@multiplatform.one/cli 6.7.0 → 7.1.0

package/templates/pieces/gnome/universal/apps/__NAME__/vite.config.gnome.ts

@@ -8,15 +8,18 @@
 // THIS IS NOT A VARIANT OF THE WEB BUILD. The web target is One (file
 // router, SSR, react-native-web); this one is a plain Vite library build
 // whose output GJS executes directly, rendering REAL GTK4 widgets through
-// react-gnome — no webview, no DOM. That is the whole difference from the
-// tauri piece, which ships the web build inside a system webview.
+// react-gnome — no webview, no DOM.
 //
 // The generic react-gnome settings (aliases, conditions, define, React
 // dedupe, .native.* extensions) come from @react-gnome/vite-plugin; the
 // Tamagui-under-GJS bundle patches come from
 // @multiplatform.one/vite-plugin-gnome.
 
-import { tamaguiLinkedAliases, tamaguiPlugin } from "@multiplatform.one/vite-plugin-gnome";
+import {
+  gnomePlatformExtensions,
+  tamaguiLinkedAliases,
+  tamaguiPlugin,
+} from "@multiplatform.one/vite-plugin-gnome";
 import {
   gnomeConditions,
   gnomeDedupe,
@@ -25,6 +28,7 @@ import {
   gnomeLinkedAliases,
 } from "@react-gnome/vite-plugin";
 import react from "@vitejs/plugin-react";
+import { existsSync } from "node:fs";
 import { createRequire } from "node:module";
 import { dirname, resolve } from "node:path";
 import type { Plugin } from "vite";
@@ -42,6 +46,23 @@ function pkgDir(id: string): string {
   return dirname(require.resolve(`${id}/package.json`));
 }
 
+/** The installed @react-gnome scope directory. Under pnpm's default
+ *  isolated linker it sits in THIS app's node_modules; under
+ *  `node-linker=hoisted` (this scaffold's .npmrc) everything hoists to
+ *  the workspace root and the app-local dir never exists. Walk upward to
+ *  whichever node_modules actually holds the scope — require.resolve
+ *  can't do this lookup because the @react-gnome packages' export maps
+ *  hide package.json. */
+function reactGnomeScopeDir(): string {
+  for (let dir = import.meta.dirname; ; ) {
+    const candidate = resolve(dir, "node_modules/@react-gnome");
+    if (existsSync(candidate)) return candidate;
+    const parent = dirname(dir);
+    if (parent === dir) throw new Error("@react-gnome scope not found in any node_modules");
+    dir = parent;
+  }
+}
+
 /** Stub real-RN Flow internals and the expo surface. A dependency that
  *  deep-imports `react-native/Libraries/...` slips past the package-root
  *  alias, and the bundler cannot parse RN's Flow sources; expo modules
@@ -68,7 +89,20 @@ export default defineConfig({
   resolve: {
     conditions: [...gnomeConditions],
     alias: [
-      ...gnomeLinkedAliases(resolve(import.meta.dirname, "node_modules/@react-gnome")),
+      // gnomeLinkedAliases points the renderer at its SOURCE entry — right
+      // for a link:ed react-gnome checkout whose dist is a stale gitignored
+      // build, wrong for the registry tarball, which ships dist ONLY
+      // (files: ["dist", …]). First alias match wins, so prepend the dist
+      // fallback when there is no src to point at.
+      ...(existsSync(resolve(reactGnomeScopeDir(), "renderer/src/index.ts"))
+        ? []
+        : [
+            {
+              find: /^@react-gnome\/renderer$/,
+              replacement: resolve(reactGnomeScopeDir(), "renderer/dist/index.js"),
+            },
+          ]),
+      ...gnomeLinkedAliases(reactGnomeScopeDir()),
       // `tamagui` meta-package → a lean barrel re-exporting only the
       // granular @tamagui/* packages this app's graph reaches. The full
       // meta-barrel drags web-only components into the GJS bundle.
@@ -82,6 +116,10 @@ export default defineConfig({
       },
       { find: /^@multiplatform\.one\/theme$/, replacement: resolve(gnomeDir, "shims/theme.ts") },
       { find: /^@multiplatform\.one\/forms$/, replacement: resolve(gnomeDir, "shims/forms.ts") },
+      {
+        find: /^@multiplatform\.one\/frappe-ui$/,
+        replacement: resolve(gnomeDir, "shims/frappe-ui.ts"),
+      },
       // One's file router never mounts on GJS (react-native-screens is a
       // native-fabric dead end). The shim backs the router API the
       // screens consume with the framework's navigator seam.
@@ -98,9 +136,13 @@ export default defineConfig({
     // and react-reconciler copies; dedupe forces every import (including
     // react-reconciler's CJS require) to this app's root.
     dedupe: [...gnomeDedupe],
-    // Metro-style resolution: prefer `.native.*` so platform-split
-    // modules pick their native variant under GNOME.
-    extensions: [...gnomeExtensions],
+    // Metro-style platform resolution. `.gnome.*` goes FIRST so a module
+    // that ships a real GNOME implementation wins — this registration is
+    // what makes @multiplatform.one/platform's `isGnome` true rather than a
+    // flag nothing ever sets. `.native.*` stays behind it as the fallback
+    // for modules that only split web/native (GTK legitimately reports
+    // isNative).
+    extensions: [...gnomePlatformExtensions, ...gnomeExtensions],
   },
   define: gnomeDefine(nodeEnv),
   build: {

package/templates/pieces/keycloak/universal/README.md.partial

@@ -17,3 +17,16 @@ First boot imports `docker/keycloak/realm.json`: realm `__NAME__` with the
 two clients above and a `dev` / `dev` user. The admin console lives at
 http://localhost:8080/auth (admin / admin) — manage users, clients, and
 flows there, or edit the realm import stub and recreate the volume.
+
+Port 8080 is the most contested port on a dev machine. If something
+already owns it, move the host mapping and keep `.env` in step:
+
+```bash
+KEYCLOAK_HTTP_PORT=8081 docker compose -f docker/compose.keycloak.yaml up -d
+# then set KEYCLOAK_BASE_URL=http://localhost:8081/auth in .env
+```
+
+Do not reach for a yaml `!override` on `ports` in a second compose file
+instead: compose versions without that tag drop the whole ports list
+silently, and the container comes up healthy, realm imported, and
+unreachable from the host.

package/templates/pieces/keycloak/universal/docker/compose.keycloak.yaml

@@ -5,7 +5,8 @@
 # start-dev uses the embedded dev database (persisted in the named volume)
 # and imports docker/keycloak/realm.json on first boot — realm "__NAME__"
 # with the clients the KEYCLOAK_* env keys reference, plus a dev/dev user.
-# Admin console: http://localhost:8080/auth (admin/admin).
+# Admin console: http://localhost:8080/auth (admin/admin) — port movable
+# via KEYCLOAK_HTTP_PORT; keep KEYCLOAK_BASE_URL in .env in step.
 services:
   keycloak:
     image: quay.io/keycloak/keycloak:26.6
@@ -18,10 +19,25 @@ services:
       # /auth keeps parity with KEYCLOAK_BASE_URL (and reverse-proxy setups).
       KC_HTTP_RELATIVE_PATH: /auth
     ports:
-      - "8080:8080"
+      # Host port is parameterized because :8080 is the single most
+      # contested port on a dev machine (another Keycloak, another Tomcat,
+      # another anything). A yaml !override in a second compose file is NOT
+      # a reliable replacement — compose versions that don't support the
+      # tag drop the whole ports list silently and the container comes up
+      # healthy but unreachable (measured 2026-08-13).
+      - "${KEYCLOAK_HTTP_PORT:-8080}:8080"
     volumes:
       - ./keycloak/realm.json:/opt/keycloak/data/import/realm.json:ro
-      - keycloak:/opt/keycloak/data/h2
+      # The volume mounts at data/, NOT data/h2: the image ships no h2/
+      # subdirectory, so a mount there is created root-owned and Keycloak
+      # (uid 1000) dies at boot unable to open its own database — H2 90028,
+      # "Could not open file /opt/keycloak/data/h2/keycloakdb.mv.db",
+      # measured 2026-08-13 on quay.io/keycloak/keycloak:26.6. It reads
+      # like corruption and survives `down -v`, because the wipe recreates
+      # the same root-owned mount point. data/ exists in the image with
+      # keycloak ownership, so Docker seeds the volume correctly; the realm
+      # bind above simply layers inside it.
+      - keycloak:/opt/keycloak/data
 
 volumes:
   keycloak: {}

package/templates/pieces/keycloak/universal/env.example.partial

@@ -2,7 +2,10 @@
 # mounts the KeycloakProvider wired in apps/__NAME__/src/app.ts; the other
 # keys must match the realm import (docker/keycloak/realm.json).
 KEYCLOAK_ENABLED=1
-# Auth server base URL (docker/compose.keycloak.yaml serves /auth on :8080).
+# Auth server base URL. The dev compose serves /auth on host port 8080 by
+# default; if 8080 is taken, start it with KEYCLOAK_HTTP_PORT=<port> (see
+# docker/compose.keycloak.yaml) and move the port HERE too — nothing
+# checks the two agree.
 KEYCLOAK_BASE_URL=http://localhost:8080/auth
 KEYCLOAK_REALM=__NAME__
 KEYCLOAK_CLIENT_ID=__NAME__

package/templates/pieces/vscode/universal/apps/__NAME__/package.json.partial

@@ -10,7 +10,7 @@
   },
   "devDependencies": {
     "@multiplatform.one/vite-plugin-vscode": "__MPO_VERSION__",
-    "@tamagui/vite-plugin": "2.0.0-rc.41",
+    "@tamagui/vite-plugin": "2.7.6",
     "@tomjs/vite-plugin-vscode": "^7.1.1",
     "@types/node": "^25.6.0",
     "@types/vscode": "^1.118.0",

package/templates/pieces/webext/universal/apps/__NAME__/package.json.partial

@@ -12,8 +12,8 @@
   "devDependencies": {
     "@multiplatform.one/utils": "__MPO_VERSION__",
     "@multiplatform.one/vite-plugin-webext": "__MPO_VERSION__",
-    "@tamagui/vite-plugin": "2.0.0-rc.41",
-    "@tamagui/web": "2.0.0-rc.41",
+    "@tamagui/vite-plugin": "2.7.6",
+    "@tamagui/web": "2.7.6",
     "@types/chrome": "^0.2.5",
     "@types/node": "^25.6.0",
     "dotenv": "^17.4.2",

package/templates/universal/apps/__NAME__/package.json

@@ -28,7 +28,7 @@
     "@package/i18n": "workspace:*",
     "@package/themes": "workspace:*",
     "@react-navigation/native": "~7.2.2",
-    "@tamagui/core": "2.0.0-rc.41",
+    "@tamagui/core": "2.7.6",
     "@tanstack/react-query": "^5.100.7",
     "@tanstack/react-query-devtools": "^5.100.7",
     "@tanstack/react-virtual": "^3.13.24",
@@ -47,7 +47,7 @@
     "react-native-web": "^0.21.2",
     "react-native-worklets": "~0.7.4",
     "shiki": "^4.0.2",
-    "tamagui": "2.0.0-rc.41",
+    "tamagui": "2.7.6",
     "text-encoding-utf-8": "^1.0.2"
   },
   "devDependencies": {

package/templates/universal/packages/themes/package.json

@@ -14,8 +14,8 @@
   },
   "dependencies": {
     "@multiplatform.one/theme": "__MPO_VERSION__",
-    "@tamagui/font-inter": "2.0.0-rc.41",
-    "tamagui": "2.0.0-rc.41"
+    "@tamagui/font-inter": "2.7.6",
+    "tamagui": "2.7.6"
   },
   "devDependencies": {
     "typescript": "~5.9.3"

package/types/bin/multiplatformOne.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"multiplatformOne.d.ts","sourceRoot":"","sources":["../../src/bin/multiplatformOne.ts"],"names":[],"mappings":"AA2FA,gHAAgH;AAChH,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,kGAAkG;IAClG,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gGAAgG;IAChG,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC,CAAC"}
+{"version":3,"file":"multiplatformOne.d.ts","sourceRoot":"","sources":["../../src/bin/multiplatformOne.ts"],"names":[],"mappings":"AA4FA,gHAAgH;AAChH,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,kGAAkG;IAClG,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gGAAgG;IAChG,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC,CAAC"}

package/types/commands/adoptApp.d.ts

@@ -0,0 +1,25 @@
+/**
+ * `mpo adopt` — bring an EXISTING, never-scaffolded project under `mpo
+ * update` management. Projects like this hand-copied one or more delivery
+ * targets (webext, gnome, …) from the mpo templates and consume
+ * @multiplatform.one/* from npm, but have no .mpo.json provenance, so
+ * `mpo update` refuses to run.
+ *
+ * Adoption writes provenance ONLY (template "none" + the chosen pieces +
+ * the current CLI version) and seeds .updateignore — it never rewrites a
+ * project file. The FIRST `mpo update` afterwards reconciles the piece
+ * files against the piece templates from an empty merge base, so real
+ * diffs (and conflicts) against hand-copied files are expected there;
+ * every later update is an ordinary three-way merge.
+ */
+import { type InitAppPiece } from "./initApp";
+export interface AdoptAppOptions {
+    /** Pieces the project hand-adopted (at least one is required). */
+    pieces?: InitAppPiece[];
+    /** Project name (default: package.json name, scope stripped). */
+    name?: string;
+    /** Non-interactive: never prompt (pieces must come from flags). */
+    yes?: boolean;
+}
+export declare function adoptApp(options?: AdoptAppOptions): Promise<void>;
+//# sourceMappingURL=adoptApp.d.ts.map

package/types/commands/adoptApp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adoptApp.d.ts","sourceRoot":"","sources":["../../src/commands/adoptApp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,OAAO,EAUL,KAAK,YAAY,EAClB,MAAM,WAAW,CAAC;AAEnB,MAAM,WAAW,eAAe;IAC9B,kEAAkE;IAClE,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IACxB,iEAAiE;IACjE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAuDD,wBAAsB,QAAQ,CAAC,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0F3E"}

package/types/commands/initApp.d.ts

@@ -6,6 +6,14 @@
  *     (apps/<name> + features/<name> + packages/config)
  */
 export type InitAppTemplate = "universal" | "app";
+/**
+ * The provenance template domain: the scaffold templates plus "none" for
+ * ADOPTED projects (`mpo adopt`) — existing repos that were never scaffolded.
+ * A "none" scaffold is the selected piece fragments overlaid on an EMPTY
+ * tree (no universal/app base), which is exactly the tool-owned surface of
+ * an adopted project.
+ */
+export type ProvenanceTemplate = InitAppTemplate | "none";
 /**
  * Optional composable pieces overlaid onto the base template (additive
  * fragments under templates/pieces/<piece>/ — the inverse of the old
@@ -21,8 +29,13 @@ export interface InitAppOptions {
     skipGit?: boolean;
     /** Pin @multiplatform.one/* to this semver range. Default: ^<cli version>. */
     version?: string;
-    /** Project template. When omitted: prompt (interactive) or "universal". */
-    template?: InitAppTemplate;
+    /**
+     * Project template. When omitted: prompt (interactive) or "universal".
+     * "none" scaffolds ONLY the selected pieces onto an empty tree (the
+     * `--pieces-only` flag) — `mpo update` uses it to rebuild the merge
+     * baselines of adopted projects.
+     */
+    template?: ProvenanceTemplate;
     /** Accept defaults instead of prompting (non-interactive / CI). */
     yes?: boolean;
     /**
@@ -31,6 +44,10 @@ export interface InitAppOptions {
      */
     pieces?: InitAppPiece[];
 }
+export declare function validateName(name: string): string;
+/** Root package.json name with any @scope/ prefix stripped (adopt +
+ *  update-bootstrap provenance name derivation). */
+export declare function packageJsonName(projectDir: string): string | undefined;
 export declare function cliVersion(): string | undefined;
 /**
  * Scaffold provenance (the copier-answers equivalent): which template, which
@@ -39,12 +56,21 @@ export declare function cliVersion(): string | undefined;
  * three-way template update.
  */
 export interface MpoProvenance {
-    template: InitAppTemplate;
+    /** "none" = adopted project (`mpo adopt`): pieces only, no base template. */
+    template: ProvenanceTemplate;
     cliVersion: string;
     name: string;
     mpoVersion: string;
     /** Composable pieces overlaid at init time (sorted). */
     pieces: InitAppPiece[];
+    /**
+     * false = adopted but never reconciled: `mpo adopt` wrote provenance
+     * without touching any project file, so no tool-owned content exists yet.
+     * The first `mpo update` merges the piece baseline from an EMPTY base
+     * (surfacing real diffs against hand-copied files) and then clears the
+     * flag. Absent/true = the tree carries the recorded scaffold.
+     */
+    reconciled?: boolean;
 }
 export declare const PROVENANCE_FILE = ".mpo.json";
 export declare function writeProvenance(targetDir: string, provenance: MpoProvenance): void;
@@ -65,9 +91,11 @@ export declare function mergeJsonValues(base: JsonValue, fragment: JsonValue): J
  * order must be deterministic), and every piece must ship a fragment for the
  * chosen template.
  */
-export declare function normalizePieces(pieces: string[], template: InitAppTemplate): InitAppPiece[];
+export declare function normalizePieces(pieces: string[], template: ProvenanceTemplate): InitAppPiece[];
 /** Pieces that can be offered for a template (fragment exists for it). */
-export declare function availablePieces(template: InitAppTemplate): InitAppPiece[];
+export declare function availablePieces(template: ProvenanceTemplate): InitAppPiece[];
+/** Human-readable piece summaries (adopt + init prompts). */
+export declare function pieceDescription(piece: InitAppPiece): string;
 /**
  * Generate apps/<name>/src/app.ts for the selected backend pieces instead of
  * storing 2^n template variants: each selected provider adds one createApp

package/types/commands/initApp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"initApp.d.ts","sourceRoot":"","sources":["../../src/commands/initApp.ts"],"names":[],"mappings":"AAaA;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,KAAK,CAAC;AAElD;;;;;GAKG;AACH,eAAO,MAAM,eAAe,uEAOlB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAW5D,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,mEAAmE;IACnE,GAAG,CAAC,EAAE,OAAO,CAAC;IACd;;;OAGG;IACH,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;CACzB;AA0CD,wBAAgB,UAAU,IAAI,MAAM,GAAG,SAAS,CAQ/C;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,eAAe,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,MAAM,EAAE,YAAY,EAAE,CAAC;CACxB;AAED,eAAO,MAAM,eAAe,cAAc,CAAC;AAE3C,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,GAAG,IAAI,CAKlF;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAiB5E;AAiFD,KAAK,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAM/F;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,GAAG,SAAS,CAoB/E;AAoFD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,eAAe,GAAG,YAAY,EAAE,CAe3F;AAED,0EAA0E;AAC1E,wBAAgB,eAAe,CAAC,QAAQ,EAAE,eAAe,GAAG,YAAY,EAAE,CAEzE;AA2BD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAyC3D;AAoBD;;;;GAIG;AACH,wBAAsB,OAAO,CAC3B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAqJf"}
+{"version":3,"file":"initApp.d.ts","sourceRoot":"","sources":["../../src/commands/initApp.ts"],"names":[],"mappings":"AAaA;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,KAAK,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG,eAAe,GAAG,MAAM,CAAC;AAE1D;;;;;GAKG;AACH,eAAO,MAAM,eAAe,uEAOlB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAW5D,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,mEAAmE;IACnE,GAAG,CAAC,EAAE,OAAO,CAAC;IACd;;;OAGG;IACH,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;CACzB;AAmBD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAWjD;AAED;oDACoD;AACpD,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAStE;AAYD,wBAAgB,UAAU,IAAI,MAAM,GAAG,SAAS,CAQ/C;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,eAAO,MAAM,eAAe,cAAc,CAAC;AAE3C,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,GAAG,IAAI,CAKlF;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAmB5E;AAoFD,KAAK,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAM/F;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,GAAG,SAAS,CAoB/E;AAoFD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,kBAAkB,GAAG,YAAY,EAAE,CAe9F;AAED,0EAA0E;AAC1E,wBAAgB,eAAe,CAAC,QAAQ,EAAE,kBAAkB,GAAG,YAAY,EAAE,CAE5E;AAED,6DAA6D;AAC7D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAE5D;AA2BD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAyC3D;AAoBD;;;;GAIG;AACH,wBAAsB,OAAO,CAC3B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAiLf"}

package/types/commands/updateApp.d.ts

@@ -11,14 +11,24 @@
  *
  * `git merge-tree --write-tree --merge-base=<base>` merges template
  * evolution with your customizations; conflicts land in the worktree with
- * normal conflict markers. An `.updateignore` file (one pathspec per line)
- * pins matching paths to your HEAD version, exactly like the old script.
+ * normal conflict markers. An `.updateignore` file (one exact file or
+ * directory prefix per line — not globs; `dir/**` is normalized, other
+ * glob shapes are refused) pins matching paths to your HEAD version.
  */
+import { type InitAppTemplate } from "./initApp";
 export interface UpdateAppOptions {
     /** Skip pnpm install after the merge. */
     skipInstall?: boolean;
     /** Override the semver range written for @multiplatform.one/* deps. */
     version?: string;
+    /**
+     * Pre-provenance bootstrap: when .mpo.json is missing, assume the project
+     * was scaffolded by this exact CLI version, write provenance first, then
+     * proceed with the normal update.
+     */
+    assumeVersion?: string;
+    /** Template recorded by the --assume-version bootstrap (default universal). */
+    assumeTemplate?: InitAppTemplate;
 }
 /** Structural three-way merge of package.json content. Returns the merged
  *  object, or undefined when a divergence can't be auto-resolved (the file

package/types/commands/updateApp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updateApp.d.ts","sourceRoot":"","sources":["../../src/commands/updateApp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AASH,MAAM,WAAW,gBAAgB;IAC/B,yCAAyC;IACzC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAyPD;;sEAEsE;AACtE,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAerC;AA2DD,wBAAsB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkP7E"}
+{"version":3,"file":"updateApp.d.ts","sourceRoot":"","sources":["../../src/commands/updateApp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAOH,OAAO,EASL,KAAK,eAAe,EAGrB,MAAM,WAAW,CAAC;AAEnB,MAAM,WAAW,gBAAgB;IAC/B,yCAAyC;IACzC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,eAAe,CAAC;CAClC;AA2QD;;sEAEsE;AACtE,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAerC;AAyGD,wBAAsB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgS7E"}