@allocator-one/rcl 4.5.8 → 4.5.12

package/dist/evidence/claim-recovery/public-manifest.d.ts

@@ -0,0 +1,114 @@
+import { z } from 'zod';
+import type { RecoveryMaterial } from './validation/materials.js';
+import type { ClaimHistoryContent } from './carrier-inventory.js';
+import type { ClaimSplitInput } from '../claim-split.js';
+import type { ObligationTransferInput, ClaimDispositionInput } from './validation/occurrence-types.js';
+import type { StoredEventReceipt, EventReceiptScope } from '../event-receipts.js';
+export type Preparation = ClaimSplitInput | ObligationTransferInput | ClaimDispositionInput;
+export interface AdoptedStage {
+    validationStage: Manifest['stages'][number];
+    id: string;
+    preparation: Preparation;
+    eventJson: string;
+    receipt: StoredEventReceipt;
+    history: ClaimHistoryContent;
+    createdAt: string;
+}
+export interface ClaimAdoption {
+    version: 1;
+    depth: number;
+    previousManifest: string;
+    previousManifestSha256: string;
+    pins: Array<{
+        path: string;
+        sha256: string | null;
+    }>;
+    proofRoots: Array<{
+        path: string;
+        pool: string;
+    }>;
+    accepted: AdoptedStage[];
+    replacements: Array<{
+        oldId: string;
+        newId: string;
+        scope: EventReceiptScope;
+    }>;
+}
+export declare const manifestSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"rcl-public-claim-recovery">;
+    version: z.ZodUnion<readonly [z.ZodLiteral<2>, z.ZodLiteral<3>]>;
+    operationId: z.ZodString;
+    createdAt: z.ZodString;
+    rclVersion: z.ZodString;
+    gitCommonDir: z.ZodString;
+    selection: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        action: z.ZodDefault<z.ZodEnum<{
+            split: "split";
+            disposition: "disposition";
+            refresh: "refresh";
+        }>>;
+        source: z.ZodObject<{
+            scope: z.ZodObject<{
+                base_url: z.ZodString;
+                org_id: z.ZodString;
+                run_id: z.ZodString;
+                repo: z.ZodString;
+                pr_number: z.ZodNumber;
+            }, z.core.$strict>;
+            target: z.ZodString;
+            round: z.ZodNumber;
+            headSha: z.ZodString;
+            reportSha256: z.ZodString;
+        }, z.core.$strict>;
+        findingRef: z.ZodString;
+        previousIdentity: z.ZodString;
+        identity: z.ZodString;
+        descriptor: z.ZodObject<{
+            version: z.ZodLiteral<1>;
+            operation: z.ZodString;
+            invariant: z.ZodString;
+            evidence: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>;
+        reason: z.ZodString;
+        disposition: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodEnum<{
+                preserved: "preserved";
+                fresh: "fresh";
+            }>;
+            verdict: z.ZodEnum<{
+                fixed: "fixed";
+                dismissed: "dismissed";
+            }>;
+            severity: z.ZodEnum<{
+                critical: "critical";
+                important: "important";
+                minor: "minor";
+                nitpick: "nitpick";
+            }>;
+            reason: z.ZodString;
+            originalVerdictEventId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    actorUserId: z.ZodString;
+    materialSha256: z.ZodString;
+    nativeSha256: z.ZodString;
+    stages: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodEnum<{
+            split: "split";
+            disposition: "disposition";
+            transfer: "transfer";
+        }>;
+        carrierIndex: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    preview: z.ZodUnknown;
+}, z.core.$strict>;
+export type Manifest = z.infer<typeof manifestSchema>;
+export interface Material {
+    adoption?: ClaimAdoption;
+    recoveryMaterials: RecoveryMaterial[];
+    nativeJson: string;
+    nativeSourceJsons: string[];
+    history: ClaimHistoryContent;
+}

package/dist/evidence/claim-recovery/public-manifest.js

@@ -0,0 +1,11 @@
+import { z } from 'zod';
+import { uuidSchema } from '../original-run/source.js';
+import { publicClaimSelectionSchema } from './public-model.js';
+export const manifestSchema = z.object({
+    kind: z.literal('rcl-public-claim-recovery'), version: z.union([z.literal(2), z.literal(3)]), operationId: uuidSchema,
+    createdAt: z.string(), rclVersion: z.string(), gitCommonDir: z.string(), selection: publicClaimSelectionSchema,
+    actorUserId: uuidSchema, materialSha256: z.string().regex(/^[a-f0-9]{64}$/), nativeSha256: z.string().regex(/^[a-f0-9]{64}$/),
+    stages: z.array(z.object({ id: uuidSchema, kind: z.enum(['split', 'transfer', 'disposition']), carrierIndex: z.number().int().nonnegative().optional() }).strict()).max(2002),
+    preview: z.unknown(),
+}).strict();
+//# sourceMappingURL=public-manifest.js.map

package/dist/evidence/claim-recovery/public-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-manifest.js","sourceRoot":"","sources":["../../../src/evidence/claim-recovery/public-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAmB/D,MAAM,CAAC,MAAM,cAAc,GAAC,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,EAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAC,WAAW,EAAE,UAAU;IAClH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,EAAC,SAAS,EAAE,0BAA0B;IAC3G,WAAW,EAAE,UAAU,EAAC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC3H,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAC,UAAU,EAAC,aAAa,CAAC,CAAC,EAAC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACzK,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/evidence/claim-recovery/public-model.d.ts

@@ -0,0 +1,85 @@
+import { z } from 'zod';
+import type { ClaimHistoryContent } from './carrier-inventory.js';
+import type { OccurrenceSource, OccurrenceContext } from './validation/occurrence-types.js';
+import type { CarrierSourceInventory, OccurrenceCarrierSelector, OccurrenceRunSelector } from './validation/carrier-types.js';
+import type { StoredEventReceipt } from '../event-receipts.js';
+export declare const sourceSelectionSchema: z.ZodObject<{
+    scope: z.ZodObject<{
+        base_url: z.ZodString;
+        org_id: z.ZodString;
+        run_id: z.ZodString;
+        repo: z.ZodString;
+        pr_number: z.ZodNumber;
+    }, z.core.$strict>;
+    target: z.ZodString;
+    round: z.ZodNumber;
+    headSha: z.ZodString;
+    reportSha256: z.ZodString;
+}, z.core.$strict>;
+export declare const publicClaimSelectionSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    action: z.ZodDefault<z.ZodEnum<{
+        split: "split";
+        disposition: "disposition";
+        refresh: "refresh";
+    }>>;
+    source: z.ZodObject<{
+        scope: z.ZodObject<{
+            base_url: z.ZodString;
+            org_id: z.ZodString;
+            run_id: z.ZodString;
+            repo: z.ZodString;
+            pr_number: z.ZodNumber;
+        }, z.core.$strict>;
+        target: z.ZodString;
+        round: z.ZodNumber;
+        headSha: z.ZodString;
+        reportSha256: z.ZodString;
+    }, z.core.$strict>;
+    findingRef: z.ZodString;
+    previousIdentity: z.ZodString;
+    identity: z.ZodString;
+    descriptor: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        operation: z.ZodString;
+        invariant: z.ZodString;
+        evidence: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>;
+    reason: z.ZodString;
+    disposition: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodEnum<{
+            preserved: "preserved";
+            fresh: "fresh";
+        }>;
+        verdict: z.ZodEnum<{
+            fixed: "fixed";
+            dismissed: "dismissed";
+        }>;
+        severity: z.ZodEnum<{
+            critical: "critical";
+            important: "important";
+            minor: "minor";
+            nitpick: "nitpick";
+        }>;
+        reason: z.ZodString;
+        originalVerdictEventId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type PublicClaimSelection = z.infer<typeof publicClaimSelectionSchema>;
+export declare function runSelector(selection: OccurrenceRunSelector): OccurrenceRunSelector;
+export declare function historySource(content: ClaimHistoryContent, selection: OccurrenceRunSelector): OccurrenceSource;
+export declare function historyContext(content: ClaimHistoryContent, selection: OccurrenceRunSelector): OccurrenceContext;
+export declare function claimRunHistory(content: ClaimHistoryContent, selection: OccurrenceRunSelector): ClaimHistoryContent['histories'][number];
+export declare function claimCarriers(content: ClaimHistoryContent, selection: PublicClaimSelection): OccurrenceCarrierSelector[];
+/** Own planned receipts may extend the preview; any other change needs a new
+ * operator-reviewed preview. Comparing complete material prevents a newer
+ * classification/correction from silently changing an original selector. */
+export declare function assertHistoryExtension(before: ClaimHistoryContent, after: ClaimHistoryContent, owned: Map<string, string>): void;
+/** Only exact owned split receipts may explain changes to a saved source view.
+ * Explicit adoption uses the same bound projection while separately reviewing
+ * additive foreign history; it never discards original or derived fields. */
+export declare function assertOwnedSplitSourceExtension(source: CarrierSourceInventory, current: CarrierSourceInventory | undefined, acceptedSplits: StoredEventReceipt[], owned: Map<string, string>, actor: string): void;
+export declare function uniqueReceipts(rows: StoredEventReceipt[]): StoredEventReceipt[];
+/** Detect occupied destinations in the authenticated read scope. The server's
+ * transaction remains authoritative for histories outside this target. */
+export declare function assertUnusedClaimIdentity(content: ClaimHistoryContent, identity: string): void;

package/dist/evidence/claim-recovery/public-model.js

@@ -0,0 +1,177 @@
+import { z } from 'zod';
+import { isDeepStrictEqual } from 'node:util';
+import { claimDescriptorSchema } from '../../consensus/claim-identity.js';
+import { uuidSchema } from './validation/primitives.js';
+import { validateOccurrenceSource } from './validation/occurrence-source.js';
+import { matchesPreparedEventReceipt } from '../event-receipts.js';
+import { object } from './validation/primitives.js';
+const key = z.string().regex(/^[a-f0-9]{16}$/);
+export const sourceSelectionSchema = z.object({
+    scope: z.object({ base_url: z.string(), org_id: uuidSchema, run_id: uuidSchema, repo: z.string(), pr_number: z.number().int().positive() }).strict(),
+    target: z.string().min(1).max(500), round: z.number().int().positive(), headSha: z.string().regex(/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/),
+    reportSha256: z.string().regex(/^[a-f0-9]{64}$/),
+}).strict();
+export const publicClaimSelectionSchema = z.object({
+    version: z.literal(1), action: z.enum(['split', 'disposition', 'refresh']).default('split'), source: sourceSelectionSchema, findingRef: z.string().regex(/^f\d{3,}$/),
+    previousIdentity: key, identity: key, descriptor: claimDescriptorSchema, reason: z.string().min(1),
+    disposition: z.object({
+        mode: z.enum(['fresh', 'preserved']), verdict: z.enum(['fixed', 'dismissed']),
+        severity: z.enum(['critical', 'important', 'minor', 'nitpick']), reason: z.string().min(1), originalVerdictEventId: uuidSchema.optional()
+    }).strict().optional(),
+}).strict();
+export function runSelector(selection) {
+    const { scope, target, round, headSha, reportSha256 } = selection;
+    return { scope, target, round, headSha, reportSha256 };
+}
+export function historySource(content, selection) {
+    selection = runSelector(selection);
+    const rows = content.sources.filter(s => isDeepStrictEqual(s.selector, selection));
+    if (rows.length !== 1)
+        throw new Error('claim_source_selection_conflict');
+    const row = rows[0];
+    if (!row.reportJson || !row.storedRun || row.classifications?.length !== 1 || !row.corrections || !row.correctionIds ||
+        !isDeepStrictEqual([...row.correctionIds].sort(), row.corrections.map(r => r.id).sort()))
+        throw new Error('claim_source_material_unavailable');
+    const source = { scope: selection.scope, reportJson: row.reportJson, storedRun: row.storedRun, classification: row.classifications[0], corrections: row.corrections };
+    validateOccurrenceSource(source);
+    return source;
+}
+export function historyContext(content, selection) {
+    const row = claimRunHistory(content, selection);
+    return { ...runSelector(selection), actorUserId: content.actorUserId, eventSequence: row.eventSequence };
+}
+export function claimRunHistory(content, selection) {
+    const rows = content.histories.filter(h => h.runId === selection.scope.run_id);
+    if (rows.length !== 1)
+        throw new Error('claim_context_unavailable');
+    return rows[0];
+}
+export function claimCarriers(content, selection) {
+    const carriers = [];
+    for (const row of content.sources) {
+        // Missing/ambiguous sources stay in the complete inventory as residuals;
+        // they never manufacture a transferable carrier.
+        let source;
+        try {
+            source = historySource(content, row.selector);
+        }
+        catch {
+            continue;
+        }
+        const valid = validateOccurrenceSource(source);
+        if (row.selector.scope.run_id === selection.source.scope.run_id && valid.members.some(m => m.ref === selection.findingRef && m.identity === selection.previousIdentity && !m.unresolvedReason)) {
+            carriers.push({ ...row.selector, kind: 'classified_group', classificationId: source.classification.id, identity: selection.previousIdentity });
+        }
+        const payload = source.classification.payload;
+        if (payload.classification_version === 1 && Array.isArray(payload.legacy_pending_identities) &&
+            payload.legacy_pending_identities.includes(selection.previousIdentity) && row.selector.round >= selection.source.round) {
+            carriers.push({ ...row.selector, kind: 'legacy_pending', classificationId: source.classification.id, identity: selection.previousIdentity });
+        }
+    }
+    return carriers.sort((a, b) => JSON.stringify(a).localeCompare(JSON.stringify(b)));
+}
+/** Own planned receipts may extend the preview; any other change needs a new
+ * operator-reviewed preview. Comparing complete material prevents a newer
+ * classification/correction from silently changing an original selector. */
+export function assertHistoryExtension(before, after, owned) {
+    if (before.actorUserId !== after.actorUserId || before.sources.length !== after.sources.length || before.histories.length !== after.histories.length)
+        throw new Error('claim_history_changed_since_preview');
+    const acceptedSplits = [];
+    for (const old of before.histories) {
+        const current = after.histories.find(h => h.runId === old.runId);
+        if (!current || current.eventSequence < old.eventSequence)
+            throw new Error('claim_history_changed_since_preview');
+        const currentReceiptsById = new Map();
+        for (const receipt of current.receipts)
+            if (!currentReceiptsById.has(receipt.id))
+                currentReceiptsById.set(receipt.id, receipt);
+        const oldReceiptIds = new Set(old.receipts.map(receipt => receipt.id));
+        for (const receipt of old.receipts)
+            if (!isDeepStrictEqual(receipt, currentReceiptsById.get(receipt.id)))
+                throw new Error('claim_history_changed_since_preview');
+        const extra = current.receipts.filter(receipt => !oldReceiptIds.has(receipt.id));
+        if (extra.some(r => !owned.has(r.id)))
+            throw new Error('claim_history_changed_since_preview');
+        const sources = before.sources.filter(source => source.selector.scope.run_id === old.runId);
+        for (const receipt of extra) {
+            if (sources.length !== 1 || !matchesPreparedEventReceipt(receipt, owned.get(receipt.id), sources[0].selector.scope, before.actorUserId))
+                throw new Error('claim_receipt_conflict');
+            if (receipt.kind === 'finding_claim_split')
+                acceptedSplits.push(receipt);
+        }
+        if (current.eventSequence !== Math.max(old.eventSequence, ...extra.map(r => r.sequence)))
+            throw new Error('claim_sequence_changed_since_preview');
+    }
+    for (const [index, source] of before.sources.entries()) {
+        assertOwnedSplitSourceExtension(source, after.sources[index], acceptedSplits, owned, before.actorUserId);
+    }
+}
+/** Only exact owned split receipts may explain changes to a saved source view.
+ * Explicit adoption uses the same bound projection while separately reviewing
+ * additive foreign history; it never discards original or derived fields. */
+export function assertOwnedSplitSourceExtension(source, current, acceptedSplits, owned, actor) {
+    const expected = structuredClone(source);
+    for (const receipt of acceptedSplits.filter(r => r.kind === 'finding_claim_split' && r.run_id === source.selector.scope.run_id)) {
+        const event = owned.get(receipt.id);
+        if (!event || !matchesPreparedEventReceipt(receipt, event, source.selector.scope, actor))
+            throw new Error('claim_receipt_conflict');
+        const payload = receipt.payload;
+        if (receipt.converge_target !== source.selector.target || receipt.round !== source.selector.round ||
+            payload.report_json_sha256 !== source.selector.reportSha256 || !Array.isArray(expected.storedRun?.findings))
+            throw new Error('claim_history_changed_since_preview');
+        const findings = expected.storedRun.findings.filter(f => object(f) && f.ref === payload.finding_ref);
+        if (findings.length !== 1)
+            throw new Error('claim_history_changed_since_preview');
+        // The backend projects these two fields from the immutable split receipt.
+        // Never discard derived fields: require their complete expected values,
+        // retaining strict equality for every original field, artifact and receipt.
+        Object.assign(findings[0], {
+            claim_identity: payload.matched_identity,
+            identity_provenance: {
+                source: 'semantic_split', event_id: receipt.id, actor_user_id: receipt.actor_user_id,
+                reason: payload.reason, previous_identity: payload.previous_identity,
+                report_json_sha256: payload.report_json_sha256, claim_descriptor: payload.claim_descriptor,
+                native_evidence: payload.native_evidence, source_event_ids: payload.source_event_ids,
+                received_at: receipt.received_at
+            }
+        });
+        // Accepted splits reserve an unused destination. FindingVerdicts now
+        // requires that claim's own run/round verdict; the old co-key verdict
+        // cannot follow it. Other kinds of verdict changes remain unexplained.
+        if (Object.hasOwn(findings[0], 'verdict'))
+            findings[0].verdict = null;
+    }
+    if (!isDeepStrictEqual(expected, current))
+        throw new Error('claim_history_changed_since_preview');
+}
+export function uniqueReceipts(rows) {
+    const result = new Map();
+    for (const row of rows) {
+        const old = result.get(row.id);
+        if (old && !isDeepStrictEqual(old, row))
+            throw new Error('claim_receipt_conflict');
+        result.set(row.id, row);
+    }
+    return [...result.values()];
+}
+/** Detect occupied destinations in the authenticated read scope. The server's
+ * transaction remains authoritative for histories outside this target. */
+export function assertUnusedClaimIdentity(content, identity) {
+    const includesKey = (rows, field) => Array.isArray(rows) &&
+        rows.some(row => row !== null && typeof row === 'object' && !Array.isArray(row) &&
+            row[field] === identity);
+    const finding = content.sources.some(source => includesKey(source.storedRun?.findings, 'identity_key') ||
+        includesKey(source.storedRun?.findings, 'claim_identity'));
+    const event = content.histories.some(history => history.receipts.some(receipt => {
+        if (receipt.kind === 'finding_claim_split')
+            return receipt.payload.matched_identity === identity;
+        if (receipt.kind === 'verdicts_recorded')
+            return includesKey(receipt.payload.verdicts, 'identity_key');
+        if (receipt.kind === 'round_processed')
+            return includesKey(receipt.payload.identities, 'matched_identity');
+        return false;
+    }));
+    if (finding || event)
+        throw new Error('claim_identity_already_used');
+}
+//# sourceMappingURL=public-model.js.map

package/dist/evidence/claim-recovery/public-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-model.js","sourceRoot":"","sources":["../../../src/evidence/claim-recovery/public-model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAK7E,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,MAAM,GAAG,GAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAC7C,MAAM,CAAC,MAAM,qBAAqB,GAAC,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAC,MAAM,EAAE,UAAU,EAAC,MAAM,EAAE,UAAU,EAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAChJ,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC;IAClI,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACjD,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,CAAC,MAAM,0BAA0B,GAAC,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAC,aAAa,EAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,MAAM,EAAE,qBAAqB,EAAC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;IAChK,gBAAgB,EAAE,GAAG,EAAC,QAAQ,EAAE,GAAG,EAAC,UAAU,EAAE,qBAAqB,EAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/F,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAC,WAAW,CAAC,CAAC,EAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAC,WAAW,CAAC,CAAC;QAC1E,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAC,WAAW,EAAC,OAAO,EAAC,SAAS,CAAC,CAAC,EAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,sBAAsB,EAAE,UAAU,CAAC,QAAQ,EAAE;KACrI,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvB,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,UAAU,WAAW,CAAC,SAAgC;IAC1D,MAAM,EAAE,KAAK,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO,EAAC,YAAY,EAAE,GAAC,SAAS,CAAC;IAC5D,OAAO,EAAE,KAAK,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO,EAAC,YAAY,EAAE,CAAC;AACrD,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,OAA4B,EAAC,SAAgC;IACzF,SAAS,GAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,IAAI,GAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAC,SAAS,CAAC,CAAC,CAAC;IAChF,IAAG,IAAI,CAAC,MAAM,KAAG,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,MAAM,GAAG,GAAC,IAAI,CAAC,CAAC,CAAE,CAAC;IACnB,IAAG,CAAC,GAAG,CAAC,UAAU,IAAE,CAAC,GAAG,CAAC,SAAS,IAAE,GAAG,CAAC,eAAe,EAAE,MAAM,KAAG,CAAC,IAAE,CAAC,GAAG,CAAC,WAAW,IAAE,CAAC,GAAG,CAAC,aAAa;QACvG,CAAC,iBAAiB,CAAC,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,EAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,MAAM,MAAM,GAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAC,UAAU,EAAE,GAAG,CAAC,UAAU,EAAC,SAAS,EAAE,GAAG,CAAC,SAAS,EAAC,cAAc,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAE,EAAC,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;IACjK,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,OAA4B,EAAC,SAAgC;IAC1F,MAAM,GAAG,GAAC,eAAe,CAAC,OAAO,EAAC,SAAS,CAAC,CAAC;IAC7C,OAAO,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,EAAC,WAAW,EAAE,OAAO,CAAC,WAAW,EAAC,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC;AACzG,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,OAA4B,EAAC,SAAgC;IAC3F,MAAM,IAAI,GAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3E,IAAG,IAAI,CAAC,MAAM,KAAG,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,OAAO,IAAI,CAAC,CAAC,CAAE,CAAC;AAClB,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,OAA4B,EAAC,SAA+B;IACxF,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAC/C,KAAI,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACjC,yEAAyE;QACzE,iDAAiD;QACjD,IAAI,MAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAC,aAAa,CAAC,OAAO,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,CAAC;YACL,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAG,SAAS,CAAC,UAAU,IAAE,CAAC,CAAC,QAAQ,KAAG,SAAS,CAAC,gBAAgB,IAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAClL,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAC,IAAI,EAAE,kBAAkB,EAAC,gBAAgB,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,EAAC,QAAQ,EAAE,SAAS,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC9I,CAAC;QACD,MAAM,OAAO,GAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC;QAC5C,IAAG,OAAO,CAAC,sBAAsB,KAAG,CAAC,IAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC;YACrF,OAAO,CAAC,yBAAyB,CAAC,QAAQ,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAE,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACrH,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAC,IAAI,EAAE,gBAAgB,EAAC,gBAAgB,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,EAAC,QAAQ,EAAE,SAAS,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC5I,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpF,CAAC;AACD;;4EAE4E;AAC5E,MAAM,UAAU,sBAAsB,CAAC,MAA2B,EAAC,KAA0B,EAAC,KAAyB;IACrH,IAAG,MAAM,CAAC,WAAW,KAAG,KAAK,CAAC,WAAW,IAAE,MAAM,CAAC,OAAO,CAAC,MAAM,KAAG,KAAK,CAAC,OAAO,CAAC,MAAM,IAAE,MAAM,CAAC,SAAS,CAAC,MAAM,KAAG,KAAK,CAAC,SAAS,CAAC,MAAM;QACvI,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,MAAM,cAAc,GAAuB,EAAE,CAAC;IAC9C,KAAI,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,OAAO,GAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAG,CAAC,OAAO,IAAE,OAAO,CAAC,aAAa,GAAC,GAAG,CAAC,aAAa;YAClD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,MAAM,mBAAmB,GAAC,IAAI,GAAG,EAA6B,CAAC;QAC/D,KAAI,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ;YACnC,IAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAAE,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAC,OAAO,CAAC,CAAC;QACvF,MAAM,aAAa,GAAC,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAA,EAAE,CAAA,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QACnE,KAAI,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ;YAC/B,IAAG,CAAC,iBAAiB,CAAC,OAAO,EAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAChE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/E,IAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,MAAM,OAAO,GAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAA,EAAE,CAAA,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACtF,KAAI,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;YAC3B,IAAG,OAAO,CAAC,MAAM,KAAG,CAAC,IAAE,CAAC,2BAA2B,CAAC,OAAO,EAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAE,EAAC,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,KAAK,EAAC,MAAM,CAAC,WAAW,CAAC;gBAC/H,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC5C,IAAG,OAAO,CAAC,IAAI,KAAG,qBAAqB;gBAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxE,CAAC;QACD,IAAG,OAAO,CAAC,aAAa,KAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC5D,CAAC;IACD,KAAI,MAAM,CAAC,KAAK,EAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACrD,+BAA+B,CAAC,MAAM,EAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAE,EAAC,cAAc,EAAC,KAAK,EAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACxG,CAAC;AACH,CAAC;AAED;;6EAE6E;AAC7E,MAAM,UAAU,+BAA+B,CAAC,MAA8B,EAAC,OAAyC,EACtH,cAAoC,EAAC,KAAyB,EAAC,KAAa;IAC5E,MAAM,QAAQ,GAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,KAAI,MAAM,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,IAAI,KAAG,qBAAqB,IAAE,CAAC,CAAC,MAAM,KAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACrH,MAAM,KAAK,GAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClC,IAAG,CAAC,KAAK,IAAE,CAAC,2BAA2B,CAAC,OAAO,EAAC,KAAK,EAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC9H,MAAM,OAAO,GAAC,OAAO,CAAC,OAAO,CAAC;QAC9B,IAAG,OAAO,CAAC,eAAe,KAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAE,OAAO,CAAC,KAAK,KAAG,MAAM,CAAC,QAAQ,CAAC,KAAK;YACxF,OAAO,CAAC,kBAAkB,KAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;YACvG,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,MAAM,CAAC,CAAC,CAAC,IAAE,CAAC,CAAC,GAAG,KAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QAC7F,IAAG,QAAQ,CAAC,MAAM,KAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC/E,0EAA0E;QAC1E,wEAAwE;QACxE,4EAA4E;QAC5E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAC;YACxB,cAAc,EAAE,OAAO,CAAC,gBAAgB;YACxC,mBAAmB,EAAE;gBACnB,MAAM,EAAE,gBAAgB,EAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAC,aAAa,EAAE,OAAO,CAAC,aAAa;gBAClF,MAAM,EAAE,OAAO,CAAC,MAAM,EAAC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBACnE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBACzF,eAAe,EAAE,OAAO,CAAC,eAAe,EAAC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBACnF,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC;SACF,CAAC,CAAC;QACH,qEAAqE;QACrE,sEAAsE;QACtE,uEAAuE;QACvE,IAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAC,SAAS,CAAC;YAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,GAAC,IAAI,CAAC;IACpE,CAAC;IACH,IAAG,CAAC,iBAAiB,CAAC,QAAQ,EAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;AAClG,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,IAA0B;IACvD,MAAM,MAAM,GAAC,IAAI,GAAG,EAA6B,CAAC;IAClD,KAAI,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,GAAG,GAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAG,GAAG,IAAE,CAAC,iBAAiB,CAAC,GAAG,EAAC,GAAG,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED;0EAC0E;AAC1E,MAAM,UAAU,yBAAyB,CAAC,OAA4B,EAAE,QAAgB;IACtF,MAAM,WAAW,GAAG,CAAC,IAAa,EAAE,KAAa,EAAW,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAChF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAC5E,GAA+B,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAC5C,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC;QACrD,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAC5D,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAC9E,IAAI,OAAO,CAAC,IAAI,KAAK,qBAAqB;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,gBAAgB,KAAK,QAAQ,CAAC;QACjG,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB;YAAE,OAAO,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACvG,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB;YAAE,OAAO,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;QAC3G,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC,CAAC;IACJ,IAAI,OAAO,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;AACvE,CAAC"}

package/dist/evidence/original-run/journal.d.ts

@@ -22,9 +22,19 @@ export interface JournalCheckpoint {
     recorded_at: string;
     data: unknown;
 }
+export type JournalAppendCapacityEntry = {
+    phase: string;
+    data: unknown;
+} | {
+    maximumBytes: number;
+};
 export interface ReadableJournal extends Journal {
     /** Local audit facts only; a remote acknowledgment still needs exact readback. */
     checkpoints: () => JournalCheckpoint[];
+    /** Refuse a multi-checkpoint operation before its first durable or remote side effect. */
+    assertAppendCapacity: (additionalCheckpoints: number, maximumAdditionalBytes: number) => void;
+    /** Reserve exact known checkpoints together with bounded unknown future records. */
+    assertAppendPlanCapacity: (entries: readonly JournalAppendCapacityEntry[]) => void;
 }
 /** Storage qualification is explicit; recovery callers retain the strict default. */
 /** Checkpoints are audit facts, never a substitute for fresh server readback. */

package/dist/evidence/original-run/journal.js

@@ -129,11 +129,63 @@ export async function openJournal(path, manifestSha, operation, mode, beforeWrit
     }
     await syncDirectory(path);
     await syncDirectory(dirname(path));
-    const journal = { checkpoints: () => structuredClone(checkpoints), append: async (phase, data = null) => {
+    const assertAppendCapacity = (additionalCheckpoints, maximumAdditionalBytes) => {
+        if (!Number.isSafeInteger(additionalCheckpoints) || additionalCheckpoints < 0 ||
+            !Number.isSafeInteger(maximumAdditionalBytes) || maximumAdditionalBytes < 0) {
+            throw new Error('invalid_recovery_journal_capacity');
+        }
+        if (additionalCheckpoints > MAX_RECOVERY_CHECKPOINTS - sequence ||
+            maximumAdditionalBytes > MAX_RECOVERY_CHECKPOINT_TOTAL_BYTES - retainedBytes) {
+            throw new Error('recovery_journal_checkpoint_limit');
+        }
+    };
+    const assertAppendPlanCapacity = (entries) => {
+        if (!Array.isArray(entries))
+            throw new Error('invalid_recovery_journal_capacity');
+        let maximumAdditionalBytes = 0;
+        for (const [index, entry] of entries.entries()) {
+            if (!entry || typeof entry !== 'object' || Array.isArray(entry)) {
+                throw new Error('invalid_recovery_journal_capacity');
+            }
+            const keys = Object.keys(entry);
+            let bytes;
+            if ('maximumBytes' in entry) {
+                if (keys.length !== 1 || !Number.isSafeInteger(entry.maximumBytes) || entry.maximumBytes < 0 ||
+                    entry.maximumBytes > MAX_RECOVERY_CHECKPOINT_BYTES) {
+                    throw new Error('invalid_recovery_journal_capacity');
+                }
+                bytes = entry.maximumBytes;
+            }
+            else {
+                if (keys.length !== 2 || !keys.includes('phase') || !keys.includes('data') ||
+                    typeof entry.phase !== 'string' || !/^[a-z][a-z0-9_]{0,127}$/.test(entry.phase)) {
+                    throw new Error('invalid_recovery_journal_capacity');
+                }
+                let data;
+                try {
+                    data = JSON.parse(JSON.stringify(entry.data));
+                }
+                catch {
+                    throw new Error('invalid_recovery_journal_capacity');
+                }
+                const record = { operation_id: operation, manifest_sha256: manifestSha,
+                    sequence: sequence + index + 1, previous_sha256: '0'.repeat(64), phase: entry.phase,
+                    recorded_at: '9999-12-31T23:59:59.999Z', data };
+                bytes = Buffer.byteLength(serializeRecoveryDocument(record, MAX_RECOVERY_CHECKPOINT_BYTES), 'utf8');
+            }
+            if (bytes > Number.MAX_SAFE_INTEGER - maximumAdditionalBytes) {
+                throw new Error('invalid_recovery_journal_capacity');
+            }
+            maximumAdditionalBytes += bytes;
+        }
+        assertAppendCapacity(entries.length, maximumAdditionalBytes);
+    };
+    const journal = { checkpoints: () => structuredClone(checkpoints), assertAppendCapacity,
+        assertAppendPlanCapacity,
+        append: async (phase, data = null) => {
             if (typeof phase !== 'string' || !/^[a-z][a-z0-9_]{0,127}$/.test(phase))
                 throw new Error('invalid_recovery_checkpoint');
-            if (sequence >= MAX_RECOVERY_CHECKPOINTS)
-                throw new Error('recovery_journal_checkpoint_limit');
+            assertAppendCapacity(1, 0);
             const retainedData = JSON.parse(JSON.stringify(data));
             await beforeWrite?.(phase);
             const current = await lstat(path, { bigint: true });

package/dist/evidence/original-run/journal.js.map

@@ -1 +1 @@
-{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../../src/evidence/original-run/journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,mCAAmC,CAAC;AACrF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,gFAAgF;AAChF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3D,MAAM,CAAC,MAAM,6BAA6B,GAAG,2BAA2B,GAAG,IAAI,CAAC;AAChF,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,MAAM,CAAC,MAAM,mCAAmC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEpE,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAC5F,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAAC,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACtG,CAAC;AACD,6EAA6E;AAC7E,MAAM,UAAU,yBAAyB,CAAC,KAAc,EAAE,KAAK,GAAG,QAAQ;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACnD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC;AACd,CAAC;AACD,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,KAAc,EAAE,KAAK,GAAG,QAAQ;IACjF,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC;AACD,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAA0B;IAChF,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACzH,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IAC9F,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AACD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,KAAK,UAAU,uBAAuB,CAAC,IAAY,EAAE,WAAoB;IACvE,IAAI,CAAC;QAAC,MAAM,wBAAwB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAAC,CAAC;IAC1D,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,KAAK,IAAI,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACzF,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAcD,qFAAqF;AACrF,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,WAAmB,EAAE,SAAiB,EAAE,IAAwB,EAAE,WAA8C;IAC9J,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;SAC5F,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9H,MAAM,uBAAuB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAChG,IAAI,KAAK,CAAC,MAAM,GAAG,wBAAwB;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAClG,IAAI,QAAQ,GAAG,CAAC,CAAC;IAAC,IAAI,QAAQ,GAAG,WAAW,CAAC;IAC7C,IAAI,IAAI,GAA4C,EAAE,CAAC;IACvD,MAAM,WAAW,GAAwB,EAAE,CAAC;IAC5C,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,GAAG,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAC,GAAG,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC5G,yEAAyE;QACzE,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,UAAU,CAAC,IAAI,GAAG,MAAM,CAAC,mCAAmC,GAAG,aAAa,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACxI,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,cAAc,EAAE,6BAA6B,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjG,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,GAAG,mCAAmC,GAAG,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACxI,aAAa,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;QACzC,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAA4B,CAAC;QAAC,CAAC;QACtE,MAAM,CAAC;YACL,sEAAsE;YACtE,0EAA0E;YAC1E,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACnD,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;YAAC,SAAS;QACvC,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnH,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,eAAe,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC7M,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACjF,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1F,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnF,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,kCAAkC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC1K,IAAI,GAAG,EAAE,CAAC;QACV,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC3B,WAAW,CAAC,IAAI,CAAC,MAAsC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAoB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,IAAI,EAAE,EAAE;YACvH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACxH,IAAI,QAAQ,IAAI,wBAAwB;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAC/F,MAAM,YAAY,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/D,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC3I,MAAM,MAAM,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAC9L,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,yBAAyB,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;YAC/E,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,mCAAmC,GAAG,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACjJ,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAC,QAAQ,EAAE,CAAC;YACnD,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAClD,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACzB,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC,EAAE,CAAC;IACJ,IAAI,IAAI,CAAC,MAAM;QAAE,MAAM,OAAO,CAAC,MAAM,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../../src/evidence/original-run/journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,mCAAmC,CAAC;AACrF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,gFAAgF;AAChF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3D,MAAM,CAAC,MAAM,6BAA6B,GAAG,2BAA2B,GAAG,IAAI,CAAC;AAChF,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,MAAM,CAAC,MAAM,mCAAmC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEpE,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAC5F,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAAC,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACtG,CAAC;AACD,6EAA6E;AAC7E,MAAM,UAAU,yBAAyB,CAAC,KAAc,EAAE,KAAK,GAAG,QAAQ;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACnD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC;AACd,CAAC;AACD,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,KAAc,EAAE,KAAK,GAAG,QAAQ;IACjF,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC;AACD,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAA0B;IAChF,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACzH,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IAC9F,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AACD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,KAAK,UAAU,uBAAuB,CAAC,IAAY,EAAE,WAAoB;IACvE,IAAI,CAAC;QAAC,MAAM,wBAAwB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAAC,CAAC;IAC1D,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,KAAK,IAAI,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACzF,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAqBD,qFAAqF;AACrF,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,WAAmB,EAAE,SAAiB,EAAE,IAAwB,EAAE,WAA8C;IAC9J,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;SAC5F,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9H,MAAM,uBAAuB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAChG,IAAI,KAAK,CAAC,MAAM,GAAG,wBAAwB;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAClG,IAAI,QAAQ,GAAG,CAAC,CAAC;IAAC,IAAI,QAAQ,GAAG,WAAW,CAAC;IAC7C,IAAI,IAAI,GAA4C,EAAE,CAAC;IACvD,MAAM,WAAW,GAAwB,EAAE,CAAC;IAC5C,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,GAAG,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAC,GAAG,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC5G,yEAAyE;QACzE,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,UAAU,CAAC,IAAI,GAAG,MAAM,CAAC,mCAAmC,GAAG,aAAa,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACxI,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,cAAc,EAAE,6BAA6B,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjG,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,GAAG,mCAAmC,GAAG,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACxI,aAAa,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;QACzC,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAA4B,CAAC;QAAC,CAAC;QACtE,MAAM,CAAC;YACL,sEAAsE;YACtE,0EAA0E;YAC1E,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACnD,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;YAAC,SAAS;QACvC,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnH,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,eAAe,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC7M,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACjF,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1F,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnF,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,kCAAkC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC1K,IAAI,GAAG,EAAE,CAAC;QACV,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC3B,WAAW,CAAC,IAAI,CAAC,MAAsC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,MAAM,oBAAoB,GAAG,CAAC,qBAA6B,EAAE,sBAA8B,EAAE,EAAE;QAC7F,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,qBAAqB,CAAC,IAAI,qBAAqB,GAAG,CAAC;YACzE,CAAC,MAAM,CAAC,aAAa,CAAC,sBAAsB,CAAC,IAAI,sBAAsB,GAAG,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,qBAAqB,GAAG,wBAAwB,GAAG,QAAQ;YAC3D,sBAAsB,GAAG,mCAAmC,GAAG,aAAa,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC,CAAC;IACF,MAAM,wBAAwB,GAAG,CAAC,OAA8C,EAAE,EAAE;QAClF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAClF,IAAI,sBAAsB,GAAG,CAAC,CAAC;QAC/B,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,KAAa,CAAC;YAClB,IAAI,cAAc,IAAI,KAAK,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC;oBACxF,KAAK,CAAC,YAAY,GAAG,6BAA6B,EAAE,CAAC;oBACvD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACvD,CAAC;gBACD,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACtE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;oBACpF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACvD,CAAC;gBACD,IAAI,IAAa,CAAC;gBAClB,IAAI,CAAC;oBAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACtD,MAAM,CAAC;oBAAC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBAAC,CAAC;gBAC/D,MAAM,MAAM,GAAsB,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW;oBACvF,QAAQ,EAAE,QAAQ,GAAG,KAAK,GAAG,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;oBACnF,WAAW,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC;gBAClD,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,yBAAyB,CAAC,MAAM,EAAE,6BAA6B,CAAC,EAAE,MAAM,CAAC,CAAC;YACtG,CAAC;YACD,IAAI,KAAK,GAAG,MAAM,CAAC,gBAAgB,GAAG,sBAAsB,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YACD,sBAAsB,IAAI,KAAK,CAAC;QAClC,CAAC;QACD,oBAAoB,CAAC,OAAO,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAC/D,CAAC,CAAC;IACF,MAAM,OAAO,GAAoB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,oBAAoB;QACtG,wBAAwB;QACxB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,IAAI,EAAE,EAAE;YACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACxH,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3B,MAAM,YAAY,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/D,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC3I,MAAM,MAAM,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAC9L,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,yBAAyB,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;YAC/E,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,mCAAmC,GAAG,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACjJ,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAC,QAAQ,EAAE,CAAC;YACnD,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAClD,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACzB,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC,EAAE,CAAC;IACJ,IAAI,IAAI,CAAC,MAAM;QAAE,MAAM,OAAO,CAAC,MAAM,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/evidence/original-run/lock.js

@@ -3,7 +3,7 @@ import { constants } from 'node:fs';
 import { link, lstat, mkdir, open, readdir, rename, unlink } from 'node:fs/promises';
 import { join } from 'node:path';
 import { isDeepStrictEqual } from 'node:util';
-import { withLegacyReservation } from '../../coordination/registry-lock.js';
+import { withRegistryLock } from '../../coordination/registry-lock.js';
 import { readStable, sha256 } from '../../telemetry/recovery/files.js';
 import { checkLockDirectory, prepareLockRoot } from './lock-path.js';
 import { localLockScope, LOCK_UUID, validLockScope } from './lock-scope.js';
@@ -23,6 +23,26 @@ async function sync(path) {
  * Each path is unique for all time. No shared reclaim guard or TTL is involved.
  */
 export async function withRecoveryLock(root, identity, work, hooks = {}) {
+    if (hooks.legacy !== false) {
+        return withRegistryLock(root, identity, work, {
+            scope: localLockScope,
+            validScope: validLockScope,
+            prepareRoot: prepareLockRoot,
+            inspectRegistry: async (path) => {
+                checkLockDirectory(await lstat(path), process.geteuid(), true);
+                // Includes inherited Darwin ACL and mount inspection for the registry itself.
+                await prepareLockRoot(path);
+            },
+            sync,
+            read: async (file) => (await readStable(file, 2048)).text,
+            mayProbePid: () => true,
+            reclaimLegacy: false,
+            lockTimeoutMs: 5_000,
+            lockRetryMs: 25,
+        }, hooks);
+    }
+    if (process.env.NODE_ENV !== 'test')
+        throw new Error('test_only_bakery_hook');
     const scope = await (hooks.scope ?? localLockScope)();
     if (!validLockScope(scope))
         throw new Error('unsupported_recovery_lock_scope');
@@ -247,13 +267,6 @@ export async function withRecoveryLock(root, identity, work, hooks = {}) {
             }
         }
     };
-    if (hooks.legacy === false) {
-        if (process.env.NODE_ENV !== 'test')
-            throw new Error('test_only_bakery_hook');
-        return acquire();
-    }
-    return withLegacyReservation(root, identity, { pid: process.pid, token, scope }, acquire, { sync, read: hooks.read, probe: hooks.probe, now: hooks.now, wait: hooks.wait, reclaimLegacy: false,
-        qualifiedLegacy: owner => validLockScope(owner.scope) &&
-            isDeepStrictEqual(owner.scope, scope) });
+    return acquire();
 }
 //# sourceMappingURL=lock.js.map