@wpmoo/odoo 0.8.61 → 0.8.63

package/README.md

@@ -162,6 +162,7 @@ npx @wpmoo/odoo pot sale devel i18n/sale.pot
 
 npx @wpmoo/odoo resetdb devel sale
 npx @wpmoo/odoo snapshot devel before-update
+npx @wpmoo/odoo restore-snapshot --dry-run before-update devel
 npx @wpmoo/odoo restore-snapshot before-update devel
 ```
 
@@ -229,10 +230,17 @@ cp .env.example .env
 ./moo pot sale devel i18n/sale.pot
 
 ./moo snapshot devel before-update
+./moo restore-snapshot --dry-run before-update devel
 ./moo restore-snapshot before-update devel
 ./moo resetdb devel sale
 ```
 
+`restore-snapshot --dry-run` validates the selected snapshot and prints the
+restore plan without changing the database or filestore. Generated environments
+also support `WPMOO_SNAPSHOT_RETENTION_COUNT` for pruning old snapshot files.
+When `WPMOO_ENV=stage` or `WPMOO_ENV=prod`, destructive database actions such
+as `resetdb` and real `restore-snapshot` require `WPMOO_ALLOW_DESTRUCTIVE=1`.
+
 Use `npx @wpmoo/odoo ...` for package/operator commands such as `create`, `add-repo`, `remove-repo`, `add-module`, `remove-module`, `status`, `doctor`, and `reset`. Use `./moo ...` inside a generated environment for local daily Compose commands.
 
 ## Repository and Module Management
@@ -387,6 +395,7 @@ Recommended recovery pattern:
 npx @wpmoo/odoo reset --dry-run
 npx @wpmoo/odoo reset
 npx @wpmoo/odoo doctor --fix
+./moo restore-snapshot --dry-run before-reset devel
 ./moo restore-snapshot before-reset devel
 ```
 

package/dist/daily-actions.js

@@ -62,7 +62,7 @@ function usage(command) {
     if (command === 'snapshot')
         return 'Usage: wpmoo snapshot [db] [snapshot-name]';
     if (command === 'restore-snapshot')
-        return 'Usage: wpmoo restore-snapshot <snapshot-name> [db]';
+        return 'Usage: wpmoo restore-snapshot [--dry-run] <snapshot-name> [db]';
     if (command === 'lint')
         return 'Usage: wpmoo lint';
     return 'Usage: wpmoo pot <module[,module]> [db] [output]';
@@ -89,6 +89,17 @@ function positionalArgs(command, argv, min, max) {
     }
     return argv;
 }
+function restoreSnapshotArgs(argv) {
+    const args = [...argv];
+    const dryRun = args[0] === '--dry-run';
+    if (dryRun) {
+        args.shift();
+    }
+    if (args.length < 1 || args.length > 2 || args.some((arg) => arg.startsWith('-'))) {
+        throw new Error(usage('restore-snapshot'));
+    }
+    return dryRun ? ['--dry-run', ...args] : args;
+}
 function testArgs(argv) {
     const [modules, ...rest] = argv;
     if (!modules || modules.startsWith('-'))
@@ -129,7 +140,7 @@ function scriptArgs(command, argv) {
     if (command === 'snapshot')
         return positionalArgs(command, argv, 0, 2);
     if (command === 'restore-snapshot')
-        return positionalArgs(command, argv, 1, 2);
+        return restoreSnapshotArgs(argv);
     if (command === 'lint')
         return ensureNoArgs(command, argv);
     return positionalArgs(command, argv, 1, 3);

package/dist/external-templates.js

@@ -37,6 +37,12 @@ export function renderComposeEnvExample(options) {
         'POSTGRES_PASSWORD=odoo',
         'ODOO_MASTER_PASSWORD=admin',
         `ODOO_TEST_MODULE=${defaultTestModule(options)}`,
+        'WPMOO_ENV=dev',
+        'WPMOO_SNAPSHOT_RETENTION_COUNT=0',
+        '',
+        '# Required only when intentionally running destructive database actions',
+        '# such as resetdb or restore-snapshot with WPMOO_ENV=stage or WPMOO_ENV=prod.',
+        '# WPMOO_ALLOW_DESTRUCTIVE=1',
         '',
     ].join('\n');
 }

package/dist/help.js

@@ -28,7 +28,7 @@ Usage:
   npx @wpmoo/odoo test <module[,module]> [--db <db>] [--mode init|update] [--tags <tags>]
   npx @wpmoo/odoo resetdb [db] [module[,module]]
   npx @wpmoo/odoo snapshot [db] [snapshot-name]
-  npx @wpmoo/odoo restore-snapshot <snapshot-name> [db]
+  npx @wpmoo/odoo restore-snapshot [--dry-run] <snapshot-name> [db]
   npx @wpmoo/odoo lint
   npx @wpmoo/odoo pot <module[,module]> [db] [output]
 
@@ -108,6 +108,7 @@ Task recipes:
     npx @wpmoo/odoo snapshot [db] [snapshot-name]
     npx @wpmoo/odoo reset --dry-run
     npx @wpmoo/odoo reset
+    npx @wpmoo/odoo restore-snapshot --dry-run <snapshot-name> [db]
     npx @wpmoo/odoo restore-snapshot <snapshot-name> [db]
   Daily command checks:
     npx @wpmoo/odoo status

package/dist/templates.js

@@ -243,6 +243,7 @@ cp .env.example .env
 
 \`\`\`bash
 ./moo snapshot devel before-update
+./moo restore-snapshot --dry-run before-update devel
 ./moo restore-snapshot before-update devel
 \`\`\`
 
@@ -371,7 +372,7 @@ usage() {
     "test") echo "Usage: ./moo test <module[,module]> [--db <db>] [--mode init|update] [--tags <tags>]" ;;
     "resetdb") echo "Usage: ./moo resetdb [db] [module[,module]]" ;;
     "snapshot") echo "Usage: ./moo snapshot [db] [snapshot-name]" ;;
-    "restore-snapshot") echo "Usage: ./moo restore-snapshot <snapshot-name> [db]" ;;
+    "restore-snapshot") echo "Usage: ./moo restore-snapshot [--dry-run] <snapshot-name> [db]" ;;
     "lint") echo "Usage: ./moo lint" ;;
     "pot") echo "Usage: ./moo pot <module[,module]> [db] [output]" ;;
   esac
@@ -526,8 +527,14 @@ case "$command" in
     ;;
   "restore-snapshot")
     shift
+    restore_args=()
+    if [[ "\${1:-}" == "--dry-run" ]]; then
+      restore_args+=("--dry-run")
+      shift
+    fi
     positional_args "$command" 1 2 "$@"
-    run_script ./scripts/restore-snapshot.sh "$@"
+    restore_args+=("$@")
+    run_script ./scripts/restore-snapshot.sh "\${restore_args[@]}"
     ;;
   "lint")
     shift
@@ -692,7 +699,7 @@ Useful maintenance commands:
 ./moo lint
 ./moo resetdb [db] [module[,module]]
 ./moo snapshot [db] [snapshot-name]
-./moo restore-snapshot <snapshot-name> [db]
+./moo restore-snapshot [--dry-run] <snapshot-name> [db]
 ./moo pot <module[,module]> [db] [output]
 \`\`\`
 

package/docs/generated-environment-verification.md

@@ -27,7 +27,7 @@ not validate staging or production deployments.
 | Source manifest sync | Source repo metadata, `.gitmodules`, and `odoo/custom/manifests/sources.yaml` stay aligned. | `npx @wpmoo/odoo source list`, `npx @wpmoo/odoo source sync` |
 | Module add/remove | Module registration changes are applied to the selected source repo config. | `npx @wpmoo/odoo add-module ...`, `npx @wpmoo/odoo remove-module ...` |
 | Safe reset | Generated files are refreshed (including `compose.yaml` overlays and env example) without deleting source module code. Local runtime/data directories and custom source layout content are preserved; legacy user-editable paths from older templates may remain and are reported for manual cleanup. | `npx @wpmoo/odoo reset --dry-run`, `npx @wpmoo/odoo reset` |
-| Snapshot/restore and lint/pot | These actions are delegated by `./moo` to compose scripts without extra package-side logic. | `./moo snapshot ...`, `./moo restore-snapshot ...`, `./moo lint`, `./moo pot ...` |
+| Snapshot/restore and lint/pot | These actions are delegated by `./moo` to compose scripts. Restore preview, snapshot retention, and stage/prod destructive guards are preserved by the package argument layer. | `./moo snapshot ...`, `./moo restore-snapshot --dry-run ...`, `./moo restore-snapshot ...`, `./moo lint`, `./moo pot ...` |
 
 ## Compact compose checks
 
@@ -46,6 +46,10 @@ Default local development uses `compose.yaml` plus `compose/dev.yaml`.
 `WPMOO_ENV=stage` or `WPMOO_ENV=prod` must only be used after production-grade
 secrets and volumes are configured.
 
+When `WPMOO_ENV=stage` or `WPMOO_ENV=prod`, generated compose scripts refuse
+destructive database actions such as `resetdb` and real `restore-snapshot`
+unless `.env` explicitly sets `WPMOO_ALLOW_DESTRUCTIVE=1`.
+
 For PostgreSQL 18 environments (including `POSTGRES_IMAGE=postgres:18`), ensure db
 volume and tmpfs mount targets use `/var/lib/postgresql` directly:
 
@@ -88,6 +92,18 @@ odoo/custom/manifests/
 Run `npx @wpmoo/odoo reset --dry-run` before writing changes when you need to
 review the generated file refresh plan.
 
+## Snapshot policy
+
+Use restore preview before a destructive restore:
+
+```bash
+./moo restore-snapshot --dry-run <snapshot-name> [db]
+```
+
+`WPMOO_SNAPSHOT_RETENTION_COUNT` may be set to a positive integer to prune old
+snapshot manifests and their matching dump/filestore files after a new snapshot
+is written.
+
 ## Source manifest checks
 
 Generated environments include `odoo/custom/manifests/sources.yaml`. The manifest

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wpmoo/odoo",
-  "version": "0.8.61",
+  "version": "0.8.63",
   "description": "WPMoo Odoo lifecycle tooling for development, staging, and production workflows.",
   "type": "module",
   "repository": {