flowdular 0.4.3 → 0.5.1

package/dist/distribution.js

@@ -18,6 +18,9 @@ var RegistryError = class extends Error {
 var ALLOWED = Object.freeze({ allowed: true });
 var NO_POLICIES = Object.freeze([]);
 
+// ../kernel/src/lifecycle.ts
+var ALLOWED2 = Object.freeze({ allowed: true });
+
 // ../kernel/src/version-range.ts
 var VERSION = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
 var COMPARATOR = /^(\^|~|>=|<=|>|<|=)?\s*(.+)$/;
@@ -1682,8 +1685,55 @@ var WEB_PAGE_PATH = new RegExp(
   `^(?:/|(?:/(?:${SEGMENT}|:[a-z][a-zA-Z0-9]*))+)$`
 );
 
+// ../contracts/src/branding.ts
+var DEFAULT_APPLICATION_BRANDING = Object.freeze({
+  appName: "Flowdular",
+  documentTitle: "",
+  description: "",
+  ogImageUrl: "/og.png",
+  faviconUrl: "/favicon.svg",
+  themeColor: "#141B2E",
+  logoUrl: ""
+});
+var BRANDING_NAME_MAX = 64;
+var BRANDING_TITLE_MAX = 120;
+var BRANDING_DESCRIPTION_MAX = 200;
+var BRANDING_URL_MAX = 512;
+var TEXT_BODY = `[^<>"'\\\\\\p{Cc}]`;
+var BRANDING_NAME_PATTERN = `${TEXT_BODY}{1,${BRANDING_NAME_MAX}}`;
+var BRANDING_TITLE_PATTERN = `|${TEXT_BODY}{1,${BRANDING_TITLE_MAX}}`;
+var BRANDING_DESCRIPTION_PATTERN = `|${TEXT_BODY}{1,${BRANDING_DESCRIPTION_MAX}}`;
+var ASSET_URL = `/(?![/\\\\])[^\\s<>"'\\\\]{0,${BRANDING_URL_MAX - 1}}|https://[^\\s<>"'\\\\/]{1,255}(?:/[^\\s<>"']{0,${BRANDING_URL_MAX - 1}})?`;
+var BRANDING_ASSET_URL_PATTERN = ASSET_URL;
+var BRANDING_OPTIONAL_ASSET_URL_PATTERN = `|${ASSET_URL}`;
+var BRANDING_COLOR_PATTERN = "#[0-9a-fA-F]{6}";
+var FIELDS = {
+  appName: { pattern: BRANDING_NAME_PATTERN, max: BRANDING_NAME_MAX },
+  documentTitle: {
+    pattern: BRANDING_TITLE_PATTERN,
+    max: BRANDING_TITLE_MAX
+  },
+  description: {
+    pattern: BRANDING_DESCRIPTION_PATTERN,
+    max: BRANDING_DESCRIPTION_MAX
+  },
+  ogImageUrl: { pattern: BRANDING_ASSET_URL_PATTERN, max: BRANDING_URL_MAX },
+  faviconUrl: { pattern: BRANDING_ASSET_URL_PATTERN, max: BRANDING_URL_MAX },
+  themeColor: { pattern: BRANDING_COLOR_PATTERN, max: 7 },
+  logoUrl: {
+    pattern: BRANDING_OPTIONAL_ASSET_URL_PATTERN,
+    max: BRANDING_URL_MAX
+  }
+};
+var EXPRESSIONS = new Map(
+  Object.entries(FIELDS).map(([key, field]) => [
+    key,
+    new RegExp(`^(?:${field.pattern})$`, "u")
+  ])
+);
+
 // ../contracts/src/index.ts
-var PLATFORM_API_VERSION = "0.1.26";
+var PLATFORM_API_VERSION = "0.1.29";
 
 // ../kernel/src/module-compatibility.ts
 function satisfiesModuleVersion(version, range) {
@@ -2371,7 +2421,7 @@ import { dirname as dirname6, join as join6, relative as relative5 } from "node:
 import { createRequire } from "node:module";
 import { readFile as readFile5 } from "node:fs/promises";
 import { dirname as dirname4, join as join3 } from "node:path";
-var SDK_VERSION = "0.4.3";
+var SDK_VERSION = "0.5.1";
 function npmPackage(specifier) {
   return specifier.startsWith("@") ? specifier.split("/").slice(0, 2).join("/") : specifier.split("/")[0];
 }

package/dist/index.js

@@ -1786,8 +1786,55 @@ var WEB_PAGE_PATH = new RegExp(
   `^(?:/|(?:/(?:${SEGMENT}|:[a-z][a-zA-Z0-9]*))+)$`
 );
 
+// ../contracts/src/branding.ts
+var DEFAULT_APPLICATION_BRANDING = Object.freeze({
+  appName: "Flowdular",
+  documentTitle: "",
+  description: "",
+  ogImageUrl: "/og.png",
+  faviconUrl: "/favicon.svg",
+  themeColor: "#141B2E",
+  logoUrl: ""
+});
+var BRANDING_NAME_MAX = 64;
+var BRANDING_TITLE_MAX = 120;
+var BRANDING_DESCRIPTION_MAX = 200;
+var BRANDING_URL_MAX = 512;
+var TEXT_BODY = `[^<>"'\\\\\\p{Cc}]`;
+var BRANDING_NAME_PATTERN = `${TEXT_BODY}{1,${BRANDING_NAME_MAX}}`;
+var BRANDING_TITLE_PATTERN = `|${TEXT_BODY}{1,${BRANDING_TITLE_MAX}}`;
+var BRANDING_DESCRIPTION_PATTERN = `|${TEXT_BODY}{1,${BRANDING_DESCRIPTION_MAX}}`;
+var ASSET_URL = `/(?![/\\\\])[^\\s<>"'\\\\]{0,${BRANDING_URL_MAX - 1}}|https://[^\\s<>"'\\\\/]{1,255}(?:/[^\\s<>"']{0,${BRANDING_URL_MAX - 1}})?`;
+var BRANDING_ASSET_URL_PATTERN = ASSET_URL;
+var BRANDING_OPTIONAL_ASSET_URL_PATTERN = `|${ASSET_URL}`;
+var BRANDING_COLOR_PATTERN = "#[0-9a-fA-F]{6}";
+var FIELDS = {
+  appName: { pattern: BRANDING_NAME_PATTERN, max: BRANDING_NAME_MAX },
+  documentTitle: {
+    pattern: BRANDING_TITLE_PATTERN,
+    max: BRANDING_TITLE_MAX
+  },
+  description: {
+    pattern: BRANDING_DESCRIPTION_PATTERN,
+    max: BRANDING_DESCRIPTION_MAX
+  },
+  ogImageUrl: { pattern: BRANDING_ASSET_URL_PATTERN, max: BRANDING_URL_MAX },
+  faviconUrl: { pattern: BRANDING_ASSET_URL_PATTERN, max: BRANDING_URL_MAX },
+  themeColor: { pattern: BRANDING_COLOR_PATTERN, max: 7 },
+  logoUrl: {
+    pattern: BRANDING_OPTIONAL_ASSET_URL_PATTERN,
+    max: BRANDING_URL_MAX
+  }
+};
+var EXPRESSIONS = new Map(
+  Object.entries(FIELDS).map(([key, field]) => [
+    key,
+    new RegExp(`^(?:${field.pattern})$`, "u")
+  ])
+);
+
 // ../contracts/src/index.ts
-var PLATFORM_API_VERSION = "0.1.26";
+var PLATFORM_API_VERSION = "0.1.29";
 
 // src/module-templates.ts
 function packageSuffix(id) {
@@ -2112,11 +2159,23 @@ function buildModel(spec) {
     (permission) => permission.primary && permission.action === "read"
   );
   const { fields, columns } = buildFields(spec, plural);
+  const declaredEntity = scaffoldEntity(spec, plural);
+  const transitions = declaredEntity?.states?.transitions ?? [];
+  const lifecycle = declaredEntity?.states && transitions.length > 0 ? {
+    field: declaredEntity.states.field,
+    values: [...declaredEntity.states.values],
+    transitions: transitions.map((transition) => ({
+      from: transition.from,
+      to: transition.to,
+      ...transition.permission === void 0 ? {} : { permission: transition.permission }
+    }))
+  } : void 0;
   return {
     spec,
     names,
     entity,
     fields,
+    lifecycle,
     inputFields: fields.filter((field) => field.required && !field.state),
     orderField: fields.find(isSortable),
     columns,
@@ -2164,7 +2223,7 @@ function manifest(model) {
   });
 }
 function packageJson(model) {
-  const { spec, names, hasApi, hasClient, hasDatabase, hasCli } = model;
+  const { spec, names, hasApi, hasClient, hasDatabase, hasCli, lifecycle } = model;
   return json({
     name: names.packageName,
     version: spec.specVersion,
@@ -2198,6 +2257,10 @@ function packageJson(model) {
       ...hasCli ? { "@flowdular/cli-protocol": "workspace:*" } : {},
       ...hasClient ? { "@flowdular/client": "workspace:*" } : {},
       "@flowdular/contracts": "workspace:*",
+      /* The generated lifecycle guard imports the lifecycle engine. Without
+         this the module typechecks and then fails the dependencies gate on
+         the file the scaffold itself emitted. */
+      ...lifecycle ? { "@flowdular/kernel": "workspace:*" } : {},
       ...hasDatabase ? { "@flowdular/database": "workspace:*" } : {},
       ...hasApi ? {
         "@flowdular/module-auth": "workspace:*",
@@ -2566,6 +2629,92 @@ export class Memory${names.pascal}Repository implements ${names.pascal}Repositor
 }
 `;
 }
+function lifecycleFile(model) {
+  const { names, lifecycle } = model;
+  if (!lifecycle) return "";
+  const field = lifecycle.field;
+  const stateType = pascalCase(field);
+  const constantFor = (id) => {
+    const permission = model.permissions.find(
+      (candidate) => candidate.id === id
+    );
+    return permission ? `${names.constant}_PERMISSIONS.${permission.key}` : void 0;
+  };
+  const transitions = lifecycle.transitions.map((transition) => {
+    const constant = transition.permission === void 0 ? void 0 : constantFor(transition.permission);
+    return `	{
+		from: '${transition.from}',
+		to: '${transition.to}',${constant === void 0 ? "" : `
+		permission: ${constant},`}
+	},`;
+  }).join("\n");
+  return `import { lifecycleFromSpec } from '@flowdular/kernel';
+import type { Lifecycle } from '@flowdular/kernel';
+import { ${names.constant}_PERMISSIONS } from '../acl/permissions.ts';
+
+export type ${stateType} = ${lifecycle.values.map((value) => `'${value}'`).join(" | ")};
+
+/* Declared once, from the specification the operator approved. A status column
+   is writable by any update, so this is the only thing that makes the lifecycle
+   real: every write to ${field} has to come through
+   ${names.camel}Lifecycle.authorize. */
+export const ${names.camel}Lifecycle: Lifecycle<${stateType}> =
+	lifecycleFromSpec({
+		id: '${model.spec.id}.${lifecycle.field}',
+		field: '${field}',
+		values: [${lifecycle.values.map((value) => `'${value}'`).join(", ")}],
+		transitions: [
+${transitions}
+		],
+	}) as Lifecycle<${stateType}>;
+
+/** The state a new record starts in. */
+export const initial${stateType}: ${stateType} = ${names.camel}Lifecycle.initial;
+
+/**
+ * Guard a status write. Returns the state to store, or a refusal that names the
+ * move that was refused and the scope it needed, so the caller can turn it into
+ * a problem response instead of letting an undeclared state through.
+ */
+export function authorize${stateType}(
+	principal: { readonly permissions: ReadonlySet<string> },
+	from: ${stateType},
+	to: ${stateType},
+): { readonly allowed: true; readonly state: ${stateType} } | {
+	readonly allowed: false;
+	readonly code: 'STATE_UNKNOWN' | 'TRANSITION_NOT_ALLOWED' | 'PERMISSION_REQUIRED';
+	readonly message: string;
+	readonly permission?: string;
+} {
+	const decision = ${names.camel}Lifecycle.authorize(principal, from, to);
+	if (decision.allowed) return { allowed: true, state: to };
+	return {
+		allowed: false,
+		code: decision.reason ?? 'TRANSITION_NOT_ALLOWED',
+		message: decision.message ?? 'That move is not allowed.',
+		...(decision.permission === undefined
+			? {}
+			: { permission: decision.permission }),
+	};
+}
+
+/** The moves a screen may offer from a state, with the scope each one needs. */
+export function ${names.camel}TransitionsFrom(state: ${stateType}) {
+	return ${names.camel}Lifecycle.movesFrom(state).map((transition) => ({
+		to: transition.to as ${stateType},
+		permission: transition.permission,
+	}));
+}
+
+/** True when nothing further can happen without a new transition. */
+export function isTerminal${stateType}(state: ${stateType}): boolean {
+	return ${names.camel}Lifecycle.isTerminal(state);
+}
+`;
+}
+function lifecycleFieldName(lifecycle) {
+  return snakeCase(lifecycle.field);
+}
 function servicesIndex(model) {
   const { names, hasDatabase } = model;
   const implementation = hasDatabase ? `export {
@@ -3595,6 +3744,12 @@ function planScaffold(spec, specSource) {
     ["src/services/index.ts", servicesIndex(model)],
     ["src/client/index.ts", clientIndex(model)]
   ]);
+  if (model.lifecycle) {
+    files.set(
+      `src/domain/${lifecycleFieldName(model.lifecycle)}-lifecycle.ts`,
+      lifecycleFile(model)
+    );
+  }
   if (hasDatabase) {
     files.set("src/services/migration.ts", migrationFile(model));
     files.set(
@@ -3684,14 +3839,40 @@ var validators = {
   cliExtension: ajv.compile(cliExtensionSchema),
   platformSpec: ajv.compile(platformSpecSchema)
 };
+function allowedKeysAt(schemaPath) {
+  const pointer = schemaPath.replace(/^#\/?/, "").split("/").filter((segment) => segment.length > 0).map((segment) => segment.replace(/~1/g, "/").replace(/~0/g, "~"));
+  let node = moduleSpecSchema;
+  for (const segment of pointer.slice(0, -1)) {
+    if (typeof node !== "object" || node === null) return [];
+    node = node[segment];
+  }
+  const properties = node?.properties;
+  return properties ? Object.keys(properties).sort() : [];
+}
+function looksLikeWrappedValue(name) {
+  return /\s/.test(name) || /[,.]/.test(name) || name.length > 40;
+}
 function issuesFrom(errors) {
-  return (errors ?? []).map((error) => ({
-    /* Ajv reports a rejected branch as the keyword "false schema". */
-    code: `SCHEMA_${error.keyword.toUpperCase().replace(/[^A-Z0-9]+/g, "_")}`,
-    message: error.message ?? "Schema validation failed.",
-    path: error.instancePath || "/",
-    severity: "error"
-  }));
+  return (errors ?? []).map((error) => {
+    const extra = error.params?.additionalProperty;
+    if (error.keyword === "additionalProperties" && extra !== void 0) {
+      const allowed = allowedKeysAt(error.schemaPath);
+      const wrapped = looksLikeWrappedValue(extra);
+      return {
+        code: `SCHEMA_${error.keyword.toUpperCase().replace(/[^A-Z0-9]+/g, "_")}`,
+        message: wrapped ? `"${extra}" was read as a property name, which means a value wrapped onto the next line. YAML only folds a multi-line value outside a flow collection, so \`- { ... }\` turns the continuation into more keys. Write this entry in block style with one key per line, or keep the whole value on one line: ${allowed.join(", ")}.` : `Unknown property "${extra}". Allowed here: ${allowed.join(", ")}.`,
+        path: `${error.instancePath || "/"}/${extra}`,
+        severity: "error"
+      };
+    }
+    return {
+      /* Ajv reports a rejected branch as the keyword "false schema". */
+      code: `SCHEMA_${error.keyword.toUpperCase().replace(/[^A-Z0-9]+/g, "_")}`,
+      message: error.message ?? "Schema validation failed.",
+      path: error.instancePath || "/",
+      severity: "error"
+    };
+  });
 }
 function specIssue(code, message, path) {
   return { code, message, path, severity: "error" };
@@ -3930,6 +4111,15 @@ function moduleSpecIssues(value) {
         )
       );
     }
+    if (action.risk === "external") {
+      issues.push(
+        specIssue(
+          "SPEC_ACTION_RISK_UNSUPPORTED",
+          `Action "${action.id}" declares risk "external", which the platform refuses. Model the call as a connector definition plus an adapter, or lower the risk.`,
+          `${path}/risk`
+        )
+      );
+    }
   });
   (spec.widgets ?? []).forEach((widget, index) => {
     const unknownEntity = entityIssue(widget.entity, `/widgets/${index}`);
@@ -4337,6 +4527,9 @@ function verifyApprovalGrant(keyring, token, expected, now = Date.now()) {
   return { ok: true, claims };
 }
 
+// ../kernel/src/lifecycle.ts
+var ALLOWED2 = Object.freeze({ allowed: true });
+
 // ../kernel/src/version-range.ts
 var VERSION = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
 var COMPARATOR = /^(\^|~|>=|<=|>|<|=)?\s*(.+)$/;
@@ -4994,7 +5187,7 @@ import { dirname as dirname6, join as join5, relative as relative5 } from "node:
 import { createRequire } from "node:module";
 import { readFile as readFile4 } from "node:fs/promises";
 import { dirname as dirname4, join as join2 } from "node:path";
-var SDK_VERSION = "0.4.3";
+var SDK_VERSION = "0.5.1";
 var LIBRARIES = /* @__PURE__ */ new Set([
   "ai-provider",
   "cli-protocol",
@@ -7206,7 +7399,8 @@ function flowdularEnvironment(environment) {
   }
   return result2;
 }
-function flowdularStateDirectory(workspaceRoot) {
+var SPLIT_LOCAL_STATE_MESSAGE = "Both .flowdular and .coreloom state directories exist. Stop the application and choose one complete state directory before restarting.";
+function localStateRoots(workspaceRoot) {
   const current = resolve3(workspaceRoot, ".flowdular");
   const legacy = resolve3(workspaceRoot, ".coreloom");
   const exists5 = (path) => {
@@ -7223,12 +7417,16 @@ function flowdularStateDirectory(workspaceRoot) {
   };
   const hasCurrent = exists5(current);
   const hasLegacy = exists5(legacy);
-  if (hasCurrent && hasLegacy) {
-    throw new Error(
-      "Both .flowdular and .coreloom state directories exist. Stop the application and choose one complete state directory before restarting."
-    );
-  }
-  return hasLegacy ? legacy : current;
+  return {
+    current,
+    legacy: hasLegacy ? legacy : null,
+    split: hasCurrent && hasLegacy
+  };
+}
+function flowdularStateDirectory(workspaceRoot) {
+  const roots2 = localStateRoots(workspaceRoot);
+  if (roots2.split) throw new Error(SPLIT_LOCAL_STATE_MESSAGE);
+  return roots2.legacy ?? roots2.current;
 }
 
 // ../database/src/provider.ts
@@ -7623,6 +7821,7 @@ var DEFAULT_CONNECT_TIMEOUT_MS = 5e3;
 var DEFAULT_IDLE_TIMEOUT_MS = 3e4;
 var DEFAULT_QUERY_TIMEOUT_MS = 2e4;
 var DEFAULT_STATEMENT_TIMEOUT_MS = 15e3;
+var LEASE_DRAIN_TIMEOUT_MS = 3e4;
 var DEFAULT_LOCK_TIMEOUT_MS = 5e3;
 var DEFAULT_POOL_MAX = 10;
 var DEFAULT_POOL_MIN = 0;
@@ -7910,6 +8109,7 @@ function createDatabaseProvider(config, factories = {}) {
   let state = "ready";
   let leases = 0;
   let resolveDrained;
+  const leaseNames = /* @__PURE__ */ new Set();
   let disposePromise;
   const adapters = /* @__PURE__ */ new Map();
   if (config.adapter === "postgresql" && !factories.postgresPool) {
@@ -7998,6 +8198,8 @@ function createDatabaseProvider(config, factories = {}) {
       const database = databaseFor(request);
       assertDatabaseRequirements(database, request.requirements);
       leases += 1;
+      const leaseName = `${request.namespace}:${request.purpose}`;
+      leaseNames.add(leaseName);
       let released = false;
       return {
         database,
@@ -8005,6 +8207,7 @@ function createDatabaseProvider(config, factories = {}) {
           if (released) return;
           released = true;
           leases -= 1;
+          leaseNames.delete(leaseName);
           if (leases === 0) resolveDrained?.();
         }
       };
@@ -8036,9 +8239,22 @@ function createDatabaseProvider(config, factories = {}) {
       state = "disposing";
       disposePromise = (async () => {
         if (leases > 0) {
-          await new Promise((resolveDrain) => {
-            resolveDrained = resolveDrain;
-          });
+          await Promise.race([
+            new Promise((resolveDrain) => {
+              resolveDrained = resolveDrain;
+            }),
+            new Promise((resolveAfter) => {
+              const timer = setTimeout(() => {
+                resolveAfter();
+                console.error(
+                  `The database provider is closing with ${leases} lease(s) still held (${[
+                    ...leaseNames
+                  ].join(", ")}). Closing anyway.`
+                );
+              }, LEASE_DRAIN_TIMEOUT_MS);
+              timer.unref?.();
+            })
+          ]);
         }
         const results = await Promise.allSettled(
           [...adapters.values()].map((adapter) => adapter.dispose())
@@ -9317,6 +9533,13 @@ async function runDoctor(workspace) {
       evidence: path
     });
   }
+  const roots2 = localStateRoots(workspace.root);
+  checks.push({
+    id: "state.root",
+    status: roots2.split ? "fail" : "pass",
+    message: roots2.split ? 'Both .flowdular and .coreloom state directories exist. Keep the one holding the state you want, remove the other, and run "flowdular setup migrate-state" if a .octane-erp directory is also present.' : `Local state root: ${relative6(workspace.root, roots2.legacy ?? roots2.current)}`,
+    evidence: relative6(workspace.root, roots2.legacy ?? roots2.current)
+  });
   const packageJson2 = JSON.parse(
     await readFile13(join11(workspace.root, "package.json"), "utf8")
   );
@@ -9333,6 +9556,22 @@ async function runDoctor(workspace) {
     message: blueprints.length > 0 ? `${blueprints.length} blueprint(s) discoverable.` : 'No blueprint.json was found; "blueprint validate --all" would pass vacuously.',
     evidence: blueprints.map((file) => relative6(workspace.root, file)).join(", ")
   });
+  const entryPath = join11(workspace.root, "platform/src/App.tsrx");
+  if (await exists4(entryPath)) {
+    const entry = await readFile13(entryPath, "utf8");
+    const pagePath = join11(workspace.root, "platform/index.html");
+    const page = await exists4(pagePath) ? await readFile13(pagePath, "utf8") : "";
+    const renders = entry.includes("configureBrandingFromPage");
+    const staticHead = /<meta[^>]+name="theme-color"|<link[^>]+rel="icon"/.test(
+      page
+    );
+    checks.push({
+      id: "platform.branding",
+      status: renders && !staticHead ? "pass" : "warn",
+      message: !renders ? "The application entry does not render the deployment branding. Add configureBrandingFromPage(props) and the head tags the scaffold template carries, so the name, title, icon and link preview follow the settings." : staticHead ? "platform/index.html declares its own icon or theme colour while the entry renders them too, so the head carries two answers. Remove the static tags." : "The application entry renders the deployment branding.",
+      evidence: "platform/src/App.tsrx"
+    });
+  }
   try {
     const sync = await syncPlatformModules(workspace, false);
     const stale = sync.files.filter((file) => file.changed).map((file) => file.path);
@@ -10134,7 +10373,8 @@ function relativePath(workspace, path) {
 }
 async function migrationPlan(workspace) {
   const sourceDirectory = join15(workspace.root, LEGACY_DATA_DIRECTORY);
-  const stateDirectory = flowdularStateDirectory(workspace.root);
+  const roots2 = localStateRoots(workspace.root);
+  const stateDirectory = roots2.current;
   const destinationDirectory = join15(stateDirectory, "data");
   const destinationLabel = relativePath(workspace, destinationDirectory);
   const blockers = [];
@@ -10166,7 +10406,8 @@ async function migrationPlan(workspace) {
       files,
       missing: [...STATE_FILES],
       unsupported,
-      blockers
+      blockers,
+      legacyRoot: roots2.split ? roots2.legacy : null
     };
   }
   for (const name of (await readdir8(sourceDirectory)).sort()) {
@@ -10196,7 +10437,8 @@ async function migrationPlan(workspace) {
     files,
     missing,
     unsupported,
-    blockers
+    blockers,
+    legacyRoot: roots2.split ? roots2.legacy : null
   };
 }
 async function digest(path) {
@@ -10253,6 +10495,7 @@ function data(plan, applied) {
     applied,
     ready: plan.blockers.length === 0,
     source: LEGACY_DATA_DIRECTORY,
+    splitStateRoot: plan.legacyRoot !== null,
     destination: relative9(
       dirname14(dirname14(plan.destinationDirectory)),
       plan.destinationDirectory
@@ -10265,9 +10508,14 @@ function data(plan, applied) {
   };
 }
 function unsupportedWarnings(plan) {
-  return plan.unsupported.map(
-    (name) => `${LEGACY_DATA_DIRECTORY}/${name} is a SQLite database and cannot be migrated to the PostgreSQL or PGlite adapter; it was left in place. Start a fresh workspace on the current adapter; its data does not carry over.`
-  );
+  return [
+    ...plan.unsupported.map(
+      (name) => `${LEGACY_DATA_DIRECTORY}/${name} is a SQLite database and cannot be migrated to the PostgreSQL or PGlite adapter; it was left in place. Start a fresh workspace on the current adapter; its data does not carry over.`
+    ),
+    ...plan.legacyRoot ? [
+      `This workspace has both a .flowdular and a .coreloom state directory, so the application refuses to start. The copy targets .flowdular; keep the root holding the state you want and remove the other one.`
+    ] : []
+  ];
 }
 async function migrateLegacyState(workspace, apply) {
   const plan = await migrationPlan(workspace);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "flowdular",
-	"version": "0.4.3",
+	"version": "0.5.1",
 	"type": "module",
 	"bin": {
 		"flowdular": "./dist/index.js",
@@ -16,7 +16,7 @@
 		"ajv": "8.20.0",
 		"pg": "8.23.0",
 		"yaml": "2.9.0",
-		"@flowdular/sdk": "0.4.3"
+		"@flowdular/sdk": "0.5.1"
 	},
 	"license": "MIT",
 	"repository": {