@agimon-ai/po 0.0.0-alpha.0

package/dist/src/composition/poHomeMigration/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/composition/poHomeMigration/index.ts"],"sourcesContent":["import { execFileSync } from 'node:child_process';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\n/**\n * Moving Po's home from `~/.pi/.po` to `~/.po`.\n *\n * The user's data is copied, never renamed: an older Po still running reads the old\n * directory, so it must stay whole until no older host is left. The old directory is\n * deleted only when both the host registry and a process scan find no older host.\n */\n\nconst LEGACY_SEGMENTS = ['.pi', '.po'] as const;\nconst MARKER_FILE = 'migration.json';\nconst MARKER_VERSION = 1;\n/** What moves: configuration, user workspaces, git and session state, and the signer. */\nconst COPIED_ENTRIES = [\n  'config.yaml',\n  'modes.yaml',\n  'domains.yaml',\n  'profiles.yaml',\n  'hooks.yaml',\n  'workspace',\n  'git',\n  'session',\n  path.join('server', 'signing.json'),\n] as const;\nconst LEGACY_PLANS_DIRECTORY = 'plans';\nconst HOSTS_DIRECTORY = path.join('run', 'hosts');\nconst HOST_RECORD_PREFIX = 'po-server-';\n/** Command lines of an older Po host, which reads the legacy directory. */\nconst PO_HOST_COMMAND = /po\\/dist\\/bin\\/(serve|dpi|cli)\\.mjs/u;\n/** The web and server ports older Po hosts listen on. */\nconst LEGACY_HOST_PORTS = [7433, 7434, 7533, 7534] as const;\nconst PRIVATE_DIRECTORY_MODE = 0o700;\n\nexport function legacyPoHomeDirectory(homeDirectory: string): string {\n  return path.join(homeDirectory, ...LEGACY_SEGMENTS);\n}\n\nexport interface PoHomeMigrationResult {\n  readonly status: 'migrated' | 'already-migrated' | 'nothing-to-migrate';\n  readonly copied: readonly string[];\n  /** Entries left alone because `~/.po` already had them. */\n  readonly skipped: readonly string[];\n}\n\n/**\n * Copies the user's data from `~/.pi/.po`, and plans from `~/.pi/plans`, into the Po home, once.\n *\n * An entry the Po home already has is skipped, never merged or overwritten. The marker\n * records that this ran; the Po home existing does not, because `run` lives there too.\n */\nexport function migratePoHome(homeDirectory: string, poHome: string): PoHomeMigrationResult {\n  const marker = path.join(poHome, MARKER_FILE);\n  if (fs.existsSync(marker)) return { status: 'already-migrated', copied: [], skipped: [] };\n  const legacy = legacyPoHomeDirectory(homeDirectory);\n  if (path.resolve(legacy) === path.resolve(poHome) || !fs.existsSync(legacy)) {\n    return { status: 'nothing-to-migrate', copied: [], skipped: [] };\n  }\n  fs.mkdirSync(poHome, { recursive: true, mode: PRIVATE_DIRECTORY_MODE });\n  const copied: string[] = [];\n  const skipped: string[] = [];\n  // Plans lived beside ~/.pi/.po, at ~/.pi/plans, and now default to <po home>/plans.\n  const sources = [\n    ...COPIED_ENTRIES.map((entry) => ({ entry, source: path.join(legacy, entry) })),\n    { entry: LEGACY_PLANS_DIRECTORY, source: path.join(homeDirectory, '.pi', LEGACY_PLANS_DIRECTORY) },\n  ];\n  for (const { entry, source } of sources) {\n    if (!fs.existsSync(source)) continue;\n    const target = path.join(poHome, entry);\n    if (fs.existsSync(target)) {\n      skipped.push(entry);\n      continue;\n    }\n    fs.mkdirSync(path.dirname(target), { recursive: true, mode: PRIVATE_DIRECTORY_MODE });\n    fs.cpSync(source, target, { recursive: true, errorOnExist: true, force: false, preserveTimestamps: true });\n    copied.push(entry);\n  }\n  fs.writeFileSync(\n    marker,\n    `${JSON.stringify({ version: MARKER_VERSION, from: legacy, migratedAt: new Date().toISOString(), copied, skipped }, null, 2)}\\n`,\n    { mode: 0o600 },\n  );\n  return { status: 'migrated', copied, skipped };\n}\n\n/** Records this host in the Po home's registry until the returned release runs. */\nexport function registerPoHost(poHome: string, pid: number = process.pid): () => void {\n  const directory = path.join(poHome, HOSTS_DIRECTORY);\n  fs.mkdirSync(directory, { recursive: true, mode: PRIVATE_DIRECTORY_MODE });\n  const file = path.join(directory, `${HOST_RECORD_PREFIX}${String(pid)}.json`);\n  fs.writeFileSync(file, `${JSON.stringify({ pid, startedAt: new Date().toISOString() })}\\n`, { mode: 0o600 });\n  return () => fs.rmSync(file, { force: true });\n}\n\n/** Pids of registered hosts; records of processes that are gone are ignored. */\nfunction registeredHostPids(poHome: string): Set<number> {\n  const directory = path.join(poHome, HOSTS_DIRECTORY);\n  const pids = new Set<number>();\n  if (!fs.existsSync(directory)) return pids;\n  for (const name of fs.readdirSync(directory)) {\n    const match = new RegExp(`^${HOST_RECORD_PREFIX}(\\\\d+)\\\\.json$`, 'u').exec(name);\n    if (match?.[1]) pids.add(Number(match[1]));\n  }\n  return pids;\n}\n\nexport interface HostScan {\n  /** Every process's pid and command line. */\n  processes(): readonly { pid: number; command: string }[];\n  /** Pids listening on any of the ports. */\n  listeners(ports: readonly number[]): readonly number[];\n}\n\n/** `ps` and `lsof`, as macOS and Linux provide them. A missing tool throws, which defers deletion. */\nexport const systemHostScan: HostScan = {\n  processes() {\n    return execFileSync('ps', ['-axo', 'pid=,command='], { encoding: 'utf8' })\n      .split('\\n')\n      .map((line) => /^\\s*(\\d+)\\s+(.*)$/u.exec(line))\n      .filter((match): match is RegExpExecArray => match !== null)\n      .map((match) => ({ pid: Number(match[1]), command: match[2]! }));\n  },\n  listeners(ports) {\n    const args = ['-nP', '-sTCP:LISTEN', '-t', ...ports.map((port) => `-iTCP:${String(port)}`)];\n    let output: string;\n    try {\n      output = execFileSync('lsof', args, { encoding: 'utf8' });\n    } catch (error) {\n      // lsof exits 1 when any one port has no listener, even when another port has one;\n      // its output still lists the pids it found. Any other status is a real failure.\n      const status = (error as { status?: number }).status;\n      if (status !== 1) throw error;\n      output = (error as { stdout?: string }).stdout ?? '';\n    }\n    return output\n      .split('\\n')\n      .map((line) => Number(line.trim()))\n      .filter((pid) => Number.isInteger(pid) && pid > 0);\n  },\n};\n\n/**\n * One scan for Po hosts: `hosts` holds every process running a Po host entry and every\n * listener on a Po host port, registered or not; `live` holds every pid that exists.\n * A scan that cannot run throws.\n */\nfunction scanPoHosts(scan: HostScan): { hosts: number[]; live: Set<number> } {\n  const processes = scan.processes();\n  return {\n    hosts: [\n      ...processes.filter((entry) => PO_HOST_COMMAND.test(entry.command)).map((entry) => entry.pid),\n      ...scan.listeners(LEGACY_HOST_PORTS),\n    ],\n    live: new Set(processes.map((entry) => entry.pid)),\n  };\n}\n\nexport type OtherPoHosts = { status: 'none' } | { status: 'running'; reason: string };\n\n/**\n * Whether any Po host other than this process runs: the scan of 4c's retirement, plus\n * registered hosts whose process still exists (a host run from source has no `dist` entry\n * to match). A scan that fails counts as running, so a caller acting on \"none\" never\n * acts on a guess.\n */\nexport function otherPoHosts(\n  poHome: string,\n  scan: HostScan = systemHostScan,\n  selfPid: number = process.pid,\n): OtherPoHosts {\n  let others: number[];\n  try {\n    const { hosts, live } = scanPoHosts(scan);\n    others = [...hosts, ...[...registeredHostPids(poHome)].filter((pid) => live.has(pid))].filter(\n      (pid) => pid !== selfPid,\n    );\n  } catch (error) {\n    return { status: 'running', reason: `host scan failed: ${error instanceof Error ? error.message : String(error)}` };\n  }\n  return others.length === 0\n    ? { status: 'none' }\n    : { status: 'running', reason: `other Po processes run: ${[...new Set(others)].join(', ')}` };\n}\n\nexport type LegacyRetirement =\n  | { status: 'removed' | 'absent' | 'not-migrated' }\n  | { status: 'deferred'; reason: string };\n\n/**\n * Deletes `~/.pi/.po` once nothing can still be using it.\n *\n * An older host is any Po process, or any listener on the old ports, that is not in the\n * registry: registered hosts are new and use the Po home. Only after the migration ran,\n * and only when the scan itself succeeded and found no older host; otherwise the next\n * start tries again. The directory is never renamed.\n */\nexport function retireLegacyPoHome(\n  homeDirectory: string,\n  poHome: string,\n  scan: HostScan = systemHostScan,\n): LegacyRetirement {\n  const legacy = legacyPoHomeDirectory(homeDirectory);\n  if (path.resolve(legacy) === path.resolve(poHome) || !fs.existsSync(legacy)) return { status: 'absent' };\n  if (!fs.existsSync(path.join(poHome, MARKER_FILE))) return { status: 'not-migrated' };\n  const registered = registeredHostPids(poHome);\n  let older: number[];\n  try {\n    older = scanPoHosts(scan).hosts.filter((pid) => !registered.has(pid));\n  } catch (error) {\n    return {\n      status: 'deferred',\n      reason: `host scan failed: ${error instanceof Error ? error.message : String(error)}`,\n    };\n  }\n  if (older.length > 0) {\n    return { status: 'deferred', reason: `unregistered Po processes still run: ${[...new Set(older)].join(', ')}` };\n  }\n  fs.rmSync(legacy, { recursive: true, force: true });\n  return { status: 'removed' };\n}\n"],"mappings":";;;;;;;;;;;AAYA,MAAM,kBAAkB,CAAC,OAAO,KAAK;AACrC,MAAM,cAAc;AACpB,MAAM,iBAAiB;;AAEvB,MAAM,iBAAiB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,KAAK,KAAK,UAAU,cAAc;AACpC;AACA,MAAM,yBAAyB;AAC/B,MAAM,kBAAkB,KAAK,KAAK,OAAO,OAAO;AAChD,MAAM,qBAAqB;;AAE3B,MAAM,kBAAkB;;AAExB,MAAM,oBAAoB;CAAC;CAAM;CAAM;CAAM;AAAI;AACjD,MAAM,yBAAyB;AAE/B,SAAgB,sBAAsB,eAA+B;CACnE,OAAO,KAAK,KAAK,eAAe,GAAG,eAAe;AACpD;;;;;;;AAeA,SAAgB,cAAc,eAAuB,QAAuC;CAC1F,MAAM,SAAS,KAAK,KAAK,QAAQ,WAAW;CAC5C,IAAI,GAAG,WAAW,MAAM,GAAG,OAAO;EAAE,QAAQ;EAAoB,QAAQ,CAAC;EAAG,SAAS,CAAC;CAAE;CACxF,MAAM,SAAS,sBAAsB,aAAa;CAClD,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,QAAQ,MAAM,KAAK,CAAC,GAAG,WAAW,MAAM,GACxE,OAAO;EAAE,QAAQ;EAAsB,QAAQ,CAAC;EAAG,SAAS,CAAC;CAAE;CAEjE,GAAG,UAAU,QAAQ;EAAE,WAAW;EAAM,MAAM;CAAuB,CAAC;CACtE,MAAM,SAAmB,CAAC;CAC1B,MAAM,UAAoB,CAAC;CAE3B,MAAM,UAAU,CACd,GAAG,eAAe,KAAK,WAAW;EAAE;EAAO,QAAQ,KAAK,KAAK,QAAQ,KAAK;CAAE,EAAE,GAC9E;EAAE,OAAO;EAAwB,QAAQ,KAAK,KAAK,eAAe,OAAO,sBAAsB;CAAE,CACnG;CACA,KAAK,MAAM,EAAE,OAAO,YAAY,SAAS;EACvC,IAAI,CAAC,GAAG,WAAW,MAAM,GAAG;EAC5B,MAAM,SAAS,KAAK,KAAK,QAAQ,KAAK;EACtC,IAAI,GAAG,WAAW,MAAM,GAAG;GACzB,QAAQ,KAAK,KAAK;GAClB;EACF;EACA,GAAG,UAAU,KAAK,QAAQ,MAAM,GAAG;GAAE,WAAW;GAAM,MAAM;EAAuB,CAAC;EACpF,GAAG,OAAO,QAAQ,QAAQ;GAAE,WAAW;GAAM,cAAc;GAAM,OAAO;GAAO,oBAAoB;EAAK,CAAC;EACzG,OAAO,KAAK,KAAK;CACnB;CACA,GAAG,cACD,QACA,GAAG,KAAK,UAAU;EAAE,SAAS;EAAgB,MAAM;EAAQ,6BAAY,IAAI,KAAK,EAAA,CAAE,YAAY;EAAG;EAAQ;CAAQ,GAAG,MAAM,CAAC,EAAE,KAC7H,EAAE,MAAM,IAAM,CAChB;CACA,OAAO;EAAE,QAAQ;EAAY;EAAQ;CAAQ;AAC/C;;AAGA,SAAgB,eAAe,QAAgB,MAAc,QAAQ,KAAiB;CACpF,MAAM,YAAY,KAAK,KAAK,QAAQ,eAAe;CACnD,GAAG,UAAU,WAAW;EAAE,WAAW;EAAM,MAAM;CAAuB,CAAC;CACzE,MAAM,OAAO,KAAK,KAAK,WAAW,GAAG,qBAAqB,OAAO,GAAG,EAAE,MAAM;CAC5E,GAAG,cAAc,MAAM,GAAG,KAAK,UAAU;EAAE;EAAK,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;CAAE,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;CAC3G,aAAa,GAAG,OAAO,MAAM,EAAE,OAAO,KAAK,CAAC;AAC9C;;AAGA,SAAS,mBAAmB,QAA6B;CACvD,MAAM,YAAY,KAAK,KAAK,QAAQ,eAAe;CACnD,MAAM,uBAAO,IAAI,IAAY;CAC7B,IAAI,CAAC,GAAG,WAAW,SAAS,GAAG,OAAO;CACtC,KAAK,MAAM,QAAQ,GAAG,YAAY,SAAS,GAAG;EAC5C,MAAM,QAAQ,IAAI,OAAO,IAAI,mBAAmB,iBAAiB,GAAG,CAAC,CAAC,KAAK,IAAI;EAC/E,IAAI,QAAQ,IAAI,KAAK,IAAI,OAAO,MAAM,EAAE,CAAC;CAC3C;CACA,OAAO;AACT;;AAUA,MAAa,iBAA2B;CACtC,YAAY;EACV,OAAO,aAAa,MAAM,CAAC,QAAQ,eAAe,GAAG,EAAE,UAAU,OAAO,CAAC,CAAC,CACvE,MAAM,IAAI,CAAC,CACX,KAAK,SAAS,qBAAqB,KAAK,IAAI,CAAC,CAAC,CAC9C,QAAQ,UAAoC,UAAU,IAAI,CAAC,CAC3D,KAAK,WAAW;GAAE,KAAK,OAAO,MAAM,EAAE;GAAG,SAAS,MAAM;EAAI,EAAE;CACnE;CACA,UAAU,OAAO;EACf,MAAM,OAAO;GAAC;GAAO;GAAgB;GAAM,GAAG,MAAM,KAAK,SAAS,SAAS,OAAO,IAAI,GAAG;EAAC;EAC1F,IAAI;EACJ,IAAI;GACF,SAAS,aAAa,QAAQ,MAAM,EAAE,UAAU,OAAO,CAAC;EAC1D,SAAS,OAAO;GAId,IADgB,MAA8B,WAC/B,GAAG,MAAM;GACxB,SAAU,MAA8B,UAAU;EACpD;EACA,OAAO,OACJ,MAAM,IAAI,CAAC,CACX,KAAK,SAAS,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAClC,QAAQ,QAAQ,OAAO,UAAU,GAAG,KAAK,MAAM,CAAC;CACrD;AACF;;;;;;AAOA,SAAS,YAAY,MAAwD;CAC3E,MAAM,YAAY,KAAK,UAAU;CACjC,OAAO;EACL,OAAO,CACL,GAAG,UAAU,QAAQ,UAAU,gBAAgB,KAAK,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,UAAU,MAAM,GAAG,GAC5F,GAAG,KAAK,UAAU,iBAAiB,CACrC;EACA,MAAM,IAAI,IAAI,UAAU,KAAK,UAAU,MAAM,GAAG,CAAC;CACnD;AACF;;;;;;;AAUA,SAAgB,aACd,QACA,OAAiB,gBACjB,UAAkB,QAAQ,KACZ;CACd,IAAI;CACJ,IAAI;EACF,MAAM,EAAE,OAAO,SAAS,YAAY,IAAI;EACxC,SAAS,CAAC,GAAG,OAAO,GAAG,CAAC,GAAG,mBAAmB,MAAM,CAAC,CAAC,CAAC,QAAQ,QAAQ,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QACpF,QAAQ,QAAQ,OACnB;CACF,SAAS,OAAO;EACd,OAAO;GAAE,QAAQ;GAAW,QAAQ,qBAAqB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAAI;CACpH;CACA,OAAO,OAAO,WAAW,IACrB,EAAE,QAAQ,OAAO,IACjB;EAAE,QAAQ;EAAW,QAAQ,2BAA2B,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;CAAI;AAChG;;;;;;;;;AAcA,SAAgB,mBACd,eACA,QACA,OAAiB,gBACC;CAClB,MAAM,SAAS,sBAAsB,aAAa;CAClD,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,QAAQ,MAAM,KAAK,CAAC,GAAG,WAAW,MAAM,GAAG,OAAO,EAAE,QAAQ,SAAS;CACvG,IAAI,CAAC,GAAG,WAAW,KAAK,KAAK,QAAQ,WAAW,CAAC,GAAG,OAAO,EAAE,QAAQ,eAAe;CACpF,MAAM,aAAa,mBAAmB,MAAM;CAC5C,IAAI;CACJ,IAAI;EACF,QAAQ,YAAY,IAAI,CAAC,CAAC,MAAM,QAAQ,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC;CACtE,SAAS,OAAO;EACd,OAAO;GACL,QAAQ;GACR,QAAQ,qBAAqB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACpF;CACF;CACA,IAAI,MAAM,SAAS,GACjB,OAAO;EAAE,QAAQ;EAAY,QAAQ,wCAAwC,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;CAAI;CAEhH,GAAG,OAAO,QAAQ;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CAClD,OAAO,EAAE,QAAQ,UAAU;AAC7B"}

package/dist/src/composition/projectTrust/index.cjs

@@ -0,0 +1,51 @@
+let _agimon_ai_po_config_config = require("@agimon-ai/po-config/config");
+//#region src/composition/projectTrust/index.ts
+const APPROVE_OPTION = "--approve";
+const APPROVE_SHORT_OPTION = "-a";
+const NO_APPROVE_OPTION = "--no-approve";
+const NO_APPROVE_SHORT_OPTION = "-na";
+const PROJECT_TRUST_ALWAYS = "always";
+const PROJECT_TRUST_NEVER = "never";
+function loadDoomConfig(repoRoot) {
+	const config = (0, _agimon_ai_po_config_config.loadDoomConfig)(repoRoot);
+	return {
+		projectTrust: config.projectTrust,
+		selection: config.selection
+	};
+}
+/**
+* Reads the config the way `po sync` needs it: an unknown key is reported
+* rather than fatal, so a config written for a different version cannot break
+* a build. `po doctor` runs the strict read above.
+*/
+function loadDoomConfigLenient(repoRoot, homeDirectory) {
+	const { config, diagnostics } = (0, _agimon_ai_po_config_config.loadDoomConfigLenient)(repoRoot, homeDirectory);
+	return {
+		config: {
+			projectTrust: config.projectTrust,
+			selection: config.selection
+		},
+		diagnostics
+	};
+}
+function hasProjectTrustOption(piArgs) {
+	return piArgs.some((argument) => [
+		APPROVE_OPTION,
+		APPROVE_SHORT_OPTION,
+		NO_APPROVE_OPTION,
+		NO_APPROVE_SHORT_OPTION
+	].includes(argument));
+}
+function applyProjectTrust(piArgs, config) {
+	if (hasProjectTrustOption(piArgs)) return [...piArgs];
+	if (config.projectTrust === PROJECT_TRUST_ALWAYS) return [APPROVE_OPTION, ...piArgs];
+	if (config.projectTrust === PROJECT_TRUST_NEVER) return [NO_APPROVE_OPTION, ...piArgs];
+	return [...piArgs];
+}
+//#endregion
+exports.applyProjectTrust = applyProjectTrust;
+exports.hasProjectTrustOption = hasProjectTrustOption;
+exports.loadDoomConfig = loadDoomConfig;
+exports.loadDoomConfigLenient = loadDoomConfigLenient;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/composition/projectTrust/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["loadSharedDoomConfig","loadSharedDoomConfigLenient"],"sources":["../../../../src/composition/projectTrust/index.ts"],"sourcesContent":["import {\n  loadDoomConfig as loadSharedDoomConfig,\n  loadDoomConfigLenient as loadSharedDoomConfigLenient,\n} from '@agimon-ai/po-config/config';\nimport type { ConfigDiagnostic, DoomSelectionConfig, ProjectTrust } from '@agimon-ai/po-config/types';\n\nconst APPROVE_OPTION = '--approve';\nconst APPROVE_SHORT_OPTION = '-a';\nconst NO_APPROVE_OPTION = '--no-approve';\nconst NO_APPROVE_SHORT_OPTION = '-na';\nconst PROJECT_TRUST_ALWAYS: ProjectTrust = 'always';\nconst PROJECT_TRUST_NEVER: ProjectTrust = 'never';\n\nexport type { ProjectTrust };\n\nexport interface DoomConfig {\n  projectTrust: ProjectTrust;\n  /** The matrix the repository declares by default, read by `po sync`. */\n  selection?: DoomSelectionConfig;\n}\n\nexport function loadDoomConfig(repoRoot: string): DoomConfig {\n  const config = loadSharedDoomConfig(repoRoot);\n  return { projectTrust: config.projectTrust, selection: config.selection };\n}\n\n/**\n * Reads the config the way `po sync` needs it: an unknown key is reported\n * rather than fatal, so a config written for a different version cannot break\n * a build. `po doctor` runs the strict read above.\n */\nexport function loadDoomConfigLenient(\n  repoRoot: string,\n  homeDirectory?: string,\n): { config: DoomConfig; diagnostics: ConfigDiagnostic[] } {\n  const { config, diagnostics } = loadSharedDoomConfigLenient(repoRoot, homeDirectory);\n  return { config: { projectTrust: config.projectTrust, selection: config.selection }, diagnostics };\n}\n\nexport function hasProjectTrustOption(piArgs: string[]): boolean {\n  return piArgs.some((argument) =>\n    [APPROVE_OPTION, APPROVE_SHORT_OPTION, NO_APPROVE_OPTION, NO_APPROVE_SHORT_OPTION].includes(argument),\n  );\n}\n\nexport function applyProjectTrust(piArgs: string[], config: DoomConfig): string[] {\n  if (hasProjectTrustOption(piArgs)) {\n    return [...piArgs];\n  }\n  if (config.projectTrust === PROJECT_TRUST_ALWAYS) return [APPROVE_OPTION, ...piArgs];\n  if (config.projectTrust === PROJECT_TRUST_NEVER) return [NO_APPROVE_OPTION, ...piArgs];\n  return [...piArgs];\n}\n"],"mappings":";;AAMA,MAAM,iBAAiB;AACvB,MAAM,uBAAuB;AAC7B,MAAM,oBAAoB;AAC1B,MAAM,0BAA0B;AAChC,MAAM,uBAAqC;AAC3C,MAAM,sBAAoC;AAU1C,SAAgB,eAAe,UAA8B;CAC3D,MAAM,UAAA,GAASA,4BAAAA,eAAAA,CAAqB,QAAQ;CAC5C,OAAO;EAAE,cAAc,OAAO;EAAc,WAAW,OAAO;CAAU;AAC1E;;;;;;AAOA,SAAgB,sBACd,UACA,eACyD;CACzD,MAAM,EAAE,QAAQ,iBAAA,GAAgBC,4BAAAA,sBAAAA,CAA4B,UAAU,aAAa;CACnF,OAAO;EAAE,QAAQ;GAAE,cAAc,OAAO;GAAc,WAAW,OAAO;EAAU;EAAG;CAAY;AACnG;AAEA,SAAgB,sBAAsB,QAA2B;CAC/D,OAAO,OAAO,MAAM,aAClB;EAAC;EAAgB;EAAsB;EAAmB;CAAuB,CAAC,CAAC,SAAS,QAAQ,CACtG;AACF;AAEA,SAAgB,kBAAkB,QAAkB,QAA8B;CAChF,IAAI,sBAAsB,MAAM,GAC9B,OAAO,CAAC,GAAG,MAAM;CAEnB,IAAI,OAAO,iBAAiB,sBAAsB,OAAO,CAAC,gBAAgB,GAAG,MAAM;CACnF,IAAI,OAAO,iBAAiB,qBAAqB,OAAO,CAAC,mBAAmB,GAAG,MAAM;CACrF,OAAO,CAAC,GAAG,MAAM;AACnB"}

package/dist/src/composition/projectTrust/index.d.mts

@@ -0,0 +1,22 @@
+import { ConfigDiagnostic, DoomSelectionConfig, ProjectTrust } from "@agimon-ai/po-config/types";
+//#region src/composition/projectTrust/index.d.ts
+export interface DoomConfig {
+  projectTrust: ProjectTrust;
+  /** The matrix the repository declares by default, read by `po sync`. */
+  selection?: DoomSelectionConfig;
+}
+export declare function loadDoomConfig(repoRoot: string): DoomConfig;
+/**
+ * Reads the config the way `po sync` needs it: an unknown key is reported
+ * rather than fatal, so a config written for a different version cannot break
+ * a build. `po doctor` runs the strict read above.
+ */
+export declare function loadDoomConfigLenient(repoRoot: string, homeDirectory?: string): {
+  config: DoomConfig;
+  diagnostics: ConfigDiagnostic[];
+};
+export declare function hasProjectTrustOption(piArgs: string[]): boolean;
+export declare function applyProjectTrust(piArgs: string[], config: DoomConfig): string[];
+//#endregion
+export type { ProjectTrust };
+//# sourceMappingURL=index.d.mts.map

package/dist/src/composition/projectTrust/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/composition/projectTrust/index.ts"],"mappings":";;iBAeiB;EACf,cAAc;;EAEd,YAAY;;wBAGE,eAAe,mBAAmB;;;;;;wBAUlC,sBACd,kBACA;EACG,QAAQ;EAAY,aAAa;;wBAKtB,sBAAsB;wBAMtB,kBAAkB,kBAAkB,QAAQ"}

package/dist/src/composition/projectTrust/index.mjs

@@ -0,0 +1,48 @@
+import { loadDoomConfig, loadDoomConfigLenient } from "@agimon-ai/po-config/config";
+//#region src/composition/projectTrust/index.ts
+const APPROVE_OPTION = "--approve";
+const APPROVE_SHORT_OPTION = "-a";
+const NO_APPROVE_OPTION = "--no-approve";
+const NO_APPROVE_SHORT_OPTION = "-na";
+const PROJECT_TRUST_ALWAYS = "always";
+const PROJECT_TRUST_NEVER = "never";
+function loadDoomConfig$1(repoRoot) {
+	const config = loadDoomConfig(repoRoot);
+	return {
+		projectTrust: config.projectTrust,
+		selection: config.selection
+	};
+}
+/**
+* Reads the config the way `po sync` needs it: an unknown key is reported
+* rather than fatal, so a config written for a different version cannot break
+* a build. `po doctor` runs the strict read above.
+*/
+function loadDoomConfigLenient$1(repoRoot, homeDirectory) {
+	const { config, diagnostics } = loadDoomConfigLenient(repoRoot, homeDirectory);
+	return {
+		config: {
+			projectTrust: config.projectTrust,
+			selection: config.selection
+		},
+		diagnostics
+	};
+}
+function hasProjectTrustOption(piArgs) {
+	return piArgs.some((argument) => [
+		APPROVE_OPTION,
+		APPROVE_SHORT_OPTION,
+		NO_APPROVE_OPTION,
+		NO_APPROVE_SHORT_OPTION
+	].includes(argument));
+}
+function applyProjectTrust(piArgs, config) {
+	if (hasProjectTrustOption(piArgs)) return [...piArgs];
+	if (config.projectTrust === PROJECT_TRUST_ALWAYS) return [APPROVE_OPTION, ...piArgs];
+	if (config.projectTrust === PROJECT_TRUST_NEVER) return [NO_APPROVE_OPTION, ...piArgs];
+	return [...piArgs];
+}
+//#endregion
+export { applyProjectTrust, hasProjectTrustOption, loadDoomConfig$1 as loadDoomConfig, loadDoomConfigLenient$1 as loadDoomConfigLenient };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/composition/projectTrust/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":["loadDoomConfig","loadSharedDoomConfig","loadDoomConfigLenient","loadSharedDoomConfigLenient"],"sources":["../../../../src/composition/projectTrust/index.ts"],"sourcesContent":["import {\n  loadDoomConfig as loadSharedDoomConfig,\n  loadDoomConfigLenient as loadSharedDoomConfigLenient,\n} from '@agimon-ai/po-config/config';\nimport type { ConfigDiagnostic, DoomSelectionConfig, ProjectTrust } from '@agimon-ai/po-config/types';\n\nconst APPROVE_OPTION = '--approve';\nconst APPROVE_SHORT_OPTION = '-a';\nconst NO_APPROVE_OPTION = '--no-approve';\nconst NO_APPROVE_SHORT_OPTION = '-na';\nconst PROJECT_TRUST_ALWAYS: ProjectTrust = 'always';\nconst PROJECT_TRUST_NEVER: ProjectTrust = 'never';\n\nexport type { ProjectTrust };\n\nexport interface DoomConfig {\n  projectTrust: ProjectTrust;\n  /** The matrix the repository declares by default, read by `po sync`. */\n  selection?: DoomSelectionConfig;\n}\n\nexport function loadDoomConfig(repoRoot: string): DoomConfig {\n  const config = loadSharedDoomConfig(repoRoot);\n  return { projectTrust: config.projectTrust, selection: config.selection };\n}\n\n/**\n * Reads the config the way `po sync` needs it: an unknown key is reported\n * rather than fatal, so a config written for a different version cannot break\n * a build. `po doctor` runs the strict read above.\n */\nexport function loadDoomConfigLenient(\n  repoRoot: string,\n  homeDirectory?: string,\n): { config: DoomConfig; diagnostics: ConfigDiagnostic[] } {\n  const { config, diagnostics } = loadSharedDoomConfigLenient(repoRoot, homeDirectory);\n  return { config: { projectTrust: config.projectTrust, selection: config.selection }, diagnostics };\n}\n\nexport function hasProjectTrustOption(piArgs: string[]): boolean {\n  return piArgs.some((argument) =>\n    [APPROVE_OPTION, APPROVE_SHORT_OPTION, NO_APPROVE_OPTION, NO_APPROVE_SHORT_OPTION].includes(argument),\n  );\n}\n\nexport function applyProjectTrust(piArgs: string[], config: DoomConfig): string[] {\n  if (hasProjectTrustOption(piArgs)) {\n    return [...piArgs];\n  }\n  if (config.projectTrust === PROJECT_TRUST_ALWAYS) return [APPROVE_OPTION, ...piArgs];\n  if (config.projectTrust === PROJECT_TRUST_NEVER) return [NO_APPROVE_OPTION, ...piArgs];\n  return [...piArgs];\n}\n"],"mappings":";;AAMA,MAAM,iBAAiB;AACvB,MAAM,uBAAuB;AAC7B,MAAM,oBAAoB;AAC1B,MAAM,0BAA0B;AAChC,MAAM,uBAAqC;AAC3C,MAAM,sBAAoC;AAU1C,SAAgBA,iBAAe,UAA8B;CAC3D,MAAM,SAASC,eAAqB,QAAQ;CAC5C,OAAO;EAAE,cAAc,OAAO;EAAc,WAAW,OAAO;CAAU;AAC1E;;;;;;AAOA,SAAgBC,wBACd,UACA,eACyD;CACzD,MAAM,EAAE,QAAQ,gBAAgBC,sBAA4B,UAAU,aAAa;CACnF,OAAO;EAAE,QAAQ;GAAE,cAAc,OAAO;GAAc,WAAW,OAAO;EAAU;EAAG;CAAY;AACnG;AAEA,SAAgB,sBAAsB,QAA2B;CAC/D,OAAO,OAAO,MAAM,aAClB;EAAC;EAAgB;EAAsB;EAAmB;CAAuB,CAAC,CAAC,SAAS,QAAQ,CACtG;AACF;AAEA,SAAgB,kBAAkB,QAAkB,QAA8B;CAChF,IAAI,sBAAsB,MAAM,GAC9B,OAAO,CAAC,GAAG,MAAM;CAEnB,IAAI,OAAO,iBAAiB,sBAAsB,OAAO,CAAC,gBAAgB,GAAG,MAAM;CACnF,IAAI,OAAO,iBAAiB,qBAAqB,OAAO,CAAC,mBAAmB,GAAG,MAAM;CACrF,OAAO,CAAC,GAAG,MAAM;AACnB"}

package/dist/src/composition/repository/index.cjs

@@ -0,0 +1,68 @@
+const require_runtime = require("../../../_virtual/_rolldown/runtime.cjs");
+let node_fs = require("node:fs");
+node_fs = require_runtime.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+let _agimon_ai_po_config_config = require("@agimon-ai/po-config/config");
+let _agimon_ai_po_core_piSettings = require("@agimon-ai/po-core/piSettings");
+//#region src/composition/repository/index.ts
+/** Git's root marker, which may be a directory or a worktree pointer file. */
+const GIT_DIRECTORY = ".git";
+/** A Pi project that has been configured, rather than any stray `.pi` folder. */
+const PI_SETTINGS = node_path.default.join(".pi", "settings.json");
+function isDirectory(target) {
+	try {
+		return node_fs.default.statSync(target).isDirectory();
+	} catch {
+		return false;
+	}
+}
+function isFile(target) {
+	try {
+		return node_fs.default.statSync(target).isFile();
+	} catch {
+		return false;
+	}
+}
+/**
+* True when a directory carries a marker Doom Pi is willing to treat as a root.
+*
+* Doom and Pi markers identify configured projects. A Git marker also counts so
+* personal configuration can be synchronized into a new checkout before it has
+* repository-local configuration. Build-tooling markers remain deliberately
+* excluded because they do not establish a repository boundary.
+*/
+function isRepositoryRoot(directory) {
+	const gitMarker = node_path.default.join(directory, GIT_DIRECTORY);
+	return (0, _agimon_ai_po_core_piSettings.hasRepositoryDoomDirectory)(directory) || isFile(node_path.default.join(directory, PI_SETTINGS)) || isDirectory(gitMarker) || isFile(gitMarker);
+}
+/**
+* Walks up from `start` looking for the repository root.
+*
+* The nearest marked ancestor wins, so a session started in a subdirectory
+* resolves to the repository that configured Doom rather than to a parent
+* checkout that happens to sit above it.
+*/
+function findRepositoryRoot(start) {
+	let directory = node_path.default.resolve(start);
+	while (true) {
+		if (isRepositoryRoot(directory)) return directory;
+		const parent = node_path.default.dirname(directory);
+		if (parent === directory) throw new Error(`Could not find repository root from ${start}`);
+		directory = parent;
+	}
+}
+/** Uses the nearest repository when one exists, otherwise the user's global Doom composition. */
+function resolveDoomConfigurationRoot(start, homeDirectory) {
+	try {
+		return findRepositoryRoot(start);
+	} catch {
+		return (0, _agimon_ai_po_config_config.globalDoomConfigDirectory)(homeDirectory);
+	}
+}
+//#endregion
+exports.findRepositoryRoot = findRepositoryRoot;
+exports.isRepositoryRoot = isRepositoryRoot;
+exports.resolveDoomConfigurationRoot = resolveDoomConfigurationRoot;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/composition/repository/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["path","fs","hasRepositoryDoomDirectory","globalDoomConfigDirectory"],"sources":["../../../../src/composition/repository/index.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\n\nimport { globalDoomConfigDirectory } from '@agimon-ai/po-config/config';\nimport { hasRepositoryDoomDirectory } from '@agimon-ai/po-core/piSettings';\n\n/** Git's root marker, which may be a directory or a worktree pointer file. */\nconst GIT_DIRECTORY = '.git';\n/** A Pi project that has been configured, rather than any stray `.pi` folder. */\nconst PI_SETTINGS = path.join('.pi', 'settings.json');\n\nfunction isDirectory(target: string): boolean {\n  try {\n    return fs.statSync(target).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\nfunction isFile(target: string): boolean {\n  try {\n    return fs.statSync(target).isFile();\n  } catch {\n    return false;\n  }\n}\n\n/**\n * True when a directory carries a marker Doom Pi is willing to treat as a root.\n *\n * Doom and Pi markers identify configured projects. A Git marker also counts so\n * personal configuration can be synchronized into a new checkout before it has\n * repository-local configuration. Build-tooling markers remain deliberately\n * excluded because they do not establish a repository boundary.\n */\nexport function isRepositoryRoot(directory: string): boolean {\n  const gitMarker = path.join(directory, GIT_DIRECTORY);\n  return (\n    hasRepositoryDoomDirectory(directory) ||\n    isFile(path.join(directory, PI_SETTINGS)) ||\n    isDirectory(gitMarker) ||\n    isFile(gitMarker)\n  );\n}\n\n/**\n * Walks up from `start` looking for the repository root.\n *\n * The nearest marked ancestor wins, so a session started in a subdirectory\n * resolves to the repository that configured Doom rather than to a parent\n * checkout that happens to sit above it.\n */\nexport function findRepositoryRoot(start: string): string {\n  let directory = path.resolve(start);\n  while (true) {\n    if (isRepositoryRoot(directory)) return directory;\n    const parent = path.dirname(directory);\n    if (parent === directory) throw new Error(`Could not find repository root from ${start}`);\n    directory = parent;\n  }\n}\n\n/** Uses the nearest repository when one exists, otherwise the user's global Doom composition. */\nexport function resolveDoomConfigurationRoot(start: string, homeDirectory: string): string {\n  try {\n    return findRepositoryRoot(start);\n  } catch {\n    return globalDoomConfigDirectory(homeDirectory);\n  }\n}\n"],"mappings":";;;;;;;;;AAOA,MAAM,gBAAgB;;AAEtB,MAAM,cAAcA,UAAAA,QAAK,KAAK,OAAO,eAAe;AAEpD,SAAS,YAAY,QAAyB;CAC5C,IAAI;EACF,OAAOC,QAAAA,QAAG,SAAS,MAAM,CAAC,CAAC,YAAY;CACzC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,OAAO,QAAyB;CACvC,IAAI;EACF,OAAOA,QAAAA,QAAG,SAAS,MAAM,CAAC,CAAC,OAAO;CACpC,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;;;AAUA,SAAgB,iBAAiB,WAA4B;CAC3D,MAAM,YAAYD,UAAAA,QAAK,KAAK,WAAW,aAAa;CACpD,QAAA,GACEE,8BAAAA,2BAAAA,CAA2B,SAAS,KACpC,OAAOF,UAAAA,QAAK,KAAK,WAAW,WAAW,CAAC,KACxC,YAAY,SAAS,KACrB,OAAO,SAAS;AAEpB;;;;;;;;AASA,SAAgB,mBAAmB,OAAuB;CACxD,IAAI,YAAYA,UAAAA,QAAK,QAAQ,KAAK;CAClC,OAAO,MAAM;EACX,IAAI,iBAAiB,SAAS,GAAG,OAAO;EACxC,MAAM,SAASA,UAAAA,QAAK,QAAQ,SAAS;EACrC,IAAI,WAAW,WAAW,MAAM,IAAI,MAAM,uCAAuC,OAAO;EACxF,YAAY;CACd;AACF;;AAGA,SAAgB,6BAA6B,OAAe,eAA+B;CACzF,IAAI;EACF,OAAO,mBAAmB,KAAK;CACjC,QAAQ;EACN,QAAA,GAAOG,4BAAAA,0BAAAA,CAA0B,aAAa;CAChD;AACF"}

package/dist/src/composition/repository/index.d.mts

@@ -0,0 +1,22 @@
+//#region src/composition/repository/index.d.ts
+/**
+ * True when a directory carries a marker Doom Pi is willing to treat as a root.
+ *
+ * Doom and Pi markers identify configured projects. A Git marker also counts so
+ * personal configuration can be synchronized into a new checkout before it has
+ * repository-local configuration. Build-tooling markers remain deliberately
+ * excluded because they do not establish a repository boundary.
+ */
+export declare function isRepositoryRoot(directory: string): boolean;
+/**
+ * Walks up from `start` looking for the repository root.
+ *
+ * The nearest marked ancestor wins, so a session started in a subdirectory
+ * resolves to the repository that configured Doom rather than to a parent
+ * checkout that happens to sit above it.
+ */
+export declare function findRepositoryRoot(start: string): string;
+/** Uses the nearest repository when one exists, otherwise the user's global Doom composition. */
+export declare function resolveDoomConfigurationRoot(start: string, homeDirectory: string): string;
+//#endregion
+//# sourceMappingURL=index.d.mts.map

package/dist/src/composition/repository/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/composition/repository/index.ts"],"mappings":";;;;;;;;;wBAmCgB,iBAAiB;;;;;;;;wBAiBjB,mBAAmB;;wBAWnB,6BAA6B,eAAe"}

package/dist/src/composition/repository/index.mjs

@@ -0,0 +1,63 @@
+import fs from "node:fs";
+import path from "node:path";
+import { globalDoomConfigDirectory } from "@agimon-ai/po-config/config";
+import { hasRepositoryDoomDirectory } from "@agimon-ai/po-core/piSettings";
+//#region src/composition/repository/index.ts
+/** Git's root marker, which may be a directory or a worktree pointer file. */
+const GIT_DIRECTORY = ".git";
+/** A Pi project that has been configured, rather than any stray `.pi` folder. */
+const PI_SETTINGS = path.join(".pi", "settings.json");
+function isDirectory(target) {
+	try {
+		return fs.statSync(target).isDirectory();
+	} catch {
+		return false;
+	}
+}
+function isFile(target) {
+	try {
+		return fs.statSync(target).isFile();
+	} catch {
+		return false;
+	}
+}
+/**
+* True when a directory carries a marker Doom Pi is willing to treat as a root.
+*
+* Doom and Pi markers identify configured projects. A Git marker also counts so
+* personal configuration can be synchronized into a new checkout before it has
+* repository-local configuration. Build-tooling markers remain deliberately
+* excluded because they do not establish a repository boundary.
+*/
+function isRepositoryRoot(directory) {
+	const gitMarker = path.join(directory, GIT_DIRECTORY);
+	return hasRepositoryDoomDirectory(directory) || isFile(path.join(directory, PI_SETTINGS)) || isDirectory(gitMarker) || isFile(gitMarker);
+}
+/**
+* Walks up from `start` looking for the repository root.
+*
+* The nearest marked ancestor wins, so a session started in a subdirectory
+* resolves to the repository that configured Doom rather than to a parent
+* checkout that happens to sit above it.
+*/
+function findRepositoryRoot(start) {
+	let directory = path.resolve(start);
+	while (true) {
+		if (isRepositoryRoot(directory)) return directory;
+		const parent = path.dirname(directory);
+		if (parent === directory) throw new Error(`Could not find repository root from ${start}`);
+		directory = parent;
+	}
+}
+/** Uses the nearest repository when one exists, otherwise the user's global Doom composition. */
+function resolveDoomConfigurationRoot(start, homeDirectory) {
+	try {
+		return findRepositoryRoot(start);
+	} catch {
+		return globalDoomConfigDirectory(homeDirectory);
+	}
+}
+//#endregion
+export { findRepositoryRoot, isRepositoryRoot, resolveDoomConfigurationRoot };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/composition/repository/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/composition/repository/index.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\n\nimport { globalDoomConfigDirectory } from '@agimon-ai/po-config/config';\nimport { hasRepositoryDoomDirectory } from '@agimon-ai/po-core/piSettings';\n\n/** Git's root marker, which may be a directory or a worktree pointer file. */\nconst GIT_DIRECTORY = '.git';\n/** A Pi project that has been configured, rather than any stray `.pi` folder. */\nconst PI_SETTINGS = path.join('.pi', 'settings.json');\n\nfunction isDirectory(target: string): boolean {\n  try {\n    return fs.statSync(target).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\nfunction isFile(target: string): boolean {\n  try {\n    return fs.statSync(target).isFile();\n  } catch {\n    return false;\n  }\n}\n\n/**\n * True when a directory carries a marker Doom Pi is willing to treat as a root.\n *\n * Doom and Pi markers identify configured projects. A Git marker also counts so\n * personal configuration can be synchronized into a new checkout before it has\n * repository-local configuration. Build-tooling markers remain deliberately\n * excluded because they do not establish a repository boundary.\n */\nexport function isRepositoryRoot(directory: string): boolean {\n  const gitMarker = path.join(directory, GIT_DIRECTORY);\n  return (\n    hasRepositoryDoomDirectory(directory) ||\n    isFile(path.join(directory, PI_SETTINGS)) ||\n    isDirectory(gitMarker) ||\n    isFile(gitMarker)\n  );\n}\n\n/**\n * Walks up from `start` looking for the repository root.\n *\n * The nearest marked ancestor wins, so a session started in a subdirectory\n * resolves to the repository that configured Doom rather than to a parent\n * checkout that happens to sit above it.\n */\nexport function findRepositoryRoot(start: string): string {\n  let directory = path.resolve(start);\n  while (true) {\n    if (isRepositoryRoot(directory)) return directory;\n    const parent = path.dirname(directory);\n    if (parent === directory) throw new Error(`Could not find repository root from ${start}`);\n    directory = parent;\n  }\n}\n\n/** Uses the nearest repository when one exists, otherwise the user's global Doom composition. */\nexport function resolveDoomConfigurationRoot(start: string, homeDirectory: string): string {\n  try {\n    return findRepositoryRoot(start);\n  } catch {\n    return globalDoomConfigDirectory(homeDirectory);\n  }\n}\n"],"mappings":";;;;;;AAOA,MAAM,gBAAgB;;AAEtB,MAAM,cAAc,KAAK,KAAK,OAAO,eAAe;AAEpD,SAAS,YAAY,QAAyB;CAC5C,IAAI;EACF,OAAO,GAAG,SAAS,MAAM,CAAC,CAAC,YAAY;CACzC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,OAAO,QAAyB;CACvC,IAAI;EACF,OAAO,GAAG,SAAS,MAAM,CAAC,CAAC,OAAO;CACpC,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;;;AAUA,SAAgB,iBAAiB,WAA4B;CAC3D,MAAM,YAAY,KAAK,KAAK,WAAW,aAAa;CACpD,OACE,2BAA2B,SAAS,KACpC,OAAO,KAAK,KAAK,WAAW,WAAW,CAAC,KACxC,YAAY,SAAS,KACrB,OAAO,SAAS;AAEpB;;;;;;;;AASA,SAAgB,mBAAmB,OAAuB;CACxD,IAAI,YAAY,KAAK,QAAQ,KAAK;CAClC,OAAO,MAAM;EACX,IAAI,iBAAiB,SAAS,GAAG,OAAO;EACxC,MAAM,SAAS,KAAK,QAAQ,SAAS;EACrC,IAAI,WAAW,WAAW,MAAM,IAAI,MAAM,uCAAuC,OAAO;EACxF,YAAY;CACd;AACF;;AAGA,SAAgB,6BAA6B,OAAe,eAA+B;CACzF,IAAI;EACF,OAAO,mBAAmB,KAAK;CACjC,QAAQ;EACN,OAAO,0BAA0B,aAAa;CAChD;AACF"}

package/dist/src/composition/syncPrune/index.cjs

@@ -0,0 +1,85 @@
+const require_runtime = require("../../../_virtual/_rolldown/runtime.cjs");
+const require_index = require("../layerPackageInstaller/index.cjs");
+const require_index$1 = require("../poHomeMigration/index.cjs");
+let node_fs = require("node:fs");
+node_fs = require_runtime.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+let _agimon_ai_po_core_runtimePackages = require("@agimon-ai/po-core/runtimePackages");
+let _agimon_ai_po_core_runtimePiSettings = require("@agimon-ai/po-core/runtimePiSettings");
+//#region src/composition/syncPrune/index.ts
+/**
+* What an explicit `po sync` drops once its installs and builds are done:
+* - the runtime project's stale entries and store content nothing references (upm's prune,
+*   which keeps anything written in the last hour);
+* - global web, native and MCP app builds other than the current key and the one before it.
+*
+* Sync calls this under its lock. Builds are pruned even while a Po server runs: the server
+* serves copies it publishes into `~/.po/server`, not these folders. The runtime is pruned only
+* when no other Po host runs, judged by the same scan that retires `~/.pi/.po`: a running server
+* may be installing into it, and upm's prune cannot be told to keep the previous manifest's
+* packages, so the runtime store grows while a server stays up. The staged catalogue archives
+* under `runtime/catalog` share that gate: a running server imports from them.
+*/
+const BUILD_DIRECTORY = "build";
+const BUILD_KINDS = {
+	web: "web",
+	native: "native",
+	mcpApp: "mcp-app"
+};
+const RUNTIME_MANIFEST = "package.json";
+/** Builds an in-flight build writes start with a dot; they are never touched. */
+const TEMPORARY_PREFIX = ".";
+/**
+* Removes every build of one kind except the current keys and the most recently written
+* other key, the one a client that has not refreshed yet may still load.
+*/
+function pruneBuilds(buildsRoot, kind, currentKeys) {
+	if (currentKeys.length === 0) return [];
+	const directory = node_path.default.join(buildsRoot, BUILD_DIRECTORY, kind);
+	if (!node_fs.default.existsSync(directory)) return [];
+	return node_fs.default.readdirSync(directory, { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(TEMPORARY_PREFIX) && !currentKeys.includes(entry.name)).map((entry) => ({
+		name: entry.name,
+		modified: node_fs.default.statSync(node_path.default.join(directory, entry.name)).mtimeMs
+	})).sort((left, right) => right.modified - left.modified).slice(1).map((entry) => {
+		node_fs.default.rmSync(node_path.default.join(directory, entry.name), {
+			recursive: true,
+			force: true
+		});
+		return `${kind}/${entry.name}`;
+	});
+}
+async function pruneAfterSync(input) {
+	const poHome = (0, _agimon_ai_po_core_runtimePiSettings.poHomeDirectory)(input.homeDirectory, input.environment);
+	const builds = [
+		...pruneBuilds(input.buildsRoot, BUILD_KINDS.web, input.webKey === void 0 ? [] : [input.webKey]),
+		...pruneBuilds(input.buildsRoot, BUILD_KINDS.native, input.nativeKey === void 0 ? [] : [input.nativeKey]),
+		...pruneBuilds(input.buildsRoot, BUILD_KINDS.mcpApp, input.mcpAppKeys ?? [])
+	];
+	const hosts = require_index$1.otherPoHosts(poHome, input.scan ?? require_index$1.systemHostScan, input.selfPid ?? process.pid);
+	if (hosts.status === "running") return {
+		status: "pruned",
+		builds,
+		runtime: { skipped: hosts.reason }
+	};
+	const runtimeDirectory = (0, _agimon_ai_po_core_runtimePiSettings.poRuntimeDirectory)(input.homeDirectory, input.environment);
+	if (!node_fs.default.existsSync(node_path.default.join(runtimeDirectory, RUNTIME_MANIFEST))) return {
+		status: "pruned",
+		builds,
+		runtime: { skipped: "no runtime packages are installed" }
+	};
+	require_index.pruneStagedCatalogArchives(runtimeDirectory);
+	const result = await (input.pruneRuntime ?? _agimon_ai_po_core_runtimePackages.pruneRuntimePackages)({
+		dir: runtimeDirectory,
+		poHome
+	});
+	return {
+		status: "pruned",
+		builds,
+		runtime: { bytes: result.content.bytes + (result.entries?.bytes ?? 0) }
+	};
+}
+//#endregion
+exports.pruneAfterSync = pruneAfterSync;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/composition/syncPrune/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["path","fs","poHomeDirectory","otherPoHosts","systemHostScan","poRuntimeDirectory","pruneRuntimePackages"],"sources":["../../../../src/composition/syncPrune/index.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\n\nimport { pruneRuntimePackages } from '@agimon-ai/po-core/runtimePackages';\nimport { poHomeDirectory, poRuntimeDirectory } from '@agimon-ai/po-core/runtimePiSettings';\n\nimport { pruneStagedCatalogArchives } from '../layerPackageInstaller';\nimport { type HostScan, otherPoHosts, systemHostScan } from '../poHomeMigration';\n\n/**\n * What an explicit `po sync` drops once its installs and builds are done:\n * - the runtime project's stale entries and store content nothing references (upm's prune,\n *   which keeps anything written in the last hour);\n * - global web, native and MCP app builds other than the current key and the one before it.\n *\n * Sync calls this under its lock. Builds are pruned even while a Po server runs: the server\n * serves copies it publishes into `~/.po/server`, not these folders. The runtime is pruned only\n * when no other Po host runs, judged by the same scan that retires `~/.pi/.po`: a running server\n * may be installing into it, and upm's prune cannot be told to keep the previous manifest's\n * packages, so the runtime store grows while a server stays up. The staged catalogue archives\n * under `runtime/catalog` share that gate: a running server imports from them.\n */\n\nconst BUILD_DIRECTORY = 'build';\nconst BUILD_KINDS = { web: 'web', native: 'native', mcpApp: 'mcp-app' } as const;\nconst RUNTIME_MANIFEST = 'package.json';\n/** Builds an in-flight build writes start with a dot; they are never touched. */\nconst TEMPORARY_PREFIX = '.';\n\nexport interface SyncPruneInput {\n  homeDirectory: string;\n  environment: NodeJS.ProcessEnv;\n  /** The root the global builds live under: `<root>/build/web/<key>`, `<root>/build/mcp-app/<key>`. */\n  buildsRoot: string;\n  /** The current global web build key; without one the web builds are left alone. */\n  webKey?: string;\n  /** The current global native build key; without one the native builds are left alone. */\n  nativeKey?: string;\n  /** The current MCP app build keys, one per distinct widget set; without any the MCP app builds are left alone. */\n  mcpAppKeys?: readonly string[];\n  /** Test seams. */\n  scan?: HostScan;\n  selfPid?: number;\n  pruneRuntime?: typeof pruneRuntimePackages;\n}\n\nexport interface SyncPruneResult {\n  status: 'pruned';\n  /** Build directories removed, as `<kind>/<key>`. */\n  builds: string[];\n  /** Store bytes upm released, or why the runtime was not pruned. */\n  runtime: { bytes: number } | { skipped: string };\n}\n\n/**\n * Removes every build of one kind except the current keys and the most recently written\n * other key, the one a client that has not refreshed yet may still load.\n */\nfunction pruneBuilds(buildsRoot: string, kind: string, currentKeys: readonly string[]): string[] {\n  if (currentKeys.length === 0) return [];\n  const directory = path.join(buildsRoot, BUILD_DIRECTORY, kind);\n  if (!fs.existsSync(directory)) return [];\n  const others = fs\n    .readdirSync(directory, { withFileTypes: true })\n    .filter(\n      (entry) => entry.isDirectory() && !entry.name.startsWith(TEMPORARY_PREFIX) && !currentKeys.includes(entry.name),\n    )\n    .map((entry) => ({ name: entry.name, modified: fs.statSync(path.join(directory, entry.name)).mtimeMs }))\n    .sort((left, right) => right.modified - left.modified);\n  return others.slice(1).map((entry) => {\n    fs.rmSync(path.join(directory, entry.name), { recursive: true, force: true });\n    return `${kind}/${entry.name}`;\n  });\n}\n\nexport async function pruneAfterSync(input: SyncPruneInput): Promise<SyncPruneResult> {\n  const poHome = poHomeDirectory(input.homeDirectory, input.environment);\n  const builds = [\n    ...pruneBuilds(input.buildsRoot, BUILD_KINDS.web, input.webKey === undefined ? [] : [input.webKey]),\n    ...pruneBuilds(input.buildsRoot, BUILD_KINDS.native, input.nativeKey === undefined ? [] : [input.nativeKey]),\n    ...pruneBuilds(input.buildsRoot, BUILD_KINDS.mcpApp, input.mcpAppKeys ?? []),\n  ];\n  // ponytail: upm's prune has no keep-list, so the previous manifest cannot be protected while a\n  // server runs; the runtime and its staged catalogue folders stay gated on no other host. A keep\n  // option in upm is the upgrade.\n  const hosts = otherPoHosts(poHome, input.scan ?? systemHostScan, input.selfPid ?? process.pid);\n  if (hosts.status === 'running') return { status: 'pruned', builds, runtime: { skipped: hosts.reason } };\n  const runtimeDirectory = poRuntimeDirectory(input.homeDirectory, input.environment);\n  if (!fs.existsSync(path.join(runtimeDirectory, RUNTIME_MANIFEST))) {\n    return { status: 'pruned', builds, runtime: { skipped: 'no runtime packages are installed' } };\n  }\n  pruneStagedCatalogArchives(runtimeDirectory);\n  const result = await (input.pruneRuntime ?? pruneRuntimePackages)({ dir: runtimeDirectory, poHome });\n  return {\n    status: 'pruned',\n    builds,\n    runtime: { bytes: result.content.bytes + (result.entries?.bytes ?? 0) },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAuBA,MAAM,kBAAkB;AACxB,MAAM,cAAc;CAAE,KAAK;CAAO,QAAQ;CAAU,QAAQ;AAAU;AACtE,MAAM,mBAAmB;;AAEzB,MAAM,mBAAmB;;;;;AA+BzB,SAAS,YAAY,YAAoB,MAAc,aAA0C;CAC/F,IAAI,YAAY,WAAW,GAAG,OAAO,CAAC;CACtC,MAAM,YAAYA,UAAAA,QAAK,KAAK,YAAY,iBAAiB,IAAI;CAC7D,IAAI,CAACC,QAAAA,QAAG,WAAW,SAAS,GAAG,OAAO,CAAC;CAQvC,OAPeA,QAAAA,QACZ,YAAY,WAAW,EAAE,eAAe,KAAK,CAAC,CAAC,CAC/C,QACE,UAAU,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,WAAW,gBAAgB,KAAK,CAAC,YAAY,SAAS,MAAM,IAAI,CAChH,CAAC,CACA,KAAK,WAAW;EAAE,MAAM,MAAM;EAAM,UAAUA,QAAAA,QAAG,SAASD,UAAAA,QAAK,KAAK,WAAW,MAAM,IAAI,CAAC,CAAC,CAAC;CAAQ,EAAE,CAAC,CACvG,MAAM,MAAM,UAAU,MAAM,WAAW,KAAK,QACnC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU;EACpC,QAAA,QAAG,OAAOA,UAAAA,QAAK,KAAK,WAAW,MAAM,IAAI,GAAG;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EAC5E,OAAO,GAAG,KAAK,GAAG,MAAM;CAC1B,CAAC;AACH;AAEA,eAAsB,eAAe,OAAiD;CACpF,MAAM,UAAA,GAASE,qCAAAA,gBAAAA,CAAgB,MAAM,eAAe,MAAM,WAAW;CACrE,MAAM,SAAS;EACb,GAAG,YAAY,MAAM,YAAY,YAAY,KAAK,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC;EAClG,GAAG,YAAY,MAAM,YAAY,YAAY,QAAQ,MAAM,cAAc,KAAA,IAAY,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC;EAC3G,GAAG,YAAY,MAAM,YAAY,YAAY,QAAQ,MAAM,cAAc,CAAC,CAAC;CAC7E;CAIA,MAAM,QAAQC,gBAAAA,aAAa,QAAQ,MAAM,QAAQC,gBAAAA,gBAAgB,MAAM,WAAW,QAAQ,GAAG;CAC7F,IAAI,MAAM,WAAW,WAAW,OAAO;EAAE,QAAQ;EAAU;EAAQ,SAAS,EAAE,SAAS,MAAM,OAAO;CAAE;CACtG,MAAM,oBAAA,GAAmBC,qCAAAA,mBAAAA,CAAmB,MAAM,eAAe,MAAM,WAAW;CAClF,IAAI,CAACJ,QAAAA,QAAG,WAAWD,UAAAA,QAAK,KAAK,kBAAkB,gBAAgB,CAAC,GAC9D,OAAO;EAAE,QAAQ;EAAU;EAAQ,SAAS,EAAE,SAAS,oCAAoC;CAAE;CAE/F,cAAA,2BAA2B,gBAAgB;CAC3C,MAAM,SAAS,OAAO,MAAM,gBAAgBM,mCAAAA,qBAAAA,CAAsB;EAAE,KAAK;EAAkB;CAAO,CAAC;CACnG,OAAO;EACL,QAAQ;EACR;EACA,SAAS,EAAE,OAAO,OAAO,QAAQ,SAAS,OAAO,SAAS,SAAS,GAAG;CACxE;AACF"}

package/dist/src/composition/syncPrune/index.d.mts

@@ -0,0 +1,33 @@
+import { HostScan } from "../poHomeMigration/index.mjs";
+import { pruneRuntimePackages } from "@agimon-ai/po-core/runtimePackages";
+//#region src/composition/syncPrune/index.d.ts
+export interface SyncPruneInput {
+  homeDirectory: string;
+  environment: NodeJS.ProcessEnv;
+  /** The root the global builds live under: `<root>/build/web/<key>`, `<root>/build/mcp-app/<key>`. */
+  buildsRoot: string;
+  /** The current global web build key; without one the web builds are left alone. */
+  webKey?: string;
+  /** The current global native build key; without one the native builds are left alone. */
+  nativeKey?: string;
+  /** The current MCP app build keys, one per distinct widget set; without any the MCP app builds are left alone. */
+  mcpAppKeys?: readonly string[];
+  /** Test seams. */
+  scan?: HostScan;
+  selfPid?: number;
+  pruneRuntime?: typeof pruneRuntimePackages;
+}
+export interface SyncPruneResult {
+  status: 'pruned';
+  /** Build directories removed, as `<kind>/<key>`. */
+  builds: string[];
+  /** Store bytes upm released, or why the runtime was not pruned. */
+  runtime: {
+    bytes: number;
+  } | {
+    skipped: string;
+  };
+}
+export declare function pruneAfterSync(input: SyncPruneInput): Promise<SyncPruneResult>;
+//#endregion
+//# sourceMappingURL=index.d.mts.map

package/dist/src/composition/syncPrune/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/composition/syncPrune/index.ts"],"mappings":";;;iBA6BiB;EACf;EACA,aAAa,OAAO;;EAEpB;;EAEA;;EAEA;;EAEA;;EAEA,OAAO;EACP;EACA,sBAAsB;;iBAGP;EACf;;EAEA;;EAEA;IAAW;;IAAoB;;;wBAwBX,eAAe,OAAO,iBAAiB,QAAQ"}

package/dist/src/composition/syncPrune/index.mjs

@@ -0,0 +1,82 @@
+import { pruneStagedCatalogArchives } from "../layerPackageInstaller/index.mjs";
+import { otherPoHosts, systemHostScan } from "../poHomeMigration/index.mjs";
+import fs from "node:fs";
+import path from "node:path";
+import { pruneRuntimePackages } from "@agimon-ai/po-core/runtimePackages";
+import { poHomeDirectory, poRuntimeDirectory } from "@agimon-ai/po-core/runtimePiSettings";
+//#region src/composition/syncPrune/index.ts
+/**
+* What an explicit `po sync` drops once its installs and builds are done:
+* - the runtime project's stale entries and store content nothing references (upm's prune,
+*   which keeps anything written in the last hour);
+* - global web, native and MCP app builds other than the current key and the one before it.
+*
+* Sync calls this under its lock. Builds are pruned even while a Po server runs: the server
+* serves copies it publishes into `~/.po/server`, not these folders. The runtime is pruned only
+* when no other Po host runs, judged by the same scan that retires `~/.pi/.po`: a running server
+* may be installing into it, and upm's prune cannot be told to keep the previous manifest's
+* packages, so the runtime store grows while a server stays up. The staged catalogue archives
+* under `runtime/catalog` share that gate: a running server imports from them.
+*/
+const BUILD_DIRECTORY = "build";
+const BUILD_KINDS = {
+	web: "web",
+	native: "native",
+	mcpApp: "mcp-app"
+};
+const RUNTIME_MANIFEST = "package.json";
+/** Builds an in-flight build writes start with a dot; they are never touched. */
+const TEMPORARY_PREFIX = ".";
+/**
+* Removes every build of one kind except the current keys and the most recently written
+* other key, the one a client that has not refreshed yet may still load.
+*/
+function pruneBuilds(buildsRoot, kind, currentKeys) {
+	if (currentKeys.length === 0) return [];
+	const directory = path.join(buildsRoot, BUILD_DIRECTORY, kind);
+	if (!fs.existsSync(directory)) return [];
+	return fs.readdirSync(directory, { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(TEMPORARY_PREFIX) && !currentKeys.includes(entry.name)).map((entry) => ({
+		name: entry.name,
+		modified: fs.statSync(path.join(directory, entry.name)).mtimeMs
+	})).sort((left, right) => right.modified - left.modified).slice(1).map((entry) => {
+		fs.rmSync(path.join(directory, entry.name), {
+			recursive: true,
+			force: true
+		});
+		return `${kind}/${entry.name}`;
+	});
+}
+async function pruneAfterSync(input) {
+	const poHome = poHomeDirectory(input.homeDirectory, input.environment);
+	const builds = [
+		...pruneBuilds(input.buildsRoot, BUILD_KINDS.web, input.webKey === void 0 ? [] : [input.webKey]),
+		...pruneBuilds(input.buildsRoot, BUILD_KINDS.native, input.nativeKey === void 0 ? [] : [input.nativeKey]),
+		...pruneBuilds(input.buildsRoot, BUILD_KINDS.mcpApp, input.mcpAppKeys ?? [])
+	];
+	const hosts = otherPoHosts(poHome, input.scan ?? systemHostScan, input.selfPid ?? process.pid);
+	if (hosts.status === "running") return {
+		status: "pruned",
+		builds,
+		runtime: { skipped: hosts.reason }
+	};
+	const runtimeDirectory = poRuntimeDirectory(input.homeDirectory, input.environment);
+	if (!fs.existsSync(path.join(runtimeDirectory, RUNTIME_MANIFEST))) return {
+		status: "pruned",
+		builds,
+		runtime: { skipped: "no runtime packages are installed" }
+	};
+	pruneStagedCatalogArchives(runtimeDirectory);
+	const result = await (input.pruneRuntime ?? pruneRuntimePackages)({
+		dir: runtimeDirectory,
+		poHome
+	});
+	return {
+		status: "pruned",
+		builds,
+		runtime: { bytes: result.content.bytes + (result.entries?.bytes ?? 0) }
+	};
+}
+//#endregion
+export { pruneAfterSync };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/composition/syncPrune/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/composition/syncPrune/index.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\n\nimport { pruneRuntimePackages } from '@agimon-ai/po-core/runtimePackages';\nimport { poHomeDirectory, poRuntimeDirectory } from '@agimon-ai/po-core/runtimePiSettings';\n\nimport { pruneStagedCatalogArchives } from '../layerPackageInstaller';\nimport { type HostScan, otherPoHosts, systemHostScan } from '../poHomeMigration';\n\n/**\n * What an explicit `po sync` drops once its installs and builds are done:\n * - the runtime project's stale entries and store content nothing references (upm's prune,\n *   which keeps anything written in the last hour);\n * - global web, native and MCP app builds other than the current key and the one before it.\n *\n * Sync calls this under its lock. Builds are pruned even while a Po server runs: the server\n * serves copies it publishes into `~/.po/server`, not these folders. The runtime is pruned only\n * when no other Po host runs, judged by the same scan that retires `~/.pi/.po`: a running server\n * may be installing into it, and upm's prune cannot be told to keep the previous manifest's\n * packages, so the runtime store grows while a server stays up. The staged catalogue archives\n * under `runtime/catalog` share that gate: a running server imports from them.\n */\n\nconst BUILD_DIRECTORY = 'build';\nconst BUILD_KINDS = { web: 'web', native: 'native', mcpApp: 'mcp-app' } as const;\nconst RUNTIME_MANIFEST = 'package.json';\n/** Builds an in-flight build writes start with a dot; they are never touched. */\nconst TEMPORARY_PREFIX = '.';\n\nexport interface SyncPruneInput {\n  homeDirectory: string;\n  environment: NodeJS.ProcessEnv;\n  /** The root the global builds live under: `<root>/build/web/<key>`, `<root>/build/mcp-app/<key>`. */\n  buildsRoot: string;\n  /** The current global web build key; without one the web builds are left alone. */\n  webKey?: string;\n  /** The current global native build key; without one the native builds are left alone. */\n  nativeKey?: string;\n  /** The current MCP app build keys, one per distinct widget set; without any the MCP app builds are left alone. */\n  mcpAppKeys?: readonly string[];\n  /** Test seams. */\n  scan?: HostScan;\n  selfPid?: number;\n  pruneRuntime?: typeof pruneRuntimePackages;\n}\n\nexport interface SyncPruneResult {\n  status: 'pruned';\n  /** Build directories removed, as `<kind>/<key>`. */\n  builds: string[];\n  /** Store bytes upm released, or why the runtime was not pruned. */\n  runtime: { bytes: number } | { skipped: string };\n}\n\n/**\n * Removes every build of one kind except the current keys and the most recently written\n * other key, the one a client that has not refreshed yet may still load.\n */\nfunction pruneBuilds(buildsRoot: string, kind: string, currentKeys: readonly string[]): string[] {\n  if (currentKeys.length === 0) return [];\n  const directory = path.join(buildsRoot, BUILD_DIRECTORY, kind);\n  if (!fs.existsSync(directory)) return [];\n  const others = fs\n    .readdirSync(directory, { withFileTypes: true })\n    .filter(\n      (entry) => entry.isDirectory() && !entry.name.startsWith(TEMPORARY_PREFIX) && !currentKeys.includes(entry.name),\n    )\n    .map((entry) => ({ name: entry.name, modified: fs.statSync(path.join(directory, entry.name)).mtimeMs }))\n    .sort((left, right) => right.modified - left.modified);\n  return others.slice(1).map((entry) => {\n    fs.rmSync(path.join(directory, entry.name), { recursive: true, force: true });\n    return `${kind}/${entry.name}`;\n  });\n}\n\nexport async function pruneAfterSync(input: SyncPruneInput): Promise<SyncPruneResult> {\n  const poHome = poHomeDirectory(input.homeDirectory, input.environment);\n  const builds = [\n    ...pruneBuilds(input.buildsRoot, BUILD_KINDS.web, input.webKey === undefined ? [] : [input.webKey]),\n    ...pruneBuilds(input.buildsRoot, BUILD_KINDS.native, input.nativeKey === undefined ? [] : [input.nativeKey]),\n    ...pruneBuilds(input.buildsRoot, BUILD_KINDS.mcpApp, input.mcpAppKeys ?? []),\n  ];\n  // ponytail: upm's prune has no keep-list, so the previous manifest cannot be protected while a\n  // server runs; the runtime and its staged catalogue folders stay gated on no other host. A keep\n  // option in upm is the upgrade.\n  const hosts = otherPoHosts(poHome, input.scan ?? systemHostScan, input.selfPid ?? process.pid);\n  if (hosts.status === 'running') return { status: 'pruned', builds, runtime: { skipped: hosts.reason } };\n  const runtimeDirectory = poRuntimeDirectory(input.homeDirectory, input.environment);\n  if (!fs.existsSync(path.join(runtimeDirectory, RUNTIME_MANIFEST))) {\n    return { status: 'pruned', builds, runtime: { skipped: 'no runtime packages are installed' } };\n  }\n  pruneStagedCatalogArchives(runtimeDirectory);\n  const result = await (input.pruneRuntime ?? pruneRuntimePackages)({ dir: runtimeDirectory, poHome });\n  return {\n    status: 'pruned',\n    builds,\n    runtime: { bytes: result.content.bytes + (result.entries?.bytes ?? 0) },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAuBA,MAAM,kBAAkB;AACxB,MAAM,cAAc;CAAE,KAAK;CAAO,QAAQ;CAAU,QAAQ;AAAU;AACtE,MAAM,mBAAmB;;AAEzB,MAAM,mBAAmB;;;;;AA+BzB,SAAS,YAAY,YAAoB,MAAc,aAA0C;CAC/F,IAAI,YAAY,WAAW,GAAG,OAAO,CAAC;CACtC,MAAM,YAAY,KAAK,KAAK,YAAY,iBAAiB,IAAI;CAC7D,IAAI,CAAC,GAAG,WAAW,SAAS,GAAG,OAAO,CAAC;CAQvC,OAPe,GACZ,YAAY,WAAW,EAAE,eAAe,KAAK,CAAC,CAAC,CAC/C,QACE,UAAU,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,WAAW,gBAAgB,KAAK,CAAC,YAAY,SAAS,MAAM,IAAI,CAChH,CAAC,CACA,KAAK,WAAW;EAAE,MAAM,MAAM;EAAM,UAAU,GAAG,SAAS,KAAK,KAAK,WAAW,MAAM,IAAI,CAAC,CAAC,CAAC;CAAQ,EAAE,CAAC,CACvG,MAAM,MAAM,UAAU,MAAM,WAAW,KAAK,QACnC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU;EACpC,GAAG,OAAO,KAAK,KAAK,WAAW,MAAM,IAAI,GAAG;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EAC5E,OAAO,GAAG,KAAK,GAAG,MAAM;CAC1B,CAAC;AACH;AAEA,eAAsB,eAAe,OAAiD;CACpF,MAAM,SAAS,gBAAgB,MAAM,eAAe,MAAM,WAAW;CACrE,MAAM,SAAS;EACb,GAAG,YAAY,MAAM,YAAY,YAAY,KAAK,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC;EAClG,GAAG,YAAY,MAAM,YAAY,YAAY,QAAQ,MAAM,cAAc,KAAA,IAAY,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC;EAC3G,GAAG,YAAY,MAAM,YAAY,YAAY,QAAQ,MAAM,cAAc,CAAC,CAAC;CAC7E;CAIA,MAAM,QAAQ,aAAa,QAAQ,MAAM,QAAQ,gBAAgB,MAAM,WAAW,QAAQ,GAAG;CAC7F,IAAI,MAAM,WAAW,WAAW,OAAO;EAAE,QAAQ;EAAU;EAAQ,SAAS,EAAE,SAAS,MAAM,OAAO;CAAE;CACtG,MAAM,mBAAmB,mBAAmB,MAAM,eAAe,MAAM,WAAW;CAClF,IAAI,CAAC,GAAG,WAAW,KAAK,KAAK,kBAAkB,gBAAgB,CAAC,GAC9D,OAAO;EAAE,QAAQ;EAAU;EAAQ,SAAS,EAAE,SAAS,oCAAoC;CAAE;CAE/F,2BAA2B,gBAAgB;CAC3C,MAAM,SAAS,OAAO,MAAM,gBAAgB,qBAAA,CAAsB;EAAE,KAAK;EAAkB;CAAO,CAAC;CACnG,OAAO;EACL,QAAQ;EACR;EACA,SAAS,EAAE,OAAO,OAAO,QAAQ,SAAS,OAAO,SAAS,SAAS,GAAG;CACxE;AACF"}