@12ui/design 0.2.72 → 0.2.74

package/dist/slate-ledger.d.ts

@@ -0,0 +1,29 @@
+/**
+ * `ledger.jsonl`: an append-only audit of the workspace's boundaries, one JSON
+ * line per event, written BEFORE the step it names. The record in
+ * `workspace.json` is the resumable artifact; this file is what an operator
+ * reads to see what was started and what finished. It holds no money events:
+ * the workspace costs nothing. Lines are at most 4 KiB and are never edited.
+ */
+export declare const LEDGER_MAX_LINE_BYTES = 4096;
+export type LedgerEvent = 'approved' | 'resumed' | 'search' | 'call_started' | 'call_finished' | 'settled' | 'failed' | 'superseded' | 'runner_started' | 'pick' | 'handoff' | 'inspiration';
+export type LedgerEntry = {
+    at: string;
+    event: LedgerEvent;
+    opId?: string;
+    runId?: string;
+    [detail: string]: unknown;
+};
+export type LedgerInput = {
+    at?: string;
+    event: LedgerEvent;
+    opId?: string;
+    runId?: string;
+    [detail: string]: unknown;
+};
+export declare const appendLedger: (root: string, entry: LedgerInput) => Promise<void>;
+export declare const readLedger: (root: string) => Promise<{
+    entries: LedgerEntry[];
+    tornFinalLine: boolean;
+}>;
+//# sourceMappingURL=slate-ledger.d.ts.map

package/dist/slate-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-ledger.d.ts","sourceRoot":"","sources":["../src/slate-ledger.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AAEH,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAE1C,MAAM,MAAM,WAAW,GACnB,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,cAAc,GAAG,eAAe,GACpE,SAAS,GAAG,QAAQ,GAAG,YAAY,GAAG,gBAAgB,GAAG,MAAM,GAAG,SAAS,GAAG,aAAa,CAAC;AAEhG,MAAM,MAAM,WAAW,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AACvH,MAAM,MAAM,WAAW,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAExH,eAAO,MAAM,YAAY,GAAU,MAAM,MAAM,EAAE,OAAO,WAAW,KAAG,OAAO,CAAC,IAAI,CAiBjF,CAAC;AAEF,eAAO,MAAM,UAAU,GAAU,MAAM,MAAM,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,CA6BzG,CAAC"}

package/dist/slate-ledger.js

@@ -0,0 +1,65 @@
+import { open, readFile } from 'node:fs/promises';
+import { ledgerFile } from './slate-paths.js';
+/**
+ * `ledger.jsonl`: an append-only audit of the workspace's boundaries, one JSON
+ * line per event, written BEFORE the step it names. The record in
+ * `workspace.json` is the resumable artifact; this file is what an operator
+ * reads to see what was started and what finished. It holds no money events:
+ * the workspace costs nothing. Lines are at most 4 KiB and are never edited.
+ */
+export const LEDGER_MAX_LINE_BYTES = 4096;
+export const appendLedger = async (root, entry) => {
+    const full = { ...entry, at: entry.at ?? new Date().toISOString() };
+    let line = JSON.stringify(full);
+    if (Buffer.byteLength(line) > LEDGER_MAX_LINE_BYTES - 1) {
+        const message = typeof full.message === 'string' ? full.message.slice(0, 300) : undefined;
+        line = JSON.stringify({ ...full, ...(message === undefined ? {} : { message }), truncated: true });
+    }
+    if (Buffer.byteLength(line) > LEDGER_MAX_LINE_BYTES - 1) {
+        line = JSON.stringify({ at: full.at, event: full.event, opId: full.opId, truncated: true });
+    }
+    // O_APPEND and one write per line keep concurrent writers from interleaving.
+    const handle = await open(ledgerFile(root), 'a', 0o600);
+    try {
+        await handle.write(`${line}\n`);
+    }
+    finally {
+        await handle.close();
+    }
+};
+export const readLedger = async (root) => {
+    const file = ledgerFile(root);
+    let raw;
+    try {
+        raw = await readFile(file, 'utf8');
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return { entries: [], tornFinalLine: false };
+        throw error;
+    }
+    const endsCleanly = raw.endsWith('\n');
+    const lines = raw.split('\n');
+    if (lines.at(-1) === '')
+        lines.pop();
+    const entries = [];
+    let tornFinalLine = false;
+    lines.forEach((line, index) => {
+        try {
+            const parsed = JSON.parse(line);
+            if (typeof parsed?.event !== 'string')
+                throw new Error('no event');
+            entries.push(parsed);
+        }
+        catch {
+            if (index === lines.length - 1 && !endsCleanly) {
+                // A crash mid-append leaves an unterminated final line: ignored and reported.
+                tornFinalLine = true;
+                return;
+            }
+            throw new Error(`${file} line ${index + 1} is not a ledger entry`);
+        }
+    });
+    return { entries, tornFinalLine };
+};
+//# sourceMappingURL=slate-ledger.js.map

package/dist/slate-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-ledger.js","sourceRoot":"","sources":["../src/slate-ledger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAS1C,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,IAAY,EAAE,KAAkB,EAAiB,EAAE;IACpF,MAAM,IAAI,GAAgB,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACjF,IAAI,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,qBAAqB,GAAG,CAAC,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,qBAAqB,GAAG,CAAC,EAAE,CAAC;QACxD,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,6EAA6E;IAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,IAAY,EAA+D,EAAE;IAC5G,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QACrG,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;QAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IACrC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;YAC/C,IAAI,OAAO,MAAM,EAAE,KAAK,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC/C,8EAA8E;gBAC9E,aAAa,GAAG,IAAI,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,SAAS,KAAK,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AACpC,CAAC,CAAC"}

package/dist/slate-liveness.d.ts

@@ -0,0 +1,26 @@
+import { RUNNER_ALIVE_WINDOW_MS, RUNNER_HEARTBEAT_INTERVAL_MS } from './slate-lock.js';
+import type { SlateOp, SlateWorkspace } from './slate-workspace-types.js';
+/**
+ * What is actually running, derived from the per-op lock file and the clock.
+ * `starting` and `interrupted` are never written to `workspace.json`: a record
+ * written by a process that has since died must not claim it is still working.
+ */
+export declare const RUNNER_START_GRACE_MS = 30000;
+export { RUNNER_ALIVE_WINDOW_MS, RUNNER_HEARTBEAT_INTERVAL_MS };
+export type RunnerState = {
+    alive: boolean;
+    pid: number | null;
+    heartbeatAgeMs: number | null;
+};
+export type DerivedOpState = 'starting' | 'running' | 'succeeded' | 'failed' | 'interrupted' | 'superseded';
+/** Read-only: never creates or removes the lock. */
+export declare const readRunnerState: (root: string, opId: string, now?: number) => Promise<RunnerState>;
+export declare const deriveOpState: (op: SlateOp, runner: RunnerState, now?: number) => DerivedOpState;
+export type Liveness = {
+    runners: Map<string, RunnerState>;
+    states: Map<string, DerivedOpState>;
+    digest: string;
+};
+/** Liveness of every non-terminal op, plus the digest that goes into the view's `stamp`. */
+export declare const readLiveness: (root: string, workspace: SlateWorkspace, now?: number) => Promise<Liveness>;
+//# sourceMappingURL=slate-liveness.d.ts.map

package/dist/slate-liveness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-liveness.d.ts","sourceRoot":"","sources":["../src/slate-liveness.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAG7B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE1E;;;;GAIG;AAEH,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,CAAC;AAEhE,MAAM,MAAM,WAAW,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAChG,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,aAAa,GAAG,YAAY,CAAC;AAE5G,oDAAoD;AACpD,eAAO,MAAM,eAAe,GAAU,MAAM,MAAM,EAAE,MAAM,MAAM,EAAE,YAAgB,KAAG,OAAO,CAAC,WAAW,CAYvG,CAAC;AAEF,eAAO,MAAM,aAAa,GAAI,IAAI,OAAO,EAAE,QAAQ,WAAW,EAAE,YAAgB,KAAG,cAKlF,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElH,4FAA4F;AAC5F,eAAO,MAAM,YAAY,GAAU,MAAM,MAAM,EAAE,WAAW,cAAc,EAAE,YAAgB,KAAG,OAAO,CAAC,QAAQ,CAU9G,CAAC"}

package/dist/slate-liveness.js

@@ -0,0 +1,49 @@
+import { readFile, stat } from 'node:fs/promises';
+import { sha256Hex } from './slate-ids.js';
+import { RUNNER_ALIVE_WINDOW_MS, RUNNER_HEARTBEAT_INTERVAL_MS, parseHolder, processIsAlive, } from './slate-lock.js';
+import { opLockFile } from './slate-paths.js';
+/**
+ * What is actually running, derived from the per-op lock file and the clock.
+ * `starting` and `interrupted` are never written to `workspace.json`: a record
+ * written by a process that has since died must not claim it is still working.
+ */
+export const RUNNER_START_GRACE_MS = 30_000;
+export { RUNNER_ALIVE_WINDOW_MS, RUNNER_HEARTBEAT_INTERVAL_MS };
+/** Read-only: never creates or removes the lock. */
+export const readRunnerState = async (root, opId, now = Date.now()) => {
+    const file = opLockFile(root, opId);
+    try {
+        const [raw, entry] = await Promise.all([readFile(file, 'utf8'), stat(file)]);
+        const holder = parseHolder(raw);
+        if (!holder)
+            return { alive: false, pid: null, heartbeatAgeMs: Math.round(Math.max(0, now - entry.mtimeMs)) };
+        const age = Math.round(Math.max(0, now - entry.mtimeMs));
+        return { alive: processIsAlive(holder.pid) && age <= RUNNER_ALIVE_WINDOW_MS, pid: holder.pid, heartbeatAgeMs: age };
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return { alive: false, pid: null, heartbeatAgeMs: null };
+        throw error;
+    }
+};
+export const deriveOpState = (op, runner, now = Date.now()) => {
+    if (op.state !== 'running')
+        return op.state;
+    if (runner.alive)
+        return 'running';
+    const lastSpawn = Date.parse(op.spawnedAt ?? op.startedAt);
+    return now - lastSpawn < RUNNER_START_GRACE_MS ? 'starting' : 'interrupted';
+};
+/** Liveness of every non-terminal op, plus the digest that goes into the view's `stamp`. */
+export const readLiveness = async (root, workspace, now = Date.now()) => {
+    const runners = new Map();
+    const states = new Map();
+    for (const op of workspace.ops) {
+        const runner = op.state === 'running' ? await readRunnerState(root, op.opId, now) : { alive: false, pid: null, heartbeatAgeMs: null };
+        runners.set(op.opId, runner);
+        states.set(op.opId, deriveOpState(op, runner, now));
+    }
+    const digest = sha256Hex([...states.entries()].map(([id, state]) => `${id}:${state}`).join('|')).slice(0, 8);
+    return { runners, states, digest };
+};
+//# sourceMappingURL=slate-liveness.js.map

package/dist/slate-liveness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-liveness.js","sourceRoot":"","sources":["../src/slate-liveness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,WAAW,EACX,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C;;;;GAIG;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,CAAC;AAKhE,oDAAoD;AACpD,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAAE,IAAY,EAAE,IAAY,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAwB,EAAE;IAC1G,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC9G,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACzD,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,sBAAsB,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;IACtH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QACjH,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,EAAW,EAAE,MAAmB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAkB,EAAE;IAClG,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,KAAK,CAAC;IAC5C,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3D,OAAO,GAAG,GAAG,SAAS,GAAG,qBAAqB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;AAC9E,CAAC,CAAC;AAIF,4FAA4F;AAC5F,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,IAAY,EAAE,SAAyB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAqB,EAAE;IACjH,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjD,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QACtI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7G,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC,CAAC"}

package/dist/slate-local-image.d.ts

@@ -0,0 +1,19 @@
+import type { LocalImageState } from './slate-view.js';
+/**
+ * Whether Design and Edit can run on this Mac: the local Codex CLI, signed in
+ * with ChatGPT, with the image model available. It reads only the readiness
+ * probe (`codex --version`, `codex login status`, `codex exec --help` and the
+ * model cache), which runs no inference, and is asked at most once a minute
+ * per server. The workspace never buys an alternative: when this says not
+ * ready, the dialogs show the reason and stay disabled.
+ */
+export type SlateImageProbe = () => Promise<LocalImageState>;
+export declare const LOCAL_IMAGE_PROBE_TTL_MS = 60000;
+/** The Codex desktop app ships its own CLI; it is the last place looked. */
+export declare const CODEX_APP_BINARY = "/Applications/Codex.app/Contents/Resources/codex";
+/** `TWELVE_UI_CODEX_BIN`, then `codex` on `PATH`, then the Codex app bundle if it is installed. */
+export declare const resolveCodexBinary: (env?: NodeJS.ProcessEnv, exists?: (file: string) => boolean) => string;
+export declare const codexReadinessProbe: (env?: NodeJS.ProcessEnv) => SlateImageProbe;
+/** The probe's answer, kept for a minute. A not-ready reason is passed through verbatim. */
+export declare const cachedImageProbe: (probe: SlateImageProbe, now: () => Date) => SlateImageProbe;
+//# sourceMappingURL=slate-local-image.d.ts.map

package/dist/slate-local-image.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-local-image.d.ts","sourceRoot":"","sources":["../src/slate-local-image.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD;;;;;;;GAOG;AAEH,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;AAE7D,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAE/C,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB,qDAAqD,CAAC;AAEnF,mGAAmG;AACnG,eAAO,MAAM,kBAAkB,GAC7B,MAAK,MAAM,CAAC,UAAwB,EACpC,SAAQ,CAAC,IAAI,EAAE,MAAM,KAAK,OAAoB,KAC7C,MAMF,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,MAAK,MAAM,CAAC,UAAwB,KAAG,eAM1E,CAAC;AAEF,4FAA4F;AAC5F,eAAO,MAAM,gBAAgB,GAAI,OAAO,eAAe,EAAE,KAAK,MAAM,IAAI,KAAG,eAS1E,CAAC"}

package/dist/slate-local-image.js

@@ -0,0 +1,36 @@
+import { existsSync } from 'node:fs';
+import path from 'node:path';
+import { probeCodexReadiness } from './cli-codex-readiness.js';
+export const LOCAL_IMAGE_PROBE_TTL_MS = 60_000;
+/** The Codex desktop app ships its own CLI; it is the last place looked. */
+export const CODEX_APP_BINARY = '/Applications/Codex.app/Contents/Resources/codex';
+/** `TWELVE_UI_CODEX_BIN`, then `codex` on `PATH`, then the Codex app bundle if it is installed. */
+export const resolveCodexBinary = (env = process.env, exists = existsSync) => {
+    const explicit = env.TWELVE_UI_CODEX_BIN?.trim();
+    if (explicit)
+        return explicit;
+    const onPath = (env.PATH ?? '').split(path.delimiter).some((directory) => directory !== '' && exists(path.join(directory, 'codex')));
+    if (onPath)
+        return 'codex';
+    return exists(CODEX_APP_BINARY) ? CODEX_APP_BINARY : 'codex';
+};
+export const codexReadinessProbe = (env = process.env) => async () => {
+    const result = await probeCodexReadiness({
+        codexBin: resolveCodexBinary(env),
+        ...(env.CODEX_HOME?.trim() ? { codexHome: env.CODEX_HOME.trim() } : {}),
+    });
+    return { ready: result.ready, reason: result.ready ? null : result.reason };
+};
+/** The probe's answer, kept for a minute. A not-ready reason is passed through verbatim. */
+export const cachedImageProbe = (probe, now) => {
+    let cached;
+    return async () => {
+        const at = now().getTime();
+        if (cached && at - cached.at < LOCAL_IMAGE_PROBE_TTL_MS && at >= cached.at)
+            return cached.state;
+        const state = await probe();
+        cached = { at, state };
+        return state;
+    };
+};
+//# sourceMappingURL=slate-local-image.js.map

package/dist/slate-local-image.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-local-image.js","sourceRoot":"","sources":["../src/slate-local-image.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAc/D,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAE/C,4EAA4E;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,kDAAkD,CAAC;AAEnF,mGAAmG;AACnG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,MAAyB,OAAO,CAAC,GAAG,EACpC,SAAoC,UAAU,EACtC,EAAE;IACV,MAAM,QAAQ,GAAG,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACrI,IAAI,MAAM;QAAE,OAAO,OAAO,CAAC;IAC3B,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAmB,EAAE,CAAC,KAAK,IAAI,EAAE;IACvG,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;QACvC,QAAQ,EAAE,kBAAkB,CAAC,GAAG,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;AAC9E,CAAC,CAAC;AAEF,4FAA4F;AAC5F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAsB,EAAE,GAAe,EAAmB,EAAE;IAC3F,IAAI,MAA0D,CAAC;IAC/D,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,MAAM,IAAI,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,wBAAwB,IAAI,EAAE,IAAI,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QAChG,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC;QAC5B,MAAM,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC,CAAC"}

package/dist/slate-lock.d.ts

@@ -0,0 +1,64 @@
+/**
+ * O_EXCL lock files with guarded, compare-before-unlink stale takeover.
+ *
+ * Three locks share this code: the workspace lock and the approval-store lock
+ * (a holder is stale only when its PID is gone; a live holder is waited on for
+ * a bounded time and never taken over) and the per-op runner lock (a holder is
+ * alive only while its PID is alive AND its mtime, the heartbeat, is fresh).
+ */
+export declare const LOCK_WAIT_MS = 10000;
+export declare const RUNNER_HEARTBEAT_INTERVAL_MS = 5000;
+export declare const RUNNER_ALIVE_WINDOW_MS = 20000;
+export type LockHolder = {
+    pid: number;
+    nonce: string;
+    startedAt: string;
+};
+export declare const processIsAlive: (pid: number) => boolean;
+export declare const parseHolder: (raw: string) => LockHolder | undefined;
+export type StalePolicy = (holder: LockHolder, mtimeMs: number, now: number) => boolean;
+/** Workspace and approval locks: stale only when the holder process is gone. */
+export declare const staleWhenProcessGone: StalePolicy;
+/** Per-op runner lock: alive needs the PID and a fresh heartbeat. */
+export declare const staleWhenHeartbeatLapsed: StalePolicy;
+export type HeldLock = {
+    file: string;
+    holder: LockHolder;
+    release: () => Promise<void>;
+    touch: () => Promise<void>;
+};
+/**
+ * Take a stale lock over, one taker at a time. Takeover is serialised behind an
+ * exclusive guard file (`<lock>.takeover`, created with O_EXCL). Under the
+ * guard the lock is re-read: it is unlinked only if it is still byte-for-byte
+ * the stale holder the caller judged, so a lock that a rival re-created in the
+ * meantime is never touched. The caller then creates the new lock with the
+ * ordinary exclusive create. Returns true when the stale lock was removed,
+ * false when the guard was busy or the lock had already changed (the caller
+ * simply loops and re-observes).
+ */
+export declare const takeOverStale: (file: string, observedRaw: string) => Promise<boolean>;
+export declare const holderState: (file: string, policy: StalePolicy, now?: number) => Promise<{
+    state: "absent";
+} | {
+    state: "live" | "stale";
+    holder: LockHolder | undefined;
+    raw: string;
+    mtimeMs: number;
+}>;
+export declare const acquireLock: (args: {
+    file: string;
+    policy: StalePolicy;
+    /** How long to wait for a live holder; 0 means fail at once. */
+    waitMs?: number;
+    busyMessage?: string;
+}) => Promise<HeldLock>;
+/** In-process queue per lock path, then the file lock: one writer at a time in this process too. */
+export declare const withLock: <T>(args: {
+    file: string;
+    policy?: StalePolicy;
+    waitMs?: number;
+    busyMessage?: string;
+    run: () => Promise<T>;
+}) => Promise<T>;
+//# sourceMappingURL=slate-lock.d.ts.map

package/dist/slate-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-lock.d.ts","sourceRoot":"","sources":["../src/slate-lock.ts"],"names":[],"mappings":"AAMA;;;;;;;GAOG;AAEH,eAAO,MAAM,YAAY,QAAS,CAAC;AACnC,eAAO,MAAM,4BAA4B,OAAQ,CAAC;AAClD,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,MAAM,MAAM,UAAU,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3E,eAAO,MAAM,cAAc,GAAI,KAAK,MAAM,KAAG,OAQ5C,CAAC;AAIF,eAAO,MAAM,WAAW,GAAI,KAAK,MAAM,KAAG,UAAU,GAAG,SAQtD,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;AAExF,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,EAAE,WAAqD,CAAC;AAEzF,qEAAqE;AACrE,eAAO,MAAM,wBAAwB,EAAE,WAEtC,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC;AAiBtH;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa,GAAU,MAAM,MAAM,EAAE,aAAa,MAAM,KAAG,OAAO,CAAC,OAAO,CAgBtF,CAAC;AAYF,eAAO,MAAM,WAAW,GACtB,MAAM,MAAM,EACZ,QAAQ,WAAW,EACnB,YAAgB,KACf,OAAO,CAAC;IAAE,KAAK,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAiBzH,CAAC;AAEF,eAAO,MAAM,WAAW,GAAU,MAAM;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,CAAC;IACpB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,KAAG,OAAO,CAAC,QAAQ,CA2BnB,CAAC;AAIF,oGAAoG;AACpG,eAAO,MAAM,QAAQ,GAAU,CAAC,EAAE,MAAM;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;CACvB,KAAG,OAAO,CAAC,CAAC,CAqBZ,CAAC"}

package/dist/slate-lock.js

@@ -0,0 +1,178 @@
+import { randomUUID } from 'node:crypto';
+import { open, readFile, rm, stat, utimes } from 'node:fs/promises';
+import path from 'node:path';
+import { SlateError } from './slate-errors.js';
+/**
+ * O_EXCL lock files with guarded, compare-before-unlink stale takeover.
+ *
+ * Three locks share this code: the workspace lock and the approval-store lock
+ * (a holder is stale only when its PID is gone; a live holder is waited on for
+ * a bounded time and never taken over) and the per-op runner lock (a holder is
+ * alive only while its PID is alive AND its mtime, the heartbeat, is fresh).
+ */
+export const LOCK_WAIT_MS = 10_000;
+export const RUNNER_HEARTBEAT_INTERVAL_MS = 5_000;
+export const RUNNER_ALIVE_WINDOW_MS = 20_000;
+export const processIsAlive = (pid) => {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        // EPERM means the process exists and belongs to somebody else.
+        return error.code === 'EPERM';
+    }
+};
+const sleep = (milliseconds) => new Promise((resolve) => { setTimeout(resolve, milliseconds); });
+export const parseHolder = (raw) => {
+    try {
+        const parsed = JSON.parse(raw);
+        if (Number.isSafeInteger(parsed.pid) && typeof parsed.nonce === 'string' && typeof parsed.startedAt === 'string') {
+            return { pid: parsed.pid, nonce: parsed.nonce, startedAt: parsed.startedAt };
+        }
+    }
+    catch { /* an unreadable lock is treated as held by someone else */ }
+    return undefined;
+};
+/** Workspace and approval locks: stale only when the holder process is gone. */
+export const staleWhenProcessGone = (holder) => !processIsAlive(holder.pid);
+/** Per-op runner lock: alive needs the PID and a fresh heartbeat. */
+export const staleWhenHeartbeatLapsed = (holder, mtimeMs, now) => (!processIsAlive(holder.pid) || now - mtimeMs > RUNNER_ALIVE_WINDOW_MS);
+const tryCreate = async (file, holder) => {
+    try {
+        const handle = await open(file, 'wx', 0o600);
+        try {
+            await handle.writeFile(`${JSON.stringify(holder)}\n`, 'utf8');
+        }
+        finally {
+            await handle.close();
+        }
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'EEXIST')
+            return false;
+        throw error;
+    }
+};
+/**
+ * Take a stale lock over, one taker at a time. Takeover is serialised behind an
+ * exclusive guard file (`<lock>.takeover`, created with O_EXCL). Under the
+ * guard the lock is re-read: it is unlinked only if it is still byte-for-byte
+ * the stale holder the caller judged, so a lock that a rival re-created in the
+ * meantime is never touched. The caller then creates the new lock with the
+ * ordinary exclusive create. Returns true when the stale lock was removed,
+ * false when the guard was busy or the lock had already changed (the caller
+ * simply loops and re-observes).
+ */
+export const takeOverStale = async (file, observedRaw) => {
+    const guardFile = `${file}.takeover`;
+    const guardHolder = { pid: process.pid, nonce: randomUUID(), startedAt: new Date().toISOString() };
+    if (!(await tryCreate(guardFile, guardHolder))) {
+        await clearDeadGuard(guardFile);
+        return false;
+    }
+    try {
+        const current = await readFile(file, 'utf8').catch(() => undefined);
+        if (current !== observedRaw)
+            return false;
+        await rm(file, { force: true });
+        return true;
+    }
+    finally {
+        const guardNow = await readFile(guardFile, 'utf8').catch(() => '');
+        if (parseHolder(guardNow)?.nonce === guardHolder.nonce)
+            await rm(guardFile, { force: true });
+    }
+};
+/** A guard is held for milliseconds; one whose creator process is gone is cleared. */
+const clearDeadGuard = async (guardFile) => {
+    const raw = await readFile(guardFile, 'utf8').catch(() => undefined);
+    if (raw === undefined)
+        return;
+    const holder = parseHolder(raw);
+    if (holder ? processIsAlive(holder.pid) : (Date.now() - (await stat(guardFile).then((s) => s.mtimeMs, () => Date.now()))) < 2_000)
+        return;
+    const again = await readFile(guardFile, 'utf8').catch(() => undefined);
+    if (again === raw)
+        await rm(guardFile, { force: true });
+};
+export const holderState = async (file, policy, now = Date.now()) => {
+    let raw;
+    let mtimeMs;
+    try {
+        raw = await readFile(file, 'utf8');
+        mtimeMs = (await stat(file)).mtimeMs;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return { state: 'absent' };
+        throw error;
+    }
+    const holder = parseHolder(raw);
+    if (!holder) {
+        // A lock that has no readable holder is only stale once it is old: a
+        // creator may be between open and write.
+        return { state: now - mtimeMs > 2_000 ? 'stale' : 'live', holder, raw, mtimeMs };
+    }
+    return { state: policy(holder, mtimeMs, now) ? 'stale' : 'live', holder, raw, mtimeMs };
+};
+export const acquireLock = async (args) => {
+    const holder = { pid: process.pid, nonce: randomUUID(), startedAt: new Date().toISOString() };
+    const deadline = Date.now() + (args.waitMs ?? LOCK_WAIT_MS);
+    for (;;) {
+        if (await tryCreate(args.file, holder)) {
+            return {
+                file: args.file,
+                holder,
+                touch: async () => { const now = new Date(); await utimes(args.file, now, now); },
+                release: async () => {
+                    // Remove only our own lock: a takeover after a long pause may have replaced it.
+                    const current = await readFile(args.file, 'utf8').catch(() => '');
+                    if (parseHolder(current)?.nonce === holder.nonce)
+                        await rm(args.file, { force: true });
+                },
+            };
+        }
+        const state = await holderState(args.file, args.policy);
+        if (state.state === 'stale') {
+            if (!(await takeOverStale(args.file, state.raw)))
+                await sleep(2 + Math.floor(Math.random() * 6));
+            continue;
+        }
+        if (state.state === 'absent')
+            continue;
+        if (Date.now() >= deadline) {
+            throw new SlateError('workspace_busy', args.busyMessage ?? `Another process holds ${path.basename(args.file)}; try again in a moment.`);
+        }
+        await sleep(25 + Math.floor(Math.random() * 25));
+    }
+};
+const processMutexes = new Map();
+/** In-process queue per lock path, then the file lock: one writer at a time in this process too. */
+export const withLock = async (args) => {
+    const previous = processMutexes.get(args.file) ?? Promise.resolve();
+    const turn = previous.catch(() => undefined).then(async () => {
+        const lock = await acquireLock({
+            file: args.file,
+            policy: args.policy ?? staleWhenProcessGone,
+            ...(args.waitMs === undefined ? {} : { waitMs: args.waitMs }),
+            ...(args.busyMessage ? { busyMessage: args.busyMessage } : {}),
+        });
+        try {
+            return await args.run();
+        }
+        finally {
+            await lock.release();
+        }
+    });
+    processMutexes.set(args.file, turn);
+    try {
+        return await turn;
+    }
+    finally {
+        if (processMutexes.get(args.file) === turn)
+            processMutexes.delete(args.file);
+    }
+};
+//# sourceMappingURL=slate-lock.js.map

package/dist/slate-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-lock.js","sourceRoot":"","sources":["../src/slate-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC;AACnC,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAClD,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAI7C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAW,EAAW,EAAE;IACrD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,+DAA+D;QAC/D,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,KAAK,GAAG,CAAC,YAAoB,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAExH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAW,EAA0B,EAAE;IACjE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QACtD,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACjH,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAa,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QACzF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,2DAA2D,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAIF,gFAAgF;AAChF,MAAM,CAAC,MAAM,oBAAoB,GAAgB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAEzF,qEAAqE;AACrE,MAAM,CAAC,MAAM,wBAAwB,GAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAC7E,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,OAAO,GAAG,sBAAsB,CACtE,CAAC;AAIF,MAAM,SAAS,GAAG,KAAK,EAAE,IAAY,EAAE,MAAkB,EAAoB,EAAE;IAC7E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChE,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,IAAY,EAAE,WAAmB,EAAoB,EAAE;IACzF,MAAM,SAAS,GAAG,GAAG,IAAI,WAAW,CAAC;IACrC,MAAM,WAAW,GAAe,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC/G,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,OAAO,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,KAAK,KAAK,WAAW,CAAC,KAAK;YAAE,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC,CAAC;AAEF,sFAAsF;AACtF,MAAM,cAAc,GAAG,KAAK,EAAE,SAAiB,EAAiB,EAAE;IAChE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACrE,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO;IAC9B,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK;QAAE,OAAO;IAC1I,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACvE,IAAI,KAAK,KAAK,GAAG;QAAE,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC9B,IAAY,EACZ,MAAmB,EACnB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAC0G,EAAE;IAC5H,IAAI,GAAW,CAAC;IAChB,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACnF,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,qEAAqE;QACrE,yCAAyC;QACzC,OAAO,EAAE,KAAK,EAAE,GAAG,GAAG,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1F,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,IAMjC,EAAqB,EAAE;IACtB,MAAM,MAAM,GAAe,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC1G,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC;IAC5D,SAAS,CAAC;QACR,IAAI,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM;gBACN,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;gBACjF,OAAO,EAAE,KAAK,IAAI,EAAE;oBAClB,gFAAgF;oBAChF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;oBAClE,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,MAAM,CAAC,KAAK;wBAAE,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzF,CAAC;aACF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;gBAAE,MAAM,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YACjG,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ;YAAE,SAAS;QACvC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,IAAI,CAAC,WAAW,IAAI,yBAAyB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC1I,CAAC;QACD,MAAM,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,IAAI,GAAG,EAA4B,CAAC;AAE3D,oGAAoG;AACpG,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAAK,IAMjC,EAAc,EAAE;IACf,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACpE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QAC3D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,oBAAoB;YAC3C,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1B,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC,CAAC"}

package/dist/slate-paths.d.ts

@@ -0,0 +1,45 @@
+import type { SlateWorkspace } from './slate-workspace-types.js';
+/**
+ * The one place ids become paths. Nothing read from a workspace record is used
+ * as a path: every file is recomputed from ids that passed their patterns, then
+ * resolved with `realpath` and required to stay inside the workspace root.
+ */
+export declare const inside: (root: string, target: string) => boolean;
+export declare const WORKSPACE_SUBDIRECTORIES: readonly ["ops", "versions", "edits", "inspiration", "calls"];
+export type WorkspaceSubdirectory = typeof WORKSPACE_SUBDIRECTORIES[number];
+/** A real directory inside the root: not a symlink, created 0700 on first use. */
+export declare const ensureRealDirectory: (root: string, name: WorkspaceSubdirectory) => Promise<string>;
+export declare const opLockFile: (root: string, opId: string) => string;
+export declare const opLogFile: (root: string, opId: string) => string;
+export declare const workspaceFile: (root: string) => string;
+export declare const workspaceLockFile: (root: string) => string;
+export declare const ledgerFile: (root: string) => string;
+/** Every image a workspace draws or edits lives at `versions/<versionId>.png`, written once. */
+export declare const versionImageFile: (root: string, versionId: string) => string;
+/** The root run's own option image: `candidates/<A-P>.png` inside the finished draft run. */
+export declare const rootCandidateFile: (root: string, localSlot: string) => string;
+/** The file a version's image lives in, computed only from ids in the record. */
+export declare const versionFilePath: (root: string, workspace: SlateWorkspace, versionId: string) => string;
+/** `edits/<opId>/`: the parent copy and the annotated image an edit was committed with. */
+export declare const editDirectory: (root: string, opId: string) => string;
+/** Create `edits/<opId>/` as a real directory (0700); a link or a file in its place is refused. */
+export declare const ensureEditDirectory: (root: string, opId: string) => Promise<string>;
+export declare const editSourceFile: (root: string, opId: string) => string;
+export declare const editAnnotatedFile: (root: string, opId: string) => string;
+export type ReferenceSize = 'thumb' | 'ref';
+export declare const referenceFile: (root: string, referenceId: string, size: ReferenceSize) => string;
+export type ReadFileResult = {
+    state: 'ok';
+    bytes: Buffer;
+    sha256: string;
+} | {
+    state: 'missing';
+} | {
+    state: 'outside';
+};
+/**
+ * Read one workspace file. A symlink out of the root is refused (`outside`); a
+ * missing file is `missing`. The caller compares the sha256 with the record.
+ */
+export declare const readWorkspaceFile: (root: string, file: string) => Promise<ReadFileResult>;
+//# sourceMappingURL=slate-paths.d.ts.map

package/dist/slate-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slate-paths.d.ts","sourceRoot":"","sources":["../src/slate-paths.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE;;;;GAIG;AAEH,eAAO,MAAM,MAAM,GAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,KAAG,OAIrD,CAAC;AAEF,eAAO,MAAM,wBAAwB,+DAAgE,CAAC;AACtG,MAAM,MAAM,qBAAqB,GAAG,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC;AAE5E,kFAAkF;AAClF,eAAO,MAAM,mBAAmB,GAAU,MAAM,MAAM,EAAE,MAAM,qBAAqB,KAAG,OAAO,CAAC,MAAM,CAUnG,CAAC;AAEF,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,EAAE,MAAM,MAAM,KAAG,MAGvD,CAAC;AACF,eAAO,MAAM,SAAS,GAAI,MAAM,MAAM,EAAE,MAAM,MAAM,KAAG,MAGtD,CAAC;AACF,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,KAAG,MAA2C,CAAC;AACzF,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,KAAG,MAA2C,CAAC;AAC7F,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,KAAG,MAAyC,CAAC;AAEpF,gGAAgG;AAChG,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,EAAE,WAAW,MAAM,KAAG,MAGlE,CAAC;AAEF,6FAA6F;AAC7F,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,EAAE,WAAW,MAAM,KAAG,MAGnE,CAAC;AAEF,iFAAiF;AACjF,eAAO,MAAM,eAAe,GAAI,MAAM,MAAM,EAAE,WAAW,cAAc,EAAE,WAAW,MAAM,KAAG,MAO5F,CAAC;AAEF,2FAA2F;AAC3F,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,EAAE,MAAM,MAAM,KAAG,MAG1D,CAAC;AACF,mGAAmG;AACnG,eAAO,MAAM,mBAAmB,GAAU,MAAM,MAAM,EAAE,MAAM,MAAM,KAAG,OAAO,CAAC,MAAM,CAWpF,CAAC;AACF,eAAO,MAAM,cAAc,GAAI,MAAM,MAAM,EAAE,MAAM,MAAM,KAAG,MAA4D,CAAC;AACzH,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,EAAE,MAAM,MAAM,KAAG,MAA+D,CAAC;AAE/H,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,KAAK,CAAC;AAC5C,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,EAAE,aAAa,MAAM,EAAE,MAAM,aAAa,KAAG,MAGtF,CAAC;AAEF,MAAM,MAAM,cAAc,GACtB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC;AAIzB;;;GAGG;AACH,eAAO,MAAM,iBAAiB,GAAU,MAAM,MAAM,EAAE,MAAM,MAAM,KAAG,OAAO,CAAC,cAAc,CAyB1F,CAAC"}