refactor(provider): complete prerequisite A ownership

src-tauri/src/database/dao/provider_write.rs

@@ -190,10 +190,15 @@ impl RenameProvider {
                 "provider target id must be non-empty".to_string(),
             ));
         }
+        let mut row = ProviderRowUpdate::from_input(input)?;
+        // A successful key change always remains DB-only.  The service owns
+        // the corresponding live-file absence check, while the DAO persists
+        // the durable half of that invariant.
+        row.meta.live_config_managed = Some(false);
         Ok(Self {
             source,
             target_id: input.id.clone(),
-            row: ProviderRowUpdate::from_input(input)?,
+            row,
         })
     }
 }
@@ -456,14 +461,17 @@ impl Database {
             .map_err(|error| AppError::Database(error.to_string()))
     }
 
-    pub fn rename_db_only_additive_provider(&self, input: RenameProvider) -> Result<(), AppError> {
+    pub(crate) fn rename_db_only_additive_provider(
+        &self,
+        input: RenameProvider,
+    ) -> Result<(), AppError> {
         let mut conn = lock_conn!(self.conn);
         let tx = conn
             .transaction()
             .map_err(|error| AppError::Database(error.to_string()))?;
         let source_state = tx
             .query_row(
-                "SELECT sort_index, is_current, in_failover_queue, category, created_at
+                "SELECT sort_index, is_current, in_failover_queue, category, created_at, meta
                    FROM providers
                   WHERE id = ?1 AND app_type = ?2",
                 params![input.source.id, input.source.app_type],
@@ -474,6 +482,7 @@ impl Database {
                         row.get::<_, bool>(2)?,
                         row.get::<_, Option<String>>(3)?,
                         row.get::<_, Option<i64>>(4)?,
+                        row.get::<_, String>(5)?,
                     ))
                 },
             )
@@ -490,6 +499,22 @@ impl Database {
                 "OMO/OMO Slim providers cannot be renamed".to_string(),
             ));
         }
+        let source_meta: ProviderMeta = if source_state.5.trim().is_empty() {
+            ProviderMeta::default()
+        } else {
+            serde_json::from_str(&source_state.5).map_err(|error| {
+                AppError::Database(format!(
+                    "invalid meta for provider '{}/{}': {error}",
+                    input.source.app_type, input.source.id
+                ))
+            })?
+        };
+        if source_meta.live_config_managed == Some(true) {
+            return Err(AppError::Conflict(format!(
+                "provider '{}/{}' became live-managed before rename",
+                input.source.app_type, input.source.id
+            )));
+        }
         let target = ProviderKey::new(&input.source.app_type, &input.target_id)?;
         insert_row(
             &tx,