@amalgm/live 0.2.22 → 0.2.24

package/PURPOSE.md

@@ -98,23 +98,33 @@ its cutover.
     containment; it never creates an overlapping UUID family. A reference in
     the core graph points to the selected workspace UUID, including when that
     workspace later becomes nested beneath a newly registered parent.
-20. **Materialization is local and selective.** Login installs the core graph;
+20. **Add installs atomically and selectively.** Login installs the core graph;
     `files add <workspace>` installs one owned, UUID-selected materialization
     boundary and refreshes the exact portable reference inventory in
-    always-materialized core ground. The local SQLite table contains workspace
-    rows only for boundaries materialized on that machine, while cloud
-    reconciliation preserves every unmaterialized boundary. A newly installed
-    and verified graph is the initial Watch baseline for that boundary; opening
-    coverage must not reinterpret the downloader's own writes as user edits.
+    always-materialized core ground. Add first journals one machine-local
+    installation intent, reconstructs and verifies the complete selection in a
+    private same-filesystem staging directory, commits its exact entity rows in
+    one transaction, atomically reveals the ground, and only then exposes its
+    binding to Watch. The intent clears only after coverage is healthy. Entity
+    rows therefore never mean pending download, and visible Add ground is never
+    left without its durable identity. Hidden staging that crosses a restart is
+    rebuilt from verified immutable content; revealed ground that crosses that
+    blind interval remains completely suspect until Detect settles it. The
+    local SQLite table contains workspace rows only for boundaries materialized
+    on that machine, while cloud reconciliation preserves every unmaterialized
+    boundary. A fresh verified install may be Watch's initial baseline so the
+    downloader's own writes are not reinterpreted as user edits.
 21. **A Git marker classifies its containing directory.** The presence of a
     `.git` directory or file makes its containing directory `repo.git`; its
     removal returns that same UUID to `workspace` or `folder`. Git command
     availability governs Card + Checkpoint capture, never classification, and
     `.git` itself is repository transport metadata that receives no entity
-    row. Worktree children retain local UUID rows, while their identities ride
-    in the repository state manifest rather than becoming individual cloud
-    records. A shallow repository carries its declared Git history boundary,
-    so a new machine never invents history beyond it.
+    row. Each such directory starts a repository rail: ordinary worktree
+    children retain local UUID rows and ride in their nearest repository state
+    manifest, while a nested repository and the ancestry spine that reaches it
+    remain cloud graph records with their own Card + Checkpoint transport. A
+    shallow repository carries its declared Git history boundary, so a new
+    machine never invents history beyond it.
 22. **Transfer moves content; it never discovers state.** `upload` moves one
     already-registered immutable artifact toward cloud storage and `download`
     moves that same artifact toward a machine cache. Neither operation scans,
@@ -175,6 +185,14 @@ its cutover.
     different block identities for the same complete bytes advances the
     content contract and storage namespace together. Readers remain additive;
     an immutable manifest is never reinterpreted or overwritten in place.
+33. **Detection proposes settled net truth; Record makes it durable.** Watch
+    contributes generation-stamped suspicion only. Detect reconciles identity,
+    current enrollment, type, repository territory, and exact replay from the
+    last verified notebook state to settled disk truth, then emits a complete
+    result record plus immutable cargo references. Record assigns mutation
+    identity and durable order before that Watch generation settles. Applied
+    incoming work is silenced only by verified notebook equality, never by
+    hiding watcher rings; filesystem absence alone has no lifecycle authority.
 
 ## Five surfaces, one behavior
 
@@ -204,9 +222,9 @@ src/entities/    the entity model's rule surface: the six-field record,
                  cloud and repo-state codecs — behind injected ports.
 src/watching/    the Watch pure cores: minimal coverage ownership and
                  generation-safe suspicion.
-src/detection/   the Detect pure cores: the adapter contract, three-channel
-                 compare (diff), continuity verdicts, classification,
-                 refusals, and enrollment policy.
+src/detection/   the Detect pure submodule: Watch boundary, identity compare,
+                 classification, enrollment, repository territory, exact
+                 replay proposals, net batches, and echo equality.
 src/registration/ the login-time user-ground convergence operation and its
                   injected local/cloud effect ports.
 src/transfer/    type-aware immutable artifact upload/download operations;

package/dist/detection/batch.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Net-difference planning for one settled Watch batch.
+ *
+ * Identity reconciliation and type-specific capture happen before this seam.
+ * This seam makes cancellation, unsettled truth, lifecycle authority, coverage
+ * requests, and Watch settlement one total decision.
+ */
+import type { CloudEntityRecord } from '../entities/cloud.js';
+import { type DetectedChangeProposal, type ReplayInstruction } from './record-proposal.js';
+import { type DetectionBatch, type DirectoryCoverageRequest } from './watch-boundary.js';
+export interface PresentTransition {
+    readonly truth: 'present';
+    /** Current root-relative address, used only for observation and coverage. */
+    readonly relPath: string;
+    readonly base: CloudEntityRecord | null;
+    readonly result: CloudEntityRecord;
+    readonly replay: ReplayInstruction;
+    readonly lifecycleAuthorization?: 'trash' | 'restore';
+}
+export interface AbsentTransition {
+    readonly truth: 'absent';
+    /** null is the absent-before/absent-after ephemeral cancellation case. */
+    readonly base: CloudEntityRecord | null;
+    /** Exact entity-law result, required only for an authorized Trash. */
+    readonly trashedResult?: CloudEntityRecord;
+    readonly lifecycleAuthorization?: 'trash';
+}
+export interface UnsettledTransition {
+    readonly truth: 'unsettled';
+    readonly reason?: string | undefined;
+}
+export type SettledTransition = PresentTransition | AbsentTransition | UnsettledTransition;
+export interface RetryDetectionBatch {
+    readonly kind: 'retry';
+    readonly reasons: readonly string[];
+}
+export interface ReadyDetectionBatch {
+    readonly kind: 'ready';
+    readonly proposals: readonly DetectedChangeProposal[];
+    /** Absences retained as repair evidence because no lifecycle act authorized Trash. */
+    readonly missing: readonly CloudEntityRecord[];
+    readonly coverage: readonly DirectoryCoverageRequest[];
+    /** Record may settle exactly this generation after durable acceptance. */
+    readonly settle: DetectionBatch;
+}
+export type DetectionBatchPlan = RetryDetectionBatch | ReadyDetectionBatch;
+/** Plan the complete net difference. No partial proposals escape an unsettled batch. */
+export declare function planDetectionBatch(batch: DetectionBatch, transitions: readonly SettledTransition[]): DetectionBatchPlan;
+//# sourceMappingURL=batch.d.ts.map

package/dist/detection/batch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch.d.ts","sourceRoot":"","sources":["../../src/detection/batch.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC9B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACvD;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACxC,sEAAsE;IACtE,QAAQ,CAAC,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAC3C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAC3C;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,MAAM,iBAAiB,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,mBAAmB,CAAC;AAE3F,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACtD,sFAAsF;IACtF,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACvD,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;AAM3E,wFAAwF;AACxF,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,cAAc,EACrB,WAAW,EAAE,SAAS,iBAAiB,EAAE,GACxC,kBAAkB,CAkDpB"}

package/dist/detection/batch.js

@@ -0,0 +1,66 @@
+/**
+ * Net-difference planning for one settled Watch batch.
+ *
+ * Identity reconciliation and type-specific capture happen before this seam.
+ * This seam makes cancellation, unsettled truth, lifecycle authority, coverage
+ * requests, and Watch settlement one total decision.
+ */
+import { CONTAINERS } from '../entities/types.js';
+import { detectedChangeProposal, } from './record-proposal.js';
+import { directoryCoverageRequests, } from './watch-boundary.js';
+const newlyDirectoryGround = (transition) => CONTAINERS.has(transition.result.type)
+    && (transition.base === null || !CONTAINERS.has(transition.base.type));
+/** Plan the complete net difference. No partial proposals escape an unsettled batch. */
+export function planDetectionBatch(batch, transitions) {
+    const unsettled = transitions.filter((transition) => transition.truth === 'unsettled');
+    if (unsettled.length > 0) {
+        return Object.freeze({
+            kind: 'retry',
+            reasons: Object.freeze(unsettled.map((transition) => transition.reason ?? 'truth is unsettled')),
+        });
+    }
+    const proposals = [];
+    const missing = [];
+    const createdDirectories = [];
+    for (const transition of transitions) {
+        if (transition.truth === 'present') {
+            const proposal = detectedChangeProposal(transition);
+            if (proposal)
+                proposals.push(proposal);
+            if (newlyDirectoryGround(transition)) {
+                createdDirectories.push(transition.relPath);
+            }
+            continue;
+        }
+        if (transition.truth !== 'absent') {
+            throw new Error('unsettled truth escaped the batch retry gate');
+        }
+        if (transition.base === null)
+            continue; // absent before and after: no entity existed
+        if (transition.base.status !== 'active')
+            continue;
+        if (transition.lifecycleAuthorization !== 'trash') {
+            missing.push(transition.base);
+            continue;
+        }
+        if (!transition.trashedResult) {
+            throw new Error('authorized Trash requires the entity law\'s exact trashed result');
+        }
+        const proposal = detectedChangeProposal({
+            base: transition.base,
+            result: transition.trashedResult,
+            replay: { kind: 'structure' },
+            lifecycleAuthorization: 'trash',
+        });
+        if (proposal)
+            proposals.push(proposal);
+    }
+    return Object.freeze({
+        kind: 'ready',
+        proposals: Object.freeze(proposals),
+        missing: Object.freeze(missing),
+        coverage: directoryCoverageRequests(batch, createdDirectories),
+        settle: batch,
+    });
+}
+//# sourceMappingURL=batch.js.map

package/dist/detection/batch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch.js","sourceRoot":"","sources":["../../src/detection/batch.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EACL,sBAAsB,GAGvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,yBAAyB,GAG1B,MAAM,qBAAqB,CAAC;AA6C7B,MAAM,oBAAoB,GAAG,CAAC,UAA6B,EAAW,EAAE,CACtE,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;OACnC,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAEzE,wFAAwF;AACxF,MAAM,UAAU,kBAAkB,CAChC,KAAqB,EACrB,WAAyC;IAEzC,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAClC,CAAC,UAAU,EAAqC,EAAE,CAAC,UAAU,CAAC,KAAK,KAAK,WAAW,CACpF,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,IAAI,oBAAoB,CAAC,CAAC;SACjG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAA6B,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,kBAAkB,GAAa,EAAE,CAAC;IACxC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;YACpD,IAAI,QAAQ;gBAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;gBACrC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC9C,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI;YAAE,SAAS,CAAC,6CAA6C;QACrF,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,SAAS;QAClD,IAAI,UAAU,CAAC,sBAAsB,KAAK,OAAO,EAAE,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC;YACtC,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,MAAM,EAAE,UAAU,CAAC,aAAa;YAChC,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;YAC7B,sBAAsB,EAAE,OAAO;SAChC,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QACnC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,QAAQ,EAAE,yBAAyB,CAAC,KAAK,EAAE,kBAAkB,CAAC;QAC9D,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;AACL,CAAC"}

package/dist/detection/content.d.ts

@@ -0,0 +1,30 @@
+/** Type-sensitive content capture from Detection's one settled byte read. */
+import { type ContentManifest } from '../contracts/content.js';
+import type { Sha256Hex } from '../entities/types.js';
+import type { TransferArtifact } from '../transfer/artifacts.js';
+import type { BinaryReplay, LinkReplay, TextReplay, TextSplice } from './record-proposal.js';
+export interface CapturedArtifact {
+    readonly artifact: TransferArtifact;
+    /** The exact settled bytes Detection already read; the cache seals these. */
+    readonly bytes: Uint8Array;
+    readonly manifest: ContentManifest;
+}
+export interface CapturedContent<Replay> {
+    readonly replay: Replay;
+    readonly cargo: CapturedArtifact;
+}
+/** The smallest single replacement span that transforms base bytes to result. */
+export declare function textSplice(base: Uint8Array, result: Uint8Array): TextSplice;
+/**
+ * Capture text as one verified byte splice when that instruction is smaller
+ * than the result bytes. The immutable snapshot is always sealed as repair and
+ * cold-materialization truth.
+ */
+export declare function captureTextChange(entityId: string, base: Uint8Array | null, result: Uint8Array, sha256Hex: Sha256Hex): CapturedContent<TextReplay> | null;
+/** Apply a text replay and verify its exact result, falling back to snapshot. */
+export declare function reproduceTextChange(base: Uint8Array | null, replay: TextReplay, snapshot: Uint8Array, sha256Hex: Sha256Hex): Uint8Array;
+/** Binary replay is the existing exact content manifest; Transfer moves gaps. */
+export declare function captureBinaryChange(entityId: string, previous: ContentManifest | null, result: Uint8Array, sha256Hex: Sha256Hex): CapturedContent<BinaryReplay> | null;
+/** A symlink's portable content is the literal target text, never its target. */
+export declare function captureLinkChange(entityId: string, previousTarget: string | null, target: string, sha256Hex: Sha256Hex): CapturedContent<LinkReplay> | null;
+//# sourceMappingURL=content.d.ts.map

package/dist/detection/content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.d.ts","sourceRoot":"","sources":["../../src/detection/content.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAErF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,OAAO,KAAK,EACV,YAAY,EACZ,UAAU,EACV,UAAU,EACV,UAAU,EACX,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;CACpC;AAED,MAAM,WAAW,eAAe,CAAC,MAAM;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;CAClC;AAuBD,iFAAiF;AACjF,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,UAAU,CAc3E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,UAAU,GAAG,IAAI,EACvB,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,SAAS,GACnB,eAAe,CAAC,UAAU,CAAC,GAAG,IAAI,CAkBpC;AAED,iFAAiF;AACjF,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,UAAU,GAAG,IAAI,EACvB,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,UAAU,EACpB,SAAS,EAAE,SAAS,GACnB,UAAU,CAqBZ;AAED,iFAAiF;AACjF,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,eAAe,GAAG,IAAI,EAChC,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,SAAS,GACnB,eAAe,CAAC,YAAY,CAAC,GAAG,IAAI,CActC;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,SAAS,GACnB,eAAe,CAAC,UAAU,CAAC,GAAG,IAAI,CAWpC"}

package/dist/detection/content.js

@@ -0,0 +1,115 @@
+/** Type-sensitive content capture from Detection's one settled byte read. */
+import { checkContentManifest } from '../contracts/content.js';
+import { utf8Encode } from '../entities/bytes.js';
+import { deriveUploadManifest } from '../transfer/upload.js';
+const capturedArtifact = (entityId, entityType, kind, input, sha256Hex) => {
+    const bytes = input.slice();
+    const artifact = {
+        entityId,
+        entityType,
+        kind,
+        contentHash: sha256Hex(bytes),
+    };
+    return Object.freeze({
+        artifact: Object.freeze(artifact),
+        bytes,
+        manifest: deriveUploadManifest(artifact, bytes, sha256Hex),
+    });
+};
+/** The smallest single replacement span that transforms base bytes to result. */
+export function textSplice(base, result) {
+    let prefix = 0;
+    const shared = Math.min(base.byteLength, result.byteLength);
+    while (prefix < shared && base[prefix] === result[prefix])
+        prefix += 1;
+    let suffix = 0;
+    while (suffix < shared - prefix
+        && base[base.byteLength - suffix - 1] === result[result.byteLength - suffix - 1]) {
+        suffix += 1;
+    }
+    return Object.freeze({
+        offset: prefix,
+        deleteBytes: base.byteLength - prefix - suffix,
+        insert: result.slice(prefix, result.byteLength - suffix),
+    });
+}
+/**
+ * Capture text as one verified byte splice when that instruction is smaller
+ * than the result bytes. The immutable snapshot is always sealed as repair and
+ * cold-materialization truth.
+ */
+export function captureTextChange(entityId, base, result, sha256Hex) {
+    const cargo = capturedArtifact(entityId, 'file.text', 'file', result, sha256Hex);
+    const basePayloadVersion = base === null ? null : sha256Hex(base);
+    if (basePayloadVersion === cargo.artifact.contentHash)
+        return null;
+    const delta = base === null ? null : textSplice(base, result);
+    // Two numeric fields are fixed overhead on the wire. This conservative
+    // estimate keeps a replace-all operation on the snapshot path.
+    const useDelta = delta !== null && delta.insert.byteLength + 16 < result.byteLength;
+    return Object.freeze({
+        replay: Object.freeze({
+            kind: 'file.text',
+            mode: useDelta ? 'delta' : 'snapshot',
+            basePayloadVersion,
+            resultPayloadVersion: cargo.artifact.contentHash,
+            delta: useDelta ? delta : null,
+        }),
+        cargo,
+    });
+}
+/** Apply a text replay and verify its exact result, falling back to snapshot. */
+export function reproduceTextChange(base, replay, snapshot, sha256Hex) {
+    const verifiedSnapshot = () => {
+        if (sha256Hex(snapshot) !== replay.resultPayloadVersion) {
+            throw new Error('text snapshot does not match its declared result');
+        }
+        return snapshot.slice();
+    };
+    if (replay.mode !== 'delta' || replay.delta === null || base === null
+        || sha256Hex(base) !== replay.basePayloadVersion) {
+        return verifiedSnapshot();
+    }
+    const { offset, deleteBytes, insert } = replay.delta;
+    if (!Number.isSafeInteger(offset) || !Number.isSafeInteger(deleteBytes)
+        || offset < 0 || deleteBytes < 0 || offset + deleteBytes > base.byteLength) {
+        return verifiedSnapshot();
+    }
+    const result = new Uint8Array(base.byteLength - deleteBytes + insert.byteLength);
+    result.set(base.subarray(0, offset), 0);
+    result.set(insert, offset);
+    result.set(base.subarray(offset + deleteBytes), offset + insert.byteLength);
+    return sha256Hex(result) === replay.resultPayloadVersion ? result : verifiedSnapshot();
+}
+/** Binary replay is the existing exact content manifest; Transfer moves gaps. */
+export function captureBinaryChange(entityId, previous, result, sha256Hex) {
+    if (previous !== null && !checkContentManifest(previous).ok) {
+        throw new Error('previous binary content manifest is invalid');
+    }
+    const cargo = capturedArtifact(entityId, 'file.binary', 'file', result, sha256Hex);
+    if (previous?.contentHash === cargo.artifact.contentHash)
+        return null;
+    return Object.freeze({
+        replay: Object.freeze({
+            kind: 'file.binary',
+            resultPayloadVersion: cargo.artifact.contentHash,
+            manifest: cargo.manifest,
+        }),
+        cargo,
+    });
+}
+/** A symlink's portable content is the literal target text, never its target. */
+export function captureLinkChange(entityId, previousTarget, target, sha256Hex) {
+    if (previousTarget === target)
+        return null;
+    const cargo = capturedArtifact(entityId, 'link', 'link', utf8Encode(target), sha256Hex);
+    return Object.freeze({
+        replay: Object.freeze({
+            kind: 'link',
+            resultPayloadVersion: cargo.artifact.contentHash,
+            target,
+        }),
+        cargo,
+    });
+}
+//# sourceMappingURL=content.js.map

package/dist/detection/content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.js","sourceRoot":"","sources":["../../src/detection/content.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,OAAO,EAAE,oBAAoB,EAAwB,MAAM,yBAAyB,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAGlD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAoB7D,MAAM,gBAAgB,GAAG,CACvB,QAAgB,EAChB,UAAgD,EAChD,IAAqB,EACrB,KAAiB,EACjB,SAAoB,EACF,EAAE;IACpB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG;QACf,QAAQ;QACR,UAAU;QACV,IAAI;QACJ,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC;KACrB,CAAC;IACX,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,KAAK;QACL,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC;KAC3D,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,iFAAiF;AACjF,MAAM,UAAU,UAAU,CAAC,IAAgB,EAAE,MAAkB;IAC7D,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5D,OAAO,MAAM,GAAG,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,CAAC,CAAC;IACvE,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,MAAM,GAAG,MAAM;WAC1B,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,MAAM,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,IAAI,CAAC,UAAU,GAAG,MAAM,GAAG,MAAM;QAC9C,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC;KACzD,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,IAAuB,EACvB,MAAkB,EAClB,SAAoB;IAEpB,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACjF,MAAM,kBAAkB,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,kBAAkB,KAAK,KAAK,CAAC,QAAQ,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9D,uEAAuE;IACvE,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC;IACpF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,WAAoB;YAC1B,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAgB,CAAC,CAAC,CAAC,UAAmB;YACvD,kBAAkB;YAClB,oBAAoB,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;YAChD,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;SAC/B,CAAC;QACF,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CACjC,IAAuB,EACvB,MAAkB,EAClB,QAAoB,EACpB,SAAoB;IAEpB,MAAM,gBAAgB,GAAG,GAAe,EAAE;QACxC,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;WAChE,SAAS,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACnD,OAAO,gBAAgB,EAAE,CAAC;IAC5B,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC;WAClE,MAAM,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7E,OAAO,gBAAgB,EAAE,CAAC;IAC5B,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,GAAG,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACjF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5E,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;AACzF,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,QAAgC,EAChC,MAAkB,EAClB,SAAoB;IAEpB,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACnF,IAAI,QAAQ,EAAE,WAAW,KAAK,KAAK,CAAC,QAAQ,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,aAAsB;YAC5B,oBAAoB,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;YAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;QACF,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,cAA6B,EAC7B,MAAc,EACd,SAAoB;IAEpB,IAAI,cAAc,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IACxF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,MAAe;YACrB,oBAAoB,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;YAChD,MAAM;SACP,CAAC;QACF,KAAK;KACN,CAAC,CAAC;AACL,CAAC"}

package/dist/detection/echo.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Echo judgment after incoming Apply.
+ *
+ * Apply never suppresses watcher rings. It verifies the incoming result and
+ * advances the notebook. The retained suspicion then uses this ordinary
+ * equality judgment: exact expected truth is silence; different truth is a
+ * real local change; unreadable truth is retried.
+ */
+import type { TruthReading } from './adapter-contract.js';
+import type { CloudEntityRecord } from '../entities/cloud.js';
+export type EchoDecision = {
+    readonly kind: 'silence';
+} | {
+    readonly kind: 'detect';
+} | {
+    readonly kind: 'retry';
+    readonly reason?: string | undefined;
+};
+export declare function echoDecision(notebook: Pick<CloudEntityRecord, 'status' | 'version'>, observed: TruthReading): EchoDecision;
+//# sourceMappingURL=echo.d.ts.map

package/dist/detection/echo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"echo.d.ts","sourceRoot":"","sources":["../../src/detection/echo.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAErE,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,QAAQ,GAAG,SAAS,CAAC,EACvD,QAAQ,EAAE,YAAY,GACrB,YAAY,CAYd"}

package/dist/detection/echo.js

@@ -0,0 +1,22 @@
+/**
+ * Echo judgment after incoming Apply.
+ *
+ * Apply never suppresses watcher rings. It verifies the incoming result and
+ * advances the notebook. The retained suspicion then uses this ordinary
+ * equality judgment: exact expected truth is silence; different truth is a
+ * real local change; unreadable truth is retried.
+ */
+export function echoDecision(notebook, observed) {
+    if (observed.truth === 'unsettled') {
+        return observed.reason === undefined
+            ? { kind: 'retry' }
+            : { kind: 'retry', reason: observed.reason };
+    }
+    if (notebook.status === 'active') {
+        return observed.truth === 'present' && observed.version === notebook.version
+            ? { kind: 'silence' }
+            : { kind: 'detect' };
+    }
+    return observed.truth === 'absent' ? { kind: 'silence' } : { kind: 'detect' };
+}
+//# sourceMappingURL=echo.js.map

package/dist/detection/echo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"echo.js","sourceRoot":"","sources":["../../src/detection/echo.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,MAAM,UAAU,YAAY,CAC1B,QAAuD,EACvD,QAAsB;IAEtB,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,QAAQ,CAAC,MAAM,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;YACnB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;YAC1E,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE;YACrB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACzB,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAChF,CAAC"}

package/dist/detection/enrollment.d.ts

@@ -1,13 +1,13 @@
 /**
- * Amalgm's default enrollment policy: which relative paths receive
- * workspace identities. Ratified by entity-model.md axiom 2 — amalgm's
- * manual enrollment policy decides what enrolls; external conventions
- * (gitignore) may inform it, never decide it implicitly.
+ * Detection enrollment policies.
  *
- * Machine-local metadata, dependencies, generated caches, and secrets
- * never receive workspace identities. The rule applies at every depth.
- * Pure string policy: a host may inject its own `EnrollmentPolicy`
- * everywhere this default is accepted.
+ * Current user ground enrolls everything except structural local state and
+ * paths excluded by its tracked `.amalgmignore`; `.gitignore` never decides
+ * Amalgm enrollment. `defaultShouldEnroll` remains only as the older explicit
+ * registration policy for additive API compatibility. Current portable paths
+ * already use `/`; a host converts its native separator at the boundary. A
+ * literal `\\` is therefore preserved as part of a POSIX filename. Both
+ * policies are pure strings-in/verdict-out and never inspect disk themselves.
  */
 /** The injected policy shape: relative path in, verdict out. */
 export type EnrollmentPolicy = (relPath: string) => boolean;
@@ -17,9 +17,20 @@ export type EnrollmentPolicy = (relPath: string) => boolean;
 export declare const AMALGM_CONTROL_DIRECTORY = ".amalgm";
 export declare const AMALGM_IGNORE_FILE = ".amalgmignore";
 export declare const DEFAULT_AMALGM_IGNORE = "/.amalgm/\n";
-/** The default policy. Both separators are path separators; '' never enrolls. */
+/**
+ * Legacy explicit-registration policy retained for additive API compatibility.
+ * Current user-ground Detect must use {@link createUserGroundEnrollmentPolicy};
+ * there are no implicit dependency, dotfile, cache, or secret exclusions.
+ * Both separators are path separators; '' never enrolls.
+ *
+ * @deprecated Use `createUserGroundEnrollmentPolicy` for current user ground.
+ */
 export declare const defaultShouldEnroll: EnrollmentPolicy;
-/** One normalized spelling for enrollment and ignore matching. */
+/**
+ * One normalized spelling for portable enrollment and ignore matching.
+ * Portable relative paths use `/`. Do not reinterpret `\\`: it is a valid,
+ * literal filename character on POSIX after the host has crossed this seam.
+ */
 export declare function normalizedRelativePath(relPath: string): string;
 /** `.amalgm/` is local control state wherever a registered tree is rooted. */
 export declare function isAmalgmControlPath(relPath: string): boolean;

package/dist/detection/enrollment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enrollment.d.ts","sourceRoot":"","sources":["../../src/detection/enrollment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,gEAAgE;AAChE,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;AAE5D;;qEAEqE;AACrE,eAAO,MAAM,wBAAwB,YAAY,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,qBAAqB,gBAAoC,CAAC;AAgDvE,iFAAiF;AACjF,eAAO,MAAM,mBAAmB,EAAE,gBAMjC,CAAC;AAEF,kEAAkE;AAClE,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAM9D;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED;8EAC8E;AAC9E,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAGjE;AAsDD;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,UAAU,SAAK,GAAG,gBAAgB,CAalF"}
+{"version":3,"file":"enrollment.d.ts","sourceRoot":"","sources":["../../src/detection/enrollment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,gEAAgE;AAChE,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;AAE5D;;qEAEqE;AACrE,eAAO,MAAM,wBAAwB,YAAY,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,qBAAqB,gBAAoC,CAAC;AAgDvE;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,EAAE,gBAMjC,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK9D;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED;8EAC8E;AAC9E,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAGjE;AAsDD;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,UAAU,SAAK,GAAG,gBAAgB,CAalF"}

package/dist/detection/enrollment.js

@@ -1,13 +1,13 @@
 /**
- * Amalgm's default enrollment policy: which relative paths receive
- * workspace identities. Ratified by entity-model.md axiom 2 — amalgm's
- * manual enrollment policy decides what enrolls; external conventions
- * (gitignore) may inform it, never decide it implicitly.
+ * Detection enrollment policies.
  *
- * Machine-local metadata, dependencies, generated caches, and secrets
- * never receive workspace identities. The rule applies at every depth.
- * Pure string policy: a host may inject its own `EnrollmentPolicy`
- * everywhere this default is accepted.
+ * Current user ground enrolls everything except structural local state and
+ * paths excluded by its tracked `.amalgmignore`; `.gitignore` never decides
+ * Amalgm enrollment. `defaultShouldEnroll` remains only as the older explicit
+ * registration policy for additive API compatibility. Current portable paths
+ * already use `/`; a host converts its native separator at the boundary. A
+ * literal `\\` is therefore preserved as part of a POSIX filename. Both
+ * policies are pure strings-in/verdict-out and never inspect disk themselves.
  */
 /** The Git-like names at the user-ground boundary. Structural coordination
  * state is local and cannot be negated by user policy; the ignore file is
@@ -63,9 +63,16 @@ function isPrivateFile(name) {
         return true;
     return /\.(?:key|keystore|kdbx|p12|pfx|pem|ppk|tfstate(?:\.backup)?)$/i.test(name);
 }
-/** The default policy. Both separators are path separators; '' never enrolls. */
+/**
+ * Legacy explicit-registration policy retained for additive API compatibility.
+ * Current user-ground Detect must use {@link createUserGroundEnrollmentPolicy};
+ * there are no implicit dependency, dotfile, cache, or secret exclusions.
+ * Both separators are path separators; '' never enrolls.
+ *
+ * @deprecated Use `createUserGroundEnrollmentPolicy` for current user ground.
+ */
 export const defaultShouldEnroll = (relPath) => {
-    const parts = normalizedRelativePath(relPath).split('/').filter(Boolean);
+    const parts = normalizedRelativePath(String(relPath || '').replace(/\\/g, '/')).split('/').filter(Boolean);
     const name = parts.at(-1);
     if (name === undefined || parts.some((part) => EXCLUDED_DIRECTORIES.has(part)))
         return false;
@@ -73,10 +80,13 @@ export const defaultShouldEnroll = (relPath) => {
         return false;
     return !name.startsWith('.#') && !name.endsWith('~') && !/\.(?:swp|swo)$/i.test(name);
 };
-/** One normalized spelling for enrollment and ignore matching. */
+/**
+ * One normalized spelling for portable enrollment and ignore matching.
+ * Portable relative paths use `/`. Do not reinterpret `\\`: it is a valid,
+ * literal filename character on POSIX after the host has crossed this seam.
+ */
 export function normalizedRelativePath(relPath) {
     return String(relPath || '')
-        .replace(/\\/g, '/')
         .replace(/^\.\//, '')
         .replace(/^\/+|\/+$/g, '')
         .replace(/\/{2,}/g, '/');

package/dist/detection/enrollment.js.map

@@ -1 +1 @@
-{"version":3,"file":"enrollment.js","sourceRoot":"","sources":["../../src/detection/enrollment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH;;qEAEqE;AACrE,MAAM,CAAC,MAAM,wBAAwB,GAAG,SAAS,CAAC;AAClD,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAClD,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,wBAAwB,KAAK,CAAC;AAEvE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,SAAS;IACT,MAAM;IACN,QAAQ;IACR,SAAS;IACT,MAAM;IACN,QAAQ;IACR,SAAS;IACT,KAAK;IACL,OAAO;IACP,aAAa;IACb,OAAO;IACP,aAAa;IACb,eAAe;IACf,eAAe;IACf,aAAa;IACb,MAAM;IACN,MAAM;IACN,aAAa;IACb,QAAQ;IACR,OAAO;IACP,OAAO;IACP,aAAa;IACb,UAAU;IACV,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,WAAW;IACX,WAAW;IACX,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;CACjB,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,IAAI,4DAA4D,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzF,IAAI,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,yEAAyE,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtG,IAAI,0DAA0D,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,OAAO,gEAAgE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrF,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAqB,CAAC,OAAO,EAAE,EAAE;IAC/D,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7F,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxF,CAAC,CAAC;AAEF,kEAAkE;AAClE,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;SACzB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;SACzB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;AACvF,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrE,OAAO,+CAA+C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAOD,SAAS,WAAW,CAAC,SAAiB;IACpC,OAAO,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAW,CAAC;QAC3C,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC/B,OAAO,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG;oBAAE,KAAK,IAAI,CAAC,CAAC;gBAC9C,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAC/B,KAAK,IAAI,CAAC,CAAC;oBACX,UAAU,IAAI,UAAU,CAAC;gBAC3B,CAAC;qBAAM,CAAC;oBACN,UAAU,IAAI,IAAI,CAAC;gBACrB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,UAAU,IAAI,OAAO,CAAC;YACxB,CAAC;QACH,CAAC;aAAM,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAC7B,UAAU,IAAI,MAAM,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,UAAU,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,GAAG,IAAI,CAAC;QACf,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gCAAgC,CAAC,UAAU,GAAG,EAAE;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;SAC5D,MAAM,CAAC,CAAC,IAAI,EAAsB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACvD,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,IAAI,wBAAwB,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAChG,IAAI,OAAO,KAAK,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAChD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,QAAQ,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9D,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"enrollment.js","sourceRoot":"","sources":["../../src/detection/enrollment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH;;qEAEqE;AACrE,MAAM,CAAC,MAAM,wBAAwB,GAAG,SAAS,CAAC;AAClD,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAClD,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,wBAAwB,KAAK,CAAC;AAEvE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,SAAS;IACT,MAAM;IACN,QAAQ;IACR,SAAS;IACT,MAAM;IACN,QAAQ;IACR,SAAS;IACT,KAAK;IACL,OAAO;IACP,aAAa;IACb,OAAO;IACP,aAAa;IACb,eAAe;IACf,eAAe;IACf,aAAa;IACb,MAAM;IACN,MAAM;IACN,aAAa;IACb,QAAQ;IACR,OAAO;IACP,OAAO;IACP,aAAa;IACb,UAAU;IACV,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,WAAW;IACX,WAAW;IACX,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;CACjB,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,IAAI,4DAA4D,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzF,IAAI,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,yEAAyE,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtG,IAAI,0DAA0D,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,OAAO,gEAAgE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAqB,CAAC,OAAO,EAAE,EAAE;IAC/D,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7F,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxF,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;SACzB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;SACzB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;AACvF,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrE,OAAO,+CAA+C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAOD,SAAS,WAAW,CAAC,SAAiB;IACpC,OAAO,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAW,CAAC;QAC3C,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC/B,OAAO,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG;oBAAE,KAAK,IAAI,CAAC,CAAC;gBAC9C,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAC/B,KAAK,IAAI,CAAC,CAAC;oBACX,UAAU,IAAI,UAAU,CAAC;gBAC3B,CAAC;qBAAM,CAAC;oBACN,UAAU,IAAI,IAAI,CAAC;gBACrB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,UAAU,IAAI,OAAO,CAAC;YACxB,CAAC;QACH,CAAC;aAAM,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAC7B,UAAU,IAAI,MAAM,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,UAAU,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,GAAG,IAAI,CAAC;QACf,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gCAAgC,CAAC,UAAU,GAAG,EAAE;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;SAC5D,MAAM,CAAC,CAAC,IAAI,EAAsB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACvD,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,IAAI,wBAAwB,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAChG,IAAI,OAAO,KAAK,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAChD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,QAAQ,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9D,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC"}

package/dist/detection/index.d.ts

@@ -14,14 +14,28 @@
  *                       judgment, the reference adapter
  * - `classify`          text/binary from detect's own read evidence
  * - `refusal`           declined-vs-broken, named where it is raised
- * - `enrollment`        the default manual enrollment policy
+ * - `enrollment`        tracked user-ground policy plus legacy compatibility
  * - `diff`              the compare functions: file/dir/link identity
  * - `continuity`        root rescue and the undecided address
+ * - `watch-boundary`    generation-safe Watch input and coverage output
+ * - `territory`         nearest-repository recorder selection
+ * - `record-proposal`   the exact Detect-to-Record contract
+ * - `batch`             net-difference planning and Watch settlement
+ * - `content`           text/binary/link replay from one captured read
+ * - `repository`        verified Card + Checkpoint transport planning
+ * - `echo`              incoming Apply equality without suppression
  */
 export * from './adapter-contract.js';
+export * from './batch.js';
 export * from './classify.js';
 export * from './continuity.js';
+export * from './content.js';
 export * from './diff.js';
+export * from './echo.js';
 export * from './enrollment.js';
+export * from './record-proposal.js';
+export * from './repository.js';
 export * from './refusal.js';
+export * from './territory.js';
+export * from './watch-boundary.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/detection/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/detection/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/detection/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC"}

package/dist/detection/index.js

@@ -14,14 +14,28 @@
  *                       judgment, the reference adapter
  * - `classify`          text/binary from detect's own read evidence
  * - `refusal`           declined-vs-broken, named where it is raised
- * - `enrollment`        the default manual enrollment policy
+ * - `enrollment`        tracked user-ground policy plus legacy compatibility
  * - `diff`              the compare functions: file/dir/link identity
  * - `continuity`        root rescue and the undecided address
+ * - `watch-boundary`    generation-safe Watch input and coverage output
+ * - `territory`         nearest-repository recorder selection
+ * - `record-proposal`   the exact Detect-to-Record contract
+ * - `batch`             net-difference planning and Watch settlement
+ * - `content`           text/binary/link replay from one captured read
+ * - `repository`        verified Card + Checkpoint transport planning
+ * - `echo`              incoming Apply equality without suppression
  */
 export * from './adapter-contract.js';
+export * from './batch.js';
 export * from './classify.js';
 export * from './continuity.js';
+export * from './content.js';
 export * from './diff.js';
+export * from './echo.js';
 export * from './enrollment.js';
+export * from './record-proposal.js';
+export * from './repository.js';
 export * from './refusal.js';
+export * from './territory.js';
+export * from './watch-boundary.js';
 //# sourceMappingURL=index.js.map

package/dist/detection/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/detection/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/detection/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC"}