@agent-teams/engineering-foundation 0.12.0 → 0.13.1

package/dist/scaffolding/adapters/node/filesystem-path-guard.js

@@ -1,24 +1,18 @@
-import { lstat, mkdir, open, readdir, realpath } from "node:fs/promises";
-import { isAbsolute, join, relative, sep } from "node:path";
+import { lstat, mkdir, realpath } from "node:fs/promises";
+import { join } from "node:path";
+import { assertNoPortableNameCollision, assertSafeExistingRepositoryAncestors, ExistingRepositoryAncestorError } from "../../../repository-mutation/adapters/node/node-existing-repository-ancestors.js";
+import { syncDirectoryDurably } from "../../../repository-mutation/adapters/node/node-directory-durability.js";
+import { isLexicallyContainedPath } from "../../../repository-mutation/adapters/node/node-repository-path.js";
+import { legacyScaffoldingRepositoryPathProblem } from "../../application/policies/legacy-scaffolding-repository-path.js";
 import { ScaffoldError } from "../../scaffold-error.js";
 const PROTECTED_ROOTS = new Set([".agent-teams-local", ".git", "node_modules"]);
-const WINDOWS_RESERVED_NAMES = new Set([
-    "AUX",
-    "CON",
-    "NUL",
-    "PRN",
-    ...Array.from({ length: 9 }, (_unused, index) => `COM${index + 1}`),
-    ...Array.from({ length: 9 }, (_unused, index) => `LPT${index + 1}`)
-]);
 function isMissing(error) {
     return (error instanceof Error &&
         "code" in error &&
         error.code === "ENOENT");
 }
 export function isContainedPath(root, candidate) {
-    const relation = relative(root, candidate);
-    return (relation === "" ||
-        (!relation.startsWith(`..${sep}`) && relation !== ".." && !isAbsolute(relation)));
+    return isLexicallyContainedPath(root, candidate);
 }
 export function assertSafeOperationPaths(plan) {
     const folded = new Map();
@@ -27,17 +21,7 @@ export function assertSafeOperationPaths(plan) {
     for (const operation of plan.operations) {
         const segments = operation.path.split("/");
         if (!operation.path.startsWith(targetPrefix) ||
-            operation.path.length === 0 ||
-            operation.path.length > 512 ||
-            operation.path.includes("\\") ||
-            isAbsolute(operation.path) ||
-            segments.some((segment) => segment.length === 0 ||
-                segment === "." ||
-                segment === ".." ||
-                segment.length > 255 ||
-                segment.endsWith(".") ||
-                Array.from(segment).some((character) => (character.codePointAt(0) ?? 0) < 32) ||
-                WINDOWS_RESERVED_NAMES.has((segment.split(".")[0] ?? "").toUpperCase())) ||
+            legacyScaffoldingRepositoryPathProblem(operation.path) !== undefined ||
             segments.some((segment) => PROTECTED_ROOTS.has(segment.toLowerCase()))) {
             throw new ScaffoldError("SCAFFOLD_PLAN_INVALID", `Scaffolding operation path is unsafe: ${operation.path}.`);
         }
@@ -56,35 +40,19 @@ export function assertSafeOperationPaths(plan) {
     }
 }
 export async function syncDirectory(path) {
+    await syncDirectoryDurably(path);
+}
+async function assertNoCaseCollision(parent, requestedName) {
     try {
-        const handle = await open(path, "r");
-        try {
-            await handle.sync();
-        }
-        finally {
-            await handle.close();
-        }
+        await assertNoPortableNameCollision(parent, requestedName, (path) => path.toLowerCase(), "filesystem");
     }
     catch (error) {
-        if (process.platform === "win32" &&
-            error instanceof Error &&
-            "code" in error &&
-            ["EACCES", "EINVAL", "EISDIR", "EPERM"].includes(error.code ?? "")) {
-            return;
-        }
-        throw error;
-    }
-}
-async function assertNoCaseCollision(parent, requestedName) {
-    const entries = await readdir(parent).catch((error) => {
-        if (isMissing(error)) {
-            return [];
+        if (error instanceof ExistingRepositoryAncestorError &&
+            error.problem === "name-collision") {
+            const collision = error.existingName ?? "";
+            throw new ScaffoldError("SCAFFOLD_APPLY_CONFLICT", `Path collides under case folding: ${collision}, ${requestedName}.`);
         }
         throw error;
-    });
-    const collision = entries.find((entry) => entry !== requestedName && entry.toLowerCase() === requestedName.toLowerCase());
-    if (collision !== undefined) {
-        throw new ScaffoldError("SCAFFOLD_APPLY_CONFLICT", `Path collides under case folding: ${collision}, ${requestedName}.`);
     }
 }
 export async function ensureSafeParent(root, repositoryPath) {
@@ -116,29 +84,20 @@ export async function ensureSafeParent(root, repositoryPath) {
     return current;
 }
 export async function assertSafeExistingAncestors(root, repositoryPath) {
-    const segments = repositoryPath.split("/");
-    let current = root;
-    for (const segment of segments.slice(0, -1)) {
-        await assertNoCaseCollision(current, segment);
-        const next = join(current, segment);
-        const metadata = await lstat(next).catch((error) => {
-            if (isMissing(error)) {
-                return null;
+    try {
+        await assertSafeExistingRepositoryAncestors(root, repositoryPath, (path) => path.toLowerCase(), "filesystem");
+    }
+    catch (error) {
+        if (error instanceof ExistingRepositoryAncestorError) {
+            if (error.problem === "name-collision") {
+                throw new ScaffoldError("SCAFFOLD_APPLY_CONFLICT", `Path collides under case folding: ${error.existingName ?? ""}, ${error.requestedName ?? ""}.`);
+            }
+            if (error.problem === "not-directory") {
+                throw new ScaffoldError("SCAFFOLD_APPLY_CONFLICT", `Scaffolding parent is not a real directory: ${repositoryPath}.`);
             }
-            throw error;
-        });
-        if (metadata === null) {
-            return;
-        }
-        if (metadata.isSymbolicLink() || !metadata.isDirectory()) {
-            throw new ScaffoldError("SCAFFOLD_APPLY_CONFLICT", `Scaffolding parent is not a real directory: ${repositoryPath}.`);
-        }
-        const canonical = await realpath(next);
-        if (!isContainedPath(root, canonical)) {
             throw new ScaffoldError("SCAFFOLD_APPLY_CONFLICT", `Scaffolding parent escapes the repository: ${repositoryPath}.`);
         }
-        current = canonical;
+        throw error;
     }
-    await assertNoCaseCollision(current, segments.at(-1) ?? "");
 }
 //# sourceMappingURL=filesystem-path-guard.js.map

package/dist/scaffolding/adapters/node/filesystem-path-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"filesystem-path-guard.js","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/filesystem-path-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAG5D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AAChF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;IACnE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;CACpE,CAAC,CAAC;AAEH,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CACL,KAAK,YAAY,KAAK;QACtB,MAAM,IAAI,KAAK;QACd,KAA+B,CAAC,IAAI,KAAK,QAAQ,CACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,SAAiB;IAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3C,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CACjF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAkB;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;IAC5C,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,IACE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YACxC,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAC3B,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG;YAC3B,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC7B,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,QAAQ,CAAC,IAAI,CACX,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,MAAM,KAAK,CAAC;gBACpB,OAAO,KAAK,GAAG;gBACf,OAAO,KAAK,IAAI;gBAChB,OAAO,CAAC,MAAM,GAAG,GAAG;gBACpB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CACtB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CACpD;gBACD,sBAAsB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAC1E;YACD,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EACtE,CAAC;YACD,MAAM,IAAI,aAAa,CACrB,uBAAuB,EACvB,yCAAyC,SAAS,CAAC,IAAI,GAAG,CAC3D,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,aAAa,CACrB,uBAAuB,EACvB,QAAQ,KAAK,SAAS,CAAC,IAAI;gBACzB,CAAC,CAAC,yCAAyC,SAAS,CAAC,IAAI,GAAG;gBAC5D,CAAC,CAAC,2DAA2D,QAAQ,KAAK,SAAS,CAAC,IAAI,GAAG,CAC9F,CAAC;QACJ,CAAC;QACD,IAAI,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,aAAa,CACrB,uBAAuB,EACvB,uCAAuC,SAAS,CAAC,EAAE,GAAG,CACvD,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,KAAK,YAAY,KAAK;YACtB,MAAM,IAAI,KAAK;YACf,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAC7C,KAA+B,CAAC,IAAI,IAAI,EAAE,CAC5C,EACD,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,MAAc,EACd,aAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC7D,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAC5B,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,KAAK,aAAa,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC,WAAW,EAAE,CACjF,CAAC;IACF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CACrB,yBAAyB,EACzB,qCAAqC,SAAS,KAAK,aAAa,GAAG,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,cAAsB;IAEtB,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzD,MAAM,IAAI,aAAa,CACrB,yBAAyB,EACzB,+CAA+C,cAAc,GAAG,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAClB,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,aAAa,CACrB,yBAAyB,EACzB,8CAA8C,cAAc,GAAG,CAChE,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC;IACD,MAAM,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAY,EACZ,cAAsB;IAEtB,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC1D,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YACzD,MAAM,IAAI,aAAa,CACrB,yBAAyB,EACzB,+CAA+C,cAAc,GAAG,CACjE,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,aAAa,CACrB,yBAAyB,EACzB,8CAA8C,cAAc,GAAG,CAChE,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC;IACD,MAAM,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"filesystem-path-guard.js","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/filesystem-path-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,6BAA6B,EAC7B,qCAAqC,EACrC,+BAA+B,EAChC,MAAM,kFAAkF,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,yEAAyE,CAAC;AAC/G,OAAO,EAAE,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAC9G,OAAO,EAAE,sCAAsC,EAAE,MAAM,kEAAkE,CAAC;AAE1H,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AAEhF,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CACL,KAAK,YAAY,KAAK;QACtB,MAAM,IAAI,KAAK;QACd,KAA+B,CAAC,IAAI,KAAK,QAAQ,CACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,SAAiB;IAC7D,OAAO,wBAAwB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAkB;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;IAC5C,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,IACE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YACxC,sCAAsC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS;YACpE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EACtE,CAAC;YACD,MAAM,IAAI,aAAa,CACrB,uBAAuB,EACvB,yCAAyC,SAAS,CAAC,IAAI,GAAG,CAC3D,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,aAAa,CACrB,uBAAuB,EACvB,QAAQ,KAAK,SAAS,CAAC,IAAI;gBACzB,CAAC,CAAC,yCAAyC,SAAS,CAAC,IAAI,GAAG;gBAC5D,CAAC,CAAC,2DAA2D,QAAQ,KAAK,SAAS,CAAC,IAAI,GAAG,CAC9F,CAAC;QACJ,CAAC;QACD,IAAI,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,aAAa,CACrB,uBAAuB,EACvB,uCAAuC,SAAS,CAAC,EAAE,GAAG,CACvD,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,MAAc,EACd,aAAqB;IAErB,IAAI,CAAC;QACH,MAAM,6BAA6B,CACjC,MAAM,EACN,aAAa,EACb,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAC5B,YAAY,CACb,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,+BAA+B;YAChD,KAAK,CAAC,OAAO,KAAK,gBAAgB,EAClC,CAAC;YACD,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;YAC3C,MAAM,IAAI,aAAa,CACrB,yBAAyB,EACzB,qCAAqC,SAAS,KAAK,aAAa,GAAG,CACpE,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,cAAsB;IAEtB,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzD,MAAM,IAAI,aAAa,CACrB,yBAAyB,EACzB,+CAA+C,cAAc,GAAG,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAClB,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,aAAa,CACrB,yBAAyB,EACzB,8CAA8C,cAAc,GAAG,CAChE,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC;IACD,MAAM,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAY,EACZ,cAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,qCAAqC,CACzC,IAAI,EACJ,cAAc,EACd,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAC5B,YAAY,CACb,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,+BAA+B,EAAE,CAAC;YACrD,IAAI,KAAK,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;gBACvC,MAAM,IAAI,aAAa,CACrB,yBAAyB,EACzB,qCAAqC,KAAK,CAAC,YAAY,IAAI,EAAE,KAAK,KAAK,CAAC,aAAa,IAAI,EAAE,GAAG,CAC/F,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBACtC,MAAM,IAAI,aAAa,CACrB,yBAAyB,EACzB,+CAA+C,cAAc,GAAG,CACjE,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,aAAa,CACrB,yBAAyB,EACzB,8CAA8C,cAAc,GAAG,CAChE,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/scaffolding/adapters/node/installed-foundation-version.d.ts

@@ -1,2 +1,2 @@
-export declare function installedFoundationVersion(): Promise<string>;
+export { installedFoundationVersion } from "../../../package-version.js";
 //# sourceMappingURL=installed-foundation-version.d.ts.map

package/dist/scaffolding/adapters/node/installed-foundation-version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"installed-foundation-version.d.ts","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/installed-foundation-version.ts"],"names":[],"mappings":"AAGA,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,MAAM,CAAC,CAWlE"}
+{"version":3,"file":"installed-foundation-version.d.ts","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/installed-foundation-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/scaffolding/adapters/node/installed-foundation-version.js

@@ -1,10 +1,2 @@
-import { readFile } from "node:fs/promises";
-import { fileURLToPath } from "node:url";
-export async function installedFoundationVersion() {
-    const manifest = JSON.parse(await readFile(fileURLToPath(new URL("../../../../package.json", import.meta.url)), "utf8"));
-    if (typeof manifest.version !== "string") {
-        throw new Error("Installed Foundation package version is unavailable.");
-    }
-    return manifest.version;
-}
+export { installedFoundationVersion } from "../../../package-version.js";
 //# sourceMappingURL=installed-foundation-version.js.map

package/dist/scaffolding/adapters/node/installed-foundation-version.js.map

@@ -1 +1 @@
-{"version":3,"file":"installed-foundation-version.js","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/installed-foundation-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,MAAM,QAAQ,CACZ,aAAa,CAAC,IAAI,GAAG,CAAC,0BAA0B,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EACnE,MAAM,CACP,CACuB,CAAC;IAC3B,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"installed-foundation-version.js","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/installed-foundation-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/scaffolding/application/policies/legacy-scaffolding-repository-path.d.ts

@@ -0,0 +1,4 @@
+import type { PortableRepositoryPathProblem } from "../../../repository-mutation/application/model/repository-path.js";
+/** Preserves the published scaffolding v1 path contract exactly. */
+export declare function legacyScaffoldingRepositoryPathProblem(repositoryPath: string): PortableRepositoryPathProblem | undefined;
+//# sourceMappingURL=legacy-scaffolding-repository-path.d.ts.map

package/dist/scaffolding/application/policies/legacy-scaffolding-repository-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-scaffolding-repository-path.d.ts","sourceRoot":"","sources":["../../../../src/scaffolding/application/policies/legacy-scaffolding-repository-path.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,mEAAmE,CAAC;AAmBvH,oEAAoE;AACpE,wBAAgB,sCAAsC,CACpD,cAAc,EAAE,MAAM,GACrB,6BAA6B,GAAG,SAAS,CAsC3C"}

package/dist/scaffolding/application/policies/legacy-scaffolding-repository-path.js

@@ -0,0 +1,48 @@
+const WINDOWS_RESERVED_NAMES = new Set([
+    "AUX",
+    "CON",
+    "NUL",
+    "PRN",
+    ...Array.from({ length: 9 }, (_unused, index) => `COM${index + 1}`),
+    ...Array.from({ length: 9 }, (_unused, index) => `LPT${index + 1}`)
+]);
+function isPortableAbsolutePath(repositoryPath) {
+    return (repositoryPath.startsWith("/") ||
+        repositoryPath.startsWith("\\\\") ||
+        /^[A-Za-z]:[\\/]/u.test(repositoryPath));
+}
+/** Preserves the published scaffolding v1 path contract exactly. */
+export function legacyScaffoldingRepositoryPathProblem(repositoryPath) {
+    if (repositoryPath.length > 512) {
+        return "path-too-long";
+    }
+    if (isPortableAbsolutePath(repositoryPath)) {
+        return "absolute";
+    }
+    if (repositoryPath.includes("\\")) {
+        return "backslash";
+    }
+    const segments = repositoryPath.split("/");
+    for (const segment of segments) {
+        if (segment.length === 0) {
+            return "empty-segment";
+        }
+        if (segment === "." || segment === "..") {
+            return "invalid-segment";
+        }
+        if (segment.length > 255) {
+            return "segment-too-long";
+        }
+        if (segment.endsWith(".")) {
+            return "trailing-dot";
+        }
+        if (Array.from(segment).some((character) => (character.codePointAt(0) ?? 0) < 32)) {
+            return "control-character";
+        }
+        if (WINDOWS_RESERVED_NAMES.has((segment.split(".")[0] ?? "").toUpperCase())) {
+            return "reserved-name";
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=legacy-scaffolding-repository-path.js.map

package/dist/scaffolding/application/policies/legacy-scaffolding-repository-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-scaffolding-repository-path.js","sourceRoot":"","sources":["../../../../src/scaffolding/application/policies/legacy-scaffolding-repository-path.ts"],"names":[],"mappings":"AAEA,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;IACnE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;CACpE,CAAC,CAAC;AAEH,SAAS,sBAAsB,CAAC,cAAsB;IACpD,OAAO,CACL,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC;QAC9B,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC;QACjC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,sCAAsC,CACpD,cAAsB;IAEtB,IAAI,cAAc,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAChC,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,sBAAsB,CAAC,cAAc,CAAC,EAAE,CAAC;QAC3C,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACxC,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACzB,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,IACE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CACtB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CACpD,EACD,CAAC;YACD,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QACD,IACE,sBAAsB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,EACvE,CAAC;YACD,OAAO,eAAe,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/scaffolding/kernel/authority-journal-validation.d.ts

@@ -0,0 +1,4 @@
+import type { AuthorityScaffoldJournal } from "../contract/types.js";
+/** Validates all semantic bindings of a schema-valid v1 recovery journal. */
+export declare function assertAuthorityScaffoldJournal(journal: AuthorityScaffoldJournal): void;
+//# sourceMappingURL=authority-journal-validation.d.ts.map

package/dist/scaffolding/kernel/authority-journal-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-journal-validation.d.ts","sourceRoot":"","sources":["../../../src/scaffolding/kernel/authority-journal-validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAiCrE,6EAA6E;AAC7E,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,wBAAwB,GAChC,IAAI,CAGN"}

package/dist/scaffolding/kernel/authority-journal-validation.js

@@ -0,0 +1,24 @@
+import { ScaffoldError } from "../scaffold-error.js";
+import { assertAuthorityScaffoldPlanDigest } from "./plan-validation.js";
+function assertAuthorityJournalOperationBindings(journal) {
+    if (journal.operations.length !== journal.plan.operations.length) {
+        throw new ScaffoldError("SCAFFOLD_RECOVERY_REQUIRED", "Scaffolding recovery journal operation evidence does not match its Plan.");
+    }
+    const planOperations = new Map(journal.plan.operations.map((operation) => [operation.id, operation]));
+    const seen = new Set();
+    for (const operation of journal.operations) {
+        const planned = planOperations.get(operation.operationId);
+        if (planned === undefined ||
+            planned.path !== operation.path ||
+            seen.has(operation.operationId)) {
+            throw new ScaffoldError("SCAFFOLD_RECOVERY_REQUIRED", "Scaffolding recovery journal operation evidence is invalid.");
+        }
+        seen.add(operation.operationId);
+    }
+}
+/** Validates all semantic bindings of a schema-valid v1 recovery journal. */
+export function assertAuthorityScaffoldJournal(journal) {
+    assertAuthorityScaffoldPlanDigest(journal.plan);
+    assertAuthorityJournalOperationBindings(journal);
+}
+//# sourceMappingURL=authority-journal-validation.js.map

package/dist/scaffolding/kernel/authority-journal-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-journal-validation.js","sourceRoot":"","sources":["../../../src/scaffolding/kernel/authority-journal-validation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AAEzE,SAAS,uCAAuC,CAC9C,OAAiC;IAEjC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACjE,MAAM,IAAI,aAAa,CACrB,4BAA4B,EAC5B,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CACtE,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC1D,IACE,OAAO,KAAK,SAAS;YACrB,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI;YAC/B,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,EAC/B,CAAC;YACD,MAAM,IAAI,aAAa,CACrB,4BAA4B,EAC5B,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,8BAA8B,CAC5C,OAAiC;IAEjC,iCAAiC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,uCAAuC,CAAC,OAAO,CAAC,CAAC;AACnD,CAAC"}

package/dist/transaction-coordination/adapters/node/installed-foundation-build-identity.d.ts

@@ -0,0 +1,11 @@
+import type { Sha256Digest } from "../../../scaffolding/contract/types.js";
+/**
+ * Derives an identity from the installed package manifest, executable
+ * JavaScript, and every shipped schema/preset contract. Length-prefixed paths and bytes
+ * make the digest independent of directory enumeration and installation path.
+ */
+export declare function computeFoundationBuildIdentity(root: string, limits?: {
+    readonly maximumVisitedEntries?: number;
+}): Promise<Sha256Digest>;
+export declare function installedFoundationBuildIdentity(): Promise<Sha256Digest>;
+//# sourceMappingURL=installed-foundation-build-identity.d.ts.map

package/dist/transaction-coordination/adapters/node/installed-foundation-build-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installed-foundation-build-identity.d.ts","sourceRoot":"","sources":["../../../../src/transaction-coordination/adapters/node/installed-foundation-build-identity.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AA6H3E;;;;GAIG;AACH,wBAAsB,8BAA8B,CAClD,IAAI,EAAE,MAAM,EACZ,MAAM,GAAE;IAAE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;CAAO,GACvD,OAAO,CAAC,YAAY,CAAC,CA2BvB;AAID,wBAAgB,gCAAgC,IAAI,OAAO,CAAC,YAAY,CAAC,CAGxE"}

package/dist/transaction-coordination/adapters/node/installed-foundation-build-identity.js

@@ -0,0 +1,130 @@
+import { createHash } from "node:crypto";
+import { lstat, opendir } from "node:fs/promises";
+import { dirname, join, relative, sep } from "node:path";
+import { fileURLToPath } from "node:url";
+import { readBoundedRegularFile } from "../../../repository-mutation/adapters/node/node-bounded-regular-file.js";
+const maximumBuildFileBytes = 8 * 1024 * 1024;
+const maximumBuildFiles = 4096;
+const maximumBuildBytes = 64 * 1024 * 1024;
+const maximumVisitedBuildEntries = 16_384;
+const maximumBuildTreeDepth = 64;
+const packageRoot = dirname(fileURLToPath(new URL("../../../../package.json", import.meta.url)));
+function comparePortablePaths(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+function portableRelativePath(root, path) {
+    return relative(root, path).split(sep).join("/");
+}
+async function collectRegularFiles(root, directory, include, output, budget) {
+    if (budget.depth > maximumBuildTreeDepth) {
+        throw new Error("Installed Foundation build tree is too deep.");
+    }
+    const entries = [];
+    const handle = await opendir(directory);
+    try {
+        for await (const entry of handle) {
+            budget.visited += 1;
+            if (budget.visited > budget.maximumVisited) {
+                throw new Error("Installed Foundation build contains too many entries.");
+            }
+            entries.push(entry);
+        }
+    }
+    finally {
+        await handle.close().catch((error) => {
+            if (!(error instanceof Error &&
+                "code" in error &&
+                error.code === "ERR_DIR_CLOSED")) {
+                throw error;
+            }
+        });
+    }
+    entries.sort((left, right) => comparePortablePaths(left.name, right.name));
+    for (const entry of entries) {
+        const path = join(directory, entry.name);
+        if (entry.isDirectory()) {
+            budget.depth += 1;
+            try {
+                await collectRegularFiles(root, path, include, output, budget);
+            }
+            finally {
+                budget.depth -= 1;
+            }
+            continue;
+        }
+        if (!entry.isFile()) {
+            throw new Error(`Installed Foundation build contains a non-regular artifact: ${portableRelativePath(root, path)}.`);
+        }
+        if (include(path)) {
+            output.push(path);
+            if (output.length > maximumBuildFiles) {
+                throw new Error("Installed Foundation build contains too many artifacts.");
+            }
+        }
+    }
+}
+async function assertRealDirectory(path) {
+    const metadata = await lstat(path);
+    if (metadata.isSymbolicLink() || !metadata.isDirectory()) {
+        throw new Error(`Installed Foundation build directory is unsafe: ${path}.`);
+    }
+}
+async function buildIdentityFiles(root, maximumVisited) {
+    const files = [];
+    const budget = { depth: 0, maximumVisited, visited: 0 };
+    const distribution = join(root, "dist");
+    const schemas = join(root, "schemas");
+    const presets = join(root, "presets");
+    const manifest = join(root, "package.json");
+    await Promise.all([
+        assertRealDirectory(distribution),
+        assertRealDirectory(schemas),
+        assertRealDirectory(presets)
+    ]);
+    await collectRegularFiles(root, distribution, (path) => path.endsWith(".js"), files, budget);
+    await collectRegularFiles(root, schemas, () => true, files, budget);
+    await collectRegularFiles(root, presets, () => true, files, budget);
+    files.push(manifest);
+    return files.toSorted((left, right) => comparePortablePaths(portableRelativePath(root, left), portableRelativePath(root, right)));
+}
+function hashLength(hash, length) {
+    const encoded = Buffer.allocUnsafe(8);
+    encoded.writeBigUInt64BE(BigInt(length));
+    hash.update(encoded);
+}
+/**
+ * Derives an identity from the installed package manifest, executable
+ * JavaScript, and every shipped schema/preset contract. Length-prefixed paths and bytes
+ * make the digest independent of directory enumeration and installation path.
+ */
+export async function computeFoundationBuildIdentity(root, limits = {}) {
+    const hash = createHash("sha256");
+    let totalBytes = 0;
+    const maximumVisitedEntries = limits.maximumVisitedEntries ?? maximumVisitedBuildEntries;
+    if (!Number.isSafeInteger(maximumVisitedEntries) || maximumVisitedEntries <= 0) {
+        throw new TypeError("maximumVisitedEntries must be a positive safe integer.");
+    }
+    for (const path of await buildIdentityFiles(root, maximumVisitedEntries)) {
+        const relativePath = portableRelativePath(root, path);
+        const record = await readBoundedRegularFile(path, maximumBuildFileBytes);
+        if (record.outcome !== "read") {
+            throw new Error(`Installed Foundation build artifact is not a stable bounded regular file: ${relativePath}.`);
+        }
+        totalBytes += record.bytes.byteLength;
+        if (totalBytes > maximumBuildBytes) {
+            throw new Error("Installed Foundation build artifacts exceed the byte limit.");
+        }
+        const pathBytes = Buffer.from(relativePath, "utf8");
+        hashLength(hash, pathBytes.byteLength);
+        hash.update(pathBytes);
+        hashLength(hash, record.bytes.byteLength);
+        hash.update(record.bytes);
+    }
+    return `sha256:${hash.digest("hex")}`;
+}
+let installedBuildIdentity;
+export function installedFoundationBuildIdentity() {
+    installedBuildIdentity ??= computeFoundationBuildIdentity(packageRoot);
+    return installedBuildIdentity;
+}
+//# sourceMappingURL=installed-foundation-build-identity.js.map

package/dist/transaction-coordination/adapters/node/installed-foundation-build-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installed-foundation-build-identity.js","sourceRoot":"","sources":["../../../../src/transaction-coordination/adapters/node/installed-foundation-build-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,yEAAyE,CAAC;AAEjH,MAAM,qBAAqB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9C,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,WAAW,GAAG,OAAO,CACzB,aAAa,CAAC,IAAI,GAAG,CAAC,0BAA0B,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CACpE,CAAC;AAEF,SAAS,oBAAoB,CAAC,IAAY,EAAE,KAAa;IACvD,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,IAAY;IACtD,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,IAAY,EACZ,SAAiB,EACjB,OAAkC,EAClC,MAAgB,EAChB,MAAkE;IAElE,IAAI,MAAM,CAAC,KAAK,GAAG,qBAAqB,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;YACpB,IAAI,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC5C,IACE,CAAC,CACC,KAAK,YAAY,KAAK;gBACtB,MAAM,IAAI,KAAK;gBACd,KAA+B,CAAC,IAAI,KAAK,gBAAgB,CAC3D,EACD,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACjE,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;YACpB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,+DAA+D,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CACnG,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,IAAI,MAAM,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC7C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,GAAG,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,IAAY,EACZ,cAAsB;IAEtB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACxD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,mBAAmB,CAAC,YAAY,CAAC;QACjC,mBAAmB,CAAC,OAAO,CAAC;QAC5B,mBAAmB,CAAC,OAAO,CAAC;KAC7B,CAAC,CAAC;IACH,MAAM,mBAAmB,CACvB,IAAI,EACJ,YAAY,EACZ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC9B,KAAK,EACL,MAAM,CACP,CAAC;IACF,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACpC,oBAAoB,CAClB,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,EAChC,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,CAClC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAmC,EAAE,MAAc;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACtC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,IAAY,EACZ,MAAM,GAAgD,EAAE;IAExD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,qBAAqB,GACzB,MAAM,CAAC,qBAAqB,IAAI,0BAA0B,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,qBAAqB,CAAC,IAAI,qBAAqB,IAAI,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;IAChF,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,kBAAkB,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACzE,MAAM,YAAY,GAAG,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,6EAA6E,YAAY,GAAG,CAC7F,CAAC;QACJ,CAAC;QACD,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;QACtC,IAAI,UAAU,GAAG,iBAAiB,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACpD,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvB,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,IAAI,sBAAyD,CAAC;AAE9D,MAAM,UAAU,gCAAgC;IAC9C,sBAAsB,KAAK,8BAA8B,CAAC,WAAW,CAAC,CAAC;IACvE,OAAO,sBAAsB,CAAC;AAChC,CAAC"}

package/dist/transaction-coordination/adapters/node/node-foundation-operation-lock.d.ts

@@ -0,0 +1,7 @@
+import type { FoundationOperationLock, FoundationOperationReleaseOptions } from "../../application/ports/foundation-operation-lock.js";
+export declare class NodeFoundationOperationLock implements FoundationOperationLock {
+    #private;
+    constructor(consumerRoot: string);
+    acquire(): Promise<(options?: FoundationOperationReleaseOptions) => Promise<void>>;
+}
+//# sourceMappingURL=node-foundation-operation-lock.d.ts.map

package/dist/transaction-coordination/adapters/node/node-foundation-operation-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-foundation-operation-lock.d.ts","sourceRoot":"","sources":["../../../../src/transaction-coordination/adapters/node/node-foundation-operation-lock.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,uBAAuB,EACvB,iCAAiC,EAClC,MAAM,sDAAsD,CAAC;AA2X9D,qBAAa,2BAA4B,YAAW,uBAAuB;;IAGzE,YAAY,YAAY,EAAE,MAAM,EAE/B;IAEK,OAAO,IAAI,OAAO,CACtB,CAAC,OAAO,CAAC,EAAE,iCAAiC,KAAK,OAAO,CAAC,IAAI,CAAC,CAC/D,CAqEA;CACF"}