feat: provision --local + gitignored adapter manifests + hardened path safety - #287

Open

aram356 wants to merge 120 commits into

mainfrom

feature/provision-local-impl

Commits on Jun 29, 2026

provision --local implementation: tracking branch
aram356
committed
Add ProvisionMode + ProvisionArgs.local for provision --local
aram356
committed
Add neutral ProvisionOutcome + AdapterDeployedState types + crate-root re-exports
aram356
committed

Commits on Jul 2, 2026

Make provision_local accept-tests actually exercise their code paths
aram356
committed
Add run_with_staging tempdir helper for dry-run staging
aram356
committed
Wire mode x dry-run dispatch matrix into run_provision
aram356
committed
Add dry-run allow-list diff + would-write status rewriting
aram356
committed
Add provision_local_dry_run worktree-clean + no-tempdir-leak test (ignored until Section 5)
aram356
committed
Add ManifestAdapterDeployed struct + deployed field on ManifestAdapter
aram356
committed
Fix local dry-run to dispatch adapters with dry_run = false
aram356
committed
Add adapter-owned deployed_fields + Manifest-level cross-check
aram356
committed
Task 15 followup: refresh #[expect] reasons + document case-handling
aram356
committed
Add toml_edit-based [adapters.<name>.deployed] writeback
aram356
committed
Cloudflare: cloud provision returns created namespace ids via deployed
aram356
committed
Add edgezero_adapter::env_file::append_lines_dedup (used by Section 5)
aram356
committed
Wire deployed_state_for translator + validate_deployed_field_ownership into run_provision
aram356
committed
Clean up misleading adapter-named tests in provision.rs
aram356
committed
Fix three review findings: dry-run leak, baseline containment, deployed schema check
aram356
committed
Cloudflare: primitive synthesiser for wrangler.toml + bootstrap override
aram356
committed
Cloudflare: local-mode provision emits [[kv_namespaces]] bindings (deployed precedence)
aram356
committed
Cloudflare: local-mode provision writes .dev.vars __NAME / __KEY lines
aram356
committed
Cloudflare: provision_typed appends secret placeholders to .dev.vars
aram356
committed
Fastly: primitive synthesiser for fastly.toml + bootstrap override
aram356
committed
Fastly: local-mode provision writes [local_server.*] + edgezero_runtime_env
aram356
committed
Fastly: provision_typed writes [[local_server.secret_stores.*]] entries
aram356
committed
Spin: primitive synthesiser for spin.toml + runtime-config.toml + bootstrap override
aram356
committed
Spin: local-mode provision writes bindings + runtime-config + .env __NAME lines
aram356
committed
Spin: provision_typed writes lowercased [variables] + SPIN_VARIABLE_ placeholders
aram356
committed
Axum: local-mode provision creates .edgezero/ and writes .env (no axum.toml changes)
aram356
committed
Axum: provision_typed appends secret placeholders to .edgezero/.env
aram356
committed
Re-enable provision_local_dry_run worktree-clean test (Section 5 lock-in)
aram356
committed

Commits on Jul 3, 2026

Commits on Jul 5, 2026

Commits on Jul 6, 2026

Commits on Jul 7, 2026

Commits on Jul 8, 2026

Commits on Jul 9, 2026

Commits on Jul 13, 2026

Commits on Jul 16, 2026

Commits on Jul 17, 2026

Commits on Jul 18, 2026

Commits on Jul 19, 2026

Commits on Jul 20, 2026

Close round-12 review findings across provisioning and push
aram356
committed

Commits on Jul 22, 2026

Require declared adapter manifests and harden Fastly cloud provisioning
aram356
committed

Commits on Jul 26, 2026

Commits on Jul 30, 2026

Close round-16 containment, preflight, and consistency findings
aram356
committed

Commits on Aug 1, 2026

Preflight remote mutations and tighten provision/push edge cases
aram356
committed