@agimon-ai/doompi-core 0.0.1-alpha.100

package/dist/historyImport.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"historyImport.mjs","names":[],"sources":["../src/services/historyImport/index.ts"],"sourcesContent":["import { createHash, randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport { writeFileAtomic } from '../json';\nimport { importV3WithPinnedUpstream } from '../jsonlSessionRepo';\n\nexport interface HistoryOwnershipLease {\n  assertQuiescent(): void | Promise<void>;\n  release(): void | Promise<void>;\n}\n\n/**\n * The caller must establish ownership and stop all managed writers before this\n * adapter reads or publishes a session. A filesystem lock cannot prove that an\n * unmanaged Pi process has stopped, so the boundary stays explicit.\n */\nexport interface HistoryOwnership {\n  acquire(sourcePath: string): HistoryOwnershipLease | Promise<HistoryOwnershipLease>;\n}\n\nexport interface HistoryEntryProof {\n  sourceId: string;\n  importedId: string;\n  sourceParentId: string | null;\n  importedParentId: string | null;\n  sourceContentHash: string;\n  importedContentHash: string;\n}\n\nexport interface HistoryBranchProof {\n  sourceTipId: string | null;\n  importedTipId: string | null;\n  branch?: string;\n}\n\nexport interface HistoryImportVerification {\n  entries: readonly HistoryEntryProof[];\n  branches: readonly HistoryBranchProof[];\n  /** Source records projected into upstream values rather than physical entries. */\n  projectedSourceIds?: readonly string[];\n}\n\nexport interface HistorySourceIdentity {\n  path: string;\n  realPath: string;\n  device: number;\n  inode: number;\n  size: number;\n  mtimeMs: number;\n  sha256: string;\n}\n\nexport interface HistoryStagingImportInput {\n  sourcePath: string;\n  stagingPath: string;\n  originalPath: string;\n  sourceIdentity: HistorySourceIdentity;\n}\n\nexport interface HistoryImportOptions {\n  sourcePath: string;\n  destinationPath: string;\n  owner: HistoryOwnership;\n  importStaging?: (input: HistoryStagingImportInput) => HistoryImportVerification | Promise<HistoryImportVerification>;\n  verifyStaging?: (stagingPath: string, proof: HistoryImportVerification) => Promise<HistoryImportVerification>;\n  originalPath?: string;\n  statePath?: string;\n}\n\nexport interface ProtectedHistoryImportResult {\n  status: 'published' | 'already-published';\n  sourceIdentity: HistorySourceIdentity;\n  originalPath: string;\n  destinationPath: string;\n  statePath: string;\n  verification: HistoryImportVerification;\n  stagedSha256: string;\n}\n\nexport interface RestoreProtectedHistoryOptions {\n  sourcePath: string;\n  originalPath: string;\n  owner: HistoryOwnership;\n}\n\ninterface ImportState {\n  version: 1;\n  operation: 'protected-history-import';\n  phase: 'prepared' | 'staged' | 'verified' | 'published';\n  sourcePath: string;\n  destinationPath: string;\n  originalPath: string;\n  stagingPath: string;\n  sourceIdentity: HistorySourceIdentity;\n  verification?: HistoryImportVerification;\n  stagedSha256?: string;\n}\n\nconst IMPORT_STATE_VERSION = 1;\nconst IMPORT_OPERATION = 'protected-history-import';\n\nfunction asRecord(value: unknown): Record<string, unknown> | undefined {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : undefined;\n}\n\nfunction requireString(value: unknown, field: string): string {\n  if (typeof value !== 'string' || value.length === 0) throw new Error(`Invalid history import ${field}`);\n  return value;\n}\n\nfunction requireNullableString(value: unknown, field: string): string | null {\n  if (value !== null && typeof value !== 'string') throw new Error(`Invalid history import ${field}`);\n  return value;\n}\n\nfunction requireHash(value: unknown, field: string): string {\n  const hash = requireString(value, field);\n  if (!/^[a-f0-9]{64}$/.test(hash)) throw new Error(`Invalid history import ${field}`);\n  return hash;\n}\n\nfunction sha256(content: Uint8Array): string {\n  return createHash('sha256').update(content).digest('hex');\n}\n\nfunction readSource(sourcePath: string): { content: Buffer; identity: HistorySourceIdentity } {\n  const before = fs.statSync(sourcePath);\n  const content = fs.readFileSync(sourcePath);\n  const after = fs.statSync(sourcePath);\n  if (\n    before.dev !== after.dev ||\n    before.ino !== after.ino ||\n    before.size !== after.size ||\n    before.mtimeMs !== after.mtimeMs ||\n    after.size !== content.byteLength\n  ) {\n    throw new Error('Protected history source changed while it was being read');\n  }\n  return {\n    content,\n    identity: {\n      path: path.resolve(sourcePath),\n      realPath: fs.realpathSync(sourcePath),\n      device: after.dev,\n      inode: after.ino,\n      size: after.size,\n      mtimeMs: after.mtimeMs,\n      sha256: sha256(content),\n    },\n  };\n}\n\nfunction sameIdentity(left: HistorySourceIdentity, right: HistorySourceIdentity): boolean {\n  return (\n    left.path === right.path &&\n    left.realPath === right.realPath &&\n    left.device === right.device &&\n    left.inode === right.inode &&\n    left.size === right.size &&\n    left.mtimeMs === right.mtimeMs &&\n    left.sha256 === right.sha256\n  );\n}\n\nfunction ensureOwnerOnly(filePath: string): void {\n  fs.chmodSync(filePath, 0o600);\n}\n\nfunction writeExclusive(filePath: string, content: Uint8Array): void {\n  fs.mkdirSync(path.dirname(filePath), { recursive: true });\n  let fd: number | undefined;\n  try {\n    fd = fs.openSync(filePath, 'wx', 0o600);\n    fs.writeFileSync(fd, content);\n    fs.fsyncSync(fd);\n  } catch (error) {\n    if (fd !== undefined) {\n      fs.closeSync(fd);\n      fs.rmSync(filePath, { force: true });\n    }\n    throw error;\n  }\n  fs.closeSync(fd);\n  ensureOwnerOnly(filePath);\n  const directoryFd = fs.openSync(path.dirname(filePath), 'r');\n  try {\n    fs.fsyncSync(directoryFd);\n  } finally {\n    fs.closeSync(directoryFd);\n  }\n}\n\nfunction ensureOriginal(originalPath: string, content: Uint8Array): void {\n  if (fs.existsSync(originalPath)) {\n    const stat = fs.lstatSync(originalPath);\n    if (!stat.isFile() || stat.nlink !== 1)\n      throw new Error(`Protected history original must be an independent file: ${originalPath}`);\n    const existing = fs.readFileSync(originalPath);\n    if (sha256(existing) !== sha256(content)) throw new Error(`Protected history original differs: ${originalPath}`);\n    ensureOwnerOnly(originalPath);\n    return;\n  }\n  try {\n    writeExclusive(originalPath, content);\n  } catch (error) {\n    if (!isFileSystemError(error) || error.code !== 'EEXIST') throw error;\n    const stat = fs.lstatSync(originalPath);\n    if (!stat.isFile() || stat.nlink !== 1)\n      throw new Error(`Protected history original must be an independent file: ${originalPath}`);\n    const existing = fs.readFileSync(originalPath);\n    if (sha256(existing) !== sha256(content)) throw new Error(`Protected history original differs: ${originalPath}`);\n    ensureOwnerOnly(originalPath);\n  }\n}\n\n/** Preserve exact bytes before upstream open is allowed to repair a native journal. */\nexport async function preserveHistoryBeforeOpen(sourcePath: string, lease: HistoryOwnershipLease): Promise<string> {\n  await lease.assertQuiescent();\n  const source = readSource(sourcePath);\n  const originalPath = `${source.identity.realPath}.recovery-${source.identity.sha256}.original`;\n  ensureOriginal(originalPath, source.content);\n  const recordPath = `${originalPath}.json`;\n  if (!fs.existsSync(recordPath)) {\n    writeExclusive(\n      recordPath,\n      Buffer.from(`${JSON.stringify({ version: 1, source: source.identity, originalPath })}\\n`),\n    );\n  } else {\n    const record = asRecord(JSON.parse(fs.readFileSync(recordPath, 'utf8')));\n    const identity = asRecord(record?.source);\n    if (\n      record?.originalPath !== originalPath ||\n      identity?.sha256 !== source.identity.sha256 ||\n      identity.realPath !== source.identity.realPath\n    ) {\n      throw new Error('Existing recovery provenance does not match the protected journal');\n    }\n  }\n  await lease.assertQuiescent();\n  if (!sameIdentity(source.identity, readSource(sourcePath).identity))\n    throw new Error('Journal changed during recovery preservation');\n  return originalPath;\n}\n\nfunction writeBinaryAtomically(filePath: string, content: Uint8Array): void {\n  fs.mkdirSync(path.dirname(filePath), { recursive: true });\n  const temporaryPath = `${filePath}.${process.pid}.${randomUUID()}.tmp`;\n  try {\n    writeExclusive(temporaryPath, content);\n    fs.renameSync(temporaryPath, filePath);\n  } catch (error) {\n    fs.rmSync(temporaryPath, { force: true });\n    throw error;\n  }\n}\n\nfunction publishDistinct(stagingPath: string, destinationPath: string): void {\n  if (fs.existsSync(destinationPath)) throw new Error(`Refusing to overwrite derived history: ${destinationPath}`);\n  fs.mkdirSync(path.dirname(destinationPath), { recursive: true });\n  fs.linkSync(stagingPath, destinationPath);\n  fs.unlinkSync(stagingPath);\n}\n\nfunction writeState(statePath: string, state: ImportState): void {\n  writeFileAtomic(statePath, `${JSON.stringify(state, null, 2)}\\n`);\n  ensureOwnerOnly(statePath);\n}\n\nfunction readState(statePath: string): ImportState | undefined {\n  if (!fs.existsSync(statePath)) return undefined;\n  ensureOwnerOnly(statePath);\n  const value = asRecord(JSON.parse(fs.readFileSync(statePath, 'utf8')));\n  if (value?.version !== IMPORT_STATE_VERSION || value.operation !== IMPORT_OPERATION) {\n    throw new Error(`Invalid protected history state: ${statePath}`);\n  }\n  const phase = value.phase;\n  if (phase !== 'prepared' && phase !== 'staged' && phase !== 'verified' && phase !== 'published') {\n    throw new Error(`Invalid protected history state phase: ${String(phase)}`);\n  }\n  const sourceIdentity = asRecord(value.sourceIdentity);\n  const verification = value.verification === undefined ? undefined : parseVerification(value.verification);\n  return {\n    version: 1,\n    operation: IMPORT_OPERATION,\n    phase,\n    sourcePath: requireString(value.sourcePath, 'state source path'),\n    destinationPath: requireString(value.destinationPath, 'state destination path'),\n    originalPath: requireString(value.originalPath, 'state original path'),\n    stagingPath: requireString(value.stagingPath, 'state staging path'),\n    sourceIdentity: parseSourceIdentity(sourceIdentity),\n    verification,\n    stagedSha256: value.stagedSha256 === undefined ? undefined : requireHash(value.stagedSha256, 'staged checksum'),\n  };\n}\n\nfunction parseSourceIdentity(value: Record<string, unknown> | undefined): HistorySourceIdentity {\n  if (value === undefined) throw new Error('Invalid protected history source identity');\n  const numeric = (field: string): number => {\n    const number = value[field];\n    if (typeof number !== 'number' || !Number.isSafeInteger(number) || number < 0)\n      throw new Error(`Invalid history import ${field}`);\n    return number;\n  };\n  const mtimeMs = value.mtimeMs;\n  if (typeof mtimeMs !== 'number' || !Number.isFinite(mtimeMs) || mtimeMs < 0) {\n    throw new Error('Invalid history import mtimeMs');\n  }\n  return {\n    path: requireString(value.path, 'source path'),\n    realPath: requireString(value.realPath, 'source real path'),\n    device: numeric('device'),\n    inode: numeric('inode'),\n    size: numeric('size'),\n    mtimeMs,\n    sha256: requireHash(value.sha256, 'source checksum'),\n  };\n}\n\nfunction parseVerification(value: unknown): HistoryImportVerification {\n  const record = asRecord(value);\n  if (record === undefined || !Array.isArray(record.entries) || !Array.isArray(record.branches)) {\n    throw new Error('Invalid protected history verification');\n  }\n  const entries = record.entries.map((entry, index) => {\n    const item = asRecord(entry);\n    if (item === undefined) throw new Error(`Invalid history entry proof at index ${index}`);\n    return {\n      sourceId: requireString(item.sourceId, 'entry source id'),\n      importedId: requireString(item.importedId, 'entry imported id'),\n      sourceParentId: requireNullableString(item.sourceParentId, 'entry source parent id'),\n      importedParentId: requireNullableString(item.importedParentId, 'entry imported parent id'),\n      sourceContentHash: requireHash(item.sourceContentHash, 'entry source content hash'),\n      importedContentHash: requireHash(item.importedContentHash, 'entry imported content hash'),\n    };\n  });\n  const branches = record.branches.map((branch, index) => {\n    const item = asRecord(branch);\n    if (item === undefined) throw new Error(`Invalid history branch proof at index ${index}`);\n    const name = item.branch === undefined ? undefined : requireString(item.branch, `branch name at index ${index}`);\n    return {\n      sourceTipId: requireNullableString(item.sourceTipId, `branch source tip id at index ${index}`),\n      importedTipId: requireNullableString(item.importedTipId, `branch imported tip id at index ${index}`),\n      ...(name === undefined ? {} : { branch: name }),\n    };\n  });\n  const projectedSourceIds = record.projectedSourceIds;\n  if (\n    projectedSourceIds !== undefined &&\n    (!Array.isArray(projectedSourceIds) || projectedSourceIds.some((id) => typeof id !== 'string' || id.length === 0))\n  ) {\n    throw new Error('Invalid projected protected history source ids');\n  }\n  const projected = projectedSourceIds as string[] | undefined;\n  if (projected !== undefined && new Set(projected).size !== projected.length) {\n    throw new Error('Duplicate projected protected history source id');\n  }\n  return { entries, branches, ...(projected === undefined ? {} : { projectedSourceIds: projected }) };\n}\n\ninterface ParsedHistory {\n  header: Record<string, unknown>;\n  labels: Map<string, unknown>;\n  sessionName: unknown;\n  records: Record<string, unknown>[];\n  byId: Map<string, Record<string, unknown>>;\n  branchTips: Map<string, string | null>;\n}\n\nfunction parseHistory(content: Uint8Array, expected: 'v3' | 'v4' | 'auto'): ParsedHistory {\n  const text = Buffer.from(content).toString('utf8');\n  if (Buffer.from(text).compare(Buffer.from(content)) !== 0 || !text.endsWith('\\n')) {\n    throw new Error('Protected history JSONL is truncated or not valid UTF-8');\n  }\n  const lines = text.slice(0, -1).split('\\n');\n  const first = lines[0];\n  if (first === undefined || first.length === 0) throw new Error('Protected history is empty');\n  const header = asRecord(JSON.parse(first));\n  const actual =\n    header?.type === 'session' && header.version === 3\n      ? 'v3'\n      : header?.kind === 'header' && header.v === 4\n        ? 'v4'\n        : undefined;\n  if (actual === undefined || (expected !== 'auto' && actual !== expected)) {\n    throw new Error(expected === 'v3' ? 'Protected history source is not v3' : 'Protected history staging is not v4');\n  }\n  const records: Record<string, unknown>[] = [];\n  const byId = new Map<string, Record<string, unknown>>();\n  const branchTips = new Map<string, string | null>();\n  const labels = new Map<string, unknown>();\n  let sessionName: unknown;\n  for (const [index, line] of lines.slice(1).entries()) {\n    if (line.length === 0) throw new Error(`Invalid protected history JSONL at line ${index + 2}`);\n    let value: unknown;\n    try {\n      value = JSON.parse(line);\n    } catch (error) {\n      throw new Error(`Invalid protected history JSONL at line ${index + 2}`, { cause: error });\n    }\n    const values = actual === 'v4' && Array.isArray(value) ? value : [value];\n    for (const item of values) {\n      const record = asRecord(item);\n      if (record === undefined) throw new Error(`Invalid protected history record at line ${index + 2}`);\n      if (actual === 'v4') {\n        if (record.kind === 'value' && typeof record.key === 'string') {\n          if (record.namespace === 'pi.entry.label') {\n            if (record.op === 'delete') labels.delete(record.key);\n            else labels.set(record.key, record.value);\n          } else if (record.namespace === 'pi.session.name' && record.key === '') {\n            sessionName = record.op === 'delete' ? undefined : record.value;\n          }\n        }\n        if (record.kind === 'entry') {\n          const entry =\n            asRecord(record.entry) ??\n            (() => {\n              const { kind: _kind, seq: _seq, ...flat } = record;\n              return flat;\n            })();\n          records.push(entry);\n          const id = requireString(entry.id, 'imported entry id');\n          if (byId.has(id)) throw new Error(`Duplicate protected history entry id: ${id}`);\n          byId.set(id, entry);\n        } else if (record.kind === 'value' && record.namespace === 'pi.branch.tip' && typeof record.key === 'string') {\n          const tip = record.op === 'delete' ? null : requireNullableString(record.value, 'imported branch tip');\n          branchTips.set(record.key, tip);\n        }\n      } else {\n        if (record.id === undefined) throw new Error(`Protected history record at line ${index + 2} has no id`);\n        const id = requireString(record.id, 'source entry id');\n        if (byId.has(id)) throw new Error(`Duplicate protected history entry id: ${id}`);\n        records.push(record);\n        byId.set(id, record);\n      }\n    }\n  }\n  return { header: header!, records, byId, branchTips, labels, sessionName };\n}\n\nfunction stableJson(value: unknown): string {\n  if (Array.isArray(value)) return `[${value.map(stableJson).join(',')}]`;\n  const record = asRecord(value);\n  if (record === undefined) return JSON.stringify(value);\n  return `{${Object.keys(record)\n    .sort()\n    .map((key) => `${JSON.stringify(key)}:${stableJson(record[key])}`)\n    .join(',')}}`;\n}\n\nfunction contentHash(record: Record<string, unknown>): string {\n  const { id: _id, parentId: _parentId, timestamp: _timestamp, kind: _kind, seq: _seq, ...content } = record;\n  if (content.type === 'custom_message') {\n    content.type = 'message';\n    content.message = {\n      role: 'custom',\n      customType: content.customType,\n      content: content.content,\n      details: content.details,\n      display: content.display,\n    };\n    delete content.customType;\n    delete content.content;\n    delete content.details;\n    delete content.display;\n  }\n  if (content.type === 'branch_summary' && content.fromId === 'root') content.fromId = null;\n  if (content.type === 'compaction') {\n    delete content.firstKeptEntryId;\n    delete content.retainedTail;\n  }\n  return sha256(Buffer.from(stableJson(content)));\n}\n\nfunction sourceParentId(record: Record<string, unknown>, field: string): string | null {\n  return requireNullableString(record.parentId, field);\n}\n\nfunction resolveMappedParent(\n  sourceId: string | null,\n  source: ParsedHistory,\n  mappings: Map<string, HistoryEntryProof>,\n): string | null {\n  const visited = new Set<string>();\n  let current = sourceId;\n  while (current !== null) {\n    if (visited.has(current)) throw new Error(`Cycle in protected history parent chain: ${current}`);\n    visited.add(current);\n    const mapped = mappings.get(current);\n    if (mapped !== undefined) return mapped.importedId;\n    const parent = source.byId.get(current);\n    if (parent === undefined) throw new Error(`Protected history parent references unknown entry: ${current}`);\n    current = sourceParentId(parent, 'source parent id');\n  }\n  return null;\n}\n\nfunction historyTimestamp(value: unknown): number {\n  const timestamp = typeof value === 'number' ? value : typeof value === 'string' ? Date.parse(value) : NaN;\n  if (!Number.isFinite(timestamp)) throw new Error('Invalid protected history timestamp');\n  return timestamp;\n}\n\nfunction verifyImport(\n  sourceContent: Uint8Array,\n  importedContent: Uint8Array,\n  verification: HistoryImportVerification,\n): HistoryImportVerification {\n  const source = parseHistory(sourceContent, 'v3');\n  const imported = parseHistory(importedContent, 'v4');\n  if (\n    imported.header.id !== requireString(source.header.id, 'session identity') ||\n    imported.header.cwd !== requireString(source.header.cwd, 'session cwd identity') ||\n    historyTimestamp(imported.header.createdAt) !== historyTimestamp(source.header.timestamp)\n  ) {\n    throw new Error('Imported history session identity mismatch');\n  }\n  const importedIds = new Set(imported.byId.keys());\n  const mappedSourceIds = new Set<string>();\n  const mappings = new Map<string, HistoryEntryProof>();\n  for (const entry of verification.entries) {\n    if (!source.byId.has(entry.sourceId))\n      throw new Error(`Imported proof references unknown source entry: ${entry.sourceId}`);\n    if (mappedSourceIds.has(entry.sourceId))\n      throw new Error(`Duplicate imported source entry proof: ${entry.sourceId}`);\n    if (mappings.has(entry.sourceId) || !importedIds.has(entry.importedId))\n      throw new Error(`Imported proof references unknown imported entry: ${entry.importedId}`);\n    if (entry.sourceContentHash !== entry.importedContentHash)\n      throw new Error(`Imported history content mismatch: ${entry.sourceId}`);\n    if (entry.sourceContentHash !== contentHash(source.byId.get(entry.sourceId)!))\n      throw new Error(`Imported source content proof mismatch: ${entry.sourceId}`);\n    if (entry.importedContentHash !== contentHash(imported.byId.get(entry.importedId)!))\n      throw new Error(`Imported content proof mismatch: ${entry.importedId}`);\n    mappedSourceIds.add(entry.sourceId);\n    mappings.set(entry.sourceId, entry);\n  }\n  const projected = new Set(verification.projectedSourceIds ?? []);\n  for (const id of projected) {\n    if (!source.byId.has(id)) throw new Error(`Imported proof references unknown projected source entry: ${id}`);\n  }\n  for (const id of source.byId.keys()) {\n    if (!mappedSourceIds.has(id) && !projected.has(id)) throw new Error(`Imported proof omits source entry: ${id}`);\n    if (projected.has(id) && mappedSourceIds.has(id))\n      throw new Error(`Imported proof maps and projects source entry: ${id}`);\n    if (projected.has(id)) {\n      const type = source.byId.get(id)?.type;\n      if (\n        type !== 'model_change' &&\n        type !== 'thinking_level_change' &&\n        type !== 'active_tools_change' &&\n        type !== 'session_info' &&\n        type !== 'label'\n      ) {\n        throw new Error(`Protected history cannot project source entry: ${id}`);\n      }\n    }\n  }\n  const importedProofIds = new Set<string>();\n  for (const entry of verification.entries) {\n    if (importedProofIds.has(entry.importedId)) throw new Error(`Duplicate imported entry proof: ${entry.importedId}`);\n    importedProofIds.add(entry.importedId);\n  }\n  for (const id of imported.byId.keys()) {\n    if (!importedProofIds.has(id)) throw new Error(`Imported proof omits imported entry: ${id}`);\n  }\n  for (const entry of verification.entries) {\n    const sourceEntry = source.byId.get(entry.sourceId)!;\n    const importedEntry = imported.byId.get(entry.importedId)!;\n    if (historyTimestamp(sourceEntry.timestamp) !== historyTimestamp(importedEntry.timestamp)) {\n      throw new Error(`Imported history timestamp mismatch: ${entry.sourceId}`);\n    }\n    if (entry.sourceParentId !== sourceParentId(sourceEntry, 'source parent id')) {\n      throw new Error(`Imported source parent proof mismatch: ${entry.sourceId}`);\n    }\n    const expectedParent = resolveMappedParent(sourceParentId(sourceEntry, 'source parent id'), source, mappings);\n    const actualParent = sourceParentId(importedEntry, 'imported parent id');\n    if (expectedParent !== actualParent || entry.importedParentId !== actualParent)\n      throw new Error(`Imported history parent mismatch: ${entry.sourceId}`);\n  }\n  const expectedLabels = new Map<string, unknown>();\n  for (const record of source.records) {\n    if (record.type !== 'label') continue;\n    const target = resolveMappedParent(requireString(record.targetId, 'label target'), source, mappings);\n    if (target === null) continue;\n    if (record.label) expectedLabels.set(target, record.label);\n    else expectedLabels.delete(target);\n  }\n  if (\n    expectedLabels.size !== imported.labels.size ||\n    [...expectedLabels].some(([id, label]) => imported.labels.get(id) !== label)\n  ) {\n    throw new Error('Imported history label projection mismatch');\n  }\n  const expectedName = source.records.findLast((record) => record.type === 'session_info')?.name || undefined;\n  if (imported.sessionName !== expectedName) throw new Error('Imported history session name projection mismatch');\n  const selectedSourceId = source.records.at(-1)?.id;\n  const expectedMainTip = resolveMappedParent(\n    selectedSourceId === undefined ? null : requireString(selectedSourceId, 'selected source id'),\n    source,\n    mappings,\n  );\n  if (imported.branchTips.get('main') !== expectedMainTip) {\n    throw new Error('Imported history selected branch mismatch');\n  }\n  const seenBranches = new Set<string>();\n  for (const branch of verification.branches) {\n    const branchKey = branch.branch ?? `#${seenBranches.size}`;\n    if (seenBranches.has(branchKey)) throw new Error(`Duplicate imported history branch proof: ${branchKey}`);\n    seenBranches.add(branchKey);\n    if (branch.sourceTipId === null || branch.importedTipId === null) {\n      if (branch.sourceTipId !== branch.importedTipId) throw new Error('Imported history branch root mismatch');\n    } else {\n      const mapping = mappings.get(branch.sourceTipId);\n      if (mapping === undefined || mapping.importedId !== branch.importedTipId)\n        throw new Error(`Imported history branch mismatch: ${branch.sourceTipId}`);\n    }\n    if (branch.branch !== undefined && imported.branchTips.get(branch.branch) !== branch.importedTipId) {\n      throw new Error(`Imported history branch tip mismatch: ${branch.branch}`);\n    }\n  }\n  for (const [branch, tip] of imported.branchTips) {\n    const proof = verification.branches.find((item) => item.branch === branch);\n    if (proof === undefined || proof.importedTipId !== tip) throw new Error(`Imported proof omits branch: ${branch}`);\n  }\n  return verification;\n}\n\nfunction isFileSystemError(error: unknown): error is NodeJS.ErrnoException {\n  return error instanceof Error && typeof (error as NodeJS.ErrnoException).code === 'string';\n}\n\nfunction assertPaths(options: HistoryImportOptions, originalPath: string, statePath: string): void {\n  const sourcePath = path.resolve(options.sourcePath);\n  const destinationPath = path.resolve(options.destinationPath);\n  if (sourcePath === destinationPath) throw new Error('Protected history destination must differ from source');\n  if (sourcePath === path.resolve(originalPath) || sourcePath === path.resolve(statePath)) {\n    throw new Error('Protected history sidecars must differ from source');\n  }\n  if (destinationPath === path.resolve(originalPath) || destinationPath === path.resolve(statePath)) {\n    throw new Error('Protected history destination must differ from sidecars');\n  }\n}\n\nexport async function protectAndImportHistory(options: HistoryImportOptions): Promise<ProtectedHistoryImportResult> {\n  const sourcePath = path.resolve(options.sourcePath);\n  const destinationPath = path.resolve(options.destinationPath);\n  const originalPath = path.resolve(options.originalPath ?? `${sourcePath}.original`);\n  const statePath = path.resolve(options.statePath ?? `${destinationPath}.import-state.json`);\n  assertPaths(options, originalPath, statePath);\n\n  const lease = await options.owner.acquire(sourcePath);\n  try {\n    await lease.assertQuiescent();\n    const source = readSource(sourcePath);\n    const existingState = readState(statePath);\n    if (existingState !== undefined) {\n      if (\n        existingState.sourcePath !== source.identity.path ||\n        existingState.destinationPath !== destinationPath ||\n        existingState.originalPath !== originalPath ||\n        !sameIdentity(existingState.sourceIdentity, source.identity)\n      ) {\n        throw new Error('Protected history state does not match current source');\n      }\n      ensureOriginal(originalPath, source.content);\n      if (existingState.phase === 'published') {\n        if (!fs.existsSync(destinationPath)) throw new Error('Published protected history is missing its destination');\n        if (existingState.stagedSha256 === undefined)\n          throw new Error('Published protected history has no destination checksum');\n        if (sha256(fs.readFileSync(destinationPath)) !== existingState.stagedSha256) {\n          throw new Error('Published protected history destination was modified');\n        }\n        if (existingState.verification === undefined)\n          throw new Error('Published protected history has no verification proof');\n        return {\n          status: 'already-published',\n          sourceIdentity: source.identity,\n          originalPath,\n          destinationPath,\n          statePath,\n          verification: existingState.verification,\n          stagedSha256: existingState.stagedSha256,\n        };\n      }\n    } else {\n      ensureOriginal(originalPath, source.content);\n    }\n\n    let state: ImportState;\n    if (existingState === undefined) {\n      state = {\n        version: IMPORT_STATE_VERSION,\n        operation: IMPORT_OPERATION,\n        phase: 'prepared',\n        sourcePath: source.identity.path,\n        destinationPath,\n        originalPath,\n        stagingPath: `${destinationPath}.${process.pid}.${randomUUID()}.staging`,\n        sourceIdentity: source.identity,\n      };\n      writeState(statePath, state);\n    } else {\n      state = existingState;\n    }\n\n    if (fs.existsSync(destinationPath)) {\n      const stagedSha256 = state.stagedSha256;\n      if (stagedSha256 !== undefined && sha256(fs.readFileSync(destinationPath)) === stagedSha256) {\n        state = { ...state, phase: 'published' };\n        writeState(statePath, state);\n        return {\n          status: 'already-published',\n          sourceIdentity: source.identity,\n          originalPath,\n          destinationPath,\n          statePath,\n          verification: state.verification ?? { entries: [], branches: [] },\n          stagedSha256,\n        };\n      }\n      throw new Error(`Refusing to overwrite derived history: ${destinationPath}`);\n    }\n\n    if (state.phase === 'prepared') {\n      if (fs.existsSync(state.stagingPath)) fs.rmSync(state.stagingPath, { force: true });\n      fs.copyFileSync(originalPath, state.stagingPath, fs.constants.COPYFILE_EXCL);\n      ensureOwnerOnly(state.stagingPath);\n      const importedVerification = await (options.importStaging ?? importV3WithPinnedUpstream)({\n        sourcePath,\n        stagingPath: state.stagingPath,\n        originalPath,\n        sourceIdentity: source.identity,\n      });\n      state = {\n        ...state,\n        phase: 'staged',\n        verification: importedVerification,\n        stagedSha256: sha256(fs.readFileSync(state.stagingPath)),\n      };\n      writeState(statePath, state);\n    }\n    if (state.verification === undefined) throw new Error('Protected history staging has no verification proof');\n    const verification = state.verification;\n    if (state.phase === 'staged') {\n      state = {\n        ...state,\n        phase: 'verified',\n        verification: options.verifyStaging\n          ? await options.verifyStaging(state.stagingPath, verification)\n          : verifyImport(source.content, fs.readFileSync(state.stagingPath), verification),\n      };\n      writeState(statePath, state);\n    }\n    await lease.assertQuiescent();\n    const current = readSource(sourcePath);\n    if (!sameIdentity(current.identity, source.identity))\n      throw new Error('Protected history source changed during import');\n    if (!fs.existsSync(state.stagingPath)) throw new Error('Protected history staging copy is missing');\n    if (state.stagedSha256 !== undefined && sha256(fs.readFileSync(state.stagingPath)) !== state.stagedSha256) {\n      throw new Error('Protected history staging copy changed during import');\n    }\n    publishDistinct(state.stagingPath, destinationPath);\n    state = { ...state, phase: 'published' };\n    writeState(statePath, state);\n    return {\n      status: 'published',\n      sourceIdentity: source.identity,\n      originalPath,\n      destinationPath,\n      statePath,\n      verification,\n      stagedSha256: state.stagedSha256 ?? sha256(fs.readFileSync(destinationPath)),\n    };\n  } finally {\n    await lease.release();\n  }\n}\n\nexport async function restoreProtectedHistory(options: RestoreProtectedHistoryOptions): Promise<void> {\n  const sourcePath = path.resolve(options.sourcePath);\n  const originalPath = path.resolve(options.originalPath);\n  const lease = await options.owner.acquire(sourcePath);\n  try {\n    await lease.assertQuiescent();\n    const original = fs.readFileSync(originalPath);\n    const current = fs.existsSync(sourcePath) ? fs.readFileSync(sourcePath) : undefined;\n    if (current !== undefined && sha256(current) === sha256(original)) return;\n    writeBinaryAtomically(sourcePath, original);\n    ensureOwnerOnly(sourcePath);\n  } finally {\n    await lease.release();\n  }\n}\n"],"mappings":";;;;;;AAmGA,MAAM,uBAAuB;AAC7B,MAAM,mBAAmB;AAEzB,SAAS,SAAS,OAAqD;CACrE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,IACrE,QACD,KAAA;AACN;AAEA,SAAS,cAAc,OAAgB,OAAuB;CAC5D,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,0BAA0B,OAAO;CACtG,OAAO;AACT;AAEA,SAAS,sBAAsB,OAAgB,OAA8B;CAC3E,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,MAAM,IAAI,MAAM,0BAA0B,OAAO;CAClG,OAAO;AACT;AAEA,SAAS,YAAY,OAAgB,OAAuB;CAC1D,MAAM,OAAO,cAAc,OAAO,KAAK;CACvC,IAAI,CAAC,iBAAiB,KAAK,IAAI,GAAG,MAAM,IAAI,MAAM,0BAA0B,OAAO;CACnF,OAAO;AACT;AAEA,SAAS,OAAO,SAA6B;CAC3C,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK;AAC1D;AAEA,SAAS,WAAW,YAA0E;CAC5F,MAAM,SAAS,GAAG,SAAS,UAAU;CACrC,MAAM,UAAU,GAAG,aAAa,UAAU;CAC1C,MAAM,QAAQ,GAAG,SAAS,UAAU;CACpC,IACE,OAAO,QAAQ,MAAM,OACrB,OAAO,QAAQ,MAAM,OACrB,OAAO,SAAS,MAAM,QACtB,OAAO,YAAY,MAAM,WACzB,MAAM,SAAS,QAAQ,YAEvB,MAAM,IAAI,MAAM,0DAA0D;CAE5E,OAAO;EACL;EACA,UAAU;GACR,MAAM,KAAK,QAAQ,UAAU;GAC7B,UAAU,GAAG,aAAa,UAAU;GACpC,QAAQ,MAAM;GACd,OAAO,MAAM;GACb,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,QAAQ,OAAO,OAAO;EACxB;CACF;AACF;AAEA,SAAS,aAAa,MAA6B,OAAuC;CACxF,OACE,KAAK,SAAS,MAAM,QACpB,KAAK,aAAa,MAAM,YACxB,KAAK,WAAW,MAAM,UACtB,KAAK,UAAU,MAAM,SACrB,KAAK,SAAS,MAAM,QACpB,KAAK,YAAY,MAAM,WACvB,KAAK,WAAW,MAAM;AAE1B;AAEA,SAAS,gBAAgB,UAAwB;CAC/C,GAAG,UAAU,UAAU,GAAK;AAC9B;AAEA,SAAS,eAAe,UAAkB,SAA2B;CACnE,GAAG,UAAU,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;CACxD,IAAI;CACJ,IAAI;EACF,KAAK,GAAG,SAAS,UAAU,MAAM,GAAK;EACtC,GAAG,cAAc,IAAI,OAAO;EAC5B,GAAG,UAAU,EAAE;CACjB,SAAS,OAAO;EACd,IAAI,OAAO,KAAA,GAAW;GACpB,GAAG,UAAU,EAAE;GACf,GAAG,OAAO,UAAU,EAAE,OAAO,KAAK,CAAC;EACrC;EACA,MAAM;CACR;CACA,GAAG,UAAU,EAAE;CACf,gBAAgB,QAAQ;CACxB,MAAM,cAAc,GAAG,SAAS,KAAK,QAAQ,QAAQ,GAAG,GAAG;CAC3D,IAAI;EACF,GAAG,UAAU,WAAW;CAC1B,UAAU;EACR,GAAG,UAAU,WAAW;CAC1B;AACF;AAEA,SAAS,eAAe,cAAsB,SAA2B;CACvE,IAAI,GAAG,WAAW,YAAY,GAAG;EAC/B,MAAM,OAAO,GAAG,UAAU,YAAY;EACtC,IAAI,CAAC,KAAK,OAAO,KAAK,KAAK,UAAU,GACnC,MAAM,IAAI,MAAM,2DAA2D,cAAc;EAE3F,IAAI,OADa,GAAG,aAAa,YACf,CAAC,MAAM,OAAO,OAAO,GAAG,MAAM,IAAI,MAAM,uCAAuC,cAAc;EAC/G,gBAAgB,YAAY;EAC5B;CACF;CACA,IAAI;EACF,eAAe,cAAc,OAAO;CACtC,SAAS,OAAO;EACd,IAAI,CAAC,kBAAkB,KAAK,KAAK,MAAM,SAAS,UAAU,MAAM;EAChE,MAAM,OAAO,GAAG,UAAU,YAAY;EACtC,IAAI,CAAC,KAAK,OAAO,KAAK,KAAK,UAAU,GACnC,MAAM,IAAI,MAAM,2DAA2D,cAAc;EAE3F,IAAI,OADa,GAAG,aAAa,YACf,CAAC,MAAM,OAAO,OAAO,GAAG,MAAM,IAAI,MAAM,uCAAuC,cAAc;EAC/G,gBAAgB,YAAY;CAC9B;AACF;;AAGA,eAAsB,0BAA0B,YAAoB,OAA+C;CACjH,MAAM,MAAM,gBAAgB;CAC5B,MAAM,SAAS,WAAW,UAAU;CACpC,MAAM,eAAe,GAAG,OAAO,SAAS,SAAS,YAAY,OAAO,SAAS,OAAO;CACpF,eAAe,cAAc,OAAO,OAAO;CAC3C,MAAM,aAAa,GAAG,aAAa;CACnC,IAAI,CAAC,GAAG,WAAW,UAAU,GAC3B,eACE,YACA,OAAO,KAAK,GAAG,KAAK,UAAU;EAAE,SAAS;EAAG,QAAQ,OAAO;EAAU;CAAa,CAAC,EAAE,GAAG,CAC1F;MACK;EACL,MAAM,SAAS,SAAS,KAAK,MAAM,GAAG,aAAa,YAAY,MAAM,CAAC,CAAC;EACvE,MAAM,WAAW,SAAS,QAAQ,MAAM;EACxC,IACE,QAAQ,iBAAiB,gBACzB,UAAU,WAAW,OAAO,SAAS,UACrC,SAAS,aAAa,OAAO,SAAS,UAEtC,MAAM,IAAI,MAAM,mEAAmE;CAEvF;CACA,MAAM,MAAM,gBAAgB;CAC5B,IAAI,CAAC,aAAa,OAAO,UAAU,WAAW,UAAU,CAAC,CAAC,QAAQ,GAChE,MAAM,IAAI,MAAM,8CAA8C;CAChE,OAAO;AACT;AAEA,SAAS,sBAAsB,UAAkB,SAA2B;CAC1E,GAAG,UAAU,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;CACxD,MAAM,gBAAgB,GAAG,SAAS,GAAG,QAAQ,IAAI,GAAG,WAAW,EAAE;CACjE,IAAI;EACF,eAAe,eAAe,OAAO;EACrC,GAAG,WAAW,eAAe,QAAQ;CACvC,SAAS,OAAO;EACd,GAAG,OAAO,eAAe,EAAE,OAAO,KAAK,CAAC;EACxC,MAAM;CACR;AACF;AAEA,SAAS,gBAAgB,aAAqB,iBAA+B;CAC3E,IAAI,GAAG,WAAW,eAAe,GAAG,MAAM,IAAI,MAAM,0CAA0C,iBAAiB;CAC/G,GAAG,UAAU,KAAK,QAAQ,eAAe,GAAG,EAAE,WAAW,KAAK,CAAC;CAC/D,GAAG,SAAS,aAAa,eAAe;CACxC,GAAG,WAAW,WAAW;AAC3B;AAEA,SAAS,WAAW,WAAmB,OAA0B;CAC/D,gBAAgB,WAAW,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,GAAG;CAChE,gBAAgB,SAAS;AAC3B;AAEA,SAAS,UAAU,WAA4C;CAC7D,IAAI,CAAC,GAAG,WAAW,SAAS,GAAG,OAAO,KAAA;CACtC,gBAAgB,SAAS;CACzB,MAAM,QAAQ,SAAS,KAAK,MAAM,GAAG,aAAa,WAAW,MAAM,CAAC,CAAC;CACrE,IAAI,OAAO,YAAY,wBAAwB,MAAM,cAAc,kBACjE,MAAM,IAAI,MAAM,oCAAoC,WAAW;CAEjE,MAAM,QAAQ,MAAM;CACpB,IAAI,UAAU,cAAc,UAAU,YAAY,UAAU,cAAc,UAAU,aAClF,MAAM,IAAI,MAAM,0CAA0C,OAAO,KAAK,GAAG;CAE3E,MAAM,iBAAiB,SAAS,MAAM,cAAc;CACpD,MAAM,eAAe,MAAM,iBAAiB,KAAA,IAAY,KAAA,IAAY,kBAAkB,MAAM,YAAY;CACxG,OAAO;EACL,SAAS;EACT,WAAW;EACX;EACA,YAAY,cAAc,MAAM,YAAY,mBAAmB;EAC/D,iBAAiB,cAAc,MAAM,iBAAiB,wBAAwB;EAC9E,cAAc,cAAc,MAAM,cAAc,qBAAqB;EACrE,aAAa,cAAc,MAAM,aAAa,oBAAoB;EAClE,gBAAgB,oBAAoB,cAAc;EAClD;EACA,cAAc,MAAM,iBAAiB,KAAA,IAAY,KAAA,IAAY,YAAY,MAAM,cAAc,iBAAiB;CAChH;AACF;AAEA,SAAS,oBAAoB,OAAmE;CAC9F,IAAI,UAAU,KAAA,GAAW,MAAM,IAAI,MAAM,2CAA2C;CACpF,MAAM,WAAW,UAA0B;EACzC,MAAM,SAAS,MAAM;EACrB,IAAI,OAAO,WAAW,YAAY,CAAC,OAAO,cAAc,MAAM,KAAK,SAAS,GAC1E,MAAM,IAAI,MAAM,0BAA0B,OAAO;EACnD,OAAO;CACT;CACA,MAAM,UAAU,MAAM;CACtB,IAAI,OAAO,YAAY,YAAY,CAAC,OAAO,SAAS,OAAO,KAAK,UAAU,GACxE,MAAM,IAAI,MAAM,gCAAgC;CAElD,OAAO;EACL,MAAM,cAAc,MAAM,MAAM,aAAa;EAC7C,UAAU,cAAc,MAAM,UAAU,kBAAkB;EAC1D,QAAQ,QAAQ,QAAQ;EACxB,OAAO,QAAQ,OAAO;EACtB,MAAM,QAAQ,MAAM;EACpB;EACA,QAAQ,YAAY,MAAM,QAAQ,iBAAiB;CACrD;AACF;AAEA,SAAS,kBAAkB,OAA2C;CACpE,MAAM,SAAS,SAAS,KAAK;CAC7B,IAAI,WAAW,KAAA,KAAa,CAAC,MAAM,QAAQ,OAAO,OAAO,KAAK,CAAC,MAAM,QAAQ,OAAO,QAAQ,GAC1F,MAAM,IAAI,MAAM,wCAAwC;CAE1D,MAAM,UAAU,OAAO,QAAQ,KAAK,OAAO,UAAU;EACnD,MAAM,OAAO,SAAS,KAAK;EAC3B,IAAI,SAAS,KAAA,GAAW,MAAM,IAAI,MAAM,wCAAwC,OAAO;EACvF,OAAO;GACL,UAAU,cAAc,KAAK,UAAU,iBAAiB;GACxD,YAAY,cAAc,KAAK,YAAY,mBAAmB;GAC9D,gBAAgB,sBAAsB,KAAK,gBAAgB,wBAAwB;GACnF,kBAAkB,sBAAsB,KAAK,kBAAkB,0BAA0B;GACzF,mBAAmB,YAAY,KAAK,mBAAmB,2BAA2B;GAClF,qBAAqB,YAAY,KAAK,qBAAqB,6BAA6B;EAC1F;CACF,CAAC;CACD,MAAM,WAAW,OAAO,SAAS,KAAK,QAAQ,UAAU;EACtD,MAAM,OAAO,SAAS,MAAM;EAC5B,IAAI,SAAS,KAAA,GAAW,MAAM,IAAI,MAAM,yCAAyC,OAAO;EACxF,MAAM,OAAO,KAAK,WAAW,KAAA,IAAY,KAAA,IAAY,cAAc,KAAK,QAAQ,wBAAwB,OAAO;EAC/G,OAAO;GACL,aAAa,sBAAsB,KAAK,aAAa,iCAAiC,OAAO;GAC7F,eAAe,sBAAsB,KAAK,eAAe,mCAAmC,OAAO;GACnG,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,KAAK;EAC/C;CACF,CAAC;CACD,MAAM,qBAAqB,OAAO;CAClC,IACE,uBAAuB,KAAA,MACtB,CAAC,MAAM,QAAQ,kBAAkB,KAAK,mBAAmB,MAAM,OAAO,OAAO,OAAO,YAAY,GAAG,WAAW,CAAC,IAEhH,MAAM,IAAI,MAAM,gDAAgD;CAElE,MAAM,YAAY;CAClB,IAAI,cAAc,KAAA,KAAa,IAAI,IAAI,SAAS,CAAC,CAAC,SAAS,UAAU,QACnE,MAAM,IAAI,MAAM,iDAAiD;CAEnE,OAAO;EAAE;EAAS;EAAU,GAAI,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,oBAAoB,UAAU;CAAG;AACpG;AAWA,SAAS,aAAa,SAAqB,UAA+C;CACxF,MAAM,OAAO,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,MAAM;CACjD,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,QAAQ,OAAO,KAAK,OAAO,CAAC,MAAM,KAAK,CAAC,KAAK,SAAS,IAAI,GAC9E,MAAM,IAAI,MAAM,yDAAyD;CAE3E,MAAM,QAAQ,KAAK,MAAM,GAAG,EAAE,CAAC,CAAC,MAAM,IAAI;CAC1C,MAAM,QAAQ,MAAM;CACpB,IAAI,UAAU,KAAA,KAAa,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,4BAA4B;CAC3F,MAAM,SAAS,SAAS,KAAK,MAAM,KAAK,CAAC;CACzC,MAAM,SACJ,QAAQ,SAAS,aAAa,OAAO,YAAY,IAC7C,OACA,QAAQ,SAAS,YAAY,OAAO,MAAM,IACxC,OACA,KAAA;CACR,IAAI,WAAW,KAAA,KAAc,aAAa,UAAU,WAAW,UAC7D,MAAM,IAAI,MAAM,aAAa,OAAO,uCAAuC,qCAAqC;CAElH,MAAM,UAAqC,CAAC;CAC5C,MAAM,uBAAO,IAAI,IAAqC;CACtD,MAAM,6BAAa,IAAI,IAA2B;CAClD,MAAM,yBAAS,IAAI,IAAqB;CACxC,IAAI;CACJ,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,MAAM,CAAC,CAAC,CAAC,QAAQ,GAAG;EACpD,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,2CAA2C,QAAQ,GAAG;EAC7F,IAAI;EACJ,IAAI;GACF,QAAQ,KAAK,MAAM,IAAI;EACzB,SAAS,OAAO;GACd,MAAM,IAAI,MAAM,2CAA2C,QAAQ,KAAK,EAAE,OAAO,MAAM,CAAC;EAC1F;EACA,MAAM,SAAS,WAAW,QAAQ,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK;EACvE,KAAK,MAAM,QAAQ,QAAQ;GACzB,MAAM,SAAS,SAAS,IAAI;GAC5B,IAAI,WAAW,KAAA,GAAW,MAAM,IAAI,MAAM,4CAA4C,QAAQ,GAAG;GACjG,IAAI,WAAW,MAAM;IACnB,IAAI,OAAO,SAAS,WAAW,OAAO,OAAO,QAAQ,UAAU;KAC7D,IAAI,OAAO,cAAc,kBAAkB;MACzC,IAAI,OAAO,OAAO,UAAU,OAAO,OAAO,OAAO,GAAG;WAC/C,OAAO,IAAI,OAAO,KAAK,OAAO,KAAK;KAC1C,OAAO,IAAI,OAAO,cAAc,qBAAqB,OAAO,QAAQ,IAClE,cAAc,OAAO,OAAO,WAAW,KAAA,IAAY,OAAO;IAE9D;IACA,IAAI,OAAO,SAAS,SAAS;KAC3B,MAAM,QACJ,SAAS,OAAO,KAAK,YACd;MACL,MAAM,EAAE,MAAM,OAAO,KAAK,MAAM,GAAG,SAAS;MAC5C,OAAO;KACT,EAAA,CAAG;KACL,QAAQ,KAAK,KAAK;KAClB,MAAM,KAAK,cAAc,MAAM,IAAI,mBAAmB;KACtD,IAAI,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,MAAM,yCAAyC,IAAI;KAC/E,KAAK,IAAI,IAAI,KAAK;IACpB,OAAO,IAAI,OAAO,SAAS,WAAW,OAAO,cAAc,mBAAmB,OAAO,OAAO,QAAQ,UAAU;KAC5G,MAAM,MAAM,OAAO,OAAO,WAAW,OAAO,sBAAsB,OAAO,OAAO,qBAAqB;KACrG,WAAW,IAAI,OAAO,KAAK,GAAG;IAChC;GACF,OAAO;IACL,IAAI,OAAO,OAAO,KAAA,GAAW,MAAM,IAAI,MAAM,oCAAoC,QAAQ,EAAE,WAAW;IACtG,MAAM,KAAK,cAAc,OAAO,IAAI,iBAAiB;IACrD,IAAI,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,MAAM,yCAAyC,IAAI;IAC/E,QAAQ,KAAK,MAAM;IACnB,KAAK,IAAI,IAAI,MAAM;GACrB;EACF;CACF;CACA,OAAO;EAAU;EAAS;EAAS;EAAM;EAAY;EAAQ;CAAY;AAC3E;AAEA,SAAS,WAAW,OAAwB;CAC1C,IAAI,MAAM,QAAQ,KAAK,GAAG,OAAO,IAAI,MAAM,IAAI,UAAU,CAAC,CAAC,KAAK,GAAG,EAAE;CACrE,MAAM,SAAS,SAAS,KAAK;CAC7B,IAAI,WAAW,KAAA,GAAW,OAAO,KAAK,UAAU,KAAK;CACrD,OAAO,IAAI,OAAO,KAAK,MAAM,CAAC,CAC3B,KAAK,CAAC,CACN,KAAK,QAAQ,GAAG,KAAK,UAAU,GAAG,EAAE,GAAG,WAAW,OAAO,IAAI,GAAG,CAAC,CACjE,KAAK,GAAG,EAAE;AACf;AAEA,SAAS,YAAY,QAAyC;CAC5D,MAAM,EAAE,IAAI,KAAK,UAAU,WAAW,WAAW,YAAY,MAAM,OAAO,KAAK,MAAM,GAAG,YAAY;CACpG,IAAI,QAAQ,SAAS,kBAAkB;EACrC,QAAQ,OAAO;EACf,QAAQ,UAAU;GAChB,MAAM;GACN,YAAY,QAAQ;GACpB,SAAS,QAAQ;GACjB,SAAS,QAAQ;GACjB,SAAS,QAAQ;EACnB;EACA,OAAO,QAAQ;EACf,OAAO,QAAQ;EACf,OAAO,QAAQ;EACf,OAAO,QAAQ;CACjB;CACA,IAAI,QAAQ,SAAS,oBAAoB,QAAQ,WAAW,QAAQ,QAAQ,SAAS;CACrF,IAAI,QAAQ,SAAS,cAAc;EACjC,OAAO,QAAQ;EACf,OAAO,QAAQ;CACjB;CACA,OAAO,OAAO,OAAO,KAAK,WAAW,OAAO,CAAC,CAAC;AAChD;AAEA,SAAS,eAAe,QAAiC,OAA8B;CACrF,OAAO,sBAAsB,OAAO,UAAU,KAAK;AACrD;AAEA,SAAS,oBACP,UACA,QACA,UACe;CACf,MAAM,0BAAU,IAAI,IAAY;CAChC,IAAI,UAAU;CACd,OAAO,YAAY,MAAM;EACvB,IAAI,QAAQ,IAAI,OAAO,GAAG,MAAM,IAAI,MAAM,4CAA4C,SAAS;EAC/F,QAAQ,IAAI,OAAO;EACnB,MAAM,SAAS,SAAS,IAAI,OAAO;EACnC,IAAI,WAAW,KAAA,GAAW,OAAO,OAAO;EACxC,MAAM,SAAS,OAAO,KAAK,IAAI,OAAO;EACtC,IAAI,WAAW,KAAA,GAAW,MAAM,IAAI,MAAM,sDAAsD,SAAS;EACzG,UAAU,eAAe,QAAQ,kBAAkB;CACrD;CACA,OAAO;AACT;AAEA,SAAS,iBAAiB,OAAwB;CAChD,MAAM,YAAY,OAAO,UAAU,WAAW,QAAQ,OAAO,UAAU,WAAW,KAAK,MAAM,KAAK,IAAI;CACtG,IAAI,CAAC,OAAO,SAAS,SAAS,GAAG,MAAM,IAAI,MAAM,qCAAqC;CACtF,OAAO;AACT;AAEA,SAAS,aACP,eACA,iBACA,cAC2B;CAC3B,MAAM,SAAS,aAAa,eAAe,IAAI;CAC/C,MAAM,WAAW,aAAa,iBAAiB,IAAI;CACnD,IACE,SAAS,OAAO,OAAO,cAAc,OAAO,OAAO,IAAI,kBAAkB,KACzE,SAAS,OAAO,QAAQ,cAAc,OAAO,OAAO,KAAK,sBAAsB,KAC/E,iBAAiB,SAAS,OAAO,SAAS,MAAM,iBAAiB,OAAO,OAAO,SAAS,GAExF,MAAM,IAAI,MAAM,4CAA4C;CAE9D,MAAM,cAAc,IAAI,IAAI,SAAS,KAAK,KAAK,CAAC;CAChD,MAAM,kCAAkB,IAAI,IAAY;CACxC,MAAM,2BAAW,IAAI,IAA+B;CACpD,KAAK,MAAM,SAAS,aAAa,SAAS;EACxC,IAAI,CAAC,OAAO,KAAK,IAAI,MAAM,QAAQ,GACjC,MAAM,IAAI,MAAM,mDAAmD,MAAM,UAAU;EACrF,IAAI,gBAAgB,IAAI,MAAM,QAAQ,GACpC,MAAM,IAAI,MAAM,0CAA0C,MAAM,UAAU;EAC5E,IAAI,SAAS,IAAI,MAAM,QAAQ,KAAK,CAAC,YAAY,IAAI,MAAM,UAAU,GACnE,MAAM,IAAI,MAAM,qDAAqD,MAAM,YAAY;EACzF,IAAI,MAAM,sBAAsB,MAAM,qBACpC,MAAM,IAAI,MAAM,sCAAsC,MAAM,UAAU;EACxE,IAAI,MAAM,sBAAsB,YAAY,OAAO,KAAK,IAAI,MAAM,QAAQ,CAAE,GAC1E,MAAM,IAAI,MAAM,2CAA2C,MAAM,UAAU;EAC7E,IAAI,MAAM,wBAAwB,YAAY,SAAS,KAAK,IAAI,MAAM,UAAU,CAAE,GAChF,MAAM,IAAI,MAAM,oCAAoC,MAAM,YAAY;EACxE,gBAAgB,IAAI,MAAM,QAAQ;EAClC,SAAS,IAAI,MAAM,UAAU,KAAK;CACpC;CACA,MAAM,YAAY,IAAI,IAAI,aAAa,sBAAsB,CAAC,CAAC;CAC/D,KAAK,MAAM,MAAM,WACf,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,MAAM,6DAA6D,IAAI;CAE7G,KAAK,MAAM,MAAM,OAAO,KAAK,KAAK,GAAG;EACnC,IAAI,CAAC,gBAAgB,IAAI,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,GAAG,MAAM,IAAI,MAAM,sCAAsC,IAAI;EAC9G,IAAI,UAAU,IAAI,EAAE,KAAK,gBAAgB,IAAI,EAAE,GAC7C,MAAM,IAAI,MAAM,kDAAkD,IAAI;EACxE,IAAI,UAAU,IAAI,EAAE,GAAG;GACrB,MAAM,OAAO,OAAO,KAAK,IAAI,EAAE,CAAC,EAAE;GAClC,IACE,SAAS,kBACT,SAAS,2BACT,SAAS,yBACT,SAAS,kBACT,SAAS,SAET,MAAM,IAAI,MAAM,kDAAkD,IAAI;EAE1E;CACF;CACA,MAAM,mCAAmB,IAAI,IAAY;CACzC,KAAK,MAAM,SAAS,aAAa,SAAS;EACxC,IAAI,iBAAiB,IAAI,MAAM,UAAU,GAAG,MAAM,IAAI,MAAM,mCAAmC,MAAM,YAAY;EACjH,iBAAiB,IAAI,MAAM,UAAU;CACvC;CACA,KAAK,MAAM,MAAM,SAAS,KAAK,KAAK,GAClC,IAAI,CAAC,iBAAiB,IAAI,EAAE,GAAG,MAAM,IAAI,MAAM,wCAAwC,IAAI;CAE7F,KAAK,MAAM,SAAS,aAAa,SAAS;EACxC,MAAM,cAAc,OAAO,KAAK,IAAI,MAAM,QAAQ;EAClD,MAAM,gBAAgB,SAAS,KAAK,IAAI,MAAM,UAAU;EACxD,IAAI,iBAAiB,YAAY,SAAS,MAAM,iBAAiB,cAAc,SAAS,GACtF,MAAM,IAAI,MAAM,wCAAwC,MAAM,UAAU;EAE1E,IAAI,MAAM,mBAAmB,eAAe,aAAa,kBAAkB,GACzE,MAAM,IAAI,MAAM,0CAA0C,MAAM,UAAU;EAE5E,MAAM,iBAAiB,oBAAoB,eAAe,aAAa,kBAAkB,GAAG,QAAQ,QAAQ;EAC5G,MAAM,eAAe,eAAe,eAAe,oBAAoB;EACvE,IAAI,mBAAmB,gBAAgB,MAAM,qBAAqB,cAChE,MAAM,IAAI,MAAM,qCAAqC,MAAM,UAAU;CACzE;CACA,MAAM,iCAAiB,IAAI,IAAqB;CAChD,KAAK,MAAM,UAAU,OAAO,SAAS;EACnC,IAAI,OAAO,SAAS,SAAS;EAC7B,MAAM,SAAS,oBAAoB,cAAc,OAAO,UAAU,cAAc,GAAG,QAAQ,QAAQ;EACnG,IAAI,WAAW,MAAM;EACrB,IAAI,OAAO,OAAO,eAAe,IAAI,QAAQ,OAAO,KAAK;OACpD,eAAe,OAAO,MAAM;CACnC;CACA,IACE,eAAe,SAAS,SAAS,OAAO,QACxC,CAAC,GAAG,cAAc,CAAC,CAAC,MAAM,CAAC,IAAI,WAAW,SAAS,OAAO,IAAI,EAAE,MAAM,KAAK,GAE3E,MAAM,IAAI,MAAM,4CAA4C;CAE9D,MAAM,eAAe,OAAO,QAAQ,UAAU,WAAW,OAAO,SAAS,cAAc,CAAC,EAAE,QAAQ,KAAA;CAClG,IAAI,SAAS,gBAAgB,cAAc,MAAM,IAAI,MAAM,mDAAmD;CAC9G,MAAM,mBAAmB,OAAO,QAAQ,GAAG,EAAE,CAAC,EAAE;CAChD,MAAM,kBAAkB,oBACtB,qBAAqB,KAAA,IAAY,OAAO,cAAc,kBAAkB,oBAAoB,GAC5F,QACA,QACF;CACA,IAAI,SAAS,WAAW,IAAI,MAAM,MAAM,iBACtC,MAAM,IAAI,MAAM,2CAA2C;CAE7D,MAAM,+BAAe,IAAI,IAAY;CACrC,KAAK,MAAM,UAAU,aAAa,UAAU;EAC1C,MAAM,YAAY,OAAO,UAAU,IAAI,aAAa;EACpD,IAAI,aAAa,IAAI,SAAS,GAAG,MAAM,IAAI,MAAM,4CAA4C,WAAW;EACxG,aAAa,IAAI,SAAS;EAC1B,IAAI,OAAO,gBAAgB,QAAQ,OAAO,kBAAkB,MACtD;OAAA,OAAO,gBAAgB,OAAO,eAAe,MAAM,IAAI,MAAM,uCAAuC;EAAA,OACnG;GACL,MAAM,UAAU,SAAS,IAAI,OAAO,WAAW;GAC/C,IAAI,YAAY,KAAA,KAAa,QAAQ,eAAe,OAAO,eACzD,MAAM,IAAI,MAAM,qCAAqC,OAAO,aAAa;EAC7E;EACA,IAAI,OAAO,WAAW,KAAA,KAAa,SAAS,WAAW,IAAI,OAAO,MAAM,MAAM,OAAO,eACnF,MAAM,IAAI,MAAM,yCAAyC,OAAO,QAAQ;CAE5E;CACA,KAAK,MAAM,CAAC,QAAQ,QAAQ,SAAS,YAAY;EAC/C,MAAM,QAAQ,aAAa,SAAS,MAAM,SAAS,KAAK,WAAW,MAAM;EACzE,IAAI,UAAU,KAAA,KAAa,MAAM,kBAAkB,KAAK,MAAM,IAAI,MAAM,gCAAgC,QAAQ;CAClH;CACA,OAAO;AACT;AAEA,SAAS,kBAAkB,OAAgD;CACzE,OAAO,iBAAiB,SAAS,OAAQ,MAAgC,SAAS;AACpF;AAEA,SAAS,YAAY,SAA+B,cAAsB,WAAyB;CACjG,MAAM,aAAa,KAAK,QAAQ,QAAQ,UAAU;CAClD,MAAM,kBAAkB,KAAK,QAAQ,QAAQ,eAAe;CAC5D,IAAI,eAAe,iBAAiB,MAAM,IAAI,MAAM,uDAAuD;CAC3G,IAAI,eAAe,KAAK,QAAQ,YAAY,KAAK,eAAe,KAAK,QAAQ,SAAS,GACpF,MAAM,IAAI,MAAM,oDAAoD;CAEtE,IAAI,oBAAoB,KAAK,QAAQ,YAAY,KAAK,oBAAoB,KAAK,QAAQ,SAAS,GAC9F,MAAM,IAAI,MAAM,yDAAyD;AAE7E;AAEA,eAAsB,wBAAwB,SAAsE;CAClH,MAAM,aAAa,KAAK,QAAQ,QAAQ,UAAU;CAClD,MAAM,kBAAkB,KAAK,QAAQ,QAAQ,eAAe;CAC5D,MAAM,eAAe,KAAK,QAAQ,QAAQ,gBAAgB,GAAG,WAAW,UAAU;CAClF,MAAM,YAAY,KAAK,QAAQ,QAAQ,aAAa,GAAG,gBAAgB,mBAAmB;CAC1F,YAAY,SAAS,cAAc,SAAS;CAE5C,MAAM,QAAQ,MAAM,QAAQ,MAAM,QAAQ,UAAU;CACpD,IAAI;EACF,MAAM,MAAM,gBAAgB;EAC5B,MAAM,SAAS,WAAW,UAAU;EACpC,MAAM,gBAAgB,UAAU,SAAS;EACzC,IAAI,kBAAkB,KAAA,GAAW;GAC/B,IACE,cAAc,eAAe,OAAO,SAAS,QAC7C,cAAc,oBAAoB,mBAClC,cAAc,iBAAiB,gBAC/B,CAAC,aAAa,cAAc,gBAAgB,OAAO,QAAQ,GAE3D,MAAM,IAAI,MAAM,uDAAuD;GAEzE,eAAe,cAAc,OAAO,OAAO;GAC3C,IAAI,cAAc,UAAU,aAAa;IACvC,IAAI,CAAC,GAAG,WAAW,eAAe,GAAG,MAAM,IAAI,MAAM,wDAAwD;IAC7G,IAAI,cAAc,iBAAiB,KAAA,GACjC,MAAM,IAAI,MAAM,yDAAyD;IAC3E,IAAI,OAAO,GAAG,aAAa,eAAe,CAAC,MAAM,cAAc,cAC7D,MAAM,IAAI,MAAM,sDAAsD;IAExE,IAAI,cAAc,iBAAiB,KAAA,GACjC,MAAM,IAAI,MAAM,uDAAuD;IACzE,OAAO;KACL,QAAQ;KACR,gBAAgB,OAAO;KACvB;KACA;KACA;KACA,cAAc,cAAc;KAC5B,cAAc,cAAc;IAC9B;GACF;EACF,OACE,eAAe,cAAc,OAAO,OAAO;EAG7C,IAAI;EACJ,IAAI,kBAAkB,KAAA,GAAW;GAC/B,QAAQ;IACN,SAAS;IACT,WAAW;IACX,OAAO;IACP,YAAY,OAAO,SAAS;IAC5B;IACA;IACA,aAAa,GAAG,gBAAgB,GAAG,QAAQ,IAAI,GAAG,WAAW,EAAE;IAC/D,gBAAgB,OAAO;GACzB;GACA,WAAW,WAAW,KAAK;EAC7B,OACE,QAAQ;EAGV,IAAI,GAAG,WAAW,eAAe,GAAG;GAClC,MAAM,eAAe,MAAM;GAC3B,IAAI,iBAAiB,KAAA,KAAa,OAAO,GAAG,aAAa,eAAe,CAAC,MAAM,cAAc;IAC3F,QAAQ;KAAE,GAAG;KAAO,OAAO;IAAY;IACvC,WAAW,WAAW,KAAK;IAC3B,OAAO;KACL,QAAQ;KACR,gBAAgB,OAAO;KACvB;KACA;KACA;KACA,cAAc,MAAM,gBAAgB;MAAE,SAAS,CAAC;MAAG,UAAU,CAAC;KAAE;KAChE;IACF;GACF;GACA,MAAM,IAAI,MAAM,0CAA0C,iBAAiB;EAC7E;EAEA,IAAI,MAAM,UAAU,YAAY;GAC9B,IAAI,GAAG,WAAW,MAAM,WAAW,GAAG,GAAG,OAAO,MAAM,aAAa,EAAE,OAAO,KAAK,CAAC;GAClF,GAAG,aAAa,cAAc,MAAM,aAAa,GAAG,UAAU,aAAa;GAC3E,gBAAgB,MAAM,WAAW;GACjC,MAAM,uBAAuB,OAAO,QAAQ,iBAAiB,2BAAA,CAA4B;IACvF;IACA,aAAa,MAAM;IACnB;IACA,gBAAgB,OAAO;GACzB,CAAC;GACD,QAAQ;IACN,GAAG;IACH,OAAO;IACP,cAAc;IACd,cAAc,OAAO,GAAG,aAAa,MAAM,WAAW,CAAC;GACzD;GACA,WAAW,WAAW,KAAK;EAC7B;EACA,IAAI,MAAM,iBAAiB,KAAA,GAAW,MAAM,IAAI,MAAM,qDAAqD;EAC3G,MAAM,eAAe,MAAM;EAC3B,IAAI,MAAM,UAAU,UAAU;GAC5B,QAAQ;IACN,GAAG;IACH,OAAO;IACP,cAAc,QAAQ,gBAClB,MAAM,QAAQ,cAAc,MAAM,aAAa,YAAY,IAC3D,aAAa,OAAO,SAAS,GAAG,aAAa,MAAM,WAAW,GAAG,YAAY;GACnF;GACA,WAAW,WAAW,KAAK;EAC7B;EACA,MAAM,MAAM,gBAAgB;EAE5B,IAAI,CAAC,aADW,WAAW,UACH,CAAC,CAAC,UAAU,OAAO,QAAQ,GACjD,MAAM,IAAI,MAAM,gDAAgD;EAClE,IAAI,CAAC,GAAG,WAAW,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,2CAA2C;EAClG,IAAI,MAAM,iBAAiB,KAAA,KAAa,OAAO,GAAG,aAAa,MAAM,WAAW,CAAC,MAAM,MAAM,cAC3F,MAAM,IAAI,MAAM,sDAAsD;EAExE,gBAAgB,MAAM,aAAa,eAAe;EAClD,QAAQ;GAAE,GAAG;GAAO,OAAO;EAAY;EACvC,WAAW,WAAW,KAAK;EAC3B,OAAO;GACL,QAAQ;GACR,gBAAgB,OAAO;GACvB;GACA;GACA;GACA;GACA,cAAc,MAAM,gBAAgB,OAAO,GAAG,aAAa,eAAe,CAAC;EAC7E;CACF,UAAU;EACR,MAAM,MAAM,QAAQ;CACtB;AACF;AAEA,eAAsB,wBAAwB,SAAwD;CACpG,MAAM,aAAa,KAAK,QAAQ,QAAQ,UAAU;CAClD,MAAM,eAAe,KAAK,QAAQ,QAAQ,YAAY;CACtD,MAAM,QAAQ,MAAM,QAAQ,MAAM,QAAQ,UAAU;CACpD,IAAI;EACF,MAAM,MAAM,gBAAgB;EAC5B,MAAM,WAAW,GAAG,aAAa,YAAY;EAC7C,MAAM,UAAU,GAAG,WAAW,UAAU,IAAI,GAAG,aAAa,UAAU,IAAI,KAAA;EAC1E,IAAI,YAAY,KAAA,KAAa,OAAO,OAAO,MAAM,OAAO,QAAQ,GAAG;EACnE,sBAAsB,YAAY,QAAQ;EAC1C,gBAAgB,UAAU;CAC5B,UAAU;EACR,MAAM,MAAM,QAAQ;CACtB;AACF"}

package/dist/historyOwnership.cjs

@@ -0,0 +1,253 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_runtime = require("./_virtual/_rolldown/runtime.cjs");
+let node_crypto = require("node:crypto");
+let node_fs = require("node:fs");
+node_fs = require_runtime.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+//#region src/services/historyOwnership/index.ts
+const LOCK_SUFFIX = ".doompi-v4.lock";
+const LOCK_VERSION = 1;
+const LOCK_FORMAT = "doompi-v4-history-ownership";
+function canonicalSourcePath(sourcePath) {
+	const absolute = node_path.default.resolve(sourcePath);
+	if (node_fs.default.existsSync(absolute)) return node_fs.default.realpathSync(absolute);
+	const segments = [node_path.default.basename(absolute)];
+	let parent = node_path.default.dirname(absolute);
+	while (!node_fs.default.existsSync(parent)) {
+		segments.unshift(node_path.default.basename(parent));
+		parent = node_path.default.dirname(parent);
+	}
+	return node_path.default.join(node_fs.default.realpathSync(parent), ...segments);
+}
+/** Resolve aliases so every writer and exporter contends for the same lock. */
+function historyOwnershipLockPath(sourcePath) {
+	return `${canonicalSourcePath(sourcePath)}${LOCK_SUFFIX}`;
+}
+function isHistoryObject(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isV4Header(value) {
+	return isHistoryObject(value) && value.kind === "header" && value.v === 4;
+}
+function isV3Header(value) {
+	return isHistoryObject(value) && value.type === "session" && value.version === 3;
+}
+function readHeader(sourcePath, format) {
+	const firstLine = node_fs.default.readFileSync(sourcePath, "utf8").split("\n", 1)[0] ?? "";
+	try {
+		return JSON.parse(firstLine);
+	} catch (error) {
+		const message = format === "v4" ? `History ownership source is not canonical v4 JSONL: ${sourcePath}` : `Offline history source is not canonical v3 JSONL: ${sourcePath}`;
+		throw new Error(message, { cause: error });
+	}
+}
+function assertIndependentRegularFile(sourcePath, label) {
+	const stat = node_fs.default.statSync(sourcePath);
+	if (!stat.isFile() || stat.nlink !== 1) throw new Error(`${label} must be an independent regular file`);
+}
+function assertV4Source(sourcePath) {
+	if (!node_fs.default.existsSync(sourcePath)) return;
+	assertIndependentRegularFile(sourcePath, "Canonical history");
+	if (!isV4Header(readHeader(sourcePath, "v4"))) throw new Error(`History ownership only supports canonical v4 sources: ${sourcePath}`);
+}
+function assertV3Source(sourcePath) {
+	if (!node_fs.default.existsSync(sourcePath)) return;
+	assertIndependentRegularFile(sourcePath, "Offline v3 history source");
+	if (!isV3Header(readHeader(sourcePath, "v3"))) throw new Error(`Offline history import only supports v3 sources: ${sourcePath}`);
+}
+function assertSqliteSource(sourcePath) {
+	if (!node_fs.default.existsSync(sourcePath)) return;
+	assertIndependentRegularFile(sourcePath, "SQLite history");
+	const descriptor = node_fs.default.openSync(sourcePath, "r");
+	try {
+		const header = Buffer.alloc(16);
+		if (node_fs.default.readSync(descriptor, header, 0, header.length, 0) !== header.length || header.toString("utf8") !== "SQLite format 3\0") throw new Error(`History ownership source is not SQLite: ${sourcePath}`);
+	} finally {
+		node_fs.default.closeSync(descriptor);
+	}
+}
+function isFileSystemError(error) {
+	return error instanceof Error && typeof error.code === "string";
+}
+function readToken(lockPath) {
+	try {
+		const value = JSON.parse(node_fs.default.readFileSync(lockPath, "utf8"));
+		return typeof value.token === "string" ? value.token : void 0;
+	} catch {
+		return;
+	}
+}
+/** A dead owner is recoverable only when the entire lock record is recognizable. */
+function readRecoverableLock(lockPath, sourcePath) {
+	try {
+		const stat = node_fs.default.lstatSync(lockPath);
+		if (!stat.isFile() || stat.nlink !== 1) return void 0;
+		const value = JSON.parse(node_fs.default.readFileSync(lockPath, "utf8"));
+		if (!isHistoryObject(value) || value.version !== LOCK_VERSION || value.format !== LOCK_FORMAT || value.sourcePath !== sourcePath || !Number.isSafeInteger(value.pid) || value.pid <= 0 || typeof value.token !== "string" || !/^[\da-f]{8}(?:-[\da-f]{4}){3}-[\da-f]{12}$/iu.test(value.token)) return void 0;
+		return value;
+	} catch {
+		return;
+	}
+}
+function ownerMayBeAlive(pid) {
+	try {
+		process.kill(pid, 0);
+		return true;
+	} catch (error) {
+		return !(isFileSystemError(error) && error.code === "ESRCH");
+	}
+}
+/** A guard left by a dead acquirer can be retired without touching its source lock. */
+function retireDeadGuard(guard) {
+	try {
+		if (!node_fs.default.lstatSync(guard).isDirectory()) return false;
+		const entries = node_fs.default.readdirSync(guard);
+		if (entries.length !== 1 || !/^owner-[\da-f-]{36}\.json$/iu.test(entries[0])) return false;
+		const marker = node_path.default.join(guard, entries[0]);
+		const markerStat = node_fs.default.lstatSync(marker);
+		if (!markerStat.isFile() || markerStat.nlink !== 1) return false;
+		const owner = JSON.parse(node_fs.default.readFileSync(marker, "utf8"));
+		if (!isHistoryObject(owner) || !Number.isSafeInteger(owner.pid) || owner.pid <= 0) return false;
+		if (ownerMayBeAlive(owner.pid)) return false;
+		node_fs.default.unlinkSync(marker);
+		node_fs.default.rmdirSync(guard);
+		return true;
+	} catch {
+		return false;
+	}
+}
+/** All new acquirers hold this guard until their ownership record is durable. */
+function withAcquisitionGuard(lockPath, acquire) {
+	const guard = `${lockPath}.recovery`;
+	try {
+		node_fs.default.mkdirSync(guard, { mode: 448 });
+	} catch (error) {
+		if (!isFileSystemError(error) || error.code !== "EEXIST" || !retireDeadGuard(guard)) throw error;
+		node_fs.default.mkdirSync(guard, { mode: 448 });
+	}
+	const marker = node_path.default.join(guard, `owner-${(0, node_crypto.randomUUID)()}.json`);
+	try {
+		node_fs.default.writeFileSync(marker, JSON.stringify({ pid: process.pid }), {
+			flag: "wx",
+			mode: 384
+		});
+		return acquire();
+	} finally {
+		node_fs.default.rmSync(marker, { force: true });
+		node_fs.default.rmdirSync(guard);
+	}
+}
+/** Called only under the acquisition guard, before publishing a new owner. */
+function recoverDeadOwner(lockPath, sourcePath) {
+	try {
+		const record = readRecoverableLock(lockPath, sourcePath);
+		if (!record || ownerMayBeAlive(record.pid)) return false;
+		const before = node_fs.default.lstatSync(lockPath);
+		if (readRecoverableLock(lockPath, sourcePath)?.token !== record.token || ownerMayBeAlive(record.pid)) return false;
+		const current = node_fs.default.lstatSync(lockPath);
+		if (before.dev !== current.dev || before.ino !== current.ino) return false;
+		node_fs.default.unlinkSync(lockPath);
+		return true;
+	} catch (error) {
+		if (isFileSystemError(error) && error.code === "ENOENT") return false;
+		throw error;
+	}
+}
+function releaseLock(lockPath, token, handle) {
+	node_fs.default.closeSync(handle);
+	if (readToken(lockPath) === token) node_fs.default.rmSync(lockPath, { force: true });
+}
+function createLease(locks, sourcePath, assertQuiescent) {
+	let released = false;
+	return {
+		assertQuiescent: () => {
+			if (released) throw new Error("History ownership lease has been released");
+			for (const lock of locks) {
+				const held = node_fs.default.fstatSync(lock.handle);
+				const current = node_fs.default.statSync(lock.lockPath);
+				if (held.dev !== current.dev || held.ino !== current.ino || readToken(lock.lockPath) !== lock.token) throw new Error("History ownership lock was replaced");
+			}
+			return assertQuiescent(sourcePath);
+		},
+		release: () => {
+			if (released) return;
+			released = true;
+			let firstError;
+			for (const lock of [...locks].reverse()) try {
+				releaseLock(lock.lockPath, lock.token, lock.handle);
+			} catch (error) {
+				firstError ??= error;
+			}
+			if (firstError !== void 0) throw firstError;
+		}
+	};
+}
+/**
+* Creates the canonical history owner used by runtime writers, export CLI, and
+* the explicit offline importer. The default source boundary remains v4.
+* Complete locks left by a dead process are recovered under an exclusive guard.
+* A live owner or an ambiguous sidecar still blocks acquisition.
+*/
+function createHistoryOwnership(options = {}) {
+	const assertQuiescent = options.assertQuiescent ?? (() => void 0);
+	const assertSource = options.sourceFormat === "sqlite" ? assertSqliteSource : options.sourceFormat === "v3" ? assertV3Source : assertV4Source;
+	return { async acquire(sourcePath) {
+		const absoluteSourcePath = canonicalSourcePath(sourcePath);
+		const paths = [absoluteSourcePath, ...options.additionalPaths ?? []].map(canonicalSourcePath);
+		const canonicalPaths = [...new Set(paths)].sort((left, right) => left.localeCompare(right));
+		const locks = [];
+		let conflictingLockPath = historyOwnershipLockPath(absoluteSourcePath);
+		try {
+			for (const lockedPath of canonicalPaths) {
+				const lockPath = historyOwnershipLockPath(lockedPath);
+				conflictingLockPath = lockPath;
+				const token = (0, node_crypto.randomUUID)();
+				const record = {
+					version: LOCK_VERSION,
+					format: LOCK_FORMAT,
+					pid: process.pid,
+					sourcePath: lockedPath,
+					token
+				};
+				node_fs.default.mkdirSync(node_path.default.dirname(lockPath), {
+					recursive: true,
+					mode: 448
+				});
+				withAcquisitionGuard(lockPath, () => {
+					let handle;
+					try {
+						handle = node_fs.default.openSync(lockPath, "wx", 384);
+					} catch (error) {
+						if (!isFileSystemError(error) || error.code !== "EEXIST" || !recoverDeadOwner(lockPath, lockedPath)) throw error;
+						handle = node_fs.default.openSync(lockPath, "wx", 384);
+					}
+					const lock = {
+						lockPath,
+						token,
+						handle
+					};
+					locks.push(lock);
+					node_fs.default.writeFileSync(handle, `${JSON.stringify(record)}\n`, "utf8");
+					node_fs.default.fsyncSync(handle);
+				});
+			}
+			assertSource(absoluteSourcePath);
+		} catch (error) {
+			for (const lock of [...locks].reverse()) try {
+				releaseLock(lock.lockPath, lock.token, lock.handle);
+			} catch {}
+			if (isFileSystemError(error) && error.code === "EEXIST") throw new Error(`History ownership lock already exists or is ambiguous: ${conflictingLockPath}`, { cause: error });
+			throw error;
+		}
+		return createLease(locks, absoluteSourcePath, assertQuiescent);
+	} };
+}
+/** Explicitly named alias for hosts that want to document the v4 boundary. */
+const createV4HistoryOwnership = createHistoryOwnership;
+//#endregion
+exports.createHistoryOwnership = createHistoryOwnership;
+exports.createV4HistoryOwnership = createV4HistoryOwnership;
+exports.historyOwnershipLockPath = historyOwnershipLockPath;
+
+//# sourceMappingURL=historyOwnership.cjs.map

package/dist/historyOwnership.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"historyOwnership.cjs","names":["path","fs","randomUUID"],"sources":["../src/services/historyOwnership/index.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport type { HistoryOwnership, HistoryOwnershipLease } from '../historyImport';\n\nconst LOCK_SUFFIX = '.doompi-v4.lock';\nconst LOCK_VERSION = 1;\nconst LOCK_FORMAT = 'doompi-v4-history-ownership';\n\ninterface HistoryLockRecord {\n  version: 1;\n  format: 'doompi-v4-history-ownership';\n  pid: number;\n  sourcePath: string;\n  token: string;\n}\n\ninterface HeldHistoryLock {\n  lockPath: string;\n  token: string;\n  handle: number;\n}\n\nexport interface HistoryOwnershipOptions {\n  /** Checks managed writers; this cannot account for an unmanaged Pi process. */\n  assertQuiescent?: (sourcePath: string) => void | Promise<void>;\n  /** The source format admitted by this owner. Defaults to canonical v4. */\n  sourceFormat?: 'v3' | 'v4' | 'sqlite';\n  /** Additional paths to lock for the lifetime of each acquired source lease. */\n  additionalPaths?: readonly string[];\n}\n\nfunction canonicalSourcePath(sourcePath: string): string {\n  const absolute = path.resolve(sourcePath);\n  if (fs.existsSync(absolute)) return fs.realpathSync(absolute);\n  const segments = [path.basename(absolute)];\n  let parent = path.dirname(absolute);\n  while (!fs.existsSync(parent)) {\n    segments.unshift(path.basename(parent));\n    parent = path.dirname(parent);\n  }\n  return path.join(fs.realpathSync(parent), ...segments);\n}\n\n/** Resolve aliases so every writer and exporter contends for the same lock. */\nexport function historyOwnershipLockPath(sourcePath: string): string {\n  return `${canonicalSourcePath(sourcePath)}${LOCK_SUFFIX}`;\n}\n\nfunction isHistoryObject(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction isV4Header(value: unknown): boolean {\n  return isHistoryObject(value) && value.kind === 'header' && value.v === 4;\n}\n\nfunction isV3Header(value: unknown): boolean {\n  return isHistoryObject(value) && value.type === 'session' && value.version === 3;\n}\n\nfunction readHeader(sourcePath: string, format: 'v3' | 'v4'): unknown {\n  const firstLine = fs.readFileSync(sourcePath, 'utf8').split('\\n', 1)[0] ?? '';\n  try {\n    return JSON.parse(firstLine);\n  } catch (error) {\n    const message =\n      format === 'v4'\n        ? `History ownership source is not canonical v4 JSONL: ${sourcePath}`\n        : `Offline history source is not canonical v3 JSONL: ${sourcePath}`;\n    throw new Error(message, { cause: error });\n  }\n}\n\nfunction assertIndependentRegularFile(sourcePath: string, label: string): void {\n  const stat = fs.statSync(sourcePath);\n  if (!stat.isFile() || stat.nlink !== 1) throw new Error(`${label} must be an independent regular file`);\n}\n\nfunction assertV4Source(sourcePath: string): void {\n  if (!fs.existsSync(sourcePath)) return;\n  assertIndependentRegularFile(sourcePath, 'Canonical history');\n  if (!isV4Header(readHeader(sourcePath, 'v4')))\n    throw new Error(`History ownership only supports canonical v4 sources: ${sourcePath}`);\n}\n\nfunction assertV3Source(sourcePath: string): void {\n  if (!fs.existsSync(sourcePath)) return;\n  assertIndependentRegularFile(sourcePath, 'Offline v3 history source');\n  if (!isV3Header(readHeader(sourcePath, 'v3')))\n    throw new Error(`Offline history import only supports v3 sources: ${sourcePath}`);\n}\n\nfunction assertSqliteSource(sourcePath: string): void {\n  if (!fs.existsSync(sourcePath)) return;\n  assertIndependentRegularFile(sourcePath, 'SQLite history');\n  const descriptor = fs.openSync(sourcePath, 'r');\n  try {\n    const header = Buffer.alloc(16);\n    if (\n      fs.readSync(descriptor, header, 0, header.length, 0) !== header.length ||\n      header.toString('utf8') !== 'SQLite format 3\\u0000'\n    )\n      throw new Error(`History ownership source is not SQLite: ${sourcePath}`);\n  } finally {\n    fs.closeSync(descriptor);\n  }\n}\n\nfunction isFileSystemError(error: unknown): error is NodeJS.ErrnoException {\n  return error instanceof Error && typeof (error as NodeJS.ErrnoException).code === 'string';\n}\n\nfunction readToken(lockPath: string): string | undefined {\n  try {\n    const value = JSON.parse(fs.readFileSync(lockPath, 'utf8')) as Partial<HistoryLockRecord>;\n    return typeof value.token === 'string' ? value.token : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/** A dead owner is recoverable only when the entire lock record is recognizable. */\nfunction readRecoverableLock(lockPath: string, sourcePath: string): HistoryLockRecord | undefined {\n  try {\n    const stat = fs.lstatSync(lockPath);\n    if (!stat.isFile() || stat.nlink !== 1) return undefined;\n    const value: unknown = JSON.parse(fs.readFileSync(lockPath, 'utf8'));\n    if (\n      !isHistoryObject(value) ||\n      value.version !== LOCK_VERSION ||\n      value.format !== LOCK_FORMAT ||\n      value.sourcePath !== sourcePath ||\n      !Number.isSafeInteger(value.pid) ||\n      (value.pid as number) <= 0 ||\n      typeof value.token !== 'string' ||\n      !/^[\\da-f]{8}(?:-[\\da-f]{4}){3}-[\\da-f]{12}$/iu.test(value.token)\n    )\n      return undefined;\n    return value as unknown as HistoryLockRecord;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction ownerMayBeAlive(pid: number): boolean {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (error) {\n    return !(isFileSystemError(error) && error.code === 'ESRCH');\n  }\n}\n/** A guard left by a dead acquirer can be retired without touching its source lock. */\nfunction retireDeadGuard(guard: string): boolean {\n  try {\n    const stat = fs.lstatSync(guard);\n    if (!stat.isDirectory()) return false;\n    const entries = fs.readdirSync(guard);\n    // An empty guard might still belong to a process killed between mkdir and\n    // publishing its marker. Fail closed rather than race a new acquirer.\n    if (entries.length !== 1 || !/^owner-[\\da-f-]{36}\\.json$/iu.test(entries[0]!)) return false;\n    const marker = path.join(guard, entries[0]!);\n    const markerStat = fs.lstatSync(marker);\n    if (!markerStat.isFile() || markerStat.nlink !== 1) return false;\n    const owner: unknown = JSON.parse(fs.readFileSync(marker, 'utf8'));\n    if (!isHistoryObject(owner) || !Number.isSafeInteger(owner.pid) || (owner.pid as number) <= 0) return false;\n    if (ownerMayBeAlive(owner.pid as number)) return false;\n    // Only the process that unlinks this unique marker may retire the directory.\n    // Other cleaners see a newly empty guard and refuse to remove it.\n    fs.unlinkSync(marker);\n    fs.rmdirSync(guard);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** All new acquirers hold this guard until their ownership record is durable. */\nfunction withAcquisitionGuard<T>(lockPath: string, acquire: () => T): T {\n  const guard = `${lockPath}.recovery`;\n  try {\n    fs.mkdirSync(guard, { mode: 0o700 });\n  } catch (error) {\n    if (!isFileSystemError(error) || error.code !== 'EEXIST' || !retireDeadGuard(guard)) throw error;\n    fs.mkdirSync(guard, { mode: 0o700 });\n  }\n  const marker = path.join(guard, `owner-${randomUUID()}.json`);\n  try {\n    fs.writeFileSync(marker, JSON.stringify({ pid: process.pid }), { flag: 'wx', mode: 0o600 });\n    return acquire();\n  } finally {\n    fs.rmSync(marker, { force: true });\n    fs.rmdirSync(guard);\n  }\n}\n\n/** Called only under the acquisition guard, before publishing a new owner. */\nfunction recoverDeadOwner(lockPath: string, sourcePath: string): boolean {\n  try {\n    const record = readRecoverableLock(lockPath, sourcePath);\n    if (!record || ownerMayBeAlive(record.pid)) return false;\n    const before = fs.lstatSync(lockPath);\n    if (readRecoverableLock(lockPath, sourcePath)?.token !== record.token || ownerMayBeAlive(record.pid)) return false;\n    const current = fs.lstatSync(lockPath);\n    if (before.dev !== current.dev || before.ino !== current.ino) return false;\n    // The owner is gone, and other recoverers cannot remove this lock while\n    // the guard is held. Legacy writers still contend on the exclusive wx open.\n    fs.unlinkSync(lockPath);\n    return true;\n  } catch (error) {\n    if (isFileSystemError(error) && error.code === 'ENOENT') return false;\n    throw error;\n  }\n}\n\nfunction releaseLock(lockPath: string, token: string, handle: number): void {\n  fs.closeSync(handle);\n  // Recovery only retires a lock after its recorded owner has exited, so that\n  // owner cannot be here releasing it concurrently. A replaced lock is ambiguous.\n  if (readToken(lockPath) === token) fs.rmSync(lockPath, { force: true });\n}\n\nfunction createLease(\n  locks: readonly HeldHistoryLock[],\n  sourcePath: string,\n  assertQuiescent: (sourcePath: string) => void | Promise<void>,\n): HistoryOwnershipLease {\n  let released = false;\n  return {\n    assertQuiescent: () => {\n      if (released) throw new Error('History ownership lease has been released');\n      for (const lock of locks) {\n        const held = fs.fstatSync(lock.handle);\n        const current = fs.statSync(lock.lockPath);\n        if (held.dev !== current.dev || held.ino !== current.ino || readToken(lock.lockPath) !== lock.token) {\n          throw new Error('History ownership lock was replaced');\n        }\n      }\n      return assertQuiescent(sourcePath);\n    },\n    release: () => {\n      if (released) return;\n      released = true;\n      let firstError: unknown;\n      for (const lock of [...locks].reverse()) {\n        try {\n          releaseLock(lock.lockPath, lock.token, lock.handle);\n        } catch (error) {\n          firstError ??= error;\n        }\n      }\n      if (firstError !== undefined) throw firstError;\n    },\n  };\n}\n\n/**\n * Creates the canonical history owner used by runtime writers, export CLI, and\n * the explicit offline importer. The default source boundary remains v4.\n * Complete locks left by a dead process are recovered under an exclusive guard.\n * A live owner or an ambiguous sidecar still blocks acquisition.\n */\nexport function createHistoryOwnership(options: HistoryOwnershipOptions = {}): HistoryOwnership {\n  const assertQuiescent = options.assertQuiescent ?? (() => undefined);\n  const assertSource =\n    options.sourceFormat === 'sqlite'\n      ? assertSqliteSource\n      : options.sourceFormat === 'v3'\n        ? assertV3Source\n        : assertV4Source;\n  return {\n    async acquire(sourcePath: string): Promise<HistoryOwnershipLease> {\n      const absoluteSourcePath = canonicalSourcePath(sourcePath);\n      const paths = [absoluteSourcePath, ...(options.additionalPaths ?? [])].map(canonicalSourcePath);\n      const canonicalPaths = [...new Set(paths)].sort((left, right) => left.localeCompare(right));\n      const locks: HeldHistoryLock[] = [];\n      let conflictingLockPath = historyOwnershipLockPath(absoluteSourcePath);\n      try {\n        for (const lockedPath of canonicalPaths) {\n          const lockPath = historyOwnershipLockPath(lockedPath);\n          conflictingLockPath = lockPath;\n          const token = randomUUID();\n          const record: HistoryLockRecord = {\n            version: LOCK_VERSION,\n            format: LOCK_FORMAT,\n            pid: process.pid,\n            sourcePath: lockedPath,\n            token,\n          };\n          fs.mkdirSync(path.dirname(lockPath), { recursive: true, mode: 0o700 });\n          withAcquisitionGuard(lockPath, () => {\n            let handle: number;\n            try {\n              handle = fs.openSync(lockPath, 'wx', 0o600);\n            } catch (error) {\n              if (!isFileSystemError(error) || error.code !== 'EEXIST' || !recoverDeadOwner(lockPath, lockedPath))\n                throw error;\n              handle = fs.openSync(lockPath, 'wx', 0o600);\n            }\n            const lock = { lockPath, token, handle };\n            locks.push(lock);\n            fs.writeFileSync(handle, `${JSON.stringify(record)}\\n`, 'utf8');\n            fs.fsyncSync(handle);\n          });\n        }\n        assertSource(absoluteSourcePath);\n      } catch (error) {\n        for (const lock of [...locks].reverse()) {\n          try {\n            releaseLock(lock.lockPath, lock.token, lock.handle);\n          } catch {\n            // Preserve the acquisition failure and never remove a replaced lock.\n          }\n        }\n        if (isFileSystemError(error) && error.code === 'EEXIST') {\n          throw new Error(`History ownership lock already exists or is ambiguous: ${conflictingLockPath}`, {\n            cause: error,\n          });\n        }\n        throw error;\n      }\n      return createLease(locks, absoluteSourcePath, assertQuiescent);\n    },\n  };\n}\n\n/** Explicitly named alias for hosts that want to document the v4 boundary. */\nexport const createV4HistoryOwnership = createHistoryOwnership;\n"],"mappings":";;;;;;;;AAMA,MAAM,cAAc;AACpB,MAAM,eAAe;AACrB,MAAM,cAAc;AAyBpB,SAAS,oBAAoB,YAA4B;CACvD,MAAM,WAAWA,UAAAA,QAAK,QAAQ,UAAU;CACxC,IAAIC,QAAAA,QAAG,WAAW,QAAQ,GAAG,OAAOA,QAAAA,QAAG,aAAa,QAAQ;CAC5D,MAAM,WAAW,CAACD,UAAAA,QAAK,SAAS,QAAQ,CAAC;CACzC,IAAI,SAASA,UAAAA,QAAK,QAAQ,QAAQ;CAClC,OAAO,CAACC,QAAAA,QAAG,WAAW,MAAM,GAAG;EAC7B,SAAS,QAAQD,UAAAA,QAAK,SAAS,MAAM,CAAC;EACtC,SAASA,UAAAA,QAAK,QAAQ,MAAM;CAC9B;CACA,OAAOA,UAAAA,QAAK,KAAKC,QAAAA,QAAG,aAAa,MAAM,GAAG,GAAG,QAAQ;AACvD;;AAGA,SAAgB,yBAAyB,YAA4B;CACnE,OAAO,GAAG,oBAAoB,UAAU,IAAI;AAC9C;AAEA,SAAS,gBAAgB,OAAkD;CACzE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,WAAW,OAAyB;CAC3C,OAAO,gBAAgB,KAAK,KAAK,MAAM,SAAS,YAAY,MAAM,MAAM;AAC1E;AAEA,SAAS,WAAW,OAAyB;CAC3C,OAAO,gBAAgB,KAAK,KAAK,MAAM,SAAS,aAAa,MAAM,YAAY;AACjF;AAEA,SAAS,WAAW,YAAoB,QAA8B;CACpE,MAAM,YAAYA,QAAAA,QAAG,aAAa,YAAY,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM;CAC3E,IAAI;EACF,OAAO,KAAK,MAAM,SAAS;CAC7B,SAAS,OAAO;EACd,MAAM,UACJ,WAAW,OACP,uDAAuD,eACvD,qDAAqD;EAC3D,MAAM,IAAI,MAAM,SAAS,EAAE,OAAO,MAAM,CAAC;CAC3C;AACF;AAEA,SAAS,6BAA6B,YAAoB,OAAqB;CAC7E,MAAM,OAAOA,QAAAA,QAAG,SAAS,UAAU;CACnC,IAAI,CAAC,KAAK,OAAO,KAAK,KAAK,UAAU,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,qCAAqC;AACxG;AAEA,SAAS,eAAe,YAA0B;CAChD,IAAI,CAACA,QAAAA,QAAG,WAAW,UAAU,GAAG;CAChC,6BAA6B,YAAY,mBAAmB;CAC5D,IAAI,CAAC,WAAW,WAAW,YAAY,IAAI,CAAC,GAC1C,MAAM,IAAI,MAAM,yDAAyD,YAAY;AACzF;AAEA,SAAS,eAAe,YAA0B;CAChD,IAAI,CAACA,QAAAA,QAAG,WAAW,UAAU,GAAG;CAChC,6BAA6B,YAAY,2BAA2B;CACpE,IAAI,CAAC,WAAW,WAAW,YAAY,IAAI,CAAC,GAC1C,MAAM,IAAI,MAAM,oDAAoD,YAAY;AACpF;AAEA,SAAS,mBAAmB,YAA0B;CACpD,IAAI,CAACA,QAAAA,QAAG,WAAW,UAAU,GAAG;CAChC,6BAA6B,YAAY,gBAAgB;CACzD,MAAM,aAAaA,QAAAA,QAAG,SAAS,YAAY,GAAG;CAC9C,IAAI;EACF,MAAM,SAAS,OAAO,MAAM,EAAE;EAC9B,IACEA,QAAAA,QAAG,SAAS,YAAY,QAAQ,GAAG,OAAO,QAAQ,CAAC,MAAM,OAAO,UAChE,OAAO,SAAS,MAAM,MAAM,qBAE5B,MAAM,IAAI,MAAM,2CAA2C,YAAY;CAC3E,UAAU;EACR,QAAA,QAAG,UAAU,UAAU;CACzB;AACF;AAEA,SAAS,kBAAkB,OAAgD;CACzE,OAAO,iBAAiB,SAAS,OAAQ,MAAgC,SAAS;AACpF;AAEA,SAAS,UAAU,UAAsC;CACvD,IAAI;EACF,MAAM,QAAQ,KAAK,MAAMA,QAAAA,QAAG,aAAa,UAAU,MAAM,CAAC;EAC1D,OAAO,OAAO,MAAM,UAAU,WAAW,MAAM,QAAQ,KAAA;CACzD,QAAQ;EACN;CACF;AACF;;AAGA,SAAS,oBAAoB,UAAkB,YAAmD;CAChG,IAAI;EACF,MAAM,OAAOA,QAAAA,QAAG,UAAU,QAAQ;EAClC,IAAI,CAAC,KAAK,OAAO,KAAK,KAAK,UAAU,GAAG,OAAO,KAAA;EAC/C,MAAM,QAAiB,KAAK,MAAMA,QAAAA,QAAG,aAAa,UAAU,MAAM,CAAC;EACnE,IACE,CAAC,gBAAgB,KAAK,KACtB,MAAM,YAAY,gBAClB,MAAM,WAAW,eACjB,MAAM,eAAe,cACrB,CAAC,OAAO,cAAc,MAAM,GAAG,KAC9B,MAAM,OAAkB,KACzB,OAAO,MAAM,UAAU,YACvB,CAAC,+CAA+C,KAAK,MAAM,KAAK,GAEhE,OAAO,KAAA;EACT,OAAO;CACT,QAAQ;EACN;CACF;AACF;AAEA,SAAS,gBAAgB,KAAsB;CAC7C,IAAI;EACF,QAAQ,KAAK,KAAK,CAAC;EACnB,OAAO;CACT,SAAS,OAAO;EACd,OAAO,EAAE,kBAAkB,KAAK,KAAK,MAAM,SAAS;CACtD;AACF;;AAEA,SAAS,gBAAgB,OAAwB;CAC/C,IAAI;EAEF,IAAI,CADSA,QAAAA,QAAG,UAAU,KAClB,CAAC,CAAC,YAAY,GAAG,OAAO;EAChC,MAAM,UAAUA,QAAAA,QAAG,YAAY,KAAK;EAGpC,IAAI,QAAQ,WAAW,KAAK,CAAC,+BAA+B,KAAK,QAAQ,EAAG,GAAG,OAAO;EACtF,MAAM,SAASD,UAAAA,QAAK,KAAK,OAAO,QAAQ,EAAG;EAC3C,MAAM,aAAaC,QAAAA,QAAG,UAAU,MAAM;EACtC,IAAI,CAAC,WAAW,OAAO,KAAK,WAAW,UAAU,GAAG,OAAO;EAC3D,MAAM,QAAiB,KAAK,MAAMA,QAAAA,QAAG,aAAa,QAAQ,MAAM,CAAC;EACjE,IAAI,CAAC,gBAAgB,KAAK,KAAK,CAAC,OAAO,cAAc,MAAM,GAAG,KAAM,MAAM,OAAkB,GAAG,OAAO;EACtG,IAAI,gBAAgB,MAAM,GAAa,GAAG,OAAO;EAGjD,QAAA,QAAG,WAAW,MAAM;EACpB,QAAA,QAAG,UAAU,KAAK;EAClB,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAS,qBAAwB,UAAkB,SAAqB;CACtE,MAAM,QAAQ,GAAG,SAAS;CAC1B,IAAI;EACF,QAAA,QAAG,UAAU,OAAO,EAAE,MAAM,IAAM,CAAC;CACrC,SAAS,OAAO;EACd,IAAI,CAAC,kBAAkB,KAAK,KAAK,MAAM,SAAS,YAAY,CAAC,gBAAgB,KAAK,GAAG,MAAM;EAC3F,QAAA,QAAG,UAAU,OAAO,EAAE,MAAM,IAAM,CAAC;CACrC;CACA,MAAM,SAASD,UAAAA,QAAK,KAAK,OAAO,UAAA,GAASE,YAAAA,WAAAA,CAAW,EAAE,MAAM;CAC5D,IAAI;EACF,QAAA,QAAG,cAAc,QAAQ,KAAK,UAAU,EAAE,KAAK,QAAQ,IAAI,CAAC,GAAG;GAAE,MAAM;GAAM,MAAM;EAAM,CAAC;EAC1F,OAAO,QAAQ;CACjB,UAAU;EACR,QAAA,QAAG,OAAO,QAAQ,EAAE,OAAO,KAAK,CAAC;EACjC,QAAA,QAAG,UAAU,KAAK;CACpB;AACF;;AAGA,SAAS,iBAAiB,UAAkB,YAA6B;CACvE,IAAI;EACF,MAAM,SAAS,oBAAoB,UAAU,UAAU;EACvD,IAAI,CAAC,UAAU,gBAAgB,OAAO,GAAG,GAAG,OAAO;EACnD,MAAM,SAASD,QAAAA,QAAG,UAAU,QAAQ;EACpC,IAAI,oBAAoB,UAAU,UAAU,CAAC,EAAE,UAAU,OAAO,SAAS,gBAAgB,OAAO,GAAG,GAAG,OAAO;EAC7G,MAAM,UAAUA,QAAAA,QAAG,UAAU,QAAQ;EACrC,IAAI,OAAO,QAAQ,QAAQ,OAAO,OAAO,QAAQ,QAAQ,KAAK,OAAO;EAGrE,QAAA,QAAG,WAAW,QAAQ;EACtB,OAAO;CACT,SAAS,OAAO;EACd,IAAI,kBAAkB,KAAK,KAAK,MAAM,SAAS,UAAU,OAAO;EAChE,MAAM;CACR;AACF;AAEA,SAAS,YAAY,UAAkB,OAAe,QAAsB;CAC1E,QAAA,QAAG,UAAU,MAAM;CAGnB,IAAI,UAAU,QAAQ,MAAM,OAAO,QAAA,QAAG,OAAO,UAAU,EAAE,OAAO,KAAK,CAAC;AACxE;AAEA,SAAS,YACP,OACA,YACA,iBACuB;CACvB,IAAI,WAAW;CACf,OAAO;EACL,uBAAuB;GACrB,IAAI,UAAU,MAAM,IAAI,MAAM,2CAA2C;GACzE,KAAK,MAAM,QAAQ,OAAO;IACxB,MAAM,OAAOA,QAAAA,QAAG,UAAU,KAAK,MAAM;IACrC,MAAM,UAAUA,QAAAA,QAAG,SAAS,KAAK,QAAQ;IACzC,IAAI,KAAK,QAAQ,QAAQ,OAAO,KAAK,QAAQ,QAAQ,OAAO,UAAU,KAAK,QAAQ,MAAM,KAAK,OAC5F,MAAM,IAAI,MAAM,qCAAqC;GAEzD;GACA,OAAO,gBAAgB,UAAU;EACnC;EACA,eAAe;GACb,IAAI,UAAU;GACd,WAAW;GACX,IAAI;GACJ,KAAK,MAAM,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,GACpC,IAAI;IACF,YAAY,KAAK,UAAU,KAAK,OAAO,KAAK,MAAM;GACpD,SAAS,OAAO;IACd,eAAe;GACjB;GAEF,IAAI,eAAe,KAAA,GAAW,MAAM;EACtC;CACF;AACF;;;;;;;AAQA,SAAgB,uBAAuB,UAAmC,CAAC,GAAqB;CAC9F,MAAM,kBAAkB,QAAQ,0BAA0B,KAAA;CAC1D,MAAM,eACJ,QAAQ,iBAAiB,WACrB,qBACA,QAAQ,iBAAiB,OACvB,iBACA;CACR,OAAO,EACL,MAAM,QAAQ,YAAoD;EAChE,MAAM,qBAAqB,oBAAoB,UAAU;EACzD,MAAM,QAAQ,CAAC,oBAAoB,GAAI,QAAQ,mBAAmB,CAAC,CAAE,CAAC,CAAC,IAAI,mBAAmB;EAC9F,MAAM,iBAAiB,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;EAC1F,MAAM,QAA2B,CAAC;EAClC,IAAI,sBAAsB,yBAAyB,kBAAkB;EACrE,IAAI;GACF,KAAK,MAAM,cAAc,gBAAgB;IACvC,MAAM,WAAW,yBAAyB,UAAU;IACpD,sBAAsB;IACtB,MAAM,SAAA,GAAQC,YAAAA,WAAAA,CAAW;IACzB,MAAM,SAA4B;KAChC,SAAS;KACT,QAAQ;KACR,KAAK,QAAQ;KACb,YAAY;KACZ;IACF;IACA,QAAA,QAAG,UAAUF,UAAAA,QAAK,QAAQ,QAAQ,GAAG;KAAE,WAAW;KAAM,MAAM;IAAM,CAAC;IACrE,qBAAqB,gBAAgB;KACnC,IAAI;KACJ,IAAI;MACF,SAASC,QAAAA,QAAG,SAAS,UAAU,MAAM,GAAK;KAC5C,SAAS,OAAO;MACd,IAAI,CAAC,kBAAkB,KAAK,KAAK,MAAM,SAAS,YAAY,CAAC,iBAAiB,UAAU,UAAU,GAChG,MAAM;MACR,SAASA,QAAAA,QAAG,SAAS,UAAU,MAAM,GAAK;KAC5C;KACA,MAAM,OAAO;MAAE;MAAU;MAAO;KAAO;KACvC,MAAM,KAAK,IAAI;KACf,QAAA,QAAG,cAAc,QAAQ,GAAG,KAAK,UAAU,MAAM,EAAE,KAAK,MAAM;KAC9D,QAAA,QAAG,UAAU,MAAM;IACrB,CAAC;GACH;GACA,aAAa,kBAAkB;EACjC,SAAS,OAAO;GACd,KAAK,MAAM,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,GACpC,IAAI;IACF,YAAY,KAAK,UAAU,KAAK,OAAO,KAAK,MAAM;GACpD,QAAQ,CAER;GAEF,IAAI,kBAAkB,KAAK,KAAK,MAAM,SAAS,UAC7C,MAAM,IAAI,MAAM,0DAA0D,uBAAuB,EAC/F,OAAO,MACT,CAAC;GAEH,MAAM;EACR;EACA,OAAO,YAAY,OAAO,oBAAoB,eAAe;CAC/D,EACF;AACF;;AAGA,MAAa,2BAA2B"}

package/dist/historyOwnership.d.mts

@@ -0,0 +1,23 @@
+import { HistoryOwnership } from "./historyImport.mjs";
+//#region src/services/historyOwnership/index.d.ts
+export interface HistoryOwnershipOptions {
+  /** Checks managed writers; this cannot account for an unmanaged Pi process. */
+  assertQuiescent?: (sourcePath: string) => void | Promise<void>;
+  /** The source format admitted by this owner. Defaults to canonical v4. */
+  sourceFormat?: 'v3' | 'v4' | 'sqlite';
+  /** Additional paths to lock for the lifetime of each acquired source lease. */
+  additionalPaths?: readonly string[];
+}
+/** Resolve aliases so every writer and exporter contends for the same lock. */
+export declare function historyOwnershipLockPath(sourcePath: string): string;
+/**
+ * Creates the canonical history owner used by runtime writers, export CLI, and
+ * the explicit offline importer. The default source boundary remains v4.
+ * Complete locks left by a dead process are recovered under an exclusive guard.
+ * A live owner or an ambiguous sidecar still blocks acquisition.
+ */
+export declare function createHistoryOwnership(options?: HistoryOwnershipOptions): HistoryOwnership;
+/** Explicitly named alias for hosts that want to document the v4 boundary. */
+export declare const createV4HistoryOwnership: typeof createHistoryOwnership;
+//#endregion
+//# sourceMappingURL=historyOwnership.d.mts.map

package/dist/historyOwnership.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"historyOwnership.d.mts","names":[],"sources":["../src/services/historyOwnership/index.ts"],"mappings":";;iBAwBiB;;EAEf,mBAAmB,8BAA8B;;EAEjD;;EAEA;;;wBAgBc,yBAAyB;;;;;;;wBA0NzB,uBAAuB,UAAS,0BAA+B;;qBAiElE,iCAAwB"}