Skip to content

docs(web/guides): correct Linux bleeding-edge install URLs to wheels-be_* - #2777

Merged
bpamiri merged 4 commits into
developfrom
peter/fix-linux-wheels-be-install-snippets
May 21, 2026
Merged

docs(web/guides): correct Linux bleeding-edge install URLs to wheels-be_*#2777
bpamiri merged 4 commits into
developfrom
peter/fix-linux-wheels-be-install-snippets

Conversation

@bpamiri

@bpamiri bpamiri commented May 21, 2026

Copy link
Copy Markdown
Collaborator

Summary

PR #2759 (2026-05-18) renamed the snapshot Linux artifacts to use a wheels-be prefix so the package name itself differentiates the bleeding-edge channel from stable on apt / dnf. The install guides weren't updated alongside that rename, so every documented curl -fsSLO command for Linux bleeding-edge install resolves to a 404 against the actual published assets.

Verified against today's snapshot:

Guide says (broken):   .../wheels_4.0.2.snapshot.1923_amd64.deb        → HTTP 404
Actual published:      .../wheels-be_4.0.2.snapshot.1923_amd64.deb     → HTTP 302

Same problem on the rpm side:

Guide says (broken):   .../wheels-4.0.2.snapshot.1923.x86_64.rpm       → HTTP 404
Actual published:      .../wheels-be-4.0.2.snapshot.1923.x86_64.rpm    → HTTP 302

This PR corrects all six affected pages — three unique pages mirrored across the v4-0-0 (current published) and v4-0-1-snapshot (pre-release preview) doc versions:

Page Snippets fixed
start-here/installing.mdx "Want bleeding-edge?" aside with curl/apt/dnf commands
start-here/release-channels.mdx Main BE install snippets + "Switching channels" snippets + tilde-mangling prose example
command-line-tools/installation.mdx Bleeding-edge illustrative snippets

Substitutions are scoped to bleeding-edge contexts only (snippets using ${SNAP_FILENAME_VER} and prose wheels_4.0.0.snapshot.* filename examples). Stable-channel snippets are unchanged — they use ${WHEELS_VERSION} and fetch from wheels-dev/wheels (not wheels-snapshots), and correctly retain the bare wheels_ / wheels- prefixes because the stable Linux package is still named just wheels.

Related Issue

No issue tracking this specifically; surfaced while planning the 4.0.2 release readiness around #2773. Without this fix, users on Linux can't follow the documented bleeding-edge install flow to verify develop-only fixes — including the two other in-flight 4.0.2 PRs:

Type of Change

  • Bug fix
  • New feature
  • Enhancement to existing feature
  • Documentation update
  • Refactoring

Feature Completeness Checklist

  • DCO sign-offSigned-off-by: trailer present
  • Tests — N/A (docs-only, no executable code paths touched)
  • Framework Docs — this is the framework docs update
  • AI Reference Docs — N/A (.ai/ doesn't reference these snapshot filenames)
  • CLAUDE.md — N/A (CLAUDE.md doesn't reference these snapshot filenames)
  • CHANGELOG.md — intentionally skipped. This is a pure docs fix for stale URLs; no framework behavior changes. Adding an [Unreleased] entry would also conflict with fix(ci): stop double-nesting framework inside Linux .deb/.rpm packages #2776's entry on the same anchor at merge time.
  • Verification — grep sweep confirms: (a) no stale wheels_${SNAP_FILENAME_VER} or wheels-${SNAP_FILENAME_VER}.x86_64.rpm patterns remain anywhere under web/, (b) fixed wheels-be_ / wheels-be- forms present in all six pages, (c) stable-channel wheels_${WHEELS_VERSION} / wheels-${WHEELS_VERSION}.x86_64.rpm snippets untouched.

Test Plan

End-to-end validation (after merge, once next develop snapshot fires):

# On a fresh Ubuntu / Fedora VM, follow the corrected install snippet:
SNAP_TAG=$(curl -fsSL https://api.github.com/repos/wheels-dev/wheels-snapshots/releases \
  | sed -nE 's/.*"tag_name": *"v([^"]+)".*/\1/p' | head -1)
SNAP_FILENAME_VER="${SNAP_TAG//-/.}"
curl -fsSLO "https://github.com/wheels-dev/wheels-snapshots/releases/download/v${SNAP_TAG}/wheels-be_${SNAP_FILENAME_VER}_amd64.deb"
sudo apt install "./wheels-be_${SNAP_FILENAME_VER}_amd64.deb"

# Expect: actual install, not 404
wheels --version    # should report 4.0.2-snapshot.N

Scope clarification — why I'm NOT also fixing

  • Phase 2 apt.wheels.dev / yum.wheels.dev install instructions — those aren't live yet; current Phase 1 GitHub-Releases-direct-install is the only path
  • Stable-channel snippets — they're correct as-is; the stable package on Linux is still named wheels, not wheels-stable or similar
  • Brew / Scoop wheels-be docs — already correct; those formulas use independent install commands that don't reference snapshot artifact filenames

…be_*

PR #2759 (2026-05-18) renamed the snapshot Linux artifacts from `wheels_*`
to `wheels-be_*` (debs) and `wheels-be-*.x86_64.rpm` (rpms) so the package
name itself differentiates the channel. The install guides were not
updated alongside that rename, so every documented `curl -fsSLO ...`
command for Linux bleeding-edge install resolves to a 404 against the
actual snapshot release assets.

Verified against v4.0.2-snapshot.1923 (published 2026-05-20):

  Guide says:    .../wheels_4.0.2.snapshot.1923_amd64.deb   → 404
  Actual asset:  .../wheels-be_4.0.2.snapshot.1923_amd64.deb

Fix all six pages where the snippets / prose examples appear (three
unique pages mirrored across v4-0-0 and v4-0-1-snapshot doc versions):

  start-here/installing.mdx                 — "Want bleeding-edge?" aside
  start-here/release-channels.mdx           — main BE install snippets +
                                              "Switching channels" snippets
                                              + tilde-mangling prose
  command-line-tools/installation.mdx       — bleeding-edge install snippets

The substitutions are scoped to bleeding-edge contexts (snippets using
`${SNAP_FILENAME_VER}` and prose `wheels_4.0.0.snapshot.*` filename
examples). Stable-channel snippets, which use `${WHEELS_VERSION}` and
fetch from `wheels-dev/wheels` (not `wheels-snapshots`), are unchanged —
they correctly retain the bare `wheels_` / `wheels-` prefixes because
the stable package name on Linux is still just `wheels`.

Without this fix, users cannot install or test bleeding-edge / develop
snapshots on Linux via the documented flow. This blocks user-side
verification of develop-only fixes before they ship in the next stable
patch — including PR #2776 (Linux .deb framework nesting fix) and
PR #2774 (defensive onError guard), both of which close issue #2773.

Signed-off-by: Peter Amiri <peter@alurium.com>

@wheels-bot wheels-bot Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wheels Bot — Reviewer A

TL;DR: This PR fixes the right problem — the bleeding-edge Linux package was renamed wheels-be_* by #2759 and the guides weren't updated — but the fix is incomplete. Two bleeding-edge install snippets in both release-channels.mdx files (inside the Linux Tabs component) were missed and still resolve to 404. The PR's own verification sweep failed to catch them because they use a different bash variable name (WHEELS_FILENAME_VER) than the grep checked (SNAP_FILENAME_VER). Requesting changes to close those two remaining gaps before merge.


Correctness

Missed bleeding-edge snippets in release-channels.mdx — both doc versions

web/sites/guides/src/content/docs/v4-0-0/start-here/release-channels.mdx, lines 104–105 and 112:

# Line 104–105 (Debian / Ubuntu (bleeding-edge) tab)
curl -fsSLO "https://github.com/wheels-dev/wheels-snapshots/releases/download/v${WHEELS_TAG}/wheels_${WHEELS_FILENAME_VER}_amd64.deb"
sudo apt install "./wheels_${WHEELS_FILENAME_VER}_amd64.deb"

# Line 112 (Fedora / RHEL (bleeding-edge) tab)
sudo dnf install "https://github.com/wheels-dev/wheels-snapshots/releases/download/v${WHEELS_TAG}/wheels-${WHEELS_FILENAME_VER}.x86_64.rpm"

The same stale content appears at the identical line numbers in v4-0-1-snapshot/start-here/release-channels.mdx. These code blocks are titled "Debian / Ubuntu (bleeding-edge)" and "Fedora / RHEL (bleeding-edge)" — they fetch from wheels-dev/wheels-snapshots and need the wheels-be_ / wheels-be- prefix, yet the PR's diff leaves them untouched.

The root cause of the miss: the PR's verification sweep in the checklist checked for patterns containing ${SNAP_FILENAME_VER}, but these snippets bind the tag to WHEELS_FILENAME_VER (a different variable name). A user copying the code from the Linux tab would get a 404, defeating the fix's stated goal of letting users verify develop-only fixes on Linux.

Fix needed in both v4-0-0 and v4-0-1-snapshot:

# Debian / Ubuntu (bleeding-edge)
curl -fsSLO "https://github.com/wheels-dev/wheels-snapshots/releases/download/v${WHEELS_TAG}/wheels-be_${WHEELS_FILENAME_VER}_amd64.deb"
sudo apt install "./wheels-be_${WHEELS_FILENAME_VER}_amd64.deb"

# Fedora / RHEL (bleeding-edge)
sudo dnf install "https://github.com/wheels-dev/wheels-snapshots/releases/download/v${WHEELS_TAG}/wheels-be-${WHEELS_FILENAME_VER}.x86_64.rpm"

Docs

Stale prose on Linux channel naming — release-channels.mdx line 129 (both versions)

On **Linux**, only a single package name (`wheels`) is published per channel today; the channel distinction lives in the source repo

Since #2759 renamed the bleeding-edge artifact to wheels-be, this is no longer accurate — Linux now ships two differently-named packages, just like macOS/Windows. The macOS/Windows paragraph immediately above (line 127) already says "two differently-named packages (wheels vs wheels-be)". The Linux paragraph needs the same update. Suggested wording:

On Linux, two package names are published: wheels (stable, from wheels-dev/wheels) and wheels-be (bleeding-edge, from wheels-dev/wheels-snapshots). Because they are different package names, apt/dnf does not treat the install as an in-place upgrade — see the snippets below.


What looks good

The changes that are present are correct and symmetric across v4-0-0 and v4-0-1-snapshot:

  • "Switching channels" snippets updated to wheels-be_ / wheels-be- in all four shells.
  • "Want bleeding-edge?" Aside in installing.mdx updated consistently.
  • Tilde-mangling Aside caution in release-channels.mdx updated.
  • command-line-tools/installation.mdx illustrative snippets updated.
  • Stable-channel snippets (wheels_${WHEELS_VERSION} from wheels-dev/wheels) correctly untouched.

Commits

Single commit docs(web/guides): correct Linux bleeding-edge install URLs to wheels-be_* — valid type, descriptive subject, within 100 chars, DCO sign-off present. No issues.

@wheels-bot

wheels-bot Bot commented May 21, 2026

Copy link
Copy Markdown
Contributor

Wheels Bot — Reviewer B (round 1)

A's review is solid. Both findings are verified against the actual files. The request-changes verdict is correct. There is one additional missed issue: A's suggested prose fix for line 129 directly contradicts an inline comment in the same Switching channels section that A did not flag, and that inconsistency needs to be resolved before address-review applies the consensus.

Sycophancy

None detected. A itemized concrete file locations and line numbers, provided suggested replacements, and correctly resisted approving a doc PR with live 404 snippets.

False positives

None detected.

  • Lines 104-105 and 112 in both release-channels.mdx files: Verified in the actual post-merge files. Both v4-0-0 and v4-0-1-snapshot still contain wheels_${WHEELS_FILENAME_VER}_amd64.deb / wheels-${WHEELS_FILENAME_VER}.x86_64.rpm in the primary install Tabs. The diff does not touch those lines. A's claim is accurate.
  • Line 129 stale prose: Verified present verbatim in both files. A's identification is correct.

Missed issues

One additional issue A did not flag:

  • release-channels.mdx lines 142-143 (both versions) -- "upgrades in place" comment contradicts A's own proposed fix: The Linux stable-to-bleeding-edge code block contains the inline comment: # apt sees a newer version ... and upgrades in place -- no uninstall step needed. That claim was accurate when both channels used the package name wheels (same name = apt in-place upgrade). Now that bleeding-edge is wheels-be, a different package name, apt install ./wheels-be_*.deb installs a new package alongside wheels rather than upgrading it in place -- unless the .deb declares Conflicts: wheels and Replaces: wheels. Critically, A's own suggested prose for line 129 states "Because they are different package names, apt/dnf does not treat the install as an in-place upgrade" -- which directly contradicts the comment in the Switching channels snippet A already touched. Whichever version is accurate, the two statements cannot coexist. A should either (a) confirm the .deb declares Replaces:/Conflicts: and keep the comment, or (b) update both the inline comment at line 142 and the prose at line 129 to consistently say an explicit uninstall/reinstall is needed.

Verdict alignment

A's request-changes verdict is consistent with two live-404 snippets remaining in the primary install section -- correct call.

Convergence

Not aligned yet. A's findings are verified and the request-changes verdict is right, but the contradiction between A's proposed prose for line 129 and the inline comment at line 142 is a concrete inconsistency that address-review would need to resolve. A should clarify whether the stable-to-bleeding-edge switch is an in-place upgrade or a separate-package install, and make the suggestion consistent across both locations before we converge. Once A acknowledges and resolves that single point, B will be aligned on converged-changes.

@wheels-bot wheels-bot Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wheels Bot — Reviewer A response (round 1)

B's critique is correct on the missed issue: my proposed prose fix for line 129 ("Because they are different package names, apt/dnf does not treat the install as an in-place upgrade") directly contradicts the inline comment at lines 142-143 of the Switching channels snippet ("apt sees a newer version... and upgrades in place — no uninstall step needed."), and I failed to flag that existing comment when reviewing. I concede that finding. My two original findings from the initial review stand — B independently verified both. Verdict remains request-changes, now covering three related items.

Conceded points

  • Lines 142-143 (both release-channels.mdx versions) — stale "upgrades in place" comment inconsistent with A's line 129 prose suggestion: B is correct. The "upgrades in place" comment was accurate when both channels published a package named wheels — same name means apt automatically treats the new install as an upgrade. With the PR's rename to wheels-be, apt now sees a different package name and would install wheels-be as a separate, new package alongside wheels (with two competing /usr/bin/wheels binaries) unless the .deb declares Replaces: wheels and Conflicts: wheels in its metadata. I should have flagged lines 142-143 as a related site requiring resolution, and I should not have proposed prose for line 129 that presupposes the answer without checking the package metadata. B caught the gap.

Defended points

  • Lines 104-105 and 112 (both doc versions) — primary install Tabs still use wheels_ prefix: Confirmed in the current files; the diff did not touch those lines. Still broken.
  • Line 129 (both doc versions) — "only a single package name (wheels)" prose is stale: Confirmed in the current files — this line is unchanged and now factually wrong after the rename. Still needs updating.

Updated verdict

Still request-changes: the PR needs three items resolved. (1) Lines 104-105 and 112 in both doc versions — update to wheels-be_ / wheels-be- prefix. (2) Lines 142-143 and line 129 must be made consistent: the PR author should confirm whether the wheels-be .deb/.rpm declares Replaces: wheels and Conflicts: wheels in its package metadata — if yes, the "upgrades in place" comment at lines 142-143 is still accurate and line 129 should be updated to explain that apt/dnf handles the channel switch via package replacement metadata; if no, lines 142-143 need to drop the "no uninstall step needed" claim and the snippet needs an explicit apt remove wheels step before installing wheels-be. Either way, the two locations must agree.

bpamiri added 2 commits May 20, 2026 20:06
…ux switching semantics

Round-1 reviewer findings on PR #2777:

A's Nit 1 — primary install Tabs at lines 104-105 (Debian/Ubuntu BE)
and 112 (Fedora/RHEL BE) of `release-channels.mdx` still resolved to
404. My initial verification sweep grep'd for `${SNAP_FILENAME_VER}`,
but these snippets bind the tag to `${WHEELS_FILENAME_VER}` (a
different bash var name). The fix is the same — point at the
`wheels-be_` / `wheels-be-` artifacts.

A's Nit 2 + B's catch — the "Switching channels" section had three
related staleness bugs after #2759 renamed the BE package:

  1. Line 129 prose claimed "only a single package name (`wheels`)
     is published per channel today" — false post-rename.

  2. Lines 142-143 inline comment ("upgrades in place — no uninstall
     step needed") was true when both channels shared the `wheels`
     name, but the new world depends on the actual nfpm-declared
     `Replaces:` / `Conflicts:` metadata. B caught the contradiction
     between A's proposed line-129 prose and the existing line-142
     comment.

  3. Lines 158-172 (Linux BE → stable, both Debian and Fedora) had
     the *same* conceptual bug as 142-143: they prescribed
     `--allow-downgrades` (apt) / `dnf downgrade`, both of which
     assume same-package-name version transitions. With different
     names, both would fail with a `/usr/bin/wheels` file conflict
     because the stable `wheels` package doesn't declare
     `Replaces:`/`Obsoletes: wheels-be`. Reviewers didn't explicitly
     flag this set, but it's the same root cause and listing them
     inconsistently would have left readers worse off.

Verified the actual nfpm metadata before rewriting (so the prose
matches what the packages really declare):

  wheels-be deb:  Replaces: wheels  +  Conflicts: wheels
  wheels-be rpm:  Conflicts: wheels  (no Obsoletes)
  wheels    deb:  no Replaces/Conflicts against wheels-be
  wheels    rpm:  no Conflicts/Obsoletes against wheels-be

The new prose at line 129 explains the asymmetry up front; each
snippet now carries a short comment naming the specific metadata
that drives its action (or the lack of metadata that requires the
explicit `apt remove` / `dnf remove`).

Stable-channel snippets and stable install Tabs are unchanged.

Signed-off-by: Peter Amiri <peter@alurium.com>
@bpamiri

bpamiri commented May 21, 2026

Copy link
Copy Markdown
Collaborator Author

@wheels-bot Reviewer A (initial) — review 4333456257
@wheels-bot Reviewer A response — review 4333483003
@wheels-bot Reviewer B (round 1) — comment 4504221724

All round-1 findings addressed in c36bef6b5 (plus merge of develop in c4287ab10 since #2774 and #2776 both landed while this PR was open).

Acknowledgments first: A and B are both right that my round-0 verification sweep was too narrow — I grep'd for ${SNAP_FILENAME_VER} and missed the same bug in snippets bound to ${WHEELS_FILENAME_VER}. That's exactly the kind of miss a wider regex (or a "no wheels[_-][^b] after a wheels-snapshots URL" check) would have caught. I've added that wider sweep to my pre-commit verification on this push.

Changes pushed

Finding Action
A Nit 1 — lines 104-105 + 112 in both release-channels.mdx (primary BE install Tabs) Updated to wheels-be_${WHEELS_FILENAME_VER}_amd64.deb and wheels-be-${WHEELS_FILENAME_VER}.x86_64.rpm
A Nit 2 — line 129 stale "only a single package name" prose Rewritten to describe the new two-package reality, with up-front mention of the asymmetric Replaces: / Conflicts: / Obsoletes: metadata
B's catch — lines 142-143 "upgrades in place" comment contradicting A's proposed prose Verified against the actual nfpm yamls. The wheels-be .deb declares both Replaces: wheels + Conflicts: wheels, so apt does handle the swap automatically (no separate apt remove needed). The wheels-be .rpm only declares Conflicts: with no Obsoletes:, so dnf users need an explicit dnf remove wheels first. Updated the Debian comment to name the metadata that drives the behavior; added sudo dnf remove wheels to the Fedora snippet with a comment explaining why.

Beyond the explicit findings (scope addition flagged here, not a surprise)

Lines 158-172 (Linux bleeding-edge → stable for both Debian and Fedora) had the same conceptual bug as 142-143 and were inconsistent with whatever resolution we chose there:

  • The old Debian snippet used apt install --allow-downgrades — which assumes same package name. With different names, apt would fail with a /usr/bin/wheels file conflict because the stable wheels .deb doesn't declare Replaces: wheels-be. Fixed by adding sudo apt remove wheels-be first and dropping the --allow-downgrades flag.
  • The old Fedora snippet used sudo dnf downgrade — same issue. Fixed by adding sudo dnf remove wheels-be first and switching to sudo dnf install.

I made these changes even though the reviewers didn't explicitly flag them, on the principle B used for line 142-143: "the two locations must agree." Listing one direction with Replaces: semantics and the other with stale --allow-downgrades semantics would have left readers with the same kind of cross-snippet contradiction. If the reviewers want this trimmed back to only the two flagged locations, happy to revert, but they have the same root cause and would have been a guaranteed round-2 finding otherwise.

Verification on this push

[1] Any wheels-snapshots URL with non-be filename:        ✓ none
[2] Any bare wheels_4.0.0.snapshot.* prose example:       ✓ none
[3] Any "upgrades in place" / "no uninstall step" /
    "--allow-downgrades" / "dnf downgrade" claims:        ✓ none
[4] Any stale "only a single package name" prose:         ✓ none
[5] Stable wheels_${WHEELS_VERSION} snippets:             ✓ unchanged
[6] New "Replaces: wheels" prose present:                 ✓ both versions

Skipped

Nothing — every flagged item addressed. Convergence-on-approve from reviewers welcome whenever they've re-read the diff.

@wheels-bot wheels-bot Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wheels Bot — Reviewer A

TL;DR: This follow-up commit fully resolves all three items from the previous request-changes round — the two missed bleeding-edge install snippets in both release-channels.mdx versions (the WHEELS_FILENAME_VER tabs that were not caught by the initial grep), the stale line-129 prose, and the contradictory line-142/143 comment. The package-metadata-driven rewrite of the Switching channels section is accurate and internally consistent. One minor doc nit on comment accuracy, but nothing that should block merge.


Correctness

All three prior findings addressed:

  1. Lines 104–105 and 112 (both doc versions) — primary install Tabs with WHEELS_FILENAME_VER: Fixed. Both versions now read wheels-be_${WHEELS_FILENAME_VER}_amd64.deb / wheels-be-${WHEELS_FILENAME_VER}.x86_64.rpm.

  2. Line 129 prose (both doc versions): Fixed. The old "only a single package name (wheels) is published per channel today" claim is replaced with an accurate description of the asymmetric Replaces: / Conflicts: / Obsoletes: metadata, explaining up front why the stable→BE swap on Debian is automatic while the Fedora direction and both reverse directions need explicit removes.

  3. Lines 142–143 "upgrades in place" comment (both doc versions): Fixed. The comment now accurately cites Replaces: wheels + Conflicts: wheels as the mechanism.

The four Linux switching snippets are now consistent with the line-129 prose and with each other.

Minor nit — line 164–165 (both doc versions), "bleeding-edge → stable (Debian / Ubuntu)" comment:

# The stable wheels .deb does not declare Replaces: wheels-be, so apt
# would fail with a /usr/bin/wheels file conflict. Remove wheels-be
# first.

The real failure mode is the package-level Conflicts: wheels already declared by wheels-be — apt would refuse to install wheels while wheels-be is present with a package conflict error, not a dpkg-level file-ownership conflict. The prescription (apt remove wheels-be first) is correct regardless, and an advanced user debugging the error message might be confused by the "file conflict" framing. Suggested wording:

# wheels-be declares Conflicts: wheels, so apt refuses to install wheels
# while wheels-be is present. Remove wheels-be first.

This is a nit — does not block merge.


What looks good

  • Symmetric across v4-0-0 and v4-0-1-snapshot: all six files updated identically.
  • Stable-channel snippets (${WHEELS_VERSION} from wheels-dev/wheels) correctly untouched in both doc versions.
  • Removed --allow-downgrades and dnf downgrade from the reverse-direction snippets; replacing them with explicit remove-then-install is the correct approach when two differently-named packages share a binary path.
  • No other doc versions (v2-5-0, v3-0-0) contain Linux snapshot install snippets — confirmed from directory listing.

Commits

  • 78f2910ea docs(web/guides): correct Linux bleeding-edge install URLs to wheels-be_* — valid type, subject within 100 chars, DCO sign-off present.
  • c4287ab10 Merge remote-tracking branch ... — merge commit, no commitlint requirement.
  • c36bef6b5 docs(web/guides): fix release-channels.mdx — missed BE Tab URLs + Linux switching semantics — valid type, subject within 100 chars, DCO sign-off present. Commit body explains the why (missed WHEELS_FILENAME_VER variable, nfpm metadata verification before rewriting switching prose).

…comments

Reviewer A round-2 nit on PR #2777: the BE → stable (Debian) snippet's
comment said apt "would fail with a /usr/bin/wheels file conflict",
framing the failure mode as a dpkg-level file-ownership conflict. The
actual blocker is the package-level `Conflicts: wheels` declaration in
wheels-be's deb metadata — apt refuses the install with a package
conflict error before dpkg ever attempts to unpack files. An advanced
user debugging the actual error message would be confused by the
file-conflict framing.

Rewrite the Debian comment per A's suggestion, naming the actual
mechanism: `wheels-be declares Conflicts: wheels`. Kept the secondary
note about the missing `Replaces: wheels-be` in stable since it
explains why apt also wouldn't auto-remove (relevant context if a
reader wonders whether a single command could swap them).

Updated the Fedora BE → stable comment to use parallel framing for
consistency — same root cause (`wheels-be` declares `Conflicts:
wheels`, applies bidirectionally on rpm too). Reviewer A only flagged
the Debian site explicitly, but leaving the two comments inconsistent
would have invited the same "two sites must agree" finding that
caught round 1's line-142 / line-129 contradiction.

Signed-off-by: Peter Amiri <peter@alurium.com>
@wheels-bot

wheels-bot Bot commented May 21, 2026

Copy link
Copy Markdown
Contributor

Wheels Bot — Reviewer B (round 1)

A's review of the follow-up commit is accurate and well-grounded. All three prior request-changes items are verifiably fixed in the diff. There is one concrete actionable nit — A identified it correctly but called it non-blocking. B concurs on the diagnosis but recommends applying it before merge, since the comment misleads users about the actual apt failure mechanism. Converging on changes for that one-line fix in two files.

Sycophancy

None detected. A used COMMENTED state (not approve) and called out a concrete inaccuracy in the inline comment at lines 164–165, rather than glossing over it.

False positives

None detected.

  • Prior findings (lines 104–105 / 112 in both release-channels.mdx versions): Verified in the diff — both v4-0-0 and v4-0-1-snapshot now read wheels-be_${WHEELS_FILENAME_VER}_amd64.deb and wheels-be-${WHEELS_FILENAME_VER}.x86_64.rpm. A's claim is accurate.
  • Line 129 prose (both versions): Verified in the diff — the old "only a single package name" text is replaced with an accurate description of the asymmetric Replaces: / Conflicts: / Obsoletes: metadata. A's claim is accurate.
  • Lines 142–143 comment (both versions): Verified — the "upgrades in place" comment is replaced with the mechanism-citing replacement. A's claim is accurate.
  • A's nit at lines 164–165 (both versions): Verified. The current comment reads: "The stable wheels .deb does not declare Replaces: wheels-be, so apt would fail with a /usr/bin/wheels file conflict." A is correct that the actual failure mode is the Conflicts: wheels declaration on wheels-be, which causes apt to refuse at the dependency-resolution stage — before dpkg file ownership is even checked. The comment attributes the refusal to the wrong mechanism. A's suggested replacement is accurate.

Missed issues

None detected. The PR author's proactive fix to the bleeding-edge → stable snippets (lines 158–172, dropping --allow-downgrades / dnf downgrade in favour of explicit remove-then-install) is correct and A acknowledged it under "What looks good." The apt upgrade wheels forward-looking mention in the "repos coming" line is about the future stable apt repo and is correctly left unchanged.

Verdict alignment

A's COMMENTED state is consistent with finding only a non-blocking nit after all substantive issues were resolved — correct call.

Convergence

Aligned. A identified the lines-164–165 comment inaccuracy with a concrete suggested replacement; B agrees it is real and actionable (a two-line change in two mirrored files). The fix is clear: replace the "file conflict" framing with A's suggested wording that names the Conflicts: wheels declaration as the mechanism. Address-review can apply this directly from A's suggestion. Converging on changes.

@bpamiri

bpamiri commented May 21, 2026

Copy link
Copy Markdown
Collaborator Author

@wheels-bot Reviewer A (round 2) — review 4333693872

Addressed in c73fe8181. You're right — the actual blocker is wheels-be's Conflicts: wheels declaration (apt refuses with a package-conflict error before dpkg ever attempts to unpack files), not a dpkg file-ownership conflict.

  • Debian BE → stable comment — rewritten using your suggested framing, naming the Conflicts: wheels declaration as the mechanism. Kept a parenthetical noting the missing Replaces: wheels-be in stable too, since that explains why apt also wouldn't auto-remove (relevant if a reader wonders whether a single command could swap them).
  • Fedora BE → stable comment — updated for parallel framing. You only flagged the Debian one, but wheels-be rpm declares Conflicts: wheels the same way (verified in nfpm-wheels-be.yaml), so the same accurate framing applies. Leaving the two snippets with mismatched failure-mode framing would have invited a "two sites must agree" round-3 nit under the same logic that caught round 1's line-142 / line-129 contradiction.

No other staleness from this comment-accuracy class — verified via grep -rn "file conflict\|file-ownership conflict" (returns nothing). Stable-channel snippets and BE-channel install Tabs are unchanged.

@bpamiri

bpamiri commented May 21, 2026

Copy link
Copy Markdown
Collaborator Author

@wheels-bot Reviewer B (round 1) — comment 4504471195

Already addressed in c73fe8181, pushed before your review landed (your converged-changes marker references c36bef6b5, which is one commit behind HEAD). The fix matches A's suggested wording — Debian comment now reads:

# wheels-be declares Conflicts: wheels, so apt refuses to install wheels
# while wheels-be is present. (Stable wheels .deb also doesn't declare
# Replaces: wheels-be, so apt wouldn't auto-remove either way.) Remove
# wheels-be first.

The Fedora comment got the same parallel framing — your "two sites must agree" principle applies here exactly as it did to round 1's line-142 / line-129 split, so I extended A's Debian-only suggestion to the rpm site as well. Verified via grep -rn "file conflict\|file-ownership conflict" — returns nothing.

PR should be at converged-approve on c73fe8181 once both reviewers re-run against the current HEAD. No further code action expected from me; happy to close the loop here if you agree.

@wheels-bot wheels-bot Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wheels Bot — Reviewer A

TL;DR: The final commit (c73fe81) directly and correctly resolves the round-2 nit — the BE→stable (Debian/Ubuntu) comment now names wheels-be declares Conflicts: wheels as the actual blocking mechanism rather than a dpkg file-ownership conflict, and the Fedora comment is updated in parallel for consistency. All three round-1 findings and the round-2 nit are now addressed. The PR is ready to merge.


Correctness

All outstanding items from prior rounds are closed:

  1. Lines 104–105 and 112 (both doc versions) — WHEELS_FILENAME_VER snippets: Fixed in c36bef6. Both doc versions now emit wheels-be_${WHEELS_FILENAME_VER}_amd64.deb / wheels-be-${WHEELS_FILENAME_VER}.x86_64.rpm correctly.

  2. Line-129 Linux channel-naming prose (both doc versions): Fixed in c36bef6. The stale "only a single package name" claim is replaced with an accurate description of the package metadata asymmetry (Replaces: + Conflicts: on Debian, Conflicts: only on Fedora).

  3. Lines 142–143 "upgrades in place" comment (both doc versions): Fixed in c36bef6. The comment now cites the actual Replaces: wheels + Conflicts: wheels metadata as the mechanism.

  4. Round-2 nit — BE→stable (Debian) comment framing (both doc versions): Fixed in c73fe81. The comment now reads:

    # wheels-be declares Conflicts: wheels, so apt refuses to install wheels
    # while wheels-be is present. (Stable wheels .deb also doesn't declare
    # Replaces: wheels-be, so apt wouldn't auto-remove either way.) Remove
    # wheels-be first.

    This correctly names the package-level Conflicts: declaration as the blocker (apt refuses before dpkg attempts file unpacking), rather than the previously misleading "file conflict" framing. The secondary note about missing Replaces: wheels-be in stable is accurate and useful — it answers the natural follow-up question of why a single command cannot swap them automatically.

    The Fedora BE→stable comment was updated with parallel framing as a proactive consistency fix, which is the right call given that the prior round-1 review caught the line-129 / line-142 consistency gap.

The four Linux switching snippets, the line-129 prose, the tilde-mangling Aside, and the comment text are now internally consistent in both doc versions.


Commits

All four PR commits conform to commitlint:

  • 78f2910ea docs(web/guides): correct Linux bleeding-edge install URLs to wheels-be_* — valid type, DCO present.
  • c4287ab10 Merge remote-tracking branch ... — merge commit, no commitlint requirement.
  • c36bef6b5 docs(web/guides): fix release-channels.mdx — missed BE Tab URLs + Linux switching semantics — valid type, subject within 100 chars, DCO present.
  • c73fe8181 docs(web/guides): name the actual Conflicts declaration in BE→stable comments — valid type, subject within 100 chars, DCO present. Commit body explains why the file-conflict framing was wrong and why the Fedora comment was updated proactively.

What looks good (overall)

  • Symmetric across v4-0-0 and v4-0-1-snapshot throughout.
  • Stable-channel snippets (wheels_${WHEELS_VERSION}) correctly untouched.
  • Removed --allow-downgrades and dnf downgrade in favor of explicit remove-then-install, which is the correct approach when two differently-named packages compete for /usr/bin/wheels.
  • The PR description's scope clarification (Phase 2 apt/yum repos, stable snippets, Brew/Scoop) correctly bounds what is and is not changed.

@wheels-bot

wheels-bot Bot commented May 21, 2026

Copy link
Copy Markdown
Contributor

Wheels Bot — Address Review (round 1)

Consensus findings from Reviewer A and Reviewer B's convergence at c36bef6b5 were already applied by the author in c73fe8181 before this address-review run began. No commit produced — nothing left to change.

Consensus finding (from B's converged-changes marker on c36bef6b5):

  • release-channels.mdx lines 164–165, both v4-0-0 and v4-0-1-snapshot — replace the "would fail with a /usr/bin/wheels file conflict" framing (which attributes the apt refusal to a dpkg-level file-ownership conflict) with framing that names the package-level Conflicts: wheels declaration on wheels-be as the actual mechanism.

Verification on current head c73fe8181:

  • web/sites/guides/src/content/docs/v4-0-0/start-here/release-channels.mdx:164 now reads # wheels-be declares Conflicts: wheels, so apt refuses to install wheels — matches A's suggested replacement.
  • web/sites/guides/src/content/docs/v4-0-1-snapshot/start-here/release-channels.mdx:164 — same fix applied (parallel mirror).
  • Both files' Fedora BE → stable comments (line 176) updated for parallel framing — the author noted this proactively, citing the same "two sites must agree" logic that produced the round-1 contradiction.
  • grep -rn "file conflict\|file-ownership conflict" web/ returns nothing.

Reviewer A has already submitted an APPROVED review on c73fe8181 (2026-05-21T03:20:57Z), so the convergence loop has effectively already progressed past this stage. Posting this marker for idempotency and to close out address-review at this SHA.

Skipped:

  • No consensus findings were skipped — the single converged-changes item is verified applied.
  • No fix/bot-* test re-run cited — this is a docs(web/guides) PR; consensus touched only .mdx content under web/sites/guides/.

@wheels-bot

wheels-bot Bot commented May 21, 2026

Copy link
Copy Markdown
Contributor

Wheels Bot — Reviewer B (round 1)

A's review of the final commit is clean and well-grounded. All four prior findings are verifiably addressed in the diff. No sycophancy, no false positives, no missed issues. A's APPROVED verdict is correct. Converging on approve.

Sycophancy

None detected. A itemized each round-1 and round-2 item with specific commit hashes, quoted fix text, and line-level citations rather than an unsupported LGTM. The PR touches no security, migration, deploy, or DI subsystems — docs-only approval requires no human gate.

False positives

None detected. Verified each of A's four claims against the actual diff:

  • Lines 104–105 and 112 in both release-channels.mdx — confirmed wheels-be_${WHEELS_FILENAME_VER}_amd64.deb and wheels-be-${WHEELS_FILENAME_VER}.x86_64.rpm are present in both doc versions.
  • Line-129 "only a single package name" prose — confirmed replaced with accurate Replaces: / Conflicts: / Obsoletes: description in both doc versions.
  • Lines 142–143 stable → bleeding-edge (Debian) comment — confirmed "upgrades in place" replaced with mechanism-citing text.
  • Round-2 nit — BE→stable (Debian) comment — confirmed both doc versions now read wheels-be declares Conflicts: wheels, so apt refuses to install wheels while wheels-be is present... matching A's quoted text exactly.
  • Fedora BE→stable parallel update — confirmed; both doc versions carry the parallel framing (Same as Debian above — wheels-be declares Conflicts: wheels...).

Missed issues

None detected. Verified independently:

  • All six pages are changed (v4-0-0 and v4-0-1-snapshot for each of the three files). The v4-0-1-snapshot diff is a mirror of v4-0-0.
  • Stable-channel package name references (wheels_${WHEELS_VERSION}, wheels-${WHEELS_VERSION}.x86_64.rpm) are untouched throughout.
  • The forward-looking apt upgrade wheels line (future apt.wheels.dev repo) is correctly left unchanged.
  • The tilde-mangling <Aside> is updated in both doc versions.
  • All four commits conform to commitlint (docs type, subjects within 100 chars, DCO trailers present per prior-round verification). Merge commit is exempt.

Verdict alignment

A's APPROVED state is consistent with all prior request-changes items being closed and no new issues found in the final commit — correct call.

Convergence

Aligned on approve. Every finding across all three rounds has been addressed, the diff is internally consistent across both doc versions, and the final commit correctly names the Conflicts: declaration as the apt/dnf refusal mechanism. No further changes needed.

@bpamiri
bpamiri merged commit 205ac08 into develop May 21, 2026
13 checks passed
@bpamiri
bpamiri deleted the peter/fix-linux-wheels-be-install-snippets branch May 21, 2026 03:24
bpamiri added a commit that referenced this pull request May 27, 2026
…leased] (#2816)

Entries in [Unreleased] cited issue numbers (or earlier stacked-PR
numbers) rather than their merge-PR numbers, and six entries carried no
reference at all. Correct 18 references to the actual merge PRs and add
the five missing user-facing entries: #2814 (native apt/yum repos),
#2804 (Migration.cfc command alias sweep), #2813 (skip spurious commit
after rollback in migrateIndividual), and #2777 / #2801 (Linux install
URL and migrator-table doc fixes).

No existing prose changed beyond the trailing reference, and nothing was
misfiled in the 4.0.1 section (verified by grep). Internal-only
CI/chore/blog PRs (#2797, #2772, #2771, #2770) and the user-invisible
bucket rename (#2788) are intentionally omitted.

Signed-off-by: Peter Amiri <peter@alurium.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
bpamiri added a commit that referenced this pull request May 27, 2026
* chore: bump develop snapshot target to 4.0.2 (#2770)

Manual bump after the v4.0.1 GA — `bump-develop-version.yml` fired via
`repository_dispatch` (the #2609 fix worked) but failed in 12s on a
second issue: `peter-evans/create-pull-request@v6` hit
`remote: Duplicate header: "Authorization"` because the `actions/checkout`
step left credentials persisted that conflict with the action's own token.
See run 26173817714 for the failed log.

Setting `wheels.json` to `4.0.2` so subsequent develop snapshots are
tagged `4.0.2-snapshot.<run>`. This is a baseline, not a commitment —
the next GA's scope decision is made at tag-cut time.

Follow-up issue tracks the workflow fix (add `persist-credentials: false`
to the checkout step).

Signed-off-by: Peter Amiri <peter@alurium.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* ci(release): fix bump-develop-version.yml duplicate Authorization header (#2771)

`actions/checkout@v6` defaults to `persist-credentials: true`, which
writes `http.https://github.com/.extraheader = AUTHORIZATION: basic <GITHUB_TOKEN>`
to the local `.git/config`. `peter-evans/create-pull-request@v6` then
sets its own `extraheader` for the dispatch token, and the next git
operation sends both Authorization headers — GitHub returns HTTP 400
with `remote: Duplicate header: "Authorization"`.

First observed on the v4.0.1 GA (2026-05-20, run 26173817714); manual
workaround was #2770. Setting `persist-credentials: false` keeps
peter-evans/create-pull-request as the sole Authorization authority.

This is a documented peter-evans/create-pull-request gotcha when the
caller uses a non-default token.

Signed-off-by: Peter Amiri <peter@alurium.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* docs(web/blog): Wheels 4.0.1: Adobe CF hardening, Windows Scoop fixes, and the post-GA shakeout (#2772)

Walks through the ~100 PRs that landed between 4.0.0 and 4.0.1: Adobe CF
2023/2025 attributeCollection + onError + env() + Vite asset-walk chain,
the Windows Scoop wheels.cmd cmd.exe pre-parser fix, paginationNav()
viewStyle presets, whereIn([]) short-circuit, CORS preflight/Vary/multi-
origin fixes, plural mappings, Oracle bulk-insert + CockroachDB advisory
locks, BoxLang adapter fixes, deploy CLI hardening, and Rocky Linux RPM
fixes from the titan production cutover.

Signed-off-by: Peter Amiri <peter@alurium.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(cli): guard application.wo in onError so init failures don't cascade (#2774)

* fix(cli): guard application.wo in onError so init failures don't cascade

When the Wheels Injector fails to load during onApplicationStart (a stale
/wheels mapping under Lucee Express 7 is the symptom users hit on the
"Your First 15 Minutes" tutorial), application.wo is never assigned. The
existing recovery try/catch inside onError swallows a second failure
silently and then unconditionally calls application.wo.$getRequestTimeout(),
which throws "The key [WO] does not exist." and replaces the real
diagnostic with a cryptic cascade.

Add a StructKeyExists(application, "wo") guard right after the recovery
try/catch in cli/lucli/templates/app/public/Application.cfc (the template
behind `wheels new`) and the demo public/Application.cfc. When the global
isn't there, render a minimal HTML error page and return — the user sees
"Wheels failed to initialize" plus the original exception message instead
of the cascade.

Fixes #2773

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* docs(web/guides): note application error fallback and init failure in troubleshooting docs

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* fix(cli): address Reviewer A/B consensus findings (round 1)

- Set HTTP 500 status code in the onError fallback in both
  cli/lucli/templates/app/public/Application.cfc and public/Application.cfc
  so monitoring tools and CDNs don't cache the Wheels-init failure as
  a successful response. Uses a plain struct for cfheader's
  attributeCollection per CLAUDE.md cross-engine invariant #10
  (Adobe CF 2023/2025 reject the arguments scope on built-in tags).
- Document the no-nested-braces assumption behind catchClosePattern in
  vendor/wheels/tests/specs/cli/OnErrorFallbackGuardSpec.cfc so a future
  edit that adds nested braces inside the outer catch knows why the
  silent fallback to scanFrom=1 is the safety net.
- Fix the contradictory recovery steps in the first-15-minutes guide
  (wheels reload requires a running server) at
  web/sites/guides/src/content/docs/v4-0-1-snapshot/start-here/first-15-minutes.mdx.
- Replace the speculative "pre-4.0.2" wording in
  .ai/wheels/troubleshooting/common-errors.md with "4.0.1 or earlier"
  since the fix is still in [Unreleased].

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* chore(web): refresh visual baseline(s) (all)

Manually triggered baseline refresh via
.github/workflows/refresh-visual-baselines.yml
on branch fix/bot-2773-first-15-minutes-tutorial-fails-the-key-wo-does-no.

Run when an intentional content/layout change makes the visual-regression
check fail. The new PNG(s) under web/tests/visual-baselines/ are now the
expected rendering; re-run the failing visual-regression job to flip the
check green.

---------

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* fix(ci): stop double-nesting framework inside Linux .deb/.rpm packages (#2776)

* fix(ci): stop double-nesting framework inside Linux .deb/.rpm packages

The nfpm contents rule pointed `src` at `./build/framework/` for the
framework staging step. `wheels-core-VER.zip` carries a top-level
`wheels/` directory that `unzip` preserves, so the resulting tree was
`./build/framework/wheels/...`. nfpm `type: tree` copies *contents* of
src into dst, which meant the inner `wheels/` wrapper itself landed at
the destination — producing
`/opt/wheels/module/vendor/wheels/wheels/Injector.cfc` instead of
`/opt/wheels/module/vendor/wheels/Injector.cfc`.

After the user-side wrapper sync (`/opt/wheels/module/*` →
`~/.wheels/modules/wheels/*`) and `wheels new <app>` copy, every fresh
Linux install ended up with the framework one directory level too deep.
Lucee's `/wheels` mapping pointed at the (empty) outer directory, so
`new wheels.Injector("wheels.Bindings")` in the generated
`public/Application.cfc` threw `could not find component or class with
name [wheels.Injector]` on the first request. The existing onError
handler then dereferenced `application.wo` (which was never assigned
because Injector init failed), surfacing only the cryptic cascade
`The key [WO] does not exist.` — issue #2773.

The brew formula handles this correctly by re-introducing the wheels/
wrapper at stage time
(`(share/"wheels/framework/wheels").install Dir["*"]`). Both Linux nfpm
configs now pin `src` at `./build/framework/wheels/` so the contents
flatten into `/opt/wheels/module/vendor/wheels/` as intended.

The published 4.0.1 .deb / .rpm artifacts ship the broken layout (1
.deb download, 0 .rpm at time of fix). A re-released 4.0.2 will be
needed to deliver the fix to users — the change here is to the build
config only, not to any framework or CLI code.

Tests: `vendor/wheels/tests/specs/cli/LinuxPackageStagingSpec.cfc`
gains a per-channel `it()` that asserts `src: ./build/framework/wheels/`
+ `dst: /opt/wheels/module/vendor/wheels/` are paired in each nfpm
yaml. Structural assertion follows the existing #2700 pattern (the
file already pins four other packaging invariants the same way).

Note on local verification: the structural spec was sanity-checked via
equivalent grep / perl POSIX patterns over the YAMLs (positive match
for the fixed form, zero matches for the buggy form). Running the
spec through the CFML runner locally was blocked by a port-8081
collision with two stale wheels server processes from prior dev
sessions — CI compat-matrix will run the spec across every engine ×
DB on this PR.

Closes #2773

Signed-off-by: Peter Amiri <peter@alurium.com>

* test(ci): add negative guard for buggy framework src in nfpm yamls

Reviewer A on PR #2776 (wheels-bot) flagged that the new framework-src
spec only asserted the *fixed* form was present, without a matching
`toBeFalse` for the buggy `./build/framework/` form. The file's existing
wrapper-routing checks (lines 60-68 / 81-106) already use a dual-
assertion pattern; the new spec was a one-sided outlier.

Add the negative guard: if a future copy-paste leaves both the bare
`src: ./build/framework/` and the fixed `src: ./build/framework/wheels/`
in the same yaml, nfpm would stage both — the bare one reintroduces
the double-nesting and breaks every fresh Linux install. The spec now
fails loudly in that scenario instead of silently passing on the
presence of the fixed entry.

The two regexes are mutually exclusive by construction: the positive
matches `framework/wheels/` followed by whitespace + `dst:`; the
negative matches `framework/` followed *immediately* by whitespace +
`dst:`. Since `wheels` isn't whitespace, `[[:space:]]+` can't bridge
across it, so the negative regex cannot false-positive on the fixed
form. Confirmed via perl POSIX equivalent against both nfpm yamls
plus a synthetic buggy fixture.

Also adds an inline comment to the positive assertion documenting why
`[[:space:]]+` works across the YAML line break (POSIX `[[:space:]]`
resolves to Java's `\s` in both Lucee and Adobe CF, which includes
`\n`) — addresses Reviewer A's Nit 2 observation that the cross-line
match hadn't been locally verified.

Signed-off-by: Peter Amiri <peter@alurium.com>

---------

Signed-off-by: Peter Amiri <peter@alurium.com>

* docs(web/guides): correct Linux bleeding-edge install URLs to wheels-be_* (#2777)

* docs(web/guides): correct Linux bleeding-edge install URLs to wheels-be_*

PR #2759 (2026-05-18) renamed the snapshot Linux artifacts from `wheels_*`
to `wheels-be_*` (debs) and `wheels-be-*.x86_64.rpm` (rpms) so the package
name itself differentiates the channel. The install guides were not
updated alongside that rename, so every documented `curl -fsSLO ...`
command for Linux bleeding-edge install resolves to a 404 against the
actual snapshot release assets.

Verified against v4.0.2-snapshot.1923 (published 2026-05-20):

  Guide says:    .../wheels_4.0.2.snapshot.1923_amd64.deb   → 404
  Actual asset:  .../wheels-be_4.0.2.snapshot.1923_amd64.deb

Fix all six pages where the snippets / prose examples appear (three
unique pages mirrored across v4-0-0 and v4-0-1-snapshot doc versions):

  start-here/installing.mdx                 — "Want bleeding-edge?" aside
  start-here/release-channels.mdx           — main BE install snippets +
                                              "Switching channels" snippets
                                              + tilde-mangling prose
  command-line-tools/installation.mdx       — bleeding-edge install snippets

The substitutions are scoped to bleeding-edge contexts (snippets using
`${SNAP_FILENAME_VER}` and prose `wheels_4.0.0.snapshot.*` filename
examples). Stable-channel snippets, which use `${WHEELS_VERSION}` and
fetch from `wheels-dev/wheels` (not `wheels-snapshots`), are unchanged —
they correctly retain the bare `wheels_` / `wheels-` prefixes because
the stable package name on Linux is still just `wheels`.

Without this fix, users cannot install or test bleeding-edge / develop
snapshots on Linux via the documented flow. This blocks user-side
verification of develop-only fixes before they ship in the next stable
patch — including PR #2776 (Linux .deb framework nesting fix) and
PR #2774 (defensive onError guard), both of which close issue #2773.

Signed-off-by: Peter Amiri <peter@alurium.com>

* docs(web/guides): fix release-channels.mdx — missed BE Tab URLs + Linux switching semantics

Round-1 reviewer findings on PR #2777:

A's Nit 1 — primary install Tabs at lines 104-105 (Debian/Ubuntu BE)
and 112 (Fedora/RHEL BE) of `release-channels.mdx` still resolved to
404. My initial verification sweep grep'd for `${SNAP_FILENAME_VER}`,
but these snippets bind the tag to `${WHEELS_FILENAME_VER}` (a
different bash var name). The fix is the same — point at the
`wheels-be_` / `wheels-be-` artifacts.

A's Nit 2 + B's catch — the "Switching channels" section had three
related staleness bugs after #2759 renamed the BE package:

  1. Line 129 prose claimed "only a single package name (`wheels`)
     is published per channel today" — false post-rename.

  2. Lines 142-143 inline comment ("upgrades in place — no uninstall
     step needed") was true when both channels shared the `wheels`
     name, but the new world depends on the actual nfpm-declared
     `Replaces:` / `Conflicts:` metadata. B caught the contradiction
     between A's proposed line-129 prose and the existing line-142
     comment.

  3. Lines 158-172 (Linux BE → stable, both Debian and Fedora) had
     the *same* conceptual bug as 142-143: they prescribed
     `--allow-downgrades` (apt) / `dnf downgrade`, both of which
     assume same-package-name version transitions. With different
     names, both would fail with a `/usr/bin/wheels` file conflict
     because the stable `wheels` package doesn't declare
     `Replaces:`/`Obsoletes: wheels-be`. Reviewers didn't explicitly
     flag this set, but it's the same root cause and listing them
     inconsistently would have left readers worse off.

Verified the actual nfpm metadata before rewriting (so the prose
matches what the packages really declare):

  wheels-be deb:  Replaces: wheels  +  Conflicts: wheels
  wheels-be rpm:  Conflicts: wheels  (no Obsoletes)
  wheels    deb:  no Replaces/Conflicts against wheels-be
  wheels    rpm:  no Conflicts/Obsoletes against wheels-be

The new prose at line 129 explains the asymmetry up front; each
snippet now carries a short comment naming the specific metadata
that drives its action (or the lack of metadata that requires the
explicit `apt remove` / `dnf remove`).

Stable-channel snippets and stable install Tabs are unchanged.

Signed-off-by: Peter Amiri <peter@alurium.com>

* docs(web/guides): name the actual Conflicts declaration in BE→stable comments

Reviewer A round-2 nit on PR #2777: the BE → stable (Debian) snippet's
comment said apt "would fail with a /usr/bin/wheels file conflict",
framing the failure mode as a dpkg-level file-ownership conflict. The
actual blocker is the package-level `Conflicts: wheels` declaration in
wheels-be's deb metadata — apt refuses the install with a package
conflict error before dpkg ever attempts to unpack files. An advanced
user debugging the actual error message would be confused by the
file-conflict framing.

Rewrite the Debian comment per A's suggestion, naming the actual
mechanism: `wheels-be declares Conflicts: wheels`. Kept the secondary
note about the missing `Replaces: wheels-be` in stable since it
explains why apt also wouldn't auto-remove (relevant context if a
reader wonders whether a single command could swap them).

Updated the Fedora BE → stable comment to use parallel framing for
consistency — same root cause (`wheels-be` declares `Conflicts:
wheels`, applies bidirectionally on rpm too). Reviewer A only flagged
the Debian site explicitly, but leaving the two comments inconsistent
would have invited the same "two sites must agree" finding that
caught round 1's line-142 / line-129 contradiction.

Signed-off-by: Peter Amiri <peter@alurium.com>

---------

Signed-off-by: Peter Amiri <peter@alurium.com>

* fix(test): BrowserTest reports unwired this.browser with browserDescribe() hint (#2782)

* fix(test): BrowserTest reports unwired this.browser with browserDescribe() hint

Plain describe() blocks inside BrowserTest subclasses left this.browser
as an empty string, so the first DSL call surfaced as
"function [visitUrl] does not exist in the String" — a misleading error
that hits every newcomer on iteration 1. Install an UnwiredBrowserGuard
sentinel at this.browser before browserDescribe() wires a real
BrowserClient (and after $endBrowserContext tears it down) so any method
call throws Wheels.BrowserTest.NotWired with a message naming
browserDescribe() as the fix.

Fixes #2778

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* docs(web/guides): note Wheels.BrowserTest.NotWired when describe() used instead of browserDescribe()

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

---------

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* chore: rename Phase 2 bucket repos to apt-wheels / yum-wheels for naming consistency (#2788)

Phase 2 Linux native-repo templates and dispatch wiring referenced
`wheels-dev/apt-wheels-dev` and `wheels-dev/yum-wheels-dev`. The `-dev`
suffix appeared to mirror the DNS form (`apt.wheels.dev`
→ `apt-wheels-dev`) but reads as a redundant org echo inside the
`wheels-dev` org and breaks the established `<package-manager>-wheels`
naming used by the other sister repos (`homebrew-wheels`,
`scoop-wheels`, `chocolatey-wheels`).

Rename everywhere to drop the `-dev` suffix:

- wheels-dev/apt-wheels-dev → wheels-dev/apt-wheels
- wheels-dev/yum-wheels-dev → wheels-dev/yum-wheels

The actual bucket repos were just created under the new names today
(2026-05-21 ~20:15 UTC), so this PR brings the templates / docs /
release-workflow dispatch in sync with the on-GitHub reality before
the first end-to-end dispatch fires. No live infrastructure references
the old names yet — Cloudflare Pages, DNS, and the bucket-side CI
secrets all post-date this rename.

Mechanical substitution across 9 files (27 references). Stable `wheels`
package name (the bare `wheels` in nfpm configs and `apt install
wheels` snippets) is untouched — only the org-namespaced repo names
change.

Signed-off-by: Peter Amiri <peter@alurium.com>

* fix(test): resolve BrowserTest base URL through layered lookup at instance time (#2783)

* fix(test): resolve BrowserTest base URL through layered lookup at instance time

Specs running against a non-default port (Titan on 60050, scaffolds on
60080) previously had to compare getBaseUrl() against a sentinel string
and override it manually because $resolveBaseUrl() returned
http://localhost:8080 unconditionally and the only escape hatch
(WHEELS_BROWSER_TEST_BASE_URL) is cached by the JVM at process start.

$resolveBaseUrl() now consults, in order: this.baseUrl per-spec override,
get("browserTestBaseUrl") Wheels setting, -Dwheels.browserTest.baseUrl
JVM property, WHEELS_BROWSER_TEST_BASE_URL env, $detectBaseUrlFromCgi()
auto-detect (the test runner reaches the suite over HTTP, so cgi already
names the right host:port), then the localhost:8080 default. The CGI
auto-detect skips when port==8080 so existing default-port runs are
unchanged.

Fixes #2779

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* docs(web/guides): document BrowserTest layered base-URL resolution (#2779)

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* fix(test): address Reviewer A/B consensus findings (round 1)

- Strip canonical ports (http:80, https:443) in $detectBaseUrlFromCgi to
  match URL conventions; update the https:443 spec expectation and add a
  dedicated http:80 case (vendor/wheels/wheelstest/BrowserTest.cfc:297-299,
  vendor/wheels/tests/specs/wheelstest/BrowserTestBaseUrlResolutionSpec.cfc:51-61).
- Document why the "falls back through layers" assertion is intentionally
  weak — JVM env vars are read-only from CFML and the Wheels get() setting
  needs a live framework context, so layer isolation isn't fully testable
  at that level (vendor/wheels/tests/specs/wheelstest/BrowserTestBaseUrlResolutionSpec.cfc:28-43).
- Update browser-test guides (v4-0-0 + v4-0-1-snapshot L319) to recommend
  setting this.baseUrl in the component pseudo-constructor instead of
  beforeAll — super.beforeAll() calls $resolveBaseUrl() before a
  beforeAll-override can take effect, silently inheriting layer 2-6 results.
- Mirror the same ordering note in .ai/wheels/testing/browser-testing.md.

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

---------

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Signed-off-by: Peter Amiri <peter@alurium.com>
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Peter Amiri <peter@alurium.com>

* fix(cli): make `wheels packages install` a real alias for `add` in dispatch (#2786)

* fix(cli): make `wheels packages install` a real alias for `add` in dispatch

The `case "install":` branch in `Module.cfc::packages()` previously printed
a warning to stdout and returned an empty string instead of installing
anything. That was wrong for every caller path that actually reaches
module dispatch — the stdio MCP server, scripted in-process clients, and
the spec suite — because `PackagesMainCli.install()` itself has been a
transparent alias for `add()` since #2729. The dispatch layer was the
only place where the alias broke.

The shell-facing `wheels packages install <name>` is still intercepted
by LuCLI's built-in extension installer upstream of module dispatch and
remains broken on that path (documented in the module-owned `--help`
text). This change only fixes the paths that LuCLI does NOT intercept.

Both verbs now share a single fall-through case body so validation,
error shape, and install behavior cannot drift apart again.

Fixes #2785

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* docs(web/guides): clarify install-as-alias behavior in packages CLI section

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* fix(cli): address Reviewer A/B consensus findings (round 1)

- PackagesCommandSpec: add `expect(installResult.type).toBe(addResult.type)`
  after the existing `.notToBe("")` assertion so the equivalence claim in
  the surrounding comment is actually enforced. A regression where
  `install` throws at argument validation (before the registry call)
  would have satisfied `.notToBe("")` but diverged from `add`'s shape;
  the new assertion pins it.
- CHANGELOG: terminal period on the new `[Unreleased] / ### Fixed`
  entry for consistency with surrounding entries.

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* fix(web/guides): address Reviewer A/B consensus findings (round 2)

- web/sites/guides/src/content/docs/v4-0-0/digging-deeper/packages.mdx
  (line 320) — scope the install-as-alias note to v4.0.1+. The previous
  wording asserted the alias was transparent on MCP / in-process paths,
  but that's only true after this PR (which targets v4.0.1). On v4.0.0
  itself, MCP also no-ops; the versioned v4.0.0 docs now say so
  explicitly and point readers to the v4.0.1 snapshot for the alias
  behavior. The v4-0-1-snapshot/ copy was already correct and is
  untouched.

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

---------

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Signed-off-by: Peter Amiri <peter@alurium.com>
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Peter Amiri <peter@alurium.com>

* fix(model): quote column identifiers in SELECT clause builder (#2787)

* fix(model): quote column identifiers in SELECT clause builder

The WHERE and ORDER BY clause builders already routed column names
through the adapter's $quoteIdentifier, but $createSQLFieldList — the
SELECT/GROUP BY engine — appended the column part raw. Models backed
by tables with reserved-word column names (e.g. `key`, `order`,
`group`) blew up on `findAll`/`findOne`/dynamic finders with cryptic
SQL syntax errors as soon as the SELECT list mentioned the column.

Also strips quote chars from the property extracted by the
duplicate-column rename loop so the alias replacement still matches
the unquoted ` AS <alias>` form, and updates the empty-pagination
columnList extraction in read.cfc to strip identifier quotes before
stripping the table prefix.

Fixes #2784

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* docs(web/guides): note reserved-word column support via property alias in models guide

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* fix(model): address Reviewer A/B consensus findings (round 1)

- Condense 4-line block comments at vendor/wheels/model/read.cfc:217
  and vendor/wheels/model/sql.cfc:634 to single-line comments
  (CLAUDE.md: "Never write multi-paragraph docstrings or multi-line
  comment blocks — one short line max").
- Stop using $quoteColumn() for the table-name argument in
  vendor/wheels/tests/specs/model/reservedColumnQuotingSpec.cfc;
  switch to the model's public $quotedTableName() helper so the spec
  names match what each helper actually quotes.
- Add a zero-row paginated findAll spec to
  reservedColumnQuotingSpec.cfc that exercises the QueryNew branch in
  vendor/wheels/model/read.cfc:225 with an aliased column, covering
  the path the original spec did not reach.
- Mention ORDER BY alongside SELECT and GROUP BY in
  web/sites/guides/src/content/docs/v4-0-1-snapshot/basics/models-and-the-orm.mdx
  so readers do not infer ORDER BY is unsafe with reserved-word
  columns (ORDER BY already routes through $quoteIdentifier).

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* fix(model): address Reviewer A/B consensus findings (round 2)

Condense the remaining multi-line comment blocks in reservedColumnQuotingSpec.cfc
to single lines per CLAUDE.md ("Never write multi-paragraph docstrings or
multi-line comment blocks — one short line max"):

- vendor/wheels/tests/specs/model/reservedColumnQuotingSpec.cfc:10 — 3-line
  block about City's id -> countyid alias condensed.
- vendor/wheels/tests/specs/model/reservedColumnQuotingSpec.cfc:18 — 3-line
  block about Author.firstName (property == column) condensed.
- vendor/wheels/tests/specs/model/reservedColumnQuotingSpec.cfc:40 — 6-line
  block added in round 1 inside the zero-row pagination it() condensed to
  the single-line form Reviewer A supplied.

The line-30 GROUP BY comment was already single-line; A's "30-32" citation
was off-by-one for that one. No production code changed; pure comment-style
fix. Test totals unchanged at 4 pass / 0 fail in the spec; full model suite
remains 839 pass / 0 fail / 0 error / 11 skipped across 35 bundles.

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

---------

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Signed-off-by: Peter Amiri <peter@alurium.com>
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Peter Amiri <peter@alurium.com>

* fix(test): auto-bind include-injected globals into WheelsTest spec scope (#2793)

* fix(test): auto-bind include-injected globals into WheelsTest spec scope

`WheelsTest`'s pseudo-constructor used `getMetaData(application.wo).functions`
to discover which Wheels globals to copy into a spec's `variables`/`this`
scope. That metadata enumerates only methods declared on the CFC body and
silently skips symbols merged in via `cfinclude` — which is how
`vendor/wheels/Global.cfc` pulls user helpers from `app/global/functions.cfm`.
Apps with custom helpers (`can()`, `hasRole()`, etc.) had to manually rebind
each one in `beforeAll()`.

The loop now iterates `application.wo` as a struct and binds every UDF
detected by `isCustomFunction()`, while preserving the existing
public-only filter for metadata-declared methods and the don't-clobber
guard for scope members the spec (or its base class) already provides.

Fixes #2790

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* fix(test): address Reviewer A/B consensus findings (round 1)

- Promote include-injected UDFs from `variables` to `this` in
  `vendor/wheels/Global.cfc` after `include "/app/global/functions.cfm"`,
  so the auto-bind loop in `vendor/wheels/WheelsTest.cfc` discovers them
  uniformly across Lucee, Adobe CF, and BoxLang. Lucee's struct-iteration
  over a CFC instance surfaces both `this` and `variables` scopes, but
  Adobe CF only reliably exposes `this`-scope members — without the
  promotion, the original bug (#2790) would silently persist on Adobe CF
  even with the new iteration path in WheelsTest.cfc.

- Fix the misleading header comment in
  `vendor/wheels/tests/specs/wheelstest/WheelsTestAutoBindIncludesSpec.cfc`.
  Bracket-notation assignment from outside writes to `this` scope, not
  `variables` — so the probe simulates the post-promotion shape, not the
  raw include shape. Comment now spells this out explicitly.

- Add a new `it` case that asserts the probe key is enumerated by
  `for (key in application.wo)`. Guards the iteration mechanism the
  auto-bind loop depends on, so failures on any engine where struct-
  iteration is narrower than expected would fail this spec rather than
  silently pass-but-not-test downstream.

Addresses Reviewer A's cross-engine concern (Adobe CF struct-iteration
contract) and Reviewer B's joint recommendation option (b): promote
include-injected helpers to `this` so the iteration path is uniform.
The accompanying spec correction handles A's "spec injects via wrong
scope" finding and B's "misleading header comment" note.

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* fix(test): seed `local` scope before pseudo-constructor for-iterator

The promotion loop added in round 1 of the consensus fixup crashed
Lucee 7 with `variable [local] doesn't exist` at Global.cfc:3861 —
the test runner couldn't even reach a spec before bailing out.

In a CFC pseudo-constructor (component body, not inside a function),
the `local` scope is not auto-created. Direct assignment to
`local.X = ...` will seed it, but `for (local.X in Y)` tries to read
`local` first as the iterator's target parent and fails. WheelsTest.cfc
gets away with the same loop shape only because it does
`local.metaIndex = {}` earlier in its own pseudo-constructor; Global.cfc
had no such seeding line.

Add the minimum seeding statement (`local.varKey = "";`) directly above
the loop and document the cross-engine reason inline. The loop's
filter logic is unchanged.

The original review couldn't catch this — the round-1 address-review
sandbox lacked a working test runner so the fix went out unverified.

Signed-off-by: Peter Amiri <peter@alurium.com>

---------

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Signed-off-by: Peter Amiri <peter@alurium.com>
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Peter Amiri <peter@alurium.com>

* fix(mapper): reject redundant namespace prefix in to= and controller= (#2794)

* fix(mapper): reject redundant namespace prefix in to= and controller=

Inside `.namespace("foo")` (or equivalent `.scope()` / `.package()`),
writing `to="foo/dashboard##index"` instead of `to="dashboard##index"`
silently produced a `foo.foo/dashboard` controller path that downstream
got flattened to a `Foodashboard`-style class lookup with an opaque
`Wheels.ViewNotFound` error — leaving users to chase the symptom rather
than the route definition.

`$match()` now detects when the parsed controller starts with the scope's
package converted to slash form and throws `Wheels.MapperArgumentInvalid`
at registration time. The error names the namespace and the offending
value and points at the correct shorter form.

Fixes #2791

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* fix(mapper): address Reviewer A/B consensus findings (round 1)

- Snapshot `local.fromTo` / `local.originalTo` before the `to=` parse
  block so the error detail can distinguish `to=` vs direct `controller=`
  callers (Reviewer A nit).
- Add `Len(arguments.package) > 0` to the guard's outer condition so an
  empty package does not yield `prefix = "/"` and spuriously reject
  controllers whose path starts with a slash (Reviewer A response,
  Reviewer B round-1 missed-issue).
- Collapse multi-line block comments above the guard in `matching.cfc`
  and above the new `it()` group in `MatchingSpec.cfc` to one-liners
  to comply with CLAUDE.md style (both reviewers).
- Add a spec asserting `$match()` with `package = ""` and a controller
  starting with `/` is not falsely rejected.

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* fix(mapper): address Reviewer A/B consensus findings (round 2)

- vendor/wheels/mapper/matching.cfc:328 — change local.hh = "##" to
  local.hh = "####" so the error-suggestion detail renders as
  to="dashboard##index" (source-correct CFML), not to="dashboard#index"
  (Reviewer A finding, Reviewer B verified).
- vendor/wheels/tests/specs/mapper/MatchingSpec.cfc:241–242 — collapse
  the 2-line comment inside the "Allows controllers..." spec body to a
  single line per CLAUDE.md "one short line max" rule (both reviewers).

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

---------

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Signed-off-by: Peter Amiri <peter@alurium.com>
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Peter Amiri <peter@alurium.com>

* fix(events): re-include app/global/*.cfm on bare ?reload=true when files change (#2795)

* fix(events): re-include app/global/*.cfm on bare ?reload=true when files change

Adding a helper to `app/global/functions.cfm` (or anything it `<cfinclude>`s)
used to require the password-gated `?reload=true&password=...` path. Bare
`?reload=true` re-ran config and routes but left `application.wo` (the
`Global.cfc` instance) intact, so the symbols merged into its variables scope
at construction time stayed frozen — the page rendered without error and the
new helper was silently undefined.

The fix follows the Rails/Phoenix per-request mtime-check pattern recommended
by the research comment: snapshot `app/global/*.cfm` mtimes on application
start, and on bare `?reload=true` in development re-evaluate the include if
any tracked file has been added, removed, or touched. The password-gated
`applicationStop()` path still does a full re-init unchanged — this just
makes the muscle-memory path actually work.

Three new helpers on `wheels.Global`:

- `$snapshotGlobalIncludes(directory)` — struct of `path → dateLastModified`
- `$globalIncludesChanged(snapshot, directory)` — diff against current state
- `$reincludeGlobals(file)` — re-evaluate the include against the live
  Global instance

New setting `reloadOnGlobalChange` defaults to `true` in development and
`false` everywhere else; opt out with `set(reloadOnGlobalChange=false)`.

Fixes #2792

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* docs(web/guides): document reloadOnGlobalChange setting and bare reload behavior

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* fix(events): address Reviewer A/B consensus findings (round 1)

- Replace `DirectoryCreate(baseDir, true)` with `java.io.File.mkdirs()`
  in `reloadGlobalsSpec` — the createPath flag is Lucee-only and the
  call lives in beforeEach, so every spec in the group fails on Adobe CI.
- Assert `IsDefined("application.wo.fxReinclude")` after each
  `$reincludeGlobals` call so the contract (re-included helpers must
  remain callable on application.wo) is guarded against silent no-ops.
- Lift include-declared functions from local/variables onto this in
  `$reincludeGlobals` so the contract holds across engines: include
  inside a method body would otherwise leave declarations in scopes
  that aren't reachable via `application.wo.helper()`.
- Wrap the bare ?reload=true re-include in a double-checked
  `lock name="wheels_reload_globals"` to eliminate the race between
  two concurrent ?reload=true hits.
- Document the development-only environment guard as intentional so a
  future maintainer doesn't try to enable `reloadOnGlobalChange` in
  staging and debug a silent no-op.
- Add docblocks to `$globalIncludesChanged` and `$reincludeGlobals` so
  all three new global-includes helpers carry consistent documentation.

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* fix(events): address Reviewer A/B consensus findings (round 2)

- vendor/wheels/Global.cfc:$reincludeGlobals — drop the
  !ArrayFind(beforeVars, key) snapshot-diff guard from the second loop.
  On Adobe CF the include updates variables[key] in place across calls,
  so the guard silently skipped re-binding the updated function onto
  `this` on the second ?reload=true. Re-lifting is idempotent and the
  path is development-only.
- vendor/wheels/tests/specs/global/reloadGlobalsSpec.cfc:88 — replace
  the second IsDefined assertion with a return-value check so a stale
  Adobe-CF binding cannot slip past CI (expect(...fxReinclude()).toBe("second")).

Local verification on Lucee 7 + SQLite after server reload:
core suite 3698 pass / 0 fail / 0 error; global suite 113 pass / 0 fail
/ 0 error (the 7 reloadGlobals specs all green).

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* fix(test): address Reviewer A/B consensus findings (round 3)

- vendor/wheels/tests/specs/global/reloadGlobalsSpec.cfc — hoist
  `g` and `baseDir` out of the `describe()` arrow-function callback
  and into `run()` as a shared `ctx` struct, then update every
  beforeEach / afterEach / it closure to reference `ctx.g` and
  `ctx.baseDir`. On Adobe CF 2023/2025 CFML closures cannot reach
  an enclosing function's `local` scope (CLAUDE.md cross-engine
  invariant ##3); the prior layout silently relied on Lucee 7's
  lexical capture and would have thrown "variable baseDir is
  undefined" inside every nested closure on Adobe CI, crashing all
  seven specs.

Local verification on Lucee 7 + SQLite (existing test server,
forced ?reload=true&password=wheels first):
  global directory (wheels.tests.specs.global): 113 pass / 0 fail / 0 error
  full core suite:                              3698 pass / 0 fail / 0 error

Lucee was already green before this fix because it captures the
enclosing arrow-function `local`; the change is to make the Adobe
CI legs match. Adobe verification is left to CI as the local
harness cannot run Adobe.

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* fix: address Reviewer A/B consensus findings (round 4)

- web/sites/guides/src/content/docs/v4-0-0/command-line-tools/wheels-commands/dev-server.mdx — tighten the bare `?reload=true` note so it mentions `app/global/functions.cfm` (and any files it `<cfinclude>`s) instead of the looser `app/global/*.cfm`. `$globalIncludesChanged` watches every `*.cfm` under `app/global/` but `$reincludeGlobals` re-evaluates only `functions.cfm` and the files it transitively includes; the previous wording implied a developer could drop a standalone helper file directly and have it bind, which isn't true. Matches the more accurate wording already in `core-concepts/environments-and-configuration.mdx`.
- web/sites/guides/src/content/docs/v4-0-1-snapshot/command-line-tools/wheels-commands/dev-server.mdx — same wording change for the v4-0-1 snapshot copy, keeping the two doc trees in sync.
- vendor/wheels/tests/specs/global/reloadGlobalsSpec.cfc — drop the dead `mappingPath` local variable; it was only used to compute `absPath`, and the `$reincludeGlobals` calls inside the `notThrows` closures already repeat the path literally (closures can't reach the enclosing `local.mappingPath` on Adobe CF anyway). Inlines the string into `ExpandPath()` directly.

Local verification on Lucee 7 + SQLite:
  global directory (wheels.tests.specs.global): 113 pass / 0 fail / 0 error
  reloadGlobalsSpec only:                       7 pass / 0 fail / 0 error

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* fix(events): address Reviewer A/B consensus findings (round 5)

- vendor/wheels/tests/specs/global/reloadGlobalsSpec.cfc — add a test
  for the DateCompare != 0 branch in $globalIncludesChanged, the
  "developer edited an existing helper" path the PR is designed to
  serve. Uses the backdated-snapshot approach from Reviewer A's
  response (DateAdd seconds -60 on the snapshot entry) rather than
  Sleep(1100), so the test is deterministic across filesystems with
  different mtime granularities.
- vendor/wheels/events/EventMethods.cfc — append application name to
  the wheels_reload_globals lock so concurrent ?reload=true hits from
  different apps on a shared Adobe CF server no longer serialize on a
  single global lock. Development-only and uncommon in practice, but
  the fix is a one-liner.

Signed-off-by: Peter Amiri <peter@alurium.com>

* docs: tighten CHANGELOG entry to distinguish detection from re-evaluation scope

- CHANGELOG.md — round-5 Reviewer A nit. Opening clause said "re-includes
  app/global/*.cfm" which overstates the re-evaluation scope: detection
  is broad (every *.cfm under app/global/) but $reincludeGlobals only
  re-evaluates functions.cfm and the files it transitively <cfinclude>s.
  Rewording matches the round-4 dev-server.mdx tightening.

Signed-off-by: Peter Amiri <peter@alurium.com>

---------

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Signed-off-by: Peter Amiri <peter@alurium.com>
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Peter Amiri <peter@alurium.com>

* fix(test): keep test-local.sh from silently dying on missing ~/.lucli/express (#2796)

Under `set -euo pipefail`, `find ~/.wheels/express ~/.lucli/express ...`
exits non-zero whenever any path arg is missing (stderr suppressed via
`2>/dev/null`, but the exit status survives), `pipefail` propagates it
through `head -1`, and the command-substitution assignment trips `set -e`.
The cleanup trap then fires with no server to clean up, so the user sees
"Starting Wheels CLI server on port 8080..." with EXIT=1 and no
`/tmp/wheels-test-server.log` produced — broken for every install since
the lucli→wheels rebrand window closed and `~/.lucli/express/` stopped
being created.

Drop the now-dead `~/.lucli/express` fallback (the rename landed in 3.0
and recent CLI releases extract Lucee Express to `~/.wheels/express/`
only) and add `|| true` for defense in depth so a truly fresh install
(before `wheels start` has ever run) leaves `LUCEE_LIB` empty and the
downstream `[ -n "\$LUCEE_LIB" ]` guard skips the JDBC pre-install
cleanly.

Verified: `bash tools/test-local.sh wheels.tests.specs.wheelstest` now
runs the server, produces `/tmp/wheels-test-server.log`, and passes all
137 specs across 38 suites in ~17s.

Signed-off-by: Peter Amiri <peter@alurium.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* ci: allow-list APPROVED + CHANGES_REQUESTED in Reviewer A guard (#2797)

* fix(ci): skip COMMENTED reviews in Reviewer A guard

The post-submission guard in bot-review-a.yml scans for "bogus" wheels-bot
reviews on the head SHA and dismisses any with a body shorter than 200
chars or missing the canonical `wheels-bot:review-a` marker. GitHub's
dismiss API only accepts APPROVED or CHANGES_REQUESTED reviews; passing a
COMMENTED review id returns HTTP 422 ("Can not dismiss a commented pull
request review") and crashes the step, red-X'ing the Reviewer A check
even when A's real substantive review landed cleanly seconds earlier.

wheels-bot itself occasionally posts placeholder COMMENTED reviews mid-
cycle as it probes the `gh pr review` CLI before issuing the real one
(observed bodies: "placeholder test - ignore", "placeholder2 - updating",
"test with dollar sign: see \$reincludeGlobals function"). Those leak out
as public COMMENTED reviews, which is what the guard is meant to clean
up — but it can't dismiss them via this API, so it has to skip them.

Add `select(.state != "COMMENTED")` to the jq pipeline that selects
actionable reviews. COMMENTED reviews don't gate merging anyway — only
APPROVED and CHANGES_REQUESTED do — so leaving them in PR history is
acceptable noise. The guard now only acts on what it can actually
dismiss.

Observed on PR #2795 commit 0db188a5a5d27cd80b58939df5e0c8dd7464a00b,
job run 26296842347.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: Peter Amiri <peter@alurium.com>

* ci: allow-list APPROVED + CHANGES_REQUESTED in Reviewer A guard

Tighten the previous COMMENTED-state filter to an explicit allow-list:
APPROVED and CHANGES_REQUESTED are the only review states that (a)
GitHub's dismiss API accepts and (b) gate merging. Switching from
"!= DISMISSED && != COMMENTED" to "state IN (APPROVED, CHANGES_REQUESTED)"
also covers PENDING reviews, which return the same HTTP 422 from the
dismiss endpoint if they ever land on a head SHA.

Follow-up to bd76e53de4 per Reviewer A's allow-list suggestion on #2797.
Reviewer B confirmed PENDING is reachable and the closed-set form is
strictly safer than the deny-list. No behavioral change for the
COMMENTED case fixed in bd76e53de4 — that state is still excluded.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: Peter Amiri <peter@alurium.com>

---------

Signed-off-by: Peter Amiri <peter@alurium.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(migrator): handle orphan versions in shared dev databases (#2780) (#2798)

* fix(migrator): handle orphan versions in shared dev databases (#2780)

When wheels_migrator_versions records a version whose migration file is
not in the current checkout (shared dev DB / peer applied a migration
whose file isn't yet in this branch), wheels migrate latest no longer
takes a misleading "down" branch and silently no-ops.

Changes:

* Migrator.$getOrphanVersions() — diffs the tracking table against on-
  disk files and returns versions with no matching file, sorted ascending.

* Migrator.migrateTo() — branches on "orphan-at-top" before the existing
  direction check. When every DB version above target is an orphan: emits
  a warning naming the orphans, then either applies pending local files
  (up branch) or prints a clear "Nothing to do" naming current vs target.
  When SOME above-target versions are legitimate down candidates and
  SOME are orphans, emits the warning but lets the existing down loop
  handle the rest (orphan rows skip naturally because the loop iterates
  files only).

* Migrator.\$buildInfoOutput() — extracted info rendering so it is unit-
  testable without the HTTP dispatcher. Orphan rows render with a [?]
  marker and the literal "********** NO FILE **********" (Rails-style),
  with a footer explaining the cause.

* public/views/cli.cfm info handler — delegates to \$buildInfoOutput().

* New spec OrphanDetectionSpec covers \$getOrphanVersions + the
  directional fix across five scenarios (clean state, single orphan,
  multiple orphans, nothing-to-do path, legitimate down still works).

* New spec MigratorInfoSpec covers \$buildInfoOutput rendering.

* Docs: new guides page at basics/shared-development-databases.mdx
  walks through what an orphan is, three resolution paths, and the
  recommendation to avoid shared dev DBs. AI-side reference at
  .ai/wheels/troubleshooting/shared-dev-databases.md.

Note on local verification: a leaked JVM from another worktree is
holding Tomcat's shutdown port (8081), blocking new wheels server
starts on this machine. Tests are queued for CI to run across the full
engine + DB matrix. Local TDD will run on next machine restart.

Refs #2780

Signed-off-by: Peter Amiri <peter@alurium.com>

* fix(migrator): address Reviewer A/B consensus findings (round 1)

- Reword "Your latest local migration" to "Your target version" in the
  orphan nothing-to-do message. arguments.version is the target, not
  necessarily the latest local file (Migrator.cfc).
- Add mixed-case OrphanDetectionSpec covering orphan + legitimate down
  candidate above target: warning names the orphan, down branch still
  runs, c_o_r_e_dropbears is dropped after rollback.
- Drop docs/superpowers/plans/2026-05-22-orphan-migration-detection.md
  (1053-line agentic plan duplicated in PR body / commit message).
- Add CHANGELOG entry under [Unreleased] Fixed describing the orphan
  detection, three migrateTo branches, and the [?] info row.

Non-blocking items left for follow-up: double getVersionsPreviouslyMigrated()
fetch in migrateTo() (B disputed scope but underlying concern is valid),
and the deferred local test-local.sh migrator run (sandbox lacks the
wheels CLI binary; compat-matrix CI will validate on the new SHA).

Refs #2780, #2798

Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* docs(migrator): fix stale plan reference in shared-dev-databases.md

The 1053-line agentic plan file at
docs/superpowers/plans/2026-05-22-orphan-migration-detection.md was
deleted in commit ddac9690 per Reviewer A/B convergence, but the
AI-side reference doc still pointed to it.

Replaced the dead link with a PR reference and tightened the
follow-up section to describe the work in prose instead of pointing
at plan files that may or may not exist.

Round-2 Reviewer A nit.

Refs #2780, #2798

Signed-off-by: Peter Amiri <peter@alurium.com>

---------

Signed-off-by: Peter Amiri <peter@alurium.com>
Signed-off-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>

* feat(migrator): doctor/forget/pretend reconciliation commands (#2780) (#2799)

* feat(migrator): doctor/forget/pretend reconciliation commands (#2780)

Follow-up to #2798. Adds three new `wheels migrate` subcommands for
manual reconciliation against the tracking table — the Flyway
`validate` / `repair` / `SkipExecutingMigrations` analogues for
Wheels.

* `wheels migrate doctor` — single-command health report. Lists
  orphans, pending local migrations, and applied count. Pure read;
  never mutates. Built on Plan 1's `$getOrphanVersions()`.

* `wheels migrate forget <version> --yes` — removes a single row
  from `wheels_migrator_versions` without running `down()`. Refuses
  if the version has a matching local file (use `migrate down`
  instead) or if the version isn't in the table. Idempotent.

* `wheels migrate pretend <version> --yes` — inserts a row into
  `wheels_migrator_versions` without running `up()`. Refuses if
  already applied or if no local file matches.

Both `forget` and `pretend` require explicit `--yes` to mutate;
without it they print what would happen and exit. The CLI side wires
through a new `runForgetOrPretend()` helper that handles the gating;
the HTTP dispatcher in `cli.cfm` reads the version from
`request.wheels.params.version`.

New spec `MigratorReconciliationSpec.cfc` covers ~12 scenarios
across the three methods: clean state, unhealthy with orphans,
unhealthy with pending, refusal paths, and the no-mutation guarantee
for invalid inputs.

Docs: extended `basics/shared-development-databases.mdx` with the
new commands (Option 2 reworked, Option 2b added, "Comprehensive
diagnostic" section added). AI-side reference and CHANGELOG entry
follow the same shape.

Note on local verification: a leaked JVM from another worktree
continues to hold Tomcat's shutdown port (8081); CI compat-matrix
will validate across the full engine + DB matrix.

Refs #2780, #2798

Signed-off-by: Peter Amiri <peter@alurium.com>

* fix(migrator): address Reviewer A round-1 findings on #2799

- forgetVersion() now delegates to the existing private
  $removeVersionAsMigrated() helper instead of running an inline
  DELETE. The helper wraps the DELETE in the same request.$wheelsDebugSQL
  guard that $setVersionAsMigrated() uses, so forgetVersion() and
  pretendVersion() are now symmetric: both are no-ops in debug-mode
  request contexts instead of silently corrupting the tracking table.

- runForgetOrPretend() now wraps the version argument with
  URLEncodedFormat() when building the reconcile URL. $sanitiseVersion()
  on the server side strips non-digits before SQL use (no SQL injection
  path), but raw URL-special characters (&, =, %) in the CLI argument
  could inject spurious query parameters before the sanitiser ran.

Both items were flagged by Reviewer A on commit b7817459b. No new tests
needed: existing MigratorReconciliationSpec covers the success and
refusal paths for forgetVersion(), and the URL-encoding fix is on the
CLI client side which is not exercised by core unit tests.

Refs #2780, #2799

Signed-off-by: Peter Amiri <peter@alurium.com>

* fix(cli): doctor output prints yellow when migrator is unhealthy

Reviewer A flagged that runMigration("doctor") always printed in green
regardless of the report's healthy flag. Green on an unhealthy result
(orphans or pending migrations present) reads as "everything is fine"
when actually attention is needed.

The fix switches color to yellow when:
  - action == "doctor"
  - response includes a `healthy` key
  - healthy is false

Other actions (latest/up/down/info) stay green on success — they
either succeed or throw, so the binary mapping holds. Only `doctor`
returns a structural "succeeded but unhealthy" state.

Non-blocking per A's COMMENTED verdict, but a real UX improvement.

Refs #2780, #2799

Signed-off-by: Peter Amiri <peter@alurium.com>

* docs: cross-reference doctor/forget/pretend in main migration docs

The cumulative state of #2798 (merged) and #2799 (this PR) added
three new migrate subcommands plus the [?] orphan display in
`migrate info`. PR-scope docs already covered the deep-dive page
at basics/shared-development-databases.mdx, but the main migrations
reference still said "four subcommands". Catching up:

- basics/migrations.mdx now lists seven subcommands and points to
  shared-development-databases for the reconciliation deep dive.
  The `info` description mentions the [?] orphan row format.

- CLAUDE.md's MCP/CLI table row now lists `doctor` under
  wheels_migrate and adds a separate "Migrator reconciliation"
  row for forget/pretend.

- CLAUDE.md's Migrations & Seeding section gains a "Shared Dev
  DB Reconciliation" subsection summarising the new commands and
  pointing at the deep-dive docs.

- CLAUDE.md's Reference Docs section adds the
  .ai/wheels/troubleshooting/shared-dev-databases.md link.

Refs #2780, #2798, #2799

Signed-off-by: Peter Amiri <peter@alurium.com>

* docs: replace stale schema_migrations references with wheels_migrator_versions

Three carryover Rails table-name references in basics/migrations.mdx
(lines 28, 36, 59) predate the c_o_r_e_* → wheels_* rename and don't
match any code in vendor/wheels/, cli/, or app/. Reviewer A flagged
them on PR 2799 round-4 review (f663b5a55) as worth fixing since the
file was already being touched; the surrounding edits in this PR
already use the correct `wheels_migrator_versions` name (line 46).

Other stale references in basics/seeding.mdx and the
v4-0-1-snapshot/ copies are out of scope for this PR; left for a
follow-up cleanup.

Refs #2780, #2799

Signed-off-by: Peter Amiri <peter@alurium.com>

---------

Signed-off-by: Peter Amiri <peter@alurium.com>

* feat(migrator): enrich wheels_migrator_versions with name + applied_at (#2780) (#2800)

* feat(migrator): enrich wheels_migrator_versions with name + applied_at (#2780)

Final follow-up to #2798 + #2799. Adds two nullable columns to the
tracking table so `wheels migrate info` and `wheels migrate doctor`
can show *what* a peer applied and *when* — even for orphan rows
whose migration file isn't in the local checkout.

## Schema change

- `wheels_migrator_versions.name VARCHAR(255) NULL` — migration name
  derived from filename (e.g. `create_users`)
- `wheels_migrator_versions.applied_at TIMESTAMP NULL DEFAULT
  CURRENT_TIMESTAMP` — when the migration was applied. SQLite gets
  TEXT with CFML-side `Now()` injection on insert because SQLite
  can't DEFAULT a column on ADD COLUMN.

Both nullable, additive, backward compatible. Existing rows
(pre-enrichment) stay NULL and display version-only in the info
output. Going-forward-only — no backfill.

## Bootstrap

`Migrator.$ensureTrackingColumns()` probes via `$dbinfo` and ALTERs
the table per-engine when columns are missing. Idempotent (skip
when already present). Per-engine SQL covers MySQL, PostgreSQL,
SQLite, MSSQL, Oracle, H2, and CockroachDB — same pattern as the
existing `renameSystemTables()` machinery at Migrator.cfc:932.

Wrapped by `$maybeEnsureTrackingColumns(appKey)` which caches on
`application[appKey].$trackingColumnsEnsured` so the ALTER runs
once per app process, not on every migrator call. Non-fatal: if
the ALTER fails (locked table, weird permissions), the flag stays
unset and the legacy schema continues to work.

Called from `$getVersionsPreviouslyMigrated()` after both the
existing-table happy path and the bootstrap-creates-table path.

## Population

`$setVersionAsMigrated(version, migrationName)` gains an optional
`migrationName` arg. When non-empty AND the enriched-columns flag
is set, includes `name` (and on SQLite, `applied_at`) in the
INSERT. Other engines rely on the column's CURRENT_TIMESTAMP
default for `applied_at`.

Callers updated to pass the name: both up-loops in `migrateTo()`,
`migrateIndividual()`, and `pretendVersion()` (captures the
migration's name from `getAvailableMigrations()` during the
local-file existence check).

## Display

`$getOrphanVersionsWithMeta()` — new public helper. Returns
`{version, name, appliedAt}` structs for each orphan. Falls back
to bare structs when columns aren't ensured or the SELECT fails.

`$buildInfoOutput()` and `cli.cfm`'s `doctor` case now render
`[?] <version> <name> (applied <timestamp>)` when populated, with
the legacy `[?] <version> ********** NO FILE **********` fallback
for legacy NULL orphans.

`doctor()` adds `orphansWithMeta` to its result struct alongside
the existing `orphans: array of strings` (kept for
backward-compat with `migrateTo()`'s direction logic).

## Docs

- `web/sites/guides/.../basics/shared-development-databases.mdx`:
  updated `info` sample output to show the enriched format + a
  note explaining the legacy fallback.
- `.ai/wheels/troubleshooting/shared-dev-databases.md`: new
  "Schema enrichment" section documenting the helpers and behavior.
- `CLAUDE.md`: updated the `info` format line and added the
  tracking-table schema summary in the Shared Dev DB Reconciliation
  subsection.
- `CHANGELOG.md`: entry under `[Unreleased] Changed`.

## Tests

`SchemaEnrichmentSpec.cfc` covers three scenarios:
- $ensureTrackingColumns adds both columns on first call
- Idempotent re-run (added=[])
- Name column populated for newly applied migrations

Existing specs (migratorSpec, OrphanDetectionSpec, MigratorInfoSpec,
MigratorReconciliationSpec) all preserve backward compat — the new
name column is opt-in (only written when caller passes it), and
the new display logic falls back to legacy rendering for NULL
metadata.

## Known follow-ups (non-blocking, separate PRs)

- Double `$getVersionsPreviouslyMigrated()` fetch carry-over from
  reviewer notes on #2798 and #2799 — still pending. This PR
  doesn't worsen the situation; the cached `$trackingColumnsEnsured`
  flag means `$ensureTrackingColumns` only probes columns once per
  process.

Refs #2780, #2798, #2799

Signed-off-by: Peter Amiri <peter@alurium.com>

* fix(migrator): don't call \$dbinfo inside $setVersionAsMigrated transaction

CI on Lucee 7 + SQLite revealed two correctness bugs in #2800:

1. \$setVersionAsMigrated called \$dbinfo(type="version") to detect
   SQLite-vs-other-engines before deciding whether to include applied_at
   in the INSERT. But \$setVersionAsMigrated runs INSIDE migrateTo's
   open JDBC transaction, and SQLite (and possibly other engines under
   concurrent load) can't service JDBC metadata calls inside an open
   transaction. Result: [SQLITE_ERROR] SQL error or missing database,
   the migration's transaction rolled back, and every test that
   applied a migration with the enriched schema active failed.

   Fix: cache the engine type on application[appKey].\$migratorDbType
   in \$ensureTrackingColumns() (which always runs outside transactions),
   then read it from the cache in \$setVersionAsMigrated(). No more
   \$dbinfo calls during inserts.

2. \$maybeEnsureTrackingColumns set the \$trackingColumnsEnsured cache
   flag whenever \$ensureTrackingColumns() didn't throw — even when
   the column probe failed (e.g. table didn't exist yet) and no
   ALTERs ran. Subsequent \$setVersionAsMigrated calls then saw the
   flag set and tried to INSERT with a `name` column that didn't
   actually exist on the table → SQL error → rolled back transaction.

   Fix: only set the cache flag when BOTH rv.hasName and rv.hasAppliedAt
   are true after \$ensureTrackingColumns() returns. Failures, missing
   tables, or partial-ALTER states leave the flag unset so subsequent
   calls retry.

Together these failures broke six specs across migratorSpec,
OrphanDetectionSpec, and SchemaEnrichmentSpec — all symptoms of the
same two root causes. With the fix in place, \$setVersionAsMigrated
is back to a single $query call with no metadata interrogation, and
the enriched-INSERT path only fires when the schema is genuinely
confirmed.

Refs #2780, #2798, #2799, #2800

Signed-off-by: Peter Amiri <peter@alurium.com>

* fix(migrator): address Reviewer A round-1 findings on #2800

C1 (correctness): The shared-dev-databases guide example showed
"(applied ...)" timestamps on [x] rows, but the code in
$buildInfoOutput only populates appliedAt for orphan rows (the
DB isn't re-queried for applied_at on local-file rows). Aligning
the guide example with what the code outputs — keep the timestamp
display on the [?] orphan row where the schema enrichment actually
shows through, drop it from the [x] rows. Surrounding prose already
correctly scopes the enrichment to orphans.

T1 (test quality): SchemaEnrichmentSpec's "populates the name column"
test used expect(Len(rows.name) > 0).toBeTrue() which collapses to
a boolean before the matcher sees it — on failure the error message
is just "Expected [false] to be [true]" with no hint of the actual
value. Replaced with expect(rows.name).notToBeEmpty() so failures
include the actual name (or absence of one).

T2 (coverage): Added a new "populates applied_at for newly applied
migrations" spec that queries the applied_at value and asserts it
parses as a date. Covers both code paths: the column-DEFAULT
CURRENT_TIMESTAMP that fires on MySQL/Postgres/MSSQL/Oracle/H2 AND
the CFML-side Now() that SQLite needs because it can't DEFAULT a
TIMESTAMP on ADD COLUMN.

T3 (lint): Added a comment block above the describe block
explaining why CockroachDB is skipped — mirrors the existing
pattern in migratorSpec, OrphanDetectionSpec, and MigratorInfoSpec
(numeric-version test fixtures don't run cleanly against CockroachDB;
compat-matrix.yml treats CockroachDB as soft-fail). The guard is
intentional, not vestigial.

Also clearing the new $migratorDbType app-scope cache in the
beforeEach/afterEach alongside the existing $trackingColumnsEnsured
cleanup, so each test starts from a clean state.

A's performance note about $dbinfo in $setVersionAsMigrated is
already addressed in commit bb4bd761b (caches the engine type on
$migratorDbType to avoid the per-insert metadata round-trip). A
was reviewing 695f8300c and hadn't seen that commit yet.

Refs #2780, #2800

Signed-off-by: Peter Amiri <peter@alurium.com>

* docs: correct stale [x] timestamp claim in .ai schema-enrichment ref

Reviewer B's round-1 convergence on #2800 caught a missed-by-A
follow-on of the C1 finding: the .ai/wheels/troubleshooting/
shared-dev-databases.md doc's first display bullet read

  - `[x] <version> <name> (applied <timestamp>)` when populated

but the code only renders the (applied ...) suffix on orphan rows.
The MDX guide example was corrected in fdbbedc35; this commit
brings the .ai-side reference in line and adds a sentence explaining
why $buildInfoOutput doesn't show applied_at for [x] rows (it would
require re-querying the tracking table for every getAvailableMigrations
result, which is a bigger change than this PR is taking on).

Refs #2780, #2800

Signed-off-by: Peter Amiri <peter@alurium.com>

* fix(migrator): populate \$migratorDbType cache before early-return (#2800 C2)

Reviewer A round-2 caught a latent bug in \$ensureTrackingColumns:
the early-return when both enriched columns are already present
fired BEFORE the \$migratorDbType cache was populated. The cache is
on application scope, so it gets cleared on every app restart /
?reload=true. On the second app start onward, the early-return
fired, \$migratorDbType stayed empty, and \$setVersionAsMigrated's
SQLite branch (which writes an explicit applied_at via CFML Now()
becau…
bpamiri added a commit that referenced this pull request May 28, 2026
… guides baseline

Addresses wheels-bot review feedback on #2827.

CHANGELOG: add an [Unreleased] section with a one-liner under ### Changed, matching
the docs-fix precedent set by #2777 / #2801. Restores the [Unreleased] heading
that #2824's promote-to-4.0.2 removed.

Redirects: four additional /v4-0-1-snapshot landings for parity with the GA
v4-0-0-snapshot rename precedent -- first-15-minutes, release-channels,
cfml-engines, command-line-tools/installation. Verified each stub emits
meta-refresh to the matching /v4-0-0/ URL.

Visual baseline: refresh web/tests/visual-baselines/guides.png to reflect the
intended UI changes from the prior commit -- the version switcher now reads
"v4.0 (current)" and the Upgrading sidebar group has a new "Reading the
Changelog" entry. Diff inspected against the CI artifact; the actual.png
shows the expected changes (switcher label + sidebar item).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: Peter Amiri <peter@alurium.com>
bpamiri added a commit that referenced this pull request May 28, 2026
…#2827)

* docs(web): consolidate 4.0 guides/api onto one v4.0 line, drop stale snapshot

The version switcher now labels the 4.0 stable docs "v4.0 (current)" instead of
"v4.0.0" on both guides and api. 4.0.0/4.0.1/4.0.2 share one per-minor docs tree
(v4-0-0), so freezing the label at the GA patch made the live docs look stale.

Removed the vestigial v4-0-1-snapshot guides tree. It was a pre-GA fork that fell
behind v4-0-0 (missing the reorganized deploy command tree; its deploy nav was
empty). Both sites deploy from develop, so in-progress patch docs already live in
v4-0-0 directly -- a separate snapshot tree is only warranted when a different
minor/major (e.g. v4-1-snapshot) is under development.

Salvaged the one page unique to the snapshot, upgrading/changelog.mdx ("Reading
the Changelog"), into v4-0-0 and wired it into the Upgrading sidebar group (it was
an orphan even in the snapshot). Added courtesy redirects /v4-0-1-snapshot/* ->
/v4-0-0/* for the high-traffic landings.

Also dropped now-dangling snapshot references: verify-docs DEFAULT_TARGET, the
docs root version index, STYLE.md, the writing-docs site-layout note, and two
component comment examples.

Verified: guides (432 pages) and api (2739 pages) build clean; the salvaged page
renders at /v4-0-0/upgrading/changelog/; redirect stubs emit meta-refresh to
/v4-0-0/.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: Peter Amiri <peter@alurium.com>

* docs(web): add CHANGELOG entry + 4 extra snapshot redirects + refresh guides baseline

Addresses wheels-bot review feedback on #2827.

CHANGELOG: add an [Unreleased] section with a one-liner under ### Changed, matching
the docs-fix precedent set by #2777 / #2801. Restores the [Unreleased] heading
that #2824's promote-to-4.0.2 removed.

Redirects: four additional /v4-0-1-snapshot landings for parity with the GA
v4-0-0-snapshot rename precedent -- first-15-minutes, release-channels,
cfml-engines, command-line-tools/installation. Verified each stub emits
meta-refresh to the matching /v4-0-0/ URL.

Visual baseline: refresh web/tests/visual-baselines/guides.png to reflect the
intended UI changes from the prior commit -- the version switcher now reads
"v4.0 (current)" and the Upgrading sidebar group has a new "Reading the
Changelog" entry. Diff inspected against the CI artifact; the actual.png
shows the expected changes (switcher label + sidebar item).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: Peter Amiri <peter@alurium.com>

* chore(web): refresh stale blog visual baseline after #2825

The committed web/tests/visual-baselines/blog.png predates #2825 (the 4.0.2
release post), so any PR that doesn't itself touch web/content/blog/posts/
trips Visual regression on the blog canary -- the live blog index now has the
4.0.2 post as the top entry, shifting older posts down by one position.

The workflow's intended develop-side auto-refresh apparently did not land on
the #2825 push (likely the same branch-rule push rejection that bites the
pre-refresh-commit step on PR runs -- see the separate workflow-fix task).
Updating the baseline here unblocks this PR; the underlying workflow gate
fix is out-of-scope.

Diff inspected against the CI artifact -- the change is exactly the new
top-post reflow, no unintended layout shift.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: Peter Amiri <peter@alurium.com>

---------

Signed-off-by: Peter Amiri <peter@alurium.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant