Sync wiki from project files

2026-07-07 12:21:39 +02:00
parent c2b79cb875
commit b75cbaa11f

@@ -1,4 +1,4 @@
<!-- codex-wiki-sync:177b22ac31fed0c2b9d9e942 -->
<!-- codex-wiki-sync:6e06a0c95683746b4acbd37c -->
> Mirrored from `/mnt/DATA/git/govoplan-core/docs/MODULE_ARCHITECTURE.md`.
> Origin: `repository`.
@@ -423,8 +423,13 @@ The package install-plan API records operator intent only:
automatically rolls packages back from the run snapshot if commands,
migrations, restart, or health recovery fail.
- `govoplan-module-installer --rollback <run-id>` restores the saved package
snapshots, restores the captured SQLite database snapshot when present, and
reruns package installation from the previous freeze file.
snapshots, restores the captured SQLite or external database snapshot when
present, and reruns package installation from the previous freeze file.
- `--database-backup-command '<command>'` and
`--database-restore-command '<command>'` provide non-SQLite backup/restore
hooks for migrated installer runs. The backup hook runs before migrations;
the restore hook runs during rollback and can be overridden on the rollback
command line.
- `govoplan-module-installer --list-runs --format json`,
`--show-run <run-id> --format json`, and `--lock-status --format json`
expose the same run-history and lock information from the operator shell.
@@ -453,10 +458,17 @@ planning surface; the trusted daemon/CLI is the executor.
Automatic rollback covers Python and WebUI package state. For `sqlite:///`
database URLs, `--migrate` also captures a SQLite backup and rollback restores
it before the supervisor restarts the server. Non-SQLite deployments still need
an external managed backup/restore path before running migrations, and module
uninstall remains blocked until data and migration-state retirement rules are
satisfied.
it before the supervisor restarts the server. For non-SQLite database URLs,
`--migrate` requires deployment-specific backup and restore commands. Hook
commands run in the installer run directory with:
- `GOVOPLAN_INSTALLER_RUN_DIR`
- `GOVOPLAN_DATABASE_URL`
- `GOVOPLAN_DATABASE_BACKUP_PATH`
- `GOVOPLAN_DATABASE_BACKUP_METADATA`
Module uninstall remains blocked until data and migration-state retirement rules
are satisfied.
The running FastAPI server still reports `package_mutation_supported=false`
because dependency-manager operations are not executed inside request handlers.