@msn-control/liftoff 0.11.1 → 0.11.2

package/dist/application/update/output.js

@@ -0,0 +1,182 @@
+import { manifestDisplayPath } from '../../domain/project/paths.js';
+import { liftoffVersion } from '../../version.js';
+import { isUnownedUpdateConflict, provisioningJson } from './planning.js';
+import { entryDisplay, entryMarker, manifestChanges } from './reporting.js';
+import { formatUpdateCommand } from './command-guidance.js';
+import { commandShellForPlatform, formatShellCommand } from '../../adapters/process/shell-command.js';
+export const updateReportSchemaVersion = 3;
+export function buildUpdateReport(input, inspection, writePlan) {
+    const entries = (inspection?.entries ?? [])
+        .filter((entry) => entry.status !== 'unchanged' || entry.refreshHash)
+        .map((entry) => ({
+        logicalName: entry.logicalName,
+        status: entry.status,
+        path: manifestDisplayPath(entry.pathParts),
+        ...(entry.previousPathParts ? { previousPath: manifestDisplayPath(entry.previousPathParts) } : {}),
+        ...(entry.status === 'retired' || entry.status === 'retired-conflict'
+            ? { fileDeleted: entry.destinationOccupied !== false } : {}),
+        reason: entry.reason
+    }));
+    const written = input.committed
+        ? (writePlan?.written ?? []).map((entry) => manifestDisplayPath(entry.pathParts))
+        : [];
+    const removed = input.committed ? (writePlan?.retired ?? []).map((entry) => ({
+        logicalName: entry.logicalName,
+        status: entry.status === 'retired-conflict' ? 'force-retired' :
+            entry.destinationOccupied === false ? 'retired-absent' : 'retired',
+        path: manifestDisplayPath(entry.pathParts),
+        fileDeleted: entry.destinationOccupied !== false,
+        reason: entry.reason
+    })) : [];
+    const skipped = (writePlan?.skipped ?? []).map((entry) => ({
+        logicalName: entry.logicalName, status: entry.status,
+        path: manifestDisplayPath(entry.pathParts), reason: entry.reason
+    }));
+    const manifest = input.committed ? writePlan?.nextManifest : inspection?.manifest;
+    const activationIdentity = manifest && manifest.governance.profile !== 'none' &&
+        manifest.governance.profile !== 'unspecified' ? manifest.governance.activationIdentity ?? null : null;
+    const migration = input.migration ?? {
+        status: 'not-required', sourceIdentity: null, targetIdentity: null, historyPaths: [], issues: []
+    };
+    const { migration: _migration, ...reportInput } = input;
+    return {
+        schemaVersion: updateReportSchemaVersion,
+        scope: 'project-update',
+        ...reportInput,
+        cliVersion: liftoffVersion,
+        projectVersion: inspection?.manifest.liftoffVersion ?? null,
+        plans: input.plans ?? [],
+        receipt: input.receipt ?? { status: 'not-required' },
+        committed: input.committed ?? false,
+        entries,
+        written,
+        removed,
+        skipped,
+        summary: inspection?.summary ?? null,
+        managedCore: { entries, written, removed, skipped, summary: inspection?.summary ?? null },
+        provisioning: inspection ? provisioningJson(inspection.provisioningPlans) : [],
+        ownershipMigrationPending: inspection?.ownershipMigrationPending ?? false,
+        manifestChanges: inspection && writePlan
+            ? manifestChanges(inspection.manifest, writePlan.nextManifest)
+            : inspection?.plannedManifestChanges ?? [],
+        activationIdentity,
+        activationMigration: migration,
+        activationStateMigration: migration,
+        revalidation: input.revalidation ?? { status: 'not-required', nextPhase: null, issues: [] },
+        reconciliation: inspection?.reconciliation ?? null,
+        ...(input.mode === 'check' ? { projectBytesWritten: 0 } : {})
+    };
+}
+function migrationReviewDetails(migration) {
+    if (migration.status === 'not-required')
+        return [];
+    return [
+        `Status: ${migration.status}; original history is not executable proof.`,
+        ...(migration.sourceIdentity ? [`Source activation identity: ${JSON.stringify(migration.sourceIdentity)}`] : []),
+        ...(migration.targetIdentity ? [`Target activation identity: ${JSON.stringify(migration.targetIdentity)}`] : []),
+        ...(migration.snapshotId ? [`History snapshot: ${migration.snapshotId}`] : []),
+        ...migration.historyPaths.map((entry) => `Preserve ${entry}`),
+        ...(migration.operations ?? []).map((entry) => `${entry.type} ${JSON.stringify(entry.path)}`),
+        ...migration.issues
+    ];
+}
+function revalidationReviewDetails(revalidation) {
+    if (revalidation.status === 'not-required')
+        return [];
+    const preview = revalidation.preview;
+    const shell = commandShellForPlatform(process.platform);
+    const commandDetails = (entry) => `${formatShellCommand(entry.command, shell)} (directory: ${JSON.stringify(entry.cwdPathParts.join('/') || '.')}); environment overrides: ${JSON.stringify(entry.env)}`;
+    return [
+        `Status: ${revalidation.status}`,
+        ...revalidation.issues.map((issue) => `Known revalidation gap: ${issue}`),
+        ...(revalidation.issues.length ? ['Approval may commit v2 while these known revalidation gaps remain blocked.'] : []),
+        ...(preview ? [
+            `Commands are relative to project: ${JSON.stringify(preview.projectRoot)}`,
+            `Target activation identity: ${JSON.stringify(preview.targetIdentity)}`,
+            ...preview.effects,
+            ...preview.inspectionCommands.map((entry) => `Read-only inspection: ${commandDetails(entry)}`),
+            ...preview.phases.flatMap((phase) => phase.commands.map((entry) => `${phase.phaseId}: ${commandDetails(entry)}`)),
+            ...preview.reusedPhases.map((phase) => `Reuse fresh ${phase.phaseId} evidence ${phase.evidenceId} (header: ${phase.headerDigest}).`),
+            `Record writes: ${preview.recordWrites.plans}; ${preview.recordWrites.evidence}; ${preview.recordWrites.state}`,
+            preview.recordWrites.limit,
+            `Command limits: ${preview.commandLimits.timeoutMs} ms; ${preview.commandLimits.maxOutputBytes} output bytes.`,
+            ...preview.outputPolicy.map((policy) => `Generated-output policy for ${policy.executable} from ${JSON.stringify(policy.cwd.join('/') || '.')}: ${policy.outputs.map((parts) => JSON.stringify(parts.join('/'))).join(', ')}; only after a listed matching command executes.`),
+            preview.boundary
+        ] : []),
+        ...(revalidation.nextPhase ? [`Next incomplete phase: ${revalidation.nextPhase}`] : [])
+    ];
+}
+export function renderUpdatePreview(presentation, inspection, plans, migration, revalidation, receiptPath) {
+    presentation.definitions('Project versions', [
+        { label: 'Liftoff CLI', value: liftoffVersion },
+        { label: 'Project generated by', value: inspection.manifest.liftoffVersion }
+    ]);
+    const visible = inspection.entries.filter((entry) => entry.status !== 'unchanged' || entry.refreshHash);
+    if (visible.length) {
+        presentation.table('Liftoff core drift', ['Change', 'Artifact', 'Reason'], visible.map((entry) => [entryMarker(entry), entryDisplay(entry), entry.reason]));
+    }
+    const unowned = inspection.entries.filter((entry) => isUnownedUpdateConflict(entry, inspection.oldByName));
+    if (unowned.length) {
+        presentation.bullets('Unowned destinations remain protected', unowned.map((entry) => `${entryDisplay(entry)}: resolve this unowned destination manually; --force cannot overwrite it`));
+    }
+    for (const group of inspection.provisioningPlans) {
+        presentation.bullets(`Project component provisioning: ${group.group}`, [
+            ...(group.reason ? [group.reason] : []),
+            ...group.entries.map((entry) => `${entry.status} ${manifestDisplayPath(entry.rendered.pathParts)}  ${entry.reason}`)
+        ]);
+    }
+    if (inspection.ownershipMigrationPending) {
+        presentation.bullets('Manifest maintenance', ['Release legacy project artifacts into provenance; no production file will be written.']);
+    }
+    if (migration.status !== 'not-required') {
+        presentation.bullets('Activation migration', migrationReviewDetails(migration));
+    }
+    if (revalidation.status !== 'not-required') {
+        presentation.bullets('Local revalidation', revalidationReviewDetails(revalidation));
+    }
+    for (const plan of plans) {
+        presentation.definitions(plan.mode === 'force' ? 'Separately reviewed forced plan' : 'Reviewed update plan', [
+            { label: 'Fingerprint', value: plan.fingerprint },
+            { label: 'Static file operations', value: String(plan.writeCount) },
+            { label: 'Eligible', value: plan.eligible ? 'yes; explicit approval still required' : 'no' }
+        ]);
+        if (plan.blockers.length)
+            presentation.bullets('Plan blockers', plan.blockers);
+    }
+    if (receiptPath) {
+        presentation.definitions('External preview receipt', [
+            { label: 'Location', value: receiptPath },
+            { label: 'Project bytes', value: 'unchanged; this receipt is not approval' }
+        ]);
+    }
+    if (plans.some((plan) => plan.eligible && plan.writeCount > 0)) {
+        presentation.command(formatUpdateCommand(inspection.projectRoot));
+        const hasForceableConflict = inspection.entries.some((entry) => !isUnownedUpdateConflict(entry, inspection.oldByName) &&
+            (entry.status === 'conflict' || entry.status === 'retired-conflict' ||
+                entry.status === 'moved' && !entry.cleanMove));
+        if (hasForceableConflict && plans.some((plan) => plan.mode === 'force' && plan.eligible && plan.writeCount > 0)) {
+            presentation.command(formatUpdateCommand(inspection.projectRoot, 'force'));
+        }
+    }
+}
+export function renderUpdateSkipped(presentation, inspection, writePlan) {
+    if (!writePlan.skipped.length)
+        return;
+    presentation.bullets('Skipped Liftoff core conflicts', writePlan.skipped.map((entry) => isUnownedUpdateConflict(entry, inspection.oldByName)
+        ? `protected unowned destination ${entryDisplay(entry)}: ${entry.reason}; --force cannot overwrite it`
+        : `${entryDisplay(entry)}: ${entry.reason}; review the separate forced plan before any overwrite`));
+}
+export function renderUpdateApprovalScope(presentation, jsonMode, plan, writePlan, migration, revalidation) {
+    const lines = [
+        `Effective ${plan.mode} plan: ${plan.fingerprint}`,
+        ...writePlan.mutations.map((mutation) => `${mutation.type} ${JSON.stringify(manifestDisplayPath(mutation.pathParts))}`),
+        ...migrationReviewDetails(migration),
+        ...revalidationReviewDetails(revalidation),
+        'Only this exact local plan is authorized; future provider actions require separate approval.'
+    ];
+    if (jsonMode)
+        presentation.rawStderr(`${lines.join('\n')}\n`);
+    else
+        presentation.bullets('Review before approval', lines);
+}
+//# sourceMappingURL=output.js.map

package/dist/application/update/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../../src/application/update/output.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEpE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGlD,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAG5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAEtG,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAU,CAAC;AA8CpD,MAAM,UAAU,iBAAiB,CAC/B,KAAwB,EACxB,UAA6B,EAC7B,SAA2B;IAE3B,MAAM,OAAO,GAAG,CAAC,UAAU,EAAE,OAAO,IAAI,EAAE,CAAC;SACxC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC;SACpE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC;QAC1C,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClG,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,kBAAkB;YACnE,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,mBAAmB,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC,CAAC;IACN,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS;QAC7B,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjF,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3E,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YAC7D,KAAK,CAAC,mBAAmB,KAAK,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;QACpE,IAAI,EAAE,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC;QAC1C,WAAW,EAAE,KAAK,CAAC,mBAAmB,KAAK,KAAK;QAChD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzD,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM;QACpD,IAAI,EAAE,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM;KACjE,CAAC,CAAC,CAAC;IACJ,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC;IAClF,MAAM,kBAAkB,GAAG,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,KAAK,MAAM;QAC3E,QAAQ,CAAC,UAAU,CAAC,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxG,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI;QACnC,MAAM,EAAE,cAAuB,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;KAC1G,CAAC;IACF,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,WAAW,EAAE,GAAG,KAAK,CAAC;IACxD,OAAO;QACL,aAAa,EAAE,yBAAyB;QACxC,KAAK,EAAE,gBAAgB;QACvB,GAAG,WAAW;QACd,UAAU,EAAE,cAAc;QAC1B,cAAc,EAAE,UAAU,EAAE,QAAQ,CAAC,cAAc,IAAI,IAAI;QAC3D,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE;QACpD,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK;QACnC,OAAO;QACP,OAAO;QACP,OAAO;QACP,OAAO;QACP,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,IAAI;QACpC,WAAW,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,IAAI,EAAE;QACzF,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE;QAC9E,yBAAyB,EAAE,UAAU,EAAE,yBAAyB,IAAI,KAAK;QACzE,eAAe,EAAE,UAAU,IAAI,SAAS;YACtC,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,YAAY,CAAC;YAC9D,CAAC,CAAC,UAAU,EAAE,sBAAsB,IAAI,EAAE;QAC5C,kBAAkB;QAClB,mBAAmB,EAAE,SAAS;QAC9B,wBAAwB,EAAE,SAAS;QACnC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QAC3F,cAAc,EAAE,UAAU,EAAE,cAAc,IAAI,IAAI;QAClD,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,SAAiC;IAC/D,IAAI,SAAS,CAAC,MAAM,KAAK,cAAc;QAAE,OAAO,EAAE,CAAC;IACnD,OAAO;QACL,WAAW,SAAS,CAAC,MAAM,6CAA6C;QACxE,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,+BAA+B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChH,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,+BAA+B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChH,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,qBAAqB,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,KAAK,EAAE,CAAC;QAC7D,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7F,GAAG,SAAS,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,YAAuC;IACxE,IAAI,YAAY,CAAC,MAAM,KAAK,cAAc;QAAE,OAAO,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;IACrC,MAAM,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,CAAC,KAA6D,EAAE,EAAE,CACvF,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IACzK,OAAO;QACL,WAAW,YAAY,CAAC,MAAM,EAAE;QAChC,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,KAAK,EAAE,CAAC;QACzE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,4EAA4E,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrH,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YACZ,qCAAqC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE;YAC1E,+BAA+B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE;YACvE,GAAG,OAAO,CAAC,OAAO;YAClB,GAAG,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9F,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAClC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,KAAK,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAC5E;YACD,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACpC,eAAe,KAAK,CAAC,OAAO,aAAa,KAAK,CAAC,UAAU,aAAa,KAAK,CAAC,YAAY,IAAI,CAC7F;YACD,kBAAkB,OAAO,CAAC,YAAY,CAAC,KAAK,KAAK,OAAO,CAAC,YAAY,CAAC,QAAQ,KAAK,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE;YAC/G,OAAO,CAAC,YAAY,CAAC,KAAK;YAC1B,mBAAmB,OAAO,CAAC,aAAa,CAAC,SAAS,QAAQ,OAAO,CAAC,aAAa,CAAC,cAAc,gBAAgB;YAC9G,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACrC,+BAA+B,MAAM,CAAC,UAAU,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,kDAAkD,CACrO;YACD,OAAO,CAAC,QAAQ;SACjB,CAAC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,0BAA0B,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACxF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,YAAiC,EACjC,UAA4B,EAC5B,KAAmC,EACnC,SAAiC,EACjC,YAAuC,EACvC,WAAoB;IAEpB,YAAY,CAAC,WAAW,CAAC,kBAAkB,EAAE;QAC3C,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE;QAC/C,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,cAAc,EAAE;KAC7E,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;IACxG,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,YAAY,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,EACvE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3G,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,YAAY,CAAC,OAAO,CAAC,uCAAuC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAClF,GAAG,YAAY,CAAC,KAAK,CAAC,0EAA0E,CACjG,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,iBAAiB,EAAE,CAAC;QACjD,YAAY,CAAC,OAAO,CAAC,mCAAmC,KAAK,CAAC,KAAK,EAAE,EAAE;YACrE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;SACrH,CAAC,CAAC;IACL,CAAC;IACD,IAAI,UAAU,CAAC,yBAAyB,EAAE,CAAC;QACzC,YAAY,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,uFAAuF,CAAC,CAAC,CAAC;IAC1I,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACxC,YAAY,CAAC,OAAO,CAAC,sBAAsB,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAC3C,YAAY,CAAC,OAAO,CAAC,oBAAoB,EAAE,yBAAyB,CAAC,YAAY,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,sBAAsB,EAAE;YAC3G,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE;YACjD,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;YACnE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,IAAI,EAAE;SAC7F,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,YAAY,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,YAAY,CAAC,WAAW,CAAC,0BAA0B,EAAE;YACnD,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE;YACzC,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,yCAAyC,EAAE;SAC7E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC;QAC/D,YAAY,CAAC,OAAO,CAAC,mBAAmB,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;QAClE,MAAM,oBAAoB,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7D,CAAC,uBAAuB,CAAC,KAAK,EAAE,UAAU,CAAC,SAAS,CAAC;YACrD,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,kBAAkB;gBACjE,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAChD,CAAC;QACF,IAAI,oBAAoB,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC;YAChH,YAAY,CAAC,OAAO,CAAC,mBAAmB,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,YAAiC,EACjC,UAA4B,EAC5B,SAA0B;IAE1B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO;IACtC,YAAY,CAAC,OAAO,CAAC,gCAAgC,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACrF,uBAAuB,CAAC,KAAK,EAAE,UAAU,CAAC,SAAS,CAAC;QAClD,CAAC,CAAC,iCAAiC,YAAY,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,+BAA+B;QACtG,CAAC,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,wDAAwD,CACpG,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,YAAiC,EACjC,QAAiB,EACjB,IAAuB,EACvB,SAA0B,EAC1B,SAAiC,EACjC,YAAuC;IAEvC,MAAM,KAAK,GAAG;QACZ,aAAa,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC,WAAW,EAAE;QAClD,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACvH,GAAG,sBAAsB,CAAC,SAAS,CAAC;QACpC,GAAG,yBAAyB,CAAC,YAAY,CAAC;QAC1C,8FAA8F;KAC/F,CAAC;IACF,IAAI,QAAQ;QAAE,YAAY,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;QACzD,YAAY,CAAC,OAAO,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;AAC7D,CAAC"}

package/dist/application/update/preview.d.ts

@@ -0,0 +1,49 @@
+export declare const updatePreviewSchemaVersion = 1;
+export declare const updatePreviewDirectoryParts: readonly string[];
+export type UpdatePreviewMode = 'normal' | 'force';
+export type UpdatePreviewErrorCode = 'preview-missing' | 'preview-invalid' | 'preview-unsupported' | 'preview-mismatch' | 'preview-storage' | 'preview-busy';
+export declare class UpdatePreviewError extends Error {
+    readonly code: UpdatePreviewErrorCode;
+    constructor(code: UpdatePreviewErrorCode, message: string, options?: ErrorOptions);
+}
+export interface UpdatePreviewInput {
+    /** The real project root returned by the filesystem adapter, not a display alias. */
+    projectRoot: string;
+    cliVersion: string;
+    mode: UpdatePreviewMode;
+    source: unknown;
+    target: unknown;
+    operations: unknown;
+}
+export interface UpdatePreviewDescriptor {
+    readonly projectRoot: string;
+    readonly cliVersion: string;
+    readonly mode: UpdatePreviewMode;
+    readonly sourceDigest: string;
+    readonly targetDigest: string;
+    readonly operationsDigest: string;
+    readonly fingerprint: string;
+}
+export interface UpdatePreviewReceipt {
+    readonly schemaVersion: typeof updatePreviewSchemaVersion;
+    readonly kind: 'liftoff-update-preview';
+    readonly projectRoot: string;
+    readonly projectKey: string;
+    readonly receiptId: string;
+    readonly issuedAt: string;
+    readonly variants: readonly UpdatePreviewDescriptor[];
+}
+export interface UpdatePreviewIssuance {
+    receiptId: string;
+    issuedAt: string;
+}
+export declare function normalizeUpdatePreviewProjectRoot(value: string): string;
+export declare function updatePreviewProjectKey(projectRoot: string): string;
+export declare function createUpdatePreviewDescriptor(input: UpdatePreviewInput): UpdatePreviewDescriptor;
+export declare function validateUpdatePreviewDescriptor(value: unknown): UpdatePreviewDescriptor;
+export declare function createUpdatePreviewReceipt(descriptors: readonly UpdatePreviewDescriptor[], issuance: UpdatePreviewIssuance): UpdatePreviewReceipt;
+export declare function validateUpdatePreviewReceipt(value: unknown, options?: {
+    projectRoot?: string;
+    now?: Date;
+}): UpdatePreviewReceipt;
+export declare function matchUpdatePreviewReceipt(receipt: unknown, currentDescriptor: UpdatePreviewDescriptor): UpdatePreviewDescriptor;

package/dist/application/update/preview.js

@@ -0,0 +1,220 @@
+import path from 'node:path';
+import { canonicalSha256, isRecord } from '../../domain/governance/activation/canonical-json.js';
+import { formatUpdateCommand } from './command-guidance.js';
+export const updatePreviewSchemaVersion = 1;
+export const updatePreviewDirectoryParts = Object.freeze(['liftoff', 'update-previews']);
+export class UpdatePreviewError extends Error {
+    code;
+    constructor(code, message, options) {
+        super(message, options);
+        this.code = code;
+        this.name = 'UpdatePreviewError';
+    }
+}
+const digestPattern = /^[0-9a-f]{64}$/u;
+const receiptIdPattern = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/u;
+function invalid(message) {
+    throw new UpdatePreviewError('preview-invalid', message);
+}
+function strictKeys(value, keys, label) {
+    if (Object.keys(value).length !== keys.length || keys.some((key) => !Object.hasOwn(value, key))) {
+        invalid(`${label} has missing or unrecognized fields.`);
+    }
+}
+function text(value, label) {
+    if (typeof value !== 'string' || value.length === 0 || /[\u0000-\u001f]/u.test(value)) {
+        invalid(`${label} must be a nonempty string without control characters.`);
+    }
+    return value;
+}
+function digest(value, label) {
+    if (typeof value !== 'string' || !digestPattern.test(value)) {
+        invalid(`${label} must be a complete lowercase SHA-256 fingerprint.`);
+    }
+    return value;
+}
+export function normalizeUpdatePreviewProjectRoot(value) {
+    const root = text(value, 'Preview project root');
+    const paths = /^[a-z]:[\\/]/iu.test(root) || root.startsWith('\\\\') ? path.win32 : path.posix;
+    if (!paths.isAbsolute(root) || root.startsWith('\\\\?\\') || root.startsWith('\\\\.\\')) {
+        invalid('Preview project root must be an absolute canonical native path.');
+    }
+    const normalized = paths.normalize(root);
+    const boundary = paths.parse(normalized).root;
+    if (paths === path.win32 && !/^[a-z]:\\$/iu.test(boundary) &&
+        !/^\\\\[^\\]+\\[^\\]+\\$/u.test(boundary)) {
+        invalid('Preview project root must include its Windows drive or UNC share.');
+    }
+    return normalized === boundary ? boundary : normalized.endsWith(paths.sep) ? normalized.slice(0, -1) : normalized;
+}
+export function updatePreviewProjectKey(projectRoot) {
+    return canonicalSha256({
+        schemaVersion: updatePreviewSchemaVersion,
+        kind: 'liftoff-update-project',
+        projectRoot: normalizeUpdatePreviewProjectRoot(projectRoot)
+    });
+}
+function assertSemanticJson(value, ancestors = new Set()) {
+    if (value === null || typeof value === 'string' || typeof value === 'boolean')
+        return;
+    if (typeof value === 'number' && Number.isFinite(value))
+        return;
+    if (typeof value !== 'object' || value === null)
+        invalid('Preview semantics must contain only finite JSON values.');
+    if (ancestors.has(value))
+        invalid('Preview semantics cannot contain cycles.');
+    if (Array.isArray(value) && Object.getPrototypeOf(value) !== Array.prototype) {
+        invalid('Preview semantics must use plain JSON arrays, not runtime objects.');
+    }
+    if (!Array.isArray(value) && Object.getPrototypeOf(value) !== Object.prototype &&
+        Object.getPrototypeOf(value) !== null) {
+        invalid('Preview semantics must use plain JSON objects, not runtime objects.');
+    }
+    if (Object.getOwnPropertySymbols(value).length)
+        invalid('Preview semantics cannot contain symbol keys.');
+    const properties = Object.getOwnPropertyDescriptors(value);
+    const keys = Object.keys(properties);
+    if (Array.isArray(value) &&
+        (keys.length !== value.length + 1 || Array.from({ length: value.length }, (_, index) => index)
+            .some((index) => !Object.hasOwn(properties, String(index))))) {
+        invalid('Preview semantics cannot contain sparse arrays or additional array properties.');
+    }
+    ancestors.add(value);
+    for (const key of keys) {
+        if (Array.isArray(value) && key === 'length')
+            continue;
+        const property = properties[key];
+        if (!Object.hasOwn(property, 'value') || !property.enumerable) {
+            invalid('Preview semantics cannot contain accessors or hidden properties.');
+        }
+        assertSemanticJson(property.value, ancestors);
+    }
+    ancestors.delete(value);
+}
+function semanticDigest(value) {
+    assertSemanticJson(value);
+    return canonicalSha256(value);
+}
+function descriptorFromDigests(input) {
+    const projectRoot = normalizeUpdatePreviewProjectRoot(input.projectRoot);
+    const cliVersion = text(input.cliVersion, 'Preview CLI version');
+    if (!/^\d+\.\d+\.\d+(?:-[0-9a-z.-]+)?(?:\+[0-9a-z.-]+)?$/iu.test(cliVersion)) {
+        invalid('Preview CLI version must be a semantic version.');
+    }
+    if (input.mode !== 'normal' && input.mode !== 'force')
+        invalid('Preview mode must be normal or force.');
+    const fields = {
+        projectRoot,
+        cliVersion,
+        mode: input.mode,
+        sourceDigest: digest(input.sourceDigest, 'Preview source digest'),
+        targetDigest: digest(input.targetDigest, 'Preview target digest'),
+        operationsDigest: digest(input.operationsDigest, 'Preview operations digest')
+    };
+    return Object.freeze({
+        ...fields,
+        fingerprint: canonicalSha256({
+            schemaVersion: updatePreviewSchemaVersion,
+            kind: 'liftoff-update-plan',
+            ...fields
+        })
+    });
+}
+export function createUpdatePreviewDescriptor(input) {
+    // Array order is retained: execution order and command argument order can be semantic.
+    return descriptorFromDigests({
+        projectRoot: input.projectRoot,
+        cliVersion: input.cliVersion,
+        mode: input.mode,
+        sourceDigest: semanticDigest(input.source),
+        targetDigest: semanticDigest(input.target),
+        operationsDigest: semanticDigest(input.operations)
+    });
+}
+export function validateUpdatePreviewDescriptor(value) {
+    if (!isRecord(value))
+        invalid('Preview descriptor must be an object.');
+    strictKeys(value, [
+        'projectRoot', 'cliVersion', 'mode', 'sourceDigest', 'targetDigest', 'operationsDigest', 'fingerprint'
+    ], 'Preview descriptor');
+    if (value.mode !== 'normal' && value.mode !== 'force')
+        invalid('Preview mode must be normal or force.');
+    const descriptor = descriptorFromDigests({
+        projectRoot: text(value.projectRoot, 'Preview project root'),
+        cliVersion: text(value.cliVersion, 'Preview CLI version'),
+        mode: value.mode,
+        sourceDigest: digest(value.sourceDigest, 'Preview source digest'),
+        targetDigest: digest(value.targetDigest, 'Preview target digest'),
+        operationsDigest: digest(value.operationsDigest, 'Preview operations digest')
+    });
+    if (descriptor.projectRoot !== value.projectRoot || descriptor.fingerprint !== value.fingerprint) {
+        invalid('Preview descriptor fingerprint or canonical project root is inconsistent.');
+    }
+    return descriptor;
+}
+export function createUpdatePreviewReceipt(descriptors, issuance) {
+    if (descriptors.length < 1 || descriptors.length > 2)
+        invalid('A preview receipt needs one or two eligible variants.');
+    const variants = descriptors.map(validateUpdatePreviewDescriptor)
+        .sort((left, right) => left.mode === right.mode ? 0 : left.mode === 'normal' ? -1 : 1);
+    const first = variants[0];
+    if (new Set(variants.map((variant) => variant.mode)).size !== variants.length) {
+        invalid('A preview receipt cannot repeat an effective mode.');
+    }
+    if (variants.some((variant) => variant.projectRoot !== first.projectRoot || variant.cliVersion !== first.cliVersion)) {
+        invalid('Preview variants must bind the same canonical project and installed CLI.');
+    }
+    if (!receiptIdPattern.test(issuance.receiptId))
+        invalid('Preview receiptId must be a lowercase UUID.');
+    const issuedAt = Date.parse(issuance.issuedAt);
+    if (!Number.isFinite(issuedAt) || new Date(issuedAt).toISOString() !== issuance.issuedAt) {
+        invalid('Preview issuedAt must be an ISO UTC timestamp.');
+    }
+    return Object.freeze({
+        schemaVersion: updatePreviewSchemaVersion,
+        kind: 'liftoff-update-preview',
+        projectRoot: first.projectRoot,
+        projectKey: updatePreviewProjectKey(first.projectRoot),
+        receiptId: issuance.receiptId,
+        issuedAt: issuance.issuedAt,
+        variants: Object.freeze(variants)
+    });
+}
+export function validateUpdatePreviewReceipt(value, options = {}) {
+    if (!isRecord(value))
+        invalid('Preview receipt must be an object.');
+    if (value.schemaVersion !== updatePreviewSchemaVersion) {
+        throw new UpdatePreviewError('preview-unsupported', 'Unsupported or missing preview receipt schema; expected schema 1.');
+    }
+    strictKeys(value, [
+        'schemaVersion', 'kind', 'projectRoot', 'projectKey', 'receiptId', 'issuedAt', 'variants'
+    ], 'Preview receipt');
+    if (value.kind !== 'liftoff-update-preview' || !Array.isArray(value.variants))
+        invalid('Invalid preview receipt kind or variants.');
+    const receipt = createUpdatePreviewReceipt(value.variants.map(validateUpdatePreviewDescriptor), {
+        receiptId: text(value.receiptId, 'Preview receiptId'),
+        issuedAt: text(value.issuedAt, 'Preview issuedAt')
+    });
+    if (value.projectRoot !== receipt.projectRoot || value.projectKey !== receipt.projectKey) {
+        invalid('Preview receipt project identity is inconsistent.');
+    }
+    if (options.projectRoot !== undefined &&
+        receipt.projectRoot !== normalizeUpdatePreviewProjectRoot(options.projectRoot)) {
+        throw new UpdatePreviewError('preview-mismatch', `Preview belongs to a different project or worktree. Run ${formatUpdateCommand(options.projectRoot, 'check')}.`);
+    }
+    if (options.now !== undefined &&
+        (!Number.isFinite(options.now.getTime()) || Date.parse(receipt.issuedAt) > options.now.getTime())) {
+        invalid('Preview receipt is dated in the future or the current clock is invalid.');
+    }
+    return receipt;
+}
+export function matchUpdatePreviewReceipt(receipt, currentDescriptor) {
+    const current = validateUpdatePreviewDescriptor(currentDescriptor);
+    const validated = validateUpdatePreviewReceipt(receipt, { projectRoot: current.projectRoot });
+    const matched = validated.variants.find((variant) => variant.mode === current.mode);
+    if (!matched || matched.fingerprint !== current.fingerprint) {
+        throw new UpdatePreviewError('preview-mismatch', `The ${current.mode} preview is missing or stale for the current inputs, target, or operations. Run ${formatUpdateCommand(current.projectRoot, 'check')}.`);
+    }
+    return current;
+}
+//# sourceMappingURL=preview.js.map

package/dist/application/update/preview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview.js","sourceRoot":"","sources":["../../../src/application/update/preview.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,sDAAsD,CAAC;AACjG,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAC5C,MAAM,CAAC,MAAM,2BAA2B,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAW5G,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACtB,IAAI;IAAzB,YAAqB,IAA4B,EAAE,OAAe,EAAE,OAAsB;QACxF,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBADL,IAAI;QAEvB,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAqCD,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,gBAAgB,GAAG,iEAAiE,CAAC;AAE3F,SAAS,OAAO,CAAC,OAAe;IAC9B,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,KAA8B,EAAE,IAAuB,EAAE,KAAa;IACxF,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAChG,OAAO,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtF,OAAO,CAAC,GAAG,KAAK,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,GAAG,KAAK,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAAa;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IAC/F,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACxF,OAAO,CAAC,iEAAiE,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;IAC9C,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;QACtD,CAAC,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,OAAO,CAAC,mEAAmE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;AACpH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,WAAmB;IACzD,OAAO,eAAe,CAAC;QACrB,aAAa,EAAE,0BAA0B;QACzC,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,iCAAiC,CAAC,WAAW,CAAC;KAC5D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,SAAS,GAAG,IAAI,GAAG,EAAU;IACvE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO;IACtF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,CAAC,yDAAyD,CAAC,CAAC;IACpH,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,0CAA0C,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAC7E,OAAO,CAAC,oEAAoE,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;QAC1E,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,CAAC,qEAAqE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,+CAA+C,CAAC,CAAC;IACzG,MAAM,UAAU,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC;aAC3F,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO,CAAC,gFAAgF,CAAC,CAAC;IAC5F,CAAC;IACD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,QAAQ;YAAE,SAAS;QACvD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC9D,OAAO,CAAC,kEAAkE,CAAC,CAAC;QAC9E,CAAC;QACD,kBAAkB,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAChD,CAAC;IACD,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAmD;IAChF,MAAM,WAAW,GAAG,iCAAiC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IACjE,IAAI,CAAC,sDAAsD,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7E,OAAO,CAAC,iDAAiD,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,CAAC,uCAAuC,CAAC,CAAC;IACxG,MAAM,MAAM,GAAG;QACb,WAAW;QACX,UAAU;QACV,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,uBAAuB,CAAC;QACjE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,uBAAuB,CAAC;QACjE,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,2BAA2B,CAAC;KAC9E,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,MAAM;QACT,WAAW,EAAE,eAAe,CAAC;YAC3B,aAAa,EAAE,0BAA0B;YACzC,IAAI,EAAE,qBAAqB;YAC3B,GAAG,MAAM;SACV,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAyB;IACrE,uFAAuF;IACvF,OAAO,qBAAqB,CAAC;QAC3B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;QAC1C,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;QAC1C,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC;KACnD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAAc;IAC5D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,uCAAuC,CAAC,CAAC;IACvE,UAAU,CAAC,KAAK,EAAE;QAChB,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa;KACvG,EAAE,oBAAoB,CAAC,CAAC;IACzB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,CAAC,uCAAuC,CAAC,CAAC;IACxG,MAAM,UAAU,GAAG,qBAAqB,CAAC;QACvC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,sBAAsB,CAAC;QAC5D,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,qBAAqB,CAAC;QACzD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,uBAAuB,CAAC;QACjE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,uBAAuB,CAAC;QACjE,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,2BAA2B,CAAC;KAC9E,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QACjG,OAAO,CAAC,2EAA2E,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,WAA+C,EAC/C,QAA+B;IAE/B,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,uDAAuD,CAAC,CAAC;IACvH,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,+BAA+B,CAAC;SAC9D,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC9E,OAAO,CAAC,oDAAoD,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACrH,OAAO,CAAC,0EAA0E,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,6CAA6C,CAAC,CAAC;IACvG,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACzF,OAAO,CAAC,gDAAgD,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,0BAA0B;QACzC,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,uBAAuB,CAAC,KAAK,CAAC,WAAW,CAAC;QACtD,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAc,EACd,OAAO,GAAyC,EAAE;IAElD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,aAAa,KAAK,0BAA0B,EAAE,CAAC;QACvD,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,mEAAmE,CAAC,CAAC;IAC3H,CAAC;IACD,UAAU,CAAC,KAAK,EAAE;QAChB,eAAe,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU;KAC1F,EAAE,iBAAiB,CAAC,CAAC;IACtB,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,2CAA2C,CAAC,CAAC;IACpI,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,+BAA+B,CAAC,EAAE;QAC9F,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC;QACrD,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC;KACnD,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;QACzF,OAAO,CAAC,mDAAmD,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;QACjC,OAAO,CAAC,WAAW,KAAK,iCAAiC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAC7C,2DAA2D,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;QACzB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACtG,OAAO,CAAC,yEAAyE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAgB,EAChB,iBAA0C;IAE1C,MAAM,OAAO,GAAG,+BAA+B,CAAC,iBAAiB,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,4BAA4B,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5D,MAAM,IAAI,kBAAkB,CAC1B,kBAAkB,EAClB,OAAO,OAAO,CAAC,IAAI,mFAAmF,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,CAC3J,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/application/update/protected-source.d.ts

@@ -0,0 +1,25 @@
+import type { ExternalCommand } from '../../domain/project/contracts.js';
+import type { RunCommandOptions } from '../../process-runner.js';
+export interface RetainedProjectInput {
+    pathParts: string[];
+    digest: string;
+    mode: number;
+}
+export declare const localValidationOutputPolicy: readonly [{
+    readonly executable: 'npm';
+    readonly cwd: readonly ['backend'];
+    readonly outputs: readonly [readonly ['backend', 'dist'], readonly ['backend', 'build'], readonly ['backend', 'out'], readonly ['backend', 'coverage'], readonly ['backend', '.cache']];
+}, {
+    readonly executable: 'npm';
+    readonly cwd: readonly ['frontend'];
+    readonly outputs: readonly [readonly ['frontend', 'dist'], readonly ['frontend', 'build'], readonly ['frontend', 'out'], readonly ['frontend', 'coverage'], readonly ['frontend', '.next'], readonly ['frontend', '.cache']];
+}, {
+    readonly executable: 'uv';
+    readonly cwd: readonly [];
+    readonly outputs: readonly [readonly ['.coverage'], readonly ['coverage.xml'], readonly ['htmlcov']];
+}];
+export declare function isRetainedProjectInput(parts: readonly string[]): boolean;
+export declare function captureRetainedProjectInputs(projectRoot: string): Promise<RetainedProjectInput[]>;
+export declare function changedRetainedProjectInputs(expected: readonly RetainedProjectInput[], actual: readonly RetainedProjectInput[]): string[];
+export declare function outputsForLocalCommand(projectRoot: string, command: ExternalCommand, options?: RunCommandOptions): readonly (readonly string[])[];
+export declare function acceptDeclaredCommandOutputs(expected: readonly RetainedProjectInput[], actual: readonly RetainedProjectInput[], outputs: readonly (readonly string[])[]): RetainedProjectInput[];

package/dist/application/update/protected-source.js

@@ -0,0 +1,81 @@
+import { createHash } from 'node:crypto';
+import { lstat, readdir, readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { resolveProjectPath } from '../../adapters/filesystem/project-paths.js';
+import { canonicalSha256 } from '../../domain/governance/activation/canonical-json.js';
+import { isProjectMutationReservationName } from '../../domain/governance/activation/inputs.js';
+import { reviewedUpdateTransactionPathParts } from '../../domain/project/reviewed-update-artifacts.js';
+const dependencyCaches = new Set([
+    '.git', 'node_modules', '.venv', 'venv', '.terraform',
+    '__pycache__', '.pytest_cache', '.mypy_cache', '.ruff_cache'
+]);
+const mutableRecords = new Set([
+    'governance/plans', 'governance/evidence',
+    'governance/activation-state.json', 'governance/migration-state.json',
+    reviewedUpdateTransactionPathParts.join('/')
+]);
+export const localValidationOutputPolicy = [
+    { executable: 'npm', cwd: ['backend'], outputs: [['backend', 'dist'], ['backend', 'build'], ['backend', 'out'], ['backend', 'coverage'], ['backend', '.cache']] },
+    { executable: 'npm', cwd: ['frontend'], outputs: [['frontend', 'dist'], ['frontend', 'build'], ['frontend', 'out'], ['frontend', 'coverage'], ['frontend', '.next'], ['frontend', '.cache']] },
+    { executable: 'uv', cwd: [], outputs: [['.coverage'], ['coverage.xml'], ['htmlcov']] }
+];
+export function isRetainedProjectInput(parts) {
+    if (parts.some((part) => dependencyCaches.has(part) || isProjectMutationReservationName(part)))
+        return false;
+    for (let length = 1; length <= parts.length; length++) {
+        if (mutableRecords.has(parts.slice(0, length).join('/')))
+            return false;
+    }
+    return true;
+}
+export async function captureRetainedProjectInputs(projectRoot) {
+    const result = [];
+    async function visit(parts) {
+        const directory = parts.length ? await resolveProjectPath(projectRoot, parts) : projectRoot;
+        for (const entry of (await readdir(directory, { withFileTypes: true })).sort((a, b) => a.name.localeCompare(b.name, 'en'))) {
+            const child = [...parts, entry.name];
+            if (!isRetainedProjectInput(child))
+                continue;
+            const absolute = await resolveProjectPath(projectRoot, child);
+            const details = await lstat(absolute);
+            if (entry.isDirectory() && details.isDirectory()) {
+                await visit(child);
+            }
+            else if (entry.isFile() && details.isFile()) {
+                result.push({
+                    pathParts: child,
+                    digest: createHash('sha256').update(await readFile(absolute)).digest('hex'),
+                    mode: details.mode & 0o7777
+                });
+            }
+            else {
+                throw new Error(`Protected update source ${child.join('/')} must not be a link or special file.`);
+            }
+        }
+    }
+    await visit([]);
+    return result.sort((a, b) => a.pathParts.join('/').localeCompare(b.pathParts.join('/'), 'en'));
+}
+export function changedRetainedProjectInputs(expected, actual) {
+    const before = new Map(expected.map((entry) => [entry.pathParts.join('/'), canonicalSha256(entry)]));
+    const after = new Map(actual.map((entry) => [entry.pathParts.join('/'), canonicalSha256(entry)]));
+    return [...new Set([...before.keys(), ...after.keys()])]
+        .filter((key) => before.get(key) !== after.get(key)).sort();
+}
+export function outputsForLocalCommand(projectRoot, command, options) {
+    const cwd = path.resolve(options?.cwd ?? projectRoot);
+    const policy = localValidationOutputPolicy.find((entry) => command.executable === entry.executable && cwd === path.resolve(projectRoot, ...entry.cwd));
+    return policy?.outputs ?? [];
+}
+export function acceptDeclaredCommandOutputs(expected, actual, outputs) {
+    const permitted = (name) => outputs.some((parts) => {
+        const root = parts.join('/');
+        return name === root || name.startsWith(`${root}/`);
+    });
+    const changed = changedRetainedProjectInputs(expected, actual).filter((name) => !permitted(name));
+    if (changed.length) {
+        throw new Error(`Protected source changed during validation: ${changed.join(', ')}. Edits were preserved; obtain a fresh preview.`);
+    }
+    return actual.map((entry) => ({ ...entry, pathParts: [...entry.pathParts] }));
+}
+//# sourceMappingURL=protected-source.js.map

package/dist/application/update/protected-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-source.js","sourceRoot":"","sources":["../../../src/application/update/protected-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,sDAAsD,CAAC;AACvF,OAAO,EAAE,gCAAgC,EAAE,MAAM,8CAA8C,CAAC;AAChG,OAAO,EAAE,kCAAkC,EAAE,MAAM,mDAAmD,CAAC;AAUvG,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY;IACrD,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa;CAC7D,CAAC,CAAC;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,kBAAkB,EAAE,qBAAqB;IACzC,kCAAkC,EAAE,iCAAiC;IACrE,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC;CAC7C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE;IACjK,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,EAAE;IAC9L,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE;CAC9E,CAAC;AAEX,MAAM,UAAU,sBAAsB,CAAC,KAAwB;IAC7D,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,gCAAgC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7G,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;QACtD,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,WAAmB;IACpE,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,UAAU,KAAK,CAAC,KAAe;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAC5F,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC3H,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC7C,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;gBACjD,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC9C,MAAM,CAAC,IAAI,CAAC;oBACV,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC3E,IAAI,EAAE,OAAO,CAAC,IAAI,GAAG,MAAM;iBAC5B,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpG,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,QAAyC,EACzC,MAAuC;IAEvC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;SACrD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,OAAwB,EACxB,OAA2B;IAE3B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACxD,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAC3F,CAAC;IACF,OAAO,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,QAAyC,EACzC,MAAuC,EACvC,OAAuC;IAEvC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QACzD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,4BAA4B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAClG,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,+CAA+C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACtI,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC"}