Enum LiveCmd 

pub enum LiveCmd {
    Plan {
        version: Option<String>,
        workspace: Option<PathBuf>,
    },
    Show {
        plan_id: String,
        workspace: Option<PathBuf>,
    },
    Run {
        plan_id: String,
        allow_destructive: bool,
        justify: Option<String>,
        allow_raw_dangerous: bool,
        workspace: Option<PathBuf>,
    },
    Resume {
        plan_id: String,
        allow_destructive: bool,
        justify: Option<String>,
        workspace: Option<PathBuf>,
    },
    Finalize {
        plan_id: String,
        justify: Option<String>,
        workspace: Option<PathBuf>,
    },
    Abandon {
        plan_id: String,
        force: bool,
        workspace: Option<PathBuf>,
    },
    Daemon {
        poll_interval: Duration,
        claim_stale_after: Duration,
        allow_non_localhost: bool,
        workspace: Option<PathBuf>,
    },
}

Operator surface for the live-migration runner. Every subcommand resolves to an ExitCode via dispatch.

Variants

Plan

Generate plan file(s) for pending schema deltas classified ExpandContract. Refuses (exit 2) when the delta is OfflineOnly; reports “no live plan needed” (exit 0) when the delta is fully OnlineSafe and Phase 7’s regular runner can handle it directly.

Fields

version: Option<String>

Optional explicit migration version to materialize.

workspace: Option<PathBuf>

Workspace root override. Defaults to the current working directory.

Show

Show plan-file metadata, runtime state, and active hooks at the current step.

Fields

plan_id: String

HeerId rendered as decimal — same shape the plan file’s filename embeds.

workspace: Option<PathBuf>

Workspace root override.

Run

Drive the plan forward until the next operator checkpoint (validate / cutover / finalize). Returns 0 at every checkpoint so the operator script can branch cleanly.

Fields

plan_id: String

allow_destructive: bool

Allow destructive steps to execute. Without this flag the runner refuses any StepKind::CleanupLegacyState step with exit code 1.

justify: Option<String>

Operator-supplied justification recorded alongside any destructive step. Required when --allow-destructive is set, and required when --allow-raw-dangerous is set.

allow_raw_dangerous: bool

Opt-in to running plans whose source migration was hand-edited (per v3 §8 amendment). Always paired with --justify.

workspace: Option<PathBuf>

Workspace root override.

Resume

Continue after an interruption. Reads backfill_rows_done from the row and resumes at the same step.

Fields

plan_id: String

allow_destructive: bool

Allow destructive steps to execute on resume. Required when the plan contains a DROP / TRUNCATE-class step that the resume would reach. Pairs with --justify.

justify: Option<String>

Operator justification recorded alongside any destructive step. Required when --allow-destructive is set.

workspace: Option<PathBuf>

Workspace root override.

Finalize

Complete cleanup + drop compatibility hooks. Gated on the row being in PlanStatus::Finalizing.

Fields

plan_id: String

justify: Option<String>

Operator justification recorded if any executed step is destructive (e.g. dropping the legacy column).

workspace: Option<PathBuf>

Workspace root override.

Abandon

Mark a plan abandoned. Schema state stays at the last completed step; resuming an abandoned plan is refused. Confirmation required; --force requires DJOGI_ENV to be unset or set to any value other than production.

Fields

plan_id: String

force: bool

Skip the interactive confirmation prompt. Requires DJOGI_ENV != production; refuses otherwise.

workspace: Option<PathBuf>

Workspace root override.

Daemon

Long-running daemon that resumes stale BackfillChunked / ValidateBackfill steps. Triple-gated — refuses on DJOGI_ENV=production, refuses on a non-localhost DATABASE_URL unless --allow-non-localhost is set, and never auto-advances past an operator gate (CutoverReads / CutoverWrites / FinalizeConstraints stay manual via live run / live finalize).

Exits cleanly on SIGTERM / SIGINT; per-plan failures inside the loop are logged and the daemon continues.

Fields

poll_interval: Duration

Interval between candidate-row scans. Accepts humantime single-unit durations: 30s, 5m, 2h, 1d. Default 30s.

claim_stale_after: Duration

A row is treated as stale (and therefore claimable) when its last_progress_at is older than this duration. Accepts the same humantime forms as --poll-interval. Default 10m.

allow_non_localhost: bool

Allow the daemon to drive a non-localhost database. Mirrors the seed gate; the production-environment gate (DJOGI_ENV=production) and production-profile gate (Djogi.toml::profile = "production") still refuse regardless.

workspace: Option<PathBuf>

Workspace root override.

Trait Implementations

impl Clone for LiveCmd

fn clone(&self) -> LiveCmd

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for LiveCmd

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromArgMatches for LiveCmd

fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

fn update_from_arg_matches_mut<'b>( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

impl Subcommand for LiveCmd

fn augment_subcommands<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate Self via FromArgMatches::from_arg_matches_mut

fn augment_subcommands_for_update<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate self via FromArgMatches::update_from_arg_matches_mut

fn has_subcommand(__clap_name: &str) -> bool

Test whether Self can parse a specific subcommand