feat(upgrade): read-only upgrade check and snapshot/rollback library (HACK-2189) by roodboi · Pull Request #790 · hack-dance/hack

feat(upgrade): snapshot and rollback library for upgrade steps (HACK-2189)

roodboi

and

claude

committed

9ffb447

feat(upgrade): read-only hack upgrade check, snapshot and rollback commands (HACK-2189)

roodboi

and

claude

committed

1cdf679

fix(upgrade): a project with only hack.toml or a Compose file is live; keep the check under 30 s (HACK-2189)

roodboi

and

claude

committed

b011e0c

fix(upgrade): check linked worktrees, keep the migration write set, print the running CLI (HACK-2189)

roodboi

and

claude

committed

f77d7b0

fix(upgrade): refuse a snapshot root that resolves into a Git working tree (HACK-2189)

roodboi

and

claude

committed

ab1e187

fix(upgrade): restore keeps every displaced file, readiness needs every required check (HACK-2189)

roodboi

and

claude

committed

3118605

test(upgrade): route fixture git through the shared hermetic environment (HACK-2189)

roodboi

and

claude

committed

0ff8cec

fix(upgrade): put a displaced file back when it cannot be kept; a failed Git listing is incomplete (HACK-2189)

roodboi

and

claude

committed

0733d15

fix(upgrade): decide the store blocker by each reader's own key (HACK-2189)

roodboi

and

claude

committed

049249e

fix(upgrade): check every reader's key; host-probe children end with the probe (HACK-2189)

roodboi

and

claude

committed

77d100c

fix(upgrade): keep displaced files as themselves, no overwriting fallback, honest readiness and coverage (HACK-2189)

roodboi

and

claude

committed

6c46055

fix(upgrade): when publication fails, put the displaced file back or name it (HACK-2189)

roodboi

and

claude

committed

a565f5d

fix(upgrade): a failed proxy ports probe is incomplete, not omitted (HACK-2189)

roodboi

and

claude

committed

d8702b4

test(upgrade): pass the check only the variables it reads, never the runner's environment (HACK-2189)

roodboi

and

claude

committed

19e2900

fix(upgrade): a dead registry entry is not store-reader uncertainty (HACK-2189)

roodboi

and

claude

committed

9ff7679

Merge next into claude/hack-2189-upgrade-check (HACK-2189)

roodboi

and

claude

committed

ddf4482

fix(upgrade): snapshot each project's own secret store and key (HACK-2189)

roodboi

and

claude

committed

b5e16f8

fix(upgrade): keep every restore temporary inside the snapshot, never in the checkout (HACK-2189)

roodboi

and

claude

committed

665d9e1

fix(upgrade): check project-selected secret stores; a failed container listing is incomplete (HACK-2189)

roodboi

and

claude

committed

844191d

fix(upgrade): compare a symlinked parent by where it leads; quote the key path in the chmod remedy (HACK-2189)

roodboi

and

claude

committed

21bd149

fix(upgrade): snapshot the configured default overlay whatever the secret backend (HACK-2189)

roodboi

and

claude

committed

40639fc

fix(upgrade): resolve the migration's project name as doctor does, legacy hack.toml included (HACK-2189)

roodboi

and

claude

committed

b64c4a9

fix(upgrade): a project directory that cannot be listed is a snapshot gap (HACK-2189)

roodboi

and

claude

committed

0614bc4

fix(upgrade): env layer secrets must open under the project env key (HACK-2189)

roodboi

and

claude

committed

64fa471

fix(upgrade): a regular file that cannot be read after displacement goes back in place (HACK-2189)

roodboi

and

claude

committed

b97c9f0

fix(upgrade): fail closed when Git is selected through the environment (HACK-2189)

roodboi

and

claude

committed

e68e029

fix(upgrade): any defined GIT_DIR or GIT_WORK_TREE refuses, whitespace included (HACK-2189)

roodboi

and

claude

committed

1d2803e

Merge next (292d3127) into claude/hack-2189-upgrade-check (HACK-2189)

roodboi

and

claude

committed

dd47bb6

Merge next (b1e123bb) into claude/hack-2189-upgrade-check (HACK-2189)

roodboi

and

claude

committed

c0f7d1e

Navigation Menu

Repository navigation

feat(upgrade): read-only upgrade check and snapshot/rollback library (HACK-2189) - #790

feat(upgrade): read-only upgrade check and snapshot/rollback library (HACK-2189)#790
roodboi merged 30 commits into
nextfrom
claude/hack-2189-upgrade-check

Commits on Nov 13, 2026

feat(upgrade): snapshot and rollback library for upgrade steps (HACK-2189)

feat(upgrade): read-only hack upgrade check, snapshot and rollback commands (HACK-2189)

fix(upgrade): a project with only hack.toml or a Compose file is live; keep the check under 30 s (HACK-2189)

fix(upgrade): check linked worktrees, keep the migration write set, print the running CLI (HACK-2189)

fix(upgrade): refuse a snapshot root that resolves into a Git working tree (HACK-2189)

fix(upgrade): restore keeps every displaced file, readiness needs every required check (HACK-2189)

test(upgrade): route fixture git through the shared hermetic environment (HACK-2189)

fix(upgrade): put a displaced file back when it cannot be kept; a failed Git listing is incomplete (HACK-2189)

fix(upgrade): decide the store blocker by each reader's own key (HACK-2189)

fix(upgrade): check every reader's key; host-probe children end with the probe (HACK-2189)

fix(upgrade): keep displaced files as themselves, no overwriting fallback, honest readiness and coverage (HACK-2189)

fix(upgrade): when publication fails, put the displaced file back or name it (HACK-2189)

fix(upgrade): a failed proxy ports probe is incomplete, not omitted (HACK-2189)

test(upgrade): pass the check only the variables it reads, never the runner's environment (HACK-2189)

fix(upgrade): a dead registry entry is not store-reader uncertainty (HACK-2189)

Merge next into claude/hack-2189-upgrade-check (HACK-2189)

fix(upgrade): snapshot each project's own secret store and key (HACK-2189)

fix(upgrade): keep every restore temporary inside the snapshot, never in the checkout (HACK-2189)

fix(upgrade): check project-selected secret stores; a failed container listing is incomplete (HACK-2189)

fix(upgrade): compare a symlinked parent by where it leads; quote the key path in the chmod remedy (HACK-2189)

fix(upgrade): snapshot the configured default overlay whatever the secret backend (HACK-2189)

fix(upgrade): resolve the migration's project name as doctor does, legacy hack.toml included (HACK-2189)

fix(upgrade): a project directory that cannot be listed is a snapshot gap (HACK-2189)

fix(upgrade): env layer secrets must open under the project env key (HACK-2189)

fix(upgrade): a regular file that cannot be read after displacement goes back in place (HACK-2189)

fix(upgrade): fail closed when Git is selected through the environment (HACK-2189)

fix(upgrade): any defined GIT_DIR or GIT_WORK_TREE refuses, whitespace included (HACK-2189)

Merge next (292d3127) into claude/hack-2189-upgrade-check (HACK-2189)

Merge next (b1e123bb) into claude/hack-2189-upgrade-check (HACK-2189)

Commits on Nov 14, 2026

Merge next (bb6a7d17) into claude/hack-2189-upgrade-check (HACK-2189)