@amalgm/shell 0.1.164-preview.36072132286 → 0.1.164-preview.36809057014

package/README.md

@@ -131,14 +131,16 @@ or terminal. Use `amalgm service status --user EMAIL` to inspect its controller,
 runtime phase, recovery attempts and last failure. `service stop` drains it;
 `service start` resumes the registered service.
 
-The controller permits an initial launch and eight retries, with backoff capped
-at 30 seconds. Attempts are committed to SQLite before launch and survive
-controller replacement, logout/login and reboot. A ready runtime that answers
-IPC health probes for 30 seconds earns a fresh allowance. Failed launch,
-startup timeout, loss of IPC health and premature exit consume the same budget.
-If it is exhausted, the runtime is parked and the controller remains available.
-After correcting the failure, run `amalgm service retry --user EMAIL` to grant
-another bounded allowance. Repeated start/install calls do not erase failures.
+The runtime is always on: only `service stop` and `service uninstall` end it.
+Every other exit — failed launch, startup timeout, lost IPC health, premature
+exit — restarts it after a delay that doubles from one second and stops growing
+at five minutes, forever. The streak is committed to SQLite before each launch
+and counts from the last failure, so controller replacement, logout/login and
+reboot neither reset it nor repeat time already waited. A ready runtime that
+answers IPC health for 30 seconds resets it. A slow runtime is alive: any late
+answer proves life, and only about two minutes of silence replaces it. Run
+`amalgm service retry --user EMAIL` to restart a failing runtime now instead of
+waiting out its delay. A failed update returns to the last good release.
 Portable mode needs an external foreground owner; it does not install an OS service.
 
 Managed npm delivery uses `.github/workflows/publish-package.yml` after the

package/dist/accepted-tail.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The accepted tail: the latest authority-accepted result of every entity
+ * delivered in (M, N], read in one SQLite transaction together with the local
+ * delivery cursor N and its history floor.
+ *
+ * The Inbox holds every authority record above the floor through the cursor.
+ * A tail may begin only at or above that floor: below it this machine never
+ * received the records a snapshot adoption skipped, and an Inbox read there
+ * would silently omit accepted results. Such a read fails closed.
+ */
+import type Database from "better-sqlite3";
+import { type CloudEntityRecord } from "@amalgm/live";
+export declare class AcceptedHistoryUnavailableError extends Error {
+    readonly after: number;
+    readonly floor: number;
+    constructor(after: number, floor: number);
+}
+export interface AcceptedTail {
+    /** M: the base the tail folds onto. */
+    readonly after: number;
+    /** N: the local gap-free authority cursor the tail runs through. */
+    readonly through: number;
+    /** The latest accepted result per entity in (after, through]. */
+    readonly results: readonly CloudEntityRecord[];
+}
+export declare function readAcceptedTail(database: Database.Database, authorityId: string, after: number): AcceptedTail;

package/dist/accepted-tail.js

@@ -0,0 +1,37 @@
+import { decodeAcceptedEntityRecord } from "@amalgm/live";
+export class AcceptedHistoryUnavailableError extends Error {
+    after;
+    floor;
+    constructor(after, floor) {
+        super(`accepted history after delivery ${after} is unavailable below local floor ${floor}`);
+        this.after = after;
+        this.floor = floor;
+        this.name = "AcceptedHistoryUnavailableError";
+    }
+}
+export function readAcceptedTail(database, authorityId, after) {
+    return database.transaction(() => {
+        const cursor = database.prepare(`
+      SELECT received_through AS through, history_floor AS floor
+        FROM authority_delivery_cursors WHERE authority_id = ?
+    `).get(authorityId);
+        const through = cursor?.through ?? 0;
+        const floor = cursor?.floor ?? 0;
+        if (through < after) {
+            throw new Error("local delivery cursor is behind the active snapshot watermark");
+        }
+        if (floor > after)
+            throw new AcceptedHistoryUnavailableError(after, floor);
+        const latest = new Map();
+        for (const { recordJson } of database.prepare(`
+      SELECT record_json AS recordJson FROM record_inbox
+       WHERE authority_id = ? AND delivery_sequence > ? AND delivery_sequence <= ?
+       ORDER BY delivery_sequence
+    `).iterate(authorityId, after, through)) {
+            const accepted = decodeAcceptedEntityRecord(recordJson);
+            latest.set(accepted.entityId, accepted.change.result);
+        }
+        return { after, through, results: [...latest.values()] };
+    })();
+}
+//# sourceMappingURL=accepted-tail.js.map

package/dist/accepted-tail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accepted-tail.js","sourceRoot":"","sources":["../src/accepted-tail.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,0BAA0B,EAA0B,MAAM,cAAc,CAAC;AAElF,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IACnC;IAAwB;IAA7C,YAAqB,KAAa,EAAW,KAAa;QACxD,KAAK,CAAC,mCAAmC,KAAK,qCAAqC,KAAK,EAAE,CAAC,CAAC;QADzE,UAAK,GAAL,KAAK,CAAQ;QAAW,UAAK,GAAL,KAAK,CAAQ;QAExD,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAWD,MAAM,UAAU,gBAAgB,CAC9B,QAA2B,EAC3B,WAAmB,EACnB,KAAa;IAEb,OAAO,QAAQ,CAAC,WAAW,CAAC,GAAiB,EAAE;QAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;;;KAG/B,CAAC,CAAC,GAAG,CAAC,WAAW,CAAmD,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC;QACjC,IAAI,OAAO,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,KAAK,GAAG,KAAK;YAAE,MAAM,IAAI,+BAA+B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;QACpD,KAAK,MAAM,EAAE,UAAU,EAAE,IAAI,QAAQ,CAAC,OAAO,CAAC;;;;KAI7C,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAqC,EAAE,CAAC;YAC5E,MAAM,QAAQ,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC;YACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IAC3D,CAAC,CAAC,EAAE,CAAC;AACP,CAAC"}

package/dist/agent-execution.d.ts

@@ -7,7 +7,21 @@ export interface AgentExecutionContext {
     readonly computerId: string;
     readonly stateDir: string;
     readonly amalgmDir?: string;
+    readonly workspaces?: WorkspaceScope;
 }
+/** The Workspaces folder: where a run starts when nothing else is chosen. */
+export interface WorkspaceScope {
+    readonly root: string;
+    /** Every registered folder outside the root, read when a run starts. */
+    folders(): readonly string[];
+}
+/** A run in the Workspaces folder also reaches every registered folder. */
+export declare function workspaceCwd(options: AgentExecutionContext, path: string): {
+    workspaceId: null;
+    materializationRevision: null;
+    additionalDirectories?: string[] | undefined;
+    path: string;
+};
 export declare function resolveAgentRun(options: AgentExecutionContext, installationId: string, selection?: {
     modelId?: string;
 }): Readonly<{
@@ -47,9 +61,10 @@ export declare function resolveAgentRun(options: AgentExecutionContext, installa
             toolIds: string[];
         };
         cwd: {
-            path: string;
             workspaceId: null;
             materializationRevision: null;
+            additionalDirectories?: string[] | undefined;
+            path: string;
         };
         permissionMode: "ask" | "full_access";
         computerId: string;

package/dist/agent-execution.js

@@ -1,3 +1,15 @@
+/** A run in the Workspaces folder also reaches every registered folder. */
+export function workspaceCwd(options, path) {
+    const additionalDirectories = options.workspaces && path === options.workspaces.root
+        ? options.workspaces.folders().filter(folder => folder !== path)
+        : [];
+    return {
+        path,
+        ...(additionalDirectories.length ? { additionalDirectories } : {}),
+        workspaceId: null,
+        materializationRevision: null,
+    };
+}
 export function resolveAgentRun(options, installationId, selection = {}) {
     const record = options.agents.getAgent(installationId);
     if (!record)
@@ -33,11 +45,7 @@ export function resolveAgentRun(options, installationId, selection = {}) {
                 toolIds: tools,
                 ...(definition.toolbox.exposure ? { exposure: definition.toolbox.exposure } : {}),
             },
-            cwd: {
-                path: definition.workspace.cwd || options.amalgmDir || options.stateDir,
-                workspaceId: null,
-                materializationRevision: null,
-            },
+            cwd: workspaceCwd(options, definition.workspace.cwd || options.workspaces?.root || options.amalgmDir || options.stateDir),
             permissionMode: definition.metadata["permissionMode"] === "ask" ? "ask" : "full_access",
             computerId: options.computerId,
         },

package/dist/agent-execution.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-execution.js","sourceRoot":"","sources":["../src/agent-execution.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,eAAe,CAC7B,OAA8B,EAC9B,cAAsB,EACtB,YAAkC,EAAE;IAEpC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM;QAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,cAAc,EAAE,CAAC,EAAE;YAC9F,IAAI,EAAE,iBAAiB;SACxB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;IACvC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;IAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,cAAc,EAAE,CAAC,EAAE;YAChF,IAAI,EAAE,sBAAsB;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;YACxB,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO;YAC7B,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS;YAC/B,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;SAC7C,CAAC,CAAC,CAAC;IACJ,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,UAAU,CAAC,IAAI;QACtB,SAAS,EAAE;YACT,KAAK,EAAE;gBACL,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE;gBAC/B,cAAc;gBACd,UAAU,EAAE,QAAQ,CAAC,EAAE;aACxB;YACD,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE;YAC9E,IAAI,EAAE,aAAa,CAAC,cAAc,EAAE,UAAU,CAAC,OAAO,CAAC;YACvD,KAAK,EAAE;gBACL,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;gBACnF,OAAO,EAAE,KAAK;gBACd,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClF;YACD,GAAG,EAAE;gBACH,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ;gBACvE,WAAW,EAAE,IAAI;gBACjB,uBAAuB,EAAE,IAAI;aAC9B;YACD,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAc,CAAC,CAAC,CAAC,aAAsB;YACzG,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,OAA8B;IACrD,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC1F,OAAO,OAAO,CAAC,OAAO,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,SAAiB;IAC1D,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;IACvF,OAAO;QACL,UAAU,EAAE,SAAS,KAAK,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACpG,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAA2C;IACvE,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE;QACrD,MAAM,QAAQ,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACjG,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAkB,EAAE,KAAK,EAAE,CAAC;QACrF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACtG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,KAAK,EAAE,CAAC,EAAE;YAC7E,IAAI,EAAE,6BAA6B;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,cAAsB,EAAE,OAAsB;IACnE,MAAM,QAAQ,GAAG,OAAO,IAAI,QAAQ,CAAC;IACrC,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAe,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAChF,IAAI,QAAQ,KAAK,eAAe,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QAChE,OAAO,EAAE,IAAI,EAAE,cAAuB,EAAE,SAAS,EAAE,GAAG,cAAc,gBAAgB,EAAE,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAmB,EAAE,SAAS,EAAE,GAAG,cAAc,IAAI,QAAQ,EAAE,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}
+{"version":3,"file":"agent-execution.js","sourceRoot":"","sources":["../src/agent-execution.ts"],"names":[],"mappings":"AAoBA,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,OAA8B,EAAE,IAAY;IACvE,MAAM,qBAAqB,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,KAAK,OAAO,CAAC,UAAU,CAAC,IAAI;QAClF,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC;QAChE,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,WAAW,EAAE,IAAI;QACjB,uBAAuB,EAAE,IAAI;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAA8B,EAC9B,cAAsB,EACtB,YAAkC,EAAE;IAEpC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM;QAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,cAAc,EAAE,CAAC,EAAE;YAC9F,IAAI,EAAE,iBAAiB;SACxB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;IACvC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;IAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,cAAc,EAAE,CAAC,EAAE;YAChF,IAAI,EAAE,sBAAsB;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;YACxB,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO;YAC7B,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS;YAC/B,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;SAC7C,CAAC,CAAC,CAAC;IACJ,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,UAAU,CAAC,IAAI;QACtB,SAAS,EAAE;YACT,KAAK,EAAE;gBACL,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE;gBAC/B,cAAc;gBACd,UAAU,EAAE,QAAQ,CAAC,EAAE;aACxB;YACD,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE;YAC9E,IAAI,EAAE,aAAa,CAAC,cAAc,EAAE,UAAU,CAAC,OAAO,CAAC;YACvD,KAAK,EAAE;gBACL,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;gBACnF,OAAO,EAAE,KAAK;gBACd,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClF;YACD,GAAG,EAAE,YAAY,CAAC,OAAO,EACvB,UAAU,CAAC,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,UAAU,EAAE,IAAI,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC;YAChG,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAc,CAAC,CAAC,CAAC,aAAsB;YACzG,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,OAA8B;IACrD,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC1F,OAAO,OAAO,CAAC,OAAO,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,SAAiB;IAC1D,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;IACvF,OAAO;QACL,UAAU,EAAE,SAAS,KAAK,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACpG,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAA2C;IACvE,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE;QACrD,MAAM,QAAQ,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACjG,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAkB,EAAE,KAAK,EAAE,CAAC;QACrF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACtG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,KAAK,EAAE,CAAC,EAAE;YAC7E,IAAI,EAAE,6BAA6B;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,cAAsB,EAAE,OAAsB;IACnE,MAAM,QAAQ,GAAG,OAAO,IAAI,QAAQ,CAAC;IACrC,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAe,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAChF,IAAI,QAAQ,KAAK,eAAe,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QAChE,OAAO,EAAE,IAAI,EAAE,cAAuB,EAAE,SAAS,EAAE,GAAG,cAAc,gBAAgB,EAAE,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAmB,EAAE,SAAS,EAAE,GAAG,cAAc,IAAI,QAAQ,EAAE,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/dist/apply-cleanup.d.ts

@@ -0,0 +1,28 @@
+export interface ApplyCleanupBinding {
+    readonly path: string;
+    /** Exact `device:inode`. */
+    readonly physical: string;
+}
+interface CleanupObject extends ApplyCleanupBinding {
+    readonly kind: "file" | "link" | "directory";
+    readonly value: string | null;
+    readonly mode: number;
+    readonly signature: string;
+}
+export interface ApplyCleanupDescription {
+    readonly contract: "amalgm.apply-cleanup@2";
+    readonly root: ApplyCleanupBinding;
+    readonly control: string;
+    /** Parents precede children. All paths are relative to control. */
+    readonly objects: readonly CleanupObject[];
+}
+/** Called only after retained versions and joint namespace effects were proved.
+ * Capture uses bounded buffers and never interprets Git or follows symlinks. */
+export declare function describeApplyCleanup(root: ApplyCleanupBinding, control: string): Promise<ApplyCleanupDescription>;
+/** Close the original private read after the logical disposition proof.
+ * Later bytes may not be substituted for the versions that proof authorized. */
+export declare function assertApplyCleanupUnchanged(description: ApplyCleanupDescription): void;
+/** Missing authorized objects mean partial progress; changed or unexpected
+ * survivors keep this same terminal responsibility visibly unfinished. */
+export declare function finishApplyCleanup(description: ApplyCleanupDescription): Promise<void>;
+export {};

package/dist/apply-cleanup.js

@@ -0,0 +1,166 @@
+/** Finite machine-local cleanup authority, committed with the Apply outcome.
+ * It names exact private objects; it never authorizes changing live ground. */
+import { createHash } from "node:crypto";
+import { closeSync, constants, fsyncSync, lstatSync, openSync, readdirSync, readlinkSync, rmdirSync, unlinkSync, } from "node:fs";
+import { dirname, isAbsolute, join } from "node:path";
+import { open } from "node:fs/promises";
+import { physicalKey, sameSource, sourceSignature, sourceUnchanged } from "./source-signature.js";
+function stat(path) {
+    try {
+        return lstatSync(path, { bigint: true });
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        throw error;
+    }
+}
+async function digest(path, expected) {
+    const hash = createHash("sha256"), size = Number(expected.size);
+    const same = (current) => current !== null && current.isFile() && sameSource(current, expected);
+    const file = await open(path, constants.O_RDONLY | constants.O_NONBLOCK | (constants.O_NOFOLLOW ?? 0));
+    try {
+        if (!same(await file.stat({ bigint: true })))
+            throw new Error("Apply cleanup file changed before its read");
+        const buffer = Buffer.allocUnsafe(Math.min(256 * 1024, size));
+        for (let offset = 0; offset < size;) {
+            const { bytesRead } = await file.read(buffer, 0, Math.min(buffer.length, size - offset), offset);
+            if (!bytesRead)
+                throw new Error("Apply cleanup file changed length during its read");
+            hash.update(buffer.subarray(0, bytesRead));
+            offset += bytesRead;
+        }
+        if (!same(await file.stat({ bigint: true })) || !same(stat(path)))
+            throw new Error("Apply cleanup file changed during its read");
+        return hash.digest("hex");
+    }
+    finally {
+        await file.close();
+    }
+}
+function kind(stats) {
+    if (stats.isSymbolicLink())
+        return "link";
+    if (stats.isFile())
+        return "file";
+    if (stats.isDirectory())
+        return "directory";
+    throw new Error("Apply cleanup encountered an unsupported private object");
+}
+async function value(path, type, before) {
+    return type === "file" ? digest(path, before) : type === "link" ? readlinkSync(path) : null;
+}
+function sameIdentity(stats, expected) {
+    return stats !== null && physicalKey(stats) === expected.physical;
+}
+async function matches(path, expected) {
+    const before = stat(path);
+    if (!sameIdentity(before, expected) || kind(before) !== expected.kind || Number(before.mode) !== expected.mode)
+        return false;
+    const observed = await value(path, expected.kind, before), after = stat(path);
+    return sameIdentity(after, expected) && after.mode === before.mode && observed === expected.value
+        && (expected.kind === "directory" || sameSource(before, after));
+}
+/** Called only after retained versions and joint namespace effects were proved.
+ * Capture uses bounded buffers and never interprets Git or follows symlinks. */
+export async function describeApplyCleanup(root, control) {
+    if (!sameIdentity(stat(root.path), root))
+        throw new Error("Apply recovery root is missing or replaced");
+    const objects = [];
+    const visit = async (relativePath) => {
+        const path = join(control, relativePath), before = stat(path);
+        if (!before)
+            throw new Error("Apply private cleanup changed during its proof");
+        const type = kind(before), expected = { path: relativePath, physical: physicalKey(before),
+            kind: type, value: await value(path, type, before), mode: Number(before.mode), signature: sourceSignature(before) };
+        const after = stat(path);
+        if (!after || !sourceUnchanged(expected.signature, after)) {
+            throw new Error("Apply private cleanup changed during its proof");
+        }
+        objects.push(expected);
+        if (type === "directory")
+            for (const name of readdirSync(path).sort())
+                await visit(relativePath ? `${relativePath}/${name}` : name);
+    };
+    if (stat(control))
+        await visit("");
+    return { contract: "amalgm.apply-cleanup@2", root, control, objects };
+}
+/** Close the original private read after the logical disposition proof.
+ * Later bytes may not be substituted for the versions that proof authorized. */
+export function assertApplyCleanupUnchanged(description) {
+    if (!sameIdentity(stat(description.root.path), description.root))
+        throw new Error("Apply cleanup root changed before commitment");
+    if (description.objects.length === 0 && stat(description.control))
+        throw new Error("Apply control appeared during retirement proof");
+    for (const object of description.objects) {
+        const current = stat(join(description.control, object.path));
+        if (!current || !sourceUnchanged(object.signature, current)) {
+            throw new Error("Apply cleanup changed during retirement proof");
+        }
+    }
+}
+/** Missing authorized objects mean partial progress; changed or unexpected
+ * survivors keep this same terminal responsibility visibly unfinished. */
+export async function finishApplyCleanup(description) {
+    if (description.contract !== "amalgm.apply-cleanup@2" || !isAbsolute(description.control)
+        || !isAbsolute(description.root.path))
+        throw new Error("Invalid Apply cleanup description");
+    if (!sameIdentity(stat(description.root.path), description.root))
+        throw new Error("Apply cleanup root is missing or replaced");
+    const expected = new Map(description.objects.map(object => [object.path, object]));
+    if (expected.size !== description.objects.length || description.objects.some(object => isAbsolute(object.path)
+        || object.path.split("/").some(part => part === "." || part === ".."))) {
+        throw new Error("Apply cleanup has an invalid private address");
+    }
+    const flushed = new Set();
+    const visit = async (relativePath) => {
+        const path = join(description.control, relativePath), observed = stat(path);
+        if (!observed)
+            return;
+        const object = expected.get(relativePath);
+        if (!object || !await matches(path, object))
+            throw new Error("Apply cleanup retains an unexpected or changed private object");
+        if (object.kind === "directory") {
+            for (const name of readdirSync(path))
+                await visit(relativePath ? `${relativePath}/${name}` : name);
+            if (!sameIdentity(stat(path), object))
+                throw new Error("Apply cleanup directory was replaced");
+            rmdirSync(path);
+        }
+        else
+            unlinkSync(path);
+        flushed.add(dirname(path));
+    };
+    await visit("");
+    if (stat(description.control))
+        throw new Error("Apply cleanup left an unexplained control tree");
+    // Flush the first surviving parent even after a prior process removed the
+    // entire control tree but stopped before the SQL acknowledgment.
+    flushed.add(dirname(description.control));
+    const owners = new Set();
+    for (let directory of flushed) {
+        while (!stat(directory)) {
+            const parent = dirname(directory);
+            if (parent === directory)
+                throw new Error("Apply cleanup has no surviving deletion owner");
+            directory = parent;
+        }
+        const physical = stat(directory);
+        if (!physical?.isDirectory() || physical.isSymbolicLink()) {
+            throw new Error("Apply cleanup deletion owner is not a physical directory");
+        }
+        owners.add(directory);
+    }
+    if (process.platform !== "win32")
+        for (const directory of owners) {
+            const fd = openSync(directory, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+            try {
+                fsyncSync(fd);
+            }
+            finally {
+                closeSync(fd);
+            }
+        }
+}
+//# sourceMappingURL=apply-cleanup.js.map

package/dist/apply-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-cleanup.js","sourceRoot":"","sources":["../src/apply-cleanup.ts"],"names":[],"mappings":"AAAA;+EAC+E;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAC/E,SAAS,EAAE,UAAU,GACtB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAuBlG,SAAS,IAAI,CAAC,IAAY;IACxB,IAAI,CAAC;QAAC,OAAO,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IACjD,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACrG,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,QAAqB;IACvD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,CAAC,OAA2B,EAAW,EAAE,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7H,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IACvG,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9D,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,CAAC;YACpC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;YACjG,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACrF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAAC,MAAM,IAAI,SAAS,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACjI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACnC,CAAC;AAED,SAAS,IAAI,CAAC,KAAkB;IAC9B,IAAI,KAAK,CAAC,cAAc,EAAE;QAAE,OAAO,MAAM,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,EAAE;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,WAAW,CAAC;IAC5C,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,IAAY,EAAE,IAA2B,EAAE,MAAmB;IACjF,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9F,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,QAA6B;IAC5E,OAAO,KAAK,KAAK,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,QAAuB;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7H,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,OAAO,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,QAAQ,KAAK,QAAQ,CAAC,KAAK;WAC5F,CAAC,QAAQ,CAAC,IAAI,KAAK,WAAW,IAAI,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;gFACgF;AAChF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAyB,EAAE,OAAe;IACnF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACxG,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK,EAAE,YAAoB,EAAiB,EAAE;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC;YACvF,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QACtH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,IAAI,IAAI,KAAK,WAAW;YAAE,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;gBAAE,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtI,CAAC,CAAC;IACF,IAAI,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IACnC,OAAO,EAAE,QAAQ,EAAE,wBAAwB,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACxE,CAAC;AAED;gFACgF;AAChF,MAAM,UAAU,2BAA2B,CAAC,WAAoC;IAC9E,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClI,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACrI,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;AACH,CAAC;AAED;0EAC0E;AAC1E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAoC;IAC3E,IAAI,WAAW,CAAC,QAAQ,KAAK,wBAAwB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC;WACpF,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC9F,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/H,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACnF,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;WACzG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,EAAE,YAAoB,EAAiB,EAAE;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QAC9H,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAChC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC;gBAAE,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC/F,SAAS,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;;YAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7B,CAAC,CAAC;IACF,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACjG,0EAA0E;IAC1E,iEAAiE;IACjE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YAClC,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAC3F,SAAS,GAAG,MAAM,CAAC;QACrB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YACjE,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;YACjF,IAAI,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;QACnD,CAAC;AACH,CAAC"}

package/dist/apply-recovery.d.ts

@@ -0,0 +1,47 @@
+import { type CloudEntityRecord, type EntityApplyIntent, type RepoIdentityEntry } from "@amalgm/live";
+import type { ApplyCleanupBinding } from "./apply-cleanup.js";
+export interface ApplyPreimage {
+    readonly path: string;
+    readonly rows: readonly {
+        readonly path: string;
+        readonly record: CloudEntityRecord;
+        /** Exact `device:inode` of the root and every container. */
+        readonly physical: string | null;
+    }[];
+}
+export interface ApplyRecovery {
+    readonly contract: "amalgm.apply-recovery@6";
+    readonly intent: EntityApplyIntent;
+    readonly target: CloudEntityRecord;
+    readonly targetPath: string;
+    readonly binding: ApplyCleanupBinding;
+    readonly source: ApplyPreimage | null;
+    readonly moves: readonly {
+        readonly uuid: string;
+        readonly source: ApplyPreimage;
+        readonly destination: string;
+    }[];
+    readonly relocated: readonly {
+        readonly uuid: string;
+        readonly source: ApplyPreimage;
+    }[];
+    /** Source preimage paths this intent keeps in place: local ground policy
+     * excludes and sharing never held, frozen before any effect. Verify
+     * accounts for exactly these extras. */
+    readonly remainder: readonly string[];
+}
+/** The frozen remainder as identity entries relative to the source root. */
+export declare function applyRecoveryRemainder(recovery: ApplyRecovery): RepoIdentityEntry[];
+export declare function applyPreimageRoot(preimage: ApplyPreimage): {
+    physical: string;
+    path: string;
+    record: CloudEntityRecord;
+};
+/** Each receipt lives in its binding's reserved control tree, so the
+ * binding it serves is known before the receipt can be read. */
+export declare const applyControlDirectory: (root: string, intent: EntityApplyIntent) => string;
+/** The binding root whose control tree holds `control`. */
+export declare const applyControlRoot: (control: string) => string;
+export declare function readApplyRecovery(control: string, intent: EntityApplyIntent): ApplyRecovery | null;
+/** The caller flushes this exact file and control directory before any effect. */
+export declare function writeApplyRecovery(control: string, value: ApplyRecovery): void;

package/dist/apply-recovery.js

@@ -0,0 +1,99 @@
+/** Immutable preimages for one existing Apply intent, beneath its control tree.
+ * These are recovery evidence, never a second entity inventory or shared state. */
+import { readFileSync } from "node:fs";
+import { dirname, isAbsolute, join } from "node:path";
+import { assertApplyIntent, assertRecord, } from "@amalgm/live";
+import { atomicJson } from "./filesystem.js";
+/** The frozen remainder as identity entries relative to the source root. */
+export function applyRecoveryRemainder(recovery) {
+    const kept = new Set(recovery.remainder);
+    return (recovery.source?.rows ?? []).filter(row => kept.has(row.path)).map(row => ({
+        path: row.path, uuid: row.record.uuid, type: row.record.type, payloadVersion: row.record.payloadVersion,
+    }));
+}
+export function applyPreimageRoot(preimage) {
+    const root = preimage.rows.find(row => row.path === "");
+    if (!root?.physical)
+        throw new Error("Apply preimage lacks its original root association");
+    return { ...root, physical: root.physical };
+}
+const physicalKeyValid = (key) => typeof key === "string" && /^\d+:\d+$/.test(key);
+function validatePreimage(value) {
+    if (!value || !isAbsolute(value.path) || !Array.isArray(value.rows) || value.rows.length === 0) {
+        throw new Error("Apply recovery has no complete preimage");
+    }
+    const paths = new Set();
+    for (const row of value.rows) {
+        if (typeof row.path !== "string" || row.path.startsWith("/")
+            || row.path.split("/").some((part) => part === "." || part === "..") || paths.has(row.path)) {
+            throw new Error("Apply recovery has an invalid preimage address");
+        }
+        assertRecord(row.record);
+        if (row.record.status !== "active")
+            throw new Error("Apply recovery preimage is not active");
+        const associated = row.path === "" || ["workspace", "folder", "repo.git"].includes(row.record.type);
+        if (associated ? !physicalKeyValid(row.physical) : row.physical !== null) {
+            throw new Error("Apply recovery preimage lacks its physical association");
+        }
+        paths.add(row.path);
+    }
+    if (!paths.has(""))
+        throw new Error("Apply recovery lacks its source identity");
+}
+/** Each receipt lives in its binding's reserved control tree, so the
+ * binding it serves is known before the receipt can be read. */
+export const applyControlDirectory = (root, intent) => join(root, ".amalgm", "apply", `${intent.entityId}-${intent.throughSequence}`);
+/** The binding root whose control tree holds `control`. */
+export const applyControlRoot = (control) => dirname(dirname(dirname(control)));
+export function readApplyRecovery(control, intent) {
+    let encoded;
+    try {
+        encoded = readFileSync(join(control, "preimage.json"), "utf8");
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        throw error;
+    }
+    const value = JSON.parse(encoded);
+    if (value.contract !== "amalgm.apply-recovery@6")
+        throw new Error("Unsupported Apply recovery contract");
+    assertApplyIntent(value.intent);
+    for (const field of ["attemptId", "authorityId", "entityId", "fromSequence", "throughSequence", "targetState", "targetMutationId", "targetType", "createdAt"]) {
+        if (value.intent[field] !== intent[field])
+            throw new Error("Apply recovery belongs to another intent");
+    }
+    assertRecord(value.target);
+    if (value.target.uuid !== intent.entityId || value.target.version !== intent.targetState
+        || !isAbsolute(value.targetPath) || !Array.isArray(value.relocated) || !Array.isArray(value.moves)
+        || value.target.type !== intent.targetType
+        || !value.binding || !isAbsolute(value.binding.path)
+        || !physicalKeyValid(value.binding.physical)) {
+        throw new Error("Apply recovery has a different accepted target");
+    }
+    if (value.source !== null)
+        validatePreimage(value.source);
+    const sourcePaths = new Set(value.source?.rows.map(row => row.path) ?? []);
+    if (!Array.isArray(value.remainder) || new Set(value.remainder).size !== value.remainder.length
+        || value.remainder.some(path => path === "" || !sourcePaths.has(path))) {
+        throw new Error("Apply recovery remainder is not part of its source preimage");
+    }
+    for (const move of value.moves) {
+        validatePreimage(move.source);
+        if (!isAbsolute(move.destination) || applyPreimageRoot(move.source).record.uuid !== move.uuid)
+            throw new Error("Invalid Apply recovery move");
+    }
+    for (const relocation of value.relocated) {
+        validatePreimage(relocation.source);
+        if (relocation.source.rows.find((row) => row.path === "")?.record.uuid !== relocation.uuid) {
+            throw new Error("Apply recovery relocation has a different identity");
+        }
+    }
+    return value;
+}
+/** The caller flushes this exact file and control directory before any effect. */
+export function writeApplyRecovery(control, value) {
+    atomicJson(join(control, "preimage.json"), value);
+    readApplyRecovery(control, value.intent);
+}
+//# sourceMappingURL=apply-recovery.js.map

package/dist/apply-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-recovery.js","sourceRoot":"","sources":["../src/apply-recovery.ts"],"names":[],"mappings":"AAAA;mFACmF;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EACL,iBAAiB,EAAE,YAAY,GAChC,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAyB7C,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CAAC,QAAuB;IAC5D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjF,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,cAAc;KACxG,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAuB;IACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,EAAE,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC3F,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,GAAY,EAAW,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAErG,SAAS,gBAAgB,CAAC,KAAoB;IAC5C,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;eACvD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtG,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC7F,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;AAClF,CAAC;AAED;gEACgE;AAChE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,IAAY,EAAE,MAAyB,EAAU,EAAE,CACvF,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;AAEjF,2DAA2D;AAC3D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAEhG,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,MAAyB;IAC1E,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QAAC,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IACvE,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACnG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB,CAAC;IACnD,IAAI,KAAK,CAAC,QAAQ,KAAK,yBAAyB;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,EAAE,aAAa,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,CAAU,EAAE,CAAC;QACvK,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACzG,CAAC;IACD,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,WAAW;WACnF,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;WAC/F,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,UAAU;WACvC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;WACjD,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM;WAC1F,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAChJ,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACzC,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAkC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;YAC1H,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,KAAoB;IACtE,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,KAAK,CAAC,CAAC;IAClD,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC"}

package/dist/apply-rows.d.ts

@@ -0,0 +1,72 @@
+/** The Apply tables' one reading of intents, terminal dispositions, history
+ * resolution and newer local work. The store reads these answers on the main
+ * thread; its saves (apply-saves.ts) read the same answers inside their
+ * savepoint on the saver thread. */
+import { type AcceptedEntityRecord, type EntityApplyIntent, type EntityApplyRetirement } from "@amalgm/live";
+import type Database from "better-sqlite3";
+import type { ApplyCleanupDescription } from "./apply-cleanup.js";
+export type CleanupDisposition = ApplyCleanupDescription | {
+    readonly contract: "amalgm.apply-no-ground@1";
+};
+export interface ApplyStateRow {
+    readonly resolvedThrough: number;
+    readonly materializedSequence: number | null;
+    readonly materializedRecordJson: string | null;
+}
+export interface ApplyRetirementRow {
+    readonly retirement: EntityApplyRetirement;
+    readonly cleanup: CleanupDisposition;
+}
+export declare const sameIntent: (left: EntityApplyIntent, right: EntityApplyIntent) => boolean;
+export declare function readIntent(database: Database.Database, entityId: string, authorityId?: string): EntityApplyIntent | null;
+export declare function recoveryLocation(database: Database.Database, intent: EntityApplyIntent): string | null;
+export declare function readRetirement(database: Database.Database, intent: EntityApplyIntent): ApplyRetirementRow | null;
+export declare function requireIntent(database: Database.Database, intent: EntityApplyIntent): EntityApplyIntent;
+/** The terminal disposition a cleanup acknowledgement or description names. */
+export declare function ownedCleanup(database: Database.Database, retirement: EntityApplyRetirement): CleanupDisposition;
+export declare const applyState: (database: Database.Database, authorityId: string, entityId: string) => ApplyStateRow | undefined;
+/** Where one entity's Apply history stands. Without a state row, an installed
+ * snapshot already resolved every record it contained, so the entity's first
+ * Inbox record after that watermark follows its earlier dense sequences.
+ * Selection and terminal commit both read this one answer. */
+export declare function applyResolution(database: Database.Database, authorityId: string, entityId: string): {
+    readonly state: ApplyStateRow | undefined;
+    readonly resolvedThrough: number;
+    readonly rows: ReadonlyArray<{
+        readonly recordJson: string;
+        readonly deliverySequence: number;
+    }>;
+};
+/** Live's local-work gate over this entity's Outbox rows: one the authority
+ * has not sequenced yet (a pending row carries no sequence), or one it
+ * sequenced after the target. Each is its own seek into the entity's channel
+ * index; one disjunction would walk the entity's retained receipts. */
+export declare function hasLocalWorkAfter(database: Database.Database, authorityId: string, entityId: string, targetSequence: number): boolean;
+export interface OwnPublication {
+    readonly authorityId: string;
+    readonly entityId: string;
+    /** Where the selecting Apply work found this entity's history resolved. */
+    readonly resolvedThrough: number;
+    readonly globalSequence: number;
+    readonly mutationId: string;
+}
+/** This computer's own exact publication, when it alone can resolve the
+ * entity's open history: no intent, Inbox still starts where the work saw it
+ * and ends at this record, the retained Outbox receipt is its exact own
+ * acceptance, no local work follows it, and the sharing basis holds its
+ * result. Null otherwise; then the ordinary Apply journey decides. */
+export declare function ownPublication(database: Database.Database, input: OwnPublication): {
+    readonly after: number;
+    readonly prior: ApplyStateRow | undefined;
+    readonly accepted: AcceptedEntityRecord;
+} | null;
+/** What an installed snapshot watermark resolves: each entity's retained
+ * history at or below it, and each intent whose target it already holds. */
+export declare function snapshotHistory(database: Database.Database): {
+    readonly rows: ReadonlyArray<{
+        readonly authorityId: string;
+        readonly entityId: string;
+        readonly resolvedThrough: number;
+    }>;
+    readonly intents: readonly EntityApplyIntent[];
+};