@angelmsger/fx 0.0.0-stage → 0.10.1

package/dist/infra/hook-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-state.js","sourceRoot":"","sources":["../../src/infra/hook-state.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,8EAA8E;AAE9E,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAIlD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGnD,MAAM,OAAO,GAAG;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACU,CAAC;AACjC,MAAM,WAAW,GAAG;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACK,CAAC;AACrC,MAAM,KAAK,GAAG;IACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;CACtB,CAAC;AAE/B,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;AACtC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;IACpB,GAAG,KAAK;IACR,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;CAC7C,CAAC,CAAC;AAEH,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAE7C,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAClE,MAAM,IAAI,WAAW,CACnB,QAAQ,EACR,oBAAoB,EACpB,oCAAoC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAC1D;gBACE,IAAI,EAAE,sDAAsD;gBAC5D,SAAS,EAAE,CAAC,cAAc,EAAE,uDAAuD,CAAC;gBACpF,KAAK,EAAE,GAAG;aACX,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,KAAgB;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IAEO,IAAI,CAAC,SAAiB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,kBAAkB,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC;IACzF,CAAC;CACF"}

package/dist/infra/local-store.js

@@ -0,0 +1,57 @@
+// Persist personal workspace layers using the manifest codec and a workspace lease.
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { stringify } from 'yaml';
+import { busyError } from '../domain/errors.js';
+import { loadLocal } from '../domain/manifest/loader.js';
+import { writeAtomicFile } from './atomic-file.js';
+import { FileLock } from './lock.js';
+import { localLayerPath } from './workspace-home.js';
+export class FileLocalLayerStore {
+    home;
+    constructor(home) {
+        this.home = home;
+    }
+    path(workspace) {
+        return localLayerPath(this.home, workspace);
+    }
+    async read(workspace) {
+        let raw;
+        try {
+            raw = await fs.readFile(this.path(workspace), 'utf8');
+        }
+        catch (err) {
+            if (err.code === 'ENOENT')
+                return {};
+            throw err;
+        }
+        return loadLocal(raw).doc;
+    }
+    async write(workspace, next) {
+        await this.persist(workspace, async () => next);
+    }
+    async update(workspace, change) {
+        return this.persist(workspace, async () => change(await this.read(workspace)));
+    }
+    async persist(workspace, change) {
+        const file = this.path(workspace);
+        const lease = await new FileLock(this.home).acquire({
+            key: `local:${workspace}`,
+            waitMs: 5000,
+        });
+        if (lease === null)
+            throw busyError('WORKSPACE_BUSY', `The personal layer for ${workspace}`, {
+                nextSteps: ['Retry the selection change.'],
+            });
+        try {
+            const next = await change();
+            await fs.mkdir(path.dirname(file), { recursive: true });
+            await writeAtomicFile(file, stringify(next));
+            return next;
+        }
+        finally {
+            await lease.release();
+        }
+    }
+}
+//# sourceMappingURL=local-store.js.map

package/dist/infra/local-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-store.js","sourceRoot":"","sources":["../../src/infra/local-store.ts"],"names":[],"mappings":"AAAA,oFAAoF;AAEpF,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAIzD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAE7C,IAAI,CAAC,SAAiB;QACpB,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAChE,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,IAAgB;QAC7C,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,MAAM,CACV,SAAiB,EACjB,MAAiE;QAEjE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,MAAiC;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;YAClD,GAAG,EAAE,SAAS,SAAS,EAAE;YACzB,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,IAAI;YAChB,MAAM,SAAS,CAAC,gBAAgB,EAAE,0BAA0B,SAAS,EAAE,EAAE;gBACvE,SAAS,EAAE,CAAC,6BAA6B,CAAC;aAC3C,CAAC,CAAC;QACL,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;YAC5B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;CACF"}

package/dist/infra/lock.js

@@ -0,0 +1,116 @@
+// Cross-process leases live under FX_HOME. Publishing a complete owner record
+// by exclusive hard link prevents a crash from leaving an ownerless lock.
+// Reapers themselves hold leases, so competing stale recoveries cannot remove
+// a newly acquired lock. Unreadable owners are conservatively left alone.
+import { createHash, randomUUID } from 'node:crypto';
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { setTimeout as delay } from 'node:timers/promises';
+import { asDevkitError } from '../domain/errors.js';
+export class FileLock {
+    home;
+    constructor(home) {
+        this.home = home;
+    }
+    async acquire(input) {
+        const dir = path.join(this.home, 'locks');
+        const file = path.join(dir, createHash('sha256').update(input.key).digest('hex'));
+        try {
+            await fs.mkdir(dir, { recursive: true, mode: 0o700 });
+            const until = performance.now() + Math.max(0, input.waitMs);
+            do {
+                const lease = await claim(file, 0);
+                if (lease !== null)
+                    return lease;
+                const remaining = until - performance.now();
+                if (remaining <= 0)
+                    return null;
+                await delay(Math.min(20, remaining));
+            } while (performance.now() <= until);
+            return null;
+        }
+        catch (err) {
+            throw asDevkitError(err);
+        }
+    }
+}
+async function claim(file, depth) {
+    const owner = { pid: process.pid, token: randomUUID() };
+    if (await publish(file, owner))
+        return leaseFor(file, owner);
+    if (depth >= 8)
+        return null;
+    const old = await readOwner(file);
+    if (old === undefined || isAlive(old.pid))
+        return null;
+    const reaper = await claim(`${file}.reaper`, depth + 1);
+    if (reaper === null)
+        return null;
+    try {
+        const current = await readOwner(file);
+        if (current?.token !== old.token || isAlive(current.pid))
+            return null;
+        await fs.unlink(file);
+        return (await publish(file, owner)) ? leaseFor(file, owner) : null;
+    }
+    finally {
+        await reaper.release();
+    }
+}
+async function publish(file, owner) {
+    const candidate = `${file}.${owner.token}.candidate`;
+    try {
+        await fs.writeFile(candidate, JSON.stringify(owner), { flag: 'wx', mode: 0o600 });
+        await fs.link(candidate, file);
+        return true;
+    }
+    catch (err) {
+        if (hasCode(err, 'EEXIST'))
+            return false;
+        throw asDevkitError(err);
+    }
+    finally {
+        await fs.rm(candidate, { force: true });
+    }
+}
+function leaseFor(file, owner) {
+    let released = false;
+    return {
+        async release() {
+            if (released)
+                return;
+            released = true;
+            if ((await readOwner(file))?.token === owner.token)
+                await fs.unlink(file);
+        },
+    };
+}
+async function readOwner(file) {
+    try {
+        const value = JSON.parse(await fs.readFile(file, 'utf8'));
+        if (typeof value !== 'object' || value === null)
+            return undefined;
+        const owner = value;
+        if (!Number.isSafeInteger(owner.pid) ||
+            (owner.pid ?? 0) <= 0 ||
+            typeof owner.token !== 'string')
+            return undefined;
+        return owner;
+    }
+    catch {
+        return undefined;
+    }
+}
+function isAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        return !hasCode(err, 'ESRCH');
+    }
+}
+function hasCode(err, code) {
+    return typeof err === 'object' && err !== null && 'code' in err && err.code === code;
+}
+//# sourceMappingURL=lock.js.map

package/dist/infra/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../src/infra/lock.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAC9E,0EAA0E;AAE1E,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAQpD,MAAM,OAAO,QAAQ;IACU;IAA7B,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAE7C,KAAK,CAAC,OAAO,CAAC,KAAkB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5D,GAAG,CAAC;gBACF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACnC,IAAI,KAAK,KAAK,IAAI;oBAAE,OAAO,KAAK,CAAC;gBACjC,MAAM,SAAS,GAAG,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;gBAC5C,IAAI,SAAS,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAChC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;YACvC,CAAC,QAAQ,WAAW,CAAC,GAAG,EAAE,IAAI,KAAK,EAAE;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;CACF;AAED,KAAK,UAAU,KAAK,CAAC,IAAY,EAAE,KAAa;IAC9C,MAAM,KAAK,GAAU,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC;IAC/D,IAAI,MAAM,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACxD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,OAAO,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACtE,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,KAAY;IAC/C,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,KAAK,CAAC,KAAK,YAAY,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAY;IAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO;QACL,KAAK,CAAC,OAAO;YACX,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC,KAAK;gBAAE,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5E,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAClE,MAAM,KAAK,GAAG,KAAuB,CAAC;QACtC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;YAChC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC;YACrB,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAE/B,OAAO,SAAS,CAAC;QACnB,OAAO,KAAc,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,GAAY,EAAE,IAAY;IACzC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC;AACvF,CAAC"}

package/dist/infra/projection-store.js

@@ -0,0 +1,135 @@
+// Managed projection writes use same-directory replacement after a locked
+// re-read. Symlinked ancestors are foreign, so a project entry cannot redirect
+// a write into an unrelated tree. No copy of a user's document enters FX_HOME.
+import { randomUUID } from 'node:crypto';
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { asDevkitError } from '../domain/errors.js';
+import { isAtOrInside, pathKey, samePath } from '../domain/path.js';
+import { writeAtomicFile } from './atomic-file.js';
+export class FileProjectionStore {
+    lock;
+    constructor(lock) {
+        this.lock = lock;
+    }
+    async read(at) {
+        const file = path.resolve(at.root, at.relative);
+        if (!(await isSafe(at)))
+            return { kind: 'foreign', text: null };
+        try {
+            const stat = await fs.lstat(file);
+            if (!stat.isFile() || stat.nlink !== 1)
+                return { kind: 'foreign', text: null };
+            return { kind: 'file', text: await fs.readFile(file, 'utf8') };
+        }
+        catch (err) {
+            if (err.code === 'ENOENT')
+                return { kind: 'absent', text: null };
+            throw asDevkitError(err);
+        }
+    }
+    async readLink(at) {
+        if (!(await isSafe(at)))
+            return { kind: 'unsafe', target: null };
+        try {
+            const file = path.resolve(at.root, at.relative);
+            const stat = await fs.lstat(file);
+            return stat.isSymbolicLink()
+                ? { kind: 'link', target: await fs.readlink(file) }
+                : { kind: 'foreign', target: null };
+        }
+        catch (err) {
+            if (err.code === 'ENOENT')
+                return { kind: 'absent', target: null };
+            throw asDevkitError(err);
+        }
+    }
+    async writeLink(input) {
+        if (input.before.kind !== 'link')
+            return 'conflict';
+        const file = path.resolve(input.root, input.relative);
+        const lease = await this.lock.acquire({ key: `projection:${pathKey(file)}`, waitMs: 0 });
+        if (!lease)
+            return 'busy';
+        try {
+            const current = await this.readLink(input);
+            if (current.kind !== input.before.kind || current.target !== input.before.target)
+                return 'conflict';
+            if (current.target === input.target)
+                return 'unchanged';
+            if (input.target === null)
+                await fs.unlink(file);
+            else
+                await replaceLink(file, input.target);
+            return 'written';
+        }
+        catch (err) {
+            throw asDevkitError(err);
+        }
+        finally {
+            await lease.release();
+        }
+    }
+    async write(input) {
+        if (input.before.kind === 'foreign')
+            return 'conflict';
+        if (input.before.text === input.text)
+            return 'unchanged';
+        const file = path.resolve(input.root, input.relative);
+        const lease = await this.lock.acquire({ key: `projection:${pathKey(file)}`, waitMs: 0 });
+        if (!lease)
+            return 'busy';
+        try {
+            const current = await this.read(input);
+            if (current.kind !== input.before.kind || current.text !== input.before.text)
+                return 'conflict';
+            if (input.text === null)
+                await fs.unlink(file);
+            else
+                await replace(file, input.text);
+            return 'written';
+        }
+        catch (err) {
+            throw asDevkitError(err);
+        }
+        finally {
+            await lease.release();
+        }
+    }
+}
+async function isSafe(at) {
+    const root = path.resolve(at.root);
+    const file = path.resolve(root, at.relative);
+    if (samePath(file, root) || !isAtOrInside(file, root))
+        return false;
+    let parent = path.dirname(file);
+    while (parent !== path.dirname(root)) {
+        try {
+            const stat = await fs.lstat(parent);
+            if (!stat.isDirectory() || stat.isSymbolicLink())
+                return false;
+        }
+        catch (err) {
+            if (err.code !== 'ENOENT')
+                return false;
+        }
+        parent = path.dirname(parent);
+    }
+    return true;
+}
+async function replace(file, text) {
+    await fs.mkdir(path.dirname(file), { recursive: true });
+    const mode = await fs.stat(file).then((stat) => stat.mode & 0o777, () => 0o600);
+    await writeAtomicFile(file, text, { mode });
+}
+async function replaceLink(file, target) {
+    const temporary = `${file}.${randomUUID()}.tmp`;
+    try {
+        await fs.symlink(path.resolve(target), temporary, process.platform === 'win32' ? 'junction' : 'dir');
+        await fs.rename(temporary, file);
+    }
+    finally {
+        await fs.rm(temporary, { force: true });
+    }
+}
+//# sourceMappingURL=projection-store.js.map

package/dist/infra/projection-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection-store.js","sourceRoot":"","sources":["../../src/infra/projection-store.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,+EAA+E;AAC/E,+EAA+E;AAE/E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAYpE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAE3C,KAAK,CAAC,IAAI,CAAC,EAAkB;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC/E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC5F,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAkB;QAC/B,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,OAAO,IAAI,CAAC,cAAc,EAAE;gBAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;gBACnD,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC9F,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CACb,KAA0B;QAE1B,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,UAAU,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,cAAc,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM;gBAC9E,OAAO,UAAU,CAAC;YACpB,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAAE,OAAO,WAAW,CAAC;YACxD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;gBAAE,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;;gBAC5C,MAAM,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3C,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAsB;QAChC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC;QACvD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;YAAE,OAAO,WAAW,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,cAAc,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI;gBAC1E,OAAO,UAAU,CAAC;YACpB,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;gBAAE,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;;gBAC1C,MAAM,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;CACF;AAED,KAAK,UAAU,MAAM,CAAC,EAAkB;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,OAAO,KAAK,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;QACrE,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,IAAY;IAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CACnC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,EAC3B,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;IACF,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,MAAc;IACrD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,OAAO,CACd,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EACpB,SAAS,EACT,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAClD,CAAC;QACF,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC"}

package/dist/infra/store-parents.js

@@ -0,0 +1,24 @@
+// Personal journals may create missing directories, but must not traverse a
+// foreign ancestor. The owning store supplies its public corruption error.
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { isAtOrInside, samePath } from '../domain/path.js';
+export async function assertStoreParents(home, file, invalid) {
+    const root = path.resolve(home);
+    const target = path.resolve(file);
+    if (samePath(target, root) || !isAtOrInside(target, root))
+        throw invalid();
+    for (let directory = path.dirname(target);; directory = path.dirname(directory)) {
+        try {
+            if (!(await fs.lstat(directory)).isDirectory())
+                throw invalid();
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw invalid();
+        }
+        if (samePath(directory, root))
+            return;
+    }
+}
+//# sourceMappingURL=store-parents.js.map

package/dist/infra/store-parents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-parents.js","sourceRoot":"","sources":["../../src/infra/store-parents.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,2EAA2E;AAE3E,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,IAAY,EACZ,OAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IAC3E,KAAK,IAAI,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAI,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACjF,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE;gBAAE,MAAM,OAAO,EAAE,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,OAAO,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;YAAE,OAAO;IACxC,CAAC;AACH,CAAC"}

package/dist/infra/stored-shape.js

@@ -0,0 +1,3 @@
+// Require each persisted domain field to have a matching schema.
+export {};
+//# sourceMappingURL=stored-shape.js.map

package/dist/infra/stored-shape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stored-shape.js","sourceRoot":"","sources":["../../src/infra/stored-shape.ts"],"names":[],"mappings":"AAAA,iEAAiE"}

package/dist/infra/tool-history.js

@@ -0,0 +1,94 @@
+// A versioned personal ledger preserves every checkpoint under an atomic, locked append.
+// Invalid or foreign files fail closed, so installation cannot silently lose its audit trail.
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import * as z from 'zod';
+import { busyError, DevkitError } from '../domain/errors.js';
+import { writeAtomicFile } from './atomic-file.js';
+const entry = {
+    id: z.string().uuid(),
+    at: z.string().datetime(),
+    event: z.enum(['started', 'installed', 'finished']),
+    operation: z.enum(['init', 'install', 'update']),
+    workspace: z.string().nullable(),
+    name: z.string(),
+    binary: z.string(),
+    via: z.enum(['npm', 'brew', 'go']),
+    spec: z.string(),
+    vector: z.array(z.string()),
+    code: z.number().int().nullable(),
+    version_after: z.string().nullable(),
+    binary_path: z.string().nullable(),
+    failure_code: z.string().nullable(),
+    installation_origin: z.enum(['fx', 'external', 'unknown']).optional(),
+    binary_path_before: z.string().nullable().optional(),
+};
+const ledger = (object) => object({
+    owner: z.enum(['fx:tool-history:v1', 'fx:tool-history:v2']),
+    entries: z.array(object(entry)),
+});
+const written = ledger(z.strictObject);
+const read = ledger(z.object);
+export class FileToolHistoryStore {
+    home;
+    lock;
+    constructor(home, lock) {
+        this.home = home;
+        this.lock = lock;
+    }
+    async read() {
+        await this.checkHome();
+        try {
+            const stat = await fs.lstat(this.file());
+            if (!stat.isFile() || stat.nlink !== 1)
+                throw invalid();
+            return read.parse(JSON.parse(await fs.readFile(this.file(), 'utf8'))).entries;
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return [];
+            throw invalid();
+        }
+    }
+    async append(entry) {
+        await this.checkHome();
+        const lease = await this.lock.acquire({ key: 'tool-history', waitMs: 2000 });
+        if (!lease)
+            throw busyError('TOOL_HISTORY_BUSY', 'The tool history', {
+                nextSteps: ['Retry after the other tool operation finishes.'],
+            });
+        try {
+            const entries = [...(await this.read()), entry];
+            const parsed = written.safeParse({ owner: 'fx:tool-history:v2', entries });
+            if (!parsed.success)
+                throw invalid();
+            await fs.mkdir(this.home, { recursive: true, mode: 0o700 });
+            await this.checkHome();
+            await writeAtomicFile(this.file(), JSON.stringify(parsed.data) + '\n', { durable: true });
+        }
+        finally {
+            await lease.release();
+        }
+    }
+    file() {
+        return path.join(this.home, 'tool-history.json');
+    }
+    async checkHome() {
+        try {
+            if (!(await fs.lstat(this.home)).isDirectory())
+                throw invalid();
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw invalid();
+        }
+    }
+}
+function invalid() {
+    return new DevkitError('config', 'TOOL_HISTORY_INVALID', 'The tool installation ledger is invalid or unreadable', {
+        nextSteps: [
+            'Inspect and repair FX_HOME/tool-history.json, preserving the existing audit evidence, before retrying.',
+        ],
+    });
+}
+//# sourceMappingURL=tool-history.js.map

package/dist/infra/tool-history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-history.js","sourceRoot":"","sources":["../../src/infra/tool-history.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,8FAA8F;AAE9F,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAK7D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGnD,MAAM,KAAK,GAAG;IACZ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACnD,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACjC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjB,CAAC;AACtC,MAAM,MAAM,GAAG,CAAC,MAA6B,EAAE,EAAE,CAC/C,MAAM,CAAC;IACL,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;IAC3D,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;CAChC,CAAC,CAAC;AAEL,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;AACvC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9B,MAAM,OAAO,oBAAoB;IAEZ;IACA;IAFnB,YACmB,IAAY,EACZ,IAAU;QADV,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAM;IAC1B,CAAC;IAEJ,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;gBAAE,MAAM,OAAO,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAClE,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAuB;QAClC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,KAAK;YACR,MAAM,SAAS,CAAC,mBAAmB,EAAE,kBAAkB,EAAE;gBACvD,SAAS,EAAE,CAAC,gDAAgD,CAAC;aAC9D,CAAC,CAAC;QACL,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3E,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,OAAO,EAAE,CAAC;YACrC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACvB,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5F,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,IAAI;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;gBAAE,MAAM,OAAO,EAAE,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,OAAO,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;CACF;AAED,SAAS,OAAO;IACd,OAAO,IAAI,WAAW,CACpB,QAAQ,EACR,sBAAsB,EACtB,uDAAuD,EACvD;QACE,SAAS,EAAE;YACT,wGAAwG;SACzG;KACF,CACF,CAAC;AACJ,CAAC"}

package/dist/infra/trace-file.js

@@ -0,0 +1,7 @@
+// Appends a line to the trace file. Missing directories are not created:
+// the file is the caller's to place.
+import { promises as fs } from 'node:fs';
+export function appendLineTo(file) {
+    return (line) => fs.appendFile(file, line, 'utf8');
+}
+//# sourceMappingURL=trace-file.js.map

package/dist/infra/trace-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-file.js","sourceRoot":"","sources":["../../src/infra/trace-file.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,qCAAqC;AAErC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AAEzC,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC"}

package/dist/infra/trust-store.js

@@ -0,0 +1,67 @@
+// Persist approved command fingerprints under a file lease; command vectors stay
+// in the manifest. Queue approvals within one command to avoid self-contention.
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { parse, stringify } from 'yaml';
+import { busyError } from '../domain/errors.js';
+import { writeAtomicFile } from './atomic-file.js';
+export class FileTrustStore {
+    home;
+    clock;
+    lock;
+    pending = Promise.resolve();
+    constructor(home, clock, lock) {
+        this.home = home;
+        this.clock = clock;
+        this.lock = lock;
+    }
+    path() {
+        return path.join(this.home, 'trust.yaml');
+    }
+    async isTrusted(workspace, fingerprint) {
+        return (await this.read()).workspaces?.[workspace]?.[fingerprint] !== undefined;
+    }
+    trust(workspace, fingerprint, label) {
+        const operation = this.pending.then(() => this.record(workspace, fingerprint, label));
+        this.pending = operation.catch(() => undefined);
+        return operation;
+    }
+    async record(workspace, fingerprint, label) {
+        const lease = await this.lock.acquire({ key: this.path(), waitMs: 2000 });
+        if (lease === null)
+            throw busyError('LOCK_BUSY', 'The trust record');
+        try {
+            await this.writeRecord(workspace, fingerprint, label);
+        }
+        finally {
+            await lease.release();
+        }
+    }
+    async writeRecord(workspace, fingerprint, label) {
+        const file = await this.read();
+        const entries = {
+            ...file.workspaces?.[workspace],
+            [fingerprint]: { label, trusted_at: this.clock.now().toISOString() },
+        };
+        await fs.mkdir(this.home, { recursive: true });
+        await writeAtomicFile(this.path(), stringify({ workspaces: { ...file.workspaces, [workspace]: entries } }));
+    }
+    async list(workspace) {
+        return Object.entries((await this.read()).workspaces?.[workspace] ?? {}).map(([fingerprint, e]) => ({
+            fingerprint,
+            label: e.label,
+            trusted_at: e.trusted_at,
+        }));
+    }
+    async read() {
+        try {
+            return parse(await fs.readFile(this.path(), 'utf8')) ?? {};
+        }
+        catch (err) {
+            if (err.code === 'ENOENT')
+                return {};
+            throw err;
+        }
+    }
+}
+//# sourceMappingURL=trust-store.js.map

package/dist/infra/trust-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-store.js","sourceRoot":"","sources":["../../src/infra/trust-store.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,gFAAgF;AAEhF,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAExC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAKhD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAMnD,MAAM,OAAO,cAAc;IAIN;IACA;IACA;IALX,OAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEnD,YACmB,IAAY,EACZ,KAAY,EACZ,IAAU;QAFV,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAAO;QACZ,SAAI,GAAJ,IAAI,CAAM;IAC1B,CAAC;IAEJ,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,WAAmB;QACpD,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,SAAiB,EAAE,WAAmB,EAAE,KAAa;QACzD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,WAAmB,EAAE,KAAa;QACxE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,SAAS,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,WAAmB,EAAE,KAAa;QAC7E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG;YACd,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC;YAC/B,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE;SACrE,CAAC;QACF,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,eAAe,CACnB,IAAI,CAAC,IAAI,EAAE,EACX,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CACxE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAC1E,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrB,WAAW;YACX,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,IAAI,CAAC;YACH,OAAQ,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAsB,IAAI,EAAE,CAAC;QACnF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAChE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/infra/workspace-home.js

@@ -0,0 +1,15 @@
+// ~/.fx/workspaces/<name>/: everything fx keeps for one workspace besides the
+// checkouts. The name is a path component, hence the guard.
+import path from 'node:path';
+import { assertWorkspaceName } from '../domain/workspace/name.js';
+export function localLayerPath(home, name) {
+    return path.join(workspaceHome(home, name), 'local.yaml');
+}
+export function manifestSourceDir(home, name) {
+    return path.join(workspaceHome(home, name), 'source');
+}
+function workspaceHome(home, name) {
+    assertWorkspaceName(name);
+    return path.join(home, 'workspaces', name);
+}
+//# sourceMappingURL=workspace-home.js.map

package/dist/infra/workspace-home.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-home.js","sourceRoot":"","sources":["../../src/infra/workspace-home.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,4DAA4D;AAE5D,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,IAAY;IACvD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,IAAY;IAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY;IAC/C,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC"}

package/dist/ports/activity.js

@@ -0,0 +1,5 @@
+// What fx is doing right now, told to whoever watches it work. Nothing said here is a
+// result or a record: a terminal shows it while it lasts, and a program reading the
+// streams sees none of it.
+export {};
+//# sourceMappingURL=activity.js.map

package/dist/ports/activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.js","sourceRoot":"","sources":["../../src/ports/activity.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,oFAAoF;AACpF,2BAA2B"}

package/dist/ports/agent-cleanup.js

@@ -0,0 +1,4 @@
+// Unpicking is global, so its hook cleanup spans registered workspaces. A
+// preview names the same targets as application without changing the selection.
+export {};
+//# sourceMappingURL=agent-cleanup.js.map

package/dist/ports/agent-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-cleanup.js","sourceRoot":"","sources":["../../src/ports/agent-cleanup.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,gFAAgF"}

package/dist/ports/agent-host.js

@@ -0,0 +1,4 @@
+// A coding agent as fx sees it: whether it is on this machine, and where it loads Skills
+// from.
+export {};
+//# sourceMappingURL=agent-host.js.map

package/dist/ports/agent-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-host.js","sourceRoot":"","sources":["../../src/ports/agent-host.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,QAAQ"}

package/dist/ports/ci.js

@@ -0,0 +1,4 @@
+// Where builds run: a platform that can also say how a job's last build
+// went. `release` asks it that, and nothing else.
+export {};
+//# sourceMappingURL=ci.js.map

package/dist/ports/ci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci.js","sourceRoot":"","sources":["../../src/ports/ci.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,kDAAkD"}

package/dist/ports/clock.js

@@ -0,0 +1,4 @@
+// The current time as a port, so anything with a window — a cache entry, an
+// acknowledged setup step — can be tested without waiting it out.
+export {};
+//# sourceMappingURL=clock.js.map

package/dist/ports/clock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clock.js","sourceRoot":"","sources":["../../src/ports/clock.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,kEAAkE"}

package/dist/ports/cluster.js

@@ -0,0 +1,3 @@
+// Where services run; only read-only operations are ever generated.
+export {};
+//# sourceMappingURL=cluster.js.map