acumatica-cli 0.28.0__tar.gz → 0.30.0__tar.gz

{acumatica_cli-0.28.0 → acumatica_cli-0.30.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: acumatica-cli
-Version: 0.28.0
+Version: 0.30.0
 Summary: Acumatica ERP Config-as-Code: tenant provisioning, baseline config, and reference data
 Author: Konstantin Borovik
 Author-email: Konstantin Borovik <kb@lab5.ca>
@@ -45,7 +45,7 @@ YAML in git is the source of truth; the live tenant is the target. `apply` is th
 | Capture derived balances | `state` | Inquire trial-balance etc. into `state/` (not seed) |
 | Create and destroy tenants | `tenant` | SSH control plane: list / create / delete / recycle |
 | Publish the Bootstrap contract | `bootstrap` | REST publish of AcuBootstrap (or `--export` zip for the UI) |
-| Prove a cold rebuild | `check` | create, then apply, then run, then diff on a fresh tenant |
+| Prove a cold rebuild | `tenant create` then `apply` then `run` then `diff` | Compose on a fresh tenant. No wrap command. |
 | Snapshot a site offline | `inventory` | SM203520 XML ZIP or `ac.exe export xml` writes `inventory/` |
 | Cross-check snapshot vs seed | `reconcile` | `inventory/` plus optional `config/` writes `findings/` only |
 | Dump the contract schema | `schema` | OpenAPI `swagger.json` for the pinned endpoint |
@@ -76,7 +76,6 @@ acu --tenant DEV apply config/           # seed config/{bootstrap,baseline,setup
 acu --tenant DEV run scenario/           # once capital → buy → build → sell
 acu --tenant DEV diff config/            # prove zero drift (exit 2 on drift)
 acu --tenant DEV state                   # capture state/ trial-balance
-acu check --yes --tenant DEV             # cold lifecycle create→apply→run→diff (leave tenant)
 ```
 
 Bare `apply` / `diff` (no path args) also prefer `config/` when those trees exist.
@@ -115,7 +114,6 @@ acu [--tenant NAME] [--url URL] [--ssh USER@HOST] [--api-version V]
 ├── apply [--dry-run] [FILES...]      push YAML via REST (idempotent PUT upserts)
 ├── diff  [FILES...]                  drift check vs the live tenant (exit 2 on drift)
 ├── run   [--dry-run] [FILES...]      execute transaction scenario YAML (exit 1 on any miss)
-├── check [--yes] [--tenant L]        cold lifecycle create→apply→run→diff; leave tenant (V47)
 ├── state [--out DIR] [--diff] [--assert-unchanged] [--dry-run] [FILES...]
 │                                     capture derived state into state/ (not seed)
 ├── extract [--out DIR] [--only NAME]... [--force] [--dry-run]
@@ -196,7 +194,7 @@ There is no `--flavor`.
 | `config/bootstrap/` | virgin-tenant config: features, company, credit terms (no `project.xml`) |
 | `config/baseline/` | reference data: subaccounts, COA, ledger, UOMs |
 | `config/setup/` | one-time actions: financial year, master calendar, open periods |
-| `config/master/` | inventory/distribution masters: numbering (`05-…`) before prefs, warehouse, items, parties + Role/User (`90-roles` then `91-users`) |
+| `config/master/` | inventory/distribution masters: numbering (`05-…`) before prefs, warehouse, items, parties + Role/User (`90-roles` then `91-users` then `92-role-users`) |
 | `scenario/` | lifecycle txns for `acu run`: once capital, then buy, build, sell |
 | `config/views/` | observer views for `acu state` (`inquire:` / `entity:` / `gi:`; not SEED_DIRS) |
 | `state/` | committed derived-state observations (evidence, not seed; money/qty fixed-point) |
@@ -285,7 +283,6 @@ Ad-hoc override: `acu --api-version 24.200.001 …` (version half only, never
 `base_url` resolves as `--url`, else `ACU_BASE_URL`, else a hard error naming sources.
 
 `acu config show` prints the resolved `.env` (password excluded; includes `ACU_API_VERSION`).
-`acu check` (lifecycle) uses the same resolved instance.
 
 ### Multi-host overlays (V44)
 
@@ -317,9 +314,6 @@ acu diff
 # explicit path args (no auto) — later path wins same keys
 acu apply config/ overlays/default-24.200.001/
 acu diff config/ overlays/default-24.200.001/
-
-# cold lifecycle vs the resolved .env instance (SSH + tenant required)
-acu check --yes --tenant LAB5
 ```
 
 Add a future half by creating `overlays/default-<new-half>/` with the
@@ -335,7 +329,7 @@ Worth knowing:
 - Without a `.env`, global flags plus the process environment supply the configuration.
 - When `ACU_SSH` is **absent**, acu defaults to `Administrator@` + the resolved base_url hostname.
   A **present blank** `ACU_SSH=` is the hosted opt-out.
-  Only `acu tenant` / `acu check` require a non-empty value post-default.
+  Only `acu tenant` requires a non-empty value post-default.
 - `acu config show` prints the resolved `.env` (password excluded).
 - Redirect it to turn resolved state into a working config: `acu config show > .env`.
 
@@ -383,7 +377,9 @@ gmake release patch   # or minor | major
 2. Fail if `## Unreleased` has no bullets
 3. Bump `pyproject.toml` version (`major` | `minor` | `patch`)
 4. Promote Unreleased body to `## [vX.Y.Z] - YYYY-MM-DD`, leave an empty `## Unreleased`
-5. Commit `CHANGELOG.md` + `pyproject.toml` (+ lock if bumped) together, tag `vX.Y.Z`, push
+5. Commit `CHANGELOG.md` + `pyproject.toml` (+ lock if bumped) together, tag `vX.Y.Z`
+6. `gmake check` again on the promoted tree
+7. Push tag + branch — GitHub Actions publishes
 
 GitHub Actions on tag `v*` re-runs CI, builds sdist+wheel, publishes to PyPI via OIDC trusted publishing, and creates a GitHub Release whose notes are the promoted CHANGELOG section for that tag (plus the artifacts).
 

{acumatica_cli-0.28.0 → acumatica_cli-0.30.0}/README.md

@@ -27,7 +27,7 @@ YAML in git is the source of truth; the live tenant is the target. `apply` is th
 | Capture derived balances | `state` | Inquire trial-balance etc. into `state/` (not seed) |
 | Create and destroy tenants | `tenant` | SSH control plane: list / create / delete / recycle |
 | Publish the Bootstrap contract | `bootstrap` | REST publish of AcuBootstrap (or `--export` zip for the UI) |
-| Prove a cold rebuild | `check` | create, then apply, then run, then diff on a fresh tenant |
+| Prove a cold rebuild | `tenant create` then `apply` then `run` then `diff` | Compose on a fresh tenant. No wrap command. |
 | Snapshot a site offline | `inventory` | SM203520 XML ZIP or `ac.exe export xml` writes `inventory/` |
 | Cross-check snapshot vs seed | `reconcile` | `inventory/` plus optional `config/` writes `findings/` only |
 | Dump the contract schema | `schema` | OpenAPI `swagger.json` for the pinned endpoint |
@@ -58,7 +58,6 @@ acu --tenant DEV apply config/           # seed config/{bootstrap,baseline,setup
 acu --tenant DEV run scenario/           # once capital → buy → build → sell
 acu --tenant DEV diff config/            # prove zero drift (exit 2 on drift)
 acu --tenant DEV state                   # capture state/ trial-balance
-acu check --yes --tenant DEV             # cold lifecycle create→apply→run→diff (leave tenant)
 ```
 
 Bare `apply` / `diff` (no path args) also prefer `config/` when those trees exist.
@@ -97,7 +96,6 @@ acu [--tenant NAME] [--url URL] [--ssh USER@HOST] [--api-version V]
 ├── apply [--dry-run] [FILES...]      push YAML via REST (idempotent PUT upserts)
 ├── diff  [FILES...]                  drift check vs the live tenant (exit 2 on drift)
 ├── run   [--dry-run] [FILES...]      execute transaction scenario YAML (exit 1 on any miss)
-├── check [--yes] [--tenant L]        cold lifecycle create→apply→run→diff; leave tenant (V47)
 ├── state [--out DIR] [--diff] [--assert-unchanged] [--dry-run] [FILES...]
 │                                     capture derived state into state/ (not seed)
 ├── extract [--out DIR] [--only NAME]... [--force] [--dry-run]
@@ -178,7 +176,7 @@ There is no `--flavor`.
 | `config/bootstrap/` | virgin-tenant config: features, company, credit terms (no `project.xml`) |
 | `config/baseline/` | reference data: subaccounts, COA, ledger, UOMs |
 | `config/setup/` | one-time actions: financial year, master calendar, open periods |
-| `config/master/` | inventory/distribution masters: numbering (`05-…`) before prefs, warehouse, items, parties + Role/User (`90-roles` then `91-users`) |
+| `config/master/` | inventory/distribution masters: numbering (`05-…`) before prefs, warehouse, items, parties + Role/User (`90-roles` then `91-users` then `92-role-users`) |
 | `scenario/` | lifecycle txns for `acu run`: once capital, then buy, build, sell |
 | `config/views/` | observer views for `acu state` (`inquire:` / `entity:` / `gi:`; not SEED_DIRS) |
 | `state/` | committed derived-state observations (evidence, not seed; money/qty fixed-point) |
@@ -267,7 +265,6 @@ Ad-hoc override: `acu --api-version 24.200.001 …` (version half only, never
 `base_url` resolves as `--url`, else `ACU_BASE_URL`, else a hard error naming sources.
 
 `acu config show` prints the resolved `.env` (password excluded; includes `ACU_API_VERSION`).
-`acu check` (lifecycle) uses the same resolved instance.
 
 ### Multi-host overlays (V44)
 
@@ -299,9 +296,6 @@ acu diff
 # explicit path args (no auto) — later path wins same keys
 acu apply config/ overlays/default-24.200.001/
 acu diff config/ overlays/default-24.200.001/
-
-# cold lifecycle vs the resolved .env instance (SSH + tenant required)
-acu check --yes --tenant LAB5
 ```
 
 Add a future half by creating `overlays/default-<new-half>/` with the
@@ -317,7 +311,7 @@ Worth knowing:
 - Without a `.env`, global flags plus the process environment supply the configuration.
 - When `ACU_SSH` is **absent**, acu defaults to `Administrator@` + the resolved base_url hostname.
   A **present blank** `ACU_SSH=` is the hosted opt-out.
-  Only `acu tenant` / `acu check` require a non-empty value post-default.
+  Only `acu tenant` requires a non-empty value post-default.
 - `acu config show` prints the resolved `.env` (password excluded).
 - Redirect it to turn resolved state into a working config: `acu config show > .env`.
 
@@ -365,7 +359,9 @@ gmake release patch   # or minor | major
 2. Fail if `## Unreleased` has no bullets
 3. Bump `pyproject.toml` version (`major` | `minor` | `patch`)
 4. Promote Unreleased body to `## [vX.Y.Z] - YYYY-MM-DD`, leave an empty `## Unreleased`
-5. Commit `CHANGELOG.md` + `pyproject.toml` (+ lock if bumped) together, tag `vX.Y.Z`, push
+5. Commit `CHANGELOG.md` + `pyproject.toml` (+ lock if bumped) together, tag `vX.Y.Z`
+6. `gmake check` again on the promoted tree
+7. Push tag + branch — GitHub Actions publishes
 
 GitHub Actions on tag `v*` re-runs CI, builds sdist+wheel, publishes to PyPI via OIDC trusted publishing, and creates a GitHub Release whose notes are the promoted CHANGELOG section for that tag (plus the artifacts).
 

{acumatica_cli-0.28.0 → acumatica_cli-0.30.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "acumatica-cli"
-version = "0.28.0"
+version = "0.30.0"
 description = "Acumatica ERP Config-as-Code: tenant provisioning, baseline config, and reference data"
 license = "PolyForm-Noncommercial-1.0.0"
 readme = "README.md"

{acumatica_cli-0.28.0 → acumatica_cli-0.30.0}/pyproject.toml.orig

@@ -1,6 +1,6 @@
 [project]
 name = "acumatica-cli"
-version = "0.28.0"
+version = "0.30.0"
 description = "Acumatica ERP Config-as-Code: tenant provisioning, baseline config, and reference data"
 authors = [{ name = "Konstantin Borovik", email = "kb@lab5.ca" }]
 license = "PolyForm-Noncommercial-1.0.0"

{acumatica_cli-0.28.0 → acumatica_cli-0.30.0}/src/acumatica_cli/bootstrap.py

@@ -9,7 +9,7 @@ cannot write CS100000 at all (T3 verdict) — and whose Bootstrap contract
 endpoint exposes the seeding surface (serialization verified T12).
 
 Bootstrap endpoint contract is package SoT (V2/V21/T178): always the
-packaged full company ``bootstrap_project.xml`` (``Bootstrap/1.7.0``).
+packaged full company ``bootstrap_project.xml`` (``Bootstrap/1.10.0``).
 Data-repo ``config/bootstrap/project.xml`` or ``bootstrap/project.xml`` is
 not a seed — present → hard error naming package SoT (no dual contract line).
 
@@ -68,7 +68,7 @@ def _bootstrap_file(root: Path, name: str) -> Path | None:
 
 
 def packaged_contract_xml() -> bytes:
-    """The CLI-shipped full company Bootstrap contract (``Bootstrap/1.7.0``)."""
+    """The CLI-shipped full company Bootstrap contract (``Bootstrap/1.10.0``)."""
     return (resources.files("acumatica_cli") / "bootstrap_project.xml").read_bytes()
 
 

acumatica_cli-0.30.0/src/acumatica_cli/bootstrap_plugin.cs

@@ -0,0 +1,147 @@
+// acu bootstrap CustomizationPlugin (SPEC T11).
+//
+// Runs in-process on customization publish - the one write path to
+// FeaturesSet that works: the contract API cannot persist features no
+// matter what endpoint fronts CS100000 (T3 verdict, docs/rest-api.md).
+//
+// Deliberately writes through PXDatabase, not FeaturesMaint: the graph
+// save collides with the publish pipeline's concurrent plugin invocations
+// ("Another process has added the 'FeaturesSet' record" - observed live,
+// 26.101.0225) and nothing persists. A keyed row write is deterministic
+// and idempotent: update the existing row, insert when absent. All 205
+// NOT NULL bit columns are filled reflectively (only ~136 carry DB
+// defaults); Status = 0 means Validated (PXIntList, verified vs live).
+//
+// The Enabled set is NOT authored here (SPEC V2: feature flags are config
+// "what", never tool source - B6): package_zip() substitutes the
+// ACU_FEATURES sentinel below with the data repo's bootstrap/features.yaml
+// list (built-in six when the file is absent) at package-build time.
+using System;
+using System.Collections;
+using System.Collections.Generic;
+using System.Reflection;
+using PX.Data;
+using PX.Objects.CS;
+using PX.SM;
+
+namespace AcuBootstrap
+{
+    public class AcuBootstrapPlugin : Customization.CustomizationPlugin
+    {
+        private static readonly HashSet<string> Enabled = new HashSet<string>
+        {
+            /*ACU_FEATURES*/
+        };
+
+        public override void UpdateDatabase()
+        {
+            var flags = new List<PXDataFieldAssign>();
+            var known = new HashSet<string>();
+            foreach (PropertyInfo prop in typeof(FeaturesSet).GetProperties())
+            {
+                if (prop.PropertyType == typeof(bool?))
+                {
+                    known.Add(prop.Name);
+                    flags.Add(new PXDataFieldAssign(
+                        prop.Name, PXDbType.Bit, Enabled.Contains(prop.Name)));
+                }
+            }
+            foreach (string name in Enabled)
+            {
+                if (!known.Contains(name))
+                {
+                    // silent-typo guard (T24): a misspelled features.yaml
+                    // entry enables nothing - say so in the publish log
+                    WriteLog("AcuBootstrap: unknown feature name '" + name
+                        + "' - no FeaturesSet property, nothing enabled");
+                }
+            }
+            flags.Add(new PXDataFieldAssign("Status", PXDbType.Int, 0)); // Validated
+
+            using (var tx = new PXTransactionScope())
+            {
+                bool updated = PXDatabase.Update<FeaturesSet>(flags.ToArray());
+                if (!updated)
+                {
+                    PXDatabase.Insert<FeaturesSet>(flags.ToArray());
+                    WriteLog("AcuBootstrap: FeaturesSet row inserted (features enabled)");
+                }
+                else
+                {
+                    WriteLog("AcuBootstrap: FeaturesSet row updated (features enabled)");
+                }
+                tx.Complete();
+            }
+        }
+
+        // V53/B33: mapped Role.Users / User.Roles PUT never writes
+        // UsersInRoles. Persist is a keyed PXDatabase write (same
+        // FeaturesSet idiom): ApplicationName='/' (ASP.NET membership).
+        public static void AssignUserToRole(string username, string rolename)
+        {
+            if (string.IsNullOrEmpty(username) || string.IsNullOrEmpty(rolename))
+            {
+                throw new PXException(
+                    "AssignUser requires Username and Rolename");
+            }
+            Guid userId = PXAccess.GetUserID();
+            DateTime now = DateTime.Now;
+            var update = new List<PXDataFieldParam>
+            {
+                new PXDataFieldRestrict("Username", PXDbType.NVarChar, username),
+                new PXDataFieldRestrict("Rolename", PXDbType.NVarChar, rolename),
+                new PXDataFieldRestrict("ApplicationName", PXDbType.VarChar, "/"),
+                new PXDataFieldAssign("LastModifiedByID", PXDbType.UniqueIdentifier, userId),
+                new PXDataFieldAssign("LastModifiedByScreenID", PXDbType.Char, "SM201005"),
+                new PXDataFieldAssign("LastModifiedDateTime", PXDbType.DateTime, now),
+            };
+            bool updated = PXDatabase.Update<UsersInRoles>(update.ToArray());
+            if (!updated)
+            {
+                var insert = new List<PXDataFieldAssign>
+                {
+                    new PXDataFieldAssign("Username", PXDbType.NVarChar, username),
+                    new PXDataFieldAssign("Rolename", PXDbType.NVarChar, rolename),
+                    new PXDataFieldAssign("ApplicationName", PXDbType.VarChar, "/"),
+                    new PXDataFieldAssign("CreatedByID", PXDbType.UniqueIdentifier, userId),
+                    new PXDataFieldAssign("CreatedByScreenID", PXDbType.Char, "SM201005"),
+                    new PXDataFieldAssign("CreatedDateTime", PXDbType.DateTime, now),
+                    new PXDataFieldAssign("LastModifiedByID", PXDbType.UniqueIdentifier, userId),
+                    new PXDataFieldAssign("LastModifiedByScreenID", PXDbType.Char, "SM201005"),
+                    new PXDataFieldAssign("LastModifiedDateTime", PXDbType.DateTime, now),
+                };
+                PXDatabase.Insert<UsersInRoles>(insert.ToArray());
+            }
+        }
+    }
+
+    public class AssignUserFilter : PXBqlTable, IBqlTable
+    {
+        [PXString(256, IsUnicode = true, InputMask = "")]
+        [PXUIField(DisplayName = "Username")]
+        public virtual string Username { get; set; }
+        public abstract class username : PX.Data.BQL.BqlString.Field<username> { }
+    }
+
+    // Action lives on RoleAccess so Base.Roles.Current is the SM201005 header.
+    public class AcuRoleAccessExt : PXGraphExtension<RoleAccess>
+    {
+        public static bool IsActive() => true;
+
+        public PXFilter<AssignUserFilter> AssignUserParams;
+
+        public PXAction<Roles> assignUser;
+
+        [PXButton(CommitChanges = true)]
+        [PXUIField(DisplayName = "Assign User", Visible = false)]
+        protected virtual IEnumerable AssignUser(PXAdapter adapter)
+        {
+            string username = AssignUserParams.Current != null
+                ? AssignUserParams.Current.Username : null;
+            Roles role = Base.Roles.Current;
+            string rolename = role != null ? role.Rolename : null;
+            AcuBootstrapPlugin.AssignUserToRole(username, rolename);
+            return adapter.Get();
+        }
+    }
+}

{acumatica_cli-0.28.0 → acumatica_cli-0.30.0}/src/acumatica_cli/bootstrap_project.xml

@@ -8,7 +8,12 @@
   T204 bumps 1.4.0 -> 1.5.0 for SegmentedKey, gh #30 / V50;
   T207 bumps 1.5.0 -> 1.6.0 for SegmentedKey Detail view (B28);
   gh #34 bumps 1.6.0 -> 1.7.0 for Company DecPlQty + WeightUOM/VolumeUOM
-  (CS101500 commonsetup; kit BOM milligram-scale KG needs qty precision 3).
+  (CS101500 commonsetup; kit BOM milligram-scale KG needs qty precision 3);
+  gh #35 bumps 1.7.0 -> 1.8.0 for User.Roles -> RolesByUser (UsersInRoles)
+  and drops Selected (AllowedRoles was EPLoginTypeAllowsRole / EP202500);
+  T228 bumps 1.8.0 -> 1.9.0 for Role.Users -> UsersByRole (SM201005
+  Users tab; mapped-detail PUT is a no-op — B33) and 1.9.0 -> 1.10.0
+  for Role AssignUser action (PXDatabase UsersInRoles persist).
 
   package_zip() (bootstrap.py) prefers data-repo bootstrap/project.xml when
   present; otherwise this packaged template is the fallback so config init,
@@ -48,9 +53,13 @@
     Username; identity FirstName/LastName/Email + IsApproved +
     PasswordNeverExpires + PasswordChangeOnNextLogin; Password write-only
     (extract/diff policy = V39/T147).
-  - membership = User detail Roles -> AllowedRoles (UsersInRoles/Roles
-    projection): Rolename + Selected (assign when true). Apply order
-    Role then User (V22 prefixes; T148).
+  - User detail Roles -> RolesByUser (GET/diff shape; PUT never
+    writes UsersInRoles — B31/B32/B33). Persist = Role action
+    AssignUser -> PXDatabase UsersInRoles (ApplicationName='/').
+    Role.Users -> UsersByRole is the mapped-detail fixture (silent
+    200). Apply order Role then User then Role.Users
+    (V22 prefixes 90/91/92). Never AllowedRoles
+    (EPLoginTypeAllowsRole / EP202500 allow-list; gh #35 / V53).
 
   T150 NumberingSequence (gh #25) - Default endpoint has no numbering
   surface; CS201010 Numbering Sequences (NumberingMaint — NOT the
@@ -112,7 +121,7 @@
 -->
 <Customization level="" description="acu bootstrap: CustomizationPlugin enables features on publish; Bootstrap endpoint exposes full company surface (company + credit terms + financial currency + GL chain + module preferences + vendor class + statement cycle + warehouse + order type + cash account + role + user + membership + numbering sequence + segmented key)" product-version="26.101">
   <EntityEndpoint>
-    <Endpoint xmlns="http://www.acumatica.com/entity/maintenance/5.31" name="Bootstrap" version="1.7.0" systemContractVersion="4">
+    <Endpoint xmlns="http://www.acumatica.com/entity/maintenance/5.31" name="Bootstrap" version="1.10.0" systemContractVersion="4">
       <TopLevelEntity name="Company" screen="CS101500">
         <Fields>
           <Field name="AcctCD" type="StringValue" />
@@ -1019,6 +1028,7 @@
         <Fields>
           <Field name="Rolename" type="StringValue" />
           <Field name="Descr" type="StringValue" />
+          <Field name="Users" type="RoleUser[]" />
         </Fields>
         <Mappings>
           <Mapping field="Rolename">
@@ -1027,8 +1037,33 @@
           <Mapping field="Descr">
             <To object="Roles" field="Descr" />
           </Mapping>
+          <Mapping field="Users">
+            <To object="UsersByRole" field="" />
+          </Mapping>
         </Mappings>
+        <Actions>
+          <Action name="AssignUser" mappedTo="assignUser" isDefault="false">
+            <Fields>
+              <Field name="Username" type="StringValue" />
+            </Fields>
+            <Mappings>
+              <Mapping field="Username">
+                <To object="AssignUserParams" field="Username" />
+              </Mapping>
+            </Mappings>
+          </Action>
+        </Actions>
       </TopLevelEntity>
+      <Detail name="RoleUser">
+        <Fields>
+          <Field name="Username" type="StringValue" />
+        </Fields>
+        <Mappings>
+          <Mapping field="Username">
+            <To object="UsersByRole" field="Username" />
+          </Mapping>
+        </Mappings>
+      </Detail>
       <TopLevelEntity name="User" screen="SM201010">
         <Fields>
           <Field name="Username" type="StringValue" />
@@ -1067,21 +1102,17 @@
             <To object="UserList" field="Password" />
           </Mapping>
           <Mapping field="Roles">
-            <To object="AllowedRoles" field="" />
+            <To object="RolesByUser" field="" />
           </Mapping>
         </Mappings>
       </TopLevelEntity>
       <Detail name="UserRole">
         <Fields>
           <Field name="Rolename" type="StringValue" />
-          <Field name="Selected" type="BooleanValue" />
         </Fields>
         <Mappings>
           <Mapping field="Rolename">
-            <To object="AllowedRoles" field="Rolename" />
-          </Mapping>
-          <Mapping field="Selected">
-            <To object="AllowedRoles" field="Selected" />
+            <To object="RolesByUser" field="Rolename" />
           </Mapping>
         </Mappings>
       </Detail>

{acumatica_cli-0.28.0 → acumatica_cli-0.30.0}/src/acumatica_cli/cli.py

@@ -55,7 +55,7 @@ COMMAND MAP (pick by intent)
   seed write   apply [--dry-run] [FILES...]              (sole mutator)
   seed check   diff [FILES...]                           (exit 2 on drift)
   txns         run [--dry-run] [FILES...]
-  cold CI      check [--tenant LOGIN]                    (!= config check)
+  cold rebuild tenant create then apply then run then diff (no wrap cmd)
   pull seed    extract [--only ENTITY]...                (inverse of apply)
   observe      state [--diff|--assert-unchanged]
   offline      inventory ARTIFACT | reconcile
@@ -66,7 +66,6 @@ EXIT CODES (common)
   0  success
   1  operational / parse / expectation failure
   2  seed drift (diff) or state moved (state --assert-unchanged)
-  check (lifecycle) never exits 2 — drift fails the run as exit 1
 
 \b
 DEFAULT PATHS (when FILES omitted)
@@ -674,8 +673,8 @@ def config_group() -> None:
       show           print resolved config as a complete .env (password redacted)
       check          read-only live preflight (REST + optional SSH)
 
-    Not the same as `acu check` (cold lifecycle rebuild). Start here on a
-    new machine: init → edit .env → config check → tenant create / bootstrap.
+    Start here on a new machine: init → edit .env → config check →
+    tenant create / bootstrap.
     """
 
 
@@ -721,7 +720,6 @@ def config_init(host: str | None, directory: Path | None) -> None:
     output.data("  5. acu run scenario/")
     output.data("  6. acu diff config/")
     output.data("  7. acu state")
-    output.data("  8. acu check              # cold lifecycle (SSH + tenant)")
 
 
 @config_group.command("show")
@@ -751,7 +749,7 @@ def config_check(ctx: click.Context) -> None:
     """Read-only preflight of the resolved target (ok/fail/warn/skip lines).
 
     Proves connectivity before apply/run. Writes nothing (no PUT, no tenant
-    CRUD). Not `acu check` (that is a destructive cold lifecycle rebuild).
+    CRUD).
 
     \b
     Probe order
@@ -875,192 +873,6 @@ def _probe_endpoints(endpoints: list[tuple[str, str]], inst: Instance) -> bool:
     return False
 
 
-@cli.command("check")
-@click.option(
-    "--yes",
-    is_flag=True,
-    help="Accepted for muscle-memory (pre-clean delete is always unattended)",
-)
-@click.option(
-    "--tenant",
-    "tenant_login",
-    default=None,
-    help="Tenant login for pre-clean create (else ACU_TENANT / global --tenant)",
-)
-@click.pass_context
-def check_cmd(ctx: click.Context, yes: bool, tenant_login: str | None) -> None:
-    """Cold lifecycle: delete → create → apply → run → diff (leave tenant).
-
-    Destructive rebuild for CI against the resolved .env instance. Not
-    `acu config check` (read-only preflight). Requires non-empty ACU_SSH
-    and a tenant login (--tenant / ACU_TENANT). Pre-clean delete is
-    always unattended; rebuilt tenant is left on the host for inspect /
-    state. --yes is accepted for muscle-memory only.
-
-    \b
-    Flow
-      delete tenant (if present) → create+bootstrap → apply → run → diff
-      Diff drift fails the run as exit 1 (never exit 2 from this command).
-
-    \b
-    Examples
-      acu check --tenant DEV
-      acu check --yes --tenant DEV
-
-    Prefer `config check` for "can I connect?" Prefer this for "rebuild
-    green from empty."
-    """
-    _ = yes
-    overrides: dict[str, str] = dict(ctx.obj or {})
-    tenant = _resolve_check_tenant(tenant_login, overrides)
-    try:
-        inst = load_instance({**overrides, "tenant": tenant})
-    except SystemExit as exc:
-        raise SystemExit(str(exc)) from exc
-    if not inst.ssh:
-        raise SystemExit(
-            "ACU_SSH not set (pass --ssh, or put ACU_SSH in .env or the environment)"
-        )
-    output.data(f"check {inst.base_url} (api={inst.api_version})")
-    if _run_lifecycle(inst, tenant) != 0:
-        raise SystemExit(1)
-    output.success("check: green")
-
-
-def _resolve_check_tenant(tenant_login: str | None, overrides: dict[str, str]) -> str:
-    """Tenant login from flag, global, env, or .env; hard-error if unset."""
-    tenant = tenant_login or overrides.get("tenant") or os.environ.get("ACU_TENANT")
-    if not tenant and (root := find_data_root()) is not None:
-        tenant = read_env_values(root / ".env").get("tenant") or None
-    if not tenant:
-        raise SystemExit(
-            "tenant not set (pass --tenant, "
-            "or put ACU_TENANT in .env or the environment)"
-        )
-    return tenant
-
-
-def _run_lifecycle(inst: Instance, tenant: str) -> int:
-    """pre-clean→create→apply→run→diff; leave tenant (V47); return 0 or 1."""
-    mgr = TenantManager(inst)
-    _lifecycle_delete_best_effort(mgr, tenant, label="pre-clean")
-    try:
-        _lifecycle_create_and_bootstrap(inst, mgr, tenant)
-        data_inst = inst.model_copy(update={"tenant": tenant})
-        _lifecycle_apply(data_inst)
-        _lifecycle_run(data_inst)
-        _lifecycle_diff(data_inst)
-    except SystemExit as exc:
-        code = exc.code if isinstance(exc.code, int) else 1
-        if code == 2:
-            code = 1  # V47: check never exits 2
-        output.error(f"lifecycle: {exc}")
-        # Leave tenant for manual inspect (no post-clean — V47).
-        return 1 if code != 0 else 0
-    except (RuntimeError, httpx.HTTPError) as exc:
-        output.error(f"lifecycle: {_format_failure(exc, target=inst.base_url)}")
-        # Leave tenant for manual inspect (no post-clean — V47).
-        return 1
-    output.success(
-        f"lifecycle green on {inst.base_url} tenant {tenant} (left for inspection)"
-    )
-    return 0
-
-
-def _lifecycle_create_and_bootstrap(
-    inst: Instance, mgr: TenantManager, tenant: str
-) -> None:
-    """Create (or exists-skip) tenant + init + bootstrap chain."""
-    tenants = mgr.list()
-    existing = next((t for t in tenants if t.login_name == tenant), None)
-    if existing is not None:
-        company_id = existing.company_id
-        output.data(f"skip create: tenant {tenant} exists (id {company_id})")
-    else:
-        company_id = max((t.company_id for t in tenants), default=0) + 1
-        with output.step(f"creating tenant {company_id} ({tenant}) on {inst.base_url}"):
-            mgr.create(company_id, tenant, 1, True, "")
-        output.data("created")
-    with output.step(f"aligning CompanyCD to login ({tenant})"):
-        if mgr.set_company_cd(company_id, tenant):
-            output.data(f"CompanyCD set to {tenant}")
-        else:
-            output.data(f"CompanyCD already {tenant}")
-    _init_tenant(inst, mgr, tenant)
-    _bootstrap_tenant(inst, mgr, tenant)
-
-
-def _lifecycle_delete_best_effort(
-    mgr: TenantManager, tenant: str, *, label: str
-) -> None:
-    try:
-        tenants = mgr.list()
-        if any(t.login_name == tenant for t in tenants):
-            with output.step(f"{label} delete tenant {tenant}"):
-                mgr.delete(login_name=tenant)
-            with output.step(f"recycling app pool after {label}"):
-                mgr.recycle_app_pool()
-            output.data(f"{label}: deleted {tenant}")
-        else:
-            output.data(f"{label}: tenant {tenant} absent")
-    except (RuntimeError, SystemExit) as exc:
-        output.warn(f"{label}: {exc}")
-
-
-def _lifecycle_apply(inst: Instance) -> None:
-    """Bare apply (pin overlay auto-compose); SystemExit 1 on failure."""
-    total_ok = 0
-    all_errors: list[str] = []
-    with AcumaticaClient(inst) as client:
-        for path in expand_files(default_apply_dirs(inst)):
-            baseline = seed.load_baseline(path)
-            output.data(
-                f"{path} -> {inst.tenant} on {inst.base_url} ({baseline.entity})"
-            )
-            n, errors = seed.apply(client, baseline, dry_run=False)
-            total_ok += n
-            all_errors.extend(f"{path}: {e}" for e in errors)
-            output.data(f"  {n} record(s)")
-    if all_errors:
-        output.error(f"apply: {len(all_errors)} error(s), {total_ok} record(s) applied")
-        for err in all_errors:
-            output.error(err)
-        raise SystemExit(1)
-
-
-def _lifecycle_run(inst: Instance) -> None:
-    """Bare run (pin overlay); SystemExit 1 on failure."""
-    paths = list(default_scenario_files(inst))
-    scenarios = [run.load_scenario(path) for path in paths]
-    ok = True
-    with AcumaticaClient(inst) as client:
-        for scenario in scenarios:
-            ok = run.run(client, scenario) and ok
-    if not ok:
-        raise SystemExit(1)
-    output.success(f"{len(scenarios)} scenario(s) passed on {inst.tenant}")
-
-
-def _lifecycle_diff(inst: Instance) -> None:
-    """Bare diff; SystemExit 2 on drift (caller maps to 1 for check)."""
-    paths = expand_files(default_apply_dirs(inst))
-    drifts: list[str] = []
-    with AcumaticaClient(inst) as client:
-        for path in paths:
-            baseline = seed.load_baseline(path)
-            output.data(
-                f"{path} -> {inst.tenant} on {inst.base_url} ({baseline.entity})"
-            )
-            file_drifts = seed.diff(client, baseline)
-            drifts += file_drifts
-            n = 1 if isinstance(baseline, seed.ActionFile) else len(baseline.records)
-            if file_drifts:
-                output.data(f"  {n} record(s), {len(file_drifts)} drift(s)")
-            else:
-                output.data(f"  {n} record(s) ok")
-    _exit_on_drift(inst, drifts, len(paths))
-
-
 SEED_DIRS = ("bootstrap", "baseline", "setup", "master")
 
 

{acumatica_cli-0.28.0 → acumatica_cli-0.30.0}/src/acumatica_cli/config.py

@@ -70,6 +70,10 @@ INIT_TEMPLATES = (
         "config/baseline/60-ledger-company.yaml",
     ),
     ("config/baseline/90-uoms.yaml", "config/baseline/90-uoms.yaml"),
+    (
+        "config/baseline/91-company-packaging.yaml",
+        "config/baseline/91-company-packaging.yaml",
+    ),
     ("config/setup/10-financial-year.yaml", "config/setup/10-financial-year.yaml"),
     ("config/setup/20-master-calendar.yaml", "config/setup/20-master-calendar.yaml"),
     ("config/setup/30-open-periods.yaml", "config/setup/30-open-periods.yaml"),
@@ -128,6 +132,7 @@ INIT_TEMPLATES = (
     ),
     ("config/master/90-roles.yaml", "config/master/90-roles.yaml"),
     ("config/master/91-users.yaml", "config/master/91-users.yaml"),
+    ("config/master/92-role-users.yaml", "config/master/92-role-users.yaml"),
     (
         "config/views/10-trial-balance.yaml",
         "config/views/10-trial-balance.yaml",

{acumatica_cli-0.28.0 → acumatica_cli-0.30.0}/src/acumatica_cli/extract.py

@@ -590,6 +590,13 @@ class _Extraction:
             if not live:
                 self._skip(target, "no records")
                 continue
+            # V53: Role.Users GET may stay empty; do not emit identity-only
+            # 92-role-users.yaml that would drop authored AssignUser rows.
+            if spec.include == ["Users"] and not any(
+                isinstance(r.get("Users"), list) and r["Users"] for r in records
+            ):
+                self._skip(target, "Users GET empty")
+                continue
             self._emit(target, _render(spec, records), len(records))
             produced.add(spec.file)
         return produced

{acumatica_cli-0.28.0 → acumatica_cli-0.30.0}/src/acumatica_cli/seed.py

@@ -397,6 +397,10 @@ def apply(
     records in the same file. Returns ``(ok_count, error_messages)`` —
     never silent partial; caller exits 1 when any errors remain. Exit 2
     stays drift (``diff`` only).
+
+    Role.Users mapped-detail PUT is a no-op (V53/B33). After the Role PUT,
+    apply invokes contract action ``AssignUser`` per Username so persist
+    is PXDatabase UsersInRoles, not the mapped detail.
     """
     if isinstance(baseline, ActionFile):
         return _apply_action(client, baseline, dry_run)
@@ -406,14 +410,23 @@ def apply(
         label = ", ".join(str(record[k]) for k in baseline.keys)
         if dry_run:
             output.data(f"  would PUT {baseline.entity} [{label}]")
-            ok += 1
+            try:
+                _assign_role_users(client, baseline, record, dry_run=True)
+                ok += 1
+            except RuntimeError as err:
+                msg = f"{baseline.entity} [{label}]: {err}"
+                output.error(msg)
+                errors.append(msg)
             continue
         try:
             body = _put_body(client, baseline, record)
+            if baseline.entity == "Role":
+                body.pop("Users", None)
             _put(client, baseline.entity, body, baseline.endpoint)
             if baseline.entity == "Company":
                 client.refresh_after_company()
             output.data(f"  PUT {baseline.entity} [{label}]")
+            _assign_role_users(client, baseline, record, dry_run=False)
             ok += 1
         except RuntimeError as err:
             msg = f"{baseline.entity} [{label}]: {err}"
@@ -422,6 +435,51 @@ def apply(
     return ok, errors
 
 
+def _assign_role_users(
+    client: AcumaticaClient,
+    baseline: BaselineFile,
+    record: dict[str, Any],
+    *,
+    dry_run: bool,
+) -> None:
+    """V53/B33: persist Role.Users via AssignUser, not mapped-detail PUT.
+
+    Additive-only: ``delete: true`` merge rows are skipped. Mapped GET of
+    Users may be empty, so extra live members are not a persist delete.
+    Role PUT strips ``Users`` so additive-only does not depend on B33.
+    """
+    if baseline.entity != "Role":
+        return
+    users = record.get("Users")
+    if not isinstance(users, list):
+        return
+    rolename = record.get("Rolename")
+    if not isinstance(rolename, str) or not rolename:
+        return
+    to_assign: list[str] = []
+    for i, row in enumerate(users):
+        if isinstance(row, dict) and row.get("delete") is True:
+            continue
+        if not isinstance(row, dict):
+            raise RuntimeError(f"Users[{i}] is not a mapping")
+        username = row.get("Username")
+        if not isinstance(username, str) or not username:
+            raise RuntimeError(f"Users[{i}] missing Username")
+        to_assign.append(username)
+    for username in to_assign:
+        if dry_run:
+            output.data(f"  would invoke AssignUser [{rolename}/{username}]")
+            continue
+        client.invoke(
+            "Role",
+            "AssignUser",
+            {"Rolename": rolename},
+            {"Username": username},
+            baseline.endpoint,
+        )
+        output.data(f"  invoke AssignUser [{rolename}/{username}]")
+
+
 def _put(
     client: AcumaticaClient,
     entity: str,

{acumatica_cli-0.28.0 → acumatica_cli-0.30.0}/src/acumatica_cli/seed_catalog.yaml

@@ -6,7 +6,7 @@
 #   entity    contract entity name (the GET source and the emitted `entity:`)
 #   endpoint  omitted = the instance Default endpoint; the symbolic name
 #             `bootstrap` stays symbolic in emitted files and resolves to
-#             the packaged full company Bootstrap/1.7.0 at HTTP/load time
+#             the packaged full company Bootstrap/1.10.0 at HTTP/load time
 #             (package SoT - V20/V21/T178; data-repo project.xml forbidden)
 #   keys      key fields: the emitted `key:`, the record sort order, and
 #             the B9 fallback's $select projection; the tuple must
@@ -44,10 +44,9 @@ entities:
 
 # config/bootstrap/ - the virgin-tenant phase via the custom Bootstrap
 # endpoint: built-in endpoints cannot create the first organization (C).
-# Company packaging: DecPlQty + WeightUOM/VolumeUOM on CS101500 commonsetup
-# (gh #34). WeightUOM/VolumeUOM required to persist CommonSetup when
-# DistributionModule is on. B26 dropped unmapped packaging claims; mapped
-# fields that GET returns stay in include.
+# Company identity first (bootstrap). Packaging qty/UOMs are a second
+# Company PUT after 90-uoms.yaml (see that row). StockItem WeightUOM
+# /VolumeUOM stay GET-omit (B26).
 
 - entity: Company
   endpoint: bootstrap
@@ -58,9 +57,6 @@ entities:
   - OrganizationType
   - BaseCuryID
   - CountryID
-  - DecPlQty
-  - WeightUOM
-  - VolumeUOM
 
 - entity: CreditTerms
   endpoint: bootstrap
@@ -167,6 +163,20 @@ entities:
   - Description
   - L3Code
 
+# Company packaging (gh #34 / V52): second PUT after UOMs so KG/LITER
+# exist for CommonSetup_RowPersisting when DistributionModule is on.
+# Include-partition of the same live Company row (warehouse-phase idiom).
+# Mapped fields GET-return stay in include.
+
+- entity: Company
+  endpoint: bootstrap
+  keys: [AcctCD]
+  file: config/baseline/91-company-packaging.yaml
+  include:
+  - DecPlQty
+  - WeightUOM
+  - VolumeUOM
+
 # config/master/ - full packaged seed (T117). Multi-file Warehouse uses
 # include field-partition (same live warehouse row, three apply phases).
 # Multi-file StockItem uses OData filter-split on ItemClass.
@@ -522,10 +532,12 @@ entities:
   - Active
   - StockComponents
 
-# config/master/ Role then User (V22 prefixes; T145/T146/T148). Bootstrap
-# only — Default has no Role/User surface. Membership = User detail Roles
-# (UserRole/AllowedRoles). Package 90-roles = full pre-build CompanyID=1
-# Roles dump (system + module roles; live 26.x); 91-users demo soadmin.
+# config/master/ Role then User then Role.Users (V22 prefixes 90/91/92;
+# T145/T146/T148/T228). Bootstrap only — Default has no Role/User surface.
+# Persist = Role action AssignUser (PXDatabase UsersInRoles; T228/B33).
+# User detail Roles is GET/diff shape (PUT never writes UsersInRoles —
+# B31/B32/B33). Package 90-roles = full pre-build CompanyID=1
+# Roles dump; 91-users demo soadmin identity; 92-role-users membership.
 # Password is write-only on apply (V39/T147): include omits Password so
 # extract never emits hashes (b64__Password also out of include).
 
@@ -551,6 +563,19 @@ entities:
   - PasswordChangeOnNextLogin
   - Roles
 
+# Persist membership (T228/V53): apply Role.Users invokes AssignUser.
+# Filter-split from 90-roles (Descr-only identity dump). Mapped-detail
+# PUT never writes UsersInRoles (B31/B32/B33).
+- entity: Role
+  endpoint: bootstrap
+  keys: [Rolename]
+  file: config/master/92-role-users.yaml
+  filter: Rolename eq 'SO Admin'
+  detail_keys:
+    Users: Username
+  include:
+  - Users
+
 # config/setup/ - the GL action chain (T36/T37): financial-year setup,
 # then calendar generation, then period activation; numbered prefixes
 # mirror the verified apply order.

{acumatica_cli-0.28.0 → acumatica_cli-0.30.0}/src/acumatica_cli/templates/README.md

@@ -30,8 +30,7 @@ acu state
 # warm gate: once-capital only — additive buy/sell moves numeric observations
 acu run scenario/10-seed-capital.yaml && acu state --assert-unchanged
 
-# 7. Cold lifecycle (SSH + tenant)
-# acu check --yes
+# SSH cold rebuild: acu tenant create --login NAME, then apply, run, diff
 
 # Optional: re-seed from live (inverse of apply; always under config/)
 # acu extract --out . --force
@@ -48,7 +47,7 @@ Bare `acu apply` / `acu diff` also prefer `config/` when those trees exist.
 | `config/bootstrap/` | Company, features, credit terms (Bootstrap contract is package SoT — never scaffolded) |
 | `config/baseline/` | GL foundation (COA, ledger, subaccounts, UOMs) |
 | `config/setup/` | Financial year, master calendar, open periods |
-| `config/master/` | Numbering (`05-numbering-sequences`) before module prefs; inventory, warehouse, items, vendors, customers; roles/users (`90-roles` then `91-users`) |
+| `config/master/` | Numbering (`05-numbering-sequences`) before module prefs; inventory, warehouse, items, vendors, customers; roles/users (`90-roles` then `91-users` then `92-role-users`) |
 | `scenario/10-seed-capital.yaml` | Once-class owner capital JE (skip-if-present when present); Period = `${current_period}` |
 | `scenario/20-buy.yaml` | Additive component PO → receipt → bill → AP pay |
 | `scenario/30-build.yaml` | Additive kit assembly |

acumatica_cli-0.30.0/src/acumatica_cli/templates/config/baseline/91-company-packaging.yaml

@@ -0,0 +1,8 @@
+entity: Company
+key: AcctCD
+endpoint: bootstrap
+records:
+- AcctCD: LAB5
+  DecPlQty: 3
+  WeightUOM: KG
+  VolumeUOM: LITER

{acumatica_cli-0.28.0 → acumatica_cli-0.30.0}/src/acumatica_cli/templates/config/master/91-users.yaml

@@ -13,4 +13,3 @@ records:
   PasswordChangeOnNextLogin: false
   Roles:
   - Rolename: SO Admin
-    Selected: true

acumatica_cli-0.30.0/src/acumatica_cli/templates/config/master/92-role-users.yaml

@@ -0,0 +1,9 @@
+entity: Role
+key: Rolename
+endpoint: bootstrap
+detail_keys:
+  Users: Username
+records:
+- Rolename: SO Admin
+  Users:
+  - Username: soadmin

acumatica_cli-0.28.0/src/acumatica_cli/bootstrap_plugin.cs

@@ -1,74 +0,0 @@
-// acu bootstrap CustomizationPlugin (SPEC T11).
-//
-// Runs in-process on customization publish - the one write path to
-// FeaturesSet that works: the contract API cannot persist features no
-// matter what endpoint fronts CS100000 (T3 verdict, docs/rest-api.md).
-//
-// Deliberately writes through PXDatabase, not FeaturesMaint: the graph
-// save collides with the publish pipeline's concurrent plugin invocations
-// ("Another process has added the 'FeaturesSet' record" - observed live,
-// 26.101.0225) and nothing persists. A keyed row write is deterministic
-// and idempotent: update the existing row, insert when absent. All 205
-// NOT NULL bit columns are filled reflectively (only ~136 carry DB
-// defaults); Status = 0 means Validated (PXIntList, verified vs live).
-//
-// The Enabled set is NOT authored here (SPEC V2: feature flags are config
-// "what", never tool source - B6): package_zip() substitutes the
-// ACU_FEATURES sentinel below with the data repo's bootstrap/features.yaml
-// list (built-in six when the file is absent) at package-build time.
-using System.Collections.Generic;
-using System.Reflection;
-using PX.Data;
-using PX.Objects.CS;
-
-namespace AcuBootstrap
-{
-    public class AcuBootstrapPlugin : Customization.CustomizationPlugin
-    {
-        private static readonly HashSet<string> Enabled = new HashSet<string>
-        {
-            /*ACU_FEATURES*/
-        };
-
-        public override void UpdateDatabase()
-        {
-            var flags = new List<PXDataFieldAssign>();
-            var known = new HashSet<string>();
-            foreach (PropertyInfo prop in typeof(FeaturesSet).GetProperties())
-            {
-                if (prop.PropertyType == typeof(bool?))
-                {
-                    known.Add(prop.Name);
-                    flags.Add(new PXDataFieldAssign(
-                        prop.Name, PXDbType.Bit, Enabled.Contains(prop.Name)));
-                }
-            }
-            foreach (string name in Enabled)
-            {
-                if (!known.Contains(name))
-                {
-                    // silent-typo guard (T24): a misspelled features.yaml
-                    // entry enables nothing - say so in the publish log
-                    WriteLog("AcuBootstrap: unknown feature name '" + name
-                        + "' - no FeaturesSet property, nothing enabled");
-                }
-            }
-            flags.Add(new PXDataFieldAssign("Status", PXDbType.Int, 0)); // Validated
-
-            using (var tx = new PXTransactionScope())
-            {
-                bool updated = PXDatabase.Update<FeaturesSet>(flags.ToArray());
-                if (!updated)
-                {
-                    PXDatabase.Insert<FeaturesSet>(flags.ToArray());
-                    WriteLog("AcuBootstrap: FeaturesSet row inserted (features enabled)");
-                }
-                else
-                {
-                    WriteLog("AcuBootstrap: FeaturesSet row updated (features enabled)");
-                }
-                tx.Complete();
-            }
-        }
-    }
-}