create-thally-docs 0.9.0 → 0.10.0

package/dist/chunk-WMHBVXWW.js

@@ -0,0 +1,65 @@
+#!/usr/bin/env node
+
+// src/stable-scaffold-release.json
+var stable_scaffold_release_default = {
+  schemaVersion: 1,
+  id: "2026-08-05.04438581.baf29307",
+  source: {
+    repository: "thallylabs/starter",
+    commitSha: "04438581a402d02e9f4308ff047c4c4a48d8169f",
+    treeSha: "c962a01b3b8b24ffdb65671c2f7805a47175ba42",
+    archiveUrl: "https://codeload.github.com/thallylabs/starter/tar.gz/04438581a402d02e9f4308ff047c4c4a48d8169f",
+    manifestPath: "starter-release.json",
+    manifestSha256: "e019c6416c6c6872114cdf9d9b5eec6579873f46f826748cf39254fd16628392"
+  },
+  runtime: {
+    repository: "thallylabs/thally",
+    commitSha: "baf2930771baf449238bd6c68101ceb3af33ee96",
+    treeSha: "56f8217b4da6740015e4775d2ce0aeb60bc167a0",
+    contentSource: "assets",
+    identityContractVersion: 1
+  },
+  starterVersion: 2
+};
+
+// src/previous-scaffold-releases.json
+var previous_scaffold_releases_default = [
+  {
+    schemaVersion: 1,
+    id: "2026-08-05.d5fef916.f3817263",
+    source: {
+      repository: "thallylabs/starter",
+      commitSha: "d5fef9167ea81f12a861deec5515a78a0f756781",
+      treeSha: "31c1e49342ce9f4122dc0cd60fe714868ca03150",
+      archiveUrl: "https://codeload.github.com/thallylabs/starter/tar.gz/d5fef9167ea81f12a861deec5515a78a0f756781",
+      manifestPath: "starter-release.json",
+      manifestSha256: "06cccd3496c368ef95a11b3afc15add610f261b8106e8371720b084adbf7fa5a"
+    },
+    runtime: {
+      repository: "thallylabs/thally",
+      commitSha: "f38172638cd2cc944ac9ecda19c096ce4d9b4599",
+      treeSha: "d33ad60ad0acabee1cf950880c8bd908e83a002a",
+      contentSource: "assets",
+      identityContractVersion: 1
+    },
+    starterVersion: 1
+  }
+];
+
+// src/release.ts
+var STABLE_SCAFFOLD_RELEASE = stable_scaffold_release_default;
+var SUPPORTED_SCAFFOLD_RELEASES = [
+  STABLE_SCAFFOLD_RELEASE,
+  ...previous_scaffold_releases_default
+];
+function isStableScaffoldRelease(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const candidate = value;
+  return candidate.schemaVersion === STABLE_SCAFFOLD_RELEASE.schemaVersion && candidate.id === STABLE_SCAFFOLD_RELEASE.id && candidate.starterVersion === STABLE_SCAFFOLD_RELEASE.starterVersion && candidate.source?.repository === STABLE_SCAFFOLD_RELEASE.source.repository && candidate.source?.commitSha === STABLE_SCAFFOLD_RELEASE.source.commitSha && candidate.source?.treeSha === STABLE_SCAFFOLD_RELEASE.source.treeSha && candidate.source?.archiveUrl === STABLE_SCAFFOLD_RELEASE.source.archiveUrl && candidate.source?.manifestPath === STABLE_SCAFFOLD_RELEASE.source.manifestPath && candidate.source?.manifestSha256 === STABLE_SCAFFOLD_RELEASE.source.manifestSha256 && candidate.runtime?.repository === STABLE_SCAFFOLD_RELEASE.runtime.repository && candidate.runtime?.commitSha === STABLE_SCAFFOLD_RELEASE.runtime.commitSha && candidate.runtime?.treeSha === STABLE_SCAFFOLD_RELEASE.runtime.treeSha && candidate.runtime?.contentSource === STABLE_SCAFFOLD_RELEASE.runtime.contentSource && candidate.runtime?.identityContractVersion === STABLE_SCAFFOLD_RELEASE.runtime.identityContractVersion;
+}
+
+export {
+  STABLE_SCAFFOLD_RELEASE,
+  SUPPORTED_SCAFFOLD_RELEASES,
+  isStableScaffoldRelease
+};

package/dist/customize.d.ts

@@ -1,93 +1,39 @@
 /**
- * Lowest `@thallylabs/cli` release a scaffold may declare.
+ * Documented owner-field personalization for the immutable starter tree.
  *
- * The managed builder depends on the Cloudflare-aware CLI contract, so a site
- * scaffolded from an older or locally-vendored template must not keep a
- * pre-Workers pin. This is a FLOOR, never an override: the canonical template
- * tracks the newest published CLI, and overwriting its pin with a constant that
- * has since aged past it silently downgrades every generated site. Raise it
- * only alongside a released CLI — `scaffold-hygiene.test.ts` fails if it ever
- * climbs above the version this monorepo publishes.
+ * Runtime source, authored pages, navigation structure, dependencies, CI, and
+ * repository policy all belong to `thallylabs/starter`. This module may change
+ * only the small set of fields an owner answers during creation.
  */
-declare const MIN_CLI_VERSION = "0.7.0";
-/**
- * Lowest `@thallylabs/mcp` release a scaffold may declare. Same floor semantics
- * as {@link MIN_CLI_VERSION}; it also stands in for the unresolvable `*` range
- * that older workspace-based templates used.
- */
-declare const MIN_MCP_VERSION = "0.9.0";
-/**
- * Resolve a dependency pin to at least `floor`, preferring what the template
- * already ships. An absent, unresolvable, or demonstrably older pin becomes the
- * floor; anything newer — or anything the comparison cannot rank — survives.
- */
-declare function raisePinToFloor(current: string | undefined, floor: string): string;
 interface StarterLocale {
     code: string;
     label: string;
 }
-interface StarterFile {
-    path: string;
-    content: string;
-}
-interface BuildStarterFilesOptions {
+interface StarterPersonalizationOptions {
     projectName: string;
-    enableAiChat?: boolean;
-    repoUrl?: string;
+    packageName: string;
+    description: string;
+    brandPreset: string;
+    repoUrl: string;
+    enableAiChat: boolean;
     i18nLocales?: Array<StarterLocale>;
 }
-declare function buildStarterDocsJson({ enableAiChat, repoUrl, i18nLocales, }: {
-    enableAiChat: boolean;
-    repoUrl?: string;
-    i18nLocales?: Array<{
-        code: string;
-        label: string;
-    }>;
-}): string;
 /**
- * Render the complete site-owned starter layer without reading or writing the
- * filesystem. CLI, MCP, and Thally Cloud consume these exact bytes so a new
- * site cannot vary by which creation entry point the user chose.
- */
-declare function buildStarterFiles({ projectName, enableAiChat, repoUrl, i18nLocales, }: BuildStarterFilesOptions): Array<StarterFile>;
-declare function writeStarterContent(targetDir: string, projectName: string, enableAiChat?: boolean, repoUrl?: string, i18nLocales?: Array<{
-    code: string;
-    label: string;
-}>): void;
-declare function writeStarterAgentGuide(targetDir: string, projectName: string): void;
-declare function writeStarterReadme(targetDir: string, projectName: string): void;
-/**
- * Write provider-portable Cloudflare Workers configuration into every scaffold.
+ * Personalize only the owner-controlled settings in `docs.json`.
  *
- * The files contain no account, route, bucket, or token identifiers. Thally
- * Cloud supplies those operational values while self-hosters can deploy the
- * same source tree to their own account without editing application internals.
+ * Authored tabs, groups, pages, theme choices, and every unrelated key remain
+ * byte-for-byte equivalent after JSON normalization.
  */
-declare function writeCloudflareRuntimeConfig(targetDir: string, slug: string): void;
+declare function updateStarterDocsConfig(targetDir: string, enableAiChat: boolean, repoUrl: string, i18nLocales?: Array<StarterLocale>): void;
+/** Personalize the documented identity and repository fields in `site.ts`. */
 declare function updateSiteConfig(targetDir: string, projectName: string, description: string, brandPreset: string, repoUrl: string): void;
-declare function patchApiReferenceGuard(targetDir: string): void;
-declare function patchTopBarNavigation(targetDir: string): void;
-declare function patchOpenApiFetch(targetDir: string): void;
+/** Rename only the root package identity; dependency pins belong to starter. */
+declare function updatePackageIdentity(targetDir: string, packageName: string): void;
+/** Update the provider-portable Worker name without recreating its config. */
+declare function updateCloudflareRuntimeName(targetDir: string, packageName: string): void;
+/** Copy the canonical environment guide to the ignored local filename. */
 declare function updateEnvExample(targetDir: string): void;
-/**
- * Normalize the canonical docs package for a newly named standalone site.
- * `thallylabs/docs` is already standalone, while this defensive cleanup also
- * keeps local or older monorepo-based sources safe to scaffold:
- *
- *   - `workspaces` points at a directory that doesn't exist in scaffolds.
- *   - `prebuild`/`pretest` invoke `packages:build`, which builds those absent
- *     workspaces. Runtime sources and embeddings stay in `prebuild`: both run
- *     standalone and supply request-time data in filesystem-free Workers.
- *   - The copied `package-lock.json` still resolves the monorepo's workspace
- *     graph; deleting it lets the scaffold's own `npm install` write a clean
- *     lockfile. Workspace-linked deps (e.g. @thallylabs/core) resolve from the
- *     npm registry instead, which is why the template must depend on published
- *     versions, never `workspace:*` specs.
- *
- * Also names the package after the site so `npm ls`/lockfiles read correctly.
- */
-declare function patchPackageJson(targetDir: string, slug: string): void;
-/** Ensure dependency folders are ignored at any depth in generated sites. */
-declare function patchGitignore(targetDir: string): void;
+/** Apply the complete, intentionally narrow owner-personalization contract. */
+declare function personalizeStarter(targetDir: string, options: StarterPersonalizationOptions): void;
 
-export { type BuildStarterFilesOptions, MIN_CLI_VERSION, MIN_MCP_VERSION, type StarterFile, type StarterLocale, buildStarterDocsJson, buildStarterFiles, patchApiReferenceGuard, patchGitignore, patchOpenApiFetch, patchPackageJson, patchTopBarNavigation, raisePinToFloor, updateEnvExample, updateSiteConfig, writeCloudflareRuntimeConfig, writeStarterAgentGuide, writeStarterContent, writeStarterReadme };
+export { type StarterLocale, type StarterPersonalizationOptions, personalizeStarter, updateCloudflareRuntimeName, updateEnvExample, updatePackageIdentity, updateSiteConfig, updateStarterDocsConfig };

package/dist/customize.js

@@ -1,37 +1,17 @@
 #!/usr/bin/env node
 import {
-  MIN_CLI_VERSION,
-  MIN_MCP_VERSION,
-  buildStarterDocsJson,
-  buildStarterFiles,
-  patchApiReferenceGuard,
-  patchGitignore,
-  patchOpenApiFetch,
-  patchPackageJson,
-  patchTopBarNavigation,
-  raisePinToFloor,
+  personalizeStarter,
+  updateCloudflareRuntimeName,
   updateEnvExample,
+  updatePackageIdentity,
   updateSiteConfig,
-  writeCloudflareRuntimeConfig,
-  writeStarterAgentGuide,
-  writeStarterContent,
-  writeStarterReadme
-} from "./chunk-BW7J7DJV.js";
+  updateStarterDocsConfig
+} from "./chunk-ORUAMPNF.js";
 export {
-  MIN_CLI_VERSION,
-  MIN_MCP_VERSION,
-  buildStarterDocsJson,
-  buildStarterFiles,
-  patchApiReferenceGuard,
-  patchGitignore,
-  patchOpenApiFetch,
-  patchPackageJson,
-  patchTopBarNavigation,
-  raisePinToFloor,
+  personalizeStarter,
+  updateCloudflareRuntimeName,
   updateEnvExample,
+  updatePackageIdentity,
   updateSiteConfig,
-  writeCloudflareRuntimeConfig,
-  writeStarterAgentGuide,
-  writeStarterContent,
-  writeStarterReadme
+  updateStarterDocsConfig
 };

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   migrateDocs
-} from "./chunk-YWNWLSZ2.js";
+} from "./chunk-GAFCLXU4.js";
 import {
   logo,
   readDocsJson,
@@ -9,9 +9,11 @@ import {
   slugify,
   success,
   writeDocsJson
-} from "./chunk-JNDRCCJV.js";
-import "./chunk-BW7J7DJV.js";
-import "./chunk-PJW4JJIT.js";
+} from "./chunk-GTGHYJXS.js";
+import "./chunk-ORUAMPNF.js";
+import "./chunk-ENQIF6MA.js";
+import "./chunk-KXJT2MG5.js";
+import "./chunk-WMHBVXWW.js";
 
 // src/index.ts
 import { existsSync as existsSync3, readdirSync as readdirSync2 } from "fs";
@@ -151,7 +153,7 @@ async function gatherAnswers(dirArg, useDefaults, installPreference) {
   let i18nLocales;
   if (!useDefaults) {
     const enableI18n = await input({
-      message: "  Add languages beyond English and Spanish? (y/N):",
+      message: "  Add another documentation language? (y/N):",
       default: "N"
     });
     if (enableI18n.toLowerCase() === "y") {

package/dist/migrate/index.js

@@ -1,10 +1,12 @@
 #!/usr/bin/env node
 import {
   migrateDocs
-} from "../chunk-YWNWLSZ2.js";
-import "../chunk-JNDRCCJV.js";
-import "../chunk-BW7J7DJV.js";
-import "../chunk-PJW4JJIT.js";
+} from "../chunk-GAFCLXU4.js";
+import "../chunk-GTGHYJXS.js";
+import "../chunk-ORUAMPNF.js";
+import "../chunk-ENQIF6MA.js";
+import "../chunk-KXJT2MG5.js";
+import "../chunk-WMHBVXWW.js";
 export {
   migrateDocs
 };

package/dist/release.d.ts

@@ -11,6 +11,22 @@ interface ScaffoldSourceRelease {
     commitSha: string;
     treeSha: string;
     archiveUrl: string;
+    manifestPath: 'starter-release.json';
+    manifestSha256: string;
+}
+interface ScaffoldOwnershipContract {
+    frameworkSyncEligible: readonly string[];
+    userOwnedNeverOverwrite: readonly string[];
+    manualReview: readonly string[];
+}
+interface StarterReleaseManifest {
+    schemaVersion: 1;
+    starterVersion: number;
+    repository: string;
+    defaultBranch: string;
+    runtime: Pick<ScaffoldRuntimeRelease, 'repository' | 'commitSha' | 'treeSha'>;
+    packages: Record<string, string>;
+    ownership: ScaffoldOwnershipContract;
 }
 interface ScaffoldRuntimeRelease {
     repository: string;
@@ -29,30 +45,22 @@ interface ScaffoldRelease {
 /**
  * Current stable scaffold release.
  *
- * The source commit is the refreshed public docs template and the runtime
- * commit is the matching engine change. `create-thally-docs`, the CLI, MCP,
- * and Thally Cloud all import this exact record rather than following a moving
- * branch independently.
+ * The source commit is the complete, standalone `thallylabs/starter` tree and
+ * the runtime commit is the matching engine change. `create-thally-docs`, the
+ * CLI, MCP, and Thally Cloud all import this exact record rather than following
+ * a moving branch independently. Promotion replaces the placeholders in the
+ * adjacent JSON record, which is also consumed by Cloud build parity checks.
+ */
+declare const STABLE_SCAFFOLD_RELEASE: ScaffoldRelease;
+/**
+ * Immutable releases this toolchain can use as a three-way update base.
+ *
+ * Promotion prepends the new stable record but retains earlier records. That
+ * lets a project created directly from GitHub carry only the exact manifest
+ * bytes and still resolve its original starter without mutable branch state.
  */
-declare const STABLE_SCAFFOLD_RELEASE: {
-    readonly schemaVersion: 1;
-    readonly id: "2026-08-04.b0094de4.e36d2bcf";
-    readonly source: {
-        readonly repository: "thallylabs/docs";
-        readonly commitSha: "b0094de4fea84567eb12c39c6783fdae6820bb98";
-        readonly treeSha: "ffd0a6fda07341ddd1ba164cb40acef796f89e2d";
-        readonly archiveUrl: "https://codeload.github.com/thallylabs/docs/tar.gz/b0094de4fea84567eb12c39c6783fdae6820bb98";
-    };
-    readonly runtime: {
-        readonly repository: "thallylabs/thally";
-        readonly commitSha: "e36d2bcff38f7638a77369e12773a7cab4d5d9ce";
-        readonly treeSha: "1c8b0358d78d8caa14ed039bff6ab47c98b685d8";
-        readonly contentSource: "assets";
-        readonly identityContractVersion: 1;
-    };
-    readonly starterVersion: 1;
-};
+declare const SUPPORTED_SCAFFOLD_RELEASES: readonly ScaffoldRelease[];
 /** True only when an unknown record is the currently supported release. */
 declare function isStableScaffoldRelease(value: unknown): value is ScaffoldRelease;
 
-export { STABLE_SCAFFOLD_RELEASE, type ScaffoldRelease, type ScaffoldRuntimeRelease, type ScaffoldSourceRelease, isStableScaffoldRelease };
+export { STABLE_SCAFFOLD_RELEASE, SUPPORTED_SCAFFOLD_RELEASES, type ScaffoldOwnershipContract, type ScaffoldRelease, type ScaffoldRuntimeRelease, type ScaffoldSourceRelease, type StarterReleaseManifest, isStableScaffoldRelease };

package/dist/release.js

@@ -1,9 +1,11 @@
 #!/usr/bin/env node
 import {
   STABLE_SCAFFOLD_RELEASE,
+  SUPPORTED_SCAFFOLD_RELEASES,
   isStableScaffoldRelease
-} from "./chunk-PJW4JJIT.js";
+} from "./chunk-WMHBVXWW.js";
 export {
   STABLE_SCAFFOLD_RELEASE,
+  SUPPORTED_SCAFFOLD_RELEASES,
   isStableScaffoldRelease
 };

package/dist/scaffold.d.ts

@@ -1,16 +1,31 @@
 export { STABLE_SCAFFOLD_RELEASE } from './release.js';
 
 /**
- * The live Thally documentation site is also the canonical standalone site
- * source. Keeping one source means a runtime or UI improvement shipped to the
- * docs is available to every subsequent scaffold without maintaining a second
- * template repository.
+ * Immutable starter archive download and extraction.
+ *
+ * The dedicated starter repository is already a customer-ready project. Every
+ * safe filesystem entry is extracted; there is no exclusion list or second
+ * manifest that can silently produce a different scaffold.
  */
-declare const TEMPLATE_REPOSITORY: "thallylabs/docs";
-declare const TEMPLATE_COMMIT_SHA: "b0094de4fea84567eb12c39c6783fdae6820bb98";
-declare const EXCLUDE_PATHS: string[];
-/** True if a tarball entry should land in the scaffold (see EXCLUDE_PATHS). */
-declare function shouldInclude(path: string): boolean;
+
+/** Repository whose complete tree becomes every newly scaffolded site. */
+declare const STARTER_REPOSITORY: string;
+/** Exact starter commit consumed by every creation surface. */
+declare const STARTER_COMMIT_SHA: string;
+/** GitHub codeload's single top-level directory for the pinned archive. */
+declare const STARTER_ARCHIVE_ROOT: string;
+interface StarterArchiveEntryMetadata {
+    type: string;
+    size: number;
+}
+/**
+ * Validate one codeload entry before `strip: 1` can write it to disk.
+ *
+ * Git cannot store devices or FIFOs, and starter sites do not need links. A
+ * release containing one is rejected rather than partially extracted because
+ * the entire repository tree is the immutable contract.
+ */
+declare function validateStarterArchiveEntry(archivePath: string, entry: StarterArchiveEntryMetadata, archiveRoot?: string): void;
 
 interface ScaffoldOptions {
     projectDir: string;
@@ -35,4 +50,4 @@ interface ScaffoldResult {
 }
 declare function scaffold(options: ScaffoldOptions): Promise<ScaffoldResult>;
 
-export { EXCLUDE_PATHS, type ScaffoldOptions, type ScaffoldResult, TEMPLATE_COMMIT_SHA, TEMPLATE_REPOSITORY, scaffold, shouldInclude };
+export { STARTER_ARCHIVE_ROOT, STARTER_COMMIT_SHA, STARTER_REPOSITORY, type ScaffoldOptions, type ScaffoldResult, scaffold, validateStarterArchiveEntry };

package/dist/scaffold.js

@@ -1,20 +1,23 @@
 #!/usr/bin/env node
 import {
-  EXCLUDE_PATHS,
-  TEMPLATE_COMMIT_SHA,
-  TEMPLATE_REPOSITORY,
-  scaffold,
-  shouldInclude
-} from "./chunk-JNDRCCJV.js";
-import "./chunk-BW7J7DJV.js";
+  scaffold
+} from "./chunk-GTGHYJXS.js";
+import "./chunk-ORUAMPNF.js";
+import {
+  STARTER_ARCHIVE_ROOT,
+  STARTER_COMMIT_SHA,
+  STARTER_REPOSITORY,
+  validateStarterArchiveEntry
+} from "./chunk-ENQIF6MA.js";
+import "./chunk-KXJT2MG5.js";
 import {
   STABLE_SCAFFOLD_RELEASE
-} from "./chunk-PJW4JJIT.js";
+} from "./chunk-WMHBVXWW.js";
 export {
-  EXCLUDE_PATHS,
   STABLE_SCAFFOLD_RELEASE,
-  TEMPLATE_COMMIT_SHA,
-  TEMPLATE_REPOSITORY,
+  STARTER_ARCHIVE_ROOT,
+  STARTER_COMMIT_SHA,
+  STARTER_REPOSITORY,
   scaffold,
-  shouldInclude
+  validateStarterArchiveEntry
 };

package/dist/starter-sync.d.ts

@@ -0,0 +1,68 @@
+import { ScaffoldOwnershipContract, ScaffoldRelease, StarterReleaseManifest } from './release.js';
+
+/**
+ * Ownership-aware, three-way planning for future starter runtime updates.
+ *
+ * The ownership contract comes from the pinned starter archive's
+ * `starter-release.json`. Automatic updates touch only framework-eligible files
+ * that still match the recorded old starter; owner and manual-review paths are
+ * never included in an apply plan.
+ */
+
+type StarterPathOwnership = 'protected' | 'manual' | 'syncable' | 'unmanaged';
+interface StarterRuntimeSyncPlan {
+    copyPaths: string[];
+    deletePaths: string[];
+    conflictPaths: string[];
+    manualReviewPaths: string[];
+    preservedPaths: string[];
+    unchangedPaths: string[];
+    targetPreconditions: Record<string, StarterTargetPrecondition>;
+}
+interface StarterTargetPrecondition {
+    kind: 'missing' | 'file';
+    sha256?: string;
+}
+interface StarterApplyProvenance {
+    sourcePath: string;
+    targetPath: string;
+    expectedSha256: string;
+}
+interface ApplyStarterRuntimeSyncOptions {
+    /** Explicit acknowledgement that the caller reviewed this exact plan. */
+    confirmed: boolean;
+    /** Optional immutable provenance file, atomically replaced after mutations. */
+    provenance?: StarterApplyProvenance;
+    /** Integration hook; an exception aborts and rolls back the transaction. */
+    onMutationApplied?: (path: string, index: number) => void;
+}
+/** Parse and validate the ownership section in `starter-release.json`. */
+declare function parseStarterOwnershipContract(value: unknown): ScaffoldOwnershipContract;
+/**
+ * Combine the previous and next release policies without weakening ownership.
+ *
+ * A later starter may broaden framework ownership, but it cannot retroactively
+ * make a path safe to overwrite when either release marked that path as owner
+ * controlled or manual-review. Classification precedence enforces that union.
+ */
+declare function mergeStarterOwnershipContracts(previous: ScaffoldOwnershipContract, next: ScaffoldOwnershipContract): ScaffoldOwnershipContract;
+/** Stable SHA-256 of the exact manifest bytes promoted with a release. */
+declare function starterManifestSha256(source: string): string;
+/**
+ * Parse the archive-owned release manifest and bind it to its promoted source,
+ * runtime identity, and SHA-256. Branch names never participate in updates.
+ */
+declare function parseStarterReleaseManifest(source: string, release?: ScaffoldRelease): StarterReleaseManifest;
+/** Read and validate the canonical ownership manifest from an extracted archive. */
+declare function readStarterReleaseManifest(starterDir: string, release?: ScaffoldRelease): StarterReleaseManifest;
+/** Protected > manual-review > syncable > unmanaged. */
+declare function classifyStarterPath(path: string, contract: ScaffoldOwnershipContract): StarterPathOwnership;
+/**
+ * Build a safe three-way update plan from the recorded old starter, the new
+ * starter, and the customer's current tree.
+ */
+declare function planStarterRuntimeSync(oldStarterDir: string, newStarterDir: string, targetDir: string, ownership: ScaffoldOwnershipContract): StarterRuntimeSyncPlan;
+/** Apply an explicitly confirmed, conflict-free three-way plan. */
+declare function applyStarterRuntimeSyncPlan(newStarterDir: string, targetDir: string, plan: StarterRuntimeSyncPlan, ownership: ScaffoldOwnershipContract, options: ApplyStarterRuntimeSyncOptions): void;
+
+export { type ApplyStarterRuntimeSyncOptions, type StarterApplyProvenance, type StarterPathOwnership, type StarterRuntimeSyncPlan, type StarterTargetPrecondition, applyStarterRuntimeSyncPlan, classifyStarterPath, mergeStarterOwnershipContracts, parseStarterOwnershipContract, parseStarterReleaseManifest, planStarterRuntimeSync, readStarterReleaseManifest, starterManifestSha256 };

package/dist/starter-sync.js

@@ -0,0 +1,22 @@
+#!/usr/bin/env node
+import {
+  applyStarterRuntimeSyncPlan,
+  classifyStarterPath,
+  mergeStarterOwnershipContracts,
+  parseStarterOwnershipContract,
+  parseStarterReleaseManifest,
+  planStarterRuntimeSync,
+  readStarterReleaseManifest,
+  starterManifestSha256
+} from "./chunk-KXJT2MG5.js";
+import "./chunk-WMHBVXWW.js";
+export {
+  applyStarterRuntimeSyncPlan,
+  classifyStarterPath,
+  mergeStarterOwnershipContracts,
+  parseStarterOwnershipContract,
+  parseStarterReleaseManifest,
+  planStarterRuntimeSync,
+  readStarterReleaseManifest,
+  starterManifestSha256
+};

package/dist/starter-update.d.ts

@@ -0,0 +1,43 @@
+import { ScaffoldRelease } from './release.js';
+import { StarterRuntimeSyncPlan } from './starter-sync.js';
+
+/**
+ * User-reachable orchestration for immutable starter release updates.
+ *
+ * Projects carry the exact bytes of `starter-release.json`. The manifest hash
+ * resolves the old release from the toolchain's retained immutable catalog;
+ * neither the old nor new side follows a branch. Updates are dry-run by
+ * default and advance provenance only after a confirmed, conflict-free apply.
+ */
+
+interface StarterUpdateDownload {
+    (targetDir: string, release: ScaffoldRelease): Promise<void>;
+}
+interface UpdateStarterProjectOptions {
+    targetDir: string;
+    /** Applying is opt-in. Omitted/false always produces a dry-run plan. */
+    apply?: boolean;
+    /** Separate acknowledgement for programmatic callers. */
+    confirmed?: boolean;
+    targetRelease?: ScaffoldRelease;
+    releases?: readonly ScaffoldRelease[];
+    download?: StarterUpdateDownload;
+}
+interface StarterUpdateResult {
+    previousRelease: ScaffoldRelease;
+    targetRelease: ScaffoldRelease;
+    plan: StarterRuntimeSyncPlan;
+    isUpToDate: boolean;
+    applied: boolean;
+}
+/** Resolve exact downstream provenance without consulting a moving branch. */
+declare function resolveStarterReleaseFromManifest(source: string, releases?: readonly ScaffoldRelease[]): ScaffoldRelease;
+/**
+ * Plan or explicitly apply an immutable three-way starter update.
+ *
+ * Direct GitHub-template copies need no generated state beyond the canonical
+ * manifest: its pinned hash selects the old archive from the retained catalog.
+ */
+declare function updateStarterProject(options: UpdateStarterProjectOptions): Promise<StarterUpdateResult>;
+
+export { type StarterUpdateDownload, type StarterUpdateResult, type UpdateStarterProjectOptions, resolveStarterReleaseFromManifest, updateStarterProject };