@stacksjs/actions 0.70.153 → 0.70.155

package/dist/upgrade/framework-hooks.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Run the migration hook after a vendored framework upgrade.
+ *
+ * The upgrade command is already an explicit request to install and activate
+ * the new framework. Its nested migration must therefore never open a second
+ * confirmation prompt. Ignoring stdin makes that contract structural, while
+ * `--force` bypasses both migration confirmation gates. A nonzero exit is a
+ * real upgrade failure so callers cannot report success with an unapplied
+ * schema.
+ */
+export declare function runPostSyncMigration(options: PostSyncMigrationOptions): Promise<void>;
+declare interface PostSyncSpawnOptions {
+  cmd: string[]
+  cwd: string
+  stdin: 'ignore'
+  stdout: 'inherit'
+  stderr: 'inherit'
+}
+declare interface PostSyncMigrationOptions {
+  bunExecutable: string
+  migrateScript: string
+  projectRoot: string
+  spawn: PostSyncSpawn
+}
+declare type PostSyncSpawn = (options: PostSyncSpawnOptions) => { exited: Promise<number> }

package/dist/upgrade/framework-hooks.js

@@ -0,0 +1,11 @@
+export async function runPostSyncMigration(options) {
+  const code = await options.spawn({
+    cmd: [options.bunExecutable, options.migrateScript, "migrate", "--force"],
+    cwd: options.projectRoot,
+    stdin: "ignore",
+    stdout: "inherit",
+    stderr: "inherit"
+  }).exited;
+  if (code !== 0)
+    throw Error(`Post-upgrade migration exited with code ${code}.`);
+}

package/dist/upgrade/framework-utils.d.ts

@@ -43,6 +43,14 @@ export declare function readSyncedVersion(versionFilePath: string): SyncedVersio
  * Persist the last-synced channel + sha to `.stacks-version`.
  */
 export declare function writeSyncedVersion(versionFilePath: string, ch: 'stable' | 'canary', sha: string): void;
+/**
+ * Decide whether the upgrade must protect framework-managed paths from local
+ * edits. The initial process always owns this preflight unless the user passed
+ * `--force`. An internal restart runs only after that validated parent has
+ * intentionally replaced those paths, so checking again would reject the
+ * upgrade's own writes as if they belonged to the user.
+ */
+export declare function shouldCheckDirtyManagedPaths(args: { force: boolean, alreadyRestarted: boolean }): boolean;
 /**
  * Pure decision for the "already up to date" short-circuit. Returns true only
  * when a sync can be safely skipped: no override flags, not a pinned version,

package/dist/upgrade/framework-utils.js

@@ -53,6 +53,9 @@ export function writeSyncedVersion(versionFilePath, ch, sha) {
     writeFileSync(versionFilePath, `${ch} ${sha}`, "utf-8");
   } catch {}
 }
+export function shouldCheckDirtyManagedPaths(args) {
+  return !args.force && !args.alreadyRestarted;
+}
 export function shouldShortCircuit(args) {
   const { force, targetVersion, remoteSha, synced, channel } = args;
   if (force || targetVersion)

package/dist/upgrade/framework.js

@@ -19,11 +19,13 @@ import {
   resolveUpgradeContext,
   resolveUpgradeMessage,
   shouldAutoDetectLocalStacks,
+  shouldCheckDirtyManagedPaths,
   shouldShortCircuit,
   snapshotTree,
   writeChannel,
   writeSyncedVersion
 } from "./framework-utils";
+import { runPostSyncMigration } from "./framework-hooks";
 const options = parseOptions(), projectRoot = p.projectPath();
 if (!existsSync(p.projectPath("storage/framework/core"))) {
   const { upgradeStacksPackages } = await import("./packages");
@@ -43,7 +45,8 @@ if (options.dryRun) {
   await runDryRunPreview();
   process.exit(ExitCode.Success);
 }
-if (!options.force) {
+const alreadyRestarted = process.argv.includes("--__restarted");
+if (shouldCheckDirtyManagedPaths({ force: !!options.force, alreadyRestarted })) {
   const dirty = await detectDirtyManagedPaths(projectRoot);
   if (dirty.length > 0) {
     console.warn(`
@@ -90,7 +93,7 @@ try {
   console.error("\u2718 Failed to upgrade Stacks framework:", err?.message || err);
   process.exit(ExitCode.FatalError);
 }
-const newVersion = readVersion(corePkgPath), ownHashAfter = await hashFileOrZero(ownPath), alreadyRestarted = process.argv.includes("--__restarted");
+const newVersion = readVersion(corePkgPath), ownHashAfter = await hashFileOrZero(ownPath);
 if (ownHashBefore !== 0n && ownHashAfter !== 0n && ownHashBefore !== ownHashAfter && !alreadyRestarted) {
   console.log(`Upgrade pulled a newer version of the upgrade action \u2014 re-running once to pick up new sync paths and hooks.
 `);
@@ -121,7 +124,12 @@ for (const { managed, summary } of perPath)
     console.log(`  ${managed.label.padEnd(10)} +${summary.added} ~${summary.changed} -${summary.removed} (${summary.unchanged} unchanged)`);
 const runHooks = !options.noPostinstall && options.postinstall !== !1;
 if (runHooks)
-  await runPostSyncHooks({ aggregate, perPath, projectRoot });
+  try {
+    await runPostSyncHooks({ aggregate, perPath, projectRoot });
+  } catch (err) {
+    console.error(`Post-sync hooks failed: ${err?.message || err}`);
+    process.exit(ExitCode.FatalError);
+  }
 if (ctx.channel === "canary" && !ctx.targetVersion)
   console.warn("\u26A0 Canary builds may contain bugs or breaking changes. Not recommended for production.");
 process.exit(ExitCode.Success);
@@ -426,18 +434,13 @@ async function runPostSyncHooks(args) {
   const migrationsDir = join(projectRoot, "database", "migrations");
   if (existsSync(migrationsDir)) {
     console.log("Running pending migrations...");
-    try {
-      const migrateScript = p.frameworkPath("core/buddy/src/cli.ts"), code = await Bun.spawn({
-        cmd: [process.argv[0] || "bun", migrateScript, "migrate"],
-        cwd: projectRoot,
-        stdout: "inherit",
-        stderr: "inherit"
-      }).exited;
-      if (code !== 0)
-        console.warn(`  migrate exited with code ${code} (non-fatal \u2014 DB may not be set up yet)`);
-    } catch (err) {
-      console.warn(`  migrate failed (non-fatal): ${err?.message || err}`);
-    }
+    const migrateScript = p.frameworkPath("core/buddy/src/cli.ts");
+    await runPostSyncMigration({
+      bunExecutable: process.argv[0] || "bun",
+      migrateScript,
+      projectRoot,
+      spawn: (spawnOptions) => Bun.spawn(spawnOptions)
+    });
   }
 }
 function pkgJsonInTree(dir) {

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/actions",
   "type": "module",
   "sideEffects": false,
-  "version": "0.70.153",
+  "version": "0.70.155",
   "description": "The Stacks actions.",
   "author": "Chris Breuer",
   "contributors": [
@@ -62,7 +62,7 @@
     "prepublishOnly": "bun run build"
   },
   "dependencies": {
-    "@stacksjs/config": "0.70.153",
+    "@stacksjs/config": "0.70.155",
     "@stacksjs/bumpx": "^0.2.6",
     "@stacksjs/bunpress": "^0.1.12",
     "@stacksjs/logsmith": "^0.2.3",
@@ -70,23 +70,23 @@
     "@stacksjs/ts-md": "^0.1.1"
   },
   "devDependencies": {
-    "@stacksjs/api": "0.70.153",
-    "@stacksjs/cli": "0.70.153",
-    "@stacksjs/config": "0.70.153",
-    "@stacksjs/database": "0.70.153",
+    "@stacksjs/api": "0.70.155",
+    "@stacksjs/cli": "0.70.155",
+    "@stacksjs/config": "0.70.155",
+    "@stacksjs/database": "0.70.155",
     "@stacksjs/tlsx": "^0.13.2",
     "better-dx": "^0.2.17",
-    "@stacksjs/dns": "0.70.153",
-    "@stacksjs/enums": "0.70.153",
-    "@stacksjs/env": "0.70.153",
-    "@stacksjs/error-handling": "0.70.153",
-    "@stacksjs/logging": "0.70.153",
-    "@stacksjs/path": "0.70.153",
-    "@stacksjs/security": "0.70.153",
-    "@stacksjs/storage": "0.70.153",
-    "@stacksjs/strings": "0.70.153",
-    "@stacksjs/utils": "0.70.153",
-    "@stacksjs/validation": "0.70.153"
+    "@stacksjs/dns": "0.70.155",
+    "@stacksjs/enums": "0.70.155",
+    "@stacksjs/env": "0.70.155",
+    "@stacksjs/error-handling": "0.70.155",
+    "@stacksjs/logging": "0.70.155",
+    "@stacksjs/path": "0.70.155",
+    "@stacksjs/security": "0.70.155",
+    "@stacksjs/storage": "0.70.155",
+    "@stacksjs/strings": "0.70.155",
+    "@stacksjs/utils": "0.70.155",
+    "@stacksjs/validation": "0.70.155"
   },
   "peerDependencies": {
     "pickier": "^0.1.35"