@amalgm/live 0.1.0

package/dist/detection/enrollment.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Amalgm's default enrollment policy: which relative paths receive
+ * workspace identities. Ratified by entity-model.md axiom 2 — amalgm's
+ * manual enrollment policy decides what enrolls; external conventions
+ * (gitignore) may inform it, never decide it implicitly.
+ *
+ * Machine-local metadata, dependencies, generated caches, and secrets
+ * never receive workspace identities. The rule applies at every depth.
+ * Pure string policy: a host may inject its own `EnrollmentPolicy`
+ * everywhere this default is accepted.
+ */
+/** The injected policy shape: relative path in, verdict out. */
+export type EnrollmentPolicy = (relPath: string) => boolean;
+/** The default policy. Both separators are path separators; '' never enrolls. */
+export declare const defaultShouldEnroll: EnrollmentPolicy;
+//# sourceMappingURL=enrollment.d.ts.map

package/dist/detection/enrollment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enrollment.d.ts","sourceRoot":"","sources":["../../src/detection/enrollment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,gEAAgE;AAChE,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;AAgD5D,iFAAiF;AACjF,eAAO,MAAM,mBAAmB,EAAE,gBAMjC,CAAC"}

package/dist/detection/enrollment.js

@@ -0,0 +1,70 @@
+/**
+ * Amalgm's default enrollment policy: which relative paths receive
+ * workspace identities. Ratified by entity-model.md axiom 2 — amalgm's
+ * manual enrollment policy decides what enrolls; external conventions
+ * (gitignore) may inform it, never decide it implicitly.
+ *
+ * Machine-local metadata, dependencies, generated caches, and secrets
+ * never receive workspace identities. The rule applies at every depth.
+ * Pure string policy: a host may inject its own `EnrollmentPolicy`
+ * everywhere this default is accepted.
+ */
+const EXCLUDED_DIRECTORIES = new Set([
+    '.amalgm',
+    '.aws',
+    '.cache',
+    '.docker',
+    '.git',
+    '.gnupg',
+    '.gradle',
+    '.hg',
+    '.kube',
+    '.mypy_cache',
+    '.next',
+    '.nyc_output',
+    '.parcel-cache',
+    '.pytest_cache',
+    '.ruff_cache',
+    '.ssh',
+    '.svn',
+    '.svelte-kit',
+    '.turbo',
+    '.venv',
+    '.vite',
+    '__pycache__',
+    'coverage',
+    'node_modules',
+]);
+const EXCLUDED_FILES = new Set([
+    '.DS_Store',
+    'Thumbs.db',
+    'desktop.ini',
+    'npm-debug.log',
+    'pnpm-debug.log',
+    'yarn-debug.log',
+    'yarn-error.log',
+]);
+function isPrivateFile(name) {
+    if (/^\.env(?:\..+)?$/i.test(name) && !/\.example$/i.test(name))
+        return true;
+    if (/^(?:credentials?|secrets?)\.(?:json|ya?ml|toml|ini|conf)$/i.test(name))
+        return true;
+    if (/^id_(?:dsa|ecdsa|ed25519|rsa)$/i.test(name))
+        return true;
+    if (/^(?:\.git-credentials|\.netrc|\.npmrc|\.pypirc|auth\.json|kubeconfig)$/i.test(name))
+        return true;
+    if (/^(?:service[-_]?account|firebase[-_]?adminsdk).*\.json$/i.test(name))
+        return true;
+    return /\.(?:key|keystore|kdbx|p12|pfx|pem|ppk|tfstate(?:\.backup)?)$/i.test(name);
+}
+/** The default policy. Both separators are path separators; '' never enrolls. */
+export const defaultShouldEnroll = (relPath) => {
+    const parts = relPath.split(/[\\/]/).filter(Boolean);
+    const name = parts.at(-1);
+    if (name === undefined || parts.some((part) => EXCLUDED_DIRECTORIES.has(part)))
+        return false;
+    if (EXCLUDED_FILES.has(name) || isPrivateFile(name))
+        return false;
+    return !name.startsWith('.#') && !name.endsWith('~') && !/\.(?:swp|swo)$/i.test(name);
+};
+//# sourceMappingURL=enrollment.js.map

package/dist/detection/enrollment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enrollment.js","sourceRoot":"","sources":["../../src/detection/enrollment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,SAAS;IACT,MAAM;IACN,QAAQ;IACR,SAAS;IACT,MAAM;IACN,QAAQ;IACR,SAAS;IACT,KAAK;IACL,OAAO;IACP,aAAa;IACb,OAAO;IACP,aAAa;IACb,eAAe;IACf,eAAe;IACf,aAAa;IACb,MAAM;IACN,MAAM;IACN,aAAa;IACb,QAAQ;IACR,OAAO;IACP,OAAO;IACP,aAAa;IACb,UAAU;IACV,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,WAAW;IACX,WAAW;IACX,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;CACjB,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,IAAI,4DAA4D,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzF,IAAI,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,yEAAyE,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtG,IAAI,0DAA0D,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,OAAO,gEAAgE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrF,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAqB,CAAC,OAAO,EAAE,EAAE;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7F,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxF,CAAC,CAAC"}

package/dist/detection/index.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Detection — the pure cores of the Watch/Detect rails, ported from the
+ * engine's observer and registration boundary. Normative sources:
+ * entity-model.md (identity axioms, the two continuity witnesses) and
+ * entity-implementation.md (the ratified seams).
+ *
+ * Everything here is rows and entries in, verdicts out. Walking disk,
+ * hashing bytes, opening watchers, and writing stores are the host's;
+ * the host injects its answers (a stat, a channel row, an enrollment
+ * policy) and this layer owns only the laws:
+ *
+ * - `adapter-contract`  the seven rails, the ratified detect socket,
+ *                       descriptor conviction, the three-state truth
+ *                       judgment, the reference adapter
+ * - `classify`          text/binary from detect's own read evidence
+ * - `refusal`           declined-vs-broken, named where it is raised
+ * - `enrollment`        the default manual enrollment policy
+ * - `diff`              the compare functions: file/dir/link identity
+ * - `coverage`          one OS watcher per outermost tree
+ * - `continuity`        root rescue and the undecided address
+ */
+export * from './adapter-contract.js';
+export * from './classify.js';
+export * from './continuity.js';
+export * from './coverage.js';
+export * from './diff.js';
+export * from './enrollment.js';
+export * from './refusal.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/detection/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/detection/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC"}

package/dist/detection/index.js

@@ -0,0 +1,29 @@
+/**
+ * Detection — the pure cores of the Watch/Detect rails, ported from the
+ * engine's observer and registration boundary. Normative sources:
+ * entity-model.md (identity axioms, the two continuity witnesses) and
+ * entity-implementation.md (the ratified seams).
+ *
+ * Everything here is rows and entries in, verdicts out. Walking disk,
+ * hashing bytes, opening watchers, and writing stores are the host's;
+ * the host injects its answers (a stat, a channel row, an enrollment
+ * policy) and this layer owns only the laws:
+ *
+ * - `adapter-contract`  the seven rails, the ratified detect socket,
+ *                       descriptor conviction, the three-state truth
+ *                       judgment, the reference adapter
+ * - `classify`          text/binary from detect's own read evidence
+ * - `refusal`           declined-vs-broken, named where it is raised
+ * - `enrollment`        the default manual enrollment policy
+ * - `diff`              the compare functions: file/dir/link identity
+ * - `coverage`          one OS watcher per outermost tree
+ * - `continuity`        root rescue and the undecided address
+ */
+export * from './adapter-contract.js';
+export * from './classify.js';
+export * from './continuity.js';
+export * from './coverage.js';
+export * from './diff.js';
+export * from './enrollment.js';
+export * from './refusal.js';
+//# sourceMappingURL=index.js.map

package/dist/detection/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/detection/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC"}

package/dist/detection/refusal.d.ts

@@ -0,0 +1,33 @@
+/**
+ * A REFUSAL: the boundary understood the request and declined it.
+ * Ratified by entity-implementation.md ("A refusal is named where it is
+ * raised").
+ *
+ * Two things can go wrong when a caller asks for something, and they
+ * mean opposite things:
+ *
+ *   a refusal   the request named ground amalgm will not take — excluded
+ *               by enrollment policy, already owned by another tree, not
+ *               there at all. Nothing is broken. The message IS the
+ *               reason and is meant to be shown to whoever asked.
+ *   a fault     the boundary could not do its job — a torn identity
+ *               store, an unusable database, a bug. The request was
+ *               fine; the installation is not.
+ *
+ * A refusal is NAMED WHERE IT IS RAISED, by the code that decided to
+ * refuse. It is never guessed later from an error's wording: matching
+ * on message text would quietly reclassify every fault as the caller's
+ * mistake the moment a message changed, and "your path is bad" is the
+ * worst possible thing to say on the day the identity store tears.
+ *
+ * Callers that must answer differently — an HTTP status, an exit code —
+ * ask `isRefusal`. Everything else stays an ordinary Error and travels
+ * to whatever handles faults. The mark is a registry symbol
+ * (`Symbol.for`), so a refusal raised by one copy of this module is
+ * recognized by every other.
+ */
+/** Decline a request, with the reason the caller should be shown. */
+export declare function refusal(message: string): Error;
+/** True only for an error this boundary deliberately raised as a refusal. */
+export declare function isRefusal(error: unknown): boolean;
+//# sourceMappingURL=refusal.d.ts.map

package/dist/detection/refusal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refusal.d.ts","sourceRoot":"","sources":["../../src/detection/refusal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,qEAAqE;AACrE,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAI9C;AAED,6EAA6E;AAC7E,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEjD"}

package/dist/detection/refusal.js

@@ -0,0 +1,40 @@
+/**
+ * A REFUSAL: the boundary understood the request and declined it.
+ * Ratified by entity-implementation.md ("A refusal is named where it is
+ * raised").
+ *
+ * Two things can go wrong when a caller asks for something, and they
+ * mean opposite things:
+ *
+ *   a refusal   the request named ground amalgm will not take — excluded
+ *               by enrollment policy, already owned by another tree, not
+ *               there at all. Nothing is broken. The message IS the
+ *               reason and is meant to be shown to whoever asked.
+ *   a fault     the boundary could not do its job — a torn identity
+ *               store, an unusable database, a bug. The request was
+ *               fine; the installation is not.
+ *
+ * A refusal is NAMED WHERE IT IS RAISED, by the code that decided to
+ * refuse. It is never guessed later from an error's wording: matching
+ * on message text would quietly reclassify every fault as the caller's
+ * mistake the moment a message changed, and "your path is bad" is the
+ * worst possible thing to say on the day the identity store tears.
+ *
+ * Callers that must answer differently — an HTTP status, an exit code —
+ * ask `isRefusal`. Everything else stays an ordinary Error and travels
+ * to whatever handles faults. The mark is a registry symbol
+ * (`Symbol.for`), so a refusal raised by one copy of this module is
+ * recognized by every other.
+ */
+const REFUSAL = Symbol.for('amalgm.registration.refusal');
+/** Decline a request, with the reason the caller should be shown. */
+export function refusal(message) {
+    const error = new Error(message);
+    error[REFUSAL] = true;
+    return error;
+}
+/** True only for an error this boundary deliberately raised as a refusal. */
+export function isRefusal(error) {
+    return Boolean(error && error[REFUSAL]);
+}
+//# sourceMappingURL=refusal.js.map

package/dist/detection/refusal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refusal.js","sourceRoot":"","sources":["../../src/detection/refusal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,OAAO,GAAkB,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAEzE,qEAAqE;AACrE,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAgC,CAAC;IAChE,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IACtB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,OAAO,CAAC,KAAK,IAAK,KAAiC,CAAC,OAAO,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/entities/bytes.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Portable byte codecs shared by the entity layer — UTF-8, standard base64
+ * (padded, as Node's `Buffer#toString('base64')` emits it), base64url, and
+ * hex. They exist so cloud.ts and repo-states.ts can produce byte-for-byte
+ * the same wire text the engine produces with Buffer, without src/
+ * importing any Node module (PURPOSE.md axiom 2).
+ */
+export declare const utf8Encode: (text: string) => Uint8Array;
+export declare const utf8Decode: (bytes: Uint8Array) => string;
+/** Bytes → standard base64 with padding (Buffer's 'base64' spelling). */
+export declare const bytesToBase64: (bytes: Uint8Array) => string;
+/** Bytes → unpadded base64url (Buffer's 'base64url' spelling). */
+export declare const bytesToBase64Url: (bytes: Uint8Array) => string;
+/** Standard base64 (padded or unpadded) → bytes. */
+export declare function base64ToBytes(text: string): Uint8Array;
+/** Lowercase/uppercase hex → bytes. */
+export declare function hexToBytes(hex: string): Uint8Array;
+//# sourceMappingURL=bytes.d.ts.map

package/dist/entities/bytes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bytes.d.ts","sourceRoot":"","sources":["../../src/entities/bytes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,KAAG,UAA4C,CAAC;AAEvF,eAAO,MAAM,UAAU,GAAI,OAAO,UAAU,KAAG,MAAyC,CAAC;AAgBzF,yEAAyE;AACzE,eAAO,MAAM,aAAa,GAAI,OAAO,UAAU,KAAG,MAAqC,CAAC;AAExF,kEAAkE;AAClE,eAAO,MAAM,gBAAgB,GAAI,OAAO,UAAU,KAAG,MAA0C,CAAC;AAEhG,oDAAoD;AACpD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAkBtD;AAED,uCAAuC;AACvC,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CASlD"}

package/dist/entities/bytes.js

@@ -0,0 +1,61 @@
+/**
+ * Portable byte codecs shared by the entity layer — UTF-8, standard base64
+ * (padded, as Node's `Buffer#toString('base64')` emits it), base64url, and
+ * hex. They exist so cloud.ts and repo-states.ts can produce byte-for-byte
+ * the same wire text the engine produces with Buffer, without src/
+ * importing any Node module (PURPOSE.md axiom 2).
+ */
+const BASE64 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
+const BASE64_URL = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
+export const utf8Encode = (text) => new TextEncoder().encode(text);
+export const utf8Decode = (bytes) => new TextDecoder().decode(bytes);
+function encode(bytes, alphabet, pad) {
+    let out = '';
+    for (let i = 0; i < bytes.length; i += 3) {
+        const a = bytes[i];
+        const b = bytes[i + 1];
+        const c = bytes[i + 2];
+        out += alphabet[a >> 2];
+        out += alphabet[((a & 0x03) << 4) | ((b ?? 0) >> 4)];
+        out += b === undefined ? (pad ? '=' : '') : alphabet[((b & 0x0f) << 2) | ((c ?? 0) >> 6)];
+        out += c === undefined ? (pad ? '=' : '') : alphabet[c & 0x3f];
+    }
+    return out;
+}
+/** Bytes → standard base64 with padding (Buffer's 'base64' spelling). */
+export const bytesToBase64 = (bytes) => encode(bytes, BASE64, true);
+/** Bytes → unpadded base64url (Buffer's 'base64url' spelling). */
+export const bytesToBase64Url = (bytes) => encode(bytes, BASE64_URL, false);
+/** Standard base64 (padded or unpadded) → bytes. */
+export function base64ToBytes(text) {
+    const out = [];
+    let buffer = 0;
+    let bits = 0;
+    for (const char of text) {
+        if (char === '=')
+            break; // padding ends the payload
+        const value = BASE64.indexOf(char);
+        if (value === -1) {
+            throw new Error(`expected standard base64 like "aGVsbG8=" — found ${JSON.stringify(char)}`);
+        }
+        buffer = (buffer << 6) | value;
+        bits += 6;
+        if (bits >= 8) {
+            bits -= 8;
+            out.push((buffer >> bits) & 0xff);
+        }
+    }
+    return new Uint8Array(out);
+}
+/** Lowercase/uppercase hex → bytes. */
+export function hexToBytes(hex) {
+    if (hex.length % 2 !== 0 || /[^0-9a-f]/i.test(hex)) {
+        throw new Error(`expected even-length hex like "a1b2" — got ${JSON.stringify(hex)}`);
+    }
+    const out = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < out.length; i += 1) {
+        out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+    }
+    return out;
+}
+//# sourceMappingURL=bytes.js.map

package/dist/entities/bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bytes.js","sourceRoot":"","sources":["../../src/entities/bytes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,GAAG,kEAAkE,CAAC;AAClF,MAAM,UAAU,GAAG,kEAAkE,CAAC;AAEtF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAc,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAEvF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEzF,SAAS,MAAM,CAAC,KAAiB,EAAE,QAAgB,EAAE,GAAY;IAC/D,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACpB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,GAAG,IAAI,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAE,CAAC;QACzB,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;QACtD,GAAG,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;QAC3F,GAAG,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAE,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAExF,kEAAkE;AAClE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;AAEhG,oDAAoD;AACpD,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,KAAK,GAAG;YAAE,MAAM,CAAC,2BAA2B;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QAC/B,IAAI,IAAI,CAAC,CAAC;QACV,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAC;YACV,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/entities/cloud.d.ts

@@ -0,0 +1,82 @@
+/**
+ * The entity-cloud boundary's pure half (engine
+ * registration/entity-cloud.js): the snapshot codec, record assertions,
+ * equality, the private resource id, and the repo travel law — only
+ * logical graph facts, never a path, inode, watcher, or database row.
+ *
+ * Wire parity is the contract here: `stableJson`, record key order, and
+ * snapshot sorting reproduce the engine's bytes exactly, so a snapshot
+ * packed on either side hashes and compares identically.
+ */
+import { type EntityStatus, type EntityType, type Sha256Hex } from './types.js';
+/** `@1` could project arbitrary pre-cloud registrations. `@2` omitted the
+ * declared built-in tool entities, so its toolbox root could not prove the
+ * snapshot membership it named. A resource contract names immutable
+ * authority semantics: both remain quarantined rather than reinterpreted
+ * or overwritten. `@3` begins with the complete verified user home; later
+ * user ground enters exclusively through `amalgm register`. */
+export declare const ENTITY_CLOUD_CONTRACT = "amalgm-entity-registry@3";
+export declare const ENTITY_CLOUD_SCHEMA_VERSION = 1;
+/** The record as it travels in a cloud snapshot: the six fields, the leaf
+ * head, and — for repositories only — the immutable transport head naming
+ * the Card + Checkpoint parcel. */
+export interface CloudEntityRecord {
+    readonly uuid: string;
+    readonly type: EntityType;
+    readonly parentUUID: string | null;
+    readonly name: string;
+    readonly status: EntityStatus;
+    readonly version: string;
+    readonly payloadVersion: string | null;
+    readonly transportVersion: string | null;
+}
+export interface CloudSnapshot {
+    readonly schemaVersion: number;
+    readonly kind: 'amalgm-entity-registry';
+    readonly records: readonly CloudEntityRecord[];
+}
+/** The deterministic private entity-resource id for a user under the
+ * current contract: `pvr_` + the first 32 base64url characters of
+ * sha256("private-user:<userId>:<contract>"). */
+export declare function privateEntityResourceId(userId: string, sha256Hex: Sha256Hex): string;
+/** The one JSON spelling every snapshot comparison and checksum uses. */
+export declare const stableJson: (value: unknown) => string;
+export declare const sameRecord: (left: unknown, right: unknown) => boolean;
+/** Two record lists describe the same graph (normalized, sorted, compared whole). */
+export declare const sameRecords: (left: readonly unknown[], right: readonly unknown[]) => boolean;
+/** Every record in `records` appears byte-identically in `expected`. */
+export declare function recordsAreSubset(records: readonly unknown[], expected: readonly unknown[]): boolean;
+/**
+ * Validate one snapshot record and normalize it (UUIDs lowercased,
+ * transportVersion defaulted to null). Refusals: an invalid shape; a
+ * parentless record whose type no tree root wears; a transport head on
+ * anything but a repository.
+ */
+export declare function assertRecord(value: unknown): CloudEntityRecord;
+/** How an enclosing lookup answers: the parent record's type and its own
+ * parent, or null/undefined for missing ancestry. */
+export type CloudAncestorLookup = (uuid: string) => {
+    readonly type: string;
+    readonly parentUUID: string | null | undefined;
+} | null | undefined;
+/**
+ * The repo travel law: a record with a `repo.git` PROPER ancestor never
+ * travels to the cloud on its own. The repository is the sync boundary —
+ * its one Card + Checkpoint state carries the worktree's bytes AND its
+ * children's permanent UUIDs (the transport identity map), so a register
+ * or a rebase is one parcel, never one postcard per file. A nested
+ * repository inside another repo's worktree is enclosed too: it becomes
+ * cloud-visible only when registered explicitly as its own tree.
+ * Missing ancestry keeps the record traveling rather than risking a
+ * silently unsynced entity.
+ */
+export declare function enclosedByRepositoryAncestor(record: {
+    readonly uuid: string;
+    readonly parentUUID: string | null | undefined;
+}, lookup: CloudAncestorLookup): boolean;
+/** Normalize records into the one canonical snapshot: asserted, sorted by
+ * uuid, duplicates refused. */
+export declare function snapshotFromRecords(records: readonly unknown[]): CloudSnapshot;
+/** Parse snapshot bytes (or their UTF-8 text) back into the canonical form. */
+export declare function parseSnapshot(bytes: Uint8Array | string): CloudSnapshot;
+//# sourceMappingURL=cloud.d.ts.map

package/dist/entities/cloud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../../src/entities/cloud.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAmC,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAGjH;;;;;+DAK+D;AAC/D,eAAO,MAAM,qBAAqB,6BAA6B,CAAC;AAEhE,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAK7C;;mCAEmC;AACnC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAChD;AAED;;iDAEiD;AACjD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,MAAM,CAGpF;AAED,yEAAyE;AACzE,eAAO,MAAM,UAAU,GAAI,OAAO,OAAO,KAAG,MAA+B,CAAC;AAE5E,eAAO,MAAM,UAAU,GAAI,MAAM,OAAO,EAAE,OAAO,OAAO,KAAG,OACnB,CAAC;AAEzC,qFAAqF;AACrF,eAAO,MAAM,WAAW,GAAI,MAAM,SAAS,OAAO,EAAE,EAAE,OAAO,SAAS,OAAO,EAAE,KAAG,OACf,CAAC;AAEpE,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,OAAO,EAAE,EAAE,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAMnG;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAkC9D;AAED;qDACqD;AACrD,MAAM,MAAM,mBAAmB,GAAG,CAAC,IAAI,EAAE,MAAM,KAC7C;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,CAAC;AAE/F;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;CAAE,EACjF,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAYT;AAED;+BAC+B;AAC/B,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,OAAO,EAAE,GAAG,aAAa,CAW9E;AAED,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,aAAa,CAavE"}

package/dist/entities/cloud.js

@@ -0,0 +1,136 @@
+/**
+ * The entity-cloud boundary's pure half (engine
+ * registration/entity-cloud.js): the snapshot codec, record assertions,
+ * equality, the private resource id, and the repo travel law — only
+ * logical graph facts, never a path, inode, watcher, or database row.
+ *
+ * Wire parity is the contract here: `stableJson`, record key order, and
+ * snapshot sorting reproduce the engine's bytes exactly, so a snapshot
+ * packed on either side hashes and compares identically.
+ */
+import { ROOT_TYPES, TYPES, UUID_PATTERN } from './types.js';
+import { bytesToBase64Url, hexToBytes, utf8Decode } from './bytes.js';
+/** `@1` could project arbitrary pre-cloud registrations. `@2` omitted the
+ * declared built-in tool entities, so its toolbox root could not prove the
+ * snapshot membership it named. A resource contract names immutable
+ * authority semantics: both remain quarantined rather than reinterpreted
+ * or overwritten. `@3` begins with the complete verified user home; later
+ * user ground enters exclusively through `amalgm register`. */
+export const ENTITY_CLOUD_CONTRACT = 'amalgm-entity-registry@3';
+export const ENTITY_CLOUD_SCHEMA_VERSION = 1;
+/** A 64-hex content head (a SHA-256 naming immutable bytes). */
+const CONTENT_HEAD = /^[0-9a-f]{64}$/;
+/** The deterministic private entity-resource id for a user under the
+ * current contract: `pvr_` + the first 32 base64url characters of
+ * sha256("private-user:<userId>:<contract>"). */
+export function privateEntityResourceId(userId, sha256Hex) {
+    return `pvr_${bytesToBase64Url(hexToBytes(sha256Hex(`private-user:${userId}:${ENTITY_CLOUD_CONTRACT}`)))
+        .slice(0, 32)}`;
+}
+/** The one JSON spelling every snapshot comparison and checksum uses. */
+export const stableJson = (value) => JSON.stringify(value);
+export const sameRecord = (left, right) => stableJson(left) === stableJson(right);
+/** Two record lists describe the same graph (normalized, sorted, compared whole). */
+export const sameRecords = (left, right) => sameRecord(snapshotFromRecords(left), snapshotFromRecords(right));
+/** Every record in `records` appears byte-identically in `expected`. */
+export function recordsAreSubset(records, expected) {
+    const expectedByUuid = new Map(snapshotFromRecords(expected).records.map((record) => [record.uuid, record]));
+    return snapshotFromRecords(records).records
+        .every((record) => sameRecord(record, expectedByUuid.get(record.uuid)));
+}
+/**
+ * Validate one snapshot record and normalize it (UUIDs lowercased,
+ * transportVersion defaulted to null). Refusals: an invalid shape; a
+ * parentless record whose type no tree root wears; a transport head on
+ * anything but a repository.
+ */
+export function assertRecord(value) {
+    const record = value;
+    if (!record || typeof record !== 'object'
+        || typeof record.uuid !== 'string' || !UUID_PATTERN.test(record.uuid)
+        || typeof record.type !== 'string' || !TYPES.has(record.type)
+        || (record.parentUUID !== null && (typeof record.parentUUID !== 'string' || !UUID_PATTERN.test(record.parentUUID)))
+        || typeof record.name !== 'string' || !record.name || record.name.includes('/') || record.name.includes('\0')
+        || !['active', 'trashed', 'deleted'].includes(record.status)
+        || typeof record.version !== 'string' || !/^[0-9a-f]{64}$/.test(record.version)
+        || (record.payloadVersion !== null && typeof record.payloadVersion !== 'string')
+        || (record.transportVersion !== undefined && record.transportVersion !== null
+            && (typeof record.transportVersion !== 'string' || !CONTENT_HEAD.test(record.transportVersion)))) {
+        throw new Error('cloud entity snapshot has an invalid record');
+    }
+    if (record.parentUUID === null && !ROOT_TYPES.has(record.type)) {
+        throw new Error(`cloud entity ${record.uuid} is not a valid tree root`);
+    }
+    const transportVersion = (record.transportVersion ?? null);
+    if (record.type !== 'repo.git' && transportVersion !== null) {
+        throw new Error('only repository entities may declare a transport head');
+    }
+    return {
+        uuid: record.uuid.toLowerCase(),
+        type: record.type,
+        parentUUID: record.parentUUID === null ? null : record.parentUUID.toLowerCase(),
+        name: record.name,
+        status: record.status,
+        version: record.version,
+        payloadVersion: record.payloadVersion,
+        transportVersion,
+    };
+}
+/**
+ * The repo travel law: a record with a `repo.git` PROPER ancestor never
+ * travels to the cloud on its own. The repository is the sync boundary —
+ * its one Card + Checkpoint state carries the worktree's bytes AND its
+ * children's permanent UUIDs (the transport identity map), so a register
+ * or a rebase is one parcel, never one postcard per file. A nested
+ * repository inside another repo's worktree is enclosed too: it becomes
+ * cloud-visible only when registered explicitly as its own tree.
+ * Missing ancestry keeps the record traveling rather than risking a
+ * silently unsynced entity.
+ */
+export function enclosedByRepositoryAncestor(record, lookup) {
+    const seen = new Set([record.uuid]);
+    let parentUUID = record.parentUUID;
+    while (parentUUID !== null && parentUUID !== undefined) {
+        if (seen.has(parentUUID))
+            throw new Error(`cloud entity ${record.uuid} has a cyclic parent chain`);
+        seen.add(parentUUID);
+        const parent = lookup(parentUUID);
+        if (!parent)
+            return false;
+        if (parent.type === 'repo.git')
+            return true;
+        parentUUID = parent.parentUUID;
+    }
+    return false;
+}
+/** Normalize records into the one canonical snapshot: asserted, sorted by
+ * uuid, duplicates refused. */
+export function snapshotFromRecords(records) {
+    const normalized = records.map(assertRecord)
+        .sort((left, right) => (left.uuid < right.uuid ? -1 : left.uuid > right.uuid ? 1 : 0));
+    if (new Set(normalized.map((record) => record.uuid)).size !== normalized.length) {
+        throw new Error('cloud entity snapshot has duplicate UUIDs');
+    }
+    return {
+        schemaVersion: ENTITY_CLOUD_SCHEMA_VERSION,
+        kind: 'amalgm-entity-registry',
+        records: normalized,
+    };
+}
+/** Parse snapshot bytes (or their UTF-8 text) back into the canonical form. */
+export function parseSnapshot(bytes) {
+    let snapshot;
+    try {
+        snapshot = JSON.parse(typeof bytes === 'string' ? bytes : utf8Decode(bytes));
+    }
+    catch {
+        throw new Error('cloud entity snapshot is not JSON');
+    }
+    if (snapshot?.schemaVersion !== ENTITY_CLOUD_SCHEMA_VERSION
+        || snapshot?.kind !== 'amalgm-entity-registry'
+        || !Array.isArray(snapshot.records)) {
+        throw new Error('cloud entity snapshot has an unsupported shape');
+    }
+    return snapshotFromRecords(snapshot.records);
+}
+//# sourceMappingURL=cloud.js.map

package/dist/entities/cloud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.js","sourceRoot":"","sources":["../../src/entities/cloud.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAsD,MAAM,YAAY,CAAC;AACjH,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEtE;;;;;+DAK+D;AAC/D,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAEhE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAE7C,gEAAgE;AAChE,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAsBtC;;iDAEiD;AACjD,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,SAAoB;IAC1E,OAAO,OAAO,gBAAgB,CAAC,UAAU,CAAC,SAAS,CAAC,gBAAgB,MAAM,IAAI,qBAAqB,EAAE,CAAC,CAAC,CAAC;SACrG,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpB,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAE5E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAa,EAAE,KAAc,EAAW,EAAE,CACnE,UAAU,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC;AAEzC,qFAAqF;AACrF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAwB,EAAE,KAAyB,EAAW,EAAE,CAC1F,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AAEpE,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,OAA2B,EAAE,QAA4B;IACxF,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,mBAAmB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAC7E,CAAC;IACF,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC,OAAO;SACxC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,MAAM,MAAM,GAAG,KAGP,CAAC;IACT,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;WACpC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;WAClE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;WAC1D,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;WAChH,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;WAC1G,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAgB,CAAC;WACnE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;WAC5E,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC;WAC7E,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI;eACxE,CAAC,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,2BAA2B,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,gBAAgB,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAkB,CAAC;IAC5E,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;QAC/B,IAAI,EAAE,MAAM,CAAC,IAAkB;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,MAAM,CAAC,UAAqB,CAAC,WAAW,EAAE;QAC3F,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAsB;QACrC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,cAAc,EAAE,MAAM,CAAC,cAA+B;QACtD,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAOD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAiF,EACjF,MAA2B;IAE3B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,IAAI,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACnC,OAAO,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QACvD,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,4BAA4B,CAAC,CAAC;QACnG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QAC5C,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;+BAC+B;AAC/B,MAAM,UAAU,mBAAmB,CAAC,OAA2B;IAC7D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;SACzC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO;QACL,aAAa,EAAE,2BAA2B;QAC1C,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,UAAU;KACpB,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAAC,KAA0B;IACtD,IAAI,QAA+E,CAAC;IACpF,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAoB,CAAC;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,QAAQ,EAAE,aAAa,KAAK,2BAA2B;WACtD,QAAQ,EAAE,IAAI,KAAK,wBAAwB;WAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC/C,CAAC"}

package/dist/entities/index.d.ts

@@ -0,0 +1,23 @@
+/**
+ * entities/ — the Register/Record pure cores: the entity model's laws
+ * (engine docs/entity-model.md — two axioms, the six-field record) as
+ * portable functions. Store reads arrive through `EntityReadPort`, hashing
+ * through `Sha256Hex`; nothing here touches SQLite, node:crypto, or a
+ * filesystem. Hash formulas and id derivations are byte-for-byte the
+ * engine's, so records interoperate across the cloud boundary.
+ *
+ * - types.ts        the alphabet, the six fields, UUID shape, injected ports
+ * - bytes.ts        portable byte codecs (utf8, base64, base64url, hex)
+ * - rules.ts        version formula, naming, lifecycle inheritance,
+ *                   slot/container laws, record builders
+ * - moves.ts        batch move validation: permutations, acyclicity, adoption
+ * - cloud.ts        entity-cloud snapshot codec + the repo travel law
+ * - repo-states.ts  Card + Checkpoint state codec and id derivations
+ */
+export * from './types.js';
+export * from './bytes.js';
+export * from './rules.js';
+export * from './moves.js';
+export * from './cloud.js';
+export * from './repo-states.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/entities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/entities/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC"}

package/dist/entities/index.js

@@ -0,0 +1,23 @@
+/**
+ * entities/ — the Register/Record pure cores: the entity model's laws
+ * (engine docs/entity-model.md — two axioms, the six-field record) as
+ * portable functions. Store reads arrive through `EntityReadPort`, hashing
+ * through `Sha256Hex`; nothing here touches SQLite, node:crypto, or a
+ * filesystem. Hash formulas and id derivations are byte-for-byte the
+ * engine's, so records interoperate across the cloud boundary.
+ *
+ * - types.ts        the alphabet, the six fields, UUID shape, injected ports
+ * - bytes.ts        portable byte codecs (utf8, base64, base64url, hex)
+ * - rules.ts        version formula, naming, lifecycle inheritance,
+ *                   slot/container laws, record builders
+ * - moves.ts        batch move validation: permutations, acyclicity, adoption
+ * - cloud.ts        entity-cloud snapshot codec + the repo travel law
+ * - repo-states.ts  Card + Checkpoint state codec and id derivations
+ */
+export * from './types.js';
+export * from './bytes.js';
+export * from './rules.js';
+export * from './moves.js';
+export * from './cloud.js';
+export * from './repo-states.js';
+//# sourceMappingURL=index.js.map

package/dist/entities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/entities/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC"}