@amalgm/live 0.2.27 → 0.2.29

package/dist-cjs/detection/enrollment.js

@@ -0,0 +1,189 @@
+"use strict";
+/**
+ * Detection enrollment policies.
+ *
+ * Current user ground enrolls everything except structural local state and
+ * paths excluded by its tracked `.amalgmignore`; `.gitignore` never decides
+ * Amalgm enrollment. `defaultShouldEnroll` remains only as the older explicit
+ * registration policy for additive API compatibility. Current portable paths
+ * already use `/`; a host converts its native separator at the boundary. A
+ * literal `\\` is therefore preserved as part of a POSIX filename. Both
+ * policies are pure strings-in/verdict-out and never inspect disk themselves.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultShouldEnroll = exports.DEFAULT_AMALGM_IGNORE = exports.AMALGM_IGNORE_FILE = exports.AMALGM_CONTROL_DIRECTORY = void 0;
+exports.normalizedRelativePath = normalizedRelativePath;
+exports.isAmalgmControlPath = isAmalgmControlPath;
+exports.isSqliteCoordinationPath = isSqliteCoordinationPath;
+exports.createUserGroundEnrollmentPolicy = createUserGroundEnrollmentPolicy;
+/** The Git-like names at the user-ground boundary. Structural coordination
+ * state is local and cannot be negated by user policy; the ignore file is
+ * portable ground so every machine evaluates the same user rules. */
+exports.AMALGM_CONTROL_DIRECTORY = '.amalgm';
+exports.AMALGM_IGNORE_FILE = '.amalgmignore';
+exports.DEFAULT_AMALGM_IGNORE = `/${exports.AMALGM_CONTROL_DIRECTORY}/\n`;
+const EXCLUDED_DIRECTORIES = new Set([
+    '.amalgm',
+    '.aws',
+    '.cache',
+    '.docker',
+    '.git',
+    '.gnupg',
+    '.gradle',
+    '.hg',
+    '.kube',
+    '.mypy_cache',
+    '.next',
+    '.nyc_output',
+    '.parcel-cache',
+    '.pytest_cache',
+    '.ruff_cache',
+    '.ssh',
+    '.svn',
+    '.svelte-kit',
+    '.turbo',
+    '.venv',
+    '.vite',
+    '__pycache__',
+    'coverage',
+    'node_modules',
+]);
+const EXCLUDED_FILES = new Set([
+    '.DS_Store',
+    'Thumbs.db',
+    'desktop.ini',
+    'npm-debug.log',
+    'pnpm-debug.log',
+    'yarn-debug.log',
+    'yarn-error.log',
+]);
+function isPrivateFile(name) {
+    if (/^\.env(?:\..+)?$/i.test(name) && !/\.example$/i.test(name))
+        return true;
+    if (/^(?:credentials?|secrets?)\.(?:json|ya?ml|toml|ini|conf)$/i.test(name))
+        return true;
+    if (/^id_(?:dsa|ecdsa|ed25519|rsa)$/i.test(name))
+        return true;
+    if (/^(?:\.git-credentials|\.netrc|\.npmrc|\.pypirc|auth\.json|kubeconfig)$/i.test(name))
+        return true;
+    if (/^(?:service[-_]?account|firebase[-_]?adminsdk).*\.json$/i.test(name))
+        return true;
+    return /\.(?:key|keystore|kdbx|p12|pfx|pem|ppk|tfstate(?:\.backup)?)$/i.test(name);
+}
+/**
+ * Legacy explicit-registration policy retained for additive API compatibility.
+ * Current user-ground Detect must use {@link createUserGroundEnrollmentPolicy};
+ * there are no implicit dependency, dotfile, cache, or secret exclusions.
+ * Both separators are path separators; '' never enrolls.
+ *
+ * @deprecated Use `createUserGroundEnrollmentPolicy` for current user ground.
+ */
+const defaultShouldEnroll = (relPath) => {
+    const parts = normalizedRelativePath(String(relPath || '').replace(/\\/g, '/')).split('/').filter(Boolean);
+    const name = parts.at(-1);
+    if (name === undefined || parts.some((part) => EXCLUDED_DIRECTORIES.has(part)))
+        return false;
+    if (EXCLUDED_FILES.has(name) || isPrivateFile(name))
+        return false;
+    return !name.startsWith('.#') && !name.endsWith('~') && !/\.(?:swp|swo)$/i.test(name);
+};
+exports.defaultShouldEnroll = defaultShouldEnroll;
+/**
+ * One normalized spelling for portable enrollment and ignore matching.
+ * Portable relative paths use `/`. Do not reinterpret `\\`: it is a valid,
+ * literal filename character on POSIX after the host has crossed this seam.
+ */
+function normalizedRelativePath(relPath) {
+    return String(relPath || '')
+        .replace(/^\.\//, '')
+        .replace(/^\/+|\/+$/g, '')
+        .replace(/\/{2,}/g, '/');
+}
+/** `.amalgm/` is local control state wherever a registered tree is rooted. */
+function isAmalgmControlPath(relPath) {
+    return normalizedRelativePath(relPath).split('/').includes(exports.AMALGM_CONTROL_DIRECTORY);
+}
+/** SQLite's WAL, shared-memory, and rollback-journal files coordinate one
+ * local database connection. They are not a portable copy of the database. */
+function isSqliteCoordinationPath(relPath) {
+    const name = normalizedRelativePath(relPath).split('/').at(-1) ?? '';
+    return /\.(?:db|sqlite|sqlite3)-(?:wal|shm|journal)$/i.test(name);
+}
+function escapeRegex(character) {
+    return /[\\^$.*+?()[\]{}|]/.test(character) ? `\\${character}` : character;
+}
+function globExpression(pattern) {
+    let expression = '';
+    for (let index = 0; index < pattern.length; index += 1) {
+        const character = pattern[index];
+        if (character === '*') {
+            if (pattern[index + 1] === '*') {
+                while (pattern[index + 1] === '*')
+                    index += 1;
+                if (pattern[index + 1] === '/') {
+                    index += 1;
+                    expression += '(?:.*/)?';
+                }
+                else {
+                    expression += '.*';
+                }
+            }
+            else {
+                expression += '[^/]*';
+            }
+        }
+        else if (character === '?') {
+            expression += '[^/]';
+        }
+        else {
+            expression += escapeRegex(character);
+        }
+    }
+    return expression;
+}
+function ignoreRule(line) {
+    let value = line.trim();
+    if (!value || value.startsWith('#'))
+        return null;
+    let negated = false;
+    if (value.startsWith('!')) {
+        negated = true;
+        value = value.slice(1);
+    }
+    if (!value)
+        return null;
+    const anchored = value.startsWith('/');
+    if (anchored)
+        value = value.slice(1);
+    if (value.endsWith('/'))
+        value = value.slice(0, -1);
+    if (!value)
+        return null;
+    const body = globExpression(value);
+    const prefix = anchored || value.includes('/') ? '^' : '(?:^|/)';
+    return { negated, expression: new RegExp(`${prefix}${body}(?:$|/)`) };
+}
+/**
+ * Compile the root `.amalgmignore` for a user ground. Rules are ordered and
+ * `!` negates a prior user rule. Reserved control state and transient SQLite
+ * coordination files are structural exclusions; every other path is ground
+ * unless this tracked file excludes it. The policy file itself always travels.
+ */
+function createUserGroundEnrollmentPolicy(ignoreText = '') {
+    const rules = String(ignoreText).split(/\r?\n/).map(ignoreRule)
+        .filter((rule) => rule !== null);
+    return (input) => {
+        const relPath = normalizedRelativePath(input);
+        if (!relPath || isAmalgmControlPath(relPath) || isSqliteCoordinationPath(relPath))
+            return false;
+        if (relPath === exports.AMALGM_IGNORE_FILE)
+            return true;
+        let excluded = false;
+        for (const rule of rules) {
+            if (rule.expression.test(relPath))
+                excluded = !rule.negated;
+        }
+        return !excluded;
+    };
+}
+//# sourceMappingURL=enrollment.js.map

package/dist-cjs/detection/enrollment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enrollment.js","sourceRoot":"","sources":["../../src/detection/enrollment.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AA+EH,wDAKC;AAGD,kDAEC;AAID,4DAGC;AA4DD,4EAaC;AApKD;;qEAEqE;AACxD,QAAA,wBAAwB,GAAG,SAAS,CAAC;AACrC,QAAA,kBAAkB,GAAG,eAAe,CAAC;AACrC,QAAA,qBAAqB,GAAG,IAAI,gCAAwB,KAAK,CAAC;AAEvE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,SAAS;IACT,MAAM;IACN,QAAQ;IACR,SAAS;IACT,MAAM;IACN,QAAQ;IACR,SAAS;IACT,KAAK;IACL,OAAO;IACP,aAAa;IACb,OAAO;IACP,aAAa;IACb,eAAe;IACf,eAAe;IACf,aAAa;IACb,MAAM;IACN,MAAM;IACN,aAAa;IACb,QAAQ;IACR,OAAO;IACP,OAAO;IACP,aAAa;IACb,UAAU;IACV,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,WAAW;IACX,WAAW;IACX,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;CACjB,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,IAAI,4DAA4D,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzF,IAAI,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,yEAAyE,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtG,IAAI,0DAA0D,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,OAAO,gEAAgE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrF,CAAC;AAED;;;;;;;GAOG;AACI,MAAM,mBAAmB,GAAqB,CAAC,OAAO,EAAE,EAAE;IAC/D,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7F,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxF,CAAC,CAAC;AANW,QAAA,mBAAmB,uBAM9B;AAEF;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,OAAe;IACpD,OAAO,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;SACzB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;SACzB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,SAAgB,mBAAmB,CAAC,OAAe;IACjD,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,gCAAwB,CAAC,CAAC;AACvF,CAAC;AAED;8EAC8E;AAC9E,SAAgB,wBAAwB,CAAC,OAAe;IACtD,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrE,OAAO,+CAA+C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAOD,SAAS,WAAW,CAAC,SAAiB;IACpC,OAAO,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAW,CAAC;QAC3C,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC/B,OAAO,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG;oBAAE,KAAK,IAAI,CAAC,CAAC;gBAC9C,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAC/B,KAAK,IAAI,CAAC,CAAC;oBACX,UAAU,IAAI,UAAU,CAAC;gBAC3B,CAAC;qBAAM,CAAC;oBACN,UAAU,IAAI,IAAI,CAAC;gBACrB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,UAAU,IAAI,OAAO,CAAC;YACxB,CAAC;QACH,CAAC;aAAM,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAC7B,UAAU,IAAI,MAAM,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,UAAU,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,GAAG,IAAI,CAAC;QACf,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gCAAgC,CAAC,UAAU,GAAG,EAAE;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;SAC5D,MAAM,CAAC,CAAC,IAAI,EAAsB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACvD,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,IAAI,wBAAwB,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAChG,IAAI,OAAO,KAAK,0BAAkB;YAAE,OAAO,IAAI,CAAC;QAChD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,QAAQ,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9D,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC"}

package/dist-cjs/detection/index.js

@@ -0,0 +1,57 @@
+"use strict";
+/**
+ * Detection — the pure cores that turn observed disk evidence into facts.
+ * Normative sources:
+ * entity-model.md (identity axioms, the two continuity witnesses) and
+ * entity-implementation.md (the ratified seams).
+ *
+ * Everything here is rows and entries in, verdicts out. Walking disk,
+ * hashing bytes, opening watchers, and writing stores are the host's;
+ * the host injects its answers (a stat, a channel row, an enrollment
+ * policy) and this layer owns only the laws:
+ *
+ * - `adapter-contract`  the seven rails, the ratified detect socket,
+ *                       descriptor conviction, the three-state truth
+ *                       judgment, the reference adapter
+ * - `classify`          text/binary from detect's own read evidence
+ * - `refusal`           declined-vs-broken, named where it is raised
+ * - `enrollment`        tracked user-ground policy plus legacy compatibility
+ * - `diff`              the compare functions: file/dir/link identity
+ * - `continuity`        root rescue and the undecided address
+ * - `watch-boundary`    generation-safe Watch input and coverage output
+ * - `territory`         nearest-repository recorder selection
+ * - `record-proposal`   the exact Detect-to-Record contract
+ * - `batch`             net-difference planning and Watch settlement
+ * - `content`           text/binary/link replay from one captured read
+ * - `repository`        verified Card + Checkpoint transport planning
+ * - `echo`              incoming Apply equality without suppression
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./adapter-contract.js"), exports);
+__exportStar(require("./batch.js"), exports);
+__exportStar(require("./classify.js"), exports);
+__exportStar(require("./continuity.js"), exports);
+__exportStar(require("./content.js"), exports);
+__exportStar(require("./diff.js"), exports);
+__exportStar(require("./echo.js"), exports);
+__exportStar(require("./enrollment.js"), exports);
+__exportStar(require("./record-proposal.js"), exports);
+__exportStar(require("./repository.js"), exports);
+__exportStar(require("./refusal.js"), exports);
+__exportStar(require("./territory.js"), exports);
+__exportStar(require("./watch-boundary.js"), exports);
+//# sourceMappingURL=index.js.map

package/dist-cjs/detection/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/detection/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;;;;;;;;;;;;;;;AAEH,wDAAsC;AACtC,6CAA2B;AAC3B,gDAA8B;AAC9B,kDAAgC;AAChC,+CAA6B;AAC7B,4CAA0B;AAC1B,4CAA0B;AAC1B,kDAAgC;AAChC,uDAAqC;AACrC,kDAAgC;AAChC,+CAA6B;AAC7B,iDAA+B;AAC/B,sDAAoC"}

package/dist-cjs/detection/record-proposal.js

@@ -0,0 +1,170 @@
+"use strict";
+/**
+ * Detect's exact output to Record.
+ *
+ * A proposal is not yet a durable mutation: Record assigns one mutation id,
+ * appends it atomically, and then Send publishes that same row. Detect owns the
+ * complete result and replay instruction so no later rail has to rediscover
+ * filesystem truth.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DETECTED_CHANGE_CONTRACT = void 0;
+exports.detectedChangeProposal = detectedChangeProposal;
+const cloud_js_1 = require("../entities/cloud.js");
+const types_js_1 = require("../entities/types.js");
+const content_js_1 = require("../contracts/content.js");
+const artifacts_js_1 = require("../transfer/artifacts.js");
+exports.DETECTED_CHANGE_CONTRACT = 'amalgm.detected-change-proposal@1';
+const HASH = /^[0-9a-f]{64}$/;
+const facetsOf = (base, result) => {
+    if (base === null)
+        return ['create'];
+    const facets = [];
+    if (base.parentUUID !== result.parentUUID)
+        facets.push('move');
+    if (base.name !== result.name)
+        facets.push('rename');
+    if (base.type !== result.type)
+        facets.push('retype');
+    const resultCarriesPayload = !types_js_1.DERIVED_PAYLOAD.has(result.type) && result.type !== 'reference';
+    if ((base.payloadVersion !== result.payloadVersion && resultCarriesPayload)
+        || (result.type === 'repo.git' && base.transportVersion !== result.transportVersion)) {
+        facets.push('content');
+    }
+    if (base.status !== result.status) {
+        if (result.status === 'trashed')
+            facets.push('trash');
+        else if (base.status === 'trashed' && result.status === 'active')
+            facets.push('restore');
+    }
+    return facets;
+};
+const contentRequired = (base, result, facets) => result.status === 'active'
+    && (base === null || facets.includes('content') || facets.includes('retype'))
+    && ['file.text', 'file.binary', 'link', 'repo.git'].includes(result.type);
+const validateReplay = (base, result, facets, replay) => {
+    const needsContent = contentRequired(base, result, facets);
+    if (!needsContent) {
+        if (replay.kind !== 'structure') {
+            throw new Error('a structural-only detected change must use structure replay');
+        }
+        return;
+    }
+    if (replay.kind !== result.type) {
+        throw new Error(`detected ${result.type} content cannot use ${replay.kind} replay`);
+    }
+    if (result.payloadVersion === null) {
+        throw new Error(`detected ${result.type} content has no result payload version`);
+    }
+    switch (replay.kind) {
+        case 'file.text':
+            const expectedTextBase = base?.payloadVersion && HASH.test(base.payloadVersion)
+                ? base.payloadVersion
+                : null;
+            if (replay.basePayloadVersion !== expectedTextBase
+                || replay.resultPayloadVersion !== result.payloadVersion
+                || (replay.mode === 'delta') !== (replay.delta !== null)) {
+                throw new Error('text replay does not name the detected base and result');
+            }
+            if (!HASH.test(replay.resultPayloadVersion)
+                || (replay.basePayloadVersion !== null && !HASH.test(replay.basePayloadVersion))) {
+                throw new Error('text replay has an invalid content head');
+            }
+            if (replay.delta !== null
+                && (!Number.isSafeInteger(replay.delta.offset) || replay.delta.offset < 0
+                    || !Number.isSafeInteger(replay.delta.deleteBytes) || replay.delta.deleteBytes < 0
+                    || !(replay.delta.insert instanceof Uint8Array))) {
+                throw new Error('text replay has an invalid byte splice');
+            }
+            break;
+        case 'file.binary': {
+            const manifest = (0, content_js_1.checkContentManifest)(replay.manifest, result.payloadVersion);
+            if (!manifest.ok || replay.resultPayloadVersion !== result.payloadVersion) {
+                throw new Error('binary replay does not name the detected result');
+            }
+            break;
+        }
+        case 'link':
+            if (typeof replay.target !== 'string'
+                || replay.resultPayloadVersion !== result.payloadVersion
+                || !HASH.test(replay.resultPayloadVersion)) {
+                throw new Error('link replay does not name the detected result');
+            }
+            break;
+        case 'repo.git':
+            if (replay.stateId !== result.payloadVersion
+                || result.transportVersion === null
+                || replay.transportVersion !== result.transportVersion
+                || ![replay.stateId, replay.cardId, replay.checkpointId, replay.transportVersion]
+                    .every((head) => HASH.test(head))
+                || (replay.parentTransportVersion !== null && !HASH.test(replay.parentTransportVersion))
+                || typeof replay.cardChanged !== 'boolean'
+                || typeof replay.checkpointChanged !== 'boolean') {
+                throw new Error('repository replay does not name the detected state and transport');
+            }
+            break;
+    }
+};
+/**
+ * Build one immutable proposal, or null when settled truth has the same logical
+ * version. A repository transport-only change is still meaningful because its
+ * worktree identity map is part of exact reproduction even when Card and
+ * Checkpoint IDs did not move.
+ */
+function detectedChangeProposal(input) {
+    const result = (0, cloud_js_1.assertRecord)(input.result);
+    const base = input.base === null ? null : (0, cloud_js_1.assertRecord)(input.base);
+    if (base !== null && base.uuid !== result.uuid) {
+        throw new Error('a detected transition cannot change entity UUID');
+    }
+    if (base === null && result.status !== 'active') {
+        throw new Error('newly detected ground must begin active');
+    }
+    if (base?.status === 'deleted') {
+        throw new Error('Detection cannot resurrect a deleted tombstone');
+    }
+    if (result.status === 'deleted') {
+        throw new Error('Detection cannot propose permanent deletion; deletion is an explicit lifecycle operation');
+    }
+    if (base?.version === result.version && base.transportVersion === result.transportVersion) {
+        const sameState = base.type === result.type
+            && base.parentUUID === result.parentUUID
+            && base.name === result.name
+            && base.status === result.status
+            && base.payloadVersion === result.payloadVersion;
+        if (!sameState)
+            throw new Error('one logical version cannot name two different entity states');
+        return null;
+    }
+    const facets = facetsOf(base, result);
+    if (facets.length === 0) {
+        if (base !== null && types_js_1.DERIVED_PAYLOAD.has(base.type) && base.type === result.type) {
+            // Container membership is a projection of child parentUUID values. Its
+            // derived version can move locally, but it is never an independent write
+            // that could erase a sibling created by another machine.
+            return null;
+        }
+        throw new Error('detected records disagree without a named logical facet');
+    }
+    if (facets.includes('trash') && input.lifecycleAuthorization !== 'trash') {
+        throw new Error('filesystem absence is not authority to Trash an entity');
+    }
+    if (facets.includes('restore') && input.lifecycleAuthorization !== 'restore') {
+        throw new Error('restoring an entity requires explicit lifecycle authority');
+    }
+    validateReplay(base, result, facets, input.replay);
+    const artifact = input.replay.kind === 'structure' ? null : (0, artifacts_js_1.artifactForRecord)(result);
+    if (input.replay.kind !== 'structure' && artifact === null) {
+        throw new Error(`detected ${result.type} replay has no transferable artifact`);
+    }
+    return Object.freeze({
+        contract: exports.DETECTED_CHANGE_CONTRACT,
+        entityId: result.uuid,
+        basedOnState: base?.version ?? null,
+        result,
+        facets: Object.freeze(facets),
+        replay: input.replay,
+        cargo: Object.freeze(artifact === null ? [] : [artifact]),
+    });
+}
+//# sourceMappingURL=record-proposal.js.map

package/dist-cjs/detection/record-proposal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-proposal.js","sourceRoot":"","sources":["../../src/detection/record-proposal.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAsMH,wDA0DC;AA9PD,mDAG8B;AAC9B,mDAAuD;AACvD,wDAAqF;AACrF,2DAAoF;AAEvE,QAAA,wBAAwB,GAAG,mCAAmC,CAAC;AAkF5E,MAAM,IAAI,GAAG,gBAAgB,CAAC;AAE9B,MAAM,QAAQ,GAAG,CACf,IAA8B,EAC9B,MAAyB,EACV,EAAE;IACjB,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,oBAAoB,GAAG,CAAC,0BAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC;IAC9F,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,IAAI,oBAAoB,CAAC;WACtE,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACvF,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aACjD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,IAA8B,EAC9B,MAAyB,EACzB,MAA8B,EACrB,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ;OACnC,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;OAC1E,CAAC,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAE5E,MAAM,cAAc,GAAG,CACrB,IAA8B,EAC9B,MAAyB,EACzB,MAA8B,EAC9B,MAAyB,EACnB,EAAE;IACR,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,YAAY,MAAM,CAAC,IAAI,uBAAuB,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,YAAY,MAAM,CAAC,IAAI,wCAAwC,CAAC,CAAC;IACnF,CAAC;IACD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,WAAW;YACd,MAAM,gBAAgB,GAAG,IAAI,EAAE,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;gBAC7E,CAAC,CAAC,IAAI,CAAC,cAAc;gBACrB,CAAC,CAAC,IAAI,CAAC;YACT,IAAI,MAAM,CAAC,kBAAkB,KAAK,gBAAgB;mBAC7C,MAAM,CAAC,oBAAoB,KAAK,MAAM,CAAC,cAAc;mBACrD,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC3D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;mBACtC,CAAC,MAAM,CAAC,kBAAkB,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;gBACnF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;mBACpB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;uBACpE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC;uBAC/E,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,YAAY,UAAU,CAAC,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM;QACR,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAA,iCAAoB,EAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;YAC9E,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,oBAAoB,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1E,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,MAAM;YACT,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;mBAChC,MAAM,CAAC,oBAAoB,KAAK,MAAM,CAAC,cAAc;mBACrD,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,MAAM;QACR,KAAK,UAAU;YACb,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,cAAc;mBACvC,MAAM,CAAC,gBAAgB,KAAK,IAAI;mBAChC,MAAM,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB;mBACnD,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,gBAAgB,CAAC;qBAC9E,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;mBAChC,CAAC,MAAM,CAAC,sBAAsB,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;mBACrF,OAAO,MAAM,CAAC,WAAW,KAAK,SAAS;mBACvC,OAAO,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;YACtF,CAAC;YACD,MAAM;IACV,CAAC;AACH,CAAC,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,sBAAsB,CACpC,KAA0B;IAE1B,MAAM,MAAM,GAAG,IAAA,uBAAY,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,uBAAY,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,IAAI,EAAE,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC1F,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;eACtC,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;eACrC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;eACzB,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;eAC7B,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,CAAC;QACnD,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,IAAI,IAAI,KAAK,IAAI,IAAI,0BAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YACjF,uEAAuE;YACvE,yEAAyE;YACzE,yDAAyD;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,sBAAsB,KAAK,OAAO,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAEnD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,gCAAiB,EAAC,MAAM,CAAC,CAAC;IACtF,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,YAAY,MAAM,CAAC,IAAI,sCAAsC,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,gCAAwB;QAClC,QAAQ,EAAE,MAAM,CAAC,IAAI;QACrB,YAAY,EAAE,IAAI,EAAE,OAAO,IAAI,IAAI;QACnC,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;KAC1D,CAAC,CAAC;AACL,CAAC"}

package/dist-cjs/detection/refusal.js

@@ -0,0 +1,44 @@
+"use strict";
+/**
+ * A REFUSAL: the boundary understood the request and declined it.
+ * Ratified by entity-implementation.md ("A refusal is named where it is
+ * raised").
+ *
+ * Two things can go wrong when a caller asks for something, and they
+ * mean opposite things:
+ *
+ *   a refusal   the request named ground amalgm will not take — excluded
+ *               by enrollment policy, already owned by another tree, not
+ *               there at all. Nothing is broken. The message IS the
+ *               reason and is meant to be shown to whoever asked.
+ *   a fault     the boundary could not do its job — a torn identity
+ *               store, an unusable database, a bug. The request was
+ *               fine; the installation is not.
+ *
+ * A refusal is NAMED WHERE IT IS RAISED, by the code that decided to
+ * refuse. It is never guessed later from an error's wording: matching
+ * on message text would quietly reclassify every fault as the caller's
+ * mistake the moment a message changed, and "your path is bad" is the
+ * worst possible thing to say on the day the identity store tears.
+ *
+ * Callers that must answer differently — an HTTP status, an exit code —
+ * ask `isRefusal`. Everything else stays an ordinary Error and travels
+ * to whatever handles faults. The mark is a registry symbol
+ * (`Symbol.for`), so a refusal raised by one copy of this module is
+ * recognized by every other.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.refusal = refusal;
+exports.isRefusal = isRefusal;
+const REFUSAL = Symbol.for('amalgm.registration.refusal');
+/** Decline a request, with the reason the caller should be shown. */
+function refusal(message) {
+    const error = new Error(message);
+    error[REFUSAL] = true;
+    return error;
+}
+/** True only for an error this boundary deliberately raised as a refusal. */
+function isRefusal(error) {
+    return Boolean(error && error[REFUSAL]);
+}
+//# sourceMappingURL=refusal.js.map

package/dist-cjs/detection/refusal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refusal.js","sourceRoot":"","sources":["../../src/detection/refusal.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;AAKH,0BAIC;AAGD,8BAEC;AAZD,MAAM,OAAO,GAAkB,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAEzE,qEAAqE;AACrE,SAAgB,OAAO,CAAC,OAAe;IACrC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAgC,CAAC;IAChE,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IACtB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,SAAgB,SAAS,CAAC,KAAc;IACtC,OAAO,OAAO,CAAC,KAAK,IAAK,KAAiC,CAAC,OAAO,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist-cjs/detection/repository.js

@@ -0,0 +1,67 @@
+"use strict";
+/** Repository detection through the existing Card + Checkpoint transport. */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.captureRepositoryChange = captureRepositoryChange;
+const repo_states_js_1 = require("../entities/repo-states.js");
+const upload_js_1 = require("../transfer/upload.js");
+const verifyState = (state, sha256Hex) => {
+    const cardId = (0, repo_states_js_1.deriveCardId)(state.card, sha256Hex);
+    const checkpointId = (0, repo_states_js_1.deriveCheckpointId)(state.checkpoint, sha256Hex);
+    const stateId = (0, repo_states_js_1.deriveStateId)(cardId, checkpointId, sha256Hex);
+    if (state.cardId !== cardId || state.checkpointId !== checkpointId || state.stateId !== stateId) {
+        throw new Error('repository capture IDs do not describe its Card and Checkpoint');
+    }
+    if (state.pack !== null && sha256Hex(state.pack.bytes) !== state.pack.sha256) {
+        throw new Error('repository Git pack does not match its declared hash');
+    }
+};
+/**
+ * Verify a fresh full Card + Checkpoint observation and seal one incremental
+ * repository transport. Git discovery and pack construction are host effects;
+ * this function owns the portable IDs, identity-map delta, binary transport,
+ * and exact cargo head.
+ */
+function captureRepositoryChange(input, sha256Hex) {
+    verifyState(input.state, sha256Hex);
+    if (input.previous
+        && new Set(input.previous.identity.map((entry) => entry.path)).size !== input.previous.identity.length) {
+        throw new Error('previous repository identity map has duplicate paths');
+    }
+    const identity = (0, repo_states_js_1.planRepositoryIdentity)(input.identity, input.previous?.identity ?? null, sha256Hex);
+    const currentIdentityHash = (0, repo_states_js_1.repositoryIdentityHash)(input.identity, sha256Hex);
+    if (input.previous?.stateId === input.state.stateId
+        && (0, repo_states_js_1.repositoryIdentityHash)(input.previous.identity, sha256Hex) === currentIdentityHash) {
+        return null;
+    }
+    const bytes = (0, repo_states_js_1.encodeRepositoryTransport)(input.state, {
+        parentTransportVersion: input.previous?.transportVersion ?? null,
+        identityHash: identity.identityHash,
+        identityDelta: identity.identityDelta,
+    });
+    const transportVersion = sha256Hex(bytes);
+    const artifact = Object.freeze({
+        entityId: input.entityId,
+        entityType: 'repo.git',
+        kind: 'git',
+        contentHash: transportVersion,
+    });
+    const cargo = Object.freeze({
+        artifact,
+        bytes,
+        manifest: (0, upload_js_1.deriveUploadManifest)(artifact, bytes, sha256Hex),
+    });
+    return Object.freeze({
+        replay: Object.freeze({
+            kind: 'repo.git',
+            stateId: input.state.stateId,
+            cardId: input.state.cardId,
+            checkpointId: input.state.checkpointId,
+            cardChanged: input.previous?.cardId !== input.state.cardId,
+            checkpointChanged: input.previous?.checkpointId !== input.state.checkpointId,
+            parentTransportVersion: input.previous?.transportVersion ?? null,
+            transportVersion,
+        }),
+        cargo,
+    });
+}
+//# sourceMappingURL=repository.js.map

package/dist-cjs/detection/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../src/detection/repository.ts"],"names":[],"mappings":";AAAA,6EAA6E;;AAqD7E,0DAkDC;AArGD,+DASoC;AAEpC,qDAA6D;AAsB7D,MAAM,WAAW,GAAG,CAAC,KAAgB,EAAE,SAAoB,EAAQ,EAAE;IACnE,MAAM,MAAM,GAAG,IAAA,6BAAY,EAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,IAAA,mCAAkB,EAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,IAAA,8BAAa,EAAC,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,uBAAuB,CACrC,KAA6B,EAC7B,SAAoB;IAEpB,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,QAAQ;WACb,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,QAAQ,GAAG,IAAA,uCAAsB,EACrC,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,QAAQ,EAAE,QAAQ,IAAI,IAAI,EAChC,SAAS,CACV,CAAC;IACF,MAAM,mBAAmB,GAAG,IAAA,uCAAsB,EAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,QAAQ,EAAE,OAAO,KAAK,KAAK,CAAC,KAAK,CAAC,OAAO;WAC9C,IAAA,uCAAsB,EAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,mBAAmB,EAAE,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,IAAA,0CAAyB,EAAC,KAAK,CAAC,KAAK,EAAE;QACnD,sBAAsB,EAAE,KAAK,CAAC,QAAQ,EAAE,gBAAgB,IAAI,IAAI;QAChE,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,aAAa,EAAE,QAAQ,CAAC,aAAa;KACtC,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,UAAmB;QAC/B,IAAI,EAAE,KAAc;QACpB,WAAW,EAAE,gBAAgB;KAC9B,CAAC,CAAC;IACH,MAAM,KAAK,GAAqB,MAAM,CAAC,MAAM,CAAC;QAC5C,QAAQ;QACR,KAAK;QACL,QAAQ,EAAE,IAAA,gCAAoB,EAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC;KAC3D,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,UAAmB;YACzB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;YAC5B,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YAC1B,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY;YACtC,WAAW,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM;YAC1D,iBAAiB,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,KAAK,KAAK,CAAC,KAAK,CAAC,YAAY;YAC5E,sBAAsB,EAAE,KAAK,CAAC,QAAQ,EAAE,gBAAgB,IAAI,IAAI;YAChE,gBAAgB;SACjB,CAAC;QACF,KAAK;KACN,CAAC,CAAC;AACL,CAAC"}

package/dist-cjs/detection/territory.js

@@ -0,0 +1,82 @@
+"use strict";
+/** Nearest-repository ownership for one detected entity transition. */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nearestRepository = nearestRepository;
+exports.recorderTargets = recorderTargets;
+/** The nearest repo at or above `uuid`; nested repositories win. */
+function nearestRepository(uuid, byUuid) {
+    const seen = new Set();
+    let cursor = uuid;
+    while (cursor !== null) {
+        if (seen.has(cursor))
+            throw new Error(`registry corrupt: parent cycle at ${cursor}`);
+        seen.add(cursor);
+        const row = byUuid(cursor);
+        if (!row)
+            throw new Error(`no entity ${cursor}`);
+        if (row.type === 'repo.git')
+            return row;
+        cursor = row.parentUuid;
+    }
+    return null;
+}
+/**
+ * Name every recorder whose state a transition can change.
+ *
+ * Ordinary changes outside repository territory publish on the entity UUID.
+ * A change wholly inside one repository publishes only the repository parcel.
+ * Crossing a repository boundary also publishes the entity graph transition,
+ * plus the source and/or destination repositories whose identity maps and
+ * Checkpoints changed.
+ */
+function recorderTargets(transition, byUuid) {
+    const { base, result } = transition;
+    if (base !== null && base.uuid !== result.uuid) {
+        throw new Error('a recorder transition cannot change entity UUID');
+    }
+    const before = nearestRepository(base?.parentUUID ?? null, byUuid);
+    const after = nearestRepository(result.parentUUID, byUuid);
+    const add = (targets, target) => {
+        if (!targets.some((candidate) => candidate.resourceId === target.resourceId))
+            targets.push(target);
+    };
+    // Every `.git` boundary starts its own repository rail, even when nested.
+    // Its enclosing repository changes only when the boundary's graph entry
+    // changes; ordinary Card/Checkpoint advancement remains on the inner rail.
+    if (base?.type === 'repo.git' || result.type === 'repo.git') {
+        const targets = [];
+        add(targets, {
+            kind: result.type === 'repo.git' ? 'repository' : 'entity',
+            resourceId: result.uuid,
+        });
+        const boundaryChanged = base === null
+            || base.type !== result.type
+            || base.parentUUID !== result.parentUUID
+            || base.name !== result.name
+            || base.status !== result.status;
+        if (boundaryChanged) {
+            if (before)
+                add(targets, { kind: 'repository', resourceId: before.uuid });
+            if (after)
+                add(targets, { kind: 'repository', resourceId: after.uuid });
+        }
+        return Object.freeze(targets);
+    }
+    if (base === null) {
+        return Object.freeze(after
+            ? [{ kind: 'repository', resourceId: after.uuid }]
+            : [{ kind: 'entity', resourceId: result.uuid }]);
+    }
+    if (before?.uuid === after?.uuid) {
+        return Object.freeze(before
+            ? [{ kind: 'repository', resourceId: before.uuid }]
+            : [{ kind: 'entity', resourceId: result.uuid }]);
+    }
+    const targets = [{ kind: 'entity', resourceId: result.uuid }];
+    for (const repository of [before, after]) {
+        if (repository)
+            add(targets, { kind: 'repository', resourceId: repository.uuid });
+    }
+    return Object.freeze(targets);
+}
+//# sourceMappingURL=territory.js.map