@amalgm/live 0.2.27 → 0.2.29

package/dist-cjs/detection/territory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"territory.js","sourceRoot":"","sources":["../../src/detection/territory.ts"],"names":[],"mappings":";AAAA,uEAAuE;;AAuBvE,8CAeC;AAWD,0CAkDC;AA7ED,oEAAoE;AACpE,SAAgB,iBAAiB,CAC/B,IAAmB,EACnB,MAAgC;IAEhC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,OAAO,MAAM,KAAK,IAAI,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;QACjD,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,GAAG,CAAC;QACxC,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,eAAe,CAC7B,UAA8B,EAC9B,MAAgC;IAEhC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;IACpC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,UAAU,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,CAAC,OAAyB,EAAE,MAAsB,EAAQ,EAAE;QACtE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrG,CAAC,CAAC;IAEF,0EAA0E;IAC1E,wEAAwE;IACxE,2EAA2E;IAC3E,IAAI,IAAI,EAAE,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC5D,MAAM,OAAO,GAAqB,EAAE,CAAC;QACrC,GAAG,CAAC,OAAO,EAAE;YACX,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ;YAC1D,UAAU,EAAE,MAAM,CAAC,IAAI;SACxB,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,IAAI,KAAK,IAAI;eAChC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;eACzB,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;eACrC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;eACzB,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;QACnC,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,MAAM;gBAAE,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1E,IAAI,KAAK;gBAAE,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK;YACxB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAqB,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YAC3D,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,EAAE,IAAI,KAAK,KAAK,EAAE,IAAI,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM;YACzB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAqB,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5D,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,OAAO,GAAqB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAChF,KAAK,MAAM,UAAU,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QACzC,IAAI,UAAU;YAAE,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC"}

package/dist-cjs/detection/watch-boundary.js

@@ -0,0 +1,51 @@
+"use strict";
+/**
+ * The complete portable boundary from Watch into Detect and back.
+ *
+ * Watch contributes generation-stamped suspicion only. Detect retains that
+ * generation until Record has durably accepted every resulting proposal. A
+ * discovered directory creates a logical coverage request; the Watch host
+ * decides whether its backend needs another native handle.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectionBatch = detectionBatch;
+exports.directoryCoverageRequests = directoryCoverageRequests;
+const enrollment_js_1 = require("./enrollment.js");
+const detectionRelativePath = (path) => {
+    const raw = String(path);
+    if (raw.startsWith('/') || /^[A-Za-z]:[\\/]/.test(raw) || raw.includes('\0')) {
+        throw new Error('detection path must be root-relative');
+    }
+    const normalized = (0, enrollment_js_1.normalizedRelativePath)(raw);
+    if (!normalized || normalized.split('/').some((segment) => segment === '.' || segment === '..')) {
+        throw new Error('detection path must be root-relative');
+    }
+    return normalized;
+};
+/** Freeze Watch's snapshot into Detection's input vocabulary. */
+function detectionBatch(rootId, snapshot) {
+    if (!rootId)
+        throw new Error('detection batch root id is required');
+    if (!Number.isSafeInteger(snapshot.generation) || snapshot.generation < 0) {
+        throw new Error('detection batch generation is invalid');
+    }
+    const suspects = snapshot.paths === null
+        ? null
+        : Object.freeze([...new Set(snapshot.paths.map(detectionRelativePath))]);
+    return Object.freeze({ rootId, generation: snapshot.generation, suspects });
+}
+/**
+ * Tell Watch that newly enrolled directory ground now exists. This is emitted
+ * on every platform; only the Watch backend knows whether coverage expansion
+ * means another Linux inotify handle or merely a routing-table update.
+ */
+function directoryCoverageRequests(batch, createdDirectories) {
+    const paths = [...new Set(createdDirectories.map(detectionRelativePath))]
+        .sort();
+    return Object.freeze(paths.map((relPath) => Object.freeze({
+        kind: 'directory-discovered',
+        rootId: batch.rootId,
+        relPath,
+    })));
+}
+//# sourceMappingURL=watch-boundary.js.map

package/dist-cjs/detection/watch-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch-boundary.js","sourceRoot":"","sources":["../../src/detection/watch-boundary.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AA+BH,wCAYC;AAOD,8DAWC;AA1DD,mDAAyD;AAEzD,MAAM,qBAAqB,GAAG,CAAC,IAAY,EAAU,EAAE;IACrD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,UAAU,GAAG,IAAA,sCAAsB,EAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAeF,iEAAiE;AACjE,SAAgB,cAAc,CAC5B,MAAc,EACd,QAA2B;IAE3B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,KAAK,IAAI;QACtC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,SAAgB,yBAAyB,CACvC,KAAqC,EACrC,kBAAqC;IAErC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;SACtE,IAAI,EAAE,CAAC;IACV,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QACxD,IAAI,EAAE,sBAA+B;QACrC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO;KACR,CAAC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist-cjs/entities/bytes.js

@@ -0,0 +1,92 @@
+"use strict";
+/**
+ * Portable byte codecs shared by the entity layer — UTF-8, standard base64
+ * (padded, as Node's `Buffer#toString('base64')` emits it), base64url, and
+ * hex. They exist so cloud.ts and repo-states.ts can produce byte-for-byte
+ * the same wire text the engine produces with Buffer, without src/
+ * importing any Node module (PURPOSE.md axiom 2).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bytesToBase64Url = exports.bytesToBase64 = exports.utf8Decode = exports.utf8Encode = void 0;
+exports.base64ToBytes = base64ToBytes;
+exports.hexToBytes = hexToBytes;
+const BASE64 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
+const BASE64_URL = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
+const utf8Encode = (text) => new TextEncoder().encode(text);
+exports.utf8Encode = utf8Encode;
+const utf8Decode = (bytes) => new TextDecoder().decode(bytes);
+exports.utf8Decode = utf8Decode;
+function encode(bytes, alphabet, pad) {
+    // Write the ASCII result once. Building base64 through string appends makes
+    // V8 retain repository-sized ropes whose intermediate nodes can dwarf the
+    // parcel and exhaust the default heap.
+    const paddedLength = Math.ceil(bytes.length / 3) * 4;
+    const outputLength = pad ? paddedLength : Math.ceil(bytes.length * 4 / 3);
+    const out = new Uint8Array(outputLength);
+    let offset = 0;
+    for (let i = 0; i < bytes.length; i += 3) {
+        const a = bytes[i];
+        const b = bytes[i + 1];
+        const c = bytes[i + 2];
+        out[offset++] = alphabet.charCodeAt(a >> 2);
+        out[offset++] = alphabet.charCodeAt(((a & 0x03) << 4) | ((b ?? 0) >> 4));
+        if (b === undefined) {
+            if (pad) {
+                out[offset++] = 61;
+                out[offset++] = 61;
+            }
+        }
+        else {
+            out[offset++] = alphabet.charCodeAt(((b & 0x0f) << 2) | ((c ?? 0) >> 6));
+            if (c === undefined) {
+                if (pad)
+                    out[offset++] = 61;
+            }
+            else {
+                out[offset++] = alphabet.charCodeAt(c & 0x3f);
+            }
+        }
+    }
+    return new TextDecoder().decode(out);
+}
+/** Bytes → standard base64 with padding (Buffer's 'base64' spelling). */
+const bytesToBase64 = (bytes) => encode(bytes, BASE64, true);
+exports.bytesToBase64 = bytesToBase64;
+/** Bytes → unpadded base64url (Buffer's 'base64url' spelling). */
+const bytesToBase64Url = (bytes) => encode(bytes, BASE64_URL, false);
+exports.bytesToBase64Url = bytesToBase64Url;
+/** Standard base64 (padded or unpadded) → bytes. */
+function base64ToBytes(text) {
+    const padding = text.indexOf('=');
+    const length = padding === -1 ? text.length : padding;
+    const out = new Uint8Array(Math.floor(length * 6 / 8));
+    let offset = 0;
+    let buffer = 0;
+    let bits = 0;
+    for (let index = 0; index < length; index += 1) {
+        const char = text[index];
+        const value = BASE64.indexOf(char);
+        if (value === -1) {
+            throw new Error(`expected standard base64 like "aGVsbG8=" — found ${JSON.stringify(char)}`);
+        }
+        buffer = (buffer << 6) | value;
+        bits += 6;
+        if (bits >= 8) {
+            bits -= 8;
+            out[offset++] = (buffer >> bits) & 0xff;
+        }
+    }
+    return out;
+}
+/** Lowercase/uppercase hex → bytes. */
+function hexToBytes(hex) {
+    if (hex.length % 2 !== 0 || /[^0-9a-f]/i.test(hex)) {
+        throw new Error(`expected even-length hex like "a1b2" — got ${JSON.stringify(hex)}`);
+    }
+    const out = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < out.length; i += 1) {
+        out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+    }
+    return out;
+}
+//# sourceMappingURL=bytes.js.map

package/dist-cjs/entities/bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bytes.js","sourceRoot":"","sources":["../../src/entities/bytes.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AA+CH,sCAqBC;AAGD,gCASC;AA9ED,MAAM,MAAM,GAAG,kEAAkE,CAAC;AAClF,MAAM,UAAU,GAAG,kEAAkE,CAAC;AAE/E,MAAM,UAAU,GAAG,CAAC,IAAY,EAAc,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAA1E,QAAA,UAAU,cAAgE;AAEhF,MAAM,UAAU,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAA5E,QAAA,UAAU,cAAkE;AAEzF,SAAS,MAAM,CAAC,KAAiB,EAAE,QAAgB,EAAE,GAAY;IAC/D,4EAA4E;IAC5E,0EAA0E;IAC1E,uCAAuC;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACpB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,IAAI,GAAG,EAAE,CAAC;gBACR,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;gBACnB,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzE,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpB,IAAI,GAAG;oBAAE,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,yEAAyE;AAClE,MAAM,aAAa,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAA3E,QAAA,aAAa,iBAA8D;AAExF,kEAAkE;AAC3D,MAAM,gBAAgB,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;AAAnF,QAAA,gBAAgB,oBAAmE;AAEhG,oDAAoD;AACpD,SAAgB,aAAa,CAAC,IAAY;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QAC/B,IAAI,IAAI,CAAC,CAAC;QACV,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAC;YACV,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uCAAuC;AACvC,SAAgB,UAAU,CAAC,GAAW;IACpC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist-cjs/entities/cloud.js

@@ -0,0 +1,174 @@
+"use strict";
+/**
+ * The entity-cloud boundary's pure half (engine
+ * registration/entity-cloud.js): the snapshot codec, record assertions,
+ * equality, the private resource id, and the repo travel law — only
+ * logical graph facts, never a path, inode, watcher, or database row.
+ *
+ * Wire parity is the contract here: `stableJson`, record key order, and
+ * snapshot sorting reproduce the engine's bytes exactly, so a snapshot
+ * packed on either side hashes and compares identically.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sameRecords = exports.sameRecord = exports.stableJson = exports.ENTITY_CLOUD_SCHEMA_VERSION = exports.ENTITY_CLOUD_CONTRACT = void 0;
+exports.privateEntityResourceId = privateEntityResourceId;
+exports.recordsAreSubset = recordsAreSubset;
+exports.assertRecord = assertRecord;
+exports.enclosedByRepositoryAncestor = enclosedByRepositoryAncestor;
+exports.travelingRecords = travelingRecords;
+exports.snapshotFromRecords = snapshotFromRecords;
+exports.parseSnapshot = parseSnapshot;
+const types_js_1 = require("./types.js");
+const bytes_js_1 = require("./bytes.js");
+/** `@1` could project arbitrary pre-cloud registrations. `@2` omitted the
+ * declared built-in tool entities, so its toolbox root could not prove the
+ * snapshot membership it named. A resource contract names immutable
+ * authority semantics: both remain quarantined rather than reinterpreted
+ * or overwritten. `@3` begins with the complete verified user home; later
+ * user ground enters exclusively through `amalgm register`. */
+exports.ENTITY_CLOUD_CONTRACT = 'amalgm-entity-registry@3';
+exports.ENTITY_CLOUD_SCHEMA_VERSION = 1;
+/** A 64-hex content head (a SHA-256 naming immutable bytes). */
+const CONTENT_HEAD = /^[0-9a-f]{64}$/;
+/** The deterministic private entity-resource id for a user under the
+ * current contract: `pvr_` + the first 32 base64url characters of
+ * sha256("private-user:<userId>:<contract>"). */
+function privateEntityResourceId(userId, sha256Hex) {
+    return `pvr_${(0, bytes_js_1.bytesToBase64Url)((0, bytes_js_1.hexToBytes)(sha256Hex(`private-user:${userId}:${exports.ENTITY_CLOUD_CONTRACT}`)))
+        .slice(0, 32)}`;
+}
+/** The one JSON spelling every snapshot comparison and checksum uses. */
+const stableJson = (value) => JSON.stringify(value);
+exports.stableJson = stableJson;
+const sameRecord = (left, right) => (0, exports.stableJson)(left) === (0, exports.stableJson)(right);
+exports.sameRecord = sameRecord;
+/** Two record lists describe the same graph (normalized, sorted, compared whole). */
+const sameRecords = (left, right) => (0, exports.sameRecord)(snapshotFromRecords(left), snapshotFromRecords(right));
+exports.sameRecords = sameRecords;
+/** Every record in `records` appears byte-identically in `expected`. */
+function recordsAreSubset(records, expected) {
+    const expectedByUuid = new Map(snapshotFromRecords(expected).records.map((record) => [record.uuid, record]));
+    return snapshotFromRecords(records).records
+        .every((record) => (0, exports.sameRecord)(record, expectedByUuid.get(record.uuid)));
+}
+/**
+ * Validate one snapshot record and normalize it (UUIDs lowercased,
+ * transportVersion defaulted to null). Refusals: an invalid shape; a
+ * parentless record whose type no tree root wears; a transport head on
+ * anything but a repository.
+ */
+function assertRecord(value) {
+    const record = value;
+    if (!record || typeof record !== 'object'
+        || typeof record.uuid !== 'string' || !types_js_1.UUID_PATTERN.test(record.uuid)
+        || typeof record.type !== 'string' || !types_js_1.TYPES.has(record.type)
+        || (record.parentUUID !== null && (typeof record.parentUUID !== 'string' || !types_js_1.UUID_PATTERN.test(record.parentUUID)))
+        || typeof record.name !== 'string' || !record.name || record.name.includes('/') || record.name.includes('\0')
+        || !['active', 'trashed', 'deleted'].includes(record.status)
+        || typeof record.version !== 'string' || !/^[0-9a-f]{64}$/.test(record.version)
+        || (record.payloadVersion !== null && typeof record.payloadVersion !== 'string')
+        || (record.transportVersion !== undefined && record.transportVersion !== null
+            && (typeof record.transportVersion !== 'string' || !CONTENT_HEAD.test(record.transportVersion)))) {
+        throw new Error('cloud entity snapshot has an invalid record');
+    }
+    if (record.parentUUID === null && !types_js_1.ROOT_TYPES.has(record.type)) {
+        throw new Error(`cloud entity ${record.uuid} is not a valid tree root`);
+    }
+    if (types_js_1.DERIVED_PAYLOAD.has(record.type) && record.payloadVersion !== null) {
+        throw new Error('workspace and folder payloads are derived membership, never transported heads');
+    }
+    const transportVersion = (record.transportVersion ?? null);
+    if (record.type !== 'repo.git' && transportVersion !== null) {
+        throw new Error('only repository entities may declare a transport head');
+    }
+    return {
+        uuid: record.uuid.toLowerCase(),
+        type: record.type,
+        parentUUID: record.parentUUID === null ? null : record.parentUUID.toLowerCase(),
+        name: record.name,
+        status: record.status,
+        version: record.version,
+        payloadVersion: record.payloadVersion,
+        transportVersion,
+    };
+}
+/**
+ * The repo travel law: a record with a `repo.git` PROPER ancestor never
+ * travels to the cloud on its own. The repository is the sync boundary —
+ * its one Card + Checkpoint state carries the worktree's bytes AND its
+ * children's permanent UUIDs (the transport identity map), so a register
+ * or a rebase is one parcel, never one postcard per file. Repository
+ * boundaries are retained separately by `travelingRecords`: every `.git`
+ * starts a new parcel even when another repository encloses it.
+ * Missing ancestry keeps the record traveling rather than risking a
+ * silently unsynced entity.
+ */
+function enclosedByRepositoryAncestor(record, lookup) {
+    const seen = new Set([record.uuid]);
+    let parentUUID = record.parentUUID;
+    while (parentUUID !== null && parentUUID !== undefined) {
+        if (seen.has(parentUUID))
+            throw new Error(`cloud entity ${record.uuid} has a cyclic parent chain`);
+        seen.add(parentUUID);
+        const parent = lookup(parentUUID);
+        if (!parent)
+            return false;
+        if (parent.type === 'repo.git')
+            return true;
+        parentUUID = parent.parentUUID;
+    }
+    return false;
+}
+/** Project a complete local entity graph onto the cloud registry. Ordinary
+ * repository children keep their local SQLite identities inside the nearest
+ * repository parcel. Every nested repository and the folder spine required to
+ * reach it remain graph records, so each `.git` owns and exposes exactly one
+ * independent transport without publishing per-file postcards. */
+function travelingRecords(records) {
+    const snapshot = snapshotFromRecords(records);
+    const byUuid = new Map(snapshot.records.map((record) => [record.uuid, record]));
+    const traveling = new Set(snapshot.records
+        .filter((record) => !enclosedByRepositoryAncestor(record, (uuid) => byUuid.get(uuid)))
+        .map((record) => record.uuid));
+    for (const repository of snapshot.records.filter((record) => record.type === 'repo.git')) {
+        let cursor = repository;
+        while (cursor) {
+            traveling.add(cursor.uuid);
+            if (cursor.parentUUID === null)
+                break;
+            cursor = byUuid.get(cursor.parentUUID);
+        }
+    }
+    return snapshot.records.filter((record) => traveling.has(record.uuid));
+}
+/** Normalize records into the one canonical snapshot: asserted, sorted by
+ * uuid, duplicates refused. */
+function snapshotFromRecords(records) {
+    const normalized = records.map(assertRecord)
+        .sort((left, right) => (left.uuid < right.uuid ? -1 : left.uuid > right.uuid ? 1 : 0));
+    if (new Set(normalized.map((record) => record.uuid)).size !== normalized.length) {
+        throw new Error('cloud entity snapshot has duplicate UUIDs');
+    }
+    return {
+        schemaVersion: exports.ENTITY_CLOUD_SCHEMA_VERSION,
+        kind: 'amalgm-entity-registry',
+        records: normalized,
+    };
+}
+/** Parse snapshot bytes (or their UTF-8 text) back into the canonical form. */
+function parseSnapshot(bytes) {
+    let snapshot;
+    try {
+        snapshot = JSON.parse(typeof bytes === 'string' ? bytes : (0, bytes_js_1.utf8Decode)(bytes));
+    }
+    catch {
+        throw new Error('cloud entity snapshot is not JSON');
+    }
+    if (snapshot?.schemaVersion !== exports.ENTITY_CLOUD_SCHEMA_VERSION
+        || snapshot?.kind !== 'amalgm-entity-registry'
+        || !Array.isArray(snapshot.records)) {
+        throw new Error('cloud entity snapshot has an unsupported shape');
+    }
+    return snapshotFromRecords(snapshot.records);
+}
+//# sourceMappingURL=cloud.js.map

package/dist-cjs/entities/cloud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.js","sourceRoot":"","sources":["../../src/entities/cloud.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AA4CH,0DAGC;AAaD,4CAMC;AAQD,oCAqCC;AAkBD,oEAeC;AAOD,4CAiBC;AAID,kDAWC;AAGD,sCAaC;AArMD,yCAGoB;AACpB,yCAAsE;AAEtE;;;;;+DAK+D;AAClD,QAAA,qBAAqB,GAAG,0BAA0B,CAAC;AAEnD,QAAA,2BAA2B,GAAG,CAAC,CAAC;AAE7C,gEAAgE;AAChE,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAsBtC;;iDAEiD;AACjD,SAAgB,uBAAuB,CAAC,MAAc,EAAE,SAAoB;IAC1E,OAAO,OAAO,IAAA,2BAAgB,EAAC,IAAA,qBAAU,EAAC,SAAS,CAAC,gBAAgB,MAAM,IAAI,6BAAqB,EAAE,CAAC,CAAC,CAAC;SACrG,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpB,CAAC;AAED,yEAAyE;AAClE,MAAM,UAAU,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAA/D,QAAA,UAAU,cAAqD;AAErE,MAAM,UAAU,GAAG,CAAC,IAAa,EAAE,KAAc,EAAW,EAAE,CACnE,IAAA,kBAAU,EAAC,IAAI,CAAC,KAAK,IAAA,kBAAU,EAAC,KAAK,CAAC,CAAC;AAD5B,QAAA,UAAU,cACkB;AAEzC,qFAAqF;AAC9E,MAAM,WAAW,GAAG,CAAC,IAAwB,EAAE,KAAyB,EAAW,EAAE,CAC1F,IAAA,kBAAU,EAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AADvD,QAAA,WAAW,eAC4C;AAEpE,wEAAwE;AACxE,SAAgB,gBAAgB,CAAC,OAA2B,EAAE,QAA4B;IACxF,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,mBAAmB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAC7E,CAAC;IACF,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC,OAAO;SACxC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,kBAAU,EAAC,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;GAKG;AACH,SAAgB,YAAY,CAAC,KAAc;IACzC,MAAM,MAAM,GAAG,KAGP,CAAC;IACT,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;WACpC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,uBAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;WAClE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,gBAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;WAC1D,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,uBAAY,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;WAChH,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;WAC1G,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAgB,CAAC;WACnE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;WAC5E,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC;WAC7E,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI;eACxE,CAAC,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,qBAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,2BAA2B,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,0BAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,gBAAgB,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAkB,CAAC;IAC5E,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;QAC/B,IAAI,EAAE,MAAM,CAAC,IAAkB;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,MAAM,CAAC,UAAqB,CAAC,WAAW,EAAE;QAC3F,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAsB;QACrC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,cAAc,EAAE,MAAM,CAAC,cAA+B;QACtD,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAOD;;;;;;;;;;GAUG;AACH,SAAgB,4BAA4B,CAC1C,MAAiF,EACjF,MAA2B;IAE3B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,IAAI,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACnC,OAAO,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QACvD,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,4BAA4B,CAAC,CAAC;QACnG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QAC5C,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;kEAIkE;AAClE,SAAgB,gBAAgB,CAAC,OAA2B;IAC1D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO;SACvC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;SACrF,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjC,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QACzF,IAAI,MAAM,GAAkC,UAAU,CAAC;QACvD,OAAO,MAAM,EAAE,CAAC;YACd,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI;gBAAE,MAAM;YACtC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;+BAC+B;AAC/B,SAAgB,mBAAmB,CAAC,OAA2B;IAC7D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;SACzC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO;QACL,aAAa,EAAE,mCAA2B;QAC1C,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,UAAU;KACpB,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAgB,aAAa,CAAC,KAA0B;IACtD,IAAI,QAA+E,CAAC;IACpF,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAA,qBAAU,EAAC,KAAK,CAAC,CAAoB,CAAC;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,QAAQ,EAAE,aAAa,KAAK,mCAA2B;WACtD,QAAQ,EAAE,IAAI,KAAK,wBAAwB;WAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC/C,CAAC"}

package/dist-cjs/entities/index.js

@@ -0,0 +1,39 @@
+"use strict";
+/**
+ * entities/ — the Register/Record pure cores: the entity model's laws
+ * (engine docs/entity-model.md — two axioms, the six-field record) as
+ * portable functions. Store reads arrive through `EntityReadPort`, hashing
+ * through `Sha256Hex`; nothing here touches SQLite, node:crypto, or a
+ * filesystem. Hash formulas and id derivations are byte-for-byte the
+ * engine's, so records interoperate across the cloud boundary.
+ *
+ * - types.ts        the alphabet, the six fields, UUID shape, injected ports
+ * - bytes.ts        portable byte codecs (utf8, base64, base64url, hex)
+ * - rules.ts        version formula, naming, lifecycle inheritance,
+ *                   slot/container laws, record builders
+ * - moves.ts        batch move validation: permutations, acyclicity, adoption
+ * - cloud.ts        entity-cloud snapshot codec + the repo travel law
+ * - repo-states.ts  Card + Checkpoint state codec and id derivations
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types.js"), exports);
+__exportStar(require("./bytes.js"), exports);
+__exportStar(require("./rules.js"), exports);
+__exportStar(require("./moves.js"), exports);
+__exportStar(require("./cloud.js"), exports);
+__exportStar(require("./repo-states.js"), exports);
+//# sourceMappingURL=index.js.map

package/dist-cjs/entities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/entities/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;;;;;AAEH,6CAA2B;AAC3B,6CAA2B;AAC3B,6CAA2B;AAC3B,6CAA2B;AAC3B,6CAA2B;AAC3B,mDAAiC"}

package/dist-cjs/entities/moves.js

@@ -0,0 +1,85 @@
+"use strict";
+/**
+ * Batch move validation — the entity model's one-truth-transition law for
+ * addresses (engine docs/entity-model.md, "Continuity"): the slot law and
+ * acyclicity are STATE invariants — they constrain the graph after the
+ * batch, never the order inside it — so movers may hold each other's slots
+ * (directories exchange addresses on disk, and detection reports the
+ * endpoints). A single move is a batch of one.
+ *
+ * A PARENTLESS mover is ADOPTION: the whole tree joins another under one
+ * parent update — a tree boundary is never an identity boundary, so this
+ * is the same lawful move, not a special ceremony. Adoption sheds the root
+ * shape in the SAME transition: workspace is the root type only, so a
+ * parentless workspace landing under a parent lands as a folder — one
+ * write, never a two-step that could tear into a nested workspace.
+ *
+ * This module validates and PLANS; the host's store applies the returned
+ * writes in one transaction.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.planMoveBatch = planMoveBatch;
+const types_js_1 = require("./types.js");
+const rules_js_1 = require("./rules.js");
+/**
+ * Validate one batch of moves as one transition and return the writes to
+ * land together. Refused whole when any move breaks a law: a mover named
+ * twice, an inactive mover, an invalid name, a non-container target, two
+ * movers claiming one slot, an occupied slot outside the batch, a cycle in
+ * the post-state parent graph, or an inactive target chain.
+ */
+function planMoveBatch(moves, port) {
+    const byUuid = port.byUuid.bind(port);
+    const rows = new Map(); // uuid -> current row
+    const post = new Map(); // uuid -> its move
+    for (const move of moves) {
+        const { uuid, name } = move;
+        if (post.has(uuid))
+            throw new Error(`one batch moves ${uuid} once, not twice`);
+        const row = (0, rules_js_1.mustGet)(uuid, byUuid);
+        if (row.status !== 'active') {
+            throw new Error(`only an active entity moves: ${uuid} is ${row.status}`);
+        }
+        (0, rules_js_1.validName)(name);
+        rows.set(uuid, row);
+        post.set(uuid, move);
+    }
+    const postParentOf = (uuid) => post.get(uuid)?.parentUUID ?? (0, rules_js_1.mustGet)(uuid, byUuid).parentUuid;
+    const targets = new Set();
+    for (const { uuid, parentUUID, name } of moves) {
+        const parent = (0, rules_js_1.mustGet)(parentUUID, byUuid);
+        if (!types_js_1.CONTAINERS.has(parent.type)) {
+            throw new Error(`only containers hold active children: ${parentUUID} is ${parent.type}, not workspace/folder/repo.git`);
+        }
+        const slot = `${parentUUID}\0${name}`;
+        if (targets.has(slot))
+            throw new Error(`slot taken: two movers claim (${parentUUID}, ${name}) in one batch`);
+        targets.add(slot);
+        const occupant = port.activeChildByName(parentUUID, name);
+        if (occupant && occupant.uuid !== uuid && !post.has(occupant.uuid)) {
+            throw new Error(`slot taken: active entity ${occupant.uuid} already owns (${parentUUID}, ${name}) — move or trash it first`);
+        }
+        // The target parent's whole post-state chain: acyclic and effectively
+        // active, walked once.
+        const seen = new Set();
+        let cursor = parentUUID;
+        while (cursor !== null) {
+            if (cursor === uuid) {
+                throw new Error(`the parent graph is acyclic: ${uuid} cannot live under itself`);
+            }
+            if (seen.has(cursor))
+                throw new Error(`registry corrupt: parent cycle at ${cursor}`);
+            seen.add(cursor);
+            if ((0, rules_js_1.mustGet)(cursor, byUuid).status !== 'active') {
+                throw new Error(`parent ${parentUUID} is not effectively active — restore it before putting entities under it`);
+            }
+            cursor = postParentOf(cursor);
+        }
+    }
+    return moves.map(({ uuid, parentUUID, name }) => {
+        const row = rows.get(uuid); // seated in the first pass
+        const adoptedWorkspace = row.parentUuid === null && row.type === 'workspace';
+        return { uuid, parentUuid: parentUUID, name, ...(adoptedWorkspace ? { type: 'folder' } : {}) };
+    });
+}
+//# sourceMappingURL=moves.js.map

package/dist-cjs/entities/moves.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"moves.js","sourceRoot":"","sources":["../../src/entities/moves.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;AA4BH,sCAmDC;AA7ED,yCAA6E;AAC7E,yCAAgD;AAkBhD;;;;;;GAMG;AACH,SAAgB,aAAa,CAAC,KAA4B,EAAE,IAAoB;IAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC,CAAC,sBAAsB;IACjE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC,CAAC,mBAAmB;IAC/D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,kBAAkB,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAG,IAAA,kBAAO,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAClC,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,IAAA,oBAAS,EAAC,IAAI,CAAC,CAAC;QAChB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,YAAY,GAAG,CAAC,IAAY,EAAiB,EAAE,CACnD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,IAAI,IAAA,kBAAO,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAA,kBAAO,EAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,qBAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,yCAAyC,UAAU,OAAO,MAAM,CAAC,IAAI,iCAAiC,CAAC,CAAC;QAC1H,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,UAAU,KAAK,IAAI,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,UAAU,KAAK,IAAI,gBAAgB,CAAC,CAAC;QAC7G,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,CAAC,IAAI,kBAAkB,UAAU,KAAK,IAAI,4BAA4B,CAAC,CAAC;QAC/H,CAAC;QACD,sEAAsE;QACtE,uBAAuB;QACvB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,MAAM,GAAkB,UAAU,CAAC;QACvC,OAAO,MAAM,KAAK,IAAI,EAAE,CAAC;YACvB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,2BAA2B,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,EAAE,CAAC,CAAC;YACrF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjB,IAAI,IAAA,kBAAO,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CAAC,UAAU,UAAU,0EAA0E,CAAC,CAAC;YAClH,CAAC;YACD,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CAAC,2BAA2B;QACxD,MAAM,gBAAgB,GAAG,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC;QAC7E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC1G,CAAC,CAAC,CAAC;AACL,CAAC"}