@allocator-one/infraone 1.17.0 → 1.17.1

package/dist/{chunk-W7BVOQQG.js → chunk-XA5UDNJI.js}

@@ -1376,7 +1376,7 @@ async function loadSpec(config) {
   return { spec: await bundledSpec(), fingerprint: null, source: "bundled" };
 }
 async function bundledSpec() {
-  const module = await import("./infraone-A3KDADRM.js");
+  const module = await import("./infraone-SLZXBJCV.js");
   const spec = module.default;
   if (!isSpec(spec)) throw new Error("the bundled spec/infraone.json is not an OpenAPI document");
   return spec;

package/dist/cli.js

@@ -6,7 +6,7 @@ import {
   performUpdateCheck,
   selfHeal,
   updateCheck
-} from "./chunk-A4WZAC7L.js";
+} from "./chunk-67NX7MJ2.js";
 import {
   ACTIVITY_MAX_LIMIT,
   EXIT_INTERRUPTED,
@@ -513,7 +513,7 @@ async function retry(ctx, pr, reason) {
 
 // src/commands/code/index.ts
 import { resolve as resolve2 } from "path";
-import { statSync } from "fs";
+import { statSync, realpathSync } from "fs";
 
 // src/core/code/http.ts
 import { setTimeout as delay } from "timers/promises";
@@ -749,7 +749,10 @@ var HttpCodeApi = class {
     return { data: result.data, meta: result.meta };
   }
   async getPolicy() {
-    return decode(policy, (await this.request("GET", "/policy")).data);
+    const raw = (await this.request("GET", "/policy")).data;
+    if (raw && typeof raw === "object" && "deny_glob_case" in raw && raw.deny_glob_case !== void 0 && raw.deny_glob_case !== "ascii_insensitive")
+      throw new CommandError("The server returned an invalid code upload policy; upgrade the client before code sync.");
+    return decode(policy, raw);
   }
   async putRepository(repoKey) {
     return decode(
@@ -791,7 +794,7 @@ var HttpCodeApi = class {
     );
   }
   async putBlob(hash2, bytes) {
-    HASH.parse(hash2);
+    if (!HASH.safeParse(hash2).success) throw new CommandError("Invalid code blob SHA256; no source was uploaded.");
     await this.request("PUT", `/blobs/${hash2}`, bytes);
   }
   async getSync(viewId, syncId) {
@@ -822,7 +825,7 @@ import { promisify } from "util";
 import { realpath } from "fs/promises";
 var run2 = promisify(execFile);
 var MAX_GIT_BYTES = 16 * 1024 * 1024;
-async function gitBytes(cwd, args, maxBuffer = MAX_GIT_BYTES) {
+async function gitBytes(cwd, args, maxBuffer = MAX_GIT_BYTES, limitMessage = "Git returned more than 16 MiB of metadata; this exceeds the code-sync client limit.") {
   try {
     return (await run2(
       "git",
@@ -839,7 +842,7 @@ async function gitBytes(cwd, args, maxBuffer = MAX_GIT_BYTES) {
     const code2 = error.code;
     if (code2 === "ERR_CHILD_PROCESS_STDIO_MAXBUFFER" || error instanceof Error && /maxBuffer/i.test(error.message))
       throw new LocalError(
-        "Git returned more than 16 MiB of metadata; narrow the worktree before code sync."
+        limitMessage
       );
     throw new LocalError(
       "Cannot read this Git working tree. Run code commands inside a committed repository with an origin remote."
@@ -908,10 +911,13 @@ async function identity(cwd) {
     await gitBytes(root, ["rev-parse", "--verify", "HEAD^{commit}"]),
     "Cannot resolve the repository HEAD commit."
   );
-  const remote = decodeGitLine(
-    await gitBytes(root, ["remote", "get-url", "origin"]),
-    "repository_not_connected: code indexing requires an origin on github.com shared through your organization\u2019s Harness GitHub connection."
-  );
+  const missingRemote = "repository_not_connected: code indexing requires an origin on github.com shared through your organization\u2019s Harness GitHub connection.";
+  let remote;
+  try {
+    remote = decodeGitLine(await gitBytes(root, ["remote", "get-url", "origin"]), missingRemote);
+  } catch {
+    throw new LocalError(missingRemote);
+  }
   if (/[\x00-\x1f\x7f-\x9f]/.test(remote))
     throw new LocalError(
       "repository_not_connected: code indexing requires an origin on github.com shared through your organization\u2019s Harness GitHub connection."
@@ -963,6 +969,23 @@ async function changedPaths(root, commit) {
     (a, b) => Buffer.compare(Buffer.from(a), Buffer.from(b))
   );
 }
+function decodeGitTree(output) {
+  if (output.length && output.at(-1) !== 0)
+    throw new LocalError("Code sync received incomplete Git tree metadata.");
+  const entries = [];
+  for (let start = 0, end = output.indexOf(0); end !== -1; end = output.indexOf(0, start)) {
+    const record2 = output.subarray(start, end), tab = record2.indexOf(9);
+    if (tab < 0) throw new LocalError("Code sync received invalid Git tree metadata.");
+    const header = decodeUtf8(record2.subarray(0, tab), "Code sync received invalid Git tree metadata.");
+    const match = /^(100644|100755|120000|160000) (blob|commit) ([0-9a-f]{40}|[0-9a-f]{64})$/.exec(header);
+    if (!match || match[1] === "160000" !== (match[2] === "commit"))
+      throw new LocalError("Code sync received invalid Git tree metadata.");
+    const [path] = decodeGitPaths([Buffer.concat([record2.subarray(tab + 1), Buffer.from([0])])]);
+    entries.push({ path, regular: match[1] === "100644" || match[1] === "100755" });
+    start = end + 1;
+  }
+  return entries;
+}
 
 // src/core/code/scan.ts
 import { constants as constants2 } from "fs";
@@ -979,10 +1002,13 @@ import { extname } from "path";
 var MAX_PATTERN_BYTES = 256;
 var MAX_PATTERN_STARS = 8;
 var MAX_PATTERNS = 1e3;
+function trimIgnoreLine(line) {
+  return line.replace(new RegExp("^\\p{White_Space}+|\\p{White_Space}+$", "gu"), "");
+}
 function compileIgnorePatterns(lines, warnings) {
   const patterns = [];
   for (const [line, raw] of lines.entries()) {
-    const trimmed = raw.trim();
+    const trimmed = trimIgnoreLine(raw);
     if (!trimmed || trimmed.startsWith("#")) continue;
     if (trimmed.startsWith("!")) {
       warnings.push(
@@ -1010,17 +1036,120 @@ function compileIgnorePatterns(lines, warnings) {
     const pattern = compilePattern(trimmed);
     if (pattern) patterns.push(pattern);
   }
-  return patterns;
+  return Object.freeze(patterns);
 }
 function patternLimitError() {
   return new Error("Code upload policy contains an invalid path pattern.");
 }
-function escapeRegex(pattern) {
-  return pattern.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-function globBody(pattern) {
-  return escapeRegex(pattern).replaceAll("\\*\\*/", "(?:.*/)?").replaceAll("/\\*\\*", "/.*").replaceAll("\\*", "[^/]*").replaceAll("\\?", "[^/]");
-}
+function tokens(glob) {
+  const result = [];
+  for (const [i, part] of glob.split("**/").entries()) {
+    if (i) result.push("optDirs");
+    for (const [j, piece] of part.split("/**").entries()) {
+      if (j) result.push(47, "starAny");
+      for (const byte of Buffer.from(piece)) {
+        const token = byte === 42 ? "starSeg" : byte === 63 ? "anySeg" : byte;
+        if (token !== "starSeg" || result.at(-1) !== token) result.push(token);
+      }
+    }
+  }
+  return result;
+}
+function mask(indices) {
+  const top = indices.at(-1);
+  const bytes = Buffer.alloc((top >> 3) + 1);
+  for (const bit of indices) bytes[bytes.length - 1 - (bit >> 3)] |= 1 << (bit & 7);
+  return BigInt("0x" + bytes.toString("hex"));
+}
+var ByteGlob = class {
+  constructor(specs) {
+    this.specs = specs;
+    const positions = /* @__PURE__ */ new Map();
+    const add = (key, index) => {
+      const values = positions.get(key);
+      if (values) values.push(index);
+      else positions.set(key, [index]);
+    };
+    let base2 = 0;
+    for (const [index, spec] of specs.entries()) {
+      const sequence = [...spec.anchored ? [] : ["optPrefix"], ...tokens(spec.glob), ...spec.descendants ? ["optTail"] : []];
+      add("start", base2);
+      add("finals", base2 + sequence.length);
+      this.finalIndices.set(base2 + sequence.length, index);
+      for (const [offset, token] of sequence.entries()) {
+        const bit = base2 + offset;
+        add(token, bit);
+        if (typeof token === "number") {
+          if (spec.fold && (token >= 65 && token <= 90 || token >= 97 && token <= 122)) add(token ^ 32, bit);
+        } else if (token !== "anySeg") add("eps", bit);
+      }
+      base2 += sequence.length + 1;
+    }
+    const masks = new Map([...positions].map(([key, bits]) => [key, mask(bits)]));
+    for (const [key, value] of masks) if (typeof key === "number") this.literals.set(key, value);
+    const get = (key) => masks.get(key) ?? 0n;
+    this.start = get("start");
+    this.finals = get("finals");
+    this.anySeg = get("anySeg");
+    this.starSeg = get("starSeg");
+    this.starAny = get("starAny");
+    this.eps = get("eps");
+    this.optDirs = get("optDirs");
+    this.optPrefix = get("optPrefix");
+    this.optTail = get("optTail");
+  }
+  specs;
+  start;
+  finals;
+  literals = /* @__PURE__ */ new Map();
+  anySeg;
+  starSeg;
+  starAny;
+  eps;
+  optDirs;
+  optPrefix;
+  optTail;
+  finalIndices = /* @__PURE__ */ new Map();
+  close(states, inner) {
+    for (; ; ) {
+      inner |= states & (this.optDirs | this.optPrefix);
+      const closed = states | (states & this.eps) << 1n | (inner & this.optTail) << 1n;
+      if (closed === states) return [states, inner];
+      states = closed;
+    }
+  }
+  step(byte, states, inner) {
+    const advance = (this.literals.get(byte) ?? 0n) | (byte === 47 ? 0n : this.anySeg);
+    const stay = (byte === 47 ? 0n : this.starSeg) | (byte === 10 ? 0n : this.starAny);
+    let next = (states & advance) << 1n | states & stay;
+    let nextInner = byte === 10 ? inner & this.optPrefix : inner;
+    if (byte === 47) {
+      next |= (inner & (this.optDirs | this.optPrefix)) << 1n;
+      nextInner |= states & this.optTail;
+    }
+    return this.close(next, nextInner);
+  }
+  /** Highest matching pattern preserves matchingPattern's last-match result. */
+  matchedIndex(path) {
+    if (!this.start) return null;
+    let [states, inner] = this.close(this.start, 0n);
+    const bytes = Buffer.from(path);
+    let beforeFinalNewline = 0n;
+    for (let i = 0; i < bytes.length; i++) {
+      if (i === bytes.length - 1 && bytes[i] === 10) beforeFinalNewline = states;
+      [states, inner] = this.step(bytes[i], states, inner);
+      if (!states && !inner && !beforeFinalNewline) return null;
+    }
+    const final = (states | beforeFinalNewline) & this.finals;
+    if (!final) return null;
+    const hex = final.toString(16);
+    const highest = (hex.length - 1) * 4 + Math.floor(Math.log2(parseInt(hex[0], 16)));
+    return this.finalIndices.get(highest) ?? null;
+  }
+  test(path) {
+    return this.matchedIndex(path) !== null;
+  }
+};
 function compilePattern(raw, {
   caseInsensitive = false,
   mode = "ignore",
@@ -1029,7 +1158,7 @@ function compilePattern(raw, {
   maxStars = MAX_PATTERN_STARS,
   rejectUnsupported = false
 } = {}) {
-  let pattern = mode === "served" ? raw : raw.trim();
+  let pattern = mode === "served" ? raw : trimIgnoreLine(raw);
   if (pattern === "") return null;
   if (pattern.startsWith("#")) {
     if (rejectUnsupported) throw patternLimitError();
@@ -1051,28 +1180,30 @@ function compilePattern(raw, {
     );
   }
   if (rejectUnsupported && /[\[\]{}]/.test(pattern)) throw patternLimitError();
-  const anchored = pattern.includes("/");
+  const rooted = pattern.startsWith("/");
   if (mode === "ignore") pattern = pattern.replace(/^\/+|\/+$/g, "");
-  const prefix = anchored ? "^" : "^(?:.*/)?";
-  const suffix = mode === "ignore" ? "(?:/.*)?$" : "$";
-  return {
-    source: mode === "served" ? raw : raw.trim(),
+  const anchored = rooted || pattern.includes("/");
+  return Object.freeze({
+    source: mode === "served" ? raw : trimIgnoreLine(raw),
     negated: false,
-    regex: new RegExp(
-      prefix + globBody(pattern) + suffix,
-      caseInsensitive ? "i" : ""
-    )
-  };
+    matcher: new ByteGlob([{ glob: pattern, anchored, descendants: mode === "ignore", fold: caseInsensitive }])
+  });
 }
 function compilePatterns(lines, options = {}) {
   const maxPatterns = options.maxPatterns ?? MAX_PATTERNS;
   if (lines.length > maxPatterns) throw patternLimitError();
-  return lines.map((line) => compilePattern(line, options)).filter((pattern) => pattern !== null);
+  return Object.freeze(lines.map((line) => compilePattern(line, options)).filter((pattern) => pattern !== null));
 }
+var matcherCache = /* @__PURE__ */ new WeakMap();
 function matchingPattern(path, patterns) {
-  let decided = null;
-  for (const pattern of patterns) if (pattern.regex.test(path)) decided = pattern;
-  return decided;
+  if (!patterns.length) return null;
+  let matcher = matcherCache.get(patterns);
+  if (!matcher) {
+    matcher = new ByteGlob(patterns.flatMap((pattern) => [...pattern.matcher.specs]));
+    if (Object.isFrozen(patterns)) matcherCache.set(patterns, matcher);
+  }
+  const index = matcher.matchedIndex(path);
+  return index === null ? null : patterns[index];
 }
 
 // src/core/code/policy.ts
@@ -1176,7 +1307,7 @@ function buildPolicy(served, ignore, includeFloor) {
   const literalMarkers = contentMatchers(served.content_patterns);
   return {
     limit: Math.min(served.max_file_bytes, MAX_FILE_BYTES),
-    deny: [
+    deny: Object.freeze([
       ...includeFloor ? compilePatterns(DENY, {
         caseInsensitive: true,
         maxPatterns: Infinity,
@@ -1190,7 +1321,7 @@ function buildPolicy(served, ignore, includeFloor) {
         maxStars: Infinity,
         rejectUnsupported: true
       })
-    ],
+    ]),
     ignore: compileIgnorePatterns(ignore.split(/\r?\n/), warnings),
     patterns: SECRETS,
     literalMarkers,
@@ -1221,7 +1352,7 @@ function basePolicyFor(served, ignore) {
 function pathReason(path, p) {
   if (!path || Buffer.byteLength(path) > 1024 || /[\\\x00-\x1f\x7f-\x9f]/.test(path) || Buffer.from(path, "utf8").toString("utf8") !== path || path.split("/").some((segment) => ["", ".", ".."].includes(segment)))
     return "invalid_path";
-  if (p.deny.some((pattern) => pattern.regex.test(path))) return "excluded_path";
+  if (matchingPattern(path, p.deny)) return "excluded_path";
   if (matchingPattern(path, p.ignore)) return "ignored";
   return p.extensions.has(extname(path)) ? null : "unsupported_language";
 }
@@ -1265,7 +1396,7 @@ async function committedIgnore(root, commit) {
       "The committed .harnesscodeignore must be a regular file before code sync."
     );
   return decodeUtf8(
-    await gitBytes(root, ["cat-file", "blob", match[2]], 65537),
+    await gitBytes(root, ["cat-file", "blob", match[2]], 65537, "The committed .harnesscodeignore exceeds 64 KiB; reduce it before code sync."),
     "The committed .harnesscodeignore must be valid UTF-8 before code sync."
   );
 }
@@ -1369,7 +1500,8 @@ async function readSafe(root, path, limit) {
   } catch (error) {
     const code2 = error.code;
     if (code2 === "ENOENT") return { reason: "deleted" };
-    if (code2 === "ELOOP" || code2 === "ENOTDIR") return { reason: "symlink" };
+    if (code2 === "ELOOP") return { reason: "symlink" };
+    if (code2 === "ENOTDIR") return { reason: "not_directory" };
     if (error instanceof LocalError) throw error;
     throw new LocalError(
       "Cannot read an overlay file safely; check permissions and retry code sync."
@@ -1379,6 +1511,8 @@ async function readSafe(root, path, limit) {
 async function scanOverlay(id, served) {
   policyFor(served, "");
   const ignore = await readSafe(id.root, ".harnesscodeignore", 65536);
+  if ("reason" in ignore && ignore.reason === "too_large")
+    throw new LocalError("The local .harnesscodeignore exceeds 64 KiB; reduce it before code sync.");
   if ("reason" in ignore && ignore.reason !== "deleted")
     throw new LocalError(
       "Cannot read .harnesscodeignore safely; fix or remove it before code sync."
@@ -1395,12 +1529,9 @@ async function scanOverlay(id, served) {
   const policy2 = policyFor(served, localIgnore);
   const basePolicy = basePolicyFor(served, baseIgnore);
   const paths = await changedPaths(id.root, id.commit);
-  const basePaths = new Set(
-    decodeGitPaths([
-      await gitBytes(id.root, ["ls-tree", "-r", "--name-only", "-z", id.commit])
-    ])
-  );
-  assertDistinctPathIdentities([...basePaths, ...paths]);
+  const tree = decodeGitTree(await gitBytes(id.root, ["ls-tree", "-r", "-z", id.commit]));
+  const basePaths = new Set(tree.filter((entry) => entry.regular).map((entry) => entry.path));
+  assertDistinctPathIdentities([...tree.map((entry) => entry.path), ...paths]);
   const changes = [];
   const deleted = /* @__PURE__ */ new Set();
   const blobs = /* @__PURE__ */ new Map();
@@ -1417,7 +1548,10 @@ async function scanOverlay(id, served) {
     }
   };
   const candidates = new Set(paths);
-  const warnings = /* @__PURE__ */ new Set([...policy2.warnings, ...basePolicy.warnings]);
+  const warnings = /* @__PURE__ */ new Set([
+    ...policy2.warnings.map((warning) => warning.startsWith("This harness-cli") ? warning : `Local .harnesscodeignore: ${warning}`),
+    ...basePolicy.warnings.map((warning) => warning.startsWith("This harness-cli") ? warning : `Committed .harnesscodeignore: ${warning}`)
+  ]);
   for (const path of basePaths) {
     const baseReason = pathReason(path, basePolicy);
     const localReason = pathReason(path, policy2);
@@ -1494,15 +1628,25 @@ import {
   mkdir,
   writeFile,
   rename,
+  link,
   unlink,
   rmdir
 } from "fs/promises";
 import { join as join2, resolve, isAbsolute } from "path";
 import { randomUUID } from "crypto";
-function statePath(server, org, root, repoKey, directory) {
+function canonicalServer(server) {
   const url = new URL(server);
-  const canonical = url.origin + url.pathname.replace(/\/+$/, "");
-  const base2 = directory ?? process.env["HARNESS_CODE_STATE_DIR"] ?? join2(resolveCacheHome(), "harness", "code");
+  return url.origin + url.pathname.replace(/\/+$/, "");
+}
+function validPending(pending) {
+  if (pending === void 0) return true;
+  if (!pending || typeof pending !== "object" || typeof pending.digest !== "string" || !/^[a-f0-9]{64}$/.test(pending.digest)) return false;
+  const request = pending.request;
+  return !!request && typeof request === "object" && request.mode === "full" && typeof request.base_commit === "string" && /^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(request.base_commit) && typeof request.policy_digest === "string" && request.policy_digest.length > 0 && request.policy_digest.length <= 256 && typeof request.client_sync_id === "string" && request.client_sync_id.length > 0 && Buffer.byteLength(request.client_sync_id) <= 255 && Array.isArray(request.changes) && request.changes.length <= 2e4 && request.changes.every((change) => change && typeof change === "object" && typeof change.path === "string" && (change.op === "delete" || change.op === "put" && typeof change.sha256 === "string" && /^[a-f0-9]{64}$/.test(change.sha256) && Number.isSafeInteger(change.size) && change.size >= 0 && ["100644", "100755"].includes(change.mode))) && (pending.syncId === void 0 || typeof pending.syncId === "string") && (pending.activationAttemptedAt === void 0 || Number.isSafeInteger(pending.activationAttemptedAt) && pending.activationAttemptedAt >= 0);
+}
+function statePath(server, org, root, repoKey, directory) {
+  const canonical = canonicalServer(server);
+  const base2 = directory ?? (process.env["HARNESS_CODE_STATE_DIR"] || void 0) ?? join2(resolveCacheHome(), "harness", "code");
   if (!isAbsolute(base2))
     throw new LocalError("HARNESS_CODE_STATE_DIR must be an absolute path.");
   return join2(
@@ -1516,9 +1660,9 @@ async function readState(path, server, org, root, repoKey) {
     const s = JSON.parse(await readFile(path, "utf8"));
     if (typeof s !== "object" || s === null) throw new Error();
     const state2 = s;
-    if (state2.org.toLowerCase() !== org.toLowerCase() || state2.root !== root || state2.repoKey !== repoKey || new URL(state2.server).href !== new URL(server).href || typeof state2.viewKey !== "string" || !/^[\da-f-]{36}$/.test(state2.viewKey))
+    if (state2.org.toLowerCase() !== org.toLowerCase() || state2.root !== root || state2.repoKey !== repoKey || canonicalServer(state2.server) !== canonicalServer(server) || !validPending(state2.pending) || typeof state2.viewKey !== "string" || !/^[\da-f-]{36}$/.test(state2.viewKey))
       throw new Error();
-    return { ...state2, org: state2.org.toLowerCase() };
+    return { ...state2, server: canonicalServer(state2.server), org: state2.org.toLowerCase() };
   } catch (error) {
     if (error.code === "ENOENT") return null;
     throw new LocalError(
@@ -1529,26 +1673,31 @@ async function readState(path, server, org, root, repoKey) {
 async function initialState(path, server, org, root, repoKey) {
   const previous = await readState(path, server, org, root, repoKey);
   if (previous) return previous;
-  const state2 = { server, org: org.toLowerCase(), root, repoKey, viewKey: randomUUID() };
+  const state2 = { server: canonicalServer(server), org: org.toLowerCase(), root, repoKey, viewKey: randomUUID() };
   await mkdir(join2(path, ".."), { recursive: true, mode: 448 });
+  const tmp = `${path}.${randomUUID()}.tmp`;
   try {
-    await writeFile(path, JSON.stringify(state2) + "\n", {
-      flag: "wx",
-      mode: 384
-    });
-    return state2;
-  } catch (error) {
-    if (error.code === "EEXIST") {
+    await writeFile(tmp, JSON.stringify(state2) + "\n", { flag: "wx", mode: 384 });
+    try {
+      await link(tmp, path);
+    } catch (error) {
+      if (error.code !== "EEXIST") throw error;
       const raced = await readState(path, server, org, root, repoKey);
-      if (raced) return raced;
+      if (!raced) throw new Error("initial state disappeared");
+      return raced;
     }
+    return state2;
+  } catch {
     throw new LocalError("Cannot save isolated code view state.");
+  } finally {
+    await unlink(tmp).catch(() => {
+    });
   }
 }
 async function saveState(path, state2) {
   const tmp = `${path}.${randomUUID()}.tmp`;
   try {
-    await writeFile(tmp, JSON.stringify({ ...state2, org: state2.org.toLowerCase() }) + "\n", {
+    await writeFile(tmp, JSON.stringify({ ...state2, server: canonicalServer(state2.server), org: state2.org.toLowerCase() }) + "\n", {
       flag: "wx",
       mode: 384
     });
@@ -1732,11 +1881,32 @@ async function syncCode(api, options) {
             if (error instanceof HttpError && error.status === 404) {
               if (withinActivationRetention(state2.pending?.activationAttemptedAt))
                 return forgetReplaced();
+              if (state2.pending?.activationAttemptedAt === void 0)
+                throw new CommandError("The sync disappeared without a recorded activation attempt. Check code status before retrying code sync.");
               throw new CommandError("The previous activation can no longer be verified after retention. Check code status before syncing again.");
             }
             throw error;
           }
         };
+        const reconcileFailure = async (syncId, original) => {
+          try {
+            const recovered = await receipt(syncId);
+            if (!recovered && original instanceof HttpError && original.status >= 400 && original.status < 500 && original.status !== 429 && state2.pending) {
+              delete state2.pending.activationAttemptedAt;
+              await saveState(path, state2);
+            }
+            return recovered;
+          } catch (secondary) {
+            if (secondary instanceof ReplacedSyncError) throw secondary;
+            const primary = secondary instanceof CommandError ? secondary : original;
+            const cause = primary === secondary ? original : secondary;
+            try {
+              if (primary instanceof Error && primary.cause === void 0 && cause !== primary) primary.cause = cause;
+            } catch {
+            }
+            throw primary;
+          }
+        };
         let current = state2.pending;
         const matchesCurrent = current && current.digest === overlay.digest && current.request?.mode === "full" && current.request.base_commit === id.commit && current.request.policy_digest === policy2.policy_digest && typeof current.request.client_sync_id === "string" && JSON.stringify(current.request.changes) === JSON.stringify(overlay.changes);
         if (current?.syncId && current.activationAttemptedAt !== void 0 && !matchesCurrent) {
@@ -1749,7 +1919,7 @@ async function syncCode(api, options) {
             try {
               recovered = await api.activate(view2.view_id, originalSyncId);
             } catch (error) {
-              recovered = await receipt(originalSyncId);
+              recovered = await reconcileFailure(originalSyncId, error);
               if (!recovered) throw error;
             }
           }
@@ -1849,9 +2019,8 @@ async function syncCode(api, options) {
               throw new CommandError("The activation retry exceeded its retention window. Check code status before syncing again.");
             return forgetReplaced();
           }
-          const ambiguous = activating && (!(error instanceof HttpError) || error.status >= 500 || error.status === 429);
-          if (ambiguous) {
-            const recovered = await receipt(opened2.sync_id);
+          if (activating) {
+            const recovered = await reconcileFailure(opened2.sync_id, error);
             if (recovered) return finish(opened2.sync_id, recovered, missing.length);
           }
           throw error;
@@ -1898,7 +2067,7 @@ async function statusCode(api, options) {
       "The server resolved a different repository; its base status cannot be trusted."
     );
   const repositoryId = repository?.repository_id ?? state2?.repositoryId;
-  if (!state2?.viewId || repository && repositoryId !== state2.repositoryId) {
+  const withoutView = async () => {
     const base3 = options.skipped && repositoryId ? await api.getBase(repositoryId, id.commit, true) : void 0;
     return {
       state: base3?.state === "failed" ? "failed" : base3?.state === "fetching" ? "fetching" : "not_synced",
@@ -1907,8 +2076,15 @@ async function statusCode(api, options) {
       base_commit: id.commit,
       ...base3 ? { base: base3 } : {}
     };
+  };
+  if (!state2?.viewId || repository && repositoryId !== state2.repositoryId) return withoutView();
+  let view2;
+  try {
+    view2 = await api.getView(state2.viewId);
+  } catch (error) {
+    if (error instanceof HttpError && error.status === 404) return withoutView();
+    throw error;
   }
-  const view2 = await api.getView(state2.viewId);
   if (view2.repository_id !== state2.repositoryId || view2.view_id !== state2.viewId || view2.view_key !== state2.viewKey)
     throw new CommandError(
       "The server view does not match this repository/worktree; its status cannot be trusted."
@@ -1917,7 +2093,7 @@ async function statusCode(api, options) {
   const current = view2.active?.base_commit === id.commit && view2.active.overlay_digest === overlay.digest && state2.activated?.baseCommit === view2.active.base_commit && state2.activated.overlayDigest === view2.active.overlay_digest && state2.activated.pendingVersion === view2.active.version && state2.activated.policyDigest === policy2.policy_digest;
   const base2 = options.skipped && state2.repositoryId ? await api.getBase(state2.repositoryId, id.commit, true) : void 0;
   return {
-    state: base2?.state === "failed" || view2.pending?.state === "failed" ? "failed" : current ? "current" : view2.pending ? "pending" : "stale",
+    state: base2?.state === "failed" || view2.pending?.state === "failed" ? "failed" : current ? "current" : view2.pending ? "pending" : view2.active ? "stale" : "not_synced",
     org_id: policy2.org_id,
     repo_key: id.repoKey,
     base_commit: id.commit,
@@ -2074,27 +2250,26 @@ async function queryCode(api, operation, params, options) {
 
 // src/commands/code/index.ts
 function enterWorktree(options) {
-  const cwd = process.cwd();
-  const before = statSync(".");
-  const declared = statSync(cwd);
-  if (before.dev !== declared.dev || before.ino !== declared.ino)
-    throw new LocalError("Cannot enter the code worktree safely.");
-  const supplied = options.path ?? cwd;
-  if (/[\x00-\x1f\x7f-\x9f]/.test(supplied) || Buffer.from(supplied, "utf8").toString("utf8") !== supplied || options.path !== void 0 && supplied.includes("\uFFFD"))
-    throw new LocalError("Cannot enter the code worktree safely.");
-  const path = resolve2(supplied);
+  const refused = () => options.path === void 0 ? new LocalError("Cannot enter the code worktree safely; check the current directory.") : new UsageError("Cannot enter the code worktree safely; check --path.");
   try {
-    const target = statSync(path);
-    if (options.path === void 0 && (before.dev !== target.dev || before.ino !== target.ino))
-      throw new Error("current directory identity changed");
+    const cwd = process.cwd();
+    const before = statSync(".");
+    const declared = statSync(cwd);
+    if (before.dev !== declared.dev || before.ino !== declared.ino) throw refused();
+    const supplied = options.path ?? cwd;
+    if (/[\x00-\x1f\x7f-\x9f]/.test(supplied) || Buffer.from(supplied, "utf8").toString("utf8") !== supplied || options.path !== void 0 && supplied.includes("\uFFFD")) throw refused();
+    const path = resolve2(supplied), target = statSync(path);
+    if (options.path === void 0 && (before.dev !== target.dev || before.ino !== target.ino)) throw refused();
     process.chdir(path);
     const entered = statSync(".");
-    if (entered.dev !== target.dev || entered.ino !== target.ino)
-      throw new Error("worktree identity changed");
+    if (entered.dev !== target.dev || entered.ino !== target.ino) throw refused();
+    const canonical = realpathSync(".");
+    const pinned = statSync(canonical);
+    if (pinned.dev !== entered.dev || pinned.ino !== entered.ino) throw refused();
+    return { ...options, path: canonical };
   } catch {
-    throw new LocalError("Cannot enter the code worktree; check --path.");
+    throw refused();
   }
-  return { ...options, path };
 }
 async function sync(ctx, options = {}) {
   try {
@@ -2964,8 +3139,8 @@ doc.command("update").argument("[id]").option("--title <title>").option("--conte
     });
   }
 );
-var link = program.command("link").description("URLs attached to an issue (distinct from dep relations)");
-link.command("list").argument("[issue]").option("--json", "emit JSON").action(async (issue, opts) => {
+var link2 = program.command("link").description("URLs attached to an issue (distinct from dep relations)");
+link2.command("list").argument("[issue]").option("--json", "emit JSON").action(async (issue, opts) => {
   await withConfig(opts.json === true, false, (ctx) => {
     if (issue === void 0)
       throw new UsageError("usage: harness link list <issue>");
@@ -2973,7 +3148,7 @@ link.command("list").argument("[issue]").option("--json", "emit JSON").action(as
     return linkList(ctx, issue);
   });
 });
-link.command("add").argument("[issue]").argument("[url]").option("--title <title>", "link title").option("--json", "emit JSON").action(
+link2.command("add").argument("[issue]").argument("[url]").option("--title <title>", "link title").option("--json", "emit JSON").action(
   async (issue, url, opts) => {
     await withConfig(opts.json === true, true, (ctx) => {
       if (issue === void 0 || url === void 0) {
@@ -2986,7 +3161,7 @@ link.command("add").argument("[issue]").argument("[url]").option("--title <title
     });
   }
 );
-link.command("update").argument("[issue]").argument("[id-or-url]").option("--url <url>", "replacement URL").option("--title <title>", "replacement title; pass an empty value to clear").option("--json", "emit JSON").action(
+link2.command("update").argument("[issue]").argument("[id-or-url]").option("--url <url>", "replacement URL").option("--title <title>", "replacement title; pass an empty value to clear").option("--json", "emit JSON").action(
   async (issue, idOrUrl, opts) => {
     await withConfig(opts.json === true, true, (ctx) => {
       if (issue === void 0 || idOrUrl === void 0) {
@@ -2998,7 +3173,7 @@ link.command("update").argument("[issue]").argument("[id-or-url]").option("--url
     });
   }
 );
-link.command("rm").argument("[issue]").argument("[id-or-url]").option("--json", "emit JSON").action(
+link2.command("rm").argument("[issue]").argument("[id-or-url]").option("--json", "emit JSON").action(
   async (issue, idOrUrl, opts) => {
     await withConfig(opts.json === true, true, (ctx) => {
       if (issue === void 0 || idOrUrl === void 0) {

package/dist/{infraone-V3IKKVBG.js → infraone-7TAHY4RN.js}

@@ -8,7 +8,7 @@ import {
   refreshSpec,
   resolveConfig,
   transferFor
-} from "./chunk-W7BVOQQG.js";
+} from "./chunk-XA5UDNJI.js";
 import "./chunk-WSDFLMO6.js";
 import {
   CommandError,