts &&
+            (entry.status === 'moved' && (entry.cleanMove === true || force) || entry.status === 'conflict' && force)) {
+            await resolveProjectPath(projectRoot, entry.previousPathParts);
+        }
+    }
+    await resolveProjectPath(projectRoot, ['liftoff.manifest.json']);
+}
+function updateSnapshotKey(pathParts) {
+    return pathParts.join('\0');
+}
+export async function captureUpdateSnapshots(projectRoot, manifest, render, initialSnapshots) {
+    const snapshots = new Map(initialSnapshots.map((snapshot) => [updateSnapshotKey(snapshot.pathParts), snapshot]));
+    const seenKeys = new Set(snapshots.keys());
+    const candidates = [
+        ...manifest.managedArtifacts.map((artifact) => artifact.pathParts),
+        ...render.map((artifact) => artifact.pathParts)
+    ];
+    const uncaptured = [];
+    for (const pathParts of candidates) {
+        const key = updateSnapshotKey(pathParts);
+        if (!seenKeys.has(key)) {
+            seenKeys.add(key);
+            uncaptured.push(pathParts);
+        }
+    }
+    for (const snapshot of await Promise.all(uncaptured.map((pathParts) => captureProjectFileSnapshot(projectRoot, pathParts)))) {
+        snapshots.set(updateSnapshotKey(snapshot.pathParts), snapshot);
+    }
+    return [...snapshots.values()];
+}
+export function selectUpdatePreconditions(snapshots, entries, mutations, additionalPaths = []) {
+    const requiredKeys = new Set([
+        updateSnapshotKey(['liftoff.config.json']),
+        ...mutations.map((mutation) => updateSnapshotKey(mutation.pathParts)),
+        ...additionalPaths.map((pathParts) => updateSnapshotKey(pathParts))
+    ]);
+    for (const entry of entries) {
+        const adoptsExistingDestination = entry.status === 'moved' && entry.destinationMatches === true;
+        if (!(entry.status === 'unchanged' && entry.refreshHash) &&
+            !adoptsExistingDestination) {
+            continue;
+        }
+        requiredKeys.add(updateSnapshotKey(entry.pathParts));
+        if (entry.previousPathParts) {
+            requiredKeys.add(updateSnapshotKey(entry.previousPathParts));
+        }
+    }
+    return snapshots.filter((snapshot) => requiredKeys.has(updateSnapshotKey(snapshot.pathParts)));
+}
+export function assertAuthorizedUpdateMutations(mutations, entries, provisioningPlans, additionalAuthorizedPaths = []) {
+    const authorized = new Set([
+        updateSnapshotKey(['liftoff.manifest.json']),
+        ...additionalAuthorizedPaths.map((pathParts) => updateSnapshotKey(pathParts))
+    ]);
+    for (const entry of entries) {
+        if (entry.rendered && entry.rendered.lifecycle !== 'managed-core') {
+            throw new Error(`Update reconciliation produced a non-core mutation candidate: ${entry.logicalName}`);
+        }
+        authorized.add(updateSnapshotKey(entry.pathParts));
+        if (entry.previousPathParts) {
+            authorized.add(updateSnapshotKey(entry.previousPathParts));
+        }
+    }
+    for (const plan of provisioningPlans) {
+        if (plan.blocked) {
+            continue;
+        }
+        for (const entry of plan.entries) {
+            if (entry.status === 'create') {
+                authorized.add(updateSnapshotKey(entry.rendered.pathParts));
+            }
+        }
+    }
+    for (const mutation of mutations) {
+        if (!authorized.has(updateSnapshotKey(mutation.pathParts))) {
+            throw new Error(`Update mutation is outside managed-core or authorized provisioning scope: ${manifestDisplayPath(mutation.pathParts)}`);
+        }
+    }
+}
+//# sourceMappingURL=planning.js.map

package/dist/application/update/planning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planning.js","sourceRoot":"","sources":["../../../src/application/update/planning.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACX,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,cAAc,EACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,0BAA0B,EAG3B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,mBAAmB,EACpB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,eAAe,EAChB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,kBAAkB,EACnB,MAAM,4CAA4C,CAAC;AAYpD,OAAO,EACL,cAAc,EACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,iCAAiC,EAClC,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,MAAM,UAAU,oBAAoB,CAClC,IAAiB,EACjB,QAAyB;IAEzB,MAAM,oBAAoB,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IACvE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC3C,QAAQ,CAAC,WAAW,KAAK,+BAA+B;QACtD,CAAC,CAAC;YACE,GAAG,QAAQ;YACX,OAAO,EAAE,oBAAoB,KAAK,aAAa;gBAC7C,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC;gBAC/B,CAAC,CAAC,uBAAuB,CAAC,IAAI,EAAE,EAAE,oBAAoB,EAAE,CAAC;SAC5D;QACH,CAAC,CAAC,QAAQ,CACb,CAAC;AACJ,CAAC;AAyBD,MAAM,UAAU,2BAA2B,CACzC,QAAyB,EACzB,IAAiB;IAEjB,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CACxE,CAAC;IACF,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,IACE,IAAI,CAAC,eAAe;QACpB,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ;QACnC,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAC5B,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC7E,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,eAAe,WAAW,CAAC,EAAE,EAAW,CAAC;QACvD,IACE,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACzC,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EACvB,CAAC;YACD,MAAM,IAAI,GAAG,8BAA8B,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;YACtE,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,oBAAoB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,WAAmB,EACnB,MAAoC,EACpC,MAA2C,EAC3C,OAAO,GAEH,EAAE;IAEN,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC;IACrD,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CACpC,CAAC,QAAQ,EAAwC,EAAE,CACjD,QAAQ,CAAC,SAAS,KAAK,SAAS,CACnC,CAAC;IACF,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CACvC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,iBAAiB,KAAK,KAAK,CACnD,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,wCAAwC,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC;gBACT,KAAK;gBACL,OAAO,EAAE,EAAE;gBACX,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACrC,MAAM,mBAAmB,GAAG,EAAE,CAAC;YAC/B,KAAK,MAAM,QAAQ,IAAI,iCAAiC,EAAE,CAAC;gBACzD,IAAI,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;oBACvE,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YACD,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC;oBACT,KAAK;oBACL,OAAO,EAAE,EAAE;oBACX,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,yDAAyD,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,+FAA+F;iBAC/L,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAA8B,EAAE;YAC7F,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC7D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO;oBACL,KAAK;oBACL,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,uBAAuB;iBAChC,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAC/C,OAAO;oBACL,KAAK;oBACL,MAAM,EAAE,OAAO;oBACf,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,oDAAoD;iBAC7D,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,KAAK;gBACL,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,0CAA0C;aACnD,CAAC;QACJ,CAAC,CAAC,CAAC,CAAC;QACJ,KAAK,CAAC,IAAI,CAAC;YACT,KAAK;YACL,OAAO;YACP,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAuC;IACtE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;QAC1C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;YACnD,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;KACJ,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAAkC;IAElC,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,WAAW,EAAE,cAAc;QAC3B,cAAc,EAAE,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QAC/F,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,QAA4C,EAC5C,KAAuC;IAEvC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAA4C,EAC5C,KAA6C;IAE7C,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QACrC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC1B,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC5B,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAChC,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,KAAK,CAAC,YAAY,CAAC,MAAM;QACtD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,CAC7C,WAAW,KAAK,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAC1C;QACD,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,IAAiB,EACjB,gBAAwD,EACxD,iBAAmD;IAEnD,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,iBAAiB;SACd,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;SAChC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAC/B,CAAC;IACF,MAAM,qBAAqB,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9D,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,CACjC,CAAC;IACF,MAAM,YAAY,GAAG,qBAAqB;QACxC,CAAC,CAAC,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YACvC,MAAM,WAAW,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;YACvC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,wBAAwB,EAAE,0BAA0B,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,WAAW,CAAC;QACrB,CAAC,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;IACtB,OAAO;QACL,GAAG,IAAI;QACP,eAAe,EAAE,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC;YAC5C,CAAC,CAAC,gBAAgB,CAAC,QAAQ;YAC3B,CAAC,CAAC,IAAI,CAAC,eAAe;QACxB,YAAY;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAqB,EACrB,cAA4D;IAE5D,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,mBAAmB,KAAK,IAAI,IAAI,KAAK,CAAC,kBAAkB,KAAK,IAAI,CAAC;IACjF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACvD,OAAO,CAAC,QAAQ;QACd,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,QAAQ;QAC9C,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAmB,EACnB,OAAyB,EACzB,KAAc,EACd,cAA4D;IAE5D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,uBAAuB,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;YACnD,SAAS;QACX,CAAC;QACD,MAAM,iBAAiB,GACrB,KAAK,CAAC,MAAM,KAAK,KAAK;YACtB,KAAK,CAAC,MAAM,KAAK,SAAS;YAC1B,KAAK,CAAC,MAAM,KAAK,SAAS;YAC1B,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC;YAC/D,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC;QACvC,MAAM,kBAAkB,GACtB,KAAK,CAAC,MAAM,KAAK,SAAS;YAC1B,KAAK,CAAC,MAAM,KAAK,kBAAkB,IAAI,KAAK,CAAC;QAC/C,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACzD,CAAC;QACD,IACE,KAAK,CAAC,iBAAiB;YACvB,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,EACzG,CAAC;YACD,MAAM,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,MAAM,kBAAkB,CAAC,WAAW,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,iBAAiB,CAAC,SAA4B;IACrD,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,WAAmB,EACnB,QAAyB,EACzB,MAAoC,EACpC,gBAAgD;IAEhD,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,gBAAgB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC,CACtF,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG;QACjB,GAAG,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;QAClE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;KAChD,CAAC;IACF,MAAM,UAAU,GAAe,EAAE,CAAC;IAClC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,MAAM,OAAO,CAAC,GAAG,CACtC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,0BAA0B,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAClF,EAAE,CAAC;QACF,SAAS,CAAC,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,SAAyC,EACzC,OAAkC,EAClC,SAAyC,EACzC,eAAe,GAAwB,EAAE;IAEzC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;QAC3B,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAC1C,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACrE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;KACpE,CAAC,CAAC;IACH,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,yBAAyB,GAC7B,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,kBAAkB,KAAK,IAAI,CAAC;QAChE,IACE,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC;YACpD,CAAC,yBAAyB,EAC1B,CAAC;YACD,SAAS;QACX,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,SAAyC,EACzC,OAAkC,EAClC,iBAAmD,EACnD,yBAAyB,GAAwB,EAAE;IAEnD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS;QACjC,iBAAiB,CAAC,CAAC,uBAAuB,CAAC,CAAC;QAC5C,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;KAC9E,CAAC,CAAC;IACH,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CACb,iEAAiE,KAAK,CAAC,WAAW,EAAE,CACrF,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC9B,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACb,6EAA6E,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CACvH,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/application/update/preview.d.ts

@@ -0,0 +1,49 @@
+export declare const updatePreviewSchemaVersion = 1;
+export declare const updatePreviewDirectoryParts: readonly string[];
+export type UpdatePreviewMode = 'normal' | 'force';
+export type UpdatePreviewErrorCode = 'preview-missing' | 'preview-invalid' | 'preview-unsupported' | 'preview-mismatch' | 'preview-storage' | 'preview-busy';
+export declare class UpdatePreviewError extends Error {
+    readonly code: UpdatePreviewErrorCode;
+    constructor(code: UpdatePreviewErrorCode, message: string, options?: ErrorOptions);
+}
+export interface UpdatePreviewInput {
+    /** The real project root returned by the filesystem adapter, not a display alias. */
+    projectRoot: string;
+    cliVersion: string;
+    mode: UpdatePreviewMode;
+    source: unknown;
+    target: unknown;
+    operations: unknown;
+}
+export interface UpdatePreviewDescriptor {
+    readonly projectRoot: string;
+    readonly cliVersion: string;
+    readonly mode: UpdatePreviewMode;
+    readonly sourceDigest: string;
+    readonly targetDigest: string;
+    readonly operationsDigest: string;
+    readonly fingerprint: string;
+}
+export interface UpdatePreviewReceipt {
+    readonly schemaVersion: typeof updatePreviewSchemaVersion;
+    readonly kind: 'liftoff-update-preview';
+    readonly projectRoot: string;
+    readonly projectKey: string;
+    readonly receiptId: string;
+    readonly issuedAt: string;
+    readonly variants: readonly UpdatePreviewDescriptor[];
+}
+export interface UpdatePreviewIssuance {
+    receiptId: string;
+    issuedAt: string;
+}
+export declare function normalizeUpdatePreviewProjectRoot(value: string): string;
+export declare function updatePreviewProjectKey(projectRoot: string): string;
+export declare function createUpdatePreviewDescriptor(input: UpdatePreviewInput): UpdatePreviewDescriptor;
+export declare function validateUpdatePreviewDescriptor(value: unknown): UpdatePreviewDescriptor;
+export declare function createUpdatePreviewReceipt(descriptors: readonly UpdatePreviewDescriptor[], issuance: UpdatePreviewIssuance): UpdatePreviewReceipt;
+export declare function validateUpdatePreviewReceipt(value: unknown, options?: {
+    projectRoot?: string;
+    now?: Date;
+}): UpdatePreviewReceipt;
+export declare function matchUpdatePreviewReceipt(receipt: unknown, currentDescriptor: UpdatePreviewDescriptor): UpdatePreviewDescriptor;

package/dist/application/update/preview.js

@@ -0,0 +1,220 @@
+import path from 'node:path';
+import { canonicalSha256, isRecord } from '../../domain/governance/activation/canonical-json.js';
+import { formatUpdateCommand } from './command-guidance.js';
+export const updatePreviewSchemaVersion = 1;
+export const updatePreviewDirectoryParts = Object.freeze(['liftoff', 'update-previews']);
+export class UpdatePreviewError extends Error {
+    code;
+    constructor(code, message, options) {
+        super(message, options);
+        this.code = code;
+        this.name = 'UpdatePreviewError';
+    }
+}
+const digestPattern = /^[0-9a-f]{64}$/u;
+const receiptIdPattern = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/u;
+function invalid(message) {
+    throw new UpdatePreviewError('preview-invalid', message);
+}
+function strictKeys(value, keys, label) {
+    if (Object.keys(value).length !== keys.length || keys.some((key) => !Object.hasOwn(value, key))) {
+        invalid(`${label} has missing or unrecognized fields.`);
+    }
+}
+function text(value, label) {
+    if (typeof value !== 'string' || value.length === 0 || /[\u0000-\u001f]/u.test(value)) {
+        invalid(`${label} must be a nonempty string without control characters.`);
+    }
+    return value;
+}
+function digest(value, label) {
+    if (typeof value !== 'string' || !digestPattern.test(value)) {
+        invalid(`${label} must be a complete lowercase SHA-256 fingerprint.`);
+    }
+    return value;
+}
+export function normalizeUpdatePreviewProjectRoot(value) {
+    const root = text(value, 'Preview project root');
+    const paths = /^[a-z]:[\\/]/iu.test(root) || root.startsWith('\\\\') ? path.win32 : path.posix;
+    if (!paths.isAbsolute(root) || root.startsWith('\\\\?\\') || root.startsWith('\\\\.\\')) {
+        invalid('Preview project root must be an absolute canonical native path.');
+    }
+    const normalized = paths.normalize(root);
+    const boundary = paths.parse(normalized).root;
+    if (paths === path.win32 && !/^[a-z]:\\$/iu.test(boundary) &&
+        !/^\\\\[^\\]+\\[^\\]+\\$/u.test(boundary)) {
+        invalid('Preview project root must include its Windows drive or UNC share.');
+    }
+    return normalized === boundary ? boundary : normalized.endsWith(paths.sep) ? normalized.slice(0, -1) : normalized;
+}
+export function updatePreviewProjectKey(projectRoot) {
+    return canonicalSha256({
+        schemaVersion: updatePreviewSchemaVersion,
+        kind: 'liftoff-update-project',
+        projectRoot: normalizeUpdatePreviewProjectRoot(projectRoot)
+    });
+}
+function assertSemanticJson(value, ancestors = new Set()) {
+    if (value === null || typeof value === 'string' || typeof value === 'boolean')
+        return;
+    if (typeof value === 'number' && Number.isFinite(value))
+        return;
+    if (typeof value !== 'object' || value === null)
+        invalid('Preview semantics must contain only finite JSON values.');
+    if (ancestors.has(value))
+        invalid('Preview semantics cannot contain cycles.');
+    if (Array.isArray(value) && Object.getPrototypeOf(value) !== Array.prototype) {
+        invalid('Preview semantics must use plain JSON arrays, not runtime objects.');
+    }
+    if (!Array.isArray(value) && Object.getPrototypeOf(value) !== Object.prototype &&
+        Object.getPrototypeOf(value) !== null) {
+        invalid('Preview semantics must use plain JSON objects, not runtime objects.');
+    }
+    if (Object.getOwnPropertySymbols(value).length)
+        invalid('Preview semantics cannot contain symbol keys.');
+    const properties = Object.getOwnPropertyDescriptors(value);
+    const keys = Object.keys(properties);
+    if (Array.isArray(value) &&
+        (keys.length !== value.length + 1 || Array.from({ length: value.length }, (_, index) => index)
+            .some((index) => !Object.hasOwn(properties, String(index))))) {
+        invalid('Preview semantics cannot contain sparse arrays or additional array properties.');
+    }
+    ancestors.add(value);
+    for (const key of keys) {
+        if (Array.isArray(value) && key === 'length')
+            continue;
+        const property = properties[key];
+        if (!Object.hasOwn(property, 'value') || !property.enumerable) {
+            invalid('Preview semantics cannot contain accessors or hidden properties.');
+        }
+        assertSemanticJson(property.value, ancestors);
+    }
+    ancestors.delete(value);
+}
+function semanticDigest(value) {
+    assertSemanticJson(value);
+    return canonicalSha256(value);
+}
+function descriptorFromDigests(input) {
+    const projectRoot = normalizeUpdatePreviewProjectRoot(input.projectRoot);
+    const cliVersion = text(input.cliVersion, 'Preview CLI version');
+    if (!/^\d+\.\d+\.\d+(?:-[0-9a-z.-]+)?(?:\+[0-9a-z.-]+)?$/iu.test(cliVersion)) {
+        invalid('Preview CLI version must be a semantic version.');
+    }
+    if (input.mode !== 'normal' && input.mode !== 'force')
+        invalid('Preview mode must be normal or force.');
+    const fields = {
+        projectRoot,
+        cliVersion,
+        mode: input.mode,
+        sourceDigest: digest(input.sourceDigest, 'Preview source digest'),
+        targetDigest: digest(input.targetDigest, 'Preview target digest'),
+        operationsDigest: digest(input.operationsDigest, 'Preview operations digest')
+    };
+    return Object.freeze({
+        ...fields,
+        fingerprint: canonicalSha256({
+            schemaVersion: updatePreviewSchemaVersion,
+            kind: 'liftoff-update-plan',
+            ...fields
+        })
+    });
+}
+export function createUpdatePreviewDescriptor(input) {
+    // Array order is retained: execution order and command argument order can be semantic.
+    return descriptorFromDigests({
+        projectRoot: input.projectRoot,
+        cliVersion: input.cliVersion,
+        mode: input.mode,
+        sourceDigest: semanticDigest(input.source),
+        targetDigest: semanticDigest(input.target),
+        operationsDigest: semanticDigest(input.operations)
+    });
+}
+export function validateUpdatePreviewDescriptor(value) {
+    if (!isRecord(value))
+        invalid('Preview descriptor must be an object.');
+    strictKeys(value, [
+        'projectRoot', 'cliVersion', 'mode', 'sourceDigest', 'targetDigest', 'operationsDigest', 'fingerprint'
+    ], 'Preview descriptor');
+    if (value.mode !== 'normal' && value.mode !== 'force')
+        invalid('Preview mode must be normal or force.');
+    const descriptor = descriptorFromDigests({
+        projectRoot: text(value.projectRoot, 'Preview project root'),
+        cliVersion: text(value.cliVersion, 'Preview CLI version'),
+        mode: value.mode,
+        sourceDigest: digest(value.sourceDigest, 'Preview source digest'),
+        targetDigest: digest(value.targetDigest, 'Preview target digest'),
+        operationsDigest: digest(value.operationsDigest, 'Preview operations digest')
+    });
+    if (descriptor.projectRoot !== value.projectRoot || descriptor.fingerprint !== value.fingerprint) {
+        invalid('Preview descriptor fingerprint or canonical project root is inconsistent.');
+    }
+    return descriptor;
+}
+export function createUpdatePreviewReceipt(descriptors, issuance) {
+    if (descriptors.length < 1 || descriptors.length > 2)
+        invalid('A preview receipt needs one or two eligible variants.');
+    const variants = descriptors.map(validateUpdatePreviewDescriptor)
+        .sort((left, right) => left.mode === right.mode ? 0 : left.mode === 'normal' ? -1 : 1);
+    const first = variants[0];
+    if (new Set(variants.map((variant) => variant.mode)).size !== variants.length) {
+        invalid('A preview receipt cannot repeat an effective mode.');
+    }
+    if (variants.some((variant) => variant.projectRoot !== first.projectRoot || variant.cliVersion !== first.cliVersion)) {
+        invalid('Preview variants must bind the same canonical project and installed CLI.');
+    }
+    if (!receiptIdPattern.test(issuance.receiptId))
+        invalid('Preview receiptId must be a lowercase UUID.');
+    const issuedAt = Date.parse(issuance.issuedAt);
+    if (!Number.isFinite(issuedAt) || new Date(issuedAt).toISOString() !== issuance.issuedAt) {
+        invalid('Preview issuedAt must be an ISO UTC timestamp.');
+    }
+    return Object.freeze({
+        schemaVersion: updatePreviewSchemaVersion,
+        kind: 'liftoff-update-preview',
+        projectRoot: first.projectRoot,
+        projectKey: updatePreviewProjectKey(first.projectRoot),
+        receiptId: issuance.receiptId,
+        issuedAt: issuance.issuedAt,
+        variants: Object.freeze(variants)
+    });
+}
+export function validateUpdatePreviewReceipt(value, options = {}) {
+    if (!isRecord(value))
+        invalid('Preview receipt must be an object.');
+    if (value.schemaVersion !== updatePreviewSchemaVersion) {
+        throw new UpdatePreviewError('preview-unsupported', 'Unsupported or missing preview receipt schema; expected schema 1.');
+    }
+    strictKeys(value, [
+        'schemaVersion', 'kind', 'projectRoot', 'projectKey', 'receiptId', 'issuedAt', 'variants'
+    ], 'Preview receipt');
+    if (value.kind !== 'liftoff-update-preview' || !Array.isArray(value.variants))
+        invalid('Invalid preview receipt kind or variants.');
+    const receipt = createUpdatePreviewReceipt(value.variants.map(validateUpdatePreviewDescriptor), {
+        receiptId: text(value.receiptId, 'Preview receiptId'),
+        issuedAt: text(value.issuedAt, 'Preview issuedAt')
+    });
+    if (value.projectRoot !== receipt.projectRoot || value.projectKey !== receipt.projectKey) {
+        invalid('Preview receipt project identity is inconsistent.');
+    }
+    if (options.projectRoot !== undefined &&
+        receipt.projectRoot !== normalizeUpdatePreviewProjectRoot(options.projectRoot)) {
+        throw new UpdatePreviewError('preview-mismatch', `Preview belongs to a different project or worktree. Run ${formatUpdateCommand(options.projectRoot, 'check')}.`);
+    }
+    if (options.now !== undefined &&
+        (!Number.isFinite(options.now.getTime()) || Date.parse(receipt.issuedAt) > options.now.getTime())) {
+        invalid('Preview receipt is dated in the future or the current clock is invalid.');
+    }
+    return receipt;
+}
+export function matchUpdatePreviewReceipt(receipt, currentDescriptor) {
+    const current = validateUpdatePreviewDescriptor(currentDescriptor);
+    const validated = validateUpdatePreviewReceipt(receipt, { projectRoot: current.projectRoot });
+    const matched = validated.variants.find((variant) => variant.mode === current.mode);
+    if (!matched || matched.fingerprint !== current.fingerprint) {
+        throw new UpdatePreviewError('preview-mismatch', `The ${current.mode} preview is missing or stale for the current inputs, target, or operations. Run ${formatUpdateCommand(current.projectRoot, 'check')}.`);
+    }
+    return current;
+}
+//# sourceMappingURL=preview.js.map

package/dist/application/update/preview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview.js","sourceRoot":"","sources":["../../../src/application/update/preview.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,sDAAsD,CAAC;AACjG,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAC5C,MAAM,CAAC,MAAM,2BAA2B,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAW5G,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACtB,IAAI;IAAzB,YAAqB,IAA4B,EAAE,OAAe,EAAE,OAAsB;QACxF,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBADL,IAAI;QAEvB,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAqCD,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,gBAAgB,GAAG,iEAAiE,CAAC;AAE3F,SAAS,OAAO,CAAC,OAAe;IAC9B,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,KAA8B,EAAE,IAAuB,EAAE,KAAa;IACxF,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAChG,OAAO,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtF,OAAO,CAAC,GAAG,KAAK,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,GAAG,KAAK,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAAa;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IAC/F,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACxF,OAAO,CAAC,iEAAiE,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;IAC9C,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;QACtD,CAAC,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,OAAO,CAAC,mEAAmE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;AACpH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,WAAmB;IACzD,OAAO,eAAe,CAAC;QACrB,aAAa,EAAE,0BAA0B;QACzC,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,iCAAiC,CAAC,WAAW,CAAC;KAC5D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,SAAS,GAAG,IAAI,GAAG,EAAU;IACvE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO;IACtF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,CAAC,yDAAyD,CAAC,CAAC;IACpH,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,0CAA0C,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAC7E,OAAO,CAAC,oEAAoE,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;QAC1E,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,CAAC,qEAAqE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,+CAA+C,CAAC,CAAC;IACzG,MAAM,UAAU,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC;aAC3F,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO,CAAC,gFAAgF,CAAC,CAAC;IAC5F,CAAC;IACD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,QAAQ;YAAE,SAAS;QACvD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC9D,OAAO,CAAC,kEAAkE,CAAC,CAAC;QAC9E,CAAC;QACD,kBAAkB,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAChD,CAAC;IACD,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAmD;IAChF,MAAM,WAAW,GAAG,iCAAiC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IACjE,IAAI,CAAC,sDAAsD,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7E,OAAO,CAAC,iDAAiD,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,CAAC,uCAAuC,CAAC,CAAC;IACxG,MAAM,MAAM,GAAG;QACb,WAAW;QACX,UAAU;QACV,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,uBAAuB,CAAC;QACjE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,uBAAuB,CAAC;QACjE,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,2BAA2B,CAAC;KAC9E,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,MAAM;QACT,WAAW,EAAE,eAAe,CAAC;YAC3B,aAAa,EAAE,0BAA0B;YACzC,IAAI,EAAE,qBAAqB;YAC3B,GAAG,MAAM;SACV,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAyB;IACrE,uFAAuF;IACvF,OAAO,qBAAqB,CAAC;QAC3B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;QAC1C,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;QAC1C,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC;KACnD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAAc;IAC5D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,uCAAuC,CAAC,CAAC;IACvE,UAAU,CAAC,KAAK,EAAE;QAChB,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa;KACvG,EAAE,oBAAoB,CAAC,CAAC;IACzB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,CAAC,uCAAuC,CAAC,CAAC;IACxG,MAAM,UAAU,GAAG,qBAAqB,CAAC;QACvC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,sBAAsB,CAAC;QAC5D,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,qBAAqB,CAAC;QACzD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,uBAAuB,CAAC;QACjE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,uBAAuB,CAAC;QACjE,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,2BAA2B,CAAC;KAC9E,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QACjG,OAAO,CAAC,2EAA2E,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,WAA+C,EAC/C,QAA+B;IAE/B,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,uDAAuD,CAAC,CAAC;IACvH,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,+BAA+B,CAAC;SAC9D,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC9E,OAAO,CAAC,oDAAoD,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACrH,OAAO,CAAC,0EAA0E,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,6CAA6C,CAAC,CAAC;IACvG,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACzF,OAAO,CAAC,gDAAgD,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,0BAA0B;QACzC,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,uBAAuB,CAAC,KAAK,CAAC,WAAW,CAAC;QACtD,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAc,EACd,OAAO,GAAyC,EAAE;IAElD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,aAAa,KAAK,0BAA0B,EAAE,CAAC;QACvD,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,mEAAmE,CAAC,CAAC;IAC3H,CAAC;IACD,UAAU,CAAC,KAAK,EAAE;QAChB,eAAe,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU;KAC1F,EAAE,iBAAiB,CAAC,CAAC;IACtB,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,2CAA2C,CAAC,CAAC;IACpI,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,+BAA+B,CAAC,EAAE;QAC9F,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC;QACrD,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC;KACnD,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;QACzF,OAAO,CAAC,mDAAmD,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;QACjC,OAAO,CAAC,WAAW,KAAK,iCAAiC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAC7C,2DAA2D,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;QACzB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACtG,OAAO,CAAC,yEAAyE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAgB,EAChB,iBAA0C;IAE1C,MAAM,OAAO,GAAG,+BAA+B,CAAC,iBAAiB,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,4BAA4B,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5D,MAAM,IAAI,kBAAkB,CAC1B,kBAAkB,EAClB,OAAO,OAAO,CAAC,IAAI,mFAAmF,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,CAC3J,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/application/update/protected-source.d.ts

@@ -0,0 +1,25 @@
+import type { ExternalCommand } from '../../domain/project/contracts.js';
+import type { RunCommandOptions } from '../../process-runner.js';
+export interface RetainedProjectInput {
+    pathParts: string[];
+    digest: string;
+    mode: number;
+}
+export declare const localValidationOutputPolicy: readonly [{
+    readonly executable: 'npm';
+    readonly cwd: readonly ['backend'];
+    readonly outputs: readonly [readonly ['backend', 'dist'], readonly ['backend', 'build'], readonly ['backend', 'out'], readonly ['backend', 'coverage'], readonly ['backend', '.cache']];
+}, {
+    readonly executable: 'npm';
+    readonly cwd: readonly ['frontend'];
+    readonly outputs: readonly [readonly ['frontend', 'dist'], readonly ['frontend', 'build'], readonly ['frontend', 'out'], readonly ['frontend', 'coverage'], readonly ['frontend', '.next'], readonly ['frontend', '.cache']];
+}, {
+    readonly executable: 'uv';
+    readonly cwd: readonly [];
+    readonly outputs: readonly [readonly ['.coverage'], readonly ['coverage.xml'], readonly ['htmlcov']];
+}];
+export declare function isRetainedProjectInput(parts: readonly string[]): boolean;
+export declare function captureRetainedProjectInputs(projectRoot: string): Promise<RetainedProjectInput[]>;
+export declare function changedRetainedProjectInputs(expected: readonly RetainedProjectInput[], actual: readonly RetainedProjectInput[]): string[];
+export declare function outputsForLocalCommand(projectRoot: string, command: ExternalCommand, options?: RunCommandOptions): readonly (readonly string[])[];
+export declare function acceptDeclaredCommandOutputs(expected: readonly RetainedProjectInput[], actual: readonly RetainedProjectInput[], outputs: readonly (readonly string[])[]): RetainedProjectInput[];