@agimon-ai/doompi-core 0.0.1-alpha.100

package/dist/syncRegistration.cjs

@@ -0,0 +1,171 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_runtime = require("./_virtual/_rolldown/runtime.cjs");
+const require_runtimeJson = require("./runtimeJson.cjs");
+const require_syncLocation = require("./syncLocation.cjs");
+const require_serverBundle = require("./src/schemas/serverBundle.cjs");
+require("./serverFacet.cjs");
+const require_mcpBundle = require("./src/schemas/mcpBundle.cjs");
+require("./doomPackage.cjs");
+let node_crypto = require("node:crypto");
+node_crypto = require_runtime.__toESM(node_crypto, 1);
+let node_fs = require("node:fs");
+node_fs = require_runtime.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+//#region src/services/syncRegistration/index.ts
+/** Current registration schema shared by sync, the managed dispatcher, and runtime consumers. */
+const SYNC_REGISTRATION_VERSION = 2;
+/** Legacy schema accepted only with exact producer npm-version validation. */
+const LEGACY_SYNC_REGISTRATION_VERSION = 1;
+/** Runtime API contract shared by synchronized generations and DoomPi releases. */
+const DOOMPI_API_VERSION = 1;
+const SHA256 = /^[a-f0-9]{64}$/u;
+const PRIVATE_FILE_MODE = 384;
+function canonicalPath(target) {
+	return node_fs.default.realpathSync.native(node_path.default.resolve(target));
+}
+function isInside(directory, target) {
+	const relative = node_path.default.relative(canonicalPath(directory), canonicalPath(target));
+	return relative === "" || !relative.startsWith("..") && !node_path.default.isAbsolute(relative);
+}
+function requiredString(value, field, recordPath) {
+	if (typeof value !== "string" || value === "") throw new Error(`Doom sync registration at ${recordPath} has an invalid ${field}`);
+	return value;
+}
+function identityFrom(value, recordPath) {
+	if (!require_runtimeJson.isRecord(value)) throw new Error(`Doom sync registration at ${recordPath} has no identity`);
+	return {
+		repositoryId: requiredString(value.repositoryId, "repository id", recordPath),
+		worktreeId: requiredString(value.worktreeId, "worktree id", recordPath)
+	};
+}
+function packageFrom(value, recordPath) {
+	if (!require_runtimeJson.isRecord(value)) throw new Error(`Doom sync registration at ${recordPath} has no package record`);
+	return {
+		root: requiredString(value.root, "package root", recordPath),
+		version: requiredString(value.version, "package version", recordPath),
+		...value.apiVersion === void 0 ? {} : { apiVersion: value.apiVersion },
+		manifestPath: requiredString(value.manifestPath, "package manifest", recordPath),
+		entry: requiredString(value.entry, "package entry", recordPath)
+	};
+}
+function sha256File(filePath) {
+	return node_crypto.default.createHash("sha256").update(node_fs.default.readFileSync(filePath)).digest("hex");
+}
+function validatePackage(value, recordPath, recordVersion) {
+	const packageRoot = canonicalPath(value.root);
+	if (packageRoot !== node_path.default.resolve(value.root)) throw new Error(`Doom sync registration at ${recordPath} has a noncanonical package root`);
+	if (!isInside(packageRoot, value.manifestPath) || !isInside(packageRoot, value.entry)) throw new Error(`Doom sync registration at ${recordPath} references package material outside ${packageRoot}`);
+	if (canonicalPath(value.manifestPath) !== canonicalPath(node_path.default.join(packageRoot, "package.json"))) throw new Error(`Doom sync registration at ${recordPath} has an invalid package manifest path`);
+	const manifest = JSON.parse(node_fs.default.readFileSync(value.manifestPath, "utf8"));
+	if (manifest.name !== "@agimon-ai/doompi" || typeof manifest.version !== "string") throw new Error(`Doom sync registration at ${recordPath} does not match its DoomPi package`);
+	if (recordVersion === 1 && value.apiVersion === void 0) {
+		if (manifest.version !== value.version) throw new Error(`Doom sync registration at ${recordPath} does not match its DoomPi package`);
+	} else {
+		if (value.apiVersion === void 0) throw new Error(`Doom sync registration at ${recordPath} has no package API version`);
+		if (!Number.isSafeInteger(value.apiVersion) || value.apiVersion < 1) throw new Error(`Doom sync registration at ${recordPath} has an invalid package API version`);
+		if (manifest.doompiApiVersion !== value.apiVersion) throw new Error(`Doom sync registration at ${recordPath} has a mismatched package API version`);
+		if (value.apiVersion !== 1) throw new Error(`Unsupported DoomPi package API version at ${recordPath}`);
+	}
+	const extensions = manifest.pi?.extensions;
+	if (!Array.isArray(extensions) || !extensions.some((entry) => typeof entry === "string" && canonicalPath(node_path.default.resolve(packageRoot, entry)) === canonicalPath(value.entry))) throw new Error(`Doom sync registration at ${recordPath} does not match the package Pi entry`);
+}
+/** Validates one parsed registration against its canonical repository/worktree location. */
+function validateSyncRegistration(registration, location) {
+	const recordPath = location.registrationPath;
+	const recordVersion = registration.version;
+	if (recordVersion !== 2 && recordVersion !== 1) throw new Error(`Unsupported Doom sync registration version at ${recordPath}`);
+	const canonicalRoot = canonicalPath(registration.root);
+	if (canonicalRoot !== location.root || node_path.default.resolve(registration.root) !== canonicalRoot) throw new Error(`Doom sync registration at ${recordPath} has an invalid repository root`);
+	if (registration.identity.repositoryId !== location.identity.repositoryId || registration.identity.worktreeId !== location.identity.worktreeId) throw new Error(`Doom sync registration at ${recordPath} belongs to another repository or worktree`);
+	const expectedGenerationRoot = require_syncLocation.syncGenerationDirectory(location, registration.generation);
+	if (node_path.default.resolve(registration.generationRoot) !== node_path.default.resolve(expectedGenerationRoot)) throw new Error(`Doom sync registration at ${recordPath} has an invalid generation root`);
+	const generationStat = node_fs.default.lstatSync(registration.generationRoot, { throwIfNoEntry: false });
+	if (!generationStat?.isDirectory() || generationStat.isSymbolicLink()) throw new Error(`Doom sync registration at ${recordPath} has an unavailable generation`);
+	for (const target of [registration.statePath, registration.apiDirectory]) if (!isInside(registration.generationRoot, target)) throw new Error(`Doom sync registration at ${recordPath} references material outside its generation`);
+	if (registration.webDirectory !== null && !isInside(registration.generationRoot, registration.webDirectory)) throw new Error(`Doom sync registration at ${recordPath} references web material outside its generation`);
+	if (!SHA256.test(registration.stateSha256) || sha256File(registration.statePath) !== registration.stateSha256) throw new Error(`Doom sync registration at ${recordPath} has a mismatched state hash`);
+	let state = {};
+	try {
+		const parsed = JSON.parse(node_fs.default.readFileSync(registration.statePath, "utf8"));
+		if (require_runtimeJson.isRecord(parsed)) state = parsed;
+	} catch (error) {
+		if (registration.serverBundle !== void 0) throw error;
+	}
+	if (registration.serverBundle !== void 0) {
+		const bundle = registration.serverBundle;
+		if (!isInside(registration.generationRoot, bundle.path) || canonicalPath(bundle.path) !== canonicalPath(node_path.default.join(registration.apiDirectory, "server.bundle.json"))) throw new Error(`Doom sync registration at ${recordPath} has an invalid server descriptor path`);
+		if (!SHA256.test(bundle.sha256) || sha256File(bundle.path) !== bundle.sha256) throw new Error(`Doom sync registration at ${recordPath} has a mismatched server descriptor hash`);
+		const descriptor = require_serverBundle.parseDoomServerBundle(JSON.parse(node_fs.default.readFileSync(bundle.path, "utf8")));
+		const recorded = state.serverBundle;
+		if (descriptor.generation !== registration.generation || descriptor.fingerprint !== bundle.fingerprint || !require_runtimeJson.isRecord(recorded) || recorded.fingerprint !== bundle.fingerprint || recorded.descriptorPath !== bundle.path) throw new Error(`Doom sync registration at ${recordPath} has mismatched server bundle identity`);
+	} else if (state.serverBundle !== void 0) throw new Error(`Doom sync registration at ${recordPath} is missing its server bundle record`);
+	if (registration.mcpBundle !== void 0) {
+		const bundle = registration.mcpBundle;
+		if (!isInside(registration.generationRoot, bundle.path) || canonicalPath(bundle.path) !== canonicalPath(node_path.default.join(registration.generationRoot, "mcp", "mcp.bundle.json"))) throw new Error(`Doom sync registration at ${recordPath} has an invalid MCP descriptor path`);
+		if (!SHA256.test(bundle.sha256) || sha256File(bundle.path) !== bundle.sha256) throw new Error(`Doom sync registration at ${recordPath} has a mismatched MCP descriptor hash`);
+		const descriptor = require_mcpBundle.parseDoomMcpBundle(JSON.parse(node_fs.default.readFileSync(bundle.path, "utf8")));
+		const recorded = state.mcpBundle;
+		if (descriptor.generation !== registration.generation || descriptor.fingerprint !== bundle.fingerprint || !require_runtimeJson.isRecord(recorded) || recorded.fingerprint !== bundle.fingerprint || recorded.descriptorPath !== bundle.path) throw new Error(`Doom sync registration at ${recordPath} has mismatched MCP bundle identity`);
+		for (const entry of descriptor.entries) {
+			const modulePath = node_path.default.resolve(node_path.default.dirname(bundle.path), entry.module);
+			if (!isInside(registration.generationRoot, modulePath) || sha256File(modulePath) !== entry.sha256) throw new Error(`Doom sync registration at ${recordPath} has a mismatched MCP artifact hash`);
+		}
+	} else if (state.mcpBundle !== void 0) throw new Error(`Doom sync registration at ${recordPath} is missing its MCP bundle record`);
+	validatePackage(registration.package, recordPath, recordVersion);
+	return registration;
+}
+function parseSyncRegistration(value, recordPath) {
+	if (!require_runtimeJson.isRecord(value)) throw new Error(`Doom sync registration at ${recordPath} is not an object`);
+	return {
+		version: value.version,
+		root: requiredString(value.root, "repository root", recordPath),
+		identity: identityFrom(value.identity, recordPath),
+		generation: requiredString(value.generation, "generation", recordPath),
+		generationRoot: requiredString(value.generationRoot, "generation root", recordPath),
+		statePath: requiredString(value.statePath, "state path", recordPath),
+		stateSha256: requiredString(value.stateSha256, "state hash", recordPath),
+		webDirectory: value.webDirectory === null ? null : requiredString(value.webDirectory, "web directory", recordPath),
+		apiDirectory: requiredString(value.apiDirectory, "API directory", recordPath),
+		...value.serverBundle === void 0 ? {} : { serverBundle: bundleFrom(value.serverBundle, recordPath, "server") },
+		...value.mcpBundle === void 0 ? {} : { mcpBundle: bundleFrom(value.mcpBundle, recordPath, "MCP") },
+		package: packageFrom(value.package, recordPath)
+	};
+}
+function bundleFrom(value, recordPath, kind) {
+	if (!require_runtimeJson.isRecord(value)) throw new Error(`Doom sync registration at ${recordPath} has an invalid ${kind} bundle record`);
+	return {
+		path: requiredString(value.path, "server descriptor path", recordPath),
+		sha256: requiredString(value.sha256, "server descriptor hash", recordPath),
+		fingerprint: requiredString(value.fingerprint, "server descriptor fingerprint", recordPath)
+	};
+}
+/** Reads only the exact registration for this repository/worktree. */
+function readSyncRegistration(repoRoot, homeDirectory) {
+	const location = require_syncLocation.resolveSyncLocation(repoRoot, homeDirectory);
+	if (!node_fs.default.existsSync(location.registrationPath)) return void 0;
+	return validateSyncRegistration(parseSyncRegistration(JSON.parse(node_fs.default.readFileSync(location.registrationPath, "utf8")), location.registrationPath), location);
+}
+/** Atomically activates one fully staged generation for its worktree. */
+function publishSyncRegistration(repoRoot, registration, homeDirectory) {
+	const location = require_syncLocation.resolveSyncLocation(repoRoot, homeDirectory);
+	require_syncLocation.assertSyncLocationSafe(location);
+	validateSyncRegistration(registration, location);
+	require_runtimeJson.writeFileAtomic(location.registrationPath, `${JSON.stringify(registration, null, 2)}\n`);
+	node_fs.default.chmodSync(location.registrationPath, PRIVATE_FILE_MODE);
+	return location.registrationPath;
+}
+function syncStateSha256(statePath) {
+	return sha256File(statePath);
+}
+//#endregion
+exports.DOOMPI_API_VERSION = DOOMPI_API_VERSION;
+exports.LEGACY_SYNC_REGISTRATION_VERSION = LEGACY_SYNC_REGISTRATION_VERSION;
+exports.SYNC_REGISTRATION_VERSION = SYNC_REGISTRATION_VERSION;
+exports.parseSyncRegistration = parseSyncRegistration;
+exports.publishSyncRegistration = publishSyncRegistration;
+exports.readSyncRegistration = readSyncRegistration;
+exports.syncStateSha256 = syncStateSha256;
+exports.validateSyncRegistration = validateSyncRegistration;
+
+//# sourceMappingURL=syncRegistration.cjs.map

package/dist/syncRegistration.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncRegistration.cjs","names":["fs","path","isRecord","crypto","syncGenerationDirectory","parseDoomServerBundle","parseDoomMcpBundle","resolveSyncLocation"],"sources":["../src/services/syncRegistration/index.ts"],"sourcesContent":["import crypto from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport { DOOM_SERVER_BUNDLE_FILE, parseDoomServerBundle } from '../../exports/serverFacet';\nimport { DOOM_MCP_BUNDLE_FILE, parseDoomMcpBundle } from '../../schemas/mcpBundle';\nimport { DOOM_PACKAGE_NAME } from '../doomPackage';\nimport { isRecord, writeFileAtomic } from '../json';\nimport {\n  assertSyncLocationSafe,\n  resolveSyncLocation,\n  syncGenerationDirectory,\n  type SyncIdentity,\n  type SyncLocation,\n} from '../syncLocation';\n\n/** Current registration schema shared by sync, the managed dispatcher, and runtime consumers. */\nexport const SYNC_REGISTRATION_VERSION = 2;\n/** Legacy schema accepted only with exact producer npm-version validation. */\nexport const LEGACY_SYNC_REGISTRATION_VERSION = 1;\n/** Runtime API contract shared by synchronized generations and DoomPi releases. */\nexport const DOOMPI_API_VERSION = 1;\n\nconst SHA256 = /^[a-f0-9]{64}$/u;\nconst PRIVATE_FILE_MODE = 0o600;\n\nexport interface SyncPackageRegistration {\n  root: string;\n  version: string;\n  /** Present in registrations written by the API-versioned sync protocol. */\n  apiVersion?: number;\n  manifestPath: string;\n  entry: string;\n}\n\nexport interface SyncServerBundleRegistration {\n  path: string;\n  sha256: string;\n  fingerprint: string;\n}\n\nexport type SyncMcpBundleRegistration = SyncServerBundleRegistration;\n\nexport interface SyncRegistration {\n  version: number;\n  root: string;\n  identity: SyncIdentity;\n  generation: string;\n  generationRoot: string;\n  statePath: string;\n  stateSha256: string;\n  webDirectory: string | null;\n  apiDirectory: string;\n  /** Missing only for explicitly supported pre-cutover generations. */\n  serverBundle?: SyncServerBundleRegistration;\n  /** Explicit MCP runtime admitted with this generation. */\n  mcpBundle?: SyncMcpBundleRegistration;\n  package: SyncPackageRegistration;\n}\n\nfunction canonicalPath(target: string): string {\n  return fs.realpathSync.native(path.resolve(target));\n}\n\nfunction isInside(directory: string, target: string): boolean {\n  const relative = path.relative(canonicalPath(directory), canonicalPath(target));\n  return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));\n}\n\nfunction requiredString(value: unknown, field: string, recordPath: string): string {\n  if (typeof value !== 'string' || value === '') {\n    throw new Error(`Doom sync registration at ${recordPath} has an invalid ${field}`);\n  }\n  return value;\n}\n\nfunction identityFrom(value: unknown, recordPath: string): SyncIdentity {\n  if (!isRecord(value)) throw new Error(`Doom sync registration at ${recordPath} has no identity`);\n  return {\n    repositoryId: requiredString(value.repositoryId, 'repository id', recordPath),\n    worktreeId: requiredString(value.worktreeId, 'worktree id', recordPath),\n  };\n}\n\nfunction packageFrom(value: unknown, recordPath: string): SyncPackageRegistration {\n  if (!isRecord(value)) throw new Error(`Doom sync registration at ${recordPath} has no package record`);\n  return {\n    root: requiredString(value.root, 'package root', recordPath),\n    version: requiredString(value.version, 'package version', recordPath),\n    ...(value.apiVersion === undefined ? {} : { apiVersion: value.apiVersion as number }),\n    manifestPath: requiredString(value.manifestPath, 'package manifest', recordPath),\n    entry: requiredString(value.entry, 'package entry', recordPath),\n  };\n}\n\nfunction sha256File(filePath: string): string {\n  return crypto.createHash('sha256').update(fs.readFileSync(filePath)).digest('hex');\n}\n\nfunction validatePackage(value: SyncPackageRegistration, recordPath: string, recordVersion: number): void {\n  const packageRoot = canonicalPath(value.root);\n  if (packageRoot !== path.resolve(value.root)) {\n    throw new Error(`Doom sync registration at ${recordPath} has a noncanonical package root`);\n  }\n  if (!isInside(packageRoot, value.manifestPath) || !isInside(packageRoot, value.entry)) {\n    throw new Error(`Doom sync registration at ${recordPath} references package material outside ${packageRoot}`);\n  }\n  if (canonicalPath(value.manifestPath) !== canonicalPath(path.join(packageRoot, 'package.json'))) {\n    throw new Error(`Doom sync registration at ${recordPath} has an invalid package manifest path`);\n  }\n  const manifest = JSON.parse(fs.readFileSync(value.manifestPath, 'utf8')) as {\n    name?: unknown;\n    version?: unknown;\n    doompiApiVersion?: unknown;\n    pi?: { extensions?: unknown };\n  };\n  if (manifest.name !== DOOM_PACKAGE_NAME || typeof manifest.version !== 'string') {\n    throw new Error(`Doom sync registration at ${recordPath} does not match its DoomPi package`);\n  }\n  if (recordVersion === LEGACY_SYNC_REGISTRATION_VERSION && value.apiVersion === undefined) {\n    // Registrations written before API compatibility was persisted remain valid\n    // only when their exact producer release is still installed.\n    if (manifest.version !== value.version) {\n      throw new Error(`Doom sync registration at ${recordPath} does not match its DoomPi package`);\n    }\n  } else {\n    if (value.apiVersion === undefined) {\n      throw new Error(`Doom sync registration at ${recordPath} has no package API version`);\n    }\n    if (!Number.isSafeInteger(value.apiVersion) || value.apiVersion < 1) {\n      throw new Error(`Doom sync registration at ${recordPath} has an invalid package API version`);\n    }\n    if (manifest.doompiApiVersion !== value.apiVersion) {\n      throw new Error(`Doom sync registration at ${recordPath} has a mismatched package API version`);\n    }\n    if (value.apiVersion !== DOOMPI_API_VERSION) {\n      throw new Error(`Unsupported DoomPi package API version at ${recordPath}`);\n    }\n  }\n  const extensions = manifest.pi?.extensions;\n  if (\n    !Array.isArray(extensions) ||\n    !extensions.some(\n      (entry) =>\n        typeof entry === 'string' && canonicalPath(path.resolve(packageRoot, entry)) === canonicalPath(value.entry),\n    )\n  ) {\n    throw new Error(`Doom sync registration at ${recordPath} does not match the package Pi entry`);\n  }\n}\n\n/** Validates one parsed registration against its canonical repository/worktree location. */\nexport function validateSyncRegistration(registration: SyncRegistration, location: SyncLocation): SyncRegistration {\n  const recordPath = location.registrationPath;\n  const recordVersion = registration.version;\n  if (recordVersion !== SYNC_REGISTRATION_VERSION && recordVersion !== LEGACY_SYNC_REGISTRATION_VERSION) {\n    throw new Error(`Unsupported Doom sync registration version at ${recordPath}`);\n  }\n  const canonicalRoot = canonicalPath(registration.root);\n  if (canonicalRoot !== location.root || path.resolve(registration.root) !== canonicalRoot) {\n    throw new Error(`Doom sync registration at ${recordPath} has an invalid repository root`);\n  }\n  if (\n    registration.identity.repositoryId !== location.identity.repositoryId ||\n    registration.identity.worktreeId !== location.identity.worktreeId\n  ) {\n    throw new Error(`Doom sync registration at ${recordPath} belongs to another repository or worktree`);\n  }\n  const expectedGenerationRoot = syncGenerationDirectory(location, registration.generation);\n  if (path.resolve(registration.generationRoot) !== path.resolve(expectedGenerationRoot)) {\n    throw new Error(`Doom sync registration at ${recordPath} has an invalid generation root`);\n  }\n  const generationStat = fs.lstatSync(registration.generationRoot, { throwIfNoEntry: false });\n  if (!generationStat?.isDirectory() || generationStat.isSymbolicLink()) {\n    throw new Error(`Doom sync registration at ${recordPath} has an unavailable generation`);\n  }\n  for (const target of [registration.statePath, registration.apiDirectory]) {\n    if (!isInside(registration.generationRoot, target)) {\n      throw new Error(`Doom sync registration at ${recordPath} references material outside its generation`);\n    }\n  }\n  if (registration.webDirectory !== null && !isInside(registration.generationRoot, registration.webDirectory)) {\n    throw new Error(`Doom sync registration at ${recordPath} references web material outside its generation`);\n  }\n  if (!SHA256.test(registration.stateSha256) || sha256File(registration.statePath) !== registration.stateSha256) {\n    throw new Error(`Doom sync registration at ${recordPath} has a mismatched state hash`);\n  }\n  let state: Record<string, unknown> = {};\n  try {\n    const parsed: unknown = JSON.parse(fs.readFileSync(registration.statePath, 'utf8'));\n    if (isRecord(parsed)) state = parsed;\n  } catch (error) {\n    // Legacy state validation remains the state reader's responsibility. New\n    // descriptor generations require their state identity during admission.\n    if (registration.serverBundle !== undefined) throw error;\n  }\n  if (registration.serverBundle !== undefined) {\n    const bundle = registration.serverBundle;\n    if (\n      !isInside(registration.generationRoot, bundle.path) ||\n      canonicalPath(bundle.path) !== canonicalPath(path.join(registration.apiDirectory, DOOM_SERVER_BUNDLE_FILE))\n    ) {\n      throw new Error(`Doom sync registration at ${recordPath} has an invalid server descriptor path`);\n    }\n    if (!SHA256.test(bundle.sha256) || sha256File(bundle.path) !== bundle.sha256) {\n      throw new Error(`Doom sync registration at ${recordPath} has a mismatched server descriptor hash`);\n    }\n    const descriptor = parseDoomServerBundle(JSON.parse(fs.readFileSync(bundle.path, 'utf8')));\n    const recorded = state.serverBundle;\n    if (\n      descriptor.generation !== registration.generation ||\n      descriptor.fingerprint !== bundle.fingerprint ||\n      !isRecord(recorded) ||\n      recorded.fingerprint !== bundle.fingerprint ||\n      recorded.descriptorPath !== bundle.path\n    ) {\n      throw new Error(`Doom sync registration at ${recordPath} has mismatched server bundle identity`);\n    }\n  } else if (state.serverBundle !== undefined) {\n    throw new Error(`Doom sync registration at ${recordPath} is missing its server bundle record`);\n  }\n  if (registration.mcpBundle !== undefined) {\n    const bundle = registration.mcpBundle;\n    if (\n      !isInside(registration.generationRoot, bundle.path) ||\n      canonicalPath(bundle.path) !== canonicalPath(path.join(registration.generationRoot, 'mcp', DOOM_MCP_BUNDLE_FILE))\n    )\n      throw new Error(`Doom sync registration at ${recordPath} has an invalid MCP descriptor path`);\n    if (!SHA256.test(bundle.sha256) || sha256File(bundle.path) !== bundle.sha256)\n      throw new Error(`Doom sync registration at ${recordPath} has a mismatched MCP descriptor hash`);\n    const descriptor = parseDoomMcpBundle(JSON.parse(fs.readFileSync(bundle.path, 'utf8')));\n    const recorded = state.mcpBundle;\n    if (\n      descriptor.generation !== registration.generation ||\n      descriptor.fingerprint !== bundle.fingerprint ||\n      !isRecord(recorded) ||\n      recorded.fingerprint !== bundle.fingerprint ||\n      recorded.descriptorPath !== bundle.path\n    )\n      throw new Error(`Doom sync registration at ${recordPath} has mismatched MCP bundle identity`);\n    for (const entry of descriptor.entries) {\n      const modulePath = path.resolve(path.dirname(bundle.path), entry.module);\n      if (!isInside(registration.generationRoot, modulePath) || sha256File(modulePath) !== entry.sha256)\n        throw new Error(`Doom sync registration at ${recordPath} has a mismatched MCP artifact hash`);\n    }\n  } else if (state.mcpBundle !== undefined) {\n    throw new Error(`Doom sync registration at ${recordPath} is missing its MCP bundle record`);\n  }\n  validatePackage(registration.package, recordPath, recordVersion);\n  return registration;\n}\n\nexport function parseSyncRegistration(value: unknown, recordPath: string): SyncRegistration {\n  if (!isRecord(value)) throw new Error(`Doom sync registration at ${recordPath} is not an object`);\n  return {\n    version: value.version as number,\n    root: requiredString(value.root, 'repository root', recordPath),\n    identity: identityFrom(value.identity, recordPath),\n    generation: requiredString(value.generation, 'generation', recordPath),\n    generationRoot: requiredString(value.generationRoot, 'generation root', recordPath),\n    statePath: requiredString(value.statePath, 'state path', recordPath),\n    stateSha256: requiredString(value.stateSha256, 'state hash', recordPath),\n    webDirectory: value.webDirectory === null ? null : requiredString(value.webDirectory, 'web directory', recordPath),\n    apiDirectory: requiredString(value.apiDirectory, 'API directory', recordPath),\n    ...(value.serverBundle === undefined ? {} : { serverBundle: bundleFrom(value.serverBundle, recordPath, 'server') }),\n    ...(value.mcpBundle === undefined ? {} : { mcpBundle: bundleFrom(value.mcpBundle, recordPath, 'MCP') }),\n    package: packageFrom(value.package, recordPath),\n  };\n}\n\nfunction bundleFrom(value: unknown, recordPath: string, kind: 'server' | 'MCP'): SyncServerBundleRegistration {\n  if (!isRecord(value)) throw new Error(`Doom sync registration at ${recordPath} has an invalid ${kind} bundle record`);\n  return {\n    path: requiredString(value.path, 'server descriptor path', recordPath),\n    sha256: requiredString(value.sha256, 'server descriptor hash', recordPath),\n    fingerprint: requiredString(value.fingerprint, 'server descriptor fingerprint', recordPath),\n  };\n}\n\n/** Reads only the exact registration for this repository/worktree. */\nexport function readSyncRegistration(repoRoot: string, homeDirectory?: string): SyncRegistration | undefined {\n  const location = resolveSyncLocation(repoRoot, homeDirectory);\n  if (!fs.existsSync(location.registrationPath)) return undefined;\n  const parsed = parseSyncRegistration(\n    JSON.parse(fs.readFileSync(location.registrationPath, 'utf8')),\n    location.registrationPath,\n  );\n  return validateSyncRegistration(parsed, location);\n}\n\n/** Atomically activates one fully staged generation for its worktree. */\nexport function publishSyncRegistration(\n  repoRoot: string,\n  registration: SyncRegistration,\n  homeDirectory?: string,\n): string {\n  const location = resolveSyncLocation(repoRoot, homeDirectory);\n  assertSyncLocationSafe(location);\n  validateSyncRegistration(registration, location);\n  writeFileAtomic(location.registrationPath, `${JSON.stringify(registration, null, 2)}\\n`);\n  fs.chmodSync(location.registrationPath, PRIVATE_FILE_MODE);\n  return location.registrationPath;\n}\n\nexport function syncStateSha256(statePath: string): string {\n  return sha256File(statePath);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAiBA,MAAa,4BAA4B;;AAEzC,MAAa,mCAAmC;;AAEhD,MAAa,qBAAqB;AAElC,MAAM,SAAS;AACf,MAAM,oBAAoB;AAoC1B,SAAS,cAAc,QAAwB;CAC7C,OAAOA,QAAAA,QAAG,aAAa,OAAOC,UAAAA,QAAK,QAAQ,MAAM,CAAC;AACpD;AAEA,SAAS,SAAS,WAAmB,QAAyB;CAC5D,MAAM,WAAWA,UAAAA,QAAK,SAAS,cAAc,SAAS,GAAG,cAAc,MAAM,CAAC;CAC9E,OAAO,aAAa,MAAO,CAAC,SAAS,WAAW,IAAI,KAAK,CAACA,UAAAA,QAAK,WAAW,QAAQ;AACpF;AAEA,SAAS,eAAe,OAAgB,OAAe,YAA4B;CACjF,IAAI,OAAO,UAAU,YAAY,UAAU,IACzC,MAAM,IAAI,MAAM,6BAA6B,WAAW,kBAAkB,OAAO;CAEnF,OAAO;AACT;AAEA,SAAS,aAAa,OAAgB,YAAkC;CACtE,IAAI,CAACC,oBAAAA,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,6BAA6B,WAAW,iBAAiB;CAC/F,OAAO;EACL,cAAc,eAAe,MAAM,cAAc,iBAAiB,UAAU;EAC5E,YAAY,eAAe,MAAM,YAAY,eAAe,UAAU;CACxE;AACF;AAEA,SAAS,YAAY,OAAgB,YAA6C;CAChF,IAAI,CAACA,oBAAAA,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,6BAA6B,WAAW,uBAAuB;CACrG,OAAO;EACL,MAAM,eAAe,MAAM,MAAM,gBAAgB,UAAU;EAC3D,SAAS,eAAe,MAAM,SAAS,mBAAmB,UAAU;EACpE,GAAI,MAAM,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,MAAM,WAAqB;EACnF,cAAc,eAAe,MAAM,cAAc,oBAAoB,UAAU;EAC/E,OAAO,eAAe,MAAM,OAAO,iBAAiB,UAAU;CAChE;AACF;AAEA,SAAS,WAAW,UAA0B;CAC5C,OAAOC,YAAAA,QAAO,WAAW,QAAQ,CAAC,CAAC,OAAOH,QAAAA,QAAG,aAAa,QAAQ,CAAC,CAAC,CAAC,OAAO,KAAK;AACnF;AAEA,SAAS,gBAAgB,OAAgC,YAAoB,eAA6B;CACxG,MAAM,cAAc,cAAc,MAAM,IAAI;CAC5C,IAAI,gBAAgBC,UAAAA,QAAK,QAAQ,MAAM,IAAI,GACzC,MAAM,IAAI,MAAM,6BAA6B,WAAW,iCAAiC;CAE3F,IAAI,CAAC,SAAS,aAAa,MAAM,YAAY,KAAK,CAAC,SAAS,aAAa,MAAM,KAAK,GAClF,MAAM,IAAI,MAAM,6BAA6B,WAAW,uCAAuC,aAAa;CAE9G,IAAI,cAAc,MAAM,YAAY,MAAM,cAAcA,UAAAA,QAAK,KAAK,aAAa,cAAc,CAAC,GAC5F,MAAM,IAAI,MAAM,6BAA6B,WAAW,sCAAsC;CAEhG,MAAM,WAAW,KAAK,MAAMD,QAAAA,QAAG,aAAa,MAAM,cAAc,MAAM,CAAC;CAMvE,IAAI,SAAS,SAAA,uBAA8B,OAAO,SAAS,YAAY,UACrE,MAAM,IAAI,MAAM,6BAA6B,WAAW,mCAAmC;CAE7F,IAAI,kBAAA,KAAsD,MAAM,eAAe,KAAA,GAGzE;MAAA,SAAS,YAAY,MAAM,SAC7B,MAAM,IAAI,MAAM,6BAA6B,WAAW,mCAAmC;CAAA,OAExF;EACL,IAAI,MAAM,eAAe,KAAA,GACvB,MAAM,IAAI,MAAM,6BAA6B,WAAW,4BAA4B;EAEtF,IAAI,CAAC,OAAO,cAAc,MAAM,UAAU,KAAK,MAAM,aAAa,GAChE,MAAM,IAAI,MAAM,6BAA6B,WAAW,oCAAoC;EAE9F,IAAI,SAAS,qBAAqB,MAAM,YACtC,MAAM,IAAI,MAAM,6BAA6B,WAAW,sCAAsC;EAEhG,IAAI,MAAM,eAAA,GACR,MAAM,IAAI,MAAM,6CAA6C,YAAY;CAE7E;CACA,MAAM,aAAa,SAAS,IAAI;CAChC,IACE,CAAC,MAAM,QAAQ,UAAU,KACzB,CAAC,WAAW,MACT,UACC,OAAO,UAAU,YAAY,cAAcC,UAAAA,QAAK,QAAQ,aAAa,KAAK,CAAC,MAAM,cAAc,MAAM,KAAK,CAC9G,GAEA,MAAM,IAAI,MAAM,6BAA6B,WAAW,qCAAqC;AAEjG;;AAGA,SAAgB,yBAAyB,cAAgC,UAA0C;CACjH,MAAM,aAAa,SAAS;CAC5B,MAAM,gBAAgB,aAAa;CACnC,IAAI,kBAAA,KAA+C,kBAAA,GACjD,MAAM,IAAI,MAAM,iDAAiD,YAAY;CAE/E,MAAM,gBAAgB,cAAc,aAAa,IAAI;CACrD,IAAI,kBAAkB,SAAS,QAAQA,UAAAA,QAAK,QAAQ,aAAa,IAAI,MAAM,eACzE,MAAM,IAAI,MAAM,6BAA6B,WAAW,gCAAgC;CAE1F,IACE,aAAa,SAAS,iBAAiB,SAAS,SAAS,gBACzD,aAAa,SAAS,eAAe,SAAS,SAAS,YAEvD,MAAM,IAAI,MAAM,6BAA6B,WAAW,2CAA2C;CAErG,MAAM,yBAAyBG,qBAAAA,wBAAwB,UAAU,aAAa,UAAU;CACxF,IAAIH,UAAAA,QAAK,QAAQ,aAAa,cAAc,MAAMA,UAAAA,QAAK,QAAQ,sBAAsB,GACnF,MAAM,IAAI,MAAM,6BAA6B,WAAW,gCAAgC;CAE1F,MAAM,iBAAiBD,QAAAA,QAAG,UAAU,aAAa,gBAAgB,EAAE,gBAAgB,MAAM,CAAC;CAC1F,IAAI,CAAC,gBAAgB,YAAY,KAAK,eAAe,eAAe,GAClE,MAAM,IAAI,MAAM,6BAA6B,WAAW,+BAA+B;CAEzF,KAAK,MAAM,UAAU,CAAC,aAAa,WAAW,aAAa,YAAY,GACrE,IAAI,CAAC,SAAS,aAAa,gBAAgB,MAAM,GAC/C,MAAM,IAAI,MAAM,6BAA6B,WAAW,4CAA4C;CAGxG,IAAI,aAAa,iBAAiB,QAAQ,CAAC,SAAS,aAAa,gBAAgB,aAAa,YAAY,GACxG,MAAM,IAAI,MAAM,6BAA6B,WAAW,gDAAgD;CAE1G,IAAI,CAAC,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,aAAa,SAAS,MAAM,aAAa,aAChG,MAAM,IAAI,MAAM,6BAA6B,WAAW,6BAA6B;CAEvF,IAAI,QAAiC,CAAC;CACtC,IAAI;EACF,MAAM,SAAkB,KAAK,MAAMA,QAAAA,QAAG,aAAa,aAAa,WAAW,MAAM,CAAC;EAClF,IAAIE,oBAAAA,SAAS,MAAM,GAAG,QAAQ;CAChC,SAAS,OAAO;EAGd,IAAI,aAAa,iBAAiB,KAAA,GAAW,MAAM;CACrD;CACA,IAAI,aAAa,iBAAiB,KAAA,GAAW;EAC3C,MAAM,SAAS,aAAa;EAC5B,IACE,CAAC,SAAS,aAAa,gBAAgB,OAAO,IAAI,KAClD,cAAc,OAAO,IAAI,MAAM,cAAcD,UAAAA,QAAK,KAAK,aAAa,cAAA,oBAAqC,CAAC,GAE1G,MAAM,IAAI,MAAM,6BAA6B,WAAW,uCAAuC;EAEjG,IAAI,CAAC,OAAO,KAAK,OAAO,MAAM,KAAK,WAAW,OAAO,IAAI,MAAM,OAAO,QACpE,MAAM,IAAI,MAAM,6BAA6B,WAAW,yCAAyC;EAEnG,MAAM,aAAaI,qBAAAA,sBAAsB,KAAK,MAAML,QAAAA,QAAG,aAAa,OAAO,MAAM,MAAM,CAAC,CAAC;EACzF,MAAM,WAAW,MAAM;EACvB,IACE,WAAW,eAAe,aAAa,cACvC,WAAW,gBAAgB,OAAO,eAClC,CAACE,oBAAAA,SAAS,QAAQ,KAClB,SAAS,gBAAgB,OAAO,eAChC,SAAS,mBAAmB,OAAO,MAEnC,MAAM,IAAI,MAAM,6BAA6B,WAAW,uCAAuC;CAEnG,OAAO,IAAI,MAAM,iBAAiB,KAAA,GAChC,MAAM,IAAI,MAAM,6BAA6B,WAAW,qCAAqC;CAE/F,IAAI,aAAa,cAAc,KAAA,GAAW;EACxC,MAAM,SAAS,aAAa;EAC5B,IACE,CAAC,SAAS,aAAa,gBAAgB,OAAO,IAAI,KAClD,cAAc,OAAO,IAAI,MAAM,cAAcD,UAAAA,QAAK,KAAK,aAAa,gBAAgB,OAAA,iBAA2B,CAAC,GAEhH,MAAM,IAAI,MAAM,6BAA6B,WAAW,oCAAoC;EAC9F,IAAI,CAAC,OAAO,KAAK,OAAO,MAAM,KAAK,WAAW,OAAO,IAAI,MAAM,OAAO,QACpE,MAAM,IAAI,MAAM,6BAA6B,WAAW,sCAAsC;EAChG,MAAM,aAAaK,kBAAAA,mBAAmB,KAAK,MAAMN,QAAAA,QAAG,aAAa,OAAO,MAAM,MAAM,CAAC,CAAC;EACtF,MAAM,WAAW,MAAM;EACvB,IACE,WAAW,eAAe,aAAa,cACvC,WAAW,gBAAgB,OAAO,eAClC,CAACE,oBAAAA,SAAS,QAAQ,KAClB,SAAS,gBAAgB,OAAO,eAChC,SAAS,mBAAmB,OAAO,MAEnC,MAAM,IAAI,MAAM,6BAA6B,WAAW,oCAAoC;EAC9F,KAAK,MAAM,SAAS,WAAW,SAAS;GACtC,MAAM,aAAaD,UAAAA,QAAK,QAAQA,UAAAA,QAAK,QAAQ,OAAO,IAAI,GAAG,MAAM,MAAM;GACvE,IAAI,CAAC,SAAS,aAAa,gBAAgB,UAAU,KAAK,WAAW,UAAU,MAAM,MAAM,QACzF,MAAM,IAAI,MAAM,6BAA6B,WAAW,oCAAoC;EAChG;CACF,OAAO,IAAI,MAAM,cAAc,KAAA,GAC7B,MAAM,IAAI,MAAM,6BAA6B,WAAW,kCAAkC;CAE5F,gBAAgB,aAAa,SAAS,YAAY,aAAa;CAC/D,OAAO;AACT;AAEA,SAAgB,sBAAsB,OAAgB,YAAsC;CAC1F,IAAI,CAACC,oBAAAA,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,6BAA6B,WAAW,kBAAkB;CAChG,OAAO;EACL,SAAS,MAAM;EACf,MAAM,eAAe,MAAM,MAAM,mBAAmB,UAAU;EAC9D,UAAU,aAAa,MAAM,UAAU,UAAU;EACjD,YAAY,eAAe,MAAM,YAAY,cAAc,UAAU;EACrE,gBAAgB,eAAe,MAAM,gBAAgB,mBAAmB,UAAU;EAClF,WAAW,eAAe,MAAM,WAAW,cAAc,UAAU;EACnE,aAAa,eAAe,MAAM,aAAa,cAAc,UAAU;EACvE,cAAc,MAAM,iBAAiB,OAAO,OAAO,eAAe,MAAM,cAAc,iBAAiB,UAAU;EACjH,cAAc,eAAe,MAAM,cAAc,iBAAiB,UAAU;EAC5E,GAAI,MAAM,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc,WAAW,MAAM,cAAc,YAAY,QAAQ,EAAE;EACjH,GAAI,MAAM,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,WAAW,MAAM,WAAW,YAAY,KAAK,EAAE;EACrG,SAAS,YAAY,MAAM,SAAS,UAAU;CAChD;AACF;AAEA,SAAS,WAAW,OAAgB,YAAoB,MAAsD;CAC5G,IAAI,CAACA,oBAAAA,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,6BAA6B,WAAW,kBAAkB,KAAK,eAAe;CACpH,OAAO;EACL,MAAM,eAAe,MAAM,MAAM,0BAA0B,UAAU;EACrE,QAAQ,eAAe,MAAM,QAAQ,0BAA0B,UAAU;EACzE,aAAa,eAAe,MAAM,aAAa,iCAAiC,UAAU;CAC5F;AACF;;AAGA,SAAgB,qBAAqB,UAAkB,eAAsD;CAC3G,MAAM,WAAWK,qBAAAA,oBAAoB,UAAU,aAAa;CAC5D,IAAI,CAACP,QAAAA,QAAG,WAAW,SAAS,gBAAgB,GAAG,OAAO,KAAA;CAKtD,OAAO,yBAJQ,sBACb,KAAK,MAAMA,QAAAA,QAAG,aAAa,SAAS,kBAAkB,MAAM,CAAC,GAC7D,SAAS,gBAE0B,GAAG,QAAQ;AAClD;;AAGA,SAAgB,wBACd,UACA,cACA,eACQ;CACR,MAAM,WAAWO,qBAAAA,oBAAoB,UAAU,aAAa;CAC5D,qBAAA,uBAAuB,QAAQ;CAC/B,yBAAyB,cAAc,QAAQ;CAC/C,oBAAA,gBAAgB,SAAS,kBAAkB,GAAG,KAAK,UAAU,cAAc,MAAM,CAAC,EAAE,GAAG;CACvF,QAAA,QAAG,UAAU,SAAS,kBAAkB,iBAAiB;CACzD,OAAO,SAAS;AAClB;AAEA,SAAgB,gBAAgB,WAA2B;CACzD,OAAO,WAAW,SAAS;AAC7B"}

package/dist/syncRegistration.d.mts

@@ -0,0 +1,48 @@
+import { SyncIdentity, SyncLocation } from "./syncLocation.mjs";
+//#region src/services/syncRegistration/index.d.ts
+/** Current registration schema shared by sync, the managed dispatcher, and runtime consumers. */
+export declare const SYNC_REGISTRATION_VERSION = 2;
+/** Legacy schema accepted only with exact producer npm-version validation. */
+export declare const LEGACY_SYNC_REGISTRATION_VERSION = 1;
+/** Runtime API contract shared by synchronized generations and DoomPi releases. */
+export declare const DOOMPI_API_VERSION = 1;
+export interface SyncPackageRegistration {
+  root: string;
+  version: string;
+  /** Present in registrations written by the API-versioned sync protocol. */
+  apiVersion?: number;
+  manifestPath: string;
+  entry: string;
+}
+export interface SyncServerBundleRegistration {
+  path: string;
+  sha256: string;
+  fingerprint: string;
+}
+export type SyncMcpBundleRegistration = SyncServerBundleRegistration;
+export interface SyncRegistration {
+  version: number;
+  root: string;
+  identity: SyncIdentity;
+  generation: string;
+  generationRoot: string;
+  statePath: string;
+  stateSha256: string;
+  webDirectory: string | null;
+  apiDirectory: string;
+  /** Missing only for explicitly supported pre-cutover generations. */
+  serverBundle?: SyncServerBundleRegistration;
+  /** Explicit MCP runtime admitted with this generation. */
+  mcpBundle?: SyncMcpBundleRegistration;
+  package: SyncPackageRegistration;
+}
+/** Validates one parsed registration against its canonical repository/worktree location. */
+export declare function validateSyncRegistration(registration: SyncRegistration, location: SyncLocation): SyncRegistration;
+export declare function parseSyncRegistration(value: unknown, recordPath: string): SyncRegistration;
+/** Reads only the exact registration for this repository/worktree. */
+export declare function readSyncRegistration(repoRoot: string, homeDirectory?: string): SyncRegistration | undefined;
+/** Atomically activates one fully staged generation for its worktree. */
+export declare function publishSyncRegistration(repoRoot: string, registration: SyncRegistration, homeDirectory?: string): string;
+export declare function syncStateSha256(statePath: string): string;
+//#endregion
+//# sourceMappingURL=syncRegistration.d.mts.map

package/dist/syncRegistration.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncRegistration.d.mts","names":[],"sources":["../src/services/syncRegistration/index.ts"],"mappings":";;;qBAiBa;;qBAEA;;qBAEA;iBAKI;EACf;EACA;;EAEA;EACA;EACA;;iBAGe;EACf;EACA;EACA;;YAGU,4BAA4B;iBAEvB;EACf;EACA;EACA,UAAU;EACV;EACA;EACA;EACA;EACA;EACA;;EAEA,eAAe;;EAEf,YAAY;EACZ,SAAS;;;wBA+FK,yBAAyB,cAAc,kBAAkB,UAAU,eAAe;wBAoGlF,sBAAsB,gBAAgB,qBAAqB;;wBA4B3D,qBAAqB,kBAAkB,yBAAyB;;wBAWhE,wBACd,kBACA,cAAc,kBACd;wBAUc,gBAAgB"}

package/dist/syncRegistration.mjs

@@ -0,0 +1,159 @@
+import { isRecord, writeFileAtomic } from "./runtimeJson.mjs";
+import { assertSyncLocationSafe, resolveSyncLocation, syncGenerationDirectory } from "./syncLocation.mjs";
+import { parseDoomServerBundle } from "./src/schemas/serverBundle.mjs";
+import "./serverFacet.mjs";
+import { parseDoomMcpBundle } from "./src/schemas/mcpBundle.mjs";
+import "./doomPackage.mjs";
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+//#region src/services/syncRegistration/index.ts
+/** Current registration schema shared by sync, the managed dispatcher, and runtime consumers. */
+const SYNC_REGISTRATION_VERSION = 2;
+/** Legacy schema accepted only with exact producer npm-version validation. */
+const LEGACY_SYNC_REGISTRATION_VERSION = 1;
+/** Runtime API contract shared by synchronized generations and DoomPi releases. */
+const DOOMPI_API_VERSION = 1;
+const SHA256 = /^[a-f0-9]{64}$/u;
+const PRIVATE_FILE_MODE = 384;
+function canonicalPath(target) {
+	return fs.realpathSync.native(path.resolve(target));
+}
+function isInside(directory, target) {
+	const relative = path.relative(canonicalPath(directory), canonicalPath(target));
+	return relative === "" || !relative.startsWith("..") && !path.isAbsolute(relative);
+}
+function requiredString(value, field, recordPath) {
+	if (typeof value !== "string" || value === "") throw new Error(`Doom sync registration at ${recordPath} has an invalid ${field}`);
+	return value;
+}
+function identityFrom(value, recordPath) {
+	if (!isRecord(value)) throw new Error(`Doom sync registration at ${recordPath} has no identity`);
+	return {
+		repositoryId: requiredString(value.repositoryId, "repository id", recordPath),
+		worktreeId: requiredString(value.worktreeId, "worktree id", recordPath)
+	};
+}
+function packageFrom(value, recordPath) {
+	if (!isRecord(value)) throw new Error(`Doom sync registration at ${recordPath} has no package record`);
+	return {
+		root: requiredString(value.root, "package root", recordPath),
+		version: requiredString(value.version, "package version", recordPath),
+		...value.apiVersion === void 0 ? {} : { apiVersion: value.apiVersion },
+		manifestPath: requiredString(value.manifestPath, "package manifest", recordPath),
+		entry: requiredString(value.entry, "package entry", recordPath)
+	};
+}
+function sha256File(filePath) {
+	return crypto.createHash("sha256").update(fs.readFileSync(filePath)).digest("hex");
+}
+function validatePackage(value, recordPath, recordVersion) {
+	const packageRoot = canonicalPath(value.root);
+	if (packageRoot !== path.resolve(value.root)) throw new Error(`Doom sync registration at ${recordPath} has a noncanonical package root`);
+	if (!isInside(packageRoot, value.manifestPath) || !isInside(packageRoot, value.entry)) throw new Error(`Doom sync registration at ${recordPath} references package material outside ${packageRoot}`);
+	if (canonicalPath(value.manifestPath) !== canonicalPath(path.join(packageRoot, "package.json"))) throw new Error(`Doom sync registration at ${recordPath} has an invalid package manifest path`);
+	const manifest = JSON.parse(fs.readFileSync(value.manifestPath, "utf8"));
+	if (manifest.name !== "@agimon-ai/doompi" || typeof manifest.version !== "string") throw new Error(`Doom sync registration at ${recordPath} does not match its DoomPi package`);
+	if (recordVersion === 1 && value.apiVersion === void 0) {
+		if (manifest.version !== value.version) throw new Error(`Doom sync registration at ${recordPath} does not match its DoomPi package`);
+	} else {
+		if (value.apiVersion === void 0) throw new Error(`Doom sync registration at ${recordPath} has no package API version`);
+		if (!Number.isSafeInteger(value.apiVersion) || value.apiVersion < 1) throw new Error(`Doom sync registration at ${recordPath} has an invalid package API version`);
+		if (manifest.doompiApiVersion !== value.apiVersion) throw new Error(`Doom sync registration at ${recordPath} has a mismatched package API version`);
+		if (value.apiVersion !== 1) throw new Error(`Unsupported DoomPi package API version at ${recordPath}`);
+	}
+	const extensions = manifest.pi?.extensions;
+	if (!Array.isArray(extensions) || !extensions.some((entry) => typeof entry === "string" && canonicalPath(path.resolve(packageRoot, entry)) === canonicalPath(value.entry))) throw new Error(`Doom sync registration at ${recordPath} does not match the package Pi entry`);
+}
+/** Validates one parsed registration against its canonical repository/worktree location. */
+function validateSyncRegistration(registration, location) {
+	const recordPath = location.registrationPath;
+	const recordVersion = registration.version;
+	if (recordVersion !== 2 && recordVersion !== 1) throw new Error(`Unsupported Doom sync registration version at ${recordPath}`);
+	const canonicalRoot = canonicalPath(registration.root);
+	if (canonicalRoot !== location.root || path.resolve(registration.root) !== canonicalRoot) throw new Error(`Doom sync registration at ${recordPath} has an invalid repository root`);
+	if (registration.identity.repositoryId !== location.identity.repositoryId || registration.identity.worktreeId !== location.identity.worktreeId) throw new Error(`Doom sync registration at ${recordPath} belongs to another repository or worktree`);
+	const expectedGenerationRoot = syncGenerationDirectory(location, registration.generation);
+	if (path.resolve(registration.generationRoot) !== path.resolve(expectedGenerationRoot)) throw new Error(`Doom sync registration at ${recordPath} has an invalid generation root`);
+	const generationStat = fs.lstatSync(registration.generationRoot, { throwIfNoEntry: false });
+	if (!generationStat?.isDirectory() || generationStat.isSymbolicLink()) throw new Error(`Doom sync registration at ${recordPath} has an unavailable generation`);
+	for (const target of [registration.statePath, registration.apiDirectory]) if (!isInside(registration.generationRoot, target)) throw new Error(`Doom sync registration at ${recordPath} references material outside its generation`);
+	if (registration.webDirectory !== null && !isInside(registration.generationRoot, registration.webDirectory)) throw new Error(`Doom sync registration at ${recordPath} references web material outside its generation`);
+	if (!SHA256.test(registration.stateSha256) || sha256File(registration.statePath) !== registration.stateSha256) throw new Error(`Doom sync registration at ${recordPath} has a mismatched state hash`);
+	let state = {};
+	try {
+		const parsed = JSON.parse(fs.readFileSync(registration.statePath, "utf8"));
+		if (isRecord(parsed)) state = parsed;
+	} catch (error) {
+		if (registration.serverBundle !== void 0) throw error;
+	}
+	if (registration.serverBundle !== void 0) {
+		const bundle = registration.serverBundle;
+		if (!isInside(registration.generationRoot, bundle.path) || canonicalPath(bundle.path) !== canonicalPath(path.join(registration.apiDirectory, "server.bundle.json"))) throw new Error(`Doom sync registration at ${recordPath} has an invalid server descriptor path`);
+		if (!SHA256.test(bundle.sha256) || sha256File(bundle.path) !== bundle.sha256) throw new Error(`Doom sync registration at ${recordPath} has a mismatched server descriptor hash`);
+		const descriptor = parseDoomServerBundle(JSON.parse(fs.readFileSync(bundle.path, "utf8")));
+		const recorded = state.serverBundle;
+		if (descriptor.generation !== registration.generation || descriptor.fingerprint !== bundle.fingerprint || !isRecord(recorded) || recorded.fingerprint !== bundle.fingerprint || recorded.descriptorPath !== bundle.path) throw new Error(`Doom sync registration at ${recordPath} has mismatched server bundle identity`);
+	} else if (state.serverBundle !== void 0) throw new Error(`Doom sync registration at ${recordPath} is missing its server bundle record`);
+	if (registration.mcpBundle !== void 0) {
+		const bundle = registration.mcpBundle;
+		if (!isInside(registration.generationRoot, bundle.path) || canonicalPath(bundle.path) !== canonicalPath(path.join(registration.generationRoot, "mcp", "mcp.bundle.json"))) throw new Error(`Doom sync registration at ${recordPath} has an invalid MCP descriptor path`);
+		if (!SHA256.test(bundle.sha256) || sha256File(bundle.path) !== bundle.sha256) throw new Error(`Doom sync registration at ${recordPath} has a mismatched MCP descriptor hash`);
+		const descriptor = parseDoomMcpBundle(JSON.parse(fs.readFileSync(bundle.path, "utf8")));
+		const recorded = state.mcpBundle;
+		if (descriptor.generation !== registration.generation || descriptor.fingerprint !== bundle.fingerprint || !isRecord(recorded) || recorded.fingerprint !== bundle.fingerprint || recorded.descriptorPath !== bundle.path) throw new Error(`Doom sync registration at ${recordPath} has mismatched MCP bundle identity`);
+		for (const entry of descriptor.entries) {
+			const modulePath = path.resolve(path.dirname(bundle.path), entry.module);
+			if (!isInside(registration.generationRoot, modulePath) || sha256File(modulePath) !== entry.sha256) throw new Error(`Doom sync registration at ${recordPath} has a mismatched MCP artifact hash`);
+		}
+	} else if (state.mcpBundle !== void 0) throw new Error(`Doom sync registration at ${recordPath} is missing its MCP bundle record`);
+	validatePackage(registration.package, recordPath, recordVersion);
+	return registration;
+}
+function parseSyncRegistration(value, recordPath) {
+	if (!isRecord(value)) throw new Error(`Doom sync registration at ${recordPath} is not an object`);
+	return {
+		version: value.version,
+		root: requiredString(value.root, "repository root", recordPath),
+		identity: identityFrom(value.identity, recordPath),
+		generation: requiredString(value.generation, "generation", recordPath),
+		generationRoot: requiredString(value.generationRoot, "generation root", recordPath),
+		statePath: requiredString(value.statePath, "state path", recordPath),
+		stateSha256: requiredString(value.stateSha256, "state hash", recordPath),
+		webDirectory: value.webDirectory === null ? null : requiredString(value.webDirectory, "web directory", recordPath),
+		apiDirectory: requiredString(value.apiDirectory, "API directory", recordPath),
+		...value.serverBundle === void 0 ? {} : { serverBundle: bundleFrom(value.serverBundle, recordPath, "server") },
+		...value.mcpBundle === void 0 ? {} : { mcpBundle: bundleFrom(value.mcpBundle, recordPath, "MCP") },
+		package: packageFrom(value.package, recordPath)
+	};
+}
+function bundleFrom(value, recordPath, kind) {
+	if (!isRecord(value)) throw new Error(`Doom sync registration at ${recordPath} has an invalid ${kind} bundle record`);
+	return {
+		path: requiredString(value.path, "server descriptor path", recordPath),
+		sha256: requiredString(value.sha256, "server descriptor hash", recordPath),
+		fingerprint: requiredString(value.fingerprint, "server descriptor fingerprint", recordPath)
+	};
+}
+/** Reads only the exact registration for this repository/worktree. */
+function readSyncRegistration(repoRoot, homeDirectory) {
+	const location = resolveSyncLocation(repoRoot, homeDirectory);
+	if (!fs.existsSync(location.registrationPath)) return void 0;
+	return validateSyncRegistration(parseSyncRegistration(JSON.parse(fs.readFileSync(location.registrationPath, "utf8")), location.registrationPath), location);
+}
+/** Atomically activates one fully staged generation for its worktree. */
+function publishSyncRegistration(repoRoot, registration, homeDirectory) {
+	const location = resolveSyncLocation(repoRoot, homeDirectory);
+	assertSyncLocationSafe(location);
+	validateSyncRegistration(registration, location);
+	writeFileAtomic(location.registrationPath, `${JSON.stringify(registration, null, 2)}\n`);
+	fs.chmodSync(location.registrationPath, PRIVATE_FILE_MODE);
+	return location.registrationPath;
+}
+function syncStateSha256(statePath) {
+	return sha256File(statePath);
+}
+//#endregion
+export { DOOMPI_API_VERSION, LEGACY_SYNC_REGISTRATION_VERSION, SYNC_REGISTRATION_VERSION, parseSyncRegistration, publishSyncRegistration, readSyncRegistration, syncStateSha256, validateSyncRegistration };
+
+//# sourceMappingURL=syncRegistration.mjs.map

package/dist/syncRegistration.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncRegistration.mjs","names":[],"sources":["../src/services/syncRegistration/index.ts"],"sourcesContent":["import crypto from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport { DOOM_SERVER_BUNDLE_FILE, parseDoomServerBundle } from '../../exports/serverFacet';\nimport { DOOM_MCP_BUNDLE_FILE, parseDoomMcpBundle } from '../../schemas/mcpBundle';\nimport { DOOM_PACKAGE_NAME } from '../doomPackage';\nimport { isRecord, writeFileAtomic } from '../json';\nimport {\n  assertSyncLocationSafe,\n  resolveSyncLocation,\n  syncGenerationDirectory,\n  type SyncIdentity,\n  type SyncLocation,\n} from '../syncLocation';\n\n/** Current registration schema shared by sync, the managed dispatcher, and runtime consumers. */\nexport const SYNC_REGISTRATION_VERSION = 2;\n/** Legacy schema accepted only with exact producer npm-version validation. */\nexport const LEGACY_SYNC_REGISTRATION_VERSION = 1;\n/** Runtime API contract shared by synchronized generations and DoomPi releases. */\nexport const DOOMPI_API_VERSION = 1;\n\nconst SHA256 = /^[a-f0-9]{64}$/u;\nconst PRIVATE_FILE_MODE = 0o600;\n\nexport interface SyncPackageRegistration {\n  root: string;\n  version: string;\n  /** Present in registrations written by the API-versioned sync protocol. */\n  apiVersion?: number;\n  manifestPath: string;\n  entry: string;\n}\n\nexport interface SyncServerBundleRegistration {\n  path: string;\n  sha256: string;\n  fingerprint: string;\n}\n\nexport type SyncMcpBundleRegistration = SyncServerBundleRegistration;\n\nexport interface SyncRegistration {\n  version: number;\n  root: string;\n  identity: SyncIdentity;\n  generation: string;\n  generationRoot: string;\n  statePath: string;\n  stateSha256: string;\n  webDirectory: string | null;\n  apiDirectory: string;\n  /** Missing only for explicitly supported pre-cutover generations. */\n  serverBundle?: SyncServerBundleRegistration;\n  /** Explicit MCP runtime admitted with this generation. */\n  mcpBundle?: SyncMcpBundleRegistration;\n  package: SyncPackageRegistration;\n}\n\nfunction canonicalPath(target: string): string {\n  return fs.realpathSync.native(path.resolve(target));\n}\n\nfunction isInside(directory: string, target: string): boolean {\n  const relative = path.relative(canonicalPath(directory), canonicalPath(target));\n  return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));\n}\n\nfunction requiredString(value: unknown, field: string, recordPath: string): string {\n  if (typeof value !== 'string' || value === '') {\n    throw new Error(`Doom sync registration at ${recordPath} has an invalid ${field}`);\n  }\n  return value;\n}\n\nfunction identityFrom(value: unknown, recordPath: string): SyncIdentity {\n  if (!isRecord(value)) throw new Error(`Doom sync registration at ${recordPath} has no identity`);\n  return {\n    repositoryId: requiredString(value.repositoryId, 'repository id', recordPath),\n    worktreeId: requiredString(value.worktreeId, 'worktree id', recordPath),\n  };\n}\n\nfunction packageFrom(value: unknown, recordPath: string): SyncPackageRegistration {\n  if (!isRecord(value)) throw new Error(`Doom sync registration at ${recordPath} has no package record`);\n  return {\n    root: requiredString(value.root, 'package root', recordPath),\n    version: requiredString(value.version, 'package version', recordPath),\n    ...(value.apiVersion === undefined ? {} : { apiVersion: value.apiVersion as number }),\n    manifestPath: requiredString(value.manifestPath, 'package manifest', recordPath),\n    entry: requiredString(value.entry, 'package entry', recordPath),\n  };\n}\n\nfunction sha256File(filePath: string): string {\n  return crypto.createHash('sha256').update(fs.readFileSync(filePath)).digest('hex');\n}\n\nfunction validatePackage(value: SyncPackageRegistration, recordPath: string, recordVersion: number): void {\n  const packageRoot = canonicalPath(value.root);\n  if (packageRoot !== path.resolve(value.root)) {\n    throw new Error(`Doom sync registration at ${recordPath} has a noncanonical package root`);\n  }\n  if (!isInside(packageRoot, value.manifestPath) || !isInside(packageRoot, value.entry)) {\n    throw new Error(`Doom sync registration at ${recordPath} references package material outside ${packageRoot}`);\n  }\n  if (canonicalPath(value.manifestPath) !== canonicalPath(path.join(packageRoot, 'package.json'))) {\n    throw new Error(`Doom sync registration at ${recordPath} has an invalid package manifest path`);\n  }\n  const manifest = JSON.parse(fs.readFileSync(value.manifestPath, 'utf8')) as {\n    name?: unknown;\n    version?: unknown;\n    doompiApiVersion?: unknown;\n    pi?: { extensions?: unknown };\n  };\n  if (manifest.name !== DOOM_PACKAGE_NAME || typeof manifest.version !== 'string') {\n    throw new Error(`Doom sync registration at ${recordPath} does not match its DoomPi package`);\n  }\n  if (recordVersion === LEGACY_SYNC_REGISTRATION_VERSION && value.apiVersion === undefined) {\n    // Registrations written before API compatibility was persisted remain valid\n    // only when their exact producer release is still installed.\n    if (manifest.version !== value.version) {\n      throw new Error(`Doom sync registration at ${recordPath} does not match its DoomPi package`);\n    }\n  } else {\n    if (value.apiVersion === undefined) {\n      throw new Error(`Doom sync registration at ${recordPath} has no package API version`);\n    }\n    if (!Number.isSafeInteger(value.apiVersion) || value.apiVersion < 1) {\n      throw new Error(`Doom sync registration at ${recordPath} has an invalid package API version`);\n    }\n    if (manifest.doompiApiVersion !== value.apiVersion) {\n      throw new Error(`Doom sync registration at ${recordPath} has a mismatched package API version`);\n    }\n    if (value.apiVersion !== DOOMPI_API_VERSION) {\n      throw new Error(`Unsupported DoomPi package API version at ${recordPath}`);\n    }\n  }\n  const extensions = manifest.pi?.extensions;\n  if (\n    !Array.isArray(extensions) ||\n    !extensions.some(\n      (entry) =>\n        typeof entry === 'string' && canonicalPath(path.resolve(packageRoot, entry)) === canonicalPath(value.entry),\n    )\n  ) {\n    throw new Error(`Doom sync registration at ${recordPath} does not match the package Pi entry`);\n  }\n}\n\n/** Validates one parsed registration against its canonical repository/worktree location. */\nexport function validateSyncRegistration(registration: SyncRegistration, location: SyncLocation): SyncRegistration {\n  const recordPath = location.registrationPath;\n  const recordVersion = registration.version;\n  if (recordVersion !== SYNC_REGISTRATION_VERSION && recordVersion !== LEGACY_SYNC_REGISTRATION_VERSION) {\n    throw new Error(`Unsupported Doom sync registration version at ${recordPath}`);\n  }\n  const canonicalRoot = canonicalPath(registration.root);\n  if (canonicalRoot !== location.root || path.resolve(registration.root) !== canonicalRoot) {\n    throw new Error(`Doom sync registration at ${recordPath} has an invalid repository root`);\n  }\n  if (\n    registration.identity.repositoryId !== location.identity.repositoryId ||\n    registration.identity.worktreeId !== location.identity.worktreeId\n  ) {\n    throw new Error(`Doom sync registration at ${recordPath} belongs to another repository or worktree`);\n  }\n  const expectedGenerationRoot = syncGenerationDirectory(location, registration.generation);\n  if (path.resolve(registration.generationRoot) !== path.resolve(expectedGenerationRoot)) {\n    throw new Error(`Doom sync registration at ${recordPath} has an invalid generation root`);\n  }\n  const generationStat = fs.lstatSync(registration.generationRoot, { throwIfNoEntry: false });\n  if (!generationStat?.isDirectory() || generationStat.isSymbolicLink()) {\n    throw new Error(`Doom sync registration at ${recordPath} has an unavailable generation`);\n  }\n  for (const target of [registration.statePath, registration.apiDirectory]) {\n    if (!isInside(registration.generationRoot, target)) {\n      throw new Error(`Doom sync registration at ${recordPath} references material outside its generation`);\n    }\n  }\n  if (registration.webDirectory !== null && !isInside(registration.generationRoot, registration.webDirectory)) {\n    throw new Error(`Doom sync registration at ${recordPath} references web material outside its generation`);\n  }\n  if (!SHA256.test(registration.stateSha256) || sha256File(registration.statePath) !== registration.stateSha256) {\n    throw new Error(`Doom sync registration at ${recordPath} has a mismatched state hash`);\n  }\n  let state: Record<string, unknown> = {};\n  try {\n    const parsed: unknown = JSON.parse(fs.readFileSync(registration.statePath, 'utf8'));\n    if (isRecord(parsed)) state = parsed;\n  } catch (error) {\n    // Legacy state validation remains the state reader's responsibility. New\n    // descriptor generations require their state identity during admission.\n    if (registration.serverBundle !== undefined) throw error;\n  }\n  if (registration.serverBundle !== undefined) {\n    const bundle = registration.serverBundle;\n    if (\n      !isInside(registration.generationRoot, bundle.path) ||\n      canonicalPath(bundle.path) !== canonicalPath(path.join(registration.apiDirectory, DOOM_SERVER_BUNDLE_FILE))\n    ) {\n      throw new Error(`Doom sync registration at ${recordPath} has an invalid server descriptor path`);\n    }\n    if (!SHA256.test(bundle.sha256) || sha256File(bundle.path) !== bundle.sha256) {\n      throw new Error(`Doom sync registration at ${recordPath} has a mismatched server descriptor hash`);\n    }\n    const descriptor = parseDoomServerBundle(JSON.parse(fs.readFileSync(bundle.path, 'utf8')));\n    const recorded = state.serverBundle;\n    if (\n      descriptor.generation !== registration.generation ||\n      descriptor.fingerprint !== bundle.fingerprint ||\n      !isRecord(recorded) ||\n      recorded.fingerprint !== bundle.fingerprint ||\n      recorded.descriptorPath !== bundle.path\n    ) {\n      throw new Error(`Doom sync registration at ${recordPath} has mismatched server bundle identity`);\n    }\n  } else if (state.serverBundle !== undefined) {\n    throw new Error(`Doom sync registration at ${recordPath} is missing its server bundle record`);\n  }\n  if (registration.mcpBundle !== undefined) {\n    const bundle = registration.mcpBundle;\n    if (\n      !isInside(registration.generationRoot, bundle.path) ||\n      canonicalPath(bundle.path) !== canonicalPath(path.join(registration.generationRoot, 'mcp', DOOM_MCP_BUNDLE_FILE))\n    )\n      throw new Error(`Doom sync registration at ${recordPath} has an invalid MCP descriptor path`);\n    if (!SHA256.test(bundle.sha256) || sha256File(bundle.path) !== bundle.sha256)\n      throw new Error(`Doom sync registration at ${recordPath} has a mismatched MCP descriptor hash`);\n    const descriptor = parseDoomMcpBundle(JSON.parse(fs.readFileSync(bundle.path, 'utf8')));\n    const recorded = state.mcpBundle;\n    if (\n      descriptor.generation !== registration.generation ||\n      descriptor.fingerprint !== bundle.fingerprint ||\n      !isRecord(recorded) ||\n      recorded.fingerprint !== bundle.fingerprint ||\n      recorded.descriptorPath !== bundle.path\n    )\n      throw new Error(`Doom sync registration at ${recordPath} has mismatched MCP bundle identity`);\n    for (const entry of descriptor.entries) {\n      const modulePath = path.resolve(path.dirname(bundle.path), entry.module);\n      if (!isInside(registration.generationRoot, modulePath) || sha256File(modulePath) !== entry.sha256)\n        throw new Error(`Doom sync registration at ${recordPath} has a mismatched MCP artifact hash`);\n    }\n  } else if (state.mcpBundle !== undefined) {\n    throw new Error(`Doom sync registration at ${recordPath} is missing its MCP bundle record`);\n  }\n  validatePackage(registration.package, recordPath, recordVersion);\n  return registration;\n}\n\nexport function parseSyncRegistration(value: unknown, recordPath: string): SyncRegistration {\n  if (!isRecord(value)) throw new Error(`Doom sync registration at ${recordPath} is not an object`);\n  return {\n    version: value.version as number,\n    root: requiredString(value.root, 'repository root', recordPath),\n    identity: identityFrom(value.identity, recordPath),\n    generation: requiredString(value.generation, 'generation', recordPath),\n    generationRoot: requiredString(value.generationRoot, 'generation root', recordPath),\n    statePath: requiredString(value.statePath, 'state path', recordPath),\n    stateSha256: requiredString(value.stateSha256, 'state hash', recordPath),\n    webDirectory: value.webDirectory === null ? null : requiredString(value.webDirectory, 'web directory', recordPath),\n    apiDirectory: requiredString(value.apiDirectory, 'API directory', recordPath),\n    ...(value.serverBundle === undefined ? {} : { serverBundle: bundleFrom(value.serverBundle, recordPath, 'server') }),\n    ...(value.mcpBundle === undefined ? {} : { mcpBundle: bundleFrom(value.mcpBundle, recordPath, 'MCP') }),\n    package: packageFrom(value.package, recordPath),\n  };\n}\n\nfunction bundleFrom(value: unknown, recordPath: string, kind: 'server' | 'MCP'): SyncServerBundleRegistration {\n  if (!isRecord(value)) throw new Error(`Doom sync registration at ${recordPath} has an invalid ${kind} bundle record`);\n  return {\n    path: requiredString(value.path, 'server descriptor path', recordPath),\n    sha256: requiredString(value.sha256, 'server descriptor hash', recordPath),\n    fingerprint: requiredString(value.fingerprint, 'server descriptor fingerprint', recordPath),\n  };\n}\n\n/** Reads only the exact registration for this repository/worktree. */\nexport function readSyncRegistration(repoRoot: string, homeDirectory?: string): SyncRegistration | undefined {\n  const location = resolveSyncLocation(repoRoot, homeDirectory);\n  if (!fs.existsSync(location.registrationPath)) return undefined;\n  const parsed = parseSyncRegistration(\n    JSON.parse(fs.readFileSync(location.registrationPath, 'utf8')),\n    location.registrationPath,\n  );\n  return validateSyncRegistration(parsed, location);\n}\n\n/** Atomically activates one fully staged generation for its worktree. */\nexport function publishSyncRegistration(\n  repoRoot: string,\n  registration: SyncRegistration,\n  homeDirectory?: string,\n): string {\n  const location = resolveSyncLocation(repoRoot, homeDirectory);\n  assertSyncLocationSafe(location);\n  validateSyncRegistration(registration, location);\n  writeFileAtomic(location.registrationPath, `${JSON.stringify(registration, null, 2)}\\n`);\n  fs.chmodSync(location.registrationPath, PRIVATE_FILE_MODE);\n  return location.registrationPath;\n}\n\nexport function syncStateSha256(statePath: string): string {\n  return sha256File(statePath);\n}\n"],"mappings":";;;;;;;;;;;AAiBA,MAAa,4BAA4B;;AAEzC,MAAa,mCAAmC;;AAEhD,MAAa,qBAAqB;AAElC,MAAM,SAAS;AACf,MAAM,oBAAoB;AAoC1B,SAAS,cAAc,QAAwB;CAC7C,OAAO,GAAG,aAAa,OAAO,KAAK,QAAQ,MAAM,CAAC;AACpD;AAEA,SAAS,SAAS,WAAmB,QAAyB;CAC5D,MAAM,WAAW,KAAK,SAAS,cAAc,SAAS,GAAG,cAAc,MAAM,CAAC;CAC9E,OAAO,aAAa,MAAO,CAAC,SAAS,WAAW,IAAI,KAAK,CAAC,KAAK,WAAW,QAAQ;AACpF;AAEA,SAAS,eAAe,OAAgB,OAAe,YAA4B;CACjF,IAAI,OAAO,UAAU,YAAY,UAAU,IACzC,MAAM,IAAI,MAAM,6BAA6B,WAAW,kBAAkB,OAAO;CAEnF,OAAO;AACT;AAEA,SAAS,aAAa,OAAgB,YAAkC;CACtE,IAAI,CAAC,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,6BAA6B,WAAW,iBAAiB;CAC/F,OAAO;EACL,cAAc,eAAe,MAAM,cAAc,iBAAiB,UAAU;EAC5E,YAAY,eAAe,MAAM,YAAY,eAAe,UAAU;CACxE;AACF;AAEA,SAAS,YAAY,OAAgB,YAA6C;CAChF,IAAI,CAAC,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,6BAA6B,WAAW,uBAAuB;CACrG,OAAO;EACL,MAAM,eAAe,MAAM,MAAM,gBAAgB,UAAU;EAC3D,SAAS,eAAe,MAAM,SAAS,mBAAmB,UAAU;EACpE,GAAI,MAAM,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,MAAM,WAAqB;EACnF,cAAc,eAAe,MAAM,cAAc,oBAAoB,UAAU;EAC/E,OAAO,eAAe,MAAM,OAAO,iBAAiB,UAAU;CAChE;AACF;AAEA,SAAS,WAAW,UAA0B;CAC5C,OAAO,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,GAAG,aAAa,QAAQ,CAAC,CAAC,CAAC,OAAO,KAAK;AACnF;AAEA,SAAS,gBAAgB,OAAgC,YAAoB,eAA6B;CACxG,MAAM,cAAc,cAAc,MAAM,IAAI;CAC5C,IAAI,gBAAgB,KAAK,QAAQ,MAAM,IAAI,GACzC,MAAM,IAAI,MAAM,6BAA6B,WAAW,iCAAiC;CAE3F,IAAI,CAAC,SAAS,aAAa,MAAM,YAAY,KAAK,CAAC,SAAS,aAAa,MAAM,KAAK,GAClF,MAAM,IAAI,MAAM,6BAA6B,WAAW,uCAAuC,aAAa;CAE9G,IAAI,cAAc,MAAM,YAAY,MAAM,cAAc,KAAK,KAAK,aAAa,cAAc,CAAC,GAC5F,MAAM,IAAI,MAAM,6BAA6B,WAAW,sCAAsC;CAEhG,MAAM,WAAW,KAAK,MAAM,GAAG,aAAa,MAAM,cAAc,MAAM,CAAC;CAMvE,IAAI,SAAS,SAAA,uBAA8B,OAAO,SAAS,YAAY,UACrE,MAAM,IAAI,MAAM,6BAA6B,WAAW,mCAAmC;CAE7F,IAAI,kBAAA,KAAsD,MAAM,eAAe,KAAA,GAGzE;MAAA,SAAS,YAAY,MAAM,SAC7B,MAAM,IAAI,MAAM,6BAA6B,WAAW,mCAAmC;CAAA,OAExF;EACL,IAAI,MAAM,eAAe,KAAA,GACvB,MAAM,IAAI,MAAM,6BAA6B,WAAW,4BAA4B;EAEtF,IAAI,CAAC,OAAO,cAAc,MAAM,UAAU,KAAK,MAAM,aAAa,GAChE,MAAM,IAAI,MAAM,6BAA6B,WAAW,oCAAoC;EAE9F,IAAI,SAAS,qBAAqB,MAAM,YACtC,MAAM,IAAI,MAAM,6BAA6B,WAAW,sCAAsC;EAEhG,IAAI,MAAM,eAAA,GACR,MAAM,IAAI,MAAM,6CAA6C,YAAY;CAE7E;CACA,MAAM,aAAa,SAAS,IAAI;CAChC,IACE,CAAC,MAAM,QAAQ,UAAU,KACzB,CAAC,WAAW,MACT,UACC,OAAO,UAAU,YAAY,cAAc,KAAK,QAAQ,aAAa,KAAK,CAAC,MAAM,cAAc,MAAM,KAAK,CAC9G,GAEA,MAAM,IAAI,MAAM,6BAA6B,WAAW,qCAAqC;AAEjG;;AAGA,SAAgB,yBAAyB,cAAgC,UAA0C;CACjH,MAAM,aAAa,SAAS;CAC5B,MAAM,gBAAgB,aAAa;CACnC,IAAI,kBAAA,KAA+C,kBAAA,GACjD,MAAM,IAAI,MAAM,iDAAiD,YAAY;CAE/E,MAAM,gBAAgB,cAAc,aAAa,IAAI;CACrD,IAAI,kBAAkB,SAAS,QAAQ,KAAK,QAAQ,aAAa,IAAI,MAAM,eACzE,MAAM,IAAI,MAAM,6BAA6B,WAAW,gCAAgC;CAE1F,IACE,aAAa,SAAS,iBAAiB,SAAS,SAAS,gBACzD,aAAa,SAAS,eAAe,SAAS,SAAS,YAEvD,MAAM,IAAI,MAAM,6BAA6B,WAAW,2CAA2C;CAErG,MAAM,yBAAyB,wBAAwB,UAAU,aAAa,UAAU;CACxF,IAAI,KAAK,QAAQ,aAAa,cAAc,MAAM,KAAK,QAAQ,sBAAsB,GACnF,MAAM,IAAI,MAAM,6BAA6B,WAAW,gCAAgC;CAE1F,MAAM,iBAAiB,GAAG,UAAU,aAAa,gBAAgB,EAAE,gBAAgB,MAAM,CAAC;CAC1F,IAAI,CAAC,gBAAgB,YAAY,KAAK,eAAe,eAAe,GAClE,MAAM,IAAI,MAAM,6BAA6B,WAAW,+BAA+B;CAEzF,KAAK,MAAM,UAAU,CAAC,aAAa,WAAW,aAAa,YAAY,GACrE,IAAI,CAAC,SAAS,aAAa,gBAAgB,MAAM,GAC/C,MAAM,IAAI,MAAM,6BAA6B,WAAW,4CAA4C;CAGxG,IAAI,aAAa,iBAAiB,QAAQ,CAAC,SAAS,aAAa,gBAAgB,aAAa,YAAY,GACxG,MAAM,IAAI,MAAM,6BAA6B,WAAW,gDAAgD;CAE1G,IAAI,CAAC,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,aAAa,SAAS,MAAM,aAAa,aAChG,MAAM,IAAI,MAAM,6BAA6B,WAAW,6BAA6B;CAEvF,IAAI,QAAiC,CAAC;CACtC,IAAI;EACF,MAAM,SAAkB,KAAK,MAAM,GAAG,aAAa,aAAa,WAAW,MAAM,CAAC;EAClF,IAAI,SAAS,MAAM,GAAG,QAAQ;CAChC,SAAS,OAAO;EAGd,IAAI,aAAa,iBAAiB,KAAA,GAAW,MAAM;CACrD;CACA,IAAI,aAAa,iBAAiB,KAAA,GAAW;EAC3C,MAAM,SAAS,aAAa;EAC5B,IACE,CAAC,SAAS,aAAa,gBAAgB,OAAO,IAAI,KAClD,cAAc,OAAO,IAAI,MAAM,cAAc,KAAK,KAAK,aAAa,cAAA,oBAAqC,CAAC,GAE1G,MAAM,IAAI,MAAM,6BAA6B,WAAW,uCAAuC;EAEjG,IAAI,CAAC,OAAO,KAAK,OAAO,MAAM,KAAK,WAAW,OAAO,IAAI,MAAM,OAAO,QACpE,MAAM,IAAI,MAAM,6BAA6B,WAAW,yCAAyC;EAEnG,MAAM,aAAa,sBAAsB,KAAK,MAAM,GAAG,aAAa,OAAO,MAAM,MAAM,CAAC,CAAC;EACzF,MAAM,WAAW,MAAM;EACvB,IACE,WAAW,eAAe,aAAa,cACvC,WAAW,gBAAgB,OAAO,eAClC,CAAC,SAAS,QAAQ,KAClB,SAAS,gBAAgB,OAAO,eAChC,SAAS,mBAAmB,OAAO,MAEnC,MAAM,IAAI,MAAM,6BAA6B,WAAW,uCAAuC;CAEnG,OAAO,IAAI,MAAM,iBAAiB,KAAA,GAChC,MAAM,IAAI,MAAM,6BAA6B,WAAW,qCAAqC;CAE/F,IAAI,aAAa,cAAc,KAAA,GAAW;EACxC,MAAM,SAAS,aAAa;EAC5B,IACE,CAAC,SAAS,aAAa,gBAAgB,OAAO,IAAI,KAClD,cAAc,OAAO,IAAI,MAAM,cAAc,KAAK,KAAK,aAAa,gBAAgB,OAAA,iBAA2B,CAAC,GAEhH,MAAM,IAAI,MAAM,6BAA6B,WAAW,oCAAoC;EAC9F,IAAI,CAAC,OAAO,KAAK,OAAO,MAAM,KAAK,WAAW,OAAO,IAAI,MAAM,OAAO,QACpE,MAAM,IAAI,MAAM,6BAA6B,WAAW,sCAAsC;EAChG,MAAM,aAAa,mBAAmB,KAAK,MAAM,GAAG,aAAa,OAAO,MAAM,MAAM,CAAC,CAAC;EACtF,MAAM,WAAW,MAAM;EACvB,IACE,WAAW,eAAe,aAAa,cACvC,WAAW,gBAAgB,OAAO,eAClC,CAAC,SAAS,QAAQ,KAClB,SAAS,gBAAgB,OAAO,eAChC,SAAS,mBAAmB,OAAO,MAEnC,MAAM,IAAI,MAAM,6BAA6B,WAAW,oCAAoC;EAC9F,KAAK,MAAM,SAAS,WAAW,SAAS;GACtC,MAAM,aAAa,KAAK,QAAQ,KAAK,QAAQ,OAAO,IAAI,GAAG,MAAM,MAAM;GACvE,IAAI,CAAC,SAAS,aAAa,gBAAgB,UAAU,KAAK,WAAW,UAAU,MAAM,MAAM,QACzF,MAAM,IAAI,MAAM,6BAA6B,WAAW,oCAAoC;EAChG;CACF,OAAO,IAAI,MAAM,cAAc,KAAA,GAC7B,MAAM,IAAI,MAAM,6BAA6B,WAAW,kCAAkC;CAE5F,gBAAgB,aAAa,SAAS,YAAY,aAAa;CAC/D,OAAO;AACT;AAEA,SAAgB,sBAAsB,OAAgB,YAAsC;CAC1F,IAAI,CAAC,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,6BAA6B,WAAW,kBAAkB;CAChG,OAAO;EACL,SAAS,MAAM;EACf,MAAM,eAAe,MAAM,MAAM,mBAAmB,UAAU;EAC9D,UAAU,aAAa,MAAM,UAAU,UAAU;EACjD,YAAY,eAAe,MAAM,YAAY,cAAc,UAAU;EACrE,gBAAgB,eAAe,MAAM,gBAAgB,mBAAmB,UAAU;EAClF,WAAW,eAAe,MAAM,WAAW,cAAc,UAAU;EACnE,aAAa,eAAe,MAAM,aAAa,cAAc,UAAU;EACvE,cAAc,MAAM,iBAAiB,OAAO,OAAO,eAAe,MAAM,cAAc,iBAAiB,UAAU;EACjH,cAAc,eAAe,MAAM,cAAc,iBAAiB,UAAU;EAC5E,GAAI,MAAM,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc,WAAW,MAAM,cAAc,YAAY,QAAQ,EAAE;EACjH,GAAI,MAAM,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,WAAW,MAAM,WAAW,YAAY,KAAK,EAAE;EACrG,SAAS,YAAY,MAAM,SAAS,UAAU;CAChD;AACF;AAEA,SAAS,WAAW,OAAgB,YAAoB,MAAsD;CAC5G,IAAI,CAAC,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,6BAA6B,WAAW,kBAAkB,KAAK,eAAe;CACpH,OAAO;EACL,MAAM,eAAe,MAAM,MAAM,0BAA0B,UAAU;EACrE,QAAQ,eAAe,MAAM,QAAQ,0BAA0B,UAAU;EACzE,aAAa,eAAe,MAAM,aAAa,iCAAiC,UAAU;CAC5F;AACF;;AAGA,SAAgB,qBAAqB,UAAkB,eAAsD;CAC3G,MAAM,WAAW,oBAAoB,UAAU,aAAa;CAC5D,IAAI,CAAC,GAAG,WAAW,SAAS,gBAAgB,GAAG,OAAO,KAAA;CAKtD,OAAO,yBAJQ,sBACb,KAAK,MAAM,GAAG,aAAa,SAAS,kBAAkB,MAAM,CAAC,GAC7D,SAAS,gBAE0B,GAAG,QAAQ;AAClD;;AAGA,SAAgB,wBACd,UACA,cACA,eACQ;CACR,MAAM,WAAW,oBAAoB,UAAU,aAAa;CAC5D,uBAAuB,QAAQ;CAC/B,yBAAyB,cAAc,QAAQ;CAC/C,gBAAgB,SAAS,kBAAkB,GAAG,KAAK,UAAU,cAAc,MAAM,CAAC,EAAE,GAAG;CACvF,GAAG,UAAU,SAAS,kBAAkB,iBAAiB;CACzD,OAAO,SAAS;AAClB;AAEA,SAAgB,gBAAgB,WAA2B;CACzD,OAAO,WAAW,SAAS;AAC7B"}

package/dist/syncStateContract.cjs

@@ -0,0 +1,19 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region src/services/syncStateContract/index.ts
+/**
+* Bumped whenever the persisted sync-state shape changes.
+*
+* Version 13 carries the immutable MCP projection as file-only state. Older
+* records relied on process environment and cannot safely select MCP servers
+* after an in-process reload.
+*/
+const SYNC_STATE_VERSION = 13;
+/** Version 5 maps each composition fingerprint directly to its compiler manifest. */
+const PRECOMPILE_STATE_VERSION = 5;
+const BUNDLED_PRECOMPILE_STRATEGY = "bundle";
+//#endregion
+exports.BUNDLED_PRECOMPILE_STRATEGY = BUNDLED_PRECOMPILE_STRATEGY;
+exports.PRECOMPILE_STATE_VERSION = PRECOMPILE_STATE_VERSION;
+exports.SYNC_STATE_VERSION = SYNC_STATE_VERSION;
+
+//# sourceMappingURL=syncStateContract.cjs.map

package/dist/syncStateContract.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncStateContract.cjs","names":[],"sources":["../src/services/syncStateContract/index.ts"],"sourcesContent":["/**\n * Bumped whenever the persisted sync-state shape changes.\n *\n * Version 13 carries the immutable MCP projection as file-only state. Older\n * records relied on process environment and cannot safely select MCP servers\n * after an in-process reload.\n */\nexport const SYNC_STATE_VERSION = 13;\n\n/** Version 5 maps each composition fingerprint directly to its compiler manifest. */\nexport const PRECOMPILE_STATE_VERSION = 5;\n\nexport const BUNDLED_PRECOMPILE_STRATEGY = 'bundle';\n"],"mappings":";;;;;;;;;AAOA,MAAa,qBAAqB;;AAGlC,MAAa,2BAA2B;AAExC,MAAa,8BAA8B"}

package/dist/syncStateContract.d.mts

@@ -0,0 +1,14 @@
+//#region src/services/syncStateContract/index.d.ts
+/**
+ * Bumped whenever the persisted sync-state shape changes.
+ *
+ * Version 13 carries the immutable MCP projection as file-only state. Older
+ * records relied on process environment and cannot safely select MCP servers
+ * after an in-process reload.
+ */
+export declare const SYNC_STATE_VERSION = 13;
+/** Version 5 maps each composition fingerprint directly to its compiler manifest. */
+export declare const PRECOMPILE_STATE_VERSION = 5;
+export declare const BUNDLED_PRECOMPILE_STRATEGY = "bundle";
+//#endregion
+//# sourceMappingURL=syncStateContract.d.mts.map

package/dist/syncStateContract.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncStateContract.d.mts","names":[],"sources":["../src/services/syncStateContract/index.ts"],"mappings":";;;;;;;;qBAOa;;qBAGA;qBAEA"}

package/dist/syncStateContract.mjs

@@ -0,0 +1,16 @@
+//#region src/services/syncStateContract/index.ts
+/**
+* Bumped whenever the persisted sync-state shape changes.
+*
+* Version 13 carries the immutable MCP projection as file-only state. Older
+* records relied on process environment and cannot safely select MCP servers
+* after an in-process reload.
+*/
+const SYNC_STATE_VERSION = 13;
+/** Version 5 maps each composition fingerprint directly to its compiler manifest. */
+const PRECOMPILE_STATE_VERSION = 5;
+const BUNDLED_PRECOMPILE_STRATEGY = "bundle";
+//#endregion
+export { BUNDLED_PRECOMPILE_STRATEGY, PRECOMPILE_STATE_VERSION, SYNC_STATE_VERSION };
+
+//# sourceMappingURL=syncStateContract.mjs.map

package/dist/syncStateContract.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncStateContract.mjs","names":[],"sources":["../src/services/syncStateContract/index.ts"],"sourcesContent":["/**\n * Bumped whenever the persisted sync-state shape changes.\n *\n * Version 13 carries the immutable MCP projection as file-only state. Older\n * records relied on process environment and cannot safely select MCP servers\n * after an in-process reload.\n */\nexport const SYNC_STATE_VERSION = 13;\n\n/** Version 5 maps each composition fingerprint directly to its compiler manifest. */\nexport const PRECOMPILE_STATE_VERSION = 5;\n\nexport const BUNDLED_PRECOMPILE_STRATEGY = 'bundle';\n"],"mappings":";;;;;;;;AAOA,MAAa,qBAAqB;;AAGlC,MAAa,2BAA2B;AAExC,MAAa,8BAA8B"}