@allocator-one/rcl 4.4.19

package/dist/evidence/original-run/decode.js

@@ -0,0 +1,208 @@
+export const MAX_JSON_DEPTH = 64;
+export const findingProsePath = /^(?:\/(?:findings|belowThresholdFindings)\/\d+|\/reviews\/\d+\/findings\/\d+)\/(?:title|description|suggestedFix)$/;
+const pointer = (parts) => '/' + parts.map(p => p.replace(/~/g, '~0').replace(/\//g, '~1')).join('/');
+const scalarToken = /(?:-?(?:0|[1-9]\d*)(?:\.\d+)?(?:[eE][+-]?\d+)?|true|false|null)/y;
+/** Compare decimal meanings without converting the original token to a float. */
+function decimalIdentity(token) {
+    const negative = token.startsWith('-');
+    const [mantissa, exponent = '0'] = (negative ? token.slice(1) : token).toLowerCase().split('e');
+    const [integer, fraction = ''] = mantissa.split('.');
+    const digits = (integer + fraction).replace(/^0+/, '');
+    if (!digits)
+        return negative ? '-0' : '0';
+    const significant = digits.replace(/0+$/, '');
+    const power = Number(exponent) - fraction.length + digits.length - significant.length;
+    if (!Number.isSafeInteger(power))
+        throw new Error('invalid_or_ambiguous_original_json');
+    return `${negative ? '-' : ''}${significant}e${power}`;
+}
+/** UTF-8 prefix lengths for the immutable source, computed once only when needed. */
+function utf8Offsets(text) {
+    const offsets = new Uint32Array(text.length + 1);
+    let bytes = 0;
+    for (let index = 0; index < text.length; index++) {
+        offsets[index] = bytes;
+        const unit = text.charCodeAt(index);
+        if (unit <= 0x7f)
+            bytes++;
+        else if (unit <= 0x7ff)
+            bytes += 2;
+        else if (unit >= 0xd800 && unit <= 0xdbff && text.charCodeAt(index + 1) >= 0xdc00 && text.charCodeAt(index + 1) <= 0xdfff) {
+            // Buffer.byteLength on a prefix ending between a valid pair encodes the
+            // detached high unit as U+FFFD; normal scanner offsets never land there.
+            offsets[index + 1] = bytes + 3;
+            bytes += 4;
+            index++;
+        }
+        else
+            bytes += 3;
+    }
+    offsets[text.length] = bytes;
+    return offsets;
+}
+/** Strict JSON with duplicate-key detection and explicit prose-only lone-surrogate notation. */
+export function decodeOriginalReport(text, options = {}) {
+    return decodeJSON(text, options, false);
+}
+/** Strict internal JSON, preserving retained strings verbatim. This is not an
+ * original report validator: every embedded original is separately interpreted
+ * under its own source policy before it can establish a recovery binding. */
+export function decodeRecoveryDocument(text) {
+    return decodeJSON(text, { exactNumbers: true }, true).value;
+}
+function decodeJSON(text, options, preserveStrings) {
+    if (options.originalProse !== undefined && options.originalProse !== 'control-code-units-v1')
+        throw new Error('unsupported_original_prose_mode');
+    let at = 0;
+    const transformations = [];
+    let sourceOffsets;
+    const fail = () => { throw new Error('invalid_or_ambiguous_original_json'); };
+    const whitespace = () => { while (/[\x20\t\r\n]/.test(text[at] ?? 'x'))
+        at++; };
+    function string(path, key = false) {
+        const start = at++;
+        if (text[start] !== '"')
+            return fail();
+        const offsets = new Map();
+        let units = 0;
+        while (at < text.length && text[at] !== '"') {
+            // Valid UTF-8 cannot contain a literal unpaired unit. Only \u escapes
+            // need source positions; avoid one allocation per prose character.
+            if ((text[at] === '\\' && (text[at + 1] === 'u' || 'bfnrt'.includes(text[at + 1] ?? ''))) || text.charCodeAt(at) === 0x7f)
+                offsets.set(units, at);
+            if (text[at] === '\\') {
+                at += text[at + 1] === 'u' ? 6 : 2;
+            }
+            else
+                at++;
+            units++;
+        }
+        if (text[at++] !== '"')
+            return fail();
+        let value;
+        try {
+            value = JSON.parse(text.slice(start, at));
+        }
+        catch {
+            return fail();
+        }
+        if (preserveStrings)
+            return value;
+        const pathText = pointer(path);
+        let result = '';
+        for (let i = 0; i < value.length; i++) {
+            const unit = value.charCodeAt(i);
+            const forbiddenControl = unit === 0 || (unit >= 1 && unit <= 8) || unit === 11 || unit === 12 ||
+                (unit >= 14 && unit <= 31) || unit === 127;
+            if (forbiddenControl) {
+                if (options.originalProse !== undefined) {
+                    if (key || !findingProsePath.test(pathText))
+                        throw new Error('unsupported_control_in_original');
+                    const source = offsets.get(i);
+                    if (source === undefined)
+                        throw new Error('unsupported_literal_control');
+                    sourceOffsets ??= utf8Offsets(text);
+                    const original_unit = unit.toString(16).padStart(4, '0').toUpperCase();
+                    const replacement = `\\u${original_unit}`;
+                    transformations.push({ version: 1, kind: 'control_code_unit', path: pathText, code_unit_offset: i,
+                        source_byte_offset: sourceOffsets[source], original_unit, replacement });
+                    result += replacement;
+                    continue;
+                }
+                if (unit === 0)
+                    throw new Error('unsupported_nul_in_original');
+                throw new Error('unsupported_control_in_original');
+            }
+            if (unit >= 0xd800 && unit <= 0xdbff && value.charCodeAt(i + 1) >= 0xdc00 && value.charCodeAt(i + 1) <= 0xdfff) {
+                result += value.slice(i, i + 2);
+                i++;
+                continue;
+            }
+            if (unit >= 0xd800 && unit <= 0xdfff) {
+                if (key || !findingProsePath.test(pathText))
+                    throw new Error('unsupported_structural_surrogate');
+                const hex = unit.toString(16).toUpperCase();
+                const replacement = `\\u${hex}`;
+                const source = offsets.get(i);
+                if (source === undefined)
+                    throw new Error('unsupported_literal_surrogate');
+                sourceOffsets ??= utf8Offsets(text);
+                transformations.push({ path: pathText, code_unit_offset: i, source_byte_offset: sourceOffsets[source], original_unit: hex, replacement });
+                result += replacement;
+            }
+            else
+                result += value[i];
+        }
+        return result;
+    }
+    function value(path, depth) {
+        if (depth > MAX_JSON_DEPTH)
+            throw new Error('original_json_too_deep');
+        whitespace();
+        if (text[at] === '"')
+            return string(path);
+        if (text[at] === '{') {
+            at++;
+            whitespace();
+            const out = Object.create(null);
+            if (text[at] === '}') {
+                at++;
+                return out;
+            }
+            for (;;) {
+                whitespace();
+                const key = string(path, true);
+                if (Object.hasOwn(out, key) || ['__proto__', 'constructor', 'prototype'].includes(key))
+                    return fail();
+                whitespace();
+                if (text[at++] !== ':')
+                    return fail();
+                out[key] = value([...path, key], depth + 1);
+                whitespace();
+                if (text[at] === '}') {
+                    at++;
+                    return out;
+                }
+                if (text[at++] !== ',')
+                    return fail();
+            }
+        }
+        if (text[at] === '[') {
+            at++;
+            whitespace();
+            const out = [];
+            if (text[at] === ']') {
+                at++;
+                return out;
+            }
+            for (;;) {
+                out.push(value([...path, String(out.length)], depth + 1));
+                whitespace();
+                if (text[at] === ']') {
+                    at++;
+                    return out;
+                }
+                if (text[at++] !== ',')
+                    return fail();
+            }
+        }
+        scalarToken.lastIndex = at;
+        const token = scalarToken.exec(text);
+        if (!token)
+            return fail();
+        at += token[0].length;
+        const parsed = JSON.parse(token[0]);
+        if (typeof parsed === 'number' && (!Number.isFinite(parsed) || Math.abs(parsed) > Number.MAX_SAFE_INTEGER))
+            return fail();
+        if (typeof parsed === 'number' && options.exactNumbers &&
+            decimalIdentity(token[0]) !== decimalIdentity(JSON.stringify(parsed)))
+            return fail();
+        return parsed;
+    }
+    const result = value([], 0);
+    whitespace();
+    if (at !== text.length)
+        return fail();
+    return { value: JSON.parse(JSON.stringify(result)), transformations };
+}
+//# sourceMappingURL=decode.js.map

package/dist/evidence/original-run/decode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode.js","sourceRoot":"","sources":["../../../src/evidence/original-run/decode.ts"],"names":[],"mappings":"AAgBA,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AACjC,MAAM,CAAC,MAAM,gBAAgB,GAAG,oHAAoH,CAAC;AACrJ,MAAM,OAAO,GAAG,CAAC,KAAe,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChH,MAAM,WAAW,GAAG,kEAAkE,CAAC;AAEvF,iFAAiF;AACjF,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,CAAC,QAAQ,EAAE,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChG,MAAM,CAAC,OAAO,EAAE,QAAQ,GAAG,EAAE,CAAC,GAAG,QAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,CAAC,OAAQ,GAAG,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IACtF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxF,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,IAAI,KAAK,EAAE,CAAC;AACzD,CAAC;AAED,qFAAqF;AACrF,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,IAAI,IAAI,IAAI;YAAE,KAAK,EAAE,CAAC;aACrB,IAAI,IAAI,IAAI,KAAK;YAAE,KAAK,IAAI,CAAC,CAAC;aAC9B,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;YAC1H,wEAAwE;YACxE,yEAAyE;YACzE,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YAC/B,KAAK,IAAI,CAAC,CAAC;YACX,KAAK,EAAE,CAAC;QACV,CAAC;;YAAM,KAAK,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;IAC7B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,UAAuC,EAAE;IAC1F,OAAO,UAAU,CAAC,IAAI,EAAC,OAAO,EAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED;;6EAE6E;AAC7E,MAAM,UAAU,sBAAsB,CAAC,IAAW;IAChD,OAAO,UAAU,CAAC,IAAI,EAAC,EAAC,YAAY,EAAC,IAAI,EAAC,EAAC,IAAI,CAAC,CAAC,KAAK,CAAC;AACzD,CAAC;AACD,SAAS,UAAU,CAAC,IAAW,EAAC,OAAmC,EAAC,eAAuB;IAEzF,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,uBAAuB;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACjJ,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,MAAM,eAAe,GAAkC,EAAE,CAAC;IAC1D,IAAI,aAAsC,CAAC;IAC3C,MAAM,IAAI,GAAG,GAAU,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,UAAU,GAAG,GAAG,EAAE,GAAG,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC;QAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAChF,SAAS,MAAM,CAAC,IAAc,EAAE,GAAG,GAAG,KAAK;QACzC,MAAM,KAAK,GAAG,EAAE,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5C,sEAAsE;YACtE,mEAAmE;YACnE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAClJ,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;gBAAC,EAAE,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;;gBACzD,EAAE,EAAE,CAAC;YACV,KAAK,EAAE,CAAC;QACV,CAAC;QACD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,EAAE,CAAC;QACtC,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAW,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,EAAE,CAAC;QAAC,CAAC;QACrF,IAAG,eAAe;YAAC,OAAO,KAAK,CAAC;QAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,gBAAgB,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE;gBAC3F,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,IAAI,IAAI,KAAK,GAAG,CAAC;YAC7C,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;oBACxC,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;oBAChG,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC9B,IAAI,MAAM,KAAK,SAAS;wBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;oBACzE,aAAa,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC;oBACpC,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;oBACvE,MAAM,WAAW,GAAG,MAAM,aAAa,EAAE,CAAC;oBAC1C,eAAe,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;wBAC/F,kBAAkB,EAAE,aAAa,CAAC,MAAM,CAAE,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;oBAC5E,MAAM,IAAI,WAAW,CAAC;oBACtB,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;gBAC/G,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,SAAS;YACjD,CAAC;YACD,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;gBACrC,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBACjG,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBAAC,MAAM,WAAW,GAAG,MAAM,GAAG,EAAE,CAAC;gBAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC9B,IAAI,MAAM,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBAC3E,aAAa,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC;gBACpC,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,EAAE,kBAAkB,EAAE,aAAa,CAAC,MAAM,CAAE,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC3I,MAAM,IAAI,WAAW,CAAC;YACxB,CAAC;;gBAAM,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,SAAS,KAAK,CAAC,IAAc,EAAE,KAAa;QAC1C,IAAI,KAAK,GAAG,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACtE,UAAU,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,EAAE,EAAE,CAAC;YAAC,UAAU,EAAE,CAAC;YAAC,MAAM,GAAG,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7E,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,EAAE,EAAE,CAAC;gBAAC,OAAO,GAAG,CAAC;YAAC,CAAC;YAC3C,SAAS,CAAC;gBACR,UAAU,EAAE,CAAC;gBAAC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC7C,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,OAAO,IAAI,EAAE,CAAC;gBACtG,UAAU,EAAE,CAAC;gBAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG;oBAAE,OAAO,IAAI,EAAE,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAAC,UAAU,EAAE,CAAC;gBAC1D,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;oBAAC,EAAE,EAAE,CAAC;oBAAC,OAAO,GAAG,CAAC;gBAAC,CAAC;gBAC3C,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG;oBAAE,OAAO,IAAI,EAAE,CAAC;YACxC,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,EAAE,EAAE,CAAC;YAAC,UAAU,EAAE,CAAC;YAAC,MAAM,GAAG,GAAc,EAAE,CAAC;YAC9C,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,EAAE,EAAE,CAAC;gBAAC,OAAO,GAAG,CAAC;YAAC,CAAC;YAC3C,SAAS,CAAC;gBACR,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;gBAAC,UAAU,EAAE,CAAC;gBACxE,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;oBAAC,EAAE,EAAE,CAAC;oBAAC,OAAO,GAAG,CAAC;gBAAC,CAAC;gBAC3C,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG;oBAAE,OAAO,IAAI,EAAE,CAAC;YACxC,CAAC;QACH,CAAC;QACD,WAAW,CAAC,SAAS,GAAG,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,EAAE,CAAC;QAAC,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACjD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAC1H,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,YAAY;YAClD,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QACzF,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAAC,UAAU,EAAE,CAAC;IAAC,IAAI,EAAE,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,EAAE,CAAC;IACjF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAY,EAAE,eAAe,EAAE,CAAC;AACnF,CAAC"}

package/dist/evidence/original-run/journal.d.ts

@@ -0,0 +1,31 @@
+export declare const MAX_RECOVERY_DOCUMENT_BYTES: number;
+export declare const MAX_RECOVERY_CHECKPOINT_BYTES: number;
+export declare const MAX_RECOVERY_CHECKPOINTS = 20000;
+export declare const MAX_RECOVERY_CHECKPOINT_TOTAL_BYTES: number;
+export declare function syncDirectory(path: string): Promise<void>;
+/** One byte representation for size checks, immutable writes and digests. */
+export declare function serializeRecoveryDocument(value: unknown, limit?: number): string;
+/** Exclusive named publication; a failed write is retained and never overwritten. */
+export declare function writeExclusive(path: string, value: unknown, limit?: number): Promise<void>;
+/** Preserve original bytes with the same exclusive, fsynced publication contract. */
+export declare function writeExclusiveBytes(path: string, bytes: string | Uint8Array): Promise<void>;
+export { withRecoveryLock } from './lock.js';
+export interface Journal {
+    append: (phase: string, data?: unknown) => Promise<void>;
+}
+export interface JournalCheckpoint {
+    operation_id: string;
+    manifest_sha256: string;
+    sequence: number;
+    previous_sha256: string;
+    phase: string;
+    recorded_at: string;
+    data: unknown;
+}
+export interface ReadableJournal extends Journal {
+    /** Local audit facts only; a remote acknowledgment still needs exact readback. */
+    checkpoints: () => JournalCheckpoint[];
+}
+/** Storage qualification is explicit; recovery callers retain the strict default. */
+/** Checkpoints are audit facts, never a substitute for fresh server readback. */
+export declare function openJournal(path: string, manifestSha: string, operation: string, mode: 'apply' | 'resume', beforeWrite?: (phase: string) => Promise<void>): Promise<ReadableJournal>;

package/dist/evidence/original-run/journal.js

@@ -0,0 +1,157 @@
+import { constants } from 'node:fs';
+import { lstat, mkdir, open, readdir, realpath } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { isDeepStrictEqual } from 'node:util';
+import { platformPath, readStable, sha256 } from '../../telemetry/recovery/files.js';
+import { inspectRecoveryDirectory } from './lock-path.js';
+// Prepared checkpoint data copies manifest subtrees at the same indentation,
+// except for the destination's extra level and the longer source field name.
+// Reserve 1 KiB beyond the manifest for those bytes and the bounded journal
+// wrapper (UUID, hashes, sequence, phase and timestamp); do not truncate audit.
+export const MAX_RECOVERY_DOCUMENT_BYTES = 8 * 1024 * 1024;
+export const MAX_RECOVERY_CHECKPOINT_BYTES = MAX_RECOVERY_DOCUMENT_BYTES + 1024;
+export const MAX_RECOVERY_CHECKPOINTS = 20_000;
+export const MAX_RECOVERY_CHECKPOINT_TOTAL_BYTES = 64 * 1024 * 1024;
+async function parentSafe(path) {
+    if (await realpath(dirname(path)) !== dirname(path))
+        throw new Error('symlink_directory');
+}
+export async function syncDirectory(path) {
+    const handle = await open(path, 'r');
+    try {
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+/** One byte representation for size checks, immutable writes and digests. */
+export function serializeRecoveryDocument(value, limit = Infinity) {
+    const text = JSON.stringify(value, null, 2) + '\n';
+    if (Buffer.byteLength(text, 'utf8') > limit)
+        throw new Error('recovery_document_too_large');
+    return text;
+}
+/** Exclusive named publication; a failed write is retained and never overwritten. */
+export async function writeExclusive(path, value, limit = Infinity) {
+    const text = serializeRecoveryDocument(value, limit);
+    await writeExclusiveBytes(path, text);
+}
+/** Preserve original bytes with the same exclusive, fsynced publication contract. */
+export async function writeExclusiveBytes(path, bytes) {
+    const pinned = typeof bytes === 'string' ? bytes : Buffer.from(bytes);
+    const file = platformPath(path);
+    await parentSafe(file);
+    const handle = await open(file, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY | constants.O_NOFOLLOW, 0o600);
+    try {
+        await handle.writeFile(pinned);
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+    await syncDirectory(dirname(file));
+}
+export { withRecoveryLock } from './lock.js';
+async function inspectJournalDirectory(path, privateRoot) {
+    try {
+        await inspectRecoveryDirectory(path, privateRoot);
+    }
+    catch (error) {
+        if (error instanceof Error && /^(unsafe|unsupported)_recovery_lock_/.test(error.message)) {
+            throw new Error(error.message.replace('_lock_', '_journal_'));
+        }
+        throw error;
+    }
+}
+/** Storage qualification is explicit; recovery callers retain the strict default. */
+/** Checkpoints are audit facts, never a substitute for fresh server readback. */
+export async function openJournal(path, manifestSha, operation, mode, beforeWrite) {
+    path = platformPath(path);
+    await parentSafe(path);
+    await inspectJournalDirectory(dirname(path), false);
+    if (mode === 'apply') {
+        await mkdir(path, { mode: 0o700 });
+        await syncDirectory(dirname(path));
+    }
+    else if (await realpath(path) !== path || !(await lstat(path)).isDirectory())
+        throw new Error('recovery_journal_unavailable');
+    await inspectJournalDirectory(path, true);
+    const directory = await lstat(path, { bigint: true });
+    const files = (await readdir(path)).sort();
+    if (files.some(n => !/^\d{8}\.json$/.test(n)))
+        throw new Error('unknown_recovery_journal_file');
+    if (files.length > MAX_RECOVERY_CHECKPOINTS)
+        throw new Error('recovery_journal_checkpoint_limit');
+    let sequence = 0;
+    let previous = manifestSha;
+    let torn = [];
+    const checkpoints = [];
+    let retainedBytes = 0;
+    for (const name of files) {
+        if (name !== `${String(++sequence).padStart(8, '0')}.json`)
+            throw new Error('recovery_journal_sequence_gap');
+        // A prior write may have reached the filesystem before its flush failed.
+        // Require a current same-descriptor synchronization before exposing bytes;
+        // it does not recreate the prior descriptor's writeback-error history.
+        const checkpointPath = join(path, name);
+        const checkpoint = await lstat(checkpointPath, { bigint: true });
+        if (checkpoint.size > BigInt(MAX_RECOVERY_CHECKPOINT_TOTAL_BYTES - retainedBytes))
+            throw new Error('recovery_journal_checkpoint_limit');
+        const snapshot = await readStable(checkpointPath, MAX_RECOVERY_CHECKPOINT_BYTES, { sync: true });
+        if (snapshot.raw.byteLength > MAX_RECOVERY_CHECKPOINT_TOTAL_BYTES - retainedBytes)
+            throw new Error('recovery_journal_checkpoint_limit');
+        retainedBytes += snapshot.raw.byteLength;
+        let record;
+        try {
+            record = JSON.parse(snapshot.text);
+        }
+        catch {
+            // Only an explicitly hash-bound acknowledgment can bridge interrupted
+            // appends. That acknowledgment remains traversable on every later resume.
+            torn.push({ file: name, sha256: snapshot.sha256 });
+            previous = snapshot.sha256;
+            continue;
+        }
+        if (!record || typeof record !== 'object' || Array.isArray(record))
+            throw new Error('invalid_recovery_checkpoint');
+        if (record.operation_id !== operation || record.manifest_sha256 !== manifestSha || record.sequence !== sequence || record.previous_sha256 !== previous)
+            throw new Error('recovery_journal_binding_conflict');
+        if (typeof record.phase !== 'string' || !/^[a-z][a-z0-9_]{0,127}$/.test(record.phase) ||
+            typeof record.recorded_at !== 'string' || !Number.isFinite(Date.parse(record.recorded_at)) ||
+            !Object.hasOwn(record, 'data'))
+            throw new Error('invalid_recovery_checkpoint');
+        if (torn.length && (record.phase !== 'interrupted_checkpoints_retained' || !isDeepStrictEqual(record.data, { files: torn })))
+            throw new Error('corrupt_recovery_journal');
+        torn = [];
+        previous = snapshot.sha256;
+        checkpoints.push(record);
+    }
+    await syncDirectory(path);
+    await syncDirectory(dirname(path));
+    const journal = { checkpoints: () => structuredClone(checkpoints), append: async (phase, data = null) => {
+            if (typeof phase !== 'string' || !/^[a-z][a-z0-9_]{0,127}$/.test(phase))
+                throw new Error('invalid_recovery_checkpoint');
+            if (sequence >= MAX_RECOVERY_CHECKPOINTS)
+                throw new Error('recovery_journal_checkpoint_limit');
+            const retainedData = JSON.parse(JSON.stringify(data));
+            await beforeWrite?.(phase);
+            const current = await lstat(path, { bigint: true });
+            if (!current.isDirectory() || current.dev !== directory.dev || current.ino !== directory.ino)
+                throw new Error('recovery_journal_replaced');
+            const record = { operation_id: operation, manifest_sha256: manifestSha, sequence: sequence + 1, previous_sha256: previous, phase, recorded_at: new Date().toISOString(), data: retainedData };
+            const name = join(path, `${String(sequence + 1).padStart(8, '0')}.json`);
+            const bytes = serializeRecoveryDocument(record, MAX_RECOVERY_CHECKPOINT_BYTES);
+            if (Buffer.byteLength(bytes, 'utf8') > MAX_RECOVERY_CHECKPOINT_TOTAL_BYTES - retainedBytes)
+                throw new Error('recovery_journal_checkpoint_limit');
+            await writeExclusiveBytes(name, bytes);
+            sequence++;
+            retainedBytes += Buffer.byteLength(bytes, 'utf8');
+            previous = sha256(bytes);
+            checkpoints.push(record);
+        } };
+    if (torn.length)
+        await journal.append('interrupted_checkpoints_retained', { files: torn });
+    return journal;
+}
+//# sourceMappingURL=journal.js.map

package/dist/evidence/original-run/journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../../src/evidence/original-run/journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,mCAAmC,CAAC;AACrF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,gFAAgF;AAChF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3D,MAAM,CAAC,MAAM,6BAA6B,GAAG,2BAA2B,GAAG,IAAI,CAAC;AAChF,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,MAAM,CAAC,MAAM,mCAAmC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEpE,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAC5F,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAAC,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACtG,CAAC;AACD,6EAA6E;AAC7E,MAAM,UAAU,yBAAyB,CAAC,KAAc,EAAE,KAAK,GAAG,QAAQ;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACnD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC;AACd,CAAC;AACD,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,KAAc,EAAE,KAAK,GAAG,QAAQ;IACjF,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC;AACD,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAA0B;IAChF,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACzH,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IAC9F,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AACD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,KAAK,UAAU,uBAAuB,CAAC,IAAY,EAAE,WAAoB;IACvE,IAAI,CAAC;QAAC,MAAM,wBAAwB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAAC,CAAC;IAC1D,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,KAAK,IAAI,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACzF,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAcD,qFAAqF;AACrF,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,WAAmB,EAAE,SAAiB,EAAE,IAAwB,EAAE,WAA8C;IAC9J,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;SAC5F,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9H,MAAM,uBAAuB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAChG,IAAI,KAAK,CAAC,MAAM,GAAG,wBAAwB;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAClG,IAAI,QAAQ,GAAG,CAAC,CAAC;IAAC,IAAI,QAAQ,GAAG,WAAW,CAAC;IAC7C,IAAI,IAAI,GAA4C,EAAE,CAAC;IACvD,MAAM,WAAW,GAAwB,EAAE,CAAC;IAC5C,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,GAAG,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAC,GAAG,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC5G,yEAAyE;QACzE,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,UAAU,CAAC,IAAI,GAAG,MAAM,CAAC,mCAAmC,GAAG,aAAa,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACxI,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,cAAc,EAAE,6BAA6B,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjG,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,GAAG,mCAAmC,GAAG,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACxI,aAAa,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;QACzC,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAA4B,CAAC;QAAC,CAAC;QACtE,MAAM,CAAC;YACL,sEAAsE;YACtE,0EAA0E;YAC1E,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACnD,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;YAAC,SAAS;QACvC,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnH,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,eAAe,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC7M,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACjF,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1F,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnF,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,kCAAkC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC1K,IAAI,GAAG,EAAE,CAAC;QACV,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC3B,WAAW,CAAC,IAAI,CAAC,MAAsC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAoB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,IAAI,EAAE,EAAE;YACvH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACxH,IAAI,QAAQ,IAAI,wBAAwB;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAC/F,MAAM,YAAY,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/D,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC3I,MAAM,MAAM,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAC9L,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,yBAAyB,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;YAC/E,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,mCAAmC,GAAG,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACjJ,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAC,QAAQ,EAAE,CAAC;YACnD,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAClD,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACzB,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC,EAAE,CAAC;IACJ,IAAI,IAAI,CAAC,MAAM;QAAE,MAAM,OAAO,CAAC,MAAM,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/evidence/original-run/lock-path.d.ts

@@ -0,0 +1,17 @@
+interface DirectoryMetadata {
+    uid: number;
+    mode: number;
+    isDirectory: () => boolean;
+    isSymbolicLink: () => boolean;
+}
+export declare function checkLockDirectory(info: DirectoryMetadata, uid: number, privateRoot: boolean): void;
+/** Darwin ACL allow entries can grant access despite mode 0700. Deny-only ACLs are safe. */
+export declare function checkDarwinLockACL(output: string): void;
+/** Match path-bound statfs information from df, including firmlink/case aliases. */
+export declare function checkDarwinLockMount(output: string, filesystemOutput: string): void;
+export declare function checkLinuxLockFilesystem(type: bigint): void;
+/** Inspect existing recovery storage without creating or adopting missing state. */
+export declare function inspectRecoveryDirectory(input: string, privateRoot: boolean): Promise<string>;
+/** Validate before creating children, then recheck after concurrent mkdir. */
+export declare function prepareLockRoot(input: string): Promise<string>;
+export {};

package/dist/evidence/original-run/lock-path.js

@@ -0,0 +1,116 @@
+import { lstat, mkdir } from 'node:fs/promises';
+import * as filesystem from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { platformPath } from '../../telemetry/recovery/files.js';
+import { lockSystemCommand } from './lock-scope.js';
+export function checkLockDirectory(info, uid, privateRoot) {
+    const mode = info.mode & 0o7777;
+    if (!info.isDirectory() || info.isSymbolicLink() ||
+        (privateRoot ? info.uid !== uid || mode !== 0o700 :
+            (info.uid !== 0 && info.uid !== uid) || ((mode & 0o022) !== 0 && !(info.uid === 0 && (mode & 0o1000) !== 0)))) {
+        throw new Error(privateRoot ? 'unsafe_recovery_lock_root' : 'unsafe_recovery_lock_ancestor');
+    }
+}
+/** Darwin ACL allow entries can grant access despite mode 0700. Deny-only ACLs are safe. */
+export function checkDarwinLockACL(output) {
+    const [header, ...entries] = output.trimEnd().split('\n');
+    if (!/^d[rwxstST-]{9}[+@ ]/.test(header ?? '') ||
+        entries.some(line => !/^\s*\d+: .+ deny [a-z_,]+$/.test(line)) ||
+        (header[10] === '+' && entries.length === 0))
+        throw new Error('unsafe_recovery_lock_acl');
+}
+/** Match path-bound statfs information from df, including firmlink/case aliases. */
+export function checkDarwinLockMount(output, filesystemOutput) {
+    let filesystems;
+    try {
+        filesystems = JSON.parse(filesystemOutput)?.['storage-system-information']?.filesystem;
+    }
+    catch {
+        throw new Error('unsupported_recovery_lock_filesystem');
+    }
+    if (!Array.isArray(filesystems) || filesystems.length !== 1 ||
+        typeof filesystems[0]?.name !== 'string' || !filesystems[0].name || /[\r\n\0]/.test(filesystems[0].name) ||
+        typeof filesystems[0]?.['mounted-on'] !== 'string' || !filesystems[0]['mounted-on'].startsWith('/') ||
+        /[\r\n\0]/.test(filesystems[0]['mounted-on']))
+        throw new Error('unsupported_recovery_lock_filesystem');
+    const filesystem = filesystems[0];
+    let selected;
+    for (const line of output.trimEnd().split('\n')) {
+        if (line.indexOf(' on ') !== line.lastIndexOf(' on '))
+            throw new Error('unsupported_recovery_lock_filesystem');
+        const match = /^(.+) on (\/.*) \(([^\n]+)\)$/.exec(line);
+        if (!match)
+            throw new Error('unsupported_recovery_lock_filesystem');
+        if (match[1] === filesystem.name && match[2] === filesystem['mounted-on']) {
+            if (selected)
+                throw new Error('unsupported_recovery_lock_filesystem');
+            selected = match[3].split(', ');
+        }
+    }
+    if (!selected || !['apfs', 'hfs'].includes(selected[0]) || !selected.includes('local') || selected.includes('noowners')) {
+        throw new Error('unsupported_recovery_lock_filesystem');
+    }
+}
+export function checkLinuxLockFilesystem(type) {
+    // ext2/3/4, tmpfs, XFS and Btrfs. Network, FUSE, overlay and unknown storage
+    // need separate qualification; a PID namespace match does not qualify them.
+    if (![0xef53n, 0x01021994n, 0x58465342n, 0x9123683en].includes(type))
+        throw new Error('unsupported_recovery_lock_filesystem');
+}
+/** Inspect existing recovery storage without creating or adopting missing state. */
+export function inspectRecoveryDirectory(input, privateRoot) {
+    return recoveryDirectory(input, privateRoot, false);
+}
+/** Validate before creating children, then recheck after concurrent mkdir. */
+export function prepareLockRoot(input) {
+    return recoveryDirectory(input, true, true);
+}
+async function recoveryDirectory(input, privateRoot, createMissing) {
+    const path = platformPath(input);
+    const uid = process.geteuid?.();
+    if (uid === undefined || /[\r\n]/.test(path))
+        throw new Error('unsafe_recovery_lock_root');
+    const chain = [];
+    for (let current = path;; current = dirname(current)) {
+        chain.unshift(current);
+        if (dirname(current) === current)
+            break;
+    }
+    for (const current of chain) {
+        let info;
+        try {
+            info = await lstat(current);
+        }
+        catch (error) {
+            if (!createMissing || error.code !== 'ENOENT')
+                throw error;
+            try {
+                await mkdir(current, { mode: 0o700 });
+            }
+            catch (e) {
+                if (e.code !== 'EEXIST')
+                    throw e;
+            }
+            info = await lstat(current);
+        }
+        checkLockDirectory(info, uid, privateRoot && current === path);
+        if (process.platform === 'darwin') {
+            checkDarwinLockACL(await lockSystemCommand('/bin/ls', ['-lde', current]));
+        }
+    }
+    if (process.platform === 'darwin') {
+        try {
+            const filesystem = await lockSystemCommand('/bin/df', ['--libxo', 'json', '-P', '-k', path]);
+            checkDarwinLockMount(await lockSystemCommand('/sbin/mount', []), filesystem);
+        }
+        catch {
+            throw new Error('unsupported_recovery_lock_filesystem');
+        }
+    }
+    else if (process.platform === 'linux' && typeof filesystem.statfs === 'function')
+        checkLinuxLockFilesystem((await filesystem.statfs(path, { bigint: true })).type);
+    else
+        throw new Error('unsupported_recovery_lock_filesystem');
+    return path;
+}
+//# sourceMappingURL=lock-path.js.map

package/dist/evidence/original-run/lock-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock-path.js","sourceRoot":"","sources":["../../../src/evidence/original-run/lock-path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAIpD,MAAM,UAAU,kBAAkB,CAAC,IAAuB,EAAE,GAAW,EAAE,WAAoB;IAC3F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC;IAChC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAC5C,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,IAAI,KAAK,KAAK,CAAC,CAAC;YACjD,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpH,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAChG,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,gBAAwB;IAC3E,IAAI,WAAW,CAAC;IAChB,IAAI,CAAC;QAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,4BAA4B,CAAC,EAAE,UAAU,CAAC;IAAC,CAAC;IAC/F,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAAC,CAAC;IAClE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QACvD,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxG,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QACnG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC3G,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,QAA8B,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC/G,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACpE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1E,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACtE,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACzH,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,6EAA6E;IAC7E,4EAA4E;IAC5E,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;AAChI,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,WAAoB;IAC1E,OAAO,iBAAiB,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,KAAa,EAAE,WAAoB,EAAE,aAAsB;IAC1F,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IAClE,IAAI,GAAG,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,OAAO,GAAG,IAAI,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO;YAAE,MAAM;IAAC,CAAC;IAC1H,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QACpC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,aAAa,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACtF,IAAI,CAAC;gBAAC,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,CAAC;YAC9C,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YAC1E,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,kBAAkB,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,kBAAkB,CAAC,MAAM,iBAAiB,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAC7F,oBAAoB,CAAC,MAAM,iBAAiB,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAAC,CAAC;IACtE,CAAC;SACI,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,UAAU,CAAC,MAAM,KAAK,UAAU;QAAE,wBAAwB,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;;QAC9J,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/evidence/original-run/lock-scope.d.ts

@@ -0,0 +1,21 @@
+export declare const LOCK_UUID: RegExp;
+export interface LockScope {
+    platform: 'darwin' | 'linux';
+    boot: string;
+    namespace: string;
+}
+/** Absolute system utilities only; no shell, caller environment or unbounded output. */
+export declare function lockSystemCommand(file: string, args: string[]): Promise<string>;
+interface ScopeIO {
+    platform: string;
+    command: typeof lockSystemCommand;
+    boot: () => Promise<string>;
+    namespace: () => Promise<{
+        dev: bigint;
+        ino: bigint;
+    }>;
+}
+export declare function validLockScope(value: unknown): value is LockScope;
+/** PID absence proves death only on this kernel boot and PID namespace. */
+export declare function localLockScope(overrides?: Partial<ScopeIO>): Promise<LockScope>;
+export {};