@amalgm/shell 0.1.164-preview.36072132286 → 0.1.164-preview.36809057014

package/dist/source-proof.js

@@ -0,0 +1,70 @@
+/** A retained observation closes in two phases. The semantic phase re-asks a
+ * slower owner such as Git and may await. The physical phase compares the
+ * original native witnesses and never awaits. Neither renews its baseline;
+ * together they belong to one observation, and neither alone admits it.
+ * Admission awaits every semantic phase first, then closes every physical
+ * phase with its commit, so final closure checks the original observation
+ * against its retained dependencies after all intervening semantic work. A
+ * change no witness holds belongs to a later Watch generation.
+ *
+ * The physical phase is data where it can be: witnesses any thread samples
+ * and judges. What only the admitting thread can answer — host authority
+ * such as the content clock, or a check over live objects — is an admission
+ * that runs there, synchronously, after the witnesses are judged. */
+import { judgeWitnesses } from "./source-witness.js";
+const settled = Promise.resolve();
+const none = Object.freeze([]);
+export const witnessProof = (witnesses) => ({ semantic: () => settled, witnesses: Object.freeze([...witnesses]) });
+export const admissionProof = (admission) => ({ semantic: () => settled, witnesses: none, admission });
+export const semanticProof = (semantic) => ({ semantic, witnesses: none });
+/** The admission half alone, for a caller whose witnesses were judged elsewhere.
+ * A void-typed boundary accepts a value-returning function; a Promise that
+ * slipped through must fail here rather than pass as a completed check. */
+export function admitPhysically(proof) {
+    const result = proof.admission?.();
+    if (typeof result?.then === "function") {
+        throw new TypeError("a physical proof must complete synchronously");
+    }
+}
+export function closePhysically(proof) {
+    judgeWitnesses(proof.witnesses);
+    admitPhysically(proof);
+}
+/** A composite is its flat leaves, so a fact several consumers retained
+ * closes once however deeply they nested it. */
+const leavesOf = new WeakMap();
+export const proofLeaves = (proof) => leavesOf.get(proof) ?? [proof];
+/** Each original proof closes once, at its last requested position, so no
+ * duplicate can close before a later dependency's work. Identity is
+ * ownership: equal paths or answers never merge proofs. Semantic phases run
+ * one at a time, so several repositories never multiply concurrent Git
+ * processes. */
+export function sourceProofs(proofs) {
+    const flat = proofs.flatMap(proofLeaves);
+    const seen = new Set();
+    const unique = [];
+    for (let index = flat.length - 1; index >= 0; index -= 1) {
+        const proof = flat[index];
+        if (!seen.has(proof)) {
+            seen.add(proof);
+            unique.push(proof);
+        }
+    }
+    unique.reverse();
+    const admitted = unique.filter(proof => proof.admission);
+    const composite = {
+        semantic: async () => { for (const proof of unique)
+            await proof.semantic(); },
+        witnesses: Object.freeze(unique.flatMap(proof => proof.witnesses)),
+        ...admitted.length > 0 ? { admission: () => { for (const proof of admitted)
+                admitPhysically(proof); } } : {},
+    };
+    leavesOf.set(composite, unique);
+    return composite;
+}
+/** A standalone close: the semantic answer, then the original witnesses. */
+export async function closeSource(proof) {
+    await proof.semantic();
+    closePhysically(proof);
+}
+//# sourceMappingURL=source-proof.js.map

package/dist/source-proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-proof.js","sourceRoot":"","sources":["../src/source-proof.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;qEAYqE;AACrE,OAAO,EAAE,cAAc,EAAsB,MAAM,qBAAqB,CAAC;AAQzE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;AAClC,MAAM,IAAI,GAA6B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACzD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,SAAmC,EAAe,EAAE,CAC/E,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;AAC1E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,SAAqB,EAAe,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;AAChI,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,QAA6B,EAAe,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAE7G;;2EAE2E;AAC3E,MAAM,UAAU,eAAe,CAAC,KAAkB;IAChD,MAAM,MAAM,GAAY,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;IAC5C,IAAI,OAAQ,MAA2C,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7E,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAkB;IAChD,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAChC,eAAe,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;gDACgD;AAChD,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAuC,CAAC;AACpE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAkB,EAA0B,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAE1G;;;;gBAIgB;AAChB,MAAM,UAAU,YAAY,CAAC,MAA8B;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAe,CAAC;IACpC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAChE,CAAC;IACD,MAAM,CAAC,OAAO,EAAE,CAAC;IACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACzD,MAAM,SAAS,GAAgB;QAC7B,QAAQ,EAAE,KAAK,IAAI,EAAE,GAAG,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC7E,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAClE,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,MAAM,KAAK,IAAI,QAAQ;gBAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;KAC7G,CAAC;IACF,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAkB;IAClD,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvB,eAAe,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC"}

package/dist/source-signature.d.ts

@@ -0,0 +1,56 @@
+/** The one owner of Detect's source signature: what one stat said about a
+ * filesystem object, in exact decimal integers, and when an equal signature
+ * still proves that object's content. A number stat cannot state a 64-bit
+ * identity or a nanosecond time, so every caller stats with `bigint: true`
+ * and every stored-vs-fresh comparison is a comparison made here. */
+import type { BigIntStats } from "node:fs";
+import type { EntityType } from "@amalgm/live";
+/** The stat fields a signature states. BigIntStats satisfies it, and a plain
+ * copy crosses a worker thread by structured clone. */
+export type SourceStat = Pick<BigIntStats, "dev" | "ino" | "mode" | "nlink" | "size" | "mtimeNs" | "ctimeNs">;
+/** One object's exact physical identity, `device:inode` in decimal. */
+export declare const physicalKey: (stat: Pick<SourceStat, "dev" | "ino">) => string;
+/** dev, ino, kind, size, mtimeNs, ctimeNs, mode and nlink, in that order. */
+export declare const sourceSignature: (stat: SourceStat) => string;
+/** The stat a signature states, for a judge that compares it elsewhere:
+ * `sourceSignature(signedStat(signature)) === signature`. */
+export declare const signedStat: (signature: string) => SourceStat;
+/** A stored signature still names this stat; an absent one never does. */
+export declare const sourceUnchanged: (signature: string | null, stat: SourceStat) => boolean;
+/** Two stats of one address name the same unchanged object. */
+export declare const sameSource: (left: SourceStat, right: SourceStat) => boolean;
+export interface SourceFingerprint {
+    physicalKey: string;
+    sourceSignature: string;
+    /** Beyond the signature, the mode is the object's kind and the file's
+     * executable posture; every bit fits a number exactly. */
+    filesystemMode: number;
+}
+/** How many names the signed object had when signed; unknown without one. */
+export declare const signedLinks: (signature: string | null) => bigint | null;
+/** A rename advances only its object's ctime. Every other signed fact is
+ * kept, so any difference beyond the rename still reads as changed. */
+export declare const renamedSignature: (signature: string | null, stat: Pick<SourceStat, "ctimeNs">) => string | null;
+/** The row facts one stat establishes. */
+export declare const sourceFingerprint: (stat: SourceStat) => SourceFingerprint;
+/** A time precedes a boundary when every instant it may stand for does. A
+ * time with no subsecond part may be a whole-second inode's truncation of any
+ * instant in its second, so the whole second must precede the boundary. The
+ * boundary already sits the profile's margin below its stamp (see
+ * content-clock.ts). Content proofs and listing closure share this one rule. */
+export declare const timePrecedes: (time: bigint, boundary: bigint) => boolean;
+/** How far a boundary must advance before time precedes it; zero once it does. */
+export declare function precedenceWaitNs(time: bigint, boundary: bigint): bigint;
+/** An equal signature proves a leaf's content only when both times it names
+ * precede the content-clock boundary of the read that verified that content.
+ * A writer can set mtime back; it cannot set ctime back, so a ctime inside
+ * the racy interval could repeat on a later same-tick write whose mtime was
+ * restored, and the leaf stays racy until read again. */
+export declare function contentProven(signature: string, boundary: string | null): boolean;
+/** A container's truth is its membership, walked anyway, so an equal
+ * signature reuses it. A leaf's content must also be proven, or be reread. */
+export declare function sourceReusable(row: {
+    readonly type: EntityType;
+    readonly sourceSignature: string | null;
+    readonly contentVerifiedNs: string | null;
+}, stat: SourceStat): boolean;

package/dist/source-signature.js

@@ -0,0 +1,56 @@
+const KIND_BITS = 61440n;
+/** One object's exact physical identity, `device:inode` in decimal. */
+export const physicalKey = (stat) => `${stat.dev}:${stat.ino}`;
+/** dev, ino, kind, size, mtimeNs, ctimeNs, mode and nlink, in that order. */
+export const sourceSignature = (stat) => `${stat.dev}:${stat.ino}:${stat.mode & KIND_BITS}:${stat.size}:${stat.mtimeNs}:${stat.ctimeNs}:${stat.mode}:${stat.nlink}`;
+/** The stat a signature states, for a judge that compares it elsewhere:
+ * `sourceSignature(signedStat(signature)) === signature`. */
+export const signedStat = (signature) => {
+    const [dev, ino, , size, mtimeNs, ctimeNs, mode, nlink] = signature.split(":").map(BigInt);
+    return { dev: dev, ino: ino, size: size, mtimeNs: mtimeNs, ctimeNs: ctimeNs, mode: mode, nlink: nlink };
+};
+/** A stored signature still names this stat; an absent one never does. */
+export const sourceUnchanged = (signature, stat) => signature !== null && signature === sourceSignature(stat);
+/** Two stats of one address name the same unchanged object. */
+export const sameSource = (left, right) => sourceSignature(left) === sourceSignature(right);
+/** How many names the signed object had when signed; unknown without one. */
+export const signedLinks = (signature) => signature === null ? null : BigInt(signature.slice(signature.lastIndexOf(":") + 1));
+/** A rename advances only its object's ctime. Every other signed fact is
+ * kept, so any difference beyond the rename still reads as changed. */
+export const renamedSignature = (signature, stat) => signature === null ? null : signature.split(":").map((field, index) => index === 5 ? `${stat.ctimeNs}` : field).join(":");
+/** The row facts one stat establishes. */
+export const sourceFingerprint = (stat) => ({
+    physicalKey: physicalKey(stat), sourceSignature: sourceSignature(stat), filesystemMode: Number(stat.mode),
+});
+const SECOND_NS = 1000000000n;
+/** A time precedes a boundary when every instant it may stand for does. A
+ * time with no subsecond part may be a whole-second inode's truncation of any
+ * instant in its second, so the whole second must precede the boundary. The
+ * boundary already sits the profile's margin below its stamp (see
+ * content-clock.ts). Content proofs and listing closure share this one rule. */
+export const timePrecedes = (time, boundary) => time % SECOND_NS === 0n ? time + SECOND_NS <= boundary : time < boundary;
+/** How far a boundary must advance before time precedes it; zero once it does. */
+export function precedenceWaitNs(time, boundary) {
+    const wait = (time % SECOND_NS === 0n ? time + SECOND_NS : time + 1n) - boundary;
+    return wait > 0n ? wait : 0n;
+}
+/** An equal signature proves a leaf's content only when both times it names
+ * precede the content-clock boundary of the read that verified that content.
+ * A writer can set mtime back; it cannot set ctime back, so a ctime inside
+ * the racy interval could repeat on a later same-tick write whose mtime was
+ * restored, and the leaf stays racy until read again. */
+export function contentProven(signature, boundary) {
+    if (boundary === null)
+        return false;
+    const fields = signature.split(":"), before = BigInt(boundary);
+    return timePrecedes(BigInt(fields[4]), before) && timePrecedes(BigInt(fields[5]), before);
+}
+/** A container's truth is its membership, walked anyway, so an equal
+ * signature reuses it. A leaf's content must also be proven, or be reread. */
+export function sourceReusable(row, stat) {
+    if (!sourceUnchanged(row.sourceSignature, stat))
+        return false;
+    return row.type === "workspace" || row.type === "folder" || row.type === "repo.git"
+        || contentProven(row.sourceSignature, row.contentVerifiedNs);
+}
+//# sourceMappingURL=source-signature.js.map

package/dist/source-signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-signature.js","sourceRoot":"","sources":["../src/source-signature.ts"],"names":[],"mappings":"AAYA,MAAM,SAAS,GAAG,MAAS,CAAC;AAE5B,uEAAuE;AACvE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAqC,EAAU,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;AAExG,6EAA6E;AAC7E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAgB,EAAU,EAAE,CAC1D,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;AAE7H;6DAC6D;AAC7D,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAc,EAAE;IAC1D,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,AAAD,EAAG,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3F,OAAO,EAAE,GAAG,EAAE,GAAI,EAAE,GAAG,EAAE,GAAI,EAAE,IAAI,EAAE,IAAK,EAAE,OAAO,EAAE,OAAQ,EAAE,OAAO,EAAE,OAAQ,EAAE,IAAI,EAAE,IAAK,EAAE,KAAK,EAAE,KAAM,EAAE,CAAC;AACjH,CAAC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,SAAwB,EAAE,IAAgB,EAAW,EAAE,CACrF,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,eAAe,CAAC,IAAI,CAAC,CAAC;AAE5D,+DAA+D;AAC/D,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAgB,EAAE,KAAiB,EAAW,EAAE,CACzE,eAAe,CAAC,IAAI,CAAC,KAAK,eAAe,CAAC,KAAK,CAAC,CAAC;AAUnD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,SAAwB,EAAiB,EAAE,CACrE,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEtF;uEACuE;AACvE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAwB,EAAE,IAAiC,EAAiB,EAAE,CAC7G,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE5H,0CAA0C;AAC1C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAgB,EAAqB,EAAE,CAAC,CAAC;IACzE,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;CAC1G,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,WAAc,CAAC;AAEjC;;;;gFAIgF;AAChF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAW,EAAE,CACtE,IAAI,GAAG,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC;AAE3E,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,QAAgB;IAC7D,MAAM,IAAI,GAAG,CAAC,IAAI,GAAG,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,GAAG,QAAQ,CAAC;IACjF,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/B,CAAC;AAED;;;;yDAIyD;AACzD,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,QAAuB;IACtE,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/D,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,EAAE,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AAC9F,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,cAAc,CAAC,GACc,EAAE,IAAgB;IAC7D,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9D,OAAO,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;WAC9E,aAAa,CAAC,GAAG,CAAC,eAAgB,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAClE,CAAC"}

package/dist/source-witness.d.ts

@@ -0,0 +1,15 @@
+/** What a native read saw, as plain data. Any thread samples a witness again
+ * and judges it; a judgment throws the capture's own change or churn error,
+ * which crosses threads with its code. Judges re-read and compare only, so
+ * this module never reaches a proof, a pool or the admitting thread. */
+import { type GitRouteWitness } from "./git-binding.js";
+import { type GitConfigurationWitness } from "./git-configuration.js";
+import { type GitIndexWitness } from "./git-index-witness.js";
+import { type GitMarkerWitness } from "./git-literal-read.js";
+import { type NativeFileWitness } from "./git-native-file.js";
+import { type GitOperationWitness } from "./git-operation-host.js";
+import { type NamespaceWitness, type PathsWitness } from "./physical-path-witness.js";
+export type SourceWitness = PathsWitness | NamespaceWitness | NativeFileWitness | GitRouteWitness | GitConfigurationWitness | GitIndexWitness | GitOperationWitness | GitMarkerWitness;
+export declare function judgeWitness(witness: SourceWitness): void;
+/** In order: a witness sampled later may depend on an earlier one's ground. */
+export declare function judgeWitnesses(witnesses: readonly SourceWitness[]): void;

package/dist/source-witness.js

@@ -0,0 +1,29 @@
+/** What a native read saw, as plain data. Any thread samples a witness again
+ * and judges it; a judgment throws the capture's own change or churn error,
+ * which crosses threads with its code. Judges re-read and compare only, so
+ * this module never reaches a proof, a pool or the admitting thread. */
+import { judgeGitRoute } from "./git-binding.js";
+import { judgeGitConfiguration } from "./git-configuration.js";
+import { judgeGitIndex } from "./git-index-witness.js";
+import { judgeGitMarker } from "./git-literal-read.js";
+import { judgeNativeFile } from "./git-native-file.js";
+import { judgeGitOperation } from "./git-operation-host.js";
+import { judgeNamespace, judgePaths } from "./physical-path-witness.js";
+export function judgeWitness(witness) {
+    switch (witness.kind) {
+        case "paths": return judgePaths(witness);
+        case "namespace": return judgeNamespace(witness);
+        case "native-file": return judgeNativeFile(witness);
+        case "git-route": return judgeGitRoute(witness);
+        case "git-configuration": return judgeGitConfiguration(witness);
+        case "git-index": return judgeGitIndex(witness);
+        case "git-operation": return judgeGitOperation(witness);
+        case "git-marker": return judgeGitMarker(witness);
+    }
+}
+/** In order: a witness sampled later may depend on an earlier one's ground. */
+export function judgeWitnesses(witnesses) {
+    for (const witness of witnesses)
+        judgeWitness(witness);
+}
+//# sourceMappingURL=source-witness.js.map

package/dist/source-witness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-witness.js","sourceRoot":"","sources":["../src/source-witness.ts"],"names":[],"mappings":"AAAA;;;wEAGwE;AACxE,OAAO,EAAE,aAAa,EAAwB,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAgC,MAAM,wBAAwB,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAwB,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAyB,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,eAAe,EAA0B,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAA4B,MAAM,yBAAyB,CAAC;AACtF,OAAO,EAAE,cAAc,EAAE,UAAU,EAA4C,MAAM,4BAA4B,CAAC;AAMlH,MAAM,UAAU,YAAY,CAAC,OAAsB;IACjD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,OAAO,CAAC,CAAC,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;QACzC,KAAK,WAAW,CAAC,CAAC,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;QACjD,KAAK,aAAa,CAAC,CAAC,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;QACpD,KAAK,WAAW,CAAC,CAAC,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;QAChD,KAAK,mBAAmB,CAAC,CAAC,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAChE,KAAK,WAAW,CAAC,CAAC,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;QAChD,KAAK,eAAe,CAAC,CAAC,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACxD,KAAK,YAAY,CAAC,CAAC,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,SAAmC;IAChE,KAAK,MAAM,OAAO,IAAI,SAAS;QAAE,YAAY,CAAC,OAAO,CAAC,CAAC;AACzD,CAAC"}

package/dist/sqlite-durability.d.ts

@@ -0,0 +1,31 @@
+/**
+ * The one durability policy for persistent SQLite files, whichever driver
+ * opens them. Each synchronization a connection performs requests F_FULLFSYNC
+ * where the platform has it: an ordinary macOS fsync may leave committed pages
+ * in the drive's cache, so it would not make a commit durable. The policy owns
+ * only that flush strength; each store keeps its own journal mode and
+ * synchronous level, which must still make its commits durable.
+ *
+ * Both better-sqlite3 and node:sqlite connections satisfy the small SQL
+ * surface below, so neither driver is forced through the other's opener.
+ */
+export interface SqlConnection {
+    exec(sql: string): unknown;
+    prepare(sql: string): {
+        get(): unknown;
+    };
+}
+export declare function applyDurability(connection: SqlConnection): void;
+/** The settings a durable commit actually ran under, read back from the
+ * connection rather than assumed, for run metadata. */
+export interface DurabilityProfile {
+    readonly journalMode: string;
+    readonly synchronous: number;
+    readonly fullfsync: number;
+    readonly walAutocheckpoint: number;
+    readonly sqlite: string;
+    readonly node: string;
+    readonly libuv: string;
+    readonly platform: string;
+}
+export declare function durabilityProfile(connection: SqlConnection): DurabilityProfile;

package/dist/sqlite-durability.js

@@ -0,0 +1,28 @@
+/**
+ * The one durability policy for persistent SQLite files, whichever driver
+ * opens them. Each synchronization a connection performs requests F_FULLFSYNC
+ * where the platform has it: an ordinary macOS fsync may leave committed pages
+ * in the drive's cache, so it would not make a commit durable. The policy owns
+ * only that flush strength; each store keeps its own journal mode and
+ * synchronous level, which must still make its commits durable.
+ *
+ * Both better-sqlite3 and node:sqlite connections satisfy the small SQL
+ * surface below, so neither driver is forced through the other's opener.
+ */
+export function applyDurability(connection) {
+    connection.exec("PRAGMA fullfsync = ON");
+}
+export function durabilityProfile(connection) {
+    const read = (sql) => Object.values(connection.prepare(sql).get())[0];
+    return {
+        journalMode: String(read("PRAGMA journal_mode")),
+        synchronous: Number(read("PRAGMA synchronous")),
+        fullfsync: Number(read("PRAGMA fullfsync")),
+        walAutocheckpoint: Number(read("PRAGMA wal_autocheckpoint")),
+        sqlite: String(read("SELECT sqlite_version()")),
+        node: process.versions.node,
+        libuv: process.versions.uv,
+        platform: process.platform,
+    };
+}
+//# sourceMappingURL=sqlite-durability.js.map

package/dist/sqlite-durability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-durability.js","sourceRoot":"","sources":["../src/sqlite-durability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,MAAM,UAAU,eAAe,CAAC,UAAyB;IACvD,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;AAC3C,CAAC;AAeD,MAAM,UAAU,iBAAiB,CAAC,UAAyB;IACzD,MAAM,IAAI,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAChD,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC/C,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC3C,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC5D,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC/C,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;QAC3B,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC;AACJ,CAAC"}

package/dist/sqlite.d.ts

@@ -1,4 +1,10 @@
 import Database from 'better-sqlite3';
-/** Every persistent SQLite handle names the same OS file as Node's filesystem.
- * The Windows namespace prefix bypasses legacy Win32 MAX_PATH interpretation. */
+/** A database file's one name: the one its connection reports as
+ * `database.name`, so every registry keyed by a file agrees with every
+ * connection to it. The Windows namespace prefix bypasses legacy Win32
+ * MAX_PATH interpretation; elsewhere it is the resolved path. Idempotent. */
+export declare const databaseFileName: (file: string) => string;
+/** Every persistent better-sqlite3 handle names the same OS file as Node's
+ * filesystem and runs under the shared durability policy. */
 export declare function openFileDatabase(file: string, options?: Database.Options): Database.Database;
+export declare function cachedStatement(database: Database.Database, sql: string, safeIntegers?: boolean): Database.Statement;

package/dist/sqlite.js

@@ -1,16 +1,39 @@
 import Database from 'better-sqlite3';
 import { resolve, toNamespacedPath } from 'node:path';
-/** Every persistent SQLite handle names the same OS file as Node's filesystem.
- * The Windows namespace prefix bypasses legacy Win32 MAX_PATH interpretation. */
+import { applyDurability } from './sqlite-durability.js';
+/** A database file's one name: the one its connection reports as
+ * `database.name`, so every registry keyed by a file agrees with every
+ * connection to it. The Windows namespace prefix bypasses legacy Win32
+ * MAX_PATH interpretation; elsewhere it is the resolved path. Idempotent. */
+export const databaseFileName = (file) => toNamespacedPath(resolve(file));
+/** Every persistent better-sqlite3 handle names the same OS file as Node's
+ * filesystem and runs under the shared durability policy. */
 export function openFileDatabase(file, options) {
-    const filename = toNamespacedPath(resolve(file));
+    const filename = databaseFileName(file);
+    let database;
     try {
-        return new Database(filename, options);
+        database = new Database(filename, options);
     }
     catch (error) {
         if (error instanceof Error)
             error.message = `SQLite ${JSON.stringify(file)}: ${error.message}`;
         throw error;
     }
+    applyDurability(database);
+    return database;
+}
+/** One compiled statement per connection, SQL text and integer mode. It lives
+ * exactly as long as the handle that compiled it and is never shared with
+ * another. */
+const compiled = new WeakMap();
+export function cachedStatement(database, sql, safeIntegers = false) {
+    let statements = compiled.get(database);
+    if (!statements)
+        compiled.set(database, statements = new Map());
+    const key = `${safeIntegers ? "safe" : "number"}:${sql}`;
+    let value = statements.get(key);
+    if (!value)
+        statements.set(key, value = database.prepare(sql).safeIntegers(safeIntegers));
+    return value;
 }
 //# sourceMappingURL=sqlite.js.map

package/dist/sqlite.js.map

@@ -1 +1 @@
-{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../src/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAEtD;iFACiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAA0B;IACvE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC;QAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAAC,CAAC;IAC/C,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,KAAK;YAAE,KAAK,CAAC,OAAO,GAAG,UAAU,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/F,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../src/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD;;;6EAG6E;AAC7E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAE1F;6DAC6D;AAC7D,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAA0B;IACvE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,QAA2B,CAAC;IAChC,IAAI,CAAC;QAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAAC,CAAC;IACnD,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,KAAK;YAAE,KAAK,CAAC,OAAO,GAAG,UAAU,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/F,MAAM,KAAK,CAAC;IACd,CAAC;IACD,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;cAEc;AACd,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAsD,CAAC;AACnF,MAAM,UAAU,eAAe,CAAC,QAA2B,EAAE,GAAW,EAAE,YAAY,GAAG,KAAK;IAC5F,IAAI,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU;QAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC;IACzD,IAAI,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/sync-address.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Synchronization addresses: the one spelling ground coordination compares.
+ *
+ * Cone overlap is a string comparison, so two spellings of one physical
+ * route (`/var/...` and `/private/var/...`) must never reach it. Bound roots
+ * are resolved here once and ordinary children are derived from them; a
+ * dependency reached some other way is resolved here too. Readers and
+ * writers keep their lexical paths: Git interprets includes against the path
+ * it was given, and an effect replacing a link replaces the link itself.
+ *
+ * Resolution names routes, not files: hard links stay distinct and case is
+ * not folded. Bind mounts and firmlinks are outside the supported profile.
+ */
+/** The existing ancestor's resolved route plus the part not yet created, so
+ * a missing destination keeps its dependency instead of vanishing. */
+export declare function physicalPath(requestedPath: string): string;
+/** A read through `path` depends on the slot of every symbolic link along
+ * its route, on its own slot, and on whatever that entry resolves to. */
+export declare function readThroughAddresses(path: string): string[];

package/dist/sync-address.js

@@ -0,0 +1,52 @@
+/**
+ * Synchronization addresses: the one spelling ground coordination compares.
+ *
+ * Cone overlap is a string comparison, so two spellings of one physical
+ * route (`/var/...` and `/private/var/...`) must never reach it. Bound roots
+ * are resolved here once and ordinary children are derived from them; a
+ * dependency reached some other way is resolved here too. Readers and
+ * writers keep their lexical paths: Git interprets includes against the path
+ * it was given, and an effect replacing a link replaces the link itself.
+ *
+ * Resolution names routes, not files: hard links stay distinct and case is
+ * not folded. Bind mounts and firmlinks are outside the supported profile.
+ */
+import { existsSync, lstatSync, realpathSync } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
+/** The existing ancestor's resolved route plus the part not yet created, so
+ * a missing destination keeps its dependency instead of vanishing. */
+export function physicalPath(requestedPath) {
+    let ancestor = resolve(requestedPath);
+    const absent = [];
+    while (!existsSync(ancestor)) {
+        const parent = dirname(ancestor);
+        if (parent === ancestor)
+            throw new Error(`Cannot resolve physical root ${requestedPath}`);
+        absent.unshift(basename(ancestor));
+        ancestor = parent;
+    }
+    return join(realpathSync.native(ancestor), ...absent);
+}
+/** The slot of one route component: its resolved parent route plus the
+ * unfollowed entry name. Replacing that entry redirects every read below it. */
+const slotAddress = (path) => join(physicalPath(dirname(path)), basename(path));
+/** A read through `path` depends on the slot of every symbolic link along
+ * its route, on its own slot, and on whatever that entry resolves to. */
+export function readThroughAddresses(path) {
+    const route = resolve(path);
+    const addresses = [];
+    for (let prefix = dirname(route); prefix !== dirname(prefix); prefix = dirname(prefix)) {
+        let link = false;
+        try {
+            link = lstatSync(prefix).isSymbolicLink();
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+        if (link)
+            addresses.push(slotAddress(prefix));
+    }
+    return [...new Set([...addresses, slotAddress(route), physicalPath(route)])];
+}
+//# sourceMappingURL=sync-address.js.map

package/dist/sync-address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-address.js","sourceRoot":"","sources":["../src/sync-address.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7D;sEACsE;AACtE,MAAM,UAAU,YAAY,CAAC,aAAqB;IAChD,IAAI,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACtC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,aAAa,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnC,QAAQ,GAAG,MAAM,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;AACxD,CAAC;AAED;gFACgF;AAChF,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAEhG;yEACyE;AACzE,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,IAAI,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACvF,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,CAAC;YAAC,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChE,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QACD,IAAI,IAAI;YAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC"}

package/dist/sync-setting.d.ts

@@ -1,9 +1,24 @@
+import type { ApplyBlocker, ApplyWait } from '@amalgm/live';
 export type SyncMode = 'paused' | 'enabled';
 export interface SyncStatus {
     readonly configured: SyncMode;
     readonly state: 'paused' | 'pausing' | 'starting' | 'enabled' | 'failed' | 'stopped' | 'unavailable';
     readonly error?: string;
+    /** Present only while a Files lifetime runs; absent means nothing was examined. */
+    readonly blocked?: readonly SyncBlocked[];
 }
+/** An accepted incoming result held back because applying it would destroy local ground. */
+export interface SyncBlocked {
+    readonly entityId: string;
+    readonly throughSequence: number;
+    readonly code: ApplyBlocker['code'];
+    readonly effect: ApplyBlocker['effect'];
+    readonly reason: string;
+    readonly waitingOn: readonly string[];
+    readonly waitingOnCount: number;
+}
+/** Current blockers come from the running Apply rail, never from old stage logs. */
+export declare function syncBlocked(waits: readonly ApplyWait[]): SyncBlocked[];
 /** Machine state, outside package generations and portable Files ground. */
 export declare function readSyncMode(file: string): SyncMode;
 export declare function writeSyncMode(file: string, mode: SyncMode): void;

package/dist/sync-setting.js

@@ -1,6 +1,19 @@
 import { randomUUID } from 'node:crypto';
 import { closeSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
 import { dirname } from 'node:path';
+const BLOCKED_NAMES = 20;
+/** Current blockers come from the running Apply rail, never from old stage logs. */
+export function syncBlocked(waits) {
+    return waits.flatMap(wait => wait.blocker ? [{
+            entityId: wait.entityId,
+            throughSequence: wait.throughSequence,
+            code: wait.blocker.code,
+            effect: wait.blocker.effect,
+            reason: wait.reason,
+            waitingOn: wait.prerequisite.entityIds.slice(0, BLOCKED_NAMES),
+            waitingOnCount: wait.prerequisite.entityIds.length,
+        }] : []);
+}
 /** Machine state, outside package generations and portable Files ground. */
 export function readSyncMode(file) {
     let text;

package/dist/sync-setting.js.map

@@ -1 +1 @@
-{"version":3,"file":"sync-setting.js","sourceRoot":"","sources":["../src/sync-setting.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASpC,4EAA4E;AAC5E,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAC1C,OAAO,KAAK,EAAE,CAAC;QACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,KAAK,EAAE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAc;IACxD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC;YAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;gBAC7E,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAC1B,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;QACnD,CAAC;IACH,CAAC;YAAS,CAAC;QAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mEAAmE,CAAC,EAAE;QACnG,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG;KACjC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"sync-setting.js","sourceRoot":"","sources":["../src/sync-setting.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuBpC,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,oFAAoF;AACpF,MAAM,UAAU,WAAW,CAAC,KAA2B;IACrD,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACvB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;YAC9D,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM;SACnD,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACX,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAC1C,OAAO,KAAK,EAAE,CAAC;QACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,KAAK,EAAE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAc;IACxD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC;YAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;gBAC7E,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAC1B,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;QACnD,CAAC;IACH,CAAC;YAAS,CAAC;QAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mEAAmE,CAAC,EAAE;QACnG,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG;KACjC,CAAC,CAAC;AACL,CAAC"}

package/dist/turns.d.ts

@@ -0,0 +1,42 @@
+/**
+ * One main-thread dispatcher for the rails' ready continuations: Detect,
+ * Send, Receive, Apply and cache maintenance. Each activation runs the oldest
+ * queued chunk, then returns to the event loop before the next, so ready work
+ * from several rails never runs back to back in one check phase. Asynchronous
+ * work never occupies it: a chunk that needs I/O starts that I/O and ends, and
+ * the completion queues the next chunk.
+ *
+ * It orders only these continuations. I/O callbacks, native completions,
+ * promise continuations, garbage collection and unrelated callbacks still run
+ * around it, and a chunk is only as short as the work its owner put in it.
+ */
+import { type Steps } from "@amalgm/live";
+/** Run `chunk` in a later dispatcher activation; never inline. */
+export declare function queueTurn(chunk: () => void): void;
+/** Resume the caller in its own activation: pending I/O, timers and wire
+ * frames run first. */
+export declare function awaitTurn(): Promise<void>;
+/** An already-valid boundary in a long preparation: continue while this
+ * activation is within its budget, else resume in a later one. Work resumed
+ * outside the dispatcher counts from the last activation, so it joins the
+ * dispatcher at its first boundary. */
+export declare function turnBoundary(): Promise<void>;
+/** Visit every item of a long synchronous pass in order, taking a later
+ * activation once this one has spent its budget. */
+export declare function eachInTurns<T>(items: Iterable<T>, visit: (item: T) => void): Promise<void>;
+/** Every item's image, in order, as eachInTurns visits them. */
+export declare function mapInTurns<T, R>(items: Iterable<T>, image: (item: T) => R): Promise<R[]>;
+/** Start each item's effect in order, taking a later activation once this
+ * one has spent its budget, and answer every result in order once every
+ * started effect has settled; the first failure in order fails the whole.
+ * An effect's synchronous preparation counts against the activation that
+ * starts it, so no number of items starts in one. */
+export declare function settleInTurns<T, R>(items: Iterable<T>, start: (item: T) => Promise<R>): Promise<R[]>;
+/** The parts joined in order into one buffer, one part copied per step. */
+export declare function concatInTurns(parts: readonly Uint8Array[]): Promise<Buffer>;
+/** Live's steps on the main thread, taking a later activation at a boundary
+ * once this one has spent its budget. */
+export declare function finishStepsInTurns<R>(steps: Steps<R>): Promise<R>;
+/** A host effect a rail awaits. Its answer or failure reaches the rail in a
+ * dispatcher activation, never inline in the callback that completed the I/O. */
+export declare function resumeInTurn<A extends unknown[], R>(effect: (...args: A) => Promise<R>): (...args: A) => Promise<R>;