@12ui/design 0.2.71 → 0.2.73

package/dist/slate-lock.d.ts

@@ -0,0 +1,64 @@
+/**
+ * O_EXCL lock files with guarded, compare-before-unlink stale takeover.
+ *
+ * Three locks share this code: the workspace lock and the approval-store lock
+ * (a holder is stale only when its PID is gone; a live holder is waited on for
+ * a bounded time and never taken over) and the per-op runner lock (a holder is
+ * alive only while its PID is alive AND its mtime, the heartbeat, is fresh).
+ */
+export declare const LOCK_WAIT_MS = 10000;
+export declare const RUNNER_HEARTBEAT_INTERVAL_MS = 5000;
+export declare const RUNNER_ALIVE_WINDOW_MS = 20000;
+export type LockHolder = {
+    pid: number;
+    nonce: string;
+    startedAt: string;
+};
+export declare const processIsAlive: (pid: number) => boolean;
+export declare const parseHolder: (raw: string) => LockHolder | undefined;
+export type StalePolicy = (holder: LockHolder, mtimeMs: number, now: number) => boolean;
+/** Workspace and approval locks: stale only when the holder process is gone. */
+export declare const staleWhenProcessGone: StalePolicy;
+/** Per-op runner lock: alive needs the PID and a fresh heartbeat. */
+export declare const staleWhenHeartbeatLapsed: StalePolicy;
+export type HeldLock = {
+    file: string;
+    holder: LockHolder;
+    release: () => Promise<void>;
+    touch: () => Promise<void>;
+};
+/**
+ * Take a stale lock over, one taker at a time. Takeover is serialised behind an
+ * exclusive guard file (`<lock>.takeover`, created with O_EXCL). Under the
+ * guard the lock is re-read: it is unlinked only if it is still byte-for-byte
+ * the stale holder the caller judged, so a lock that a rival re-created in the
+ * meantime is never touched. The caller then creates the new lock with the
+ * ordinary exclusive create. Returns true when the stale lock was removed,
+ * false when the guard was busy or the lock had already changed (the caller
+ * simply loops and re-observes).
+ */
+export declare const takeOverStale: (file: string, observedRaw: string) => Promise<boolean>;
+export declare const holderState: (file: string, policy: StalePolicy, now?: number) => Promise<{
+    state: "absent";
+} | {
+    state: "live" | "stale";
+    holder: LockHolder | undefined;
+    raw: string;
+    mtimeMs: number;
+}>;
+export declare const acquireLock: (args: {
+    file: string;
+    policy: StalePolicy;
+    /** How long to wait for a live holder; 0 means fail at once. */
+    waitMs?: number;
+    busyMessage?: string;
+}) => Promise<HeldLock>;
+/** In-process queue per lock path, then the file lock: one writer at a time in this process too. */
+export declare const withLock: <T>(args: {
+    file: string;
+    policy?: StalePolicy;
+    waitMs?: number;
+    busyMessage?: string;
+    run: () => Promise<T>;
+}) => Promise<T>;
+//# sourceMappingURL=slate-lock.d.ts.map

package/dist/slate-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-lock.d.ts","sourceRoot":"","sources":["../src/slate-lock.ts"],"names":[],"mappings":"AAMA;;;;;;;GAOG;AAEH,eAAO,MAAM,YAAY,QAAS,CAAC;AACnC,eAAO,MAAM,4BAA4B,OAAQ,CAAC;AAClD,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,MAAM,MAAM,UAAU,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3E,eAAO,MAAM,cAAc,GAAI,KAAK,MAAM,KAAG,OAQ5C,CAAC;AAIF,eAAO,MAAM,WAAW,GAAI,KAAK,MAAM,KAAG,UAAU,GAAG,SAQtD,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;AAExF,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,EAAE,WAAqD,CAAC;AAEzF,qEAAqE;AACrE,eAAO,MAAM,wBAAwB,EAAE,WAEtC,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC;AAiBtH;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa,GAAU,MAAM,MAAM,EAAE,aAAa,MAAM,KAAG,OAAO,CAAC,OAAO,CAgBtF,CAAC;AAYF,eAAO,MAAM,WAAW,GACtB,MAAM,MAAM,EACZ,QAAQ,WAAW,EACnB,YAAgB,KACf,OAAO,CAAC;IAAE,KAAK,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAiBzH,CAAC;AAEF,eAAO,MAAM,WAAW,GAAU,MAAM;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,CAAC;IACpB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,KAAG,OAAO,CAAC,QAAQ,CA2BnB,CAAC;AAIF,oGAAoG;AACpG,eAAO,MAAM,QAAQ,GAAU,CAAC,EAAE,MAAM;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;CACvB,KAAG,OAAO,CAAC,CAAC,CAqBZ,CAAC"}

package/dist/slate-lock.js

@@ -0,0 +1,178 @@
+import { randomUUID } from 'node:crypto';
+import { open, readFile, rm, stat, utimes } from 'node:fs/promises';
+import path from 'node:path';
+import { SlateError } from './slate-errors.js';
+/**
+ * O_EXCL lock files with guarded, compare-before-unlink stale takeover.
+ *
+ * Three locks share this code: the workspace lock and the approval-store lock
+ * (a holder is stale only when its PID is gone; a live holder is waited on for
+ * a bounded time and never taken over) and the per-op runner lock (a holder is
+ * alive only while its PID is alive AND its mtime, the heartbeat, is fresh).
+ */
+export const LOCK_WAIT_MS = 10_000;
+export const RUNNER_HEARTBEAT_INTERVAL_MS = 5_000;
+export const RUNNER_ALIVE_WINDOW_MS = 20_000;
+export const processIsAlive = (pid) => {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        // EPERM means the process exists and belongs to somebody else.
+        return error.code === 'EPERM';
+    }
+};
+const sleep = (milliseconds) => new Promise((resolve) => { setTimeout(resolve, milliseconds); });
+export const parseHolder = (raw) => {
+    try {
+        const parsed = JSON.parse(raw);
+        if (Number.isSafeInteger(parsed.pid) && typeof parsed.nonce === 'string' && typeof parsed.startedAt === 'string') {
+            return { pid: parsed.pid, nonce: parsed.nonce, startedAt: parsed.startedAt };
+        }
+    }
+    catch { /* an unreadable lock is treated as held by someone else */ }
+    return undefined;
+};
+/** Workspace and approval locks: stale only when the holder process is gone. */
+export const staleWhenProcessGone = (holder) => !processIsAlive(holder.pid);
+/** Per-op runner lock: alive needs the PID and a fresh heartbeat. */
+export const staleWhenHeartbeatLapsed = (holder, mtimeMs, now) => (!processIsAlive(holder.pid) || now - mtimeMs > RUNNER_ALIVE_WINDOW_MS);
+const tryCreate = async (file, holder) => {
+    try {
+        const handle = await open(file, 'wx', 0o600);
+        try {
+            await handle.writeFile(`${JSON.stringify(holder)}\n`, 'utf8');
+        }
+        finally {
+            await handle.close();
+        }
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'EEXIST')
+            return false;
+        throw error;
+    }
+};
+/**
+ * Take a stale lock over, one taker at a time. Takeover is serialised behind an
+ * exclusive guard file (`<lock>.takeover`, created with O_EXCL). Under the
+ * guard the lock is re-read: it is unlinked only if it is still byte-for-byte
+ * the stale holder the caller judged, so a lock that a rival re-created in the
+ * meantime is never touched. The caller then creates the new lock with the
+ * ordinary exclusive create. Returns true when the stale lock was removed,
+ * false when the guard was busy or the lock had already changed (the caller
+ * simply loops and re-observes).
+ */
+export const takeOverStale = async (file, observedRaw) => {
+    const guardFile = `${file}.takeover`;
+    const guardHolder = { pid: process.pid, nonce: randomUUID(), startedAt: new Date().toISOString() };
+    if (!(await tryCreate(guardFile, guardHolder))) {
+        await clearDeadGuard(guardFile);
+        return false;
+    }
+    try {
+        const current = await readFile(file, 'utf8').catch(() => undefined);
+        if (current !== observedRaw)
+            return false;
+        await rm(file, { force: true });
+        return true;
+    }
+    finally {
+        const guardNow = await readFile(guardFile, 'utf8').catch(() => '');
+        if (parseHolder(guardNow)?.nonce === guardHolder.nonce)
+            await rm(guardFile, { force: true });
+    }
+};
+/** A guard is held for milliseconds; one whose creator process is gone is cleared. */
+const clearDeadGuard = async (guardFile) => {
+    const raw = await readFile(guardFile, 'utf8').catch(() => undefined);
+    if (raw === undefined)
+        return;
+    const holder = parseHolder(raw);
+    if (holder ? processIsAlive(holder.pid) : (Date.now() - (await stat(guardFile).then((s) => s.mtimeMs, () => Date.now()))) < 2_000)
+        return;
+    const again = await readFile(guardFile, 'utf8').catch(() => undefined);
+    if (again === raw)
+        await rm(guardFile, { force: true });
+};
+export const holderState = async (file, policy, now = Date.now()) => {
+    let raw;
+    let mtimeMs;
+    try {
+        raw = await readFile(file, 'utf8');
+        mtimeMs = (await stat(file)).mtimeMs;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return { state: 'absent' };
+        throw error;
+    }
+    const holder = parseHolder(raw);
+    if (!holder) {
+        // A lock that has no readable holder is only stale once it is old: a
+        // creator may be between open and write.
+        return { state: now - mtimeMs > 2_000 ? 'stale' : 'live', holder, raw, mtimeMs };
+    }
+    return { state: policy(holder, mtimeMs, now) ? 'stale' : 'live', holder, raw, mtimeMs };
+};
+export const acquireLock = async (args) => {
+    const holder = { pid: process.pid, nonce: randomUUID(), startedAt: new Date().toISOString() };
+    const deadline = Date.now() + (args.waitMs ?? LOCK_WAIT_MS);
+    for (;;) {
+        if (await tryCreate(args.file, holder)) {
+            return {
+                file: args.file,
+                holder,
+                touch: async () => { const now = new Date(); await utimes(args.file, now, now); },
+                release: async () => {
+                    // Remove only our own lock: a takeover after a long pause may have replaced it.
+                    const current = await readFile(args.file, 'utf8').catch(() => '');
+                    if (parseHolder(current)?.nonce === holder.nonce)
+                        await rm(args.file, { force: true });
+                },
+            };
+        }
+        const state = await holderState(args.file, args.policy);
+        if (state.state === 'stale') {
+            if (!(await takeOverStale(args.file, state.raw)))
+                await sleep(2 + Math.floor(Math.random() * 6));
+            continue;
+        }
+        if (state.state === 'absent')
+            continue;
+        if (Date.now() >= deadline) {
+            throw new SlateError('workspace_busy', args.busyMessage ?? `Another process holds ${path.basename(args.file)}; try again in a moment.`);
+        }
+        await sleep(25 + Math.floor(Math.random() * 25));
+    }
+};
+const processMutexes = new Map();
+/** In-process queue per lock path, then the file lock: one writer at a time in this process too. */
+export const withLock = async (args) => {
+    const previous = processMutexes.get(args.file) ?? Promise.resolve();
+    const turn = previous.catch(() => undefined).then(async () => {
+        const lock = await acquireLock({
+            file: args.file,
+            policy: args.policy ?? staleWhenProcessGone,
+            ...(args.waitMs === undefined ? {} : { waitMs: args.waitMs }),
+            ...(args.busyMessage ? { busyMessage: args.busyMessage } : {}),
+        });
+        try {
+            return await args.run();
+        }
+        finally {
+            await lock.release();
+        }
+    });
+    processMutexes.set(args.file, turn);
+    try {
+        return await turn;
+    }
+    finally {
+        if (processMutexes.get(args.file) === turn)
+            processMutexes.delete(args.file);
+    }
+};
+//# sourceMappingURL=slate-lock.js.map

package/dist/slate-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-lock.js","sourceRoot":"","sources":["../src/slate-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC;AACnC,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAClD,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAI7C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAW,EAAW,EAAE;IACrD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,+DAA+D;QAC/D,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,KAAK,GAAG,CAAC,YAAoB,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAExH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAW,EAA0B,EAAE;IACjE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QACtD,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACjH,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAa,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QACzF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,2DAA2D,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAIF,gFAAgF;AAChF,MAAM,CAAC,MAAM,oBAAoB,GAAgB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAEzF,qEAAqE;AACrE,MAAM,CAAC,MAAM,wBAAwB,GAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAC7E,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,OAAO,GAAG,sBAAsB,CACtE,CAAC;AAIF,MAAM,SAAS,GAAG,KAAK,EAAE,IAAY,EAAE,MAAkB,EAAoB,EAAE;IAC7E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChE,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,IAAY,EAAE,WAAmB,EAAoB,EAAE;IACzF,MAAM,SAAS,GAAG,GAAG,IAAI,WAAW,CAAC;IACrC,MAAM,WAAW,GAAe,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC/G,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,OAAO,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,KAAK,KAAK,WAAW,CAAC,KAAK;YAAE,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC,CAAC;AAEF,sFAAsF;AACtF,MAAM,cAAc,GAAG,KAAK,EAAE,SAAiB,EAAiB,EAAE;IAChE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACrE,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO;IAC9B,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK;QAAE,OAAO;IAC1I,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACvE,IAAI,KAAK,KAAK,GAAG;QAAE,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC9B,IAAY,EACZ,MAAmB,EACnB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAC0G,EAAE;IAC5H,IAAI,GAAW,CAAC;IAChB,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACnF,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,qEAAqE;QACrE,yCAAyC;QACzC,OAAO,EAAE,KAAK,EAAE,GAAG,GAAG,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1F,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,IAMjC,EAAqB,EAAE;IACtB,MAAM,MAAM,GAAe,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC1G,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC;IAC5D,SAAS,CAAC;QACR,IAAI,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM;gBACN,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;gBACjF,OAAO,EAAE,KAAK,IAAI,EAAE;oBAClB,gFAAgF;oBAChF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;oBAClE,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,MAAM,CAAC,KAAK;wBAAE,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzF,CAAC;aACF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;gBAAE,MAAM,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YACjG,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ;YAAE,SAAS;QACvC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,IAAI,CAAC,WAAW,IAAI,yBAAyB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC1I,CAAC;QACD,MAAM,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,IAAI,GAAG,EAA4B,CAAC;AAE3D,oGAAoG;AACpG,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAAK,IAMjC,EAAc,EAAE;IACf,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACpE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QAC3D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,oBAAoB;YAC3C,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1B,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC,CAAC"}

package/dist/slate-paths.d.ts

@@ -0,0 +1,45 @@
+import type { SlateWorkspace } from './slate-workspace-types.js';
+/**
+ * The one place ids become paths. Nothing read from a workspace record is used
+ * as a path: every file is recomputed from ids that passed their patterns, then
+ * resolved with `realpath` and required to stay inside the workspace root.
+ */
+export declare const inside: (root: string, target: string) => boolean;
+export declare const WORKSPACE_SUBDIRECTORIES: readonly ["ops", "versions", "edits", "inspiration", "calls"];
+export type WorkspaceSubdirectory = typeof WORKSPACE_SUBDIRECTORIES[number];
+/** A real directory inside the root: not a symlink, created 0700 on first use. */
+export declare const ensureRealDirectory: (root: string, name: WorkspaceSubdirectory) => Promise<string>;
+export declare const opLockFile: (root: string, opId: string) => string;
+export declare const opLogFile: (root: string, opId: string) => string;
+export declare const workspaceFile: (root: string) => string;
+export declare const workspaceLockFile: (root: string) => string;
+export declare const ledgerFile: (root: string) => string;
+/** Every image a workspace draws or edits lives at `versions/<versionId>.png`, written once. */
+export declare const versionImageFile: (root: string, versionId: string) => string;
+/** The root run's own option image: `candidates/<A-P>.png` inside the finished draft run. */
+export declare const rootCandidateFile: (root: string, localSlot: string) => string;
+/** The file a version's image lives in, computed only from ids in the record. */
+export declare const versionFilePath: (root: string, workspace: SlateWorkspace, versionId: string) => string;
+/** `edits/<opId>/`: the parent copy and the annotated image an edit was committed with. */
+export declare const editDirectory: (root: string, opId: string) => string;
+/** Create `edits/<opId>/` as a real directory (0700); a link or a file in its place is refused. */
+export declare const ensureEditDirectory: (root: string, opId: string) => Promise<string>;
+export declare const editSourceFile: (root: string, opId: string) => string;
+export declare const editAnnotatedFile: (root: string, opId: string) => string;
+export type ReferenceSize = 'thumb' | 'ref';
+export declare const referenceFile: (root: string, referenceId: string, size: ReferenceSize) => string;
+export type ReadFileResult = {
+    state: 'ok';
+    bytes: Buffer;
+    sha256: string;
+} | {
+    state: 'missing';
+} | {
+    state: 'outside';
+};
+/**
+ * Read one workspace file. A symlink out of the root is refused (`outside`); a
+ * missing file is `missing`. The caller compares the sha256 with the record.
+ */
+export declare const readWorkspaceFile: (root: string, file: string) => Promise<ReadFileResult>;
+//# sourceMappingURL=slate-paths.d.ts.map

package/dist/slate-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-paths.d.ts","sourceRoot":"","sources":["../src/slate-paths.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE;;;;GAIG;AAEH,eAAO,MAAM,MAAM,GAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,KAAG,OAIrD,CAAC;AAEF,eAAO,MAAM,wBAAwB,+DAAgE,CAAC;AACtG,MAAM,MAAM,qBAAqB,GAAG,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC;AAE5E,kFAAkF;AAClF,eAAO,MAAM,mBAAmB,GAAU,MAAM,MAAM,EAAE,MAAM,qBAAqB,KAAG,OAAO,CAAC,MAAM,CAUnG,CAAC;AAEF,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,EAAE,MAAM,MAAM,KAAG,MAGvD,CAAC;AACF,eAAO,MAAM,SAAS,GAAI,MAAM,MAAM,EAAE,MAAM,MAAM,KAAG,MAGtD,CAAC;AACF,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,KAAG,MAA2C,CAAC;AACzF,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,KAAG,MAA2C,CAAC;AAC7F,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,KAAG,MAAyC,CAAC;AAEpF,gGAAgG;AAChG,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,EAAE,WAAW,MAAM,KAAG,MAGlE,CAAC;AAEF,6FAA6F;AAC7F,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,EAAE,WAAW,MAAM,KAAG,MAGnE,CAAC;AAEF,iFAAiF;AACjF,eAAO,MAAM,eAAe,GAAI,MAAM,MAAM,EAAE,WAAW,cAAc,EAAE,WAAW,MAAM,KAAG,MAO5F,CAAC;AAEF,2FAA2F;AAC3F,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,EAAE,MAAM,MAAM,KAAG,MAG1D,CAAC;AACF,mGAAmG;AACnG,eAAO,MAAM,mBAAmB,GAAU,MAAM,MAAM,EAAE,MAAM,MAAM,KAAG,OAAO,CAAC,MAAM,CAWpF,CAAC;AACF,eAAO,MAAM,cAAc,GAAI,MAAM,MAAM,EAAE,MAAM,MAAM,KAAG,MAA4D,CAAC;AACzH,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,EAAE,MAAM,MAAM,KAAG,MAA+D,CAAC;AAE/H,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,KAAK,CAAC;AAC5C,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,EAAE,aAAa,MAAM,EAAE,MAAM,aAAa,KAAG,MAGtF,CAAC;AAEF,MAAM,MAAM,cAAc,GACtB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC;AAIzB;;;GAGG;AACH,eAAO,MAAM,iBAAiB,GAAU,MAAM,MAAM,EAAE,MAAM,MAAM,KAAG,OAAO,CAAC,cAAc,CAyB1F,CAAC"}

package/dist/slate-paths.js

@@ -0,0 +1,132 @@
+import { constants } from 'node:fs';
+import { lstat, mkdir, open, realpath } from 'node:fs/promises';
+import path from 'node:path';
+import { SlateError } from './slate-errors.js';
+import { LOCAL_SLOT_PATTERN, OP_ID_PATTERN, REFERENCE_ID_PATTERN, VERSION_ID_PATTERN, sha256Hex } from './slate-ids.js';
+/**
+ * The one place ids become paths. Nothing read from a workspace record is used
+ * as a path: every file is recomputed from ids that passed their patterns, then
+ * resolved with `realpath` and required to stay inside the workspace root.
+ */
+export const inside = (root, target) => {
+    const relative = path.relative(root, target);
+    return relative !== '' && relative !== '..' && !relative.startsWith(`..${path.sep}`)
+        && !path.isAbsolute(relative);
+};
+export const WORKSPACE_SUBDIRECTORIES = ['ops', 'versions', 'edits', 'inspiration', 'calls'];
+/** A real directory inside the root: not a symlink, created 0700 on first use. */
+export const ensureRealDirectory = async (root, name) => {
+    const directory = path.join(root, name);
+    await mkdir(directory, { recursive: false, mode: 0o700 }).catch((error) => {
+        if (error.code !== 'EEXIST')
+            throw error;
+    });
+    const entry = await lstat(directory);
+    if (entry.isSymbolicLink() || !entry.isDirectory()) {
+        throw new SlateError('state_invalid', `${directory} must be a real directory inside the workspace, not a link or a file`);
+    }
+    return directory;
+};
+export const opLockFile = (root, opId) => {
+    if (!OP_ID_PATTERN.test(opId))
+        throw new SlateError('invalid_input', `${JSON.stringify(opId)} is not an op id`);
+    return path.join(root, 'ops', `${opId}.lock`);
+};
+export const opLogFile = (root, opId) => {
+    if (!OP_ID_PATTERN.test(opId))
+        throw new SlateError('invalid_input', `${JSON.stringify(opId)} is not an op id`);
+    return path.join(root, 'ops', `${opId}.log`);
+};
+export const workspaceFile = (root) => path.join(root, 'workspace.json');
+export const workspaceLockFile = (root) => path.join(root, 'workspace.lock');
+export const ledgerFile = (root) => path.join(root, 'ledger.jsonl');
+/** Every image a workspace draws or edits lives at `versions/<versionId>.png`, written once. */
+export const versionImageFile = (root, versionId) => {
+    if (!VERSION_ID_PATTERN.test(versionId))
+        throw new SlateError('invalid_input', `${JSON.stringify(versionId)} is not a version id`);
+    return path.join(root, 'versions', `${versionId}.png`);
+};
+/** The root run's own option image: `candidates/<A-P>.png` inside the finished draft run. */
+export const rootCandidateFile = (root, localSlot) => {
+    if (!LOCAL_SLOT_PATTERN.test(localSlot))
+        throw new SlateError('state_invalid', `${JSON.stringify(localSlot)} is not a local slot`);
+    return path.join(root, 'candidates', `${localSlot}.png`);
+};
+/** The file a version's image lives in, computed only from ids in the record. */
+export const versionFilePath = (root, workspace, versionId) => {
+    const version = workspace.versions.find((entry) => entry.versionId === versionId);
+    if (!version)
+        throw new SlateError('not_found', `Unknown version ${versionId}`);
+    const candidate = workspace.candidates.find((entry) => entry.candidateId === version.candidateId);
+    if (!candidate)
+        throw new SlateError('state_invalid', `Version ${versionId} has no option`);
+    if (version.kind === 'generation' && candidate.localSlot !== null)
+        return rootCandidateFile(root, candidate.localSlot);
+    return versionImageFile(root, version.versionId);
+};
+/** `edits/<opId>/`: the parent copy and the annotated image an edit was committed with. */
+export const editDirectory = (root, opId) => {
+    if (!OP_ID_PATTERN.test(opId))
+        throw new SlateError('invalid_input', `${JSON.stringify(opId)} is not an op id`);
+    return path.join(root, 'edits', opId);
+};
+/** Create `edits/<opId>/` as a real directory (0700); a link or a file in its place is refused. */
+export const ensureEditDirectory = async (root, opId) => {
+    await ensureRealDirectory(root, 'edits');
+    const directory = editDirectory(root, opId);
+    await mkdir(directory, { recursive: false, mode: 0o700 }).catch((error) => {
+        if (error.code !== 'EEXIST')
+            throw error;
+    });
+    const entry = await lstat(directory);
+    if (entry.isSymbolicLink() || !entry.isDirectory()) {
+        throw new SlateError('state_invalid', `${directory} must be a real directory inside the workspace, not a link or a file`);
+    }
+    return directory;
+};
+export const editSourceFile = (root, opId) => path.join(editDirectory(root, opId), 'source.png');
+export const editAnnotatedFile = (root, opId) => path.join(editDirectory(root, opId), 'annotated.png');
+export const referenceFile = (root, referenceId, size) => {
+    if (!REFERENCE_ID_PATTERN.test(referenceId))
+        throw new SlateError('invalid_input', `${JSON.stringify(referenceId)} is not a reference id`);
+    return path.join(root, 'inspiration', `${referenceId}.${size}.png`);
+};
+const O_NOFOLLOW = constants.O_NOFOLLOW ?? 0;
+/**
+ * Read one workspace file. A symlink out of the root is refused (`outside`); a
+ * missing file is `missing`. The caller compares the sha256 with the record.
+ */
+export const readWorkspaceFile = async (root, file) => {
+    let resolved;
+    try {
+        resolved = await realpath(file);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return { state: 'missing' };
+        throw error;
+    }
+    const realRoot = await realpath(root);
+    if (!inside(realRoot, resolved))
+        return { state: 'outside' };
+    let handle;
+    try {
+        handle = await open(file, constants.O_RDONLY | O_NOFOLLOW);
+    }
+    catch (error) {
+        const code = error.code;
+        if (code === 'ENOENT')
+            return { state: 'missing' };
+        if (code === 'ELOOP')
+            return { state: 'outside' };
+        throw error;
+    }
+    try {
+        const bytes = await handle.readFile();
+        return { state: 'ok', bytes, sha256: sha256Hex(bytes) };
+    }
+    finally {
+        await handle.close();
+    }
+};
+//# sourceMappingURL=slate-paths.js.map

package/dist/slate-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-paths.js","sourceRoot":"","sources":["../src/slate-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGxH;;;;GAIG;AAEH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,MAAc,EAAW,EAAE;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;WAC/E,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,CAAU,CAAC;AAGtG,kFAAkF;AAClF,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,IAAY,EAAE,IAA2B,EAAmB,EAAE;IACtG,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;QAC/F,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAC3C,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,GAAG,SAAS,sEAAsE,CAAC,CAAC;IAC5H,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE;IAC/D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChH,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AAChD,CAAC,CAAC;AACF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE;IAC9D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChH,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;AAC/C,CAAC,CAAC;AACF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;AACzF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;AAC7F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AAEpF,gGAAgG;AAChG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAE,SAAiB,EAAU,EAAE;IAC1E,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACnI,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,SAAS,MAAM,CAAC,CAAC;AACzD,CAAC,CAAC;AAEF,6FAA6F;AAC7F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,SAAiB,EAAU,EAAE;IAC3E,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACnI,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,SAAS,MAAM,CAAC,CAAC;AAC3D,CAAC,CAAC;AAEF,iFAAiF;AACjF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAY,EAAE,SAAyB,EAAE,SAAiB,EAAU,EAAE;IACpG,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAClF,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,mBAAmB,SAAS,EAAE,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IAClG,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,WAAW,SAAS,gBAAgB,CAAC,CAAC;IAC5F,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,IAAI,SAAS,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IACvH,OAAO,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;AACnD,CAAC,CAAC;AAEF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE;IAClE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChH,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC,CAAC;AACF,mGAAmG;AACnG,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,IAAY,EAAE,IAAY,EAAmB,EAAE;IACvF,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;QAC/F,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAC3C,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,GAAG,SAAS,sEAAsE,CAAC,CAAC;IAC5H,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AACF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;AACzH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;AAG/H,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,WAAmB,EAAE,IAAmB,EAAU,EAAE;IAC9F,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,wBAAwB,CAAC,CAAC;IAC3I,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,WAAW,IAAI,IAAI,MAAM,CAAC,CAAC;AACtE,CAAC,CAAC;AAOF,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EAAE,IAAY,EAAE,IAAY,EAA2B,EAAE;IAC7F,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACpF,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC7D,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,UAAU,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACnD,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAClD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1D,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC,CAAC"}

package/dist/slate-pick.d.ts

@@ -0,0 +1,29 @@
+import type { SlateRuntime } from './slate-runtime.js';
+import type { SlateWorkspace } from './slate-workspace-types.js';
+/**
+ * Select: free, local, idempotent. A pick copies the chosen image to a durable
+ * user-level folder first, so an accepted pick survives the OS sweeping the
+ * temp directory the run lives in. The reason is optional everywhere.
+ */
+export declare const PICK_REASON_MAX_CHARACTERS = 500;
+export declare const recordPick: (args: {
+    runtime: SlateRuntime;
+    root: string;
+    versionId: unknown;
+    reason: unknown;
+}) => Promise<void>;
+/**
+ * A legacy `pick.json` is adopted in memory when the workspace is first read
+ * (only if its image is still in the run, see `readLegacyPick`). This writes
+ * the durable copy that a real selection would have made, so the adopted pick
+ * reads as picked, not as missing. Nothing else is written; a workspace that
+ * is already recorded is left alone (a recorded pick with a lost copy is
+ * reported, never quietly rewritten).
+ */
+export declare const copyAdoptedPick: (args: {
+    runtime: SlateRuntime;
+    root: string;
+    workspace: SlateWorkspace;
+    persisted: boolean;
+}) => Promise<void>;
+//# sourceMappingURL=slate-pick.d.ts.map

package/dist/slate-pick.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-pick.d.ts","sourceRoot":"","sources":["../src/slate-pick.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE;;;;GAIG;AAEH,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAY9C,eAAO,MAAM,UAAU,GAAU,MAAM;IACrC,OAAO,EAAE,YAAY,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;CACjB,KAAG,OAAO,CAAC,IAAI,CAiBf,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,GAAU,MAAM;IAC1C,OAAO,EAAE,YAAY,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,cAAc,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;CACpB,KAAG,OAAO,CAAC,IAAI,CAUf,CAAC"}

package/dist/slate-pick.js

@@ -0,0 +1,55 @@
+import { SlateError } from './slate-errors.js';
+import { appendLedger } from './slate-ledger.js';
+import { cleanUserText } from './slate-actions.js';
+import { pickImagePath } from './slate-view.js';
+import { readVersionBytes, writeImageOnce } from './slate-versions.js';
+import { NoWrite, findVersion, loadWorkspaceAt, mutateWorkspace } from './slate-workspace-store.js';
+/**
+ * Select: free, local, idempotent. A pick copies the chosen image to a durable
+ * user-level folder first, so an accepted pick survives the OS sweeping the
+ * temp directory the run lives in. The reason is optional everywhere.
+ */
+export const PICK_REASON_MAX_CHARACTERS = 500;
+const normalizeReason = (value) => {
+    if (value === undefined || value === null)
+        return null;
+    if (typeof value !== 'string')
+        throw new SlateError('invalid_input', 'reason must be text');
+    const reason = cleanUserText(value);
+    if ([...reason].length > PICK_REASON_MAX_CHARACTERS) {
+        throw new SlateError('invalid_input', `A reason can be at most ${PICK_REASON_MAX_CHARACTERS} characters.`);
+    }
+    return reason || null;
+};
+export const recordPick = async (args) => {
+    const reason = normalizeReason(args.reason);
+    const { workspace } = await loadWorkspaceAt(args.root, args.runtime.now);
+    const version = findVersion(workspace, args.versionId);
+    // Explicit errors for a missing or changed file: only a verified image can be picked.
+    const bytes = await readVersionBytes(args.root, workspace, version);
+    await writeImageOnce(pickImagePath(args.runtime.stateRoot, workspace.workspaceId, version.versionId, version.sha256), bytes, version.sha256);
+    await mutateWorkspace(args.root, async (ws, context) => {
+        if (ws.pick?.versionId === version.versionId && ws.pick.reason === reason)
+            return new NoWrite(undefined);
+        ws.pick = { versionId: version.versionId, reason, pickedAt: context.now.toISOString(), sha256: version.sha256 };
+        await appendLedger(args.root, { event: 'pick', versionId: version.versionId, at: context.now.toISOString() });
+        return undefined;
+    }, { now: args.runtime.now });
+};
+/**
+ * A legacy `pick.json` is adopted in memory when the workspace is first read
+ * (only if its image is still in the run, see `readLegacyPick`). This writes
+ * the durable copy that a real selection would have made, so the adopted pick
+ * reads as picked, not as missing. Nothing else is written; a workspace that
+ * is already recorded is left alone (a recorded pick with a lost copy is
+ * reported, never quietly rewritten).
+ */
+export const copyAdoptedPick = async (args) => {
+    const { runtime, root, workspace, persisted } = args;
+    if (persisted || !workspace.pick)
+        return;
+    const version = findVersion(workspace, workspace.pick.versionId);
+    const bytes = await readVersionBytes(root, workspace, version);
+    await writeImageOnce(pickImagePath(runtime.stateRoot, workspace.workspaceId, version.versionId, version.sha256), bytes, version.sha256);
+};
+//# sourceMappingURL=slate-pick.js.map

package/dist/slate-pick.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-pick.js","sourceRoot":"","sources":["../src/slate-pick.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAIpG;;;;GAIG;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAE9C,MAAM,eAAe,GAAG,CAAC,KAAc,EAAiB,EAAE;IACxD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,GAAG,0BAA0B,EAAE,CAAC;QACpD,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,2BAA2B,0BAA0B,cAAc,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,MAAM,IAAI,IAAI,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,IAKhC,EAAiB,EAAE;IAClB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACvD,sFAAsF;IACtF,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACpE,MAAM,cAAc,CAClB,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAC/F,KAAK,EACL,OAAO,CAAC,MAAM,CACf,CAAC;IACF,MAAM,eAAe,CAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;QAC3D,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC;QACzG,EAAE,CAAC,IAAI,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAChH,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC9G,OAAO,SAAS,CAAC;IACnB,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAChC,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAAE,IAKrC,EAAiB,EAAE;IAClB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IACrD,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI;QAAE,OAAO;IACzC,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/D,MAAM,cAAc,CAClB,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAC1F,KAAK,EACL,OAAO,CAAC,MAAM,CACf,CAAC;AACJ,CAAC,CAAC"}

package/dist/slate-reference-ids.d.ts

@@ -0,0 +1,6 @@
+import type { SlateWorkspace } from './slate-workspace-types.js';
+/** Every reference id the record names, in the order a person meets them: rounds, options, searches, selection. */
+export declare const namedReferenceIds: (workspace: SlateWorkspace) => string[];
+/** The metadata cache keeps exactly the ids the record names, so it cannot grow without bound. */
+export declare const pruneReferences: (workspace: SlateWorkspace) => void;
+//# sourceMappingURL=slate-reference-ids.d.ts.map

package/dist/slate-reference-ids.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-reference-ids.d.ts","sourceRoot":"","sources":["../src/slate-reference-ids.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAsB,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAErF,mHAAmH;AACnH,eAAO,MAAM,iBAAiB,GAAI,WAAW,cAAc,KAAG,MAAM,EAKjE,CAAC;AAEJ,kGAAkG;AAClG,eAAO,MAAM,eAAe,GAAI,WAAW,cAAc,KAAG,IAK3D,CAAC"}

package/dist/slate-reference-ids.js

@@ -0,0 +1,17 @@
+/** Every reference id the record names, in the order a person meets them: rounds, options, searches, selection. */
+export const namedReferenceIds = (workspace) => [...new Set([
+        ...workspace.rounds.flatMap((round) => round.referenceIds),
+        ...workspace.candidates.flatMap((candidate) => (candidate.referenceId ? [candidate.referenceId] : [])),
+        ...workspace.inspiration.searches.flatMap((search) => search.referenceIds),
+        ...workspace.inspiration.selected,
+    ])];
+/** The metadata cache keeps exactly the ids the record names, so it cannot grow without bound. */
+export const pruneReferences = (workspace) => {
+    const named = new Set(namedReferenceIds(workspace));
+    const kept = {};
+    for (const [id, meta] of Object.entries(workspace.references))
+        if (named.has(id))
+            kept[id] = meta;
+    workspace.references = kept;
+};
+//# sourceMappingURL=slate-reference-ids.js.map

package/dist/slate-reference-ids.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-reference-ids.js","sourceRoot":"","sources":["../src/slate-reference-ids.ts"],"names":[],"mappings":"AAEA,mHAAmH;AACnH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,SAAyB,EAAY,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;QACpF,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;QAC1D,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtG,GAAG,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;QAC1E,GAAG,SAAS,CAAC,WAAW,CAAC,QAAQ;KAClC,CAAC,CAAC,CAAC;AAEJ,kGAAkG;AAClG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,SAAyB,EAAQ,EAAE;IACjE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;IACpD,MAAM,IAAI,GAAuC,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC;QAAE,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;IAClG,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC;AAC9B,CAAC,CAAC"}

package/dist/slate-reference-store.d.ts

@@ -0,0 +1,23 @@
+import { type SlateCorpus } from './slate-corpus.js';
+import { type ReferenceSize } from './slate-paths.js';
+/**
+ * Reference images cached inside the workspace, `inspiration/<id>.<size>.png`.
+ * One place downloads them: the corpus is asked only on a miss, the bytes are
+ * decoded before they are cached (a corrupt download is never kept), and the
+ * file is written temp-then-rename so a reader never sees half of one. The
+ * reader confines the file to the workspace root, like every other read.
+ */
+export type ReferenceImage = {
+    bytes: Buffer;
+    width: number;
+    height: number;
+    cached: boolean;
+};
+export declare const ensureReferenceImage: (args: {
+    root: string;
+    corpus: () => SlateCorpus;
+    referenceId: string;
+    size: ReferenceSize;
+    signal?: AbortSignal;
+}) => Promise<ReferenceImage>;
+//# sourceMappingURL=slate-reference-store.d.ts.map

package/dist/slate-reference-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-reference-store.d.ts","sourceRoot":"","sources":["../src/slate-reference-store.ts"],"names":[],"mappings":"AAKA,OAAO,EAAiB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEpE,OAAO,EAAoC,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAExF;;;;;;GAMG;AAEH,MAAM,MAAM,cAAc,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC;AAQ/F,eAAO,MAAM,oBAAoB,GAAU,MAAM;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,WAAW,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,KAAG,OAAO,CAAC,cAAc,CA2BzB,CAAC"}