@msn-control/liftoff 0.5.0 → 0.6.0

package/dist/update-impact.js

@@ -0,0 +1,127 @@
+import { manifestDisplayPath } from './file-system.js';
+export const dependencyDefinitionLogicalNames = Object.freeze([
+    'backend-pyproject',
+    'function-worker-requirements',
+    'node-backend-package',
+    'node-backend-lock',
+    'go-backend-module',
+    'go-backend-checksums',
+    'frontend-package',
+    'frontend-lock',
+    'power-apps-package',
+    'power-apps-lock'
+]);
+const dependencyDefinitionLogicalNameSet = new Set(dependencyDefinitionLogicalNames);
+function comparePortable(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+function displayEntry(entry) {
+    const current = manifestDisplayPath(entry.pathParts);
+    return entry.previousPathParts
+        ? `${manifestDisplayPath(entry.previousPathParts)} => ${current}`
+        : current;
+}
+function freezeSorted(values) {
+    return Object.freeze(values.sort(comparePortable));
+}
+function isActionable(entry) {
+    return entry.status !== 'orphan' &&
+        (entry.status !== 'unchanged' || entry.refreshHash === true);
+}
+export function buildUpdateImpact(entries) {
+    const creates = [];
+    const restores = [];
+    const replacements = [];
+    const moves = [];
+    const recordedStateRefreshes = [];
+    const conflicts = [];
+    const managedPathsRemoved = [];
+    const managedPathsRemovedOnOverwrite = [];
+    const orphansPreserved = [];
+    const dependencyDefinitions = [];
+    for (const entry of entries) {
+        switch (entry.status) {
+            case 'new':
+                creates.push(manifestDisplayPath(entry.pathParts));
+                break;
+            case 'missing':
+                restores.push(manifestDisplayPath(entry.pathParts));
+                break;
+            case 'upgrade':
+                replacements.push(manifestDisplayPath(entry.pathParts));
+                break;
+            case 'moved':
+                if (entry.cleanMove) {
+                    moves.push(displayEntry(entry));
+                    if (entry.previousPathParts) {
+                        managedPathsRemoved.push(manifestDisplayPath(entry.previousPathParts));
+                    }
+                }
+                else {
+                    if (entry.sourceModified && entry.previousPathParts) {
+                        conflicts.push(manifestDisplayPath(entry.previousPathParts));
+                    }
+                    if (entry.destinationOccupied && !entry.destinationMatches) {
+                        conflicts.push(manifestDisplayPath(entry.pathParts));
+                    }
+                    if (entry.previousPathParts) {
+                        managedPathsRemovedOnOverwrite.push(manifestDisplayPath(entry.previousPathParts));
+                    }
+                }
+                break;
+            case 'conflict':
+                conflicts.push(manifestDisplayPath(entry.pathParts));
+                break;
+            case 'orphan':
+                orphansPreserved.push(manifestDisplayPath(entry.pathParts));
+                break;
+            case 'unchanged':
+                if (entry.refreshHash) {
+                    recordedStateRefreshes.push(manifestDisplayPath(entry.pathParts));
+                }
+                break;
+        }
+        if (isActionable(entry) &&
+            dependencyDefinitionLogicalNameSet.has(entry.logicalName)) {
+            dependencyDefinitions.push(manifestDisplayPath(entry.pathParts));
+        }
+    }
+    const frozenCreates = freezeSorted(creates);
+    const frozenRestores = freezeSorted(restores);
+    const frozenReplacements = freezeSorted(replacements);
+    const frozenMoves = freezeSorted(moves);
+    const frozenRefreshes = freezeSorted(recordedStateRefreshes);
+    const frozenConflicts = freezeSorted(conflicts);
+    const frozenManagedPaths = freezeSorted(managedPathsRemoved);
+    const frozenManagedOverwritePaths = freezeSorted(managedPathsRemovedOnOverwrite);
+    const frozenOrphans = freezeSorted(orphansPreserved);
+    const frozenDependencyDefinitions = freezeSorted(dependencyDefinitions);
+    const safeActionCount = frozenCreates.length +
+        frozenRestores.length +
+        frozenReplacements.length +
+        frozenMoves.length +
+        frozenRefreshes.length;
+    const hasSafeActions = safeActionCount > 0;
+    const hasActionableChanges = hasSafeActions || frozenConflicts.length > 0;
+    return Object.freeze({
+        creates: frozenCreates,
+        restores: frozenRestores,
+        replacements: frozenReplacements,
+        moves: frozenMoves,
+        recordedStateRefreshes: frozenRefreshes,
+        conflicts: frozenConflicts,
+        managedPathsRemoved: frozenManagedPaths,
+        managedPathsRemovedOnOverwrite: frozenManagedOverwritePaths,
+        orphansPreserved: frozenOrphans,
+        dependencyDefinitions: frozenDependencyDefinitions,
+        safeActionCount,
+        localOrUserOwnedFilesAtRisk: frozenConflicts.length,
+        manifestWillUpdate: hasActionableChanges,
+        installsDependencies: false,
+        deletesOrphans: false,
+        retainsBackupAfterSuccess: false,
+        hasSafeActions,
+        hasActionableChanges
+    });
+}
+//# sourceMappingURL=update-impact.js.map

package/dist/update-impact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-impact.js","sourceRoot":"","sources":["../src/update-impact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAGvD,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5D,mBAAmB;IACnB,8BAA8B;IAC9B,sBAAsB;IACtB,mBAAmB;IACnB,mBAAmB;IACnB,sBAAsB;IACtB,kBAAkB;IAClB,eAAe;IACf,oBAAoB;IACpB,iBAAiB;CACT,CAAC,CAAC;AAEZ,MAAM,kCAAkC,GAAG,IAAI,GAAG,CAChD,gCAAgC,CACjC,CAAC;AAuBF,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,KAAqB;IACzC,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC,iBAAiB;QAC5B,CAAC,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,OAAO,EAAE;QACjE,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,MAAgB;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,KAAqB;IACzC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAC9B,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAkC;IAClE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,sBAAsB,GAAa,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,mBAAmB,GAAa,EAAE,CAAC;IACzC,MAAM,8BAA8B,GAAa,EAAE,CAAC;IACpD,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,MAAM,qBAAqB,GAAa,EAAE,CAAC;IAE3C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;YACrB,KAAK,KAAK;gBACR,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;gBACnD,MAAM;YACR,KAAK,SAAS;gBACZ,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;gBACpD,MAAM;YACR,KAAK,SAAS;gBACZ,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;gBACxD,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;oBACpB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;oBAChC,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;wBAC5B,mBAAmB,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;oBACzE,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;wBACpD,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;oBAC/D,CAAC;oBACD,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;wBAC3D,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;oBACvD,CAAC;oBACD,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;wBAC5B,8BAA8B,CAAC,IAAI,CACjC,mBAAmB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAC7C,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,KAAK,UAAU;gBACb,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;gBACrD,MAAM;YACR,KAAK,QAAQ;gBACX,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC5D,MAAM;YACR,KAAK,WAAW;gBACd,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;oBACtB,sBAAsB,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;gBACpE,CAAC;gBACD,MAAM;QACV,CAAC;QAED,IACE,YAAY,CAAC,KAAK,CAAC;YACnB,kCAAkC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EACzD,CAAC;YACD,qBAAqB,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,eAAe,GAAG,YAAY,CAAC,sBAAsB,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,kBAAkB,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;IAC7D,MAAM,2BAA2B,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;IACjF,MAAM,aAAa,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;IACrD,MAAM,2BAA2B,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;IACxE,MAAM,eAAe,GACnB,aAAa,CAAC,MAAM;QACpB,cAAc,CAAC,MAAM;QACrB,kBAAkB,CAAC,MAAM;QACzB,WAAW,CAAC,MAAM;QAClB,eAAe,CAAC,MAAM,CAAC;IACzB,MAAM,cAAc,GAAG,eAAe,GAAG,CAAC,CAAC;IAC3C,MAAM,oBAAoB,GAAG,cAAc,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;IAE1E,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,cAAc;QACxB,YAAY,EAAE,kBAAkB;QAChC,KAAK,EAAE,WAAW;QAClB,sBAAsB,EAAE,eAAe;QACvC,SAAS,EAAE,eAAe;QAC1B,mBAAmB,EAAE,kBAAkB;QACvC,8BAA8B,EAAE,2BAA2B;QAC3D,gBAAgB,EAAE,aAAa;QAC/B,qBAAqB,EAAE,2BAA2B;QAClD,eAAe;QACf,2BAA2B,EAAE,eAAe,CAAC,MAAM;QACnD,kBAAkB,EAAE,oBAAoB;QACxC,oBAAoB,EAAE,KAAK;QAC3B,cAAc,EAAE,KAAK;QACrB,yBAAyB,EAAE,KAAK;QAChC,cAAc;QACd,oBAAoB;KACrB,CAAC,CAAC;AACL,CAAC"}

package/docs/cli-reference.md

@@ -24,7 +24,7 @@ plan -> init or migrate -> validate and doctor -> update -> dev and infra helper
 | `liftoff migrate <source>` | Creates a new sibling scaffold and filtered source copy without changing the source |
 | `liftoff validate [project]` | Validates manifest identity, durable files, workload metadata, and framework markers |
 | `liftoff doctor [project]` | Runs read-only workload-derived project and workstation diagnostics |
-| `liftoff update [project]` | Reports template and configuration drift without writing |
+| `liftoff update [project]` | Reports drift and, in an interactive terminal, explains impact and asks before applying |
 | `liftoff update --apply` | Applies safe changes, preserves unforced conflicts, and records the resulting manifest |
 | `liftoff dev` | Prints workload-appropriate local development commands; it does not execute them |
 | `liftoff infra` | Prints OpenTofu guidance for API workloads and reports infrastructure as not applicable for Power Apps |
@@ -69,6 +69,22 @@ liftoff update --apply
 liftoff update --apply --force
 ```
 
+With interactive input and output, plain `liftoff update` first reports drift
+and its impact. Safe managed changes use a default-No confirmation. Local or
+user-owned conflicts are listed separately and require another default-No
+confirmation before replacement. Liftoff collects both decisions before any
+preflight or write.
+
+With redirected input or output, plain update remains a read-only check and
+prints the explicit apply command. `--json` also remains prompt-free and
+read-only unless combined with `--apply`. Explicit `--apply` and
+`--apply --force` bypass prompts for automation.
+
+The impact summary identifies affected dependency definitions, but update does
+not install dependencies. Orphans are reported without deletion. Transaction
+snapshots restore a failed update, but Liftoff retains no backup after a
+successful overwrite; commit or copy local work first.
+
 `--force` is valid only with `--apply`. It overwrites reported file conflicts;
 it does not permit workload, API stack, GenAI pattern, framework, selected
 agent, or user-supplied Power Apps starter identity changes.
@@ -89,7 +105,7 @@ Exit codes:
 
 - `0`: success or a clean check.
 - `1`: invalid input, unsafe state, or command failure.
-- `2`: a read-only check found drift.
+- `2`: a read-only check or declined interactive update found drift.
 
 Raw installer, framework, and dependency child stdout and stderr are forwarded
 unchanged.

package/docs/configuration-and-manifests.md

@@ -67,8 +67,9 @@ Readers support schemas v2, v3, and v4:
 - V3 normalizes flat GenAI or API identity plus framework and agent metadata.
 - V4 represents the discriminated workload model, including Power Apps.
 
-A read-only `liftoff update` leaves an old manifest byte-for-byte unchanged. A
-successful apply writes v4 only after the file transaction succeeds. Skipped
+A non-interactive or JSON check, or a declined interactive update, leaves an
+old manifest byte-for-byte unchanged. A successful explicit or interactively
+accepted apply writes v4 only after the file transaction succeeds. Skipped
 conflicts retain their recorded hashes.
 
 ## Artifact ownership

package/docs/existing-repositories.md

@@ -68,7 +68,11 @@ liftoff update
 liftoff update --apply
 ```
 
-Update is a read-only drift check unless `--apply` is present.
+In an interactive terminal, plain update reports drift and impact, then asks
+with a default of No before applying safe managed changes. Local or user-owned
+conflicts require a separate default-No overwrite decision. Redirected and
+JSON checks remain read-only and prompt-free; use `--apply` for explicit
+automation consent.
 
 ## Existing non-Liftoff application
 

package/docs/safety-and-consent.md

@@ -50,24 +50,39 @@ Individual project files use temporary-file replacement. Initialization keeps
 backups for replaced files and records created files and directories. A handled
 merge failure restores or removes those entries in reverse order.
 
-`liftoff update --apply` preflights all affected paths and applies generated
-file, move, delete, and manifest mutations as one rollback-capable
-transaction. Schema upgrades are committed only after the other mutations
-succeed. A corrected retry converges from the restored state.
+An accepted interactive update or `liftoff update --apply` preflights all
+affected paths and applies generated file, move, delete, and manifest mutations
+as one rollback-capable transaction. Schema upgrades are committed only after
+the other mutations succeed. A corrected retry converges from the restored
+state.
 
 If automatic rollback itself cannot safely restore a path because another
 process changed it, Liftoff reports the incomplete rollback rather than
 overwriting unknown bytes.
 
+Update snapshots exist only for rollback after a failed transaction. Liftoff
+does not retain them as backups after success.
+
 ## Update ownership
 
-`liftoff update` is read-only by default:
+Plain `liftoff update` always reports drift before any write:
 
 - Clean generated files remain unchanged.
-- New, missing, untouched-upgrade, and clean-move states can be applied.
+- In an interactive terminal, new, missing, untouched-upgrade, clean-move, and
+  recorded-state changes are summarized and offered through a default-No
+  confirmation.
+- With redirected input or output, or with `--json`, update remains a
+  prompt-free read-only check unless `--apply` is explicitly supplied.
 - Developer edits that also differ from the current template are conflicts.
-- Conflicts are skipped unless `--apply --force` is explicitly supplied.
+- Safe-update consent does not authorize conflicts. Interactive conflicts are
+  listed by portable relative path and require a separate default-No overwrite
+  confirmation; automation uses `--apply --force`.
 - Orphans are reported and left on disk for manual review.
+- Dependency definitions may be updated, but update never installs
+  dependencies.
+
+All interactive decisions are collected before preflight or mutation.
+Declining the safe update changes nothing and leaves drift exit code 2.
 
 Power Apps reconciliation reads only the packaged immutable starter. It does
 not fetch the upstream repository. Workload kind and user-edited starter

package/docs/troubleshooting.md

@@ -67,14 +67,21 @@ hand-edited unsafe path.
 
 ## Update reports conflicts or orphans
 
-`liftoff update` does not write. Review the report:
-
-- Apply safe changes with `liftoff update --apply`.
-- Developer conflicts remain untouched unless you explicitly use
-  `liftoff update --apply --force`.
+In an interactive terminal, `liftoff update` shows an impact summary and asks
+before applying safe managed changes. The default answer is No.
+
+- Local or user-owned conflicts are listed separately and require their own
+  default-No overwrite confirmation.
+- With redirected input or output, review the report and apply safe changes
+  with `liftoff update --apply`.
+- For prompt-free conflict replacement, use `liftoff update --apply --force`
+  only after reviewing every listed path.
 - Orphans are never deleted automatically.
+- Update reports dependency-definition impact but does not install
+  dependencies.
 
-Commit local work before applying when possible.
+Commit or copy local work before overwriting. Transaction rollback protects a
+failed update, but Liftoff keeps no backup after success.
 
 ## Power Apps dependencies or CLI are missing
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@msn-control/liftoff",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Interactive CLI for governed GenAI, API, and Power Apps code app projects.",
   "type": "module",
   "license": "GPL-3.0-only",
@@ -44,8 +44,10 @@
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "test": "vitest run",
+    "audit:template-dependencies": "node scripts/audit-template-dependencies.mjs",
     "refresh:power-apps-starter": "node scripts/refresh-power-apps-starter.mjs",
     "smoke:package": "npm run build && node scripts/package-smoke-test.mjs",
+    "verify:standard-node-templates": "npm run build && node scripts/verify-standard-node-templates.mjs",
     "verify:power-apps-starter": "npm run build && node scripts/verify-power-apps-starter.mjs",
     "verify:release-identity": "npm run build && node scripts/verify-release-identity.mjs",
     "verify:published": "npm run build && node scripts/verify-published-package.mjs",