@amalgm/live 0.2.26 → 0.2.28

package/dist-cjs/detection/record-proposal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-proposal.js","sourceRoot":"","sources":["../../src/detection/record-proposal.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAsMH,wDA0DC;AA9PD,mDAG8B;AAC9B,mDAAuD;AACvD,wDAAqF;AACrF,2DAAoF;AAEvE,QAAA,wBAAwB,GAAG,mCAAmC,CAAC;AAkF5E,MAAM,IAAI,GAAG,gBAAgB,CAAC;AAE9B,MAAM,QAAQ,GAAG,CACf,IAA8B,EAC9B,MAAyB,EACV,EAAE;IACjB,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,oBAAoB,GAAG,CAAC,0BAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC;IAC9F,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,IAAI,oBAAoB,CAAC;WACtE,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACvF,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aACjD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,IAA8B,EAC9B,MAAyB,EACzB,MAA8B,EACrB,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ;OACnC,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;OAC1E,CAAC,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAE5E,MAAM,cAAc,GAAG,CACrB,IAA8B,EAC9B,MAAyB,EACzB,MAA8B,EAC9B,MAAyB,EACnB,EAAE;IACR,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,YAAY,MAAM,CAAC,IAAI,uBAAuB,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,YAAY,MAAM,CAAC,IAAI,wCAAwC,CAAC,CAAC;IACnF,CAAC;IACD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,WAAW;YACd,MAAM,gBAAgB,GAAG,IAAI,EAAE,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;gBAC7E,CAAC,CAAC,IAAI,CAAC,cAAc;gBACrB,CAAC,CAAC,IAAI,CAAC;YACT,IAAI,MAAM,CAAC,kBAAkB,KAAK,gBAAgB;mBAC7C,MAAM,CAAC,oBAAoB,KAAK,MAAM,CAAC,cAAc;mBACrD,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC3D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;mBACtC,CAAC,MAAM,CAAC,kBAAkB,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;gBACnF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;mBACpB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;uBACpE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC;uBAC/E,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,YAAY,UAAU,CAAC,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM;QACR,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAA,iCAAoB,EAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;YAC9E,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,oBAAoB,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1E,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,MAAM;YACT,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;mBAChC,MAAM,CAAC,oBAAoB,KAAK,MAAM,CAAC,cAAc;mBACrD,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,MAAM;QACR,KAAK,UAAU;YACb,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,cAAc;mBACvC,MAAM,CAAC,gBAAgB,KAAK,IAAI;mBAChC,MAAM,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB;mBACnD,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,gBAAgB,CAAC;qBAC9E,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;mBAChC,CAAC,MAAM,CAAC,sBAAsB,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;mBACrF,OAAO,MAAM,CAAC,WAAW,KAAK,SAAS;mBACvC,OAAO,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;YACtF,CAAC;YACD,MAAM;IACV,CAAC;AACH,CAAC,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,sBAAsB,CACpC,KAA0B;IAE1B,MAAM,MAAM,GAAG,IAAA,uBAAY,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,uBAAY,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,IAAI,EAAE,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC1F,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;eACtC,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;eACrC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;eACzB,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;eAC7B,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,CAAC;QACnD,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,IAAI,IAAI,KAAK,IAAI,IAAI,0BAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YACjF,uEAAuE;YACvE,yEAAyE;YACzE,yDAAyD;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,sBAAsB,KAAK,OAAO,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAEnD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,gCAAiB,EAAC,MAAM,CAAC,CAAC;IACtF,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,YAAY,MAAM,CAAC,IAAI,sCAAsC,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,gCAAwB;QAClC,QAAQ,EAAE,MAAM,CAAC,IAAI;QACrB,YAAY,EAAE,IAAI,EAAE,OAAO,IAAI,IAAI;QACnC,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;KAC1D,CAAC,CAAC;AACL,CAAC"}

package/dist-cjs/detection/refusal.js

@@ -0,0 +1,44 @@
+"use strict";
+/**
+ * A REFUSAL: the boundary understood the request and declined it.
+ * Ratified by entity-implementation.md ("A refusal is named where it is
+ * raised").
+ *
+ * Two things can go wrong when a caller asks for something, and they
+ * mean opposite things:
+ *
+ *   a refusal   the request named ground amalgm will not take — excluded
+ *               by enrollment policy, already owned by another tree, not
+ *               there at all. Nothing is broken. The message IS the
+ *               reason and is meant to be shown to whoever asked.
+ *   a fault     the boundary could not do its job — a torn identity
+ *               store, an unusable database, a bug. The request was
+ *               fine; the installation is not.
+ *
+ * A refusal is NAMED WHERE IT IS RAISED, by the code that decided to
+ * refuse. It is never guessed later from an error's wording: matching
+ * on message text would quietly reclassify every fault as the caller's
+ * mistake the moment a message changed, and "your path is bad" is the
+ * worst possible thing to say on the day the identity store tears.
+ *
+ * Callers that must answer differently — an HTTP status, an exit code —
+ * ask `isRefusal`. Everything else stays an ordinary Error and travels
+ * to whatever handles faults. The mark is a registry symbol
+ * (`Symbol.for`), so a refusal raised by one copy of this module is
+ * recognized by every other.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.refusal = refusal;
+exports.isRefusal = isRefusal;
+const REFUSAL = Symbol.for('amalgm.registration.refusal');
+/** Decline a request, with the reason the caller should be shown. */
+function refusal(message) {
+    const error = new Error(message);
+    error[REFUSAL] = true;
+    return error;
+}
+/** True only for an error this boundary deliberately raised as a refusal. */
+function isRefusal(error) {
+    return Boolean(error && error[REFUSAL]);
+}
+//# sourceMappingURL=refusal.js.map

package/dist-cjs/detection/refusal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refusal.js","sourceRoot":"","sources":["../../src/detection/refusal.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;AAKH,0BAIC;AAGD,8BAEC;AAZD,MAAM,OAAO,GAAkB,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAEzE,qEAAqE;AACrE,SAAgB,OAAO,CAAC,OAAe;IACrC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAgC,CAAC;IAChE,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IACtB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,SAAgB,SAAS,CAAC,KAAc;IACtC,OAAO,OAAO,CAAC,KAAK,IAAK,KAAiC,CAAC,OAAO,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist-cjs/detection/repository.js

@@ -0,0 +1,67 @@
+"use strict";
+/** Repository detection through the existing Card + Checkpoint transport. */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.captureRepositoryChange = captureRepositoryChange;
+const repo_states_js_1 = require("../entities/repo-states.js");
+const upload_js_1 = require("../transfer/upload.js");
+const verifyState = (state, sha256Hex) => {
+    const cardId = (0, repo_states_js_1.deriveCardId)(state.card, sha256Hex);
+    const checkpointId = (0, repo_states_js_1.deriveCheckpointId)(state.checkpoint, sha256Hex);
+    const stateId = (0, repo_states_js_1.deriveStateId)(cardId, checkpointId, sha256Hex);
+    if (state.cardId !== cardId || state.checkpointId !== checkpointId || state.stateId !== stateId) {
+        throw new Error('repository capture IDs do not describe its Card and Checkpoint');
+    }
+    if (state.pack !== null && sha256Hex(state.pack.bytes) !== state.pack.sha256) {
+        throw new Error('repository Git pack does not match its declared hash');
+    }
+};
+/**
+ * Verify a fresh full Card + Checkpoint observation and seal one incremental
+ * repository transport. Git discovery and pack construction are host effects;
+ * this function owns the portable IDs, identity-map delta, binary transport,
+ * and exact cargo head.
+ */
+function captureRepositoryChange(input, sha256Hex) {
+    verifyState(input.state, sha256Hex);
+    if (input.previous
+        && new Set(input.previous.identity.map((entry) => entry.path)).size !== input.previous.identity.length) {
+        throw new Error('previous repository identity map has duplicate paths');
+    }
+    const identity = (0, repo_states_js_1.planRepositoryIdentity)(input.identity, input.previous?.identity ?? null, sha256Hex);
+    const currentIdentityHash = (0, repo_states_js_1.repositoryIdentityHash)(input.identity, sha256Hex);
+    if (input.previous?.stateId === input.state.stateId
+        && (0, repo_states_js_1.repositoryIdentityHash)(input.previous.identity, sha256Hex) === currentIdentityHash) {
+        return null;
+    }
+    const bytes = (0, repo_states_js_1.encodeRepositoryTransport)(input.state, {
+        parentTransportVersion: input.previous?.transportVersion ?? null,
+        identityHash: identity.identityHash,
+        identityDelta: identity.identityDelta,
+    });
+    const transportVersion = sha256Hex(bytes);
+    const artifact = Object.freeze({
+        entityId: input.entityId,
+        entityType: 'repo.git',
+        kind: 'git',
+        contentHash: transportVersion,
+    });
+    const cargo = Object.freeze({
+        artifact,
+        bytes,
+        manifest: (0, upload_js_1.deriveUploadManifest)(artifact, bytes, sha256Hex),
+    });
+    return Object.freeze({
+        replay: Object.freeze({
+            kind: 'repo.git',
+            stateId: input.state.stateId,
+            cardId: input.state.cardId,
+            checkpointId: input.state.checkpointId,
+            cardChanged: input.previous?.cardId !== input.state.cardId,
+            checkpointChanged: input.previous?.checkpointId !== input.state.checkpointId,
+            parentTransportVersion: input.previous?.transportVersion ?? null,
+            transportVersion,
+        }),
+        cargo,
+    });
+}
+//# sourceMappingURL=repository.js.map

package/dist-cjs/detection/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../src/detection/repository.ts"],"names":[],"mappings":";AAAA,6EAA6E;;AAqD7E,0DAkDC;AArGD,+DASoC;AAEpC,qDAA6D;AAsB7D,MAAM,WAAW,GAAG,CAAC,KAAgB,EAAE,SAAoB,EAAQ,EAAE;IACnE,MAAM,MAAM,GAAG,IAAA,6BAAY,EAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,IAAA,mCAAkB,EAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,IAAA,8BAAa,EAAC,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,uBAAuB,CACrC,KAA6B,EAC7B,SAAoB;IAEpB,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,QAAQ;WACb,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,QAAQ,GAAG,IAAA,uCAAsB,EACrC,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,QAAQ,EAAE,QAAQ,IAAI,IAAI,EAChC,SAAS,CACV,CAAC;IACF,MAAM,mBAAmB,GAAG,IAAA,uCAAsB,EAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,QAAQ,EAAE,OAAO,KAAK,KAAK,CAAC,KAAK,CAAC,OAAO;WAC9C,IAAA,uCAAsB,EAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,mBAAmB,EAAE,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,IAAA,0CAAyB,EAAC,KAAK,CAAC,KAAK,EAAE;QACnD,sBAAsB,EAAE,KAAK,CAAC,QAAQ,EAAE,gBAAgB,IAAI,IAAI;QAChE,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,aAAa,EAAE,QAAQ,CAAC,aAAa;KACtC,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,UAAmB;QAC/B,IAAI,EAAE,KAAc;QACpB,WAAW,EAAE,gBAAgB;KAC9B,CAAC,CAAC;IACH,MAAM,KAAK,GAAqB,MAAM,CAAC,MAAM,CAAC;QAC5C,QAAQ;QACR,KAAK;QACL,QAAQ,EAAE,IAAA,gCAAoB,EAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC;KAC3D,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,UAAmB;YACzB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;YAC5B,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YAC1B,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY;YACtC,WAAW,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM;YAC1D,iBAAiB,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,KAAK,KAAK,CAAC,KAAK,CAAC,YAAY;YAC5E,sBAAsB,EAAE,KAAK,CAAC,QAAQ,EAAE,gBAAgB,IAAI,IAAI;YAChE,gBAAgB;SACjB,CAAC;QACF,KAAK;KACN,CAAC,CAAC;AACL,CAAC"}

package/dist-cjs/detection/territory.js

@@ -0,0 +1,82 @@
+"use strict";
+/** Nearest-repository ownership for one detected entity transition. */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nearestRepository = nearestRepository;
+exports.recorderTargets = recorderTargets;
+/** The nearest repo at or above `uuid`; nested repositories win. */
+function nearestRepository(uuid, byUuid) {
+    const seen = new Set();
+    let cursor = uuid;
+    while (cursor !== null) {
+        if (seen.has(cursor))
+            throw new Error(`registry corrupt: parent cycle at ${cursor}`);
+        seen.add(cursor);
+        const row = byUuid(cursor);
+        if (!row)
+            throw new Error(`no entity ${cursor}`);
+        if (row.type === 'repo.git')
+            return row;
+        cursor = row.parentUuid;
+    }
+    return null;
+}
+/**
+ * Name every recorder whose state a transition can change.
+ *
+ * Ordinary changes outside repository territory publish on the entity UUID.
+ * A change wholly inside one repository publishes only the repository parcel.
+ * Crossing a repository boundary also publishes the entity graph transition,
+ * plus the source and/or destination repositories whose identity maps and
+ * Checkpoints changed.
+ */
+function recorderTargets(transition, byUuid) {
+    const { base, result } = transition;
+    if (base !== null && base.uuid !== result.uuid) {
+        throw new Error('a recorder transition cannot change entity UUID');
+    }
+    const before = nearestRepository(base?.parentUUID ?? null, byUuid);
+    const after = nearestRepository(result.parentUUID, byUuid);
+    const add = (targets, target) => {
+        if (!targets.some((candidate) => candidate.resourceId === target.resourceId))
+            targets.push(target);
+    };
+    // Every `.git` boundary starts its own repository rail, even when nested.
+    // Its enclosing repository changes only when the boundary's graph entry
+    // changes; ordinary Card/Checkpoint advancement remains on the inner rail.
+    if (base?.type === 'repo.git' || result.type === 'repo.git') {
+        const targets = [];
+        add(targets, {
+            kind: result.type === 'repo.git' ? 'repository' : 'entity',
+            resourceId: result.uuid,
+        });
+        const boundaryChanged = base === null
+            || base.type !== result.type
+            || base.parentUUID !== result.parentUUID
+            || base.name !== result.name
+            || base.status !== result.status;
+        if (boundaryChanged) {
+            if (before)
+                add(targets, { kind: 'repository', resourceId: before.uuid });
+            if (after)
+                add(targets, { kind: 'repository', resourceId: after.uuid });
+        }
+        return Object.freeze(targets);
+    }
+    if (base === null) {
+        return Object.freeze(after
+            ? [{ kind: 'repository', resourceId: after.uuid }]
+            : [{ kind: 'entity', resourceId: result.uuid }]);
+    }
+    if (before?.uuid === after?.uuid) {
+        return Object.freeze(before
+            ? [{ kind: 'repository', resourceId: before.uuid }]
+            : [{ kind: 'entity', resourceId: result.uuid }]);
+    }
+    const targets = [{ kind: 'entity', resourceId: result.uuid }];
+    for (const repository of [before, after]) {
+        if (repository)
+            add(targets, { kind: 'repository', resourceId: repository.uuid });
+    }
+    return Object.freeze(targets);
+}
+//# sourceMappingURL=territory.js.map

package/dist-cjs/detection/territory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"territory.js","sourceRoot":"","sources":["../../src/detection/territory.ts"],"names":[],"mappings":";AAAA,uEAAuE;;AAuBvE,8CAeC;AAWD,0CAkDC;AA7ED,oEAAoE;AACpE,SAAgB,iBAAiB,CAC/B,IAAmB,EACnB,MAAgC;IAEhC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,OAAO,MAAM,KAAK,IAAI,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;QACjD,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,GAAG,CAAC;QACxC,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,eAAe,CAC7B,UAA8B,EAC9B,MAAgC;IAEhC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;IACpC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,UAAU,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,CAAC,OAAyB,EAAE,MAAsB,EAAQ,EAAE;QACtE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrG,CAAC,CAAC;IAEF,0EAA0E;IAC1E,wEAAwE;IACxE,2EAA2E;IAC3E,IAAI,IAAI,EAAE,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC5D,MAAM,OAAO,GAAqB,EAAE,CAAC;QACrC,GAAG,CAAC,OAAO,EAAE;YACX,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ;YAC1D,UAAU,EAAE,MAAM,CAAC,IAAI;SACxB,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,IAAI,KAAK,IAAI;eAChC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;eACzB,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;eACrC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;eACzB,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;QACnC,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,MAAM;gBAAE,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1E,IAAI,KAAK;gBAAE,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK;YACxB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAqB,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YAC3D,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,EAAE,IAAI,KAAK,KAAK,EAAE,IAAI,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM;YACzB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAqB,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5D,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,OAAO,GAAqB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAChF,KAAK,MAAM,UAAU,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QACzC,IAAI,UAAU;YAAE,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC"}

package/dist-cjs/detection/watch-boundary.js

@@ -0,0 +1,51 @@
+"use strict";
+/**
+ * The complete portable boundary from Watch into Detect and back.
+ *
+ * Watch contributes generation-stamped suspicion only. Detect retains that
+ * generation until Record has durably accepted every resulting proposal. A
+ * discovered directory creates a logical coverage request; the Watch host
+ * decides whether its backend needs another native handle.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectionBatch = detectionBatch;
+exports.directoryCoverageRequests = directoryCoverageRequests;
+const enrollment_js_1 = require("./enrollment.js");
+const detectionRelativePath = (path) => {
+    const raw = String(path);
+    if (raw.startsWith('/') || /^[A-Za-z]:[\\/]/.test(raw) || raw.includes('\0')) {
+        throw new Error('detection path must be root-relative');
+    }
+    const normalized = (0, enrollment_js_1.normalizedRelativePath)(raw);
+    if (!normalized || normalized.split('/').some((segment) => segment === '.' || segment === '..')) {
+        throw new Error('detection path must be root-relative');
+    }
+    return normalized;
+};
+/** Freeze Watch's snapshot into Detection's input vocabulary. */
+function detectionBatch(rootId, snapshot) {
+    if (!rootId)
+        throw new Error('detection batch root id is required');
+    if (!Number.isSafeInteger(snapshot.generation) || snapshot.generation < 0) {
+        throw new Error('detection batch generation is invalid');
+    }
+    const suspects = snapshot.paths === null
+        ? null
+        : Object.freeze([...new Set(snapshot.paths.map(detectionRelativePath))]);
+    return Object.freeze({ rootId, generation: snapshot.generation, suspects });
+}
+/**
+ * Tell Watch that newly enrolled directory ground now exists. This is emitted
+ * on every platform; only the Watch backend knows whether coverage expansion
+ * means another Linux inotify handle or merely a routing-table update.
+ */
+function directoryCoverageRequests(batch, createdDirectories) {
+    const paths = [...new Set(createdDirectories.map(detectionRelativePath))]
+        .sort();
+    return Object.freeze(paths.map((relPath) => Object.freeze({
+        kind: 'directory-discovered',
+        rootId: batch.rootId,
+        relPath,
+    })));
+}
+//# sourceMappingURL=watch-boundary.js.map

package/dist-cjs/detection/watch-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch-boundary.js","sourceRoot":"","sources":["../../src/detection/watch-boundary.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AA+BH,wCAYC;AAOD,8DAWC;AA1DD,mDAAyD;AAEzD,MAAM,qBAAqB,GAAG,CAAC,IAAY,EAAU,EAAE;IACrD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,UAAU,GAAG,IAAA,sCAAsB,EAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAeF,iEAAiE;AACjE,SAAgB,cAAc,CAC5B,MAAc,EACd,QAA2B;IAE3B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,KAAK,IAAI;QACtC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,SAAgB,yBAAyB,CACvC,KAAqC,EACrC,kBAAqC;IAErC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;SACtE,IAAI,EAAE,CAAC;IACV,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QACxD,IAAI,EAAE,sBAA+B;QACrC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO;KACR,CAAC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist-cjs/entities/bytes.js

@@ -0,0 +1,92 @@
+"use strict";
+/**
+ * Portable byte codecs shared by the entity layer — UTF-8, standard base64
+ * (padded, as Node's `Buffer#toString('base64')` emits it), base64url, and
+ * hex. They exist so cloud.ts and repo-states.ts can produce byte-for-byte
+ * the same wire text the engine produces with Buffer, without src/
+ * importing any Node module (PURPOSE.md axiom 2).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bytesToBase64Url = exports.bytesToBase64 = exports.utf8Decode = exports.utf8Encode = void 0;
+exports.base64ToBytes = base64ToBytes;
+exports.hexToBytes = hexToBytes;
+const BASE64 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
+const BASE64_URL = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
+const utf8Encode = (text) => new TextEncoder().encode(text);
+exports.utf8Encode = utf8Encode;
+const utf8Decode = (bytes) => new TextDecoder().decode(bytes);
+exports.utf8Decode = utf8Decode;
+function encode(bytes, alphabet, pad) {
+    // Write the ASCII result once. Building base64 through string appends makes
+    // V8 retain repository-sized ropes whose intermediate nodes can dwarf the
+    // parcel and exhaust the default heap.
+    const paddedLength = Math.ceil(bytes.length / 3) * 4;
+    const outputLength = pad ? paddedLength : Math.ceil(bytes.length * 4 / 3);
+    const out = new Uint8Array(outputLength);
+    let offset = 0;
+    for (let i = 0; i < bytes.length; i += 3) {
+        const a = bytes[i];
+        const b = bytes[i + 1];
+        const c = bytes[i + 2];
+        out[offset++] = alphabet.charCodeAt(a >> 2);
+        out[offset++] = alphabet.charCodeAt(((a & 0x03) << 4) | ((b ?? 0) >> 4));
+        if (b === undefined) {
+            if (pad) {
+                out[offset++] = 61;
+                out[offset++] = 61;
+            }
+        }
+        else {
+            out[offset++] = alphabet.charCodeAt(((b & 0x0f) << 2) | ((c ?? 0) >> 6));
+            if (c === undefined) {
+                if (pad)
+                    out[offset++] = 61;
+            }
+            else {
+                out[offset++] = alphabet.charCodeAt(c & 0x3f);
+            }
+        }
+    }
+    return new TextDecoder().decode(out);
+}
+/** Bytes → standard base64 with padding (Buffer's 'base64' spelling). */
+const bytesToBase64 = (bytes) => encode(bytes, BASE64, true);
+exports.bytesToBase64 = bytesToBase64;
+/** Bytes → unpadded base64url (Buffer's 'base64url' spelling). */
+const bytesToBase64Url = (bytes) => encode(bytes, BASE64_URL, false);
+exports.bytesToBase64Url = bytesToBase64Url;
+/** Standard base64 (padded or unpadded) → bytes. */
+function base64ToBytes(text) {
+    const padding = text.indexOf('=');
+    const length = padding === -1 ? text.length : padding;
+    const out = new Uint8Array(Math.floor(length * 6 / 8));
+    let offset = 0;
+    let buffer = 0;
+    let bits = 0;
+    for (let index = 0; index < length; index += 1) {
+        const char = text[index];
+        const value = BASE64.indexOf(char);
+        if (value === -1) {
+            throw new Error(`expected standard base64 like "aGVsbG8=" — found ${JSON.stringify(char)}`);
+        }
+        buffer = (buffer << 6) | value;
+        bits += 6;
+        if (bits >= 8) {
+            bits -= 8;
+            out[offset++] = (buffer >> bits) & 0xff;
+        }
+    }
+    return out;
+}
+/** Lowercase/uppercase hex → bytes. */
+function hexToBytes(hex) {
+    if (hex.length % 2 !== 0 || /[^0-9a-f]/i.test(hex)) {
+        throw new Error(`expected even-length hex like "a1b2" — got ${JSON.stringify(hex)}`);
+    }
+    const out = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < out.length; i += 1) {
+        out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+    }
+    return out;
+}
+//# sourceMappingURL=bytes.js.map

package/dist-cjs/entities/bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bytes.js","sourceRoot":"","sources":["../../src/entities/bytes.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AA+CH,sCAqBC;AAGD,gCASC;AA9ED,MAAM,MAAM,GAAG,kEAAkE,CAAC;AAClF,MAAM,UAAU,GAAG,kEAAkE,CAAC;AAE/E,MAAM,UAAU,GAAG,CAAC,IAAY,EAAc,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAA1E,QAAA,UAAU,cAAgE;AAEhF,MAAM,UAAU,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAA5E,QAAA,UAAU,cAAkE;AAEzF,SAAS,MAAM,CAAC,KAAiB,EAAE,QAAgB,EAAE,GAAY;IAC/D,4EAA4E;IAC5E,0EAA0E;IAC1E,uCAAuC;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACpB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,IAAI,GAAG,EAAE,CAAC;gBACR,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;gBACnB,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzE,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpB,IAAI,GAAG;oBAAE,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,yEAAyE;AAClE,MAAM,aAAa,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAA3E,QAAA,aAAa,iBAA8D;AAExF,kEAAkE;AAC3D,MAAM,gBAAgB,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;AAAnF,QAAA,gBAAgB,oBAAmE;AAEhG,oDAAoD;AACpD,SAAgB,aAAa,CAAC,IAAY;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QAC/B,IAAI,IAAI,CAAC,CAAC;QACV,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAC;YACV,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uCAAuC;AACvC,SAAgB,UAAU,CAAC,GAAW;IACpC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist-cjs/entities/cloud.js

@@ -0,0 +1,171 @@
+"use strict";
+/**
+ * The entity-cloud boundary's pure half (engine
+ * registration/entity-cloud.js): the snapshot codec, record assertions,
+ * equality, the private resource id, and the repo travel law — only
+ * logical graph facts, never a path, inode, watcher, or database row.
+ *
+ * Wire parity is the contract here: `stableJson`, record key order, and
+ * snapshot sorting reproduce the engine's bytes exactly, so a snapshot
+ * packed on either side hashes and compares identically.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sameRecords = exports.sameRecord = exports.stableJson = exports.ENTITY_CLOUD_SCHEMA_VERSION = exports.ENTITY_CLOUD_CONTRACT = void 0;
+exports.privateEntityResourceId = privateEntityResourceId;
+exports.recordsAreSubset = recordsAreSubset;
+exports.assertRecord = assertRecord;
+exports.enclosedByRepositoryAncestor = enclosedByRepositoryAncestor;
+exports.travelingRecords = travelingRecords;
+exports.snapshotFromRecords = snapshotFromRecords;
+exports.parseSnapshot = parseSnapshot;
+const types_js_1 = require("./types.js");
+const bytes_js_1 = require("./bytes.js");
+/** `@1` could project arbitrary pre-cloud registrations. `@2` omitted the
+ * declared built-in tool entities, so its toolbox root could not prove the
+ * snapshot membership it named. A resource contract names immutable
+ * authority semantics: both remain quarantined rather than reinterpreted
+ * or overwritten. `@3` begins with the complete verified user home; later
+ * user ground enters exclusively through `amalgm register`. */
+exports.ENTITY_CLOUD_CONTRACT = 'amalgm-entity-registry@3';
+exports.ENTITY_CLOUD_SCHEMA_VERSION = 1;
+/** A 64-hex content head (a SHA-256 naming immutable bytes). */
+const CONTENT_HEAD = /^[0-9a-f]{64}$/;
+/** The deterministic private entity-resource id for a user under the
+ * current contract: `pvr_` + the first 32 base64url characters of
+ * sha256("private-user:<userId>:<contract>"). */
+function privateEntityResourceId(userId, sha256Hex) {
+    return `pvr_${(0, bytes_js_1.bytesToBase64Url)((0, bytes_js_1.hexToBytes)(sha256Hex(`private-user:${userId}:${exports.ENTITY_CLOUD_CONTRACT}`)))
+        .slice(0, 32)}`;
+}
+/** The one JSON spelling every snapshot comparison and checksum uses. */
+const stableJson = (value) => JSON.stringify(value);
+exports.stableJson = stableJson;
+const sameRecord = (left, right) => (0, exports.stableJson)(left) === (0, exports.stableJson)(right);
+exports.sameRecord = sameRecord;
+/** Two record lists describe the same graph (normalized, sorted, compared whole). */
+const sameRecords = (left, right) => (0, exports.sameRecord)(snapshotFromRecords(left), snapshotFromRecords(right));
+exports.sameRecords = sameRecords;
+/** Every record in `records` appears byte-identically in `expected`. */
+function recordsAreSubset(records, expected) {
+    const expectedByUuid = new Map(snapshotFromRecords(expected).records.map((record) => [record.uuid, record]));
+    return snapshotFromRecords(records).records
+        .every((record) => (0, exports.sameRecord)(record, expectedByUuid.get(record.uuid)));
+}
+/**
+ * Validate one snapshot record and normalize it (UUIDs lowercased,
+ * transportVersion defaulted to null). Refusals: an invalid shape; a
+ * parentless record whose type no tree root wears; a transport head on
+ * anything but a repository.
+ */
+function assertRecord(value) {
+    const record = value;
+    if (!record || typeof record !== 'object'
+        || typeof record.uuid !== 'string' || !types_js_1.UUID_PATTERN.test(record.uuid)
+        || typeof record.type !== 'string' || !types_js_1.TYPES.has(record.type)
+        || (record.parentUUID !== null && (typeof record.parentUUID !== 'string' || !types_js_1.UUID_PATTERN.test(record.parentUUID)))
+        || typeof record.name !== 'string' || !record.name || record.name.includes('/') || record.name.includes('\0')
+        || !['active', 'trashed', 'deleted'].includes(record.status)
+        || typeof record.version !== 'string' || !/^[0-9a-f]{64}$/.test(record.version)
+        || (record.payloadVersion !== null && typeof record.payloadVersion !== 'string')
+        || (record.transportVersion !== undefined && record.transportVersion !== null
+            && (typeof record.transportVersion !== 'string' || !CONTENT_HEAD.test(record.transportVersion)))) {
+        throw new Error('cloud entity snapshot has an invalid record');
+    }
+    if (record.parentUUID === null && !types_js_1.ROOT_TYPES.has(record.type)) {
+        throw new Error(`cloud entity ${record.uuid} is not a valid tree root`);
+    }
+    const transportVersion = (record.transportVersion ?? null);
+    if (record.type !== 'repo.git' && transportVersion !== null) {
+        throw new Error('only repository entities may declare a transport head');
+    }
+    return {
+        uuid: record.uuid.toLowerCase(),
+        type: record.type,
+        parentUUID: record.parentUUID === null ? null : record.parentUUID.toLowerCase(),
+        name: record.name,
+        status: record.status,
+        version: record.version,
+        payloadVersion: record.payloadVersion,
+        transportVersion,
+    };
+}
+/**
+ * The repo travel law: a record with a `repo.git` PROPER ancestor never
+ * travels to the cloud on its own. The repository is the sync boundary —
+ * its one Card + Checkpoint state carries the worktree's bytes AND its
+ * children's permanent UUIDs (the transport identity map), so a register
+ * or a rebase is one parcel, never one postcard per file. Repository
+ * boundaries are retained separately by `travelingRecords`: every `.git`
+ * starts a new parcel even when another repository encloses it.
+ * Missing ancestry keeps the record traveling rather than risking a
+ * silently unsynced entity.
+ */
+function enclosedByRepositoryAncestor(record, lookup) {
+    const seen = new Set([record.uuid]);
+    let parentUUID = record.parentUUID;
+    while (parentUUID !== null && parentUUID !== undefined) {
+        if (seen.has(parentUUID))
+            throw new Error(`cloud entity ${record.uuid} has a cyclic parent chain`);
+        seen.add(parentUUID);
+        const parent = lookup(parentUUID);
+        if (!parent)
+            return false;
+        if (parent.type === 'repo.git')
+            return true;
+        parentUUID = parent.parentUUID;
+    }
+    return false;
+}
+/** Project a complete local entity graph onto the cloud registry. Ordinary
+ * repository children keep their local SQLite identities inside the nearest
+ * repository parcel. Every nested repository and the folder spine required to
+ * reach it remain graph records, so each `.git` owns and exposes exactly one
+ * independent transport without publishing per-file postcards. */
+function travelingRecords(records) {
+    const snapshot = snapshotFromRecords(records);
+    const byUuid = new Map(snapshot.records.map((record) => [record.uuid, record]));
+    const traveling = new Set(snapshot.records
+        .filter((record) => !enclosedByRepositoryAncestor(record, (uuid) => byUuid.get(uuid)))
+        .map((record) => record.uuid));
+    for (const repository of snapshot.records.filter((record) => record.type === 'repo.git')) {
+        let cursor = repository;
+        while (cursor) {
+            traveling.add(cursor.uuid);
+            if (cursor.parentUUID === null)
+                break;
+            cursor = byUuid.get(cursor.parentUUID);
+        }
+    }
+    return snapshot.records.filter((record) => traveling.has(record.uuid));
+}
+/** Normalize records into the one canonical snapshot: asserted, sorted by
+ * uuid, duplicates refused. */
+function snapshotFromRecords(records) {
+    const normalized = records.map(assertRecord)
+        .sort((left, right) => (left.uuid < right.uuid ? -1 : left.uuid > right.uuid ? 1 : 0));
+    if (new Set(normalized.map((record) => record.uuid)).size !== normalized.length) {
+        throw new Error('cloud entity snapshot has duplicate UUIDs');
+    }
+    return {
+        schemaVersion: exports.ENTITY_CLOUD_SCHEMA_VERSION,
+        kind: 'amalgm-entity-registry',
+        records: normalized,
+    };
+}
+/** Parse snapshot bytes (or their UTF-8 text) back into the canonical form. */
+function parseSnapshot(bytes) {
+    let snapshot;
+    try {
+        snapshot = JSON.parse(typeof bytes === 'string' ? bytes : (0, bytes_js_1.utf8Decode)(bytes));
+    }
+    catch {
+        throw new Error('cloud entity snapshot is not JSON');
+    }
+    if (snapshot?.schemaVersion !== exports.ENTITY_CLOUD_SCHEMA_VERSION
+        || snapshot?.kind !== 'amalgm-entity-registry'
+        || !Array.isArray(snapshot.records)) {
+        throw new Error('cloud entity snapshot has an unsupported shape');
+    }
+    return snapshotFromRecords(snapshot.records);
+}
+//# sourceMappingURL=cloud.js.map

package/dist-cjs/entities/cloud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.js","sourceRoot":"","sources":["../../src/entities/cloud.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAyCH,0DAGC;AAaD,4CAMC;AAQD,oCAkCC;AAkBD,oEAeC;AAOD,4CAiBC;AAID,kDAWC;AAGD,sCAaC;AA/LD,yCAAiH;AACjH,yCAAsE;AAEtE;;;;;+DAK+D;AAClD,QAAA,qBAAqB,GAAG,0BAA0B,CAAC;AAEnD,QAAA,2BAA2B,GAAG,CAAC,CAAC;AAE7C,gEAAgE;AAChE,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAsBtC;;iDAEiD;AACjD,SAAgB,uBAAuB,CAAC,MAAc,EAAE,SAAoB;IAC1E,OAAO,OAAO,IAAA,2BAAgB,EAAC,IAAA,qBAAU,EAAC,SAAS,CAAC,gBAAgB,MAAM,IAAI,6BAAqB,EAAE,CAAC,CAAC,CAAC;SACrG,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpB,CAAC;AAED,yEAAyE;AAClE,MAAM,UAAU,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAA/D,QAAA,UAAU,cAAqD;AAErE,MAAM,UAAU,GAAG,CAAC,IAAa,EAAE,KAAc,EAAW,EAAE,CACnE,IAAA,kBAAU,EAAC,IAAI,CAAC,KAAK,IAAA,kBAAU,EAAC,KAAK,CAAC,CAAC;AAD5B,QAAA,UAAU,cACkB;AAEzC,qFAAqF;AAC9E,MAAM,WAAW,GAAG,CAAC,IAAwB,EAAE,KAAyB,EAAW,EAAE,CAC1F,IAAA,kBAAU,EAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AADvD,QAAA,WAAW,eAC4C;AAEpE,wEAAwE;AACxE,SAAgB,gBAAgB,CAAC,OAA2B,EAAE,QAA4B;IACxF,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,mBAAmB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAC7E,CAAC;IACF,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC,OAAO;SACxC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,kBAAU,EAAC,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;GAKG;AACH,SAAgB,YAAY,CAAC,KAAc;IACzC,MAAM,MAAM,GAAG,KAGP,CAAC;IACT,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;WACpC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,uBAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;WAClE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,gBAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;WAC1D,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,uBAAY,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;WAChH,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;WAC1G,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAgB,CAAC;WACnE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;WAC5E,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC;WAC7E,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI;eACxE,CAAC,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,qBAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,2BAA2B,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,gBAAgB,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAkB,CAAC;IAC5E,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;QAC/B,IAAI,EAAE,MAAM,CAAC,IAAkB;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,MAAM,CAAC,UAAqB,CAAC,WAAW,EAAE;QAC3F,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAsB;QACrC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,cAAc,EAAE,MAAM,CAAC,cAA+B;QACtD,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAOD;;;;;;;;;;GAUG;AACH,SAAgB,4BAA4B,CAC1C,MAAiF,EACjF,MAA2B;IAE3B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,IAAI,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACnC,OAAO,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QACvD,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,4BAA4B,CAAC,CAAC;QACnG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QAC5C,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;kEAIkE;AAClE,SAAgB,gBAAgB,CAAC,OAA2B;IAC1D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO;SACvC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;SACrF,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjC,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QACzF,IAAI,MAAM,GAAkC,UAAU,CAAC;QACvD,OAAO,MAAM,EAAE,CAAC;YACd,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI;gBAAE,MAAM;YACtC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;+BAC+B;AAC/B,SAAgB,mBAAmB,CAAC,OAA2B;IAC7D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;SACzC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO;QACL,aAAa,EAAE,mCAA2B;QAC1C,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,UAAU;KACpB,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAgB,aAAa,CAAC,KAA0B;IACtD,IAAI,QAA+E,CAAC;IACpF,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAA,qBAAU,EAAC,KAAK,CAAC,CAAoB,CAAC;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,QAAQ,EAAE,aAAa,KAAK,mCAA2B;WACtD,QAAQ,EAAE,IAAI,KAAK,wBAAwB;WAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC/C,CAAC"}

package/dist-cjs/entities/index.js

@@ -0,0 +1,39 @@
+"use strict";
+/**
+ * entities/ — the Register/Record pure cores: the entity model's laws
+ * (engine docs/entity-model.md — two axioms, the six-field record) as
+ * portable functions. Store reads arrive through `EntityReadPort`, hashing
+ * through `Sha256Hex`; nothing here touches SQLite, node:crypto, or a
+ * filesystem. Hash formulas and id derivations are byte-for-byte the
+ * engine's, so records interoperate across the cloud boundary.
+ *
+ * - types.ts        the alphabet, the six fields, UUID shape, injected ports
+ * - bytes.ts        portable byte codecs (utf8, base64, base64url, hex)
+ * - rules.ts        version formula, naming, lifecycle inheritance,
+ *                   slot/container laws, record builders
+ * - moves.ts        batch move validation: permutations, acyclicity, adoption
+ * - cloud.ts        entity-cloud snapshot codec + the repo travel law
+ * - repo-states.ts  Card + Checkpoint state codec and id derivations
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types.js"), exports);
+__exportStar(require("./bytes.js"), exports);
+__exportStar(require("./rules.js"), exports);
+__exportStar(require("./moves.js"), exports);
+__exportStar(require("./cloud.js"), exports);
+__exportStar(require("./repo-states.js"), exports);
+//# sourceMappingURL=index.js.map

package/dist-cjs/entities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/entities/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;;;;;AAEH,6CAA2B;AAC3B,6CAA2B;AAC3B,6CAA2B;AAC3B,6CAA2B;AAC3B,6CAA2B;AAC3B,mDAAiC"}