@agent-teams/engineering-foundation 0.17.0 → 0.18.0

package/dist/repository-mutation/adapters/node/node-known-file-recovery-preimage-captured-cleanup.js

@@ -0,0 +1,72 @@
+import { lstat, rmdir, unlink } from "node:fs/promises";
+import { basename, join } from "node:path";
+import { deserializeKnownFileIdentity } from "../../application/model/known-file-transaction-journal.js";
+import { syncDirectoryStrictly } from "./node-directory-durability.js";
+import { knownFileErrorCode, KnownFileTransactionError, matchesKnownFileImage, sameKnownFileIdentity } from "./node-known-file-transaction-filesystem.js";
+import { observeRecoveryFile } from "./node-known-file-recovery-filesystem.js";
+function matchesRollbackCopy(observed, expected, preimage) {
+    return observed.state === "file" && observed.identity !== undefined &&
+        sameKnownFileIdentity(observed.identity, expected) &&
+        matchesKnownFileImage(observed, preimage);
+}
+export async function cleanupRestoredCapturedPreimage(options) {
+    const matched = options.journalOperation.matchedPreimage;
+    if (matched === undefined) {
+        throw new KnownFileTransactionError("KNOWN_FILE_JOURNAL_INVALID", `Restored replacement lacks exact preimage authority: ${options.operation.path}.`);
+    }
+    const preimage = options.operation.precondition.acceptedPreimages[matched];
+    const destinationObserved = await observeRecoveryFile(options.destination, options.recoveryMaximumBytes);
+    if (!matchesKnownFileImage(destinationObserved, preimage)) {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Restored destination changed during cleanup: ${options.operation.path}.`);
+    }
+    const rollbackPath = join(options.parent, `.${basename(options.operation.path)}.agent-teams.rollback.${options.operationIndex}.tmp`);
+    if (options.journalOperation.rollbackTemporaryIdentity !== undefined) {
+        const rollbackObserved = await observeRecoveryFile(rollbackPath, preimage.size);
+        if (rollbackObserved.state === "file") {
+            const expectedRollback = deserializeKnownFileIdentity(options.journalOperation.rollbackTemporaryIdentity);
+            if (!matchesRollbackCopy(rollbackObserved, expectedRollback, preimage)) {
+                throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Rollback copy changed during cleanup: ${options.operation.path}.`);
+            }
+            await unlink(rollbackPath);
+            await syncDirectoryStrictly(options.parent);
+        }
+    }
+    const directory = await lstat(options.paths.directory, { bigint: true }).catch((error) => {
+        if (knownFileErrorCode(error) === "ENOENT") {
+            return null;
+        }
+        throw error;
+    });
+    if (directory === null) {
+        return;
+    }
+    const expectedDirectory = deserializeKnownFileIdentity(options.journalOperation.captureDirectoryIdentity);
+    if (!directory.isDirectory() || directory.isSymbolicLink() ||
+        directory.birthtimeNs !== expectedDirectory.birthtimeNs ||
+        directory.dev !== expectedDirectory.dev || directory.ino !== expectedDirectory.ino) {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Rollback capture directory changed during cleanup: ${options.operation.path}.`);
+    }
+    const capturedObserved = await observeRecoveryFile(options.paths.captured, options.recoveryMaximumBytes);
+    if (capturedObserved.state === "file") {
+        const expectedCaptured = options.journalOperation.capturedPreimageIdentity;
+        if (expectedCaptured === undefined || capturedObserved.identity === undefined ||
+            !sameKnownFileIdentity(capturedObserved.identity, deserializeKnownFileIdentity(expectedCaptured)) ||
+            !matchesKnownFileImage(capturedObserved, preimage)) {
+            throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Rollback capture changed during cleanup: ${options.operation.path}.`);
+        }
+        await unlink(options.paths.captured);
+        await syncDirectoryStrictly(options.paths.directory);
+        await options.faultInjector?.({
+            phase: "after-rollback-capture-unlinked",
+            operationIndex: options.operationIndex,
+            path: options.operation.path
+        });
+    }
+    const retiredObserved = await observeRecoveryFile(options.paths.retired, options.recoveryMaximumBytes);
+    if (retiredObserved.state !== "absent") {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Rollback capture retains foreign retired evidence: ${options.operation.path}.`);
+    }
+    await rmdir(options.paths.directory);
+    await syncDirectoryStrictly(options.parent);
+}
+//# sourceMappingURL=node-known-file-recovery-preimage-captured-cleanup.js.map

package/dist/repository-mutation/adapters/node/node-known-file-recovery-preimage-captured-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-known-file-recovery-preimage-captured-cleanup.js","sourceRoot":"","sources":["../../../../src/repository-mutation/adapters/node/node-known-file-recovery-preimage-captured-cleanup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAI3C,OAAO,EAAE,4BAA4B,EAAE,MAAM,2DAA2D,CAAC;AACzG,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAG/E,SAAS,mBAAmB,CAC1B,QAAyD,EACzD,QAAyD,EACzD,QAAuE;IAEvE,OAAO,QAAQ,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;QACjE,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAClD,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,OAuBrD;IACC,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,eAAe,CAAC;IACzD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,yBAAyB,CACjC,4BAA4B,EAC5B,wDAAwD,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAE,CAAC;IAC5E,MAAM,mBAAmB,GAAG,MAAM,mBAAmB,CACnD,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,oBAAoB,CAC7B,CAAC;IACF,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,gDAAgD,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CAC1E,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CACvB,OAAO,CAAC,MAAM,EACd,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,yBAAyB,OAAO,CAAC,cAAc,MAAM,CAC1F,CAAC;IACF,IAAI,OAAO,CAAC,gBAAgB,CAAC,yBAAyB,KAAK,SAAS,EAAE,CAAC;QACrE,MAAM,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChF,IAAI,gBAAgB,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YACtC,MAAM,gBAAgB,GAAG,4BAA4B,CACnD,OAAO,CAAC,gBAAgB,CAAC,yBAAyB,CACnD,CAAC;YACF,IAAI,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,yCAAyC,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CACnE,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YAC3B,MAAM,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAC5E,CAAC,KAAc,EAAE,EAAE;QACjB,IAAI,kBAAkB,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;QAC1D,MAAM,KAAK,CAAC;IACd,CAAC,CACF,CAAC;IACF,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IACjC,MAAM,iBAAiB,GAAG,4BAA4B,CACpD,OAAO,CAAC,gBAAgB,CAAC,wBAAwB,CAClD,CAAC;IACF,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,cAAc,EAAE;QACxD,SAAS,CAAC,WAAW,KAAK,iBAAiB,CAAC,WAAW;QACvD,SAAS,CAAC,GAAG,KAAK,iBAAiB,CAAC,GAAG,IAAI,SAAS,CAAC,GAAG,KAAK,iBAAiB,CAAC,GAAG,EAAE,CAAC;QACrF,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,sDAAsD,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,mBAAmB,CAChD,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CAAC,oBAAoB,CAC7B,CAAC;IACF,IAAI,gBAAgB,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QACtC,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,wBAAwB,CAAC;QAC3E,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,CAAC,QAAQ,KAAK,SAAS;YAC3E,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,4BAA4B,CAAC,gBAAgB,CAAC,CAAC;YACjG,CAAC,qBAAqB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,4CAA4C,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CACtE,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;YAC5B,KAAK,EAAE,iCAAiC;YACxC,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,mBAAmB,CAC/C,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,OAAO,CAAC,oBAAoB,CAC7B,CAAC;IACF,IAAI,eAAe,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,sDAAsD,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC9C,CAAC"}

package/dist/repository-mutation/adapters/node/node-known-file-recovery-preimage-captured.d.ts

@@ -0,0 +1,31 @@
+import type { KnownFileTransactionPlanV1 } from "../../application/model/known-file-transaction.js";
+import type { KnownFileTransactionJournalV1 } from "../../application/model/known-file-transaction-journal.js";
+import { type KnownFileRecoveryFaultInjector, type StoredRecoveryJournal } from "./node-known-file-recovery-state.js";
+import type { NodeKnownFileTransactionJournalStore } from "./node-known-file-transaction-journal-store.js";
+interface CapturedPreimageOptions {
+    readonly faultInjector?: KnownFileRecoveryFaultInjector;
+    readonly journalOperation: KnownFileTransactionJournalV1["operations"][number] & {
+        readonly captureDirectoryIdentity: NonNullable<Extract<KnownFileTransactionJournalV1["operations"][number], {
+            readonly temporaryIdentity: unknown;
+        }>["captureDirectoryIdentity"]>;
+        readonly temporaryIdentity: NonNullable<Extract<KnownFileTransactionJournalV1["operations"][number], {
+            readonly temporaryIdentity: unknown;
+        }>["temporaryIdentity"]>;
+        readonly capturedPreimageIdentity?: NonNullable<Extract<KnownFileTransactionJournalV1["operations"][number], {
+            readonly temporaryIdentity: unknown;
+        }>["capturedPreimageIdentity"]>;
+    };
+    readonly operation: KnownFileTransactionPlanV1["operations"][number] & {
+        readonly precondition: Extract<KnownFileTransactionPlanV1["operations"][number]["precondition"], {
+            readonly state: "known-file";
+        }>;
+    };
+    readonly operationIndex: number;
+    readonly planDigest: string;
+    readonly root: string;
+    readonly store: NodeKnownFileTransactionJournalStore;
+    readonly stored: StoredRecoveryJournal;
+}
+export declare function restoreCapturedPreimage(options: CapturedPreimageOptions): Promise<void>;
+export {};
+//# sourceMappingURL=node-known-file-recovery-preimage-captured.d.ts.map

package/dist/repository-mutation/adapters/node/node-known-file-recovery-preimage-captured.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-known-file-recovery-preimage-captured.d.ts","sourceRoot":"","sources":["../../../../src/repository-mutation/adapters/node/node-known-file-recovery-preimage-captured.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAoB,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AACtH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,2DAA2D,CAAC;AAc/G,OAAO,EACL,KAAK,8BAA8B,EAGnC,KAAK,qBAAqB,EAC3B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AAM3G,UAAU,uBAAuB;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,8BAA8B,CAAC;IACxD,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,GAAG;QAC/E,QAAQ,CAAC,wBAAwB,EAAE,WAAW,CAAC,OAAO,CACpD,6BAA6B,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,EACnD;YAAE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAA;SAAE,CACxC,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC/B,QAAQ,CAAC,iBAAiB,EAAE,WAAW,CAAC,OAAO,CAC7C,6BAA6B,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,EACnD;YAAE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAA;SAAE,CACxC,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACxB,QAAQ,CAAC,wBAAwB,CAAC,EAAE,WAAW,CAAC,OAAO,CACrD,6BAA6B,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,EACnD;YAAE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAA;SAAE,CACxC,CAAC,0BAA0B,CAAC,CAAC,CAAC;KAChC,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,GAAG;QACrE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAC5B,0BAA0B,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,EAChE;YAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;SAAE,CACjC,CAAC;KACH,CAAC;IACF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,oCAAoC,CAAC;IACrD,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;CACxC;AAsSD,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgF7F"}

package/dist/repository-mutation/adapters/node/node-known-file-recovery-preimage-captured.js

@@ -0,0 +1,254 @@
+import { link, lstat, rmdir, unlink } from "node:fs/promises";
+import { basename, dirname, join } from "node:path";
+import { deserializeKnownFileIdentity } from "../../application/model/known-file-transaction-journal.js";
+import { readBoundedRegularFile } from "./node-bounded-regular-file.js";
+import { syncDirectoryStrictly } from "./node-directory-durability.js";
+import { knownFileErrorCode, KnownFileTransactionError, matchesKnownFileImage, maximumKnownFileEvidenceBytes, sameKnownFileIdentity } from "./node-known-file-transaction-filesystem.js";
+import { knownFileCapturePaths, observeRecoveryFile } from "./node-known-file-recovery-filesystem.js";
+import { cleanupRestoredCapturedPreimage } from "./node-known-file-recovery-preimage-captured-cleanup.js";
+import { retireJournalBoundPath } from "./node-known-file-recovery-retirement.js";
+import { persistRecoveryJournal, replaceRecoveryOperation } from "./node-known-file-recovery-state.js";
+async function assertCaptureDirectory(options, paths) {
+    const expectedDirectory = deserializeKnownFileIdentity(options.journalOperation.captureDirectoryIdentity);
+    const directory = await lstat(paths.directory, { bigint: true }).catch((error) => {
+        if (knownFileErrorCode(error) === "ENOENT") {
+            return null;
+        }
+        throw error;
+    });
+    if (directory === null || !directory.isDirectory() || directory.isSymbolicLink() ||
+        directory.birthtimeNs !== expectedDirectory.birthtimeNs ||
+        directory.dev !== expectedDirectory.dev || directory.ino !== expectedDirectory.ino) {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Replacement capture directory changed: ${options.operation.path}.`);
+    }
+}
+async function restoreUnboundCapturedPreimage(options, context, captured, retired) {
+    if (retired.state !== "absent" || captured.state !== "absent") {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Replacement capture contains bytes without durable identity authority: ${options.operation.path}.`);
+    }
+    const stableDestination = await readBoundedRegularFile(context.destination, context.preimage.size);
+    if (stableDestination.outcome !== "read" || stableDestination.linkCount !== 1n ||
+        !matchesKnownFileImage({
+            state: "file",
+            bytes: stableDestination.bytes,
+            identity: stableDestination.identity,
+            mode: stableDestination.mode & 0o777
+        }, context.preimage)) {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Uncaptured replacement preimage is not an exclusive exact file: ${options.operation.path}.`);
+    }
+    const restoredOperation = Object.freeze({
+        ...options.journalOperation,
+        state: "rollback-restored"
+    });
+    await persistRecoveryJournal(options.store, options.stored, replaceRecoveryOperation(options.stored.envelope.journal, options.operationIndex, restoredOperation));
+    await rmdir(context.paths.directory);
+    await syncDirectoryStrictly(context.parent);
+}
+function capturedRollbackAuthority(options, context, captured, rollbackObserved, rollbackIdentity) {
+    const capturedIdentity = deserializeKnownFileIdentity(options.journalOperation.capturedPreimageIdentity);
+    if (captured.state !== "file" || captured.identity === undefined ||
+        !sameKnownFileIdentity(captured.identity, capturedIdentity)) {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Captured replacement identity changed: ${options.operation.path}.`);
+    }
+    const captureBytesStable = matchesKnownFileImage(captured, context.preimage);
+    if (rollbackIdentity !== undefined &&
+        (rollbackObserved.state !== "file" || rollbackObserved.identity === undefined ||
+            !sameKnownFileIdentity(rollbackObserved.identity, rollbackIdentity) ||
+            !matchesKnownFileImage(rollbackObserved, context.preimage))) {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Rollback preimage copy changed: ${options.operation.path}.`);
+    }
+    if (rollbackIdentity === undefined && !captureBytesStable) {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Captured preimage changed before a stable rollback copy existed: ${options.operation.path}.`);
+    }
+    return {
+        captureBytesStable,
+        capturedIdentity,
+        rollbackSource: rollbackIdentity === undefined ? context.paths.captured : join(context.parent, `.${basename(options.operation.path)}.agent-teams.rollback.${options.operationIndex}.tmp`),
+        rollbackSourceIdentity: rollbackIdentity ?? capturedIdentity
+    };
+}
+async function reconcileInterruptedRetiredCapture(options, context, retired, destinationBefore, capturedIdentity) {
+    if (retired.state !== "file") {
+        return;
+    }
+    if (retired.identity !== undefined && sameKnownFileIdentity(retired.identity, capturedIdentity)) {
+        await unlink(context.paths.retired);
+        await syncDirectoryStrictly(context.paths.directory);
+    }
+    else {
+        if (destinationBefore.state === "absent") {
+            await link(context.paths.retired, context.destination);
+            await syncDirectoryStrictly(context.parent);
+            await unlink(context.paths.retired);
+            await syncDirectoryStrictly(context.paths.directory);
+        }
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Foreign destination was preserved from an interrupted capture: ${options.operation.path}.`);
+    }
+}
+async function acceptForeignExactPreimage(options, context, observed, recovery) {
+    if (!matchesKnownFileImage(observed, context.preimage) ||
+        (observed.identity !== undefined &&
+            sameKnownFileIdentity(observed.identity, recovery.rollbackSourceIdentity))) {
+        return false;
+    }
+    const restoredJournalOperation = Object.freeze({
+        ...options.journalOperation,
+        state: "rollback-restored"
+    });
+    await persistRecoveryJournal(options.store, options.stored, Object.freeze({
+        ...options.stored.envelope.journal,
+        operations: Object.freeze(options.stored.envelope.journal.operations.with(options.operationIndex, restoredJournalOperation))
+    }));
+    if (recovery.rollbackIdentity !== undefined) {
+        await unlink(join(context.parent, `.${basename(options.operation.path)}.agent-teams.rollback.${options.operationIndex}.tmp`));
+    }
+    if (recovery.captureBytesStable) {
+        await unlink(context.paths.captured);
+    }
+    await syncDirectoryStrictly(context.paths.directory);
+    if (recovery.captureBytesStable) {
+        await options.faultInjector?.({
+            phase: "after-rollback-capture-unlinked",
+            operationIndex: options.operationIndex,
+            path: options.operation.path
+        });
+    }
+    if (recovery.captureBytesStable) {
+        await rmdir(context.paths.directory);
+    }
+    await syncDirectoryStrictly(context.parent);
+    if (!recovery.captureBytesStable) {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Edited retired inode was preserved after exact rollback: ${options.operation.path}.`);
+    }
+    return true;
+}
+async function retireCapturedPostimage(options, observed) {
+    if (observed.state !== "file") {
+        return observed;
+    }
+    const temporaryIdentity = deserializeKnownFileIdentity(options.journalOperation.temporaryIdentity);
+    if (!matchesKnownFileImage(observed, options.operation.postimage) ||
+        observed.identity === undefined ||
+        !sameKnownFileIdentity(observed.identity, temporaryIdentity)) {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Destination changed before captured-preimage rollback: ${options.operation.path}.`);
+    }
+    await retireJournalBoundPath({
+        expectedIdentity: temporaryIdentity,
+        ...(options.faultInjector === undefined ? {} : { faultInjector: options.faultInjector }),
+        kind: "destination",
+        operationIndex: options.operationIndex,
+        root: options.root,
+        store: options.store,
+        stored: options.stored
+    });
+    await options.faultInjector?.({
+        phase: "after-destination-retired",
+        operationIndex: options.operationIndex,
+        path: options.operation.path
+    });
+    return { state: "absent" };
+}
+async function completeCapturedRollback(options, context, observed, recovery) {
+    if (observed.state === "absent") {
+        await link(recovery.rollbackSource, context.destination).catch((error) => {
+            throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Destination appeared during captured-preimage rollback: ${options.operation.path}.`, { cause: error });
+        });
+        await options.faultInjector?.({
+            phase: "after-rollback-linked",
+            operationIndex: options.operationIndex,
+            path: options.operation.path
+        });
+        await syncDirectoryStrictly(context.parent);
+    }
+    const restored = await observeRecoveryFile(context.destination, context.preimage.size);
+    if (!matchesKnownFileImage(restored, context.preimage) || restored.identity === undefined ||
+        !sameKnownFileIdentity(restored.identity, recovery.rollbackSourceIdentity)) {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_FAILED", `Captured preimage restoration failed: ${options.operation.path}.`);
+    }
+    await persistRecoveryJournal(options.store, options.stored, Object.freeze({
+        ...options.stored.envelope.journal,
+        operations: Object.freeze(options.stored.envelope.journal.operations.with(options.operationIndex, Object.freeze({ ...options.journalOperation, state: "rollback-restored" })))
+    }));
+    if (recovery.rollbackIdentity !== undefined) {
+        await unlink(recovery.rollbackSource);
+    }
+    if (recovery.captureBytesStable) {
+        await unlink(context.paths.captured);
+    }
+    await syncDirectoryStrictly(context.paths.directory);
+    if (recovery.captureBytesStable) {
+        await options.faultInjector?.({
+            phase: "after-rollback-capture-unlinked",
+            operationIndex: options.operationIndex,
+            path: options.operation.path
+        });
+    }
+    if (recovery.captureBytesStable) {
+        await rmdir(context.paths.directory);
+    }
+    await syncDirectoryStrictly(context.parent);
+    if (!recovery.captureBytesStable) {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Edited retired inode was preserved after exact rollback: ${options.operation.path}.`);
+    }
+}
+export async function restoreCapturedPreimage(options) {
+    const destination = join(options.root, ...options.operation.path.split("/"));
+    const parent = dirname(destination);
+    const paths = knownFileCapturePaths({
+        operationIndex: options.operationIndex,
+        operationPath: options.operation.path,
+        parent,
+        planDigest: options.planDigest
+    });
+    const recoveryMaximumBytes = Math.max(maximumKnownFileEvidenceBytes(options.operation), 8 * 1024 * 1024);
+    if (options.journalOperation.state === "rollback-restored") {
+        await cleanupRestoredCapturedPreimage({
+            ...(options.faultInjector === undefined ? {} : { faultInjector: options.faultInjector }),
+            destination,
+            journalOperation: options.journalOperation,
+            operation: options.operation,
+            operationIndex: options.operationIndex,
+            parent,
+            paths,
+            recoveryMaximumBytes
+        });
+        return;
+    }
+    await assertCaptureDirectory(options, paths);
+    const captured = await observeRecoveryFile(paths.captured, recoveryMaximumBytes);
+    const destinationBefore = await observeRecoveryFile(destination, recoveryMaximumBytes);
+    const retired = await observeRecoveryFile(paths.retired, recoveryMaximumBytes);
+    const matched = options.journalOperation.matchedPreimage;
+    if (matched === undefined) {
+        throw new KnownFileTransactionError("KNOWN_FILE_JOURNAL_INVALID", `Captured replacement lacks its exact preimage binding: ${options.operation.path}.`);
+    }
+    const context = {
+        destination,
+        parent,
+        paths,
+        preimage: options.operation.precondition.acceptedPreimages[matched],
+        recoveryMaximumBytes
+    };
+    if (options.journalOperation.capturedPreimageIdentity === undefined) {
+        await restoreUnboundCapturedPreimage(options, context, captured, retired);
+        return;
+    }
+    const rollbackPath = join(parent, `.${basename(options.operation.path)}.agent-teams.rollback.${options.operationIndex}.tmp`);
+    const rollbackIdentity = options.journalOperation.rollbackTemporaryIdentity === undefined
+        ? undefined
+        : deserializeKnownFileIdentity(options.journalOperation.rollbackTemporaryIdentity);
+    const rollbackObserved = rollbackIdentity === undefined
+        ? { state: "absent" }
+        : await observeRecoveryFile(rollbackPath, context.preimage.size);
+    const authority = capturedRollbackAuthority(options, context, captured, rollbackObserved, rollbackIdentity);
+    await reconcileInterruptedRetiredCapture(options, context, retired, destinationBefore, authority.capturedIdentity);
+    let observed = await observeRecoveryFile(destination, recoveryMaximumBytes);
+    if (await acceptForeignExactPreimage(options, context, observed, { ...authority, rollbackIdentity })) {
+        return;
+    }
+    if (!matchesKnownFileImage(observed, context.preimage)) {
+        observed = await retireCapturedPostimage(options, observed);
+    }
+    await completeCapturedRollback(options, context, observed, { ...authority, rollbackIdentity });
+}
+//# sourceMappingURL=node-known-file-recovery-preimage-captured.js.map

package/dist/repository-mutation/adapters/node/node-known-file-recovery-preimage-captured.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-known-file-recovery-preimage-captured.js","sourceRoot":"","sources":["../../../../src/repository-mutation/adapters/node/node-known-file-recovery-preimage-captured.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIpD,OAAO,EAAE,4BAA4B,EAAE,MAAM,2DAA2D,CAAC;AACzG,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,6BAA6B,EAC7B,qBAAqB,EACtB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AACtG,OAAO,EAAE,+BAA+B,EAAE,MAAM,yDAAyD,CAAC;AAC1G,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAEL,sBAAsB,EACtB,wBAAwB,EAEzB,MAAM,qCAAqC,CAAC;AA4C7C,KAAK,UAAU,sBAAsB,CACnC,OAAgC,EAChC,KAAoB;IAEpB,MAAM,iBAAiB,GAAG,4BAA4B,CACpD,OAAO,CAAC,gBAAgB,CAAC,wBAAwB,CAClD,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACxF,IAAI,kBAAkB,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;QAC1D,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,cAAc,EAAE;QAC9E,SAAS,CAAC,WAAW,KAAK,iBAAiB,CAAC,WAAW;QACvD,SAAS,CAAC,GAAG,KAAK,iBAAiB,CAAC,GAAG,IAAI,SAAS,CAAC,GAAG,KAAK,iBAAiB,CAAC,GAAG,EAAE,CAAC;QACrF,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,0CAA0C,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,OAAgC,EAChC,OAAgC,EAChC,QAA6B,EAC7B,OAA4B;IAE5B,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9D,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,0EAA0E,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CACpG,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAAG,MAAM,sBAAsB,CACpD,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,QAAQ,CAAC,IAAI,CACtB,CAAC;IACF,IAAI,iBAAiB,CAAC,OAAO,KAAK,MAAM,IAAI,iBAAiB,CAAC,SAAS,KAAK,EAAE;QAC5E,CAAC,qBAAqB,CAAC;YACrB,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,iBAAiB,CAAC,KAAK;YAC9B,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;YACpC,IAAI,EAAE,iBAAiB,CAAC,IAAI,GAAG,KAAK;SACrC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,mEAAmE,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CAC7F,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;QACtC,GAAG,OAAO,CAAC,gBAAgB;QAC3B,KAAK,EAAE,mBAA4B;KACpC,CAAC,CAAC;IACH,MAAM,sBAAsB,CAC1B,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,MAAM,EACd,wBAAwB,CACtB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAC/B,OAAO,CAAC,cAAc,EACtB,iBAAiB,CAClB,CACF,CAAC;IACF,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,yBAAyB,CAChC,OAAgC,EAChC,OAAgC,EAChC,QAA6B,EAC7B,gBAAqC,EACrC,gBAA8C;IAO9C,MAAM,gBAAgB,GAAG,4BAA4B,CACnD,OAAO,CAAC,gBAAgB,CAAC,wBAAyB,CACnD,CAAC;IACF,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAC9D,CAAC,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,0CAA0C,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7E,IAAI,gBAAgB,KAAK,SAAS;QAChC,CAAC,gBAAgB,CAAC,KAAK,KAAK,MAAM,IAAI,gBAAgB,CAAC,QAAQ,KAAK,SAAS;YAC3E,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;YACnE,CAAC,qBAAqB,CAAC,gBAAgB,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,mCAAmC,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,KAAK,SAAS,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1D,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,oEAAoE,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO;QACL,kBAAkB;QAClB,gBAAgB;QAChB,cAAc,EAAE,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAC5E,OAAO,CAAC,MAAM,EACd,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,yBAAyB,OAAO,CAAC,cAAc,MAAM,CAC1F;QACD,sBAAsB,EAAE,gBAAgB,IAAI,gBAAgB;KAC7D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kCAAkC,CAC/C,OAAgC,EAChC,OAAgC,EAChC,OAA4B,EAC5B,iBAAsC,EACtC,gBAAkC;IAElC,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IACvC,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAChG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,IAAI,iBAAiB,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;YACvD,MAAM,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpC,MAAM,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,kEAAkE,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CAC5F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,OAAgC,EAChC,OAAgC,EAChC,QAA6B,EAC7B,QAIC;IAED,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC;QACpD,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;YAC9B,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7C,GAAG,OAAO,CAAC,gBAAgB;QAC3B,KAAK,EAAE,mBAA4B;KACpC,CAAC,CAAC;IACH,MAAM,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACxE,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO;QAClC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CACvE,OAAO,CAAC,cAAc,EACtB,wBAAwB,CACzB,CAAC;KACH,CAAC,CAAC,CAAC;IACJ,IAAI,QAAQ,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,MAAM,CAAC,IAAI,CACf,OAAO,CAAC,MAAM,EACd,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,yBAAyB,OAAO,CAAC,cAAc,MAAM,CAC1F,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAAA,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAAA,CAAC;IACxE,MAAM,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAChC,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;YAC5B,KAAK,EAAE,iCAAiC;YACxC,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAAA,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAAA,CAAC;IACxE,MAAM,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QACjC,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,4DAA4D,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CACtF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,OAAgC,EAChC,QAA6B;IAE7B,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAAA,OAAO,QAAQ,CAAC;IAAA,CAAC;IACjD,MAAM,iBAAiB,GAAG,4BAA4B,CAAC,OAAO,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;IACnG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;QAC/D,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAC/B,CAAC,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,0DAA0D,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CACpF,CAAC;IACJ,CAAC;IACD,MAAM,sBAAsB,CAAC;QAC3B,gBAAgB,EAAE,iBAAiB;QACnC,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;QACxF,IAAI,EAAE,aAAa;QACnB,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;QAC5B,KAAK,EAAE,2BAA2B;QAClC,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI;KAC7B,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,OAAgC,EAChC,OAAgC,EAChC,QAA6B,EAC7B,QAKC;IAED,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAChF,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,2DAA2D,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,EACpF,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;YAC5B,KAAK,EAAE,uBAAuB;YAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI;SAC7B,CAAC,CAAC;QACH,MAAM,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvF,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;QACvF,CAAC,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,yBAAyB,CACjC,4BAA4B,EAC5B,yCAAyC,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACxE,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO;QAClC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CACvE,OAAO,CAAC,cAAc,EACtB,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,KAAK,EAAE,mBAA4B,EAAE,CAAC,CACpF,CAAC;KACH,CAAC,CAAC,CAAC;IACJ,IAAI,QAAQ,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAAA,MAAM,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAAA,CAAC;IACrF,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAAA,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAAA,CAAC;IACxE,MAAM,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAChC,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;YAC5B,KAAK,EAAE,iCAAiC;YACxC,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAAA,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAAA,CAAC;IACxE,MAAM,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QACjC,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,4DAA4D,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAgC;IAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,qBAAqB,CAAC;QAClC,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI;QACrC,MAAM;QACN,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IACH,MAAM,oBAAoB,GAAG,IAAI,CAAC,GAAG,CACnC,6BAA6B,CAAC,OAAO,CAAC,SAAS,CAAC,EAChD,CAAC,GAAG,IAAI,GAAG,IAAI,CAChB,CAAC;IACF,IAAI,OAAO,CAAC,gBAAgB,CAAC,KAAK,KAAK,mBAAmB,EAAE,CAAC;QAC3D,MAAM,+BAA+B,CAAC;YACpC,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;YACxF,WAAW;YACX,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,MAAM;YACN,KAAK;YACL,oBAAoB;SACrB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IACjF,MAAM,iBAAiB,GAAG,MAAM,mBAAmB,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;IACvF,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,eAAe,CAAC;IACzD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,yBAAyB,CACjC,4BAA4B,EAC5B,0DAA0D,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CACpF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG;QACd,WAAW;QACX,MAAM;QACN,KAAK;QACL,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAE;QACpE,oBAAoB;KACrB,CAAC;IACF,IAAI,OAAO,CAAC,gBAAgB,CAAC,wBAAwB,KAAK,SAAS,EAAE,CAAC;QACpE,MAAM,8BAA8B,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CACvB,MAAM,EACN,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,yBAAyB,OAAO,CAAC,cAAc,MAAM,CAC1F,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,yBAAyB,KAAK,SAAS;QACvF,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,4BAA4B,CAAC,OAAO,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;IACrF,MAAM,gBAAgB,GAAG,gBAAgB,KAAK,SAAS;QACrD,CAAC,CAAC,EAAE,KAAK,EAAE,QAAiB,EAAE;QAC9B,CAAC,CAAC,MAAM,mBAAmB,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,yBAAyB,CACzC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,gBAAgB,CAC/D,CAAC;IACF,MAAM,kCAAkC,CACtC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,SAAS,CAAC,gBAAgB,CACzE,CAAC;IACF,IAAI,QAAQ,GAAG,MAAM,mBAAmB,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;IAC5E,IAAI,MAAM,0BAA0B,CAClC,OAAO,EACP,OAAO,EACP,QAAQ,EACR,EAAE,GAAG,SAAS,EAAE,gBAAgB,EAAE,CACnC,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IACZ,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,QAAQ,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,wBAAwB,CAC5B,OAAO,EACP,OAAO,EACP,QAAQ,EACR,EAAE,GAAG,SAAS,EAAE,gBAAgB,EAAE,CACnC,CAAC;AACJ,CAAC"}

package/dist/repository-mutation/adapters/node/node-known-file-recovery-preimage.d.ts

@@ -0,0 +1,13 @@
+import type { KnownFileTransactionPlanV1 } from "../../application/model/known-file-transaction.js";
+import { type KnownFileRecoveryFaultInjector, type StoredRecoveryJournal } from "./node-known-file-recovery-state.js";
+import type { NodeKnownFileTransactionJournalStore } from "./node-known-file-transaction-journal-store.js";
+export interface RestorePreimageOptions {
+    readonly faultInjector?: KnownFileRecoveryFaultInjector;
+    readonly operation: KnownFileTransactionPlanV1["operations"][number];
+    readonly operationIndex: number;
+    readonly root: string;
+    readonly store: NodeKnownFileTransactionJournalStore;
+    readonly stored: StoredRecoveryJournal;
+}
+export declare function restorePreimage(options: RestorePreimageOptions): Promise<void>;
+//# sourceMappingURL=node-known-file-recovery-preimage.d.ts.map

package/dist/repository-mutation/adapters/node/node-known-file-recovery-preimage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-known-file-recovery-preimage.d.ts","sourceRoot":"","sources":["../../../../src/repository-mutation/adapters/node/node-known-file-recovery-preimage.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAEV,0BAA0B,EAC3B,MAAM,mDAAmD,CAAC;AAuB3D,OAAO,EACL,KAAK,8BAA8B,EAEnC,KAAK,qBAAqB,EAC3B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AA0G3G,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,aAAa,CAAC,EAAE,8BAA8B,CAAC;IACxD,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;IACrE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,oCAAoC,CAAC;IACrD,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;CACxC;AAkJD,wBAAsB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6CpF"}

package/dist/repository-mutation/adapters/node/node-known-file-recovery-preimage.js

@@ -0,0 +1,210 @@
+import { link } from "node:fs/promises";
+import { basename, dirname, join } from "node:path";
+import { deserializeKnownFileIdentity, serializeKnownFileIdentity } from "../../application/model/known-file-transaction-journal.js";
+import { pathMatchesRegularFileIdentity, readBoundedRegularFile } from "./node-bounded-regular-file.js";
+import { syncDirectoryStrictly } from "./node-directory-durability.js";
+import { KnownFileTransactionError, matchesKnownFileImage, maximumKnownFileEvidenceBytes, sameKnownFileIdentity } from "./node-known-file-transaction-filesystem.js";
+import { observeRecoveryFile, prepareRollbackTemporary } from "./node-known-file-recovery-filesystem.js";
+import { restoreCapturedPreimage } from "./node-known-file-recovery-preimage-captured.js";
+import { retireJournalBoundPath } from "./node-known-file-recovery-retirement.js";
+import { persistRecoveryJournal } from "./node-known-file-recovery-state.js";
+async function restoreAbsentPreimage(options) {
+    if (options.observed.state === "absent") {
+        return;
+    }
+    if (!matchesKnownFileImage(options.observed, options.operation.postimage) ||
+        options.observed.identity === undefined ||
+        !("temporaryIdentity" in options.journalOperation) ||
+        !sameKnownFileIdentity(options.observed.identity, deserializeKnownFileIdentity(options.journalOperation.temporaryIdentity))) {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Created destination changed after publication: ${options.operation.path}.`);
+    }
+    await retireJournalBoundPath({
+        expectedIdentity: options.observed.identity,
+        ...(options.faultInjector === undefined ? {} : { faultInjector: options.faultInjector }),
+        kind: "destination",
+        operationIndex: options.operationIndex,
+        root: options.root,
+        store: options.store,
+        stored: options.stored
+    });
+}
+async function acceptRestoredPreimage(options) {
+    if (!matchesKnownFileImage(options.observed, options.preimage)) {
+        return false;
+    }
+    if (options.journalOperation.rollbackTemporaryIdentity !== undefined &&
+        options.observed.identity !== undefined &&
+        sameKnownFileIdentity(options.observed.identity, deserializeKnownFileIdentity(options.journalOperation.rollbackTemporaryIdentity))) {
+        await retireJournalBoundPath({
+            expectedIdentity: options.observed.identity,
+            kind: "rollback-temporary",
+            operationIndex: options.operationIndex,
+            root: options.root,
+            store: options.store,
+            stored: options.stored
+        });
+    }
+    return true;
+}
+function assertPublishedIdentity(options) {
+    if (options.observed.identity === undefined ||
+        !sameKnownFileIdentity(options.observed.identity, deserializeKnownFileIdentity(options.journalOperation.temporaryIdentity))) {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Published destination identity changed before rollback: ${options.operationPath}.`);
+    }
+}
+function assertRollbackTemporary(options) {
+    if (options.observed.outcome !== "read" ||
+        !sameKnownFileIdentity(options.observed.identity, options.identity) ||
+        !matchesKnownFileImage({
+            state: "file", bytes: options.observed.bytes, identity: options.observed.identity,
+            mode: options.observed.mode & 0o777
+        }, options.preimage)) {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Rollback temporary changed before copy: ${options.operationPath}.`);
+    }
+}
+async function restoreUncapturedPreimage(options) {
+    const operation = options.operation;
+    let journalOperation = options.journalOperation;
+    const observed = await observeRecoveryFile(options.destination, maximumKnownFileEvidenceBytes(operation));
+    const postMatches = matchesKnownFileImage(observed, operation.postimage);
+    if (!("temporaryIdentity" in journalOperation)) {
+        throw new KnownFileTransactionError("KNOWN_FILE_JOURNAL_INVALID", `Published operation lacks temporary identity authority: ${operation.path}.`);
+    }
+    const matched = journalOperation.matchedPreimage;
+    if (matched === undefined) {
+        throw new KnownFileTransactionError("KNOWN_FILE_JOURNAL_INVALID", `Replacement preimage binding is absent: ${operation.path}.`);
+    }
+    const preimage = operation.precondition.acceptedPreimages[matched];
+    if (await acceptRestoredPreimage({
+        journalOperation,
+        observed,
+        operationIndex: options.operationIndex,
+        operationPath: operation.path,
+        preimage,
+        root: options.root,
+        store: options.store,
+        stored: options.stored
+    })) {
+        return;
+    }
+    const resumingAfterRetirement = observed.state === "absent" &&
+        journalOperation.rollbackTemporaryIdentity !== undefined;
+    if (!postMatches && !resumingAfterRetirement) {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Published destination changed before rollback: ${operation.path}.`);
+    }
+    if (postMatches) {
+        assertPublishedIdentity({ journalOperation, observed, operationPath: operation.path });
+    }
+    const rollbackPath = join(options.parent, `.${basename(operation.path)}.agent-teams.rollback.${options.operationIndex}.tmp`);
+    const rollbackIdentity = await prepareRollbackTemporary({
+        ...(journalOperation.rollbackTemporaryIdentity === undefined
+            ? {}
+            : {
+                expectedIdentity: deserializeKnownFileIdentity(journalOperation.rollbackTemporaryIdentity)
+            }),
+        operationPath: operation.path,
+        path: rollbackPath,
+        preimage
+    });
+    await syncDirectoryStrictly(options.parent);
+    if (await pathMatchesRegularFileIdentity(rollbackPath, rollbackIdentity) !== "match") {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Rollback temporary changed before durable identity binding: ${operation.path}.`);
+    }
+    if (journalOperation.rollbackTemporaryIdentity === undefined) {
+        journalOperation = Object.freeze({
+            ...journalOperation,
+            rollbackTemporaryIdentity: serializeKnownFileIdentity(rollbackIdentity)
+        });
+        await persistRecoveryJournal(options.store, options.stored, Object.freeze({
+            ...options.stored.envelope.journal,
+            operations: Object.freeze(options.stored.envelope.journal.operations.with(options.operationIndex, journalOperation))
+        }));
+    }
+    if (!resumingAfterRetirement) {
+        await retireJournalBoundPath({
+            expectedIdentity: observed.identity,
+            ...(options.faultInjector === undefined ? {} : { faultInjector: options.faultInjector }),
+            kind: "destination",
+            operationIndex: options.operationIndex,
+            root: options.root,
+            store: options.store,
+            stored: options.stored
+        });
+        await options.faultInjector?.({
+            phase: "after-destination-retired",
+            operationIndex: options.operationIndex,
+            path: operation.path
+        });
+    }
+    const prepared = await readBoundedRegularFile(rollbackPath, preimage.size);
+    assertRollbackTemporary({
+        identity: rollbackIdentity,
+        observed: prepared,
+        operationPath: operation.path,
+        preimage
+    });
+    await link(rollbackPath, options.destination).catch((error) => {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_CONFLICT", `Destination appeared during rollback CAS: ${operation.path}.`, { cause: error });
+    });
+    await options.faultInjector?.({
+        phase: "after-rollback-linked",
+        operationIndex: options.operationIndex,
+        path: operation.path
+    });
+    await syncDirectoryStrictly(options.parent);
+    const restored = await observeRecoveryFile(options.destination, preimage.size);
+    if (!matchesKnownFileImage(restored, preimage) || restored.identity === undefined ||
+        !sameKnownFileIdentity(restored.identity, rollbackIdentity)) {
+        throw new KnownFileTransactionError("KNOWN_FILE_RECOVERY_FAILED", `Preimage restoration failed: ${operation.path}.`);
+    }
+    await retireJournalBoundPath({
+        expectedIdentity: rollbackIdentity,
+        ...(options.faultInjector === undefined ? {} : { faultInjector: options.faultInjector }),
+        kind: "rollback-temporary",
+        operationIndex: options.operationIndex,
+        root: options.root,
+        store: options.store,
+        stored: options.stored
+    });
+}
+export async function restorePreimage(options) {
+    const operation = options.operation;
+    const journalOperation = options.stored.envelope.journal.operations[options.operationIndex];
+    const destination = join(options.root, ...operation.path.split("/"));
+    const parent = dirname(destination);
+    if (operation.precondition.state === "absent") {
+        const observed = await observeRecoveryFile(destination, maximumKnownFileEvidenceBytes(operation));
+        await restoreAbsentPreimage({
+            ...(options.faultInjector === undefined ? {} : { faultInjector: options.faultInjector }),
+            journalOperation,
+            observed,
+            operation,
+            operationIndex: options.operationIndex,
+            root: options.root,
+            store: options.store,
+            stored: options.stored
+        });
+        return;
+    }
+    if (journalOperation.captureDirectoryIdentity !== undefined) {
+        await restoreCapturedPreimage({
+            ...(options.faultInjector === undefined ? {} : { faultInjector: options.faultInjector }),
+            journalOperation: journalOperation,
+            operation: { ...operation, precondition: operation.precondition },
+            operationIndex: options.operationIndex,
+            planDigest: options.stored.envelope.journal.plan.planDigest,
+            root: options.root,
+            store: options.store,
+            stored: options.stored
+        });
+        return;
+    }
+    await restoreUncapturedPreimage({
+        ...options,
+        destination,
+        journalOperation,
+        operation: { ...operation, precondition: operation.precondition },
+        parent
+    });
+}
+//# sourceMappingURL=node-known-file-recovery-preimage.js.map