specrails-core 5.1.0 → 5.2.1

package/dist/installer/util/install-transaction.js

@@ -1,10 +1,11 @@
-import { closeSync, constants, cpSync, existsSync, linkSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFileSync, readdirSync, rmSync, unlinkSync, writeFileSync } from 'node:fs';
+import { closeSync, existsSync, linkSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFileSync, readdirSync, rmSync, unlinkSync, writeFileSync } from 'node:fs';
 import { randomUUID } from 'node:crypto';
 import { realpathSync as requireRealpath } from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import { InstallerError } from './errors.js';
 import { isReservedPath, RESERVED_PATHS } from './paths.js';
+import { restoreTree, snapshotTree } from './fs.js';
 function exists(file) {
     try {
         lstatSync(file);
@@ -139,17 +140,35 @@ function removeForRollback(target, relative) {
 }
 /** Snapshot only installer-owned surfaces; never follow links into a shared framework.
  * Backups survive a failed rollback and their location is reported for recovery.
+ *
+ * Snapshotting requires NO filesystem privilege: links are recorded by target
+ * rather than recreated (see `snapshotTree`), so a protected surface that is —
+ * or contains — a Windows junction no longer fails the install on an account
+ * without SeCreateSymbolicLinkPrivilege.
  */
 export async function withInstallRollback(paths, apply) {
     const backup = mkdtempSync(path.join(os.tmpdir(), 'specrails-update-backup-'));
-    const snapshots = [...new Set(paths)].map((target, index) => ({ target, saved: path.join(backup, String(index)), present: exists(target) }));
+    const seen = new Set();
+    const snapshots = [];
+    for (const entry of paths) {
+        const target = typeof entry === 'string' ? entry : entry.path;
+        if (seen.has(target))
+            continue;
+        seen.add(target);
+        snapshots.push({
+            target,
+            saved: path.join(backup, String(snapshots.length)),
+            present: exists(target),
+            snapshotContents: typeof entry === 'string' ? true : entry.snapshotContents,
+            links: [],
+        });
+    }
     let retainBackup = false;
     try {
-        // Snapshot destinations are new: keep traversal in JS to avoid Node 22's
-        // native Unicode directory-copy defect on Windows (nodejs/node#61878).
-        for (const row of snapshots)
-            if (row.present)
-                cpSync(row.target, row.saved, { recursive: true, dereference: false, verbatimSymlinks: true, filter: () => true, mode: constants.COPYFILE_FICLONE });
+        for (const row of snapshots) {
+            if (row.present && row.snapshotContents)
+                row.links = snapshotTree(row.target, row.saved);
+        }
         try {
             return await apply();
         }
@@ -157,16 +176,17 @@ export async function withInstallRollback(paths, apply) {
             const failures = [];
             for (const row of [...snapshots].reverse()) {
                 try {
+                    // A pre-existing surface we deliberately did not copy is left alone:
+                    // there is no backup to put back, and removing it would destroy work
+                    // the transaction never owned.
+                    if (row.present && !row.snapshotContents)
+                        continue;
                     const relative = path.basename(row.target);
                     removeForRollback(row.target, relative);
                     if (row.present) {
                         mkdirSync(path.dirname(row.target), { recursive: true });
-                        cpSync(row.saved, row.target, {
-                            recursive: true, dereference: false, verbatimSymlinks: true, mode: constants.COPYFILE_FICLONE,
-                            // Node 20 on Windows passes namespaced paths (\\?\) to
-                            // cpSync filters; newer releases may pass ordinary paths. Put
-                            // both operands in the same namespace before checking ownership.
-                            filter: (source) => !isReservedPath([relative, path.relative(path.toNamespacedPath(row.saved), path.toNamespacedPath(source)).split(path.sep).join('/')].filter(Boolean).join('/')),
+                        restoreTree(row.saved, row.target, row.links, {
+                            skip: (rel) => isReservedPath([relative, rel].filter(Boolean).join('/')),
                         });
                     }
                 }

package/dist/installer/util/install-transaction.js.map

@@ -1 +1 @@
-{"version":3,"file":"install-transaction.js","sourceRoot":"","sources":["../../../src/installer/util/install-transaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACvL,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,IAAI,eAAe,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAE3D,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAClD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QACpE,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,YAAoB,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAA;AAEtH;;;GAGG;AACH,SAAS,yBAAyB,CAAC,QAAgB,EAAE,KAAa;IAChE,0EAA0E;IAC1E,+EAA+E;IAC/E,MAAM,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAA;IACzC,IAAI,EAAU,CAAA;IACd,IAAI,CAAC;QAAC,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IAAC,CAAC;IAC/C,OAAO,KAAK,EAAE,CAAC;QACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QACpE,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,CAAC;QACH,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QACxB,IAAI,QAAgB,CAAA;QACpB,IAAI,CAAC;YAAC,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAAC,CAAC;QACjD,OAAO,KAAK,EAAE,CAAC;YACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAA;YACnE,MAAM,KAAK,CAAA;QACb,CAAC;QACD,IAAI,KAAwB,CAAA;QAC5B,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAsB,CAAA;QAAC,CAAC;QACzD,MAAM,CAAC;YAAC,OAAO,KAAK,CAAA;QAAC,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QAC5E,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAAC,OAAO,KAAK,CAAA;QAAC,CAAC;QACxD,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,KAAK,CAAA;QAAC,CAAC;QACrF,IAAI,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QAC7D,UAAU,CAAC,QAAQ,CAAC,CAAA;QACpB,OAAO,IAAI,CAAA;IACb,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAA;QACb,UAAU,CAAC,WAAW,CAAC,CAAA;IACzB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAI,YAAoB,EAAE,KAA2B;IACnG,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,0BAA0B,CAAC,YAAY,CAAC,CAAA;IACzD,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAA;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,QAAQ,GAAG,YAAY,CAAC,CAAA;IAClF,2EAA2E;IAC3E,0EAA0E;IAC1E,aAAa,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5D,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,CAAC;QACH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC;gBAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAC;gBAAC,MAAK;YAAC,CAAC;YAC7D,OAAO,KAAK,EAAE,CAAC;gBACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAA;gBACnE,IAAI,OAAO,KAAK,CAAC,IAAI,yBAAyB,CAAC,QAAQ,EAAE,KAAK,CAAC;oBAAE,SAAQ;gBACzE,MAAM,IAAI,cAAc,CAAC,yGAAyG,EAAE,EAAE,CAAC,CAAA;YACzI,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IAAC,CAAC;IACnC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,cAAc,CAAC,2EAA2E,EAAE,EAAE,CAAC,CAAA;IACxH,IAAI,CAAC;QAAC,OAAO,MAAM,KAAK,EAAE,CAAA;IAAC,CAAC;YACpB,CAAC;QACP,IAAI,CAAC;YACH,IAAI,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,KAAK;gBAAE,UAAU,CAAC,QAAQ,CAAC,CAAA;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,MAAc,EAAE,QAAgB;IACzD,IAAI,cAAc,CAAC,QAAQ,CAAC;QAAE,OAAM;IACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAM;IAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;IAC9B,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;WAC3C,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5E,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,CAAC;YAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,QAAQ,GAAG,GAAG,GAAG,KAAK,CAAC,CAAA;QAC5G,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtF,OAAM;IACR,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAI,KAAe,EAAE,KAAuB;IACnF,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAA;IAC9E,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;IAC5I,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,IAAI,CAAC;QACH,yEAAyE;QACzE,uEAAuE;QACvE,KAAK,MAAM,GAAG,IAAI,SAAS;YAAE,IAAI,GAAG,CAAC,OAAO;gBAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,gBAAgB,EAAE,CAAC,CAAA;QAClM,IAAI,CAAC;YAAC,OAAO,MAAM,KAAK,EAAE,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAa,EAAE,CAAA;YAC7B,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC3C,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;oBAC1C,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;oBACvC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;wBAChB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;wBACxD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE;4BAC5B,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,gBAAgB;4BAC7F,uDAAuD;4BACvD,8DAA8D;4BAC9D,iEAAiE;4BACjE,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,cAAc,CACjC,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAC/I;yBACF,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC;gBAAC,OAAO,YAAY,EAAE,CAAC;oBAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,KAAM,YAAsB,CAAC,OAAO,EAAE,CAAC,CAAA;gBAAC,CAAC;YAC/F,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,YAAY,GAAG,IAAI,CAAA;gBACnB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;gBACrF,MAAM,IAAI,cAAc,CAAC,kBAAmB,KAAe,CAAC,OAAO,wBAAwB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;YACtJ,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,YAAY;YAAE,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACrE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa;IAC7D,MAAM,KAAK,GAAG,CAAC,KAAa,EAA4C,EAAE;QACxE,MAAM,KAAK,GAAG,kEAAkE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5F,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAChG,CAAC,CAAA;IACD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;IAC7C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAChG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACpG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACtC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAQ;QACrB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACvE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACtD,IAAI,EAAE,IAAI,EAAE;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACnD,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACjC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvB,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,qBAAqB,CAAC,OAAsB,EAAE,MAAc;IAC1E,IAAI,OAAO,IAAI,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,cAAc,CAAC,wCAAwC,OAAO,OAAO,MAAM,2IAA2I,EAAE,EAAE,CAAC,CAAA;IACvO,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,YAAoB;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;IAClD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IACrC,KAAK,MAAM,QAAQ,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,QAAQ,OAAO,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAA;YAC9H,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC,OAAO,CAAA;QAC7D,CAAC;QAAC,MAAM,CAAC,CAAC,yCAAyC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"install-transaction.js","sourceRoot":"","sources":["../../../src/installer/util/install-transaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACpK,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,IAAI,eAAe,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3D,OAAO,EAAE,WAAW,EAAE,YAAY,EAAmB,MAAM,SAAS,CAAA;AAEpE,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAClD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QACpE,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,YAAoB,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAA;AAEtH;;;GAGG;AACH,SAAS,yBAAyB,CAAC,QAAgB,EAAE,KAAa;IAChE,0EAA0E;IAC1E,+EAA+E;IAC/E,MAAM,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAA;IACzC,IAAI,EAAU,CAAA;IACd,IAAI,CAAC;QAAC,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IAAC,CAAC;IAC/C,OAAO,KAAK,EAAE,CAAC;QACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QACpE,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,CAAC;QACH,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QACxB,IAAI,QAAgB,CAAA;QACpB,IAAI,CAAC;YAAC,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAAC,CAAC;QACjD,OAAO,KAAK,EAAE,CAAC;YACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAA;YACnE,MAAM,KAAK,CAAA;QACb,CAAC;QACD,IAAI,KAAwB,CAAA;QAC5B,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAsB,CAAA;QAAC,CAAC;QACzD,MAAM,CAAC;YAAC,OAAO,KAAK,CAAA;QAAC,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QAC5E,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAAC,OAAO,KAAK,CAAA;QAAC,CAAC;QACxD,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,KAAK,CAAA;QAAC,CAAC;QACrF,IAAI,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QAC7D,UAAU,CAAC,QAAQ,CAAC,CAAA;QACpB,OAAO,IAAI,CAAA;IACb,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAA;QACb,UAAU,CAAC,WAAW,CAAC,CAAA;IACzB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAI,YAAoB,EAAE,KAA2B;IACnG,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,0BAA0B,CAAC,YAAY,CAAC,CAAA;IACzD,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAA;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,QAAQ,GAAG,YAAY,CAAC,CAAA;IAClF,2EAA2E;IAC3E,0EAA0E;IAC1E,aAAa,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5D,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,CAAC;QACH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC;gBAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAC;gBAAC,MAAK;YAAC,CAAC;YAC7D,OAAO,KAAK,EAAE,CAAC;gBACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAA;gBACnE,IAAI,OAAO,KAAK,CAAC,IAAI,yBAAyB,CAAC,QAAQ,EAAE,KAAK,CAAC;oBAAE,SAAQ;gBACzE,MAAM,IAAI,cAAc,CAAC,yGAAyG,EAAE,EAAE,CAAC,CAAA;YACzI,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IAAC,CAAC;IACnC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,cAAc,CAAC,2EAA2E,EAAE,EAAE,CAAC,CAAA;IACxH,IAAI,CAAC;QAAC,OAAO,MAAM,KAAK,EAAE,CAAA;IAAC,CAAC;YACpB,CAAC;QACP,IAAI,CAAC;YACH,IAAI,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,KAAK;gBAAE,UAAU,CAAC,QAAQ,CAAC,CAAA;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,MAAc,EAAE,QAAgB;IACzD,IAAI,cAAc,CAAC,QAAQ,CAAC;QAAE,OAAM;IACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAM;IAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;IAC9B,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;WAC3C,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5E,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,CAAC;YAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,QAAQ,GAAG,GAAG,GAAG,KAAK,CAAC,CAAA;QAC5G,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtF,OAAM;IACR,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AAClD,CAAC;AAsBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAI,KAAyB,EAAE,KAAuB;IAC7F,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAA;IAC9E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,SAAS,GAAsB,EAAE,CAAA;IACvC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;QAC7D,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAQ;QAC9B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAChB,SAAS,CAAC,IAAI,CAAC;YACb,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAClD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACvB,gBAAgB,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB;YAC3E,KAAK,EAAE,EAAE;SACV,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,IAAI,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,gBAAgB;gBAAE,GAAG,CAAC,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;QAC1F,CAAC;QACD,IAAI,CAAC;YAAC,OAAO,MAAM,KAAK,EAAE,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAa,EAAE,CAAA;YAC7B,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC3C,IAAI,CAAC;oBACH,qEAAqE;oBACrE,qEAAqE;oBACrE,+BAA+B;oBAC/B,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB;wBAAE,SAAQ;oBAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;oBAC1C,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;oBACvC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;wBAChB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;wBACxD,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE;4BAC5C,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;yBACzE,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC;gBAAC,OAAO,YAAY,EAAE,CAAC;oBAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,KAAM,YAAsB,CAAC,OAAO,EAAE,CAAC,CAAA;gBAAC,CAAC;YAC/F,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,YAAY,GAAG,IAAI,CAAA;gBACnB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;gBACrF,MAAM,IAAI,cAAc,CAAC,kBAAmB,KAAe,CAAC,OAAO,wBAAwB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;YACtJ,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,YAAY;YAAE,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACrE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa;IAC7D,MAAM,KAAK,GAAG,CAAC,KAAa,EAA4C,EAAE;QACxE,MAAM,KAAK,GAAG,kEAAkE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5F,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAChG,CAAC,CAAA;IACD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;IAC7C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAChG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACpG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACtC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAQ;QACrB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACvE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACtD,IAAI,EAAE,IAAI,EAAE;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACnD,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACjC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvB,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,qBAAqB,CAAC,OAAsB,EAAE,MAAc;IAC1E,IAAI,OAAO,IAAI,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,cAAc,CAAC,wCAAwC,OAAO,OAAO,MAAM,2IAA2I,EAAE,EAAE,CAAC,CAAA;IACvO,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,YAAoB;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;IAClD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IACrC,KAAK,MAAM,QAAQ,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,QAAQ,OAAO,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAA;YAC9H,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC,OAAO,CAAA;QAC7D,CAAC;QAAC,MAAM,CAAC,CAAC,yCAAyC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;AAC9E,CAAC"}

package/docs/user-docs/provider-pipelines.md

@@ -51,3 +51,46 @@ make paid model calls or claim identical behavior across every native CLI releas
 
 See [Core installation and update consistency](core-updates.md) for version
 selection, rollback and Desktop integration.
+
+
+## Acceptance evidence and completion
+
+
+After development, normal review MUST write `stateDir/acceptance.json` and run
+`acceptance --request <absolute-path>` before `phase --phase reviewer --status done`.
+The request is `{criteria: [...], checks: [...], findings: [...]}`:
+- Each criterion has `specId` (string), `criterionIndex` (zero-based), `requirement`
+  (exact frozen text), `status` (`met`, `exception`, `blocked`, `pending`) and a
+  nonempty `evidence` array of concrete code/test/capture references and observations.
+  Cover every frozen acceptance criterion once. If a spec has no explicit criteria,
+  use its complete frozen description (or title if empty) at index 0.
+- An `exception` MUST include `{reason, impact, material, acceptedBy, approvalEvidence}`.
+  `acceptedBy` is `reviewer`, `user`, or `host`. Material scope changes require actual
+  user/host authorization; do not invent approval or label material changes minor.
+  Previously authorized decisions need no new confirmation. Unresolved requirements
+  remain `blocked` or `pending`, never `met` through a rewritten interpretation.
+- Each check has `{name, status, required, evidence, scope, limitations}`; status is
+  `passed`, `failed`, or `unavailable`. Include required and supplementary checks from
+  the design. Record the original required classification; never downgrade a failed
+  check to make the gate pass. For benchmarks state what is measured and excluded:
+  a Node microbenchmark does not establish browser Canvas/GPU/frame performance.
+- `findings` lists concrete review conclusions, risks and resolutions; use an empty
+  array only when no findings remain. Numeric confidence cannot replace this report.
+
+The runtime binds this evidence to frozen scope, source and design. Missing/stale
+acceptance or unresolved requirements/required checks block review and archive.
+Accepted exceptions and supplementary failures produce `with-exceptions` validation.
+Replacing the report requires review and archive authorization again; a green command
+receipt alone is insufficient. Evidence references and approval attribution remain
+reviewer assertions, not independently authenticated proof of human approval.
+
+Keep operational completion notes, check requests and reports in `stateDir` from
+start to finish. Run scoped checks for repairs and one final full verification after
+all edits. Reuse that full receipt while runtime status says it is valid and its
+commands cover required checks. New prose/phase handoffs alone do not warrant reruns.
+
+End with ONE concise summary from runtime `status.completion`: implementation,
+validation (including exceptions), archive, delivery, and evidence references.
+Host-owned delivery stays `pending-host`; do not call uncommitted files "landed".
+Report phase durations/attempts from `status.phases`; report per-phase cost only when
+provider telemetry attributes it, otherwise unavailable. Do not invent cost splits.

package/integration-contract.json

@@ -259,12 +259,15 @@
       "status",
       "phase",
       "verify",
+      "acceptance",
       "archive-check",
       "preview",
       "apply-preview"
     ],
     "statePath": "<backlogRoot>/.specrails/pipeline/<runId>/state.json",
     "verification": "Successful argv-based commands captured by the runtime, bound to frozen scope, candidate files and relevant execution environment. Unknown or stale evidence cannot pass archive.",
-    "hostOwnership": "Host worktrees are used directly; host git/backlog are not mutated by Core delivery."
+    "hostOwnership": "Host worktrees are used directly; host git/backlog are not mutated by Core delivery.",
+    "acceptance": "acceptance --request JSON records every exact frozen requirement, evidence, exception authority, check scope/limitations and findings. Required by reviewer done/archive-check; bound to scope, candidate and design.",
+    "completion": "status.completion separates implementation, validation (verified|with-exceptions|pending|blocked), archive and delivery (pending-host|complete|pending); status.phases includes observed durationMs and attempts."
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "specrails-core",
-  "version": "5.1.0",
+  "version": "5.2.1",
   "description": "Provider-independent AI agent workflow system for Claude Code, Codex, Gemini CLI, and Kimi Code",
   "type": "module",
   "bin": {

package/templates/agents/sr-architect.md

@@ -313,3 +313,12 @@ This is non-negotiable for code-navigation work: plugin authors choose tools bec
 - Is this a symbol/reference/definition lookup? → MCP tool, not `Grep`/`Read`.
 - Am I about to read a file just to edit one function? → MCP tool, not `Read` + `Edit`.
 - No documented MCP tool fits the current need? → built-in, document why in your reasoning.
+
+
+## Acceptance and measurement plan
+
+Map frozen requirements to behavioral evidence before implementation. Declare required
+and supplementary checks and their measurement scope/limitations. Visual work needs
+real rendered evidence at supported viewports and peak effect states; browser frame
+performance needs browser measurements. Flag contradictory requirements and material
+scope interpretations explicitly; do not weaken frozen acceptance text in the design.

package/templates/agents/sr-developer.md

@@ -272,3 +272,12 @@ Guidelines:
 ## MEMORY.md
 
 Your MEMORY.md is currently empty.
+
+
+## Verification evidence handoff
+
+Keep operational notes and check requests under runtime `stateDir`, outside the design
+artifacts. Supply evidence per frozen requirement and report failed/unavailable checks.
+Declare benchmark scope and exclusions; Node timings do not prove browser frame time.
+Use scoped checks during repairs and one final full receipt, reused while valid.
+Return a concise handoff; the coordinator owns the single final run summary.

package/templates/agents/sr-reviewer.md

@@ -369,3 +369,14 @@ This is non-negotiable for code-navigation work: plugin authors choose tools bec
 - Is this a symbol/reference/definition lookup? → MCP tool, not `Grep`/`Read`.
 - Am I about to read a file just to edit one function? → MCP tool, not `Read` + `Edit`.
 - No documented MCP tool fits the current need? → built-in, document why in your reasoning.
+
+
+## Structured acceptance handoff
+
+Follow the executable pipeline acceptance contract. Return a `stateDir/acceptance.json`
+request covering every frozen requirement with evidence, explicit exceptions, required
+and supplementary checks (including benchmark scope/limitations), and concrete findings.
+Have the coordinator record it with `acceptance --request` before reviewer done and
+archive-check. Inspect visual evidence at supported viewports and extreme states for
+visual changes. A confidence score or checked tasks cannot substitute for acceptance.
+Do not self-authorize material scope changes; cite actual existing user/host decisions.

package/templates/codex-skills/rails/sr-architect/SKILL.md

@@ -312,3 +312,12 @@ state is corrupt, etc.), instead reply with:
 
 and end your turn. Do not invent fake plans or empty OpenSpec
 packages to keep the pipeline moving.
+
+
+## Acceptance and measurement plan
+
+Map frozen requirements to behavioral evidence before implementation. Declare required
+and supplementary checks and their measurement scope/limitations. Visual work needs
+real rendered evidence at supported viewports and peak effect states; browser frame
+performance needs browser measurements. Flag contradictory requirements and material
+scope interpretations explicitly; do not weaken frozen acceptance text in the design.

package/templates/codex-skills/rails/sr-developer/SKILL.md

@@ -205,3 +205,12 @@ no executable behaviour to test), reply with:
 
 and end your turn. Do not invent half-implementations or
 skip the RED step to pretend a task was completed.
+
+
+## Verification evidence handoff
+
+Keep operational notes and check requests under runtime `stateDir`, outside the design
+artifacts. Supply evidence per frozen requirement and report failed/unavailable checks.
+Declare benchmark scope and exclusions; Node timings do not prove browser frame time.
+Use scoped checks during repairs and one final full receipt, reused while valid.
+Return a concise handoff; the coordinator owns the single final run summary.

package/templates/codex-skills/rails/sr-reviewer/SKILL.md

@@ -289,3 +289,14 @@ Verdict: <"clean" | "fix needed: <one-sentence>" | "blocked: <reason>">
 Then end your turn. The orchestrator decides whether to spawn
 a second developer pass (if "fix needed") or to close the
 ticket (if "clean").
+
+
+## Structured acceptance handoff
+
+Follow the executable pipeline acceptance contract. Return a `stateDir/acceptance.json`
+request covering every frozen requirement with evidence, explicit exceptions, required
+and supplementary checks (including benchmark scope/limitations), and concrete findings.
+Have the coordinator record it with `acceptance --request` before reviewer done and
+archive-check. Inspect visual evidence at supported viewports and extreme states for
+visual changes. A confidence score or checked tasks cannot substitute for acceptance.
+Do not self-authorize material scope changes; cite actual existing user/host decisions.

package/templates/commands/specrails/implement.md

@@ -247,3 +247,45 @@ Only Core-owned backlog can close after all required delivery succeeds. First co
 ## Completion
 
 Report run/change, frozen tickets/roots, phase statuses, actual receipt commands, acceptance, confidence, archive and per-repository delivery. Distinguish reused evidence, newly executed checks and gaps. Keep failure excerpts bounded and refer to durable receipts. Missing workers, failed gates or incomplete required repositories stay blocked/failed, never falsely complete.
+
+
+### Acceptance evidence and completion
+
+After development, normal review MUST write `stateDir/acceptance.json` and run
+`acceptance --request <absolute-path>` before `phase --phase reviewer --status done`.
+The request is `{criteria: [...], checks: [...], findings: [...]}`:
+- Each criterion has `specId` (string), `criterionIndex` (zero-based), `requirement`
+  (exact frozen text), `status` (`met`, `exception`, `blocked`, `pending`) and a
+  nonempty `evidence` array of concrete code/test/capture references and observations.
+  Cover every frozen acceptance criterion once. If a spec has no explicit criteria,
+  use its complete frozen description (or title if empty) at index 0.
+- An `exception` MUST include `{reason, impact, material, acceptedBy, approvalEvidence}`.
+  `acceptedBy` is `reviewer`, `user`, or `host`. Material scope changes require actual
+  user/host authorization; do not invent approval or label material changes minor.
+  Previously authorized decisions need no new confirmation. Unresolved requirements
+  remain `blocked` or `pending`, never `met` through a rewritten interpretation.
+- Each check has `{name, status, required, evidence, scope, limitations}`; status is
+  `passed`, `failed`, or `unavailable`. Include required and supplementary checks from
+  the design. Record the original required classification; never downgrade a failed
+  check to make the gate pass. For benchmarks state what is measured and excluded:
+  a Node microbenchmark does not establish browser Canvas/GPU/frame performance.
+- `findings` lists concrete review conclusions, risks and resolutions; use an empty
+  array only when no findings remain. Numeric confidence cannot replace this report.
+
+The runtime binds this evidence to frozen scope, source and design. Missing/stale
+acceptance or unresolved requirements/required checks block review and archive.
+Accepted exceptions and supplementary failures produce `with-exceptions` validation.
+Replacing the report requires review and archive authorization again; a green command
+receipt alone is insufficient. Evidence references and approval attribution remain
+reviewer assertions, not independently authenticated proof of human approval.
+
+Keep operational completion notes, check requests and reports in `stateDir` from
+start to finish. Run scoped checks for repairs and one final full verification after
+all edits. Reuse that full receipt while runtime status says it is valid and its
+commands cover required checks. New prose/phase handoffs alone do not warrant reruns.
+
+End with ONE concise summary from runtime `status.completion`: implementation,
+validation (including exceptions), archive, delivery, and evidence references.
+Host-owned delivery stays `pending-host`; do not call uncommitted files "landed".
+Report phase durations/attempts from `status.phases`; report per-phase cost only when
+provider telemetry attributes it, otherwise unavailable. Do not invent cost splits.

package/templates/runtime/provider-pipeline.md

@@ -53,3 +53,45 @@ verification block success. Record reviewer done after semantic review, then run
 `archive-check`. ONLY a successful gate authorizes reviewer archive-only execution.
 Verify the archive exists and the active change is gone before recording archive
 done. Never archive inside an ordinary review before the combined gates run.
+
+
+### Acceptance evidence and completion
+
+After development, normal review MUST write `stateDir/acceptance.json` and run
+`acceptance --request <absolute-path>` before `phase --phase reviewer --status done`.
+The request is `{criteria: [...], checks: [...], findings: [...]}`:
+- Each criterion has `specId` (string), `criterionIndex` (zero-based), `requirement`
+  (exact frozen text), `status` (`met`, `exception`, `blocked`, `pending`) and a
+  nonempty `evidence` array of concrete code/test/capture references and observations.
+  Cover every frozen acceptance criterion once. If a spec has no explicit criteria,
+  use its complete frozen description (or title if empty) at index 0.
+- An `exception` MUST include `{reason, impact, material, acceptedBy, approvalEvidence}`.
+  `acceptedBy` is `reviewer`, `user`, or `host`. Material scope changes require actual
+  user/host authorization; do not invent approval or label material changes minor.
+  Previously authorized decisions need no new confirmation. Unresolved requirements
+  remain `blocked` or `pending`, never `met` through a rewritten interpretation.
+- Each check has `{name, status, required, evidence, scope, limitations}`; status is
+  `passed`, `failed`, or `unavailable`. Include required and supplementary checks from
+  the design. Record the original required classification; never downgrade a failed
+  check to make the gate pass. For benchmarks state what is measured and excluded:
+  a Node microbenchmark does not establish browser Canvas/GPU/frame performance.
+- `findings` lists concrete review conclusions, risks and resolutions; use an empty
+  array only when no findings remain. Numeric confidence cannot replace this report.
+
+The runtime binds this evidence to frozen scope, source and design. Missing/stale
+acceptance or unresolved requirements/required checks block review and archive.
+Accepted exceptions and supplementary failures produce `with-exceptions` validation.
+Replacing the report requires review and archive authorization again; a green command
+receipt alone is insufficient. Evidence references and approval attribution remain
+reviewer assertions, not independently authenticated proof of human approval.
+
+Keep operational completion notes, check requests and reports in `stateDir` from
+start to finish. Run scoped checks for repairs and one final full verification after
+all edits. Reuse that full receipt while runtime status says it is valid and its
+commands cover required checks. New prose/phase handoffs alone do not warrant reruns.
+
+End with ONE concise summary from runtime `status.completion`: implementation,
+validation (including exceptions), archive, delivery, and evidence references.
+Host-owned delivery stays `pending-host`; do not call uncommitted files "landed".
+Report phase durations/attempts from `status.phases`; report per-phase cost only when
+provider telemetry attributes it, otherwise unavailable. Do not invent cost splits.