@msn-control/liftoff 0.11.1 → 0.11.3

package/DEVELOPER.md

@@ -51,7 +51,7 @@ and successful generated-file checks must not be described as those capabilities
 
 ## Activation version vector
 
-Current deterministic setup contract, retained by the 0.11.1 CLI patch:
+Current deterministic setup contract, retained by the 0.11.3 CLI patch:
 
 ```json
 {
@@ -76,7 +76,7 @@ do not fabricate a historical value.
 
 The generated `liftoff.manifest.json` records this as manifest `artifactVersion`
 7 plus the activation identity fields shown above. Compatibility metadata uses
-schema version 2 in its own document, not a new required manifest field.
+schema version 3 in its own document, not a new required manifest field.
 Assessment report/catalog, graph, supersession, and credential-policy schemas
 remain at version 1; normative policy remains 6.
 
@@ -126,9 +126,18 @@ changes in another.
 - Manifest composition injects `validateReadableActivationIdentity` only at the
   manifest boundary. Exact known v1 identities remain readable without retagging;
   state, evidence, approval, readiness, and scope use strict current validation.
-- Known v1 activation is diagnostic-only. `diagnosticOnly` maintenance may update
-  safe managed core while retaining historical identity/state/evidence. No public
-  history reconciliation or automatic old-to-new state migration is implemented.
+- Known v1 activation remains non-executable. The exact packaged successor lane
+  requires update preview and approval, preserves original history, and creates
+  new v2 proof only through current validation. Never add v1 to the executable map.
+- Compatibility metadata v3 distinguishes successor eligibility from execution;
+  retain strict schema-2 input reading without treating it as migration authority.
+  Update report v3 distinguishes local commit from incomplete revalidation.
+- Preview receipts are external user-local metadata, never approval. Persist
+  transaction approval separately after explicit consent; recovery must validate
+  that external binding rather than trust project-local JSON claiming approval.
+- Durable history stays inside the project and outside managed-core ownership.
+  It preserves historical state and evidence byte-for-byte. After migration
+  commits, repair/resume blocked v2 rather than restore v1.
 - The eight flat-root OpenTofu identities are an explicit new-output-only
   exception to append-only naming in 0.11.0. Preserve historical records and
   files; use the exact [retirement inventory](docs/azure-deployment.md#explicit-flat-root-identity-retirement),
@@ -264,16 +273,22 @@ npm run verify:generated-containers
 npm run verify:release-identity
 ```
 
-## 0.11.1 release checklist
+## 0.11.3 release checklist
 
 - Package metadata, lockfile metadata, `liftoff --version`, and tag agree on
-  `0.11.1`. Preparing these files is not publication or permission to create a tag.
+  `0.11.3`. Preparing these files is not publication or permission to create a tag.
 - Activation package identity remains `0.11.0`; no phase semantics or graph
   identity change is introduced by patch-release preparation.
+- Release notes identify context-aware update follow-ups, root-aware validation
+  guidance, and reason-specific preview errors. Mandatory matching preview and
+  exact-plan approval, schema-3 project-update reports, and exit 2 after committed
+  but incomplete local revalidation remain unchanged.
 - Manifest writes use artifactVersion 7; readers accept v2-v7.
 - Policy version is `"6"`; activation contract/state/evidence-header/approval
-  and compatibility metadata are v2. Graph, supersession, credential-policy,
-  assessment report, and assessment catalog schemas remain v1.
+  remain v2. Compatibility metadata and update reports are v3; preview receipts,
+  transaction approvals, history indexes, and migration journals are v1. Graph,
+  supersession, credential-policy, assessment report, and assessment catalog
+  schemas remain v1.
 - The graph hash in code, docs, generated artifacts, compatibility metadata, and
   release-integrity tests is
   `ac160e3fc86f3e438141d985658e09f419508b3adbe176ddd13100d5dfdee47c`.
@@ -281,7 +296,11 @@ npm run verify:release-identity
   B001–B006 bundle locally before separate publication and Phase 0 gates.
 - Power Apps and the eight explicitly retired flat-root infrastructure IDs have
   no positive new-generation lane. Old API/GenAI project provenance and v1
-  activation history remain preserved, not converted by update or force.
+  activation history remain preserved. Only the exact approved migration lane
+  can create a linked v2 successor; it does not retag historical proof.
+- Independent infrastructure provenance explicitly admits generation versions
+  `0.11.0`, `0.11.1`, `0.11.2`, and `0.11.3`, including mixed component histories.
+  Unknown releases remain blocked rather than being accepted through a version range.
 - No setup-skill version exists in manifests, JSON status, docs, or generated
   integrations.
 - Doctor states and remedies cover seed-incomplete, phase-blocked,

package/README.md

@@ -38,7 +38,7 @@ automation.
 After the first self-upgrade-capable release is installed globally through npm,
 later CLI releases use `liftoff upgrade --check` followed by `liftoff upgrade`.
 This replaces the CLI only; generated projects use `liftoff update` separately
-for Liftoff-managed core files. Useful read-only checks:
+for reviewed project maintenance. Useful project-read-only checks:
 
 ```bash
 liftoff validate
@@ -47,11 +47,16 @@ liftoff upgrade --check
 liftoff update --check
 ```
 
-Plain `liftoff update` applies safe managed-core changes immediately and skips
-core conflicts. Application source, dependencies, schemas, containers,
-environments, documentation, and infrastructure are project-owned after
-generation and remain outside every update mode, including `--force`. Use
-`liftoff update --check --json` for a read-only core-maintenance gate.
+Start with `liftoff update --check`, then run `liftoff update` and approve the
+matching plan. Check leaves project bytes unchanged and discloses a preview
+receipt saved outside the repository. Missing or stale previews block apply.
+Automation uses `--approve-plan <fingerprint>`; `--json` only selects formatting.
+
+Supported activation-v1 migration preserves original records inside the project
+and creates a linked v2 activation. Failed revalidation leaves v2 blocked and
+resumable, not reset to v1. Application source, dependencies, schemas, containers,
+environments, documentation, and infrastructure remain project-owned and outside
+template replacement, including `--force`.
 
 Older projects may display the retired `/liftoff-repository-governance` alias.
 After upgrading the CLI, review `liftoff update --check`; `liftoff update --force`

package/dist/adapters/filesystem/project-transaction.d.ts

@@ -2,7 +2,8 @@ import { FileSystemError } from '../../domain/project/errors.js';
 export type ProjectFileMutation = {
     type: 'write';
     pathParts: string[];
-    content: string;
+    content: string | Buffer;
+    mode?: number;
 } | {
     type: 'delete';
     pathParts: string[];

package/dist/adapters/filesystem/project-transaction.js

@@ -40,7 +40,7 @@ async function assertProjectFileSnapshot(projectRoot, snapshot) {
         throw new FileSystemError(`Project update target changed after review: ${snapshot.pathParts.join('/')}`);
     }
 }
-async function assertAppliedMutationCurrent(projectRoot, mutation, original) {
+async function assertAppliedMutationCurrent(projectRoot, mutation, expectedMode) {
     const current = await captureProjectFileSnapshot(projectRoot, mutation.pathParts);
     if (mutation.type === 'delete') {
         if (current.content !== undefined) {
@@ -49,8 +49,8 @@ async function assertAppliedMutationCurrent(projectRoot, mutation, original) {
         return;
     }
     if (current.content === undefined ||
-        !current.content.equals(Buffer.from(mutation.content, 'utf8')) ||
-        original.mode !== undefined && current.mode !== original.mode) {
+        !current.content.equals(typeof mutation.content === 'string' ? Buffer.from(mutation.content, 'utf8') : mutation.content) ||
+        expectedMode !== undefined && current.mode !== expectedMode) {
         throw new FileSystemError(`Project update target changed before rollback: ${mutation.pathParts.join('/')}`);
     }
 }
@@ -88,6 +88,10 @@ export async function applyProjectFileTransaction(projectRoot, mutations, option
             preconditions.set(key, snapshot);
         }
         for (const mutation of mutations) {
+            if (mutation.type === 'write' && mutation.mode !== undefined &&
+                (!Number.isInteger(mutation.mode) || mutation.mode < 0 || mutation.mode > 0o7777)) {
+                throw new FileSystemError(`Invalid project update mode for ${mutation.pathParts.join('/')}.`);
+            }
             const key = mutation.pathParts.join('\0');
             if (snapshots.has(key)) {
                 throw new FileSystemError(`Project update contains duplicate mutations for ${mutation.pathParts.join('/')}.`);
@@ -110,20 +114,35 @@ export async function applyProjectFileTransaction(projectRoot, mutations, option
                 await lease.assertHeld();
                 await assertProjectFileSnapshot(projectRoot, snapshots.get(mutation.pathParts.join('\0')));
                 if (mutation.type === 'write') {
+                    const originalMode = snapshots.get(mutation.pathParts.join('\0')).mode;
+                    const createdMode = 0o666 & ~process.umask();
+                    const appliedMutation = {
+                        mutation,
+                        mode: originalMode ?? (mutation.mode === undefined ? undefined
+                            : process.platform === 'win32' ? (createdMode & 0o200 ? 0o666 : 0o444) : createdMode)
+                    };
                     await writeProjectFile(projectRoot, mutation.pathParts, mutation.content);
+                    applied.push(appliedMutation);
+                    if (mutation.mode !== undefined) {
+                        await lease.assertHeld();
+                        await assertAppliedMutationCurrent(projectRoot, mutation, appliedMutation.mode);
+                        await chmod(await resolveProjectPath(projectRoot, mutation.pathParts), mutation.mode);
+                        appliedMutation.mode = process.platform === 'win32'
+                            ? (mutation.mode & 0o200 ? 0o666 : 0o444) : mutation.mode;
+                    }
                 }
                 else {
                     await deleteProjectFile(projectRoot, mutation.pathParts);
+                    applied.push({ mutation });
                 }
-                applied.push(mutation);
             }
         }
         catch (error) {
             const rollbackFailures = [];
-            for (const mutation of [...applied].reverse()) {
+            for (const { mutation, mode } of [...applied].reverse()) {
                 const snapshot = snapshots.get(mutation.pathParts.join('\0'));
                 try {
-                    await assertAppliedMutationCurrent(projectRoot, mutation, snapshot);
+                    await assertAppliedMutationCurrent(projectRoot, mutation, mode);
                     if (snapshot.content === undefined) {
                         await deleteProjectFile(projectRoot, mutation.pathParts);
                     }

package/dist/adapters/filesystem/project-transaction.js.map

@@ -1 +1 @@
-{"version":3,"file":"project-transaction.js","sourceRoot":"","sources":["../../../src/adapters/filesystem/project-transaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAMtD,MAAM,OAAO,2BAA4B,SAAQ,eAAe;IAG5C,gBAAgB;IAFlC,YACE,OAAe,EACC,gBAAmC;QAEnD,KAAK,CAAC,OAAO,CAAC,CAAC;gCAFC,gBAAgB;QAGhC,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAQD,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,WAAmB,EACnB,SAAmB;IAEnB,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,eAAe,CACvB,iDAAiD,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACvE,CAAC;QACJ,CAAC;QACD,OAAO;YACL,SAAS;YACT,OAAO,EAAE,MAAM,QAAQ,CAAC,UAAU,CAAC;YACnC,IAAI,EAAE,OAAO,CAAC,IAAI,GAAG,MAAM;SAC5B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,WAAmB,EACnB,QAA6B;IAE7B,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClF,IACE,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC;QACpE,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;QAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAQ,CAAC,KAAK,KAAK,EACpD,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,+CAA+C,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC9E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,WAAmB,EACnB,QAA6B,EAC7B,QAA6B;IAE7B,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClF,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,eAAe,CACvB,kDAAkD,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACjF,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,IACE,OAAO,CAAC,OAAO,KAAK,SAAS;QAC7B,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9D,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAC7D,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,kDAAkD,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACjF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,WAAmB,EACnB,SAAmB;IAEnB,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;gBACxD,MAAM,IAAI,eAAe,CACvB,4CAA4C,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACpE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAClC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC1B,SAAS;YACX,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,WAAmB,EACnB,SAAyC,EACzC,OAAO,GAGH,EAAE;IAEN,OAAO,uBAAuB,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;QACzD,MAAM,aAAa,GAAG,IAAI,GAAG,EAA+B,CAAC;QAC7D,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;QACnD,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;YACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,eAAe,CACvB,uDAAuD,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CACvF,CAAC;YACJ,CAAC;YACD,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,eAAe,CACvB,mDAAmD,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CACnF,CAAC;YACJ,CAAC;YACD,SAAS,CAAC,GAAG,CACX,GAAG,EACH,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;gBACpB,MAAM,0BAA0B,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CACpE,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC9B,KAAK,MAAM,WAAW,IAAI,MAAM,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBACxF,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,MAAM,yBAAyB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,OAAO,GAA0B,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;gBACpD,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAClD,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;gBACzB,MAAM,yBAAyB,CAC7B,WAAW,EACX,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAE,CAC9C,CAAC;gBACF,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC9B,MAAM,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC5E,CAAC;qBAAM,CAAC;oBACN,MAAM,iBAAiB,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAC3D,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,gBAAgB,GAAa,EAAE,CAAC;YACtC,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAE,CAAC;gBAC/D,IAAI,CAAC;oBACH,MAAM,4BAA4B,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBACpE,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;wBACnC,MAAM,iBAAiB,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;oBAC3D,CAAC;yBAAM,CAAC;wBACN,MAAM,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;wBAC1E,MAAM,KAAK,CACT,MAAM,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,EACzD,QAAQ,CAAC,IAAK,CACf,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,OAAO,aAAa,EAAE,CAAC;oBACvB,gBAAgB,CAAC,IAAI,CACnB,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,EAAE,CAClE,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC;iBACzC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YACrD,KAAK,MAAM,WAAW,IAAI,OAAO,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,MAAM,kBAAkB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;gBAClE,CAAC;gBAAC,OAAO,aAAa,EAAE,CAAC;oBACvB,IAAI,SAAS,CAAC,aAAa,CAAC,KAAK,QAAQ,EAAE,CAAC;wBAC1C,gBAAgB,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;oBACpF,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,KAAK,CAAC;gBAClD,CAAC,CAAC,uCAAuC;gBACzC,CAAC,CAAC,6BAA6B,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,2BAA2B,CACnC,0BAA0B,YAAY,CAAC,KAAK,CAAC,IAAI,cAAc,EAAE,EACjE,gBAAgB,CACjB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"project-transaction.js","sourceRoot":"","sources":["../../../src/adapters/filesystem/project-transaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAMtD,MAAM,OAAO,2BAA4B,SAAQ,eAAe;IAG5C,gBAAgB;IAFlC,YACE,OAAe,EACC,gBAAmC;QAEnD,KAAK,CAAC,OAAO,CAAC,CAAC;gCAFC,gBAAgB;QAGhC,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAQD,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,WAAmB,EACnB,SAAmB;IAEnB,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,eAAe,CACvB,iDAAiD,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACvE,CAAC;QACJ,CAAC;QACD,OAAO;YACL,SAAS;YACT,OAAO,EAAE,MAAM,QAAQ,CAAC,UAAU,CAAC;YACnC,IAAI,EAAE,OAAO,CAAC,IAAI,GAAG,MAAM;SAC5B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,WAAmB,EACnB,QAA6B;IAE7B,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClF,IACE,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC;QACpE,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;QAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAQ,CAAC,KAAK,KAAK,EACpD,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,+CAA+C,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC9E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,WAAmB,EACnB,QAA6B,EAC7B,YAAgC;IAEhC,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClF,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,eAAe,CACvB,kDAAkD,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACjF,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,IACE,OAAO,CAAC,OAAO,KAAK,SAAS;QAC7B,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CACrB,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAChG;QACD,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAC3D,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,kDAAkD,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACjF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,WAAmB,EACnB,SAAmB;IAEnB,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;gBACxD,MAAM,IAAI,eAAe,CACvB,4CAA4C,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACpE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAClC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC1B,SAAS;YACX,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,WAAmB,EACnB,SAAyC,EACzC,OAAO,GAGH,EAAE;IAEN,OAAO,uBAAuB,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;QACzD,MAAM,aAAa,GAAG,IAAI,GAAG,EAA+B,CAAC;QAC7D,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;QACnD,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;YACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,eAAe,CACvB,uDAAuD,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CACvF,CAAC;YACJ,CAAC;YACD,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;gBACxD,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC;gBACtF,MAAM,IAAI,eAAe,CAAC,mCAAmC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChG,CAAC;YACD,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,eAAe,CACvB,mDAAmD,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CACnF,CAAC;YACJ,CAAC;YACD,SAAS,CAAC,GAAG,CACX,GAAG,EACH,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;gBACpB,MAAM,0BAA0B,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CACpE,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC9B,KAAK,MAAM,WAAW,IAAI,MAAM,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBACxF,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,MAAM,yBAAyB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,OAAO,GAAuD,EAAE,CAAC;QACvE,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;gBACpD,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAClD,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;gBACzB,MAAM,yBAAyB,CAC7B,WAAW,EACX,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAE,CAC9C,CAAC;gBACF,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC9B,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAE,CAAC,IAAI,CAAC;oBACxE,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;oBAC7C,MAAM,eAAe,GAAG;wBACtB,QAAQ;wBACR,IAAI,EAAE,YAAY,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS;4BAC5D,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;qBACxF,CAAC;oBACF,MAAM,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;oBAC1E,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;oBAC9B,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;wBAChC,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;wBACzB,MAAM,4BAA4B,CAAC,WAAW,EAAE,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;wBAChF,MAAM,KAAK,CAAC,MAAM,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;wBACtF,eAAe,CAAC,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;4BACjD,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAC9D,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,iBAAiB,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;oBACzD,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,gBAAgB,GAAa,EAAE,CAAC;YACtC,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBACxD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAE,CAAC;gBAC/D,IAAI,CAAC;oBACH,MAAM,4BAA4B,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;oBAChE,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;wBACnC,MAAM,iBAAiB,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;oBAC3D,CAAC;yBAAM,CAAC;wBACN,MAAM,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;wBAC1E,MAAM,KAAK,CACT,MAAM,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,EACzD,QAAQ,CAAC,IAAK,CACf,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,OAAO,aAAa,EAAE,CAAC;oBACvB,gBAAgB,CAAC,IAAI,CACnB,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,EAAE,CAClE,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC;iBACzC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YACrD,KAAK,MAAM,WAAW,IAAI,OAAO,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,MAAM,kBAAkB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;gBAClE,CAAC;gBAAC,OAAO,aAAa,EAAE,CAAC;oBACvB,IAAI,SAAS,CAAC,aAAa,CAAC,KAAK,QAAQ,EAAE,CAAC;wBAC1C,gBAAgB,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;oBACpF,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,KAAK,CAAC;gBAClD,CAAC,CAAC,uCAAuC;gBACzC,CAAC,CAAC,6BAA6B,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,2BAA2B,CACnC,0BAA0B,YAAY,CAAC,KAAK,CAAC,IAAI,cAAc,EAAE,EACjE,gBAAgB,CACjB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/adapters/filesystem/reviewed-update-transaction.d.ts

@@ -0,0 +1,53 @@
+import { ProjectFileTransactionError } from './project-transaction.js';
+import type { ProjectFileMutation, ProjectFileSnapshot } from './project-transaction.js';
+export { reviewedUpdateTransactionPathParts, reviewedUpdateTransactionSchemaVersion } from '../../domain/project/reviewed-update-artifacts.js';
+export interface ReviewedUpdateApprovalStore {
+    write(planFingerprint: string, transactionDigest: string): Promise<void>;
+    verify(planFingerprint: string, transactionDigest: string): Promise<boolean>;
+    remove(planFingerprint: string, transactionDigest: string): Promise<void>;
+}
+export interface ReviewedUpdateTransactionCheckpoint {
+    phase: 'prepared' | 'before-mutation' | 'staged' | 'after-mutation' | 'before-commit' | 'committed';
+    index?: number;
+}
+export interface ReviewedUpdateTransactionOptions {
+    planFingerprint: string;
+    approvalStore: ReviewedUpdateApprovalStore;
+    preconditions?: readonly ProjectFileSnapshot[];
+    validatePlan?: () => Promise<void>;
+    onBeforeMutation?: (mutation: ProjectFileMutation, index: number) => Promise<void>;
+    onCheckpoint?: (checkpoint: ReviewedUpdateTransactionCheckpoint) => Promise<void>;
+}
+export interface ReviewedUpdateRecoveryOptions {
+    approvalStore?: ReviewedUpdateApprovalStore;
+}
+export interface ReviewedUpdateTransactionDestination {
+    pathParts: string[];
+    attempted: boolean;
+    disposition: 'original' | 'target' | 'changed';
+}
+export interface ReviewedUpdateTransactionInspection {
+    status: 'absent' | 'interrupted' | 'committed' | 'blocked';
+    committed: boolean;
+    journalPath: string;
+    planFingerprint?: string;
+    transactionDigest?: string;
+    reason?: string;
+    destinations: ReviewedUpdateTransactionDestination[];
+}
+export interface ReviewedUpdateTransactionOutcome {
+    status: 'absent' | 'rolled-back' | 'committed' | 'blocked';
+    committed: boolean;
+    planFingerprint?: string;
+    transactionDigest?: string;
+    rollbackFailures: string[];
+    cleanupFailures: string[];
+}
+export declare class ReviewedUpdateTransactionError extends ProjectFileTransactionError {
+    readonly committed = false;
+    constructor(message: string, rollbackFailures?: readonly string[]);
+}
+export declare function reviewedUpdateTargetMode(mode: number | undefined, originalMode?: number): number;
+export declare function inspectReviewedUpdateTransaction(projectRoot: string, options?: ReviewedUpdateRecoveryOptions): Promise<ReviewedUpdateTransactionInspection>;
+export declare function recoverReviewedUpdateTransaction(projectRoot: string, options?: ReviewedUpdateRecoveryOptions): Promise<ReviewedUpdateTransactionOutcome>;
+export declare function applyReviewedUpdateTransaction(projectRoot: string, mutations: readonly ProjectFileMutation[], options: ReviewedUpdateTransactionOptions): Promise<ReviewedUpdateTransactionOutcome>;