@animalabs/agent-framework 0.11.0 → 0.13.0

package/dist/test/turn-trigger-provenance.test.js

@@ -0,0 +1,85 @@
+/**
+ * Turn provenance: the trigger the framework exposes for the turn in progress
+ * (getActiveTurnTrigger / the InferenceRequest handed to startAgentStream)
+ * must be internally consistent — channel, addressed and counterparty from
+ * ONE request — so a host stamping gateway telemetry never reports one
+ * person's channel with another person's id.
+ */
+import { describe, it, beforeEach, afterEach } from 'node:test';
+import assert from 'node:assert/strict';
+import { tmpdir } from 'node:os';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { AgentFramework } from '../src/index.js';
+import { MockMembrane, createMockResponse } from './helpers/mock-membrane.js';
+function internals(framework) {
+    return framework;
+}
+describe('Turn trigger provenance', () => {
+    let tempDir;
+    let membrane;
+    beforeEach(() => {
+        tempDir = mkdtempSync(join(tmpdir(), 'turn-trigger-test-'));
+        membrane = new MockMembrane();
+    });
+    afterEach(() => {
+        rmSync(tempDir, { recursive: true, force: true });
+    });
+    async function makeFramework() {
+        return AgentFramework.create({
+            storePath: join(tempDir, 'test.chronicle'),
+            membrane: membrane.asMembrane(),
+            agents: [{ name: 'scout', model: 'test-model', systemPrompt: 'You are scout.' }],
+            modules: [],
+        });
+    }
+    /** Spy on startAgentStream: capture the merged trigger and the value the
+     *  getter exposes while the turn is alive. */
+    function spy(framework) {
+        const i = internals(framework);
+        const captured = {};
+        const orig = i.startAgentStream.bind(framework);
+        i.startAgentStream = async (agent, trigger) => {
+            captured.handed = trigger;
+            const p = orig(agent, trigger);
+            captured.exposed = framework.getActiveTurnTrigger('scout');
+            return p;
+        };
+        return captured;
+    }
+    it('a batch where a later ADDRESSED request wins keeps its channel and author together', async () => {
+        membrane.pushResponse(createMockResponse([{ type: 'text', text: 'hi bob' }]));
+        const framework = await makeFramework();
+        const i = internals(framework);
+        const captured = spy(framework);
+        const t = Date.now();
+        i.pendingRequests.push({ agentName: 'scout', reason: 'mcpl:channel-incoming', source: 'discord', timestamp: t,
+            channelId: 'discord:g:alice-room', counterparty: 'discord:user:alice', addressed: false }, { agentName: 'scout', reason: 'mcpl:channel-incoming', source: 'discord', timestamp: t + 1,
+            channelId: 'discord:g:bob-room', counterparty: 'discord:user:bob', addressed: true });
+        await i.processInferenceRequests();
+        await framework.runUntilIdle();
+        assert.equal(captured.handed?.channelId, 'discord:g:bob-room', 'addressed channel wins');
+        assert.equal(captured.handed?.addressed, true);
+        assert.equal(captured.handed?.counterparty, 'discord:user:bob', 'author must come from the SAME request as the channel');
+        assert.equal(captured.exposed?.counterparty, 'discord:user:bob', 'getActiveTurnTrigger exposes the same trigger while the turn runs');
+        assert.equal(captured.exposed?.channelId, 'discord:g:bob-room');
+        assert.equal(framework.getActiveTurnTrigger('scout'), undefined, 'cleared once the turn ended');
+        await framework.stop();
+    });
+    it('a context-budget restart keeps the channel for routing but names no author', async () => {
+        membrane.pushResponse(createMockResponse([{ type: 'text', text: 'continuing' }]));
+        const framework = await makeFramework();
+        const i = internals(framework);
+        const captured = spy(framework);
+        const t = Date.now();
+        i.pendingRequests.push({ agentName: 'scout', reason: 'mcpl:channel-incoming', source: 'discord', timestamp: t,
+            channelId: 'discord:g:alice-room', counterparty: 'discord:user:alice', addressed: true }, { agentName: 'scout', reason: 'context_budget_restart', source: 'framework', timestamp: t + 1 });
+        await i.processInferenceRequests();
+        await framework.runUntilIdle();
+        assert.equal(captured.handed?.reason, 'context_budget_restart');
+        assert.equal(captured.handed?.channelId, 'discord:g:alice-room', 'routing channel is kept');
+        assert.equal(captured.handed?.counterparty, undefined, 'a restart is its own cause — no borrowed author');
+        await framework.stop();
+    });
+});
+//# sourceMappingURL=turn-trigger-provenance.test.js.map

package/dist/test/turn-trigger-provenance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-trigger-provenance.test.js","sourceRoot":"","sources":["../../test/turn-trigger-provenance.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAE9E,SAAS,SAAS,CAAC,SAAyB;IAC1C,OAAO,SAIN,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,IAAI,OAAe,CAAC;IACpB,IAAI,QAAsB,CAAC;IAE3B,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAC5D,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,aAAa;QAC1B,OAAO,cAAc,CAAC,MAAM,CAAC;YAC3B,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC;YAC1C,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE;YAC/B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC;YAChF,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;IACL,CAAC;IAED;kDAC8C;IAC9C,SAAS,GAAG,CAAC,SAAyB;QACpC,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAA8D,EAAE,CAAC;QAC/E,MAAM,IAAI,GAAG,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC,CAAC,gBAAgB,GAAG,KAAK,EAAE,KAAc,EAAE,OAA0B,EAAE,EAAE;YACxE,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC;YAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC/B,QAAQ,CAAC,OAAO,GAAG,SAAS,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC;QACX,CAAC,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,QAAQ,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,MAAM,aAAa,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,CAAC,CAAC,eAAe,CAAC,IAAI,CACpB,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;YACpF,SAAS,EAAE,sBAAsB,EAAE,YAAY,EAAE,oBAAoB,EAAE,SAAS,EAAE,KAAK,EAAE,EAC3F,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC;YACxF,SAAS,EAAE,oBAAoB,EAAE,YAAY,EAAE,kBAAkB,EAAE,SAAS,EAAE,IAAI,EAAE,CACvF,CAAC;QACF,MAAM,CAAC,CAAC,wBAAwB,EAAE,CAAC;QACnC,MAAM,SAAS,CAAC,YAAY,EAAE,CAAC;QAE/B,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,wBAAwB,CAAC,CAAC;QACzF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,uDAAuD,CAAC,CAAC;QACzH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,mEAAmE,CAAC,CAAC;QACtI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,6BAA6B,CAAC,CAAC;QAChG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,QAAQ,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;QAClF,MAAM,SAAS,GAAG,MAAM,aAAa,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,CAAC,CAAC,eAAe,CAAC,IAAI,CACpB,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;YACpF,SAAS,EAAE,sBAAsB,EAAE,YAAY,EAAE,oBAAoB,EAAE,SAAS,EAAE,IAAI,EAAE,EAC1F,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,CAChG,CAAC;QACF,MAAM,CAAC,CAAC,wBAAwB,EAAE,CAAC;QACnC,MAAM,SAAS,CAAC,YAAY,EAAE,CAAC;QAE/B,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,sBAAsB,EAAE,yBAAyB,CAAC,CAAC;QAC5F,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,iDAAiD,CAAC,CAAC;QAC1G,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/usage-accounting.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=usage-accounting.test.d.ts.map

package/dist/test/usage-accounting.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-accounting.test.d.ts","sourceRoot":"","sources":["../../test/usage-accounting.test.ts"],"names":[],"mappings":""}

package/dist/test/usage-accounting.test.js

@@ -0,0 +1,13 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { cumulativeDelta } from '../src/usage-accounting.js';
+test('cumulative usage is reduced to the physical provider-call delta', () => {
+    assert.equal(cumulativeDelta(120, 0), 120);
+    assert.equal(cumulativeDelta(275, 120), 155);
+});
+test('a reset or malformed cumulative usage sample fails conservatively', () => {
+    assert.equal(cumulativeDelta(25, 275), 25, 'counter reset is an already-per-call sample');
+    assert.equal(cumulativeDelta(Number.NaN, 25), 0);
+    assert.equal(cumulativeDelta(-1, 25), 0);
+});
+//# sourceMappingURL=usage-accounting.test.js.map

package/dist/test/usage-accounting.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-accounting.test.js","sourceRoot":"","sources":["../../test/usage-accounting.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,GAAG,EAAE;IAC7E,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,6CAA6C,CAAC,CAAC;IAC1F,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC"}

package/dist/test/workspace-branch-continuation.test.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Materialize branch guard: lineage, not identity.
+ *
+ * An out-of-band repair/treatment branches the store and leaves it on a child
+ * branch forked at the parent's head. That child is a linear continuation of
+ * exactly the history that was materialized — writing from it can never
+ * clobber divergent disk state, so the guard must pass (and heal the pin at
+ * boot). Genuine divergence — a branch forked BEFORE the last materialized
+ * sequence — must still refuse, with `force: true` as the deliberate
+ * override. One mount's stale pin must never block another mount.
+ *
+ * Regression tests for the Sill 08-24..26 stuck-materialize incident.
+ */
+export {};
+//# sourceMappingURL=workspace-branch-continuation.test.d.ts.map

package/dist/test/workspace-branch-continuation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-branch-continuation.test.d.ts","sourceRoot":"","sources":["../../test/workspace-branch-continuation.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/test/workspace-branch-continuation.test.js

@@ -0,0 +1,183 @@
+/**
+ * Materialize branch guard: lineage, not identity.
+ *
+ * An out-of-band repair/treatment branches the store and leaves it on a child
+ * branch forked at the parent's head. That child is a linear continuation of
+ * exactly the history that was materialized — writing from it can never
+ * clobber divergent disk state, so the guard must pass (and heal the pin at
+ * boot). Genuine divergence — a branch forked BEFORE the last materialized
+ * sequence — must still refuse, with `force: true` as the deliberate
+ * override. One mount's stale pin must never block another mount.
+ *
+ * Regression tests for the Sill 08-24..26 stuck-materialize incident.
+ */
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { JsStore } from '@animalabs/chronicle';
+import { WorkspaceModule } from '../src/modules/workspace/index.js';
+function makeCtx(opts) {
+    return {
+        isRestart: opts.isRestart,
+        getState: () => (opts.saved ?? null),
+        setState: () => { },
+        pushEvent: () => { },
+    };
+}
+function setup(t, mountNames = ['work']) {
+    const root = mkdtempSync(join(tmpdir(), 'af-ws-branch-'));
+    const dirs = {};
+    for (const name of mountNames) {
+        dirs[name] = join(root, name);
+        mkdirSync(dirs[name], { recursive: true });
+    }
+    const store = JsStore.openOrCreate({ path: join(root, 'ws.chronicle') });
+    t.after(() => {
+        store.close();
+        rmSync(root, { recursive: true, force: true });
+    });
+    const makeModule = () => new WorkspaceModule({
+        mounts: mountNames.map((name) => ({
+            name, path: dirs[name], mode: 'read-write', watch: 'never',
+        })),
+    });
+    return { store, dirs, makeModule };
+}
+async function statusOf(module, mount = 'work') {
+    const res = await module.handleToolCall({ id: 't', name: 'status', input: {} });
+    assert.equal(res.success, true, `status failed: ${res.error}`);
+    return res.data[mount];
+}
+/** Write a file + materialize on the current branch; returns saved state. */
+async function materializeBaseline(module) {
+    let res = await module.handleToolCall({
+        id: 'w1', name: 'write', input: { path: 'work/base.txt', content: 'baseline' },
+    });
+    assert.equal(res.success, true, `write failed: ${res.error}`);
+    res = await module.handleToolCall({ id: 'm1', name: 'materialize', input: {} });
+    assert.equal(res.success, true, `materialize failed: ${res.error}`);
+    const status = await statusOf(module);
+    return {
+        mounts: {
+            work: {
+                lastMaterializedSeq: status.lastMaterializedSeq,
+                lastMaterializedBranchId: status.lastMaterializedBranch ?? undefined,
+            },
+        },
+    };
+}
+test('descendant branch (fork at head) materializes without force and re-pins', async (t) => {
+    const { store, dirs, makeModule } = setup(t);
+    const module = makeModule();
+    module.initStore(store);
+    await module.start(makeCtx({ isRestart: false }));
+    await materializeBaseline(module);
+    // Out-of-band-style switch: child forked at the parent's head.
+    store.createBranch('repair/test', store.currentBranch().name);
+    store.switchBranch('repair/test');
+    const childId = store.currentBranch().id;
+    let res = await module.handleToolCall({
+        id: 'w2', name: 'write', input: { path: 'work/repair.txt', content: 'on child' },
+    });
+    assert.equal(res.success, true, `write failed: ${res.error}`);
+    const before = await statusOf(module);
+    assert.equal(before.canMaterialize, true, 'linear continuation must be materializable');
+    res = await module.handleToolCall({ id: 'm2', name: 'materialize', input: {} });
+    assert.equal(res.success, true, `materialize must pass on descendant branch: ${res.error}`);
+    assert.equal(readFileSync(join(dirs.work, 'repair.txt'), 'utf8'), 'on child');
+    const after = await statusOf(module);
+    assert.equal(after.lastMaterializedBranch, childId, 're-pinned to current branch');
+});
+test('restart after out-of-band branch switch heals the pin at boot (both orders)', async (t) => {
+    const { store, makeModule } = setup(t);
+    const first = makeModule();
+    first.initStore(store);
+    await first.start(makeCtx({ isRestart: false }));
+    const saved = await materializeBaseline(first);
+    const parentId = saved.mounts.work.lastMaterializedBranchId;
+    assert.ok(parentId, 'baseline pinned a branch');
+    // Offline repair: branch at head, leave the store on the child.
+    store.createBranch('repair/offline', store.currentBranch().name);
+    store.switchBranch('repair/offline');
+    const childId = store.currentBranch().id;
+    assert.notEqual(childId, parentId);
+    for (const order of ['host', 'reverse']) {
+        const module = makeModule();
+        if (order === 'host') {
+            await module.start(makeCtx({ isRestart: true, saved }));
+            module.initStore(store);
+        }
+        else {
+            module.initStore(store);
+            await module.start(makeCtx({ isRestart: true, saved }));
+        }
+        const status = await statusOf(module);
+        assert.equal(status.lastMaterializedBranch, childId, `${order}: pin healed to current branch`);
+        assert.equal(status.canMaterialize, true, `${order}: materializable after heal`);
+        const res = await module.handleToolCall({ id: 'm', name: 'materialize', input: {} });
+        assert.equal(res.success, true, `${order}: materialize passes after heal: ${res.error}`);
+    }
+});
+test('genuinely divergent branch refuses without force, materializes with force', async (t) => {
+    const { store, dirs, makeModule } = setup(t);
+    const module = makeModule();
+    module.initStore(store);
+    await module.start(makeCtx({ isRestart: false }));
+    // Two materialized generations on main, so a fork between them diverges.
+    await materializeBaseline(module);
+    const forkAt = store.currentSequence();
+    let res = await module.handleToolCall({
+        id: 'w2', name: 'write', input: { path: 'work/newer.txt', content: 'newer on main' },
+    });
+    assert.equal(res.success, true);
+    res = await module.handleToolCall({ id: 'm2', name: 'materialize', input: {} });
+    assert.equal(res.success, true);
+    // Fork BEFORE the last materialized sequence: disk now holds records the
+    // child branch never had.
+    store.createBranchAt('divergent', store.currentBranch().name, forkAt);
+    store.switchBranch('divergent');
+    res = await module.handleToolCall({
+        id: 'w3', name: 'write', input: { path: 'work/div.txt', content: 'divergent' },
+    });
+    assert.equal(res.success, true);
+    const status = await statusOf(module);
+    assert.equal(status.canMaterialize, false, 'divergent branch must not be materializable');
+    res = await module.handleToolCall({ id: 'm3', name: 'materialize', input: {} });
+    assert.equal(res.success, false, 'divergent branch must refuse without force');
+    assert.match(String(res.error), /diverged/);
+    assert.match(String(res.error), /force: true/, 'error names the reachable remedy');
+    assert.equal(existsSync(join(dirs.work, 'div.txt')), false, 'nothing written on refusal');
+    res = await module.handleToolCall({ id: 'm4', name: 'materialize', input: { force: true } });
+    assert.equal(res.success, true, `force must override: ${res.error}`);
+    assert.equal(readFileSync(join(dirs.work, 'div.txt'), 'utf8'), 'divergent');
+    const after = await statusOf(module);
+    assert.equal(after.lastMaterializedBranch, store.currentBranch().id, 'force re-pins');
+    assert.equal(after.canMaterialize, true, 'materializable again after force');
+});
+test('one mount\'s stale pin does not block other mounts', async (t) => {
+    const { store, dirs, makeModule } = setup(t, ['work', 'notes']);
+    // Saved state: `work` pinned to a branch that no longer exists (unprovable
+    // ancestry → blocked); `notes` never materialized (unpinned → free).
+    const saved = {
+        mounts: { work: { lastMaterializedSeq: 1, lastMaterializedBranchId: 'branch-gone' } },
+    };
+    const module = makeModule();
+    module.initStore(store);
+    await module.start(makeCtx({ isRestart: true, saved }));
+    let res = await module.handleToolCall({
+        id: 'w1', name: 'write', input: { path: 'notes/note.txt', content: 'note' },
+    });
+    assert.equal(res.success, true, `write failed: ${res.error}`);
+    // Materialize-all: notes must land on disk; work is reported skipped.
+    res = await module.handleToolCall({ id: 'm1', name: 'materialize', input: {} });
+    assert.equal(res.success, true, `unblocked mount must materialize: ${res.error}`);
+    assert.equal(readFileSync(join(dirs.notes, 'note.txt'), 'utf8'), 'note');
+    const skipped = res.data.skipped ?? [];
+    assert.deepEqual(skipped.map((s) => s.mount), ['work'], 'blocked mount reported as skipped');
+    // Targeting the blocked mount alone still refuses.
+    res = await module.handleToolCall({ id: 'm2', name: 'materialize', input: { mount: 'work' } });
+    assert.equal(res.success, false, 'blocked mount alone must refuse');
+});
+//# sourceMappingURL=workspace-branch-continuation.test.js.map

package/dist/test/workspace-branch-continuation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-branch-continuation.test.js","sourceRoot":"","sources":["../../test/workspace-branch-continuation.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,IAA0B,MAAM,WAAW,CAAC;AACnD,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACnF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAIpE,SAAS,OAAO,CAAC,IAA0D;IACzE,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,GAAO,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAa;QACpD,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC;QAClB,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC;KACQ,CAAC;AAChC,CAAC;AAED,SAAS,KAAK,CAAC,CAAc,EAAE,aAAuB,CAAC,MAAM,CAAC;IAC5D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IAC1D,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACX,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,GAAG,EAAE,CACtB,IAAI,eAAe,CAAC;QAClB,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAqB,EAAE,KAAK,EAAE,OAAgB;SAC7E,CAAC,CAAC;KACJ,CAAC,CAAC;IACL,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACrC,CAAC;AASD,KAAK,UAAU,QAAQ,CAAC,MAAuB,EAAE,KAAK,GAAG,MAAM;IAC7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,kBAAkB,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/D,OAAQ,GAAG,CAAC,IAAoC,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,mBAAmB,CAChC,MAAuB;IAEvB,IAAI,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC;QACpC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE;KAC/E,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,iBAAiB,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9D,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,uBAAuB,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE;gBACJ,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;gBAC/C,wBAAwB,EAAE,MAAM,CAAC,sBAAsB,IAAI,SAAS;aACrE;SACF;KACF,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,yEAAyE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC1F,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxB,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAElC,+DAA+D;IAC/D,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9D,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC;IAEzC,IAAI,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC;QACpC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,UAAU,EAAE;KACjF,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,iBAAiB,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,4CAA4C,CAAC,CAAC;IAExF,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,+CAA+C,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5F,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;IAE9E,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,OAAO,EAAE,6BAA6B,CAAC,CAAC;AACrF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6EAA6E,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC9F,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvB,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC;IAC5D,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC;IAEhD,gEAAgE;IAChE,KAAK,CAAC,YAAY,CAAC,gBAAgB,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC;IACjE,KAAK,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC;IACzC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAEnC,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,SAAS,CAAU,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACxD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACxB,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,EAAE,OAAO,EAAE,GAAG,KAAK,gCAAgC,CAAC,CAAC;QAC/F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,GAAG,KAAK,6BAA6B,CAAC,CAAC;QAEjF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,oCAAoC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2EAA2E,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC5F,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxB,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAElD,yEAAyE;IACzE,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,EAAE,CAAC;IACvC,IAAI,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC;QACpC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,EAAE;KACrF,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChC,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAEhC,yEAAyE;IACzE,0BAA0B;IAC1B,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtE,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IAEhC,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC;QAChC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE;KAC/E,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAEhC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,6CAA6C,CAAC,CAAC;IAE1F,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,4CAA4C,CAAC,CAAC;IAC/E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,kCAAkC,CAAC,CAAC;IACnF,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,4BAA4B,CAAC,CAAC;IAE1F,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7F,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,wBAAwB,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;IAE5E,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,kCAAkC,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACrE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAChE,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,KAAK,GAAyB;QAClC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,EAAE,wBAAwB,EAAE,aAAa,EAAE,EAAE;KACtF,CAAC;IACF,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxB,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAExD,IAAI,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC;QACpC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE;KAC5E,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,iBAAiB,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAE9D,sEAAsE;IACtE,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,qCAAqC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAClF,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACzE,MAAM,OAAO,GAAI,GAAG,CAAC,IAA+C,CAAC,OAAO,IAAI,EAAE,CAAC;IACnF,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,mCAAmC,CAAC,CAAC;IAE7F,mDAAmD;IACnD,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/F,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,iCAAiC,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC"}

package/dist/test/workspace-read-file-from-disk.test.d.ts

@@ -0,0 +1,17 @@
+/**
+ * WorkspaceModule.readFileFromDisk — filesystem-enforced mount containment
+ * for peer modules (issue #129).
+ *
+ * `resolveAbsolutePath()` is lexical: an in-mount symlink targeting an outside
+ * file passes it, and a peer that then `fs.readFile`s the returned path reads
+ * the outside content (connectome-host #101 pulled such a file into a
+ * system-position injection). `readFileFromDisk()` is the workspace-owned read
+ * that enforces the mount's `followSymlinks` policy and canonical containment,
+ * so peers stop reimplementing the boundary.
+ *
+ * Symlink cases create real symlinks; on Windows that needs a privilege the
+ * test runner may not have (EPERM), in which case those cases are skipped —
+ * the non-symlink cases still run everywhere.
+ */
+export {};
+//# sourceMappingURL=workspace-read-file-from-disk.test.d.ts.map

package/dist/test/workspace-read-file-from-disk.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-read-file-from-disk.test.d.ts","sourceRoot":"","sources":["../../test/workspace-read-file-from-disk.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/test/workspace-read-file-from-disk.test.js

@@ -0,0 +1,174 @@
+/**
+ * WorkspaceModule.readFileFromDisk — filesystem-enforced mount containment
+ * for peer modules (issue #129).
+ *
+ * `resolveAbsolutePath()` is lexical: an in-mount symlink targeting an outside
+ * file passes it, and a peer that then `fs.readFile`s the returned path reads
+ * the outside content (connectome-host #101 pulled such a file into a
+ * system-position injection). `readFileFromDisk()` is the workspace-owned read
+ * that enforces the mount's `followSymlinks` policy and canonical containment,
+ * so peers stop reimplementing the boundary.
+ *
+ * Symlink cases create real symlinks; on Windows that needs a privilege the
+ * test runner may not have (EPERM), in which case those cases are skipped —
+ * the non-symlink cases still run everywhere.
+ */
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { mkdirSync, mkdtempSync, rmSync, symlinkSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { JsStore } from '@animalabs/chronicle';
+import { WorkspaceModule, WorkspaceReadError } from '../src/modules/workspace/index.js';
+function setup(t, options) {
+    const root = mkdtempSync(join(tmpdir(), 'af-read-from-disk-'));
+    const mountDir = join(root, 'mount');
+    mkdirSync(mountDir, { recursive: true });
+    const store = JsStore.openOrCreate({ path: join(root, 'workspace.chronicle') });
+    const workspace = new WorkspaceModule({
+        mounts: [{ name: 'work', path: mountDir, mode: 'read-write', watch: 'never', followSymlinks: options?.followSymlinks }],
+    });
+    workspace.initStore(store);
+    t.after(() => {
+        store.close();
+        rmSync(root, { recursive: true, force: true });
+    });
+    return { root, mountDir, workspace };
+}
+/** Create a symlink, or skip the test when the platform refuses (Windows without the privilege). */
+function symlinkOrSkip(t, target, linkPath, type) {
+    try {
+        symlinkSync(target, linkPath, type);
+        return true;
+    }
+    catch (err) {
+        const code = err.code;
+        if (code === 'EPERM' || code === 'EACCES') {
+            t.skip(`symlink creation not permitted on this platform (${code})`);
+            return false;
+        }
+        throw err;
+    }
+}
+async function expectRefusal(promise, code) {
+    try {
+        await promise;
+    }
+    catch (err) {
+        assert.ok(err instanceof WorkspaceReadError, `expected WorkspaceReadError, got ${String(err)}`);
+        assert.equal(err.code, code, `expected code ${code}, got ${err.code} (${err.message})`);
+        return err;
+    }
+    assert.fail(`expected a WorkspaceReadError(${code}) but the read succeeded`);
+}
+test('a regular in-mount file can be read, with size and mtime reported', async (t) => {
+    const { mountDir, workspace } = setup(t);
+    writeFileSync(join(mountDir, 'AGENTS.md'), '# instructions\n');
+    const result = await workspace.readFileFromDisk('work/AGENTS.md');
+    assert.equal(result.bytes.toString('utf8'), '# instructions\n');
+    assert.equal(result.size, Buffer.byteLength('# instructions\n'));
+    assert.equal(result.truncated, false);
+    assert.equal(result.mount, 'work');
+    assert.ok(result.mtimeMs > 0);
+    assert.ok(result.realPath.endsWith('AGENTS.md'));
+});
+test('nested paths read and reject lexical traversal / unknown mounts by code', async (t) => {
+    const { mountDir, workspace } = setup(t);
+    mkdirSync(join(mountDir, 'sub'), { recursive: true });
+    writeFileSync(join(mountDir, 'sub', 'deep.txt'), 'deep');
+    assert.equal((await workspace.readFileFromDisk('work/sub/deep.txt')).bytes.toString(), 'deep');
+    const traversal = await expectRefusal(workspace.readFileFromDisk('work/../outside.txt'), 'traversal');
+    assert.match(traversal.message, /traversal/i);
+    await expectRefusal(workspace.readFileFromDisk('nope/file.txt'), 'unknown_mount');
+});
+test('missing files and directories are distinguished', async (t) => {
+    const { mountDir, workspace } = setup(t);
+    mkdirSync(join(mountDir, 'dir'));
+    await expectRefusal(workspace.readFileFromDisk('work/missing.txt'), 'not_found');
+    await expectRefusal(workspace.readFileFromDisk('work/dir'), 'directory');
+    await expectRefusal(workspace.readFileFromDisk('work'), 'directory');
+});
+test('a final-component symlink to an outside file is rejected under the default no-follow policy', async (t) => {
+    const { root, mountDir, workspace } = setup(t);
+    const outside = join(root, 'outside');
+    mkdirSync(outside);
+    writeFileSync(join(outside, 'secret.txt'), 'SECRET');
+    if (!symlinkOrSkip(t, join(outside, 'secret.txt'), join(mountDir, 'AGENTS.md'), 'file'))
+        return;
+    // The lexical resolver is happy — that is exactly the gap.
+    assert.ok(workspace.resolveAbsolutePath('work/AGENTS.md'));
+    const err = await expectRefusal(workspace.readFileFromDisk('work/AGENTS.md'), 'symlink');
+    assert.ok(!err.message.includes(root), 'refusal must not leak absolute paths');
+});
+test('an intermediate symlinked directory escaping the mount is rejected under no-follow', async (t) => {
+    const { root, mountDir, workspace } = setup(t);
+    const outside = join(root, 'outside');
+    mkdirSync(outside);
+    writeFileSync(join(outside, 'secret.txt'), 'SECRET');
+    if (!symlinkOrSkip(t, outside, join(mountDir, 'linkdir'), 'dir'))
+        return;
+    // Final component is a regular file; only the directory hop is a symlink.
+    const err = await expectRefusal(workspace.readFileFromDisk('work/linkdir/secret.txt'), 'escape');
+    assert.ok(!err.message.includes(root));
+});
+test('with followSymlinks, an in-mount target is followed but an outside target is still an escape', async (t) => {
+    const { root, mountDir, workspace } = setup(t, { followSymlinks: true });
+    writeFileSync(join(mountDir, 'real.txt'), 'inside');
+    const outside = join(root, 'outside');
+    mkdirSync(outside);
+    writeFileSync(join(outside, 'secret.txt'), 'SECRET');
+    if (!symlinkOrSkip(t, join(mountDir, 'real.txt'), join(mountDir, 'alias.txt'), 'file'))
+        return;
+    if (!symlinkOrSkip(t, join(outside, 'secret.txt'), join(mountDir, 'leak.txt'), 'file'))
+        return;
+    const followed = await workspace.readFileFromDisk('work/alias.txt');
+    assert.equal(followed.bytes.toString(), 'inside');
+    assert.ok(followed.realPath.endsWith('real.txt'), 'realPath reports the canonical target');
+    await expectRefusal(workspace.readFileFromDisk('work/leak.txt'), 'escape');
+});
+test('with followSymlinks, an in-mount symlink is followed only because policy allows it', async (t) => {
+    const strict = setup(t);
+    writeFileSync(join(strict.mountDir, 'real.txt'), 'inside');
+    if (!symlinkOrSkip(t, join(strict.mountDir, 'real.txt'), join(strict.mountDir, 'alias.txt'), 'file'))
+        return;
+    // Same layout, default policy: the in-mount symlink is refused as a symlink,
+    // not followed — containment would have passed, policy says no.
+    await expectRefusal(strict.workspace.readFileFromDisk('work/alias.txt'), 'symlink');
+});
+test('a sibling-prefix directory is not beneath the mount', async (t) => {
+    const { root, mountDir, workspace } = setup(t, { followSymlinks: true });
+    const sibling = join(root, 'mount-other');
+    mkdirSync(sibling);
+    writeFileSync(join(sibling, 'x.txt'), 'sibling');
+    if (!symlinkOrSkip(t, join(sibling, 'x.txt'), join(mountDir, 'x.txt'), 'file'))
+        return;
+    // `/mount-other/x.txt` starts with `/mount` as a string prefix — a naive
+    // startsWith(root) check would accept it.
+    await expectRefusal(workspace.readFileFromDisk('work/x.txt'), 'escape');
+});
+test('maxBytes performs a bounded prefix read and reports truncation', async (t) => {
+    const { mountDir, workspace } = setup(t);
+    const content = 'x'.repeat(10_000);
+    writeFileSync(join(mountDir, 'big.txt'), content);
+    const capped = await workspace.readFileFromDisk('work/big.txt', { maxBytes: 1024 });
+    assert.equal(capped.truncated, true);
+    assert.equal(capped.bytes.length, 1024);
+    assert.equal(capped.size, 10_000, 'size reports the full on-disk length');
+    assert.equal(capped.bytes.toString(), 'x'.repeat(1024));
+    const whole = await workspace.readFileFromDisk('work/big.txt', { maxBytes: 20_000 });
+    assert.equal(whole.truncated, false);
+    assert.equal(whole.bytes.length, 10_000);
+    await assert.rejects(workspace.readFileFromDisk('work/big.txt', { maxBytes: -1 }), RangeError);
+});
+test('read_image keeps its historical error wording after sharing the containment core', async (t) => {
+    // The image reader was the original owner of this algorithm; its messages
+    // are pinned by workspace-read-image.test.ts. Spot-check the two codes the
+    // shared core maps most delicately (not_found variants and directory).
+    const { mountDir, workspace } = setup(t);
+    mkdirSync(join(mountDir, 'folder'));
+    const dir = await workspace.handleToolCall({ id: 'c1', name: 'read_image', input: { path: 'work/folder' } });
+    assert.equal(dir.error, 'Path is a directory: work/folder');
+    const missing = await workspace.handleToolCall({ id: 'c2', name: 'read_image', input: { path: 'work/nope.png' } });
+    assert.equal(missing.error, 'File not found: work/nope.png');
+});
+//# sourceMappingURL=workspace-read-file-from-disk.test.js.map

package/dist/test/workspace-read-file-from-disk.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-read-file-from-disk.test.js","sourceRoot":"","sources":["../../test/workspace-read-file-from-disk.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,IAA0B,MAAM,WAAW,CAAC;AACnD,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAExF,SAAS,KAAK,CAAC,CAAc,EAAE,OAAsC;IACnE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QACpC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;KACxH,CAAC,CAAC;IACH,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACX,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACvC,CAAC;AAED,oGAAoG;AACpG,SAAS,aAAa,CAAC,CAAc,EAAE,MAAc,EAAE,QAAgB,EAAE,IAAkC;IACzG,IAAI,CAAC;QACH,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1C,CAAC,CAAC,IAAI,CAAC,oDAAoD,IAAI,GAAG,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAyB,EAAE,IAAgC;IACtF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,EAAE,CAAC,GAAG,YAAY,kBAAkB,EAAE,oCAAoC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,iBAAiB,IAAI,SAAS,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;QACxF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,iCAAiC,IAAI,0BAA0B,CAAC,CAAC;AAC/E,CAAC;AAED,IAAI,CAAC,mEAAmE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACpF,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAE/D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IAClE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAChE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACjE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC1F,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IAEzD,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,SAAS,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;IAE/F,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,WAAW,CAAC,CAAC;IACtG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC9C,MAAM,aAAa,CAAC,SAAS,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC;AACpF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iDAAiD,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAClE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAEjC,MAAM,aAAa,CAAC,SAAS,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,WAAW,CAAC,CAAC;IACjF,MAAM,aAAa,CAAC,SAAS,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;IACzE,MAAM,aAAa,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;AACvE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6FAA6F,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC9G,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,SAAS,CAAC,OAAO,CAAC,CAAC;IACnB,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAE,OAAO;IAEhG,2DAA2D;IAC3D,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAE3D,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC,CAAC;IACzF,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,sCAAsC,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oFAAoF,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACrG,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,SAAS,CAAC,OAAO,CAAC,CAAC;IACnB,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO;IAEzE,0EAA0E;IAC1E,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjG,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8FAA8F,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC/G,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,SAAS,CAAC,OAAO,CAAC,CAAC;IACnB,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAE,OAAO;IAC/F,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAE,OAAO;IAE/F,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IACpE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,uCAAuC,CAAC,CAAC;IAE3F,MAAM,aAAa,CAAC,SAAS,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oFAAoF,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACrG,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC3D,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAE,OAAO;IAC7G,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC,CAAC;AACtF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qDAAqD,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACtE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC1C,SAAS,CAAC,OAAO,CAAC,CAAC;IACnB,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAE,OAAO;IAEvF,yEAAyE;IACzE,0CAA0C;IAC1C,MAAM,aAAa,CAAC,SAAS,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gEAAgE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACjF,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IAElD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,sCAAsC,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAExD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACrF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEzC,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;AACjG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kFAAkF,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACnG,0EAA0E;IAC1E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;IAC7G,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IACnH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;AAC/D,CAAC,CAAC,CAAC"}

package/dist/test/workspace-read-image.test.js

@@ -296,6 +296,14 @@ test('valid tiny PNG, JPEG, GIF, and WebP return native image content with exact
         expectImageResult(result, path, image);
     }
 });
+test('JPEG with trailing pad bytes after EOI is accepted (hardware encoders pad to 4-byte boundary)', async (t) => {
+    const { mountDir, workspace } = setupWorkspace(t);
+    // Raspberry Pi camera stills end `ff d9 00 00 00`; decoders stop at EOI.
+    const padded = { mimeType: 'image/jpeg', bytes: Buffer.concat([TINY_IMAGES.jpeg.bytes, Buffer.from([0x00, 0x00, 0x00])]) };
+    writeFileSync(join(mountDir, 'padded.jpg'), padded.bytes);
+    const result = await callReadImage(workspace, 'work/padded.jpg');
+    expectImageResult(result, 'work/padded.jpg', padded);
+});
 test('pre-existing Chronicle binary blob is preferred even when the filesystem file is absent', async (t) => {
     const { mountDir, store, workspace, treeStateId } = setupWorkspace(t);
     const image = TINY_IMAGES.png;