@basou/cli 0.62.0 → 0.63.0

package/dist/index.js

@@ -136,11 +136,13 @@ import {
   acquireLock,
   appendChainedEventLocked,
   assertBasouRootSafe,
+  assertLockStoreSafe,
   assertSessionDirSafe,
   basouPaths,
   EVENT_SCHEMA_VERSION,
   enumerateApprovals,
   findErrorCode,
+  inspectApprovalEntry,
   inspectSessionEntry,
   isLazyExpired,
   LOCAL_CLI_EVENT_SOURCE,
@@ -192,6 +194,11 @@ async function doRunApprovalList(options, ctx) {
   const paths = basouPaths(repositoryRoot);
   await assertWorkspaceInitialized(paths.root);
   const ids = await enumerateApprovals(paths);
+  for (const entry of ids.unfollowed) {
+    console.error(
+      `Skipped ${entry.id} in ${entry.location}: not a file (a symlink or a directory is not followed)`
+    );
+  }
   const now = /* @__PURE__ */ new Date();
   const records = [];
   const resolvedSet = new Set(ids.resolved);
@@ -259,7 +266,8 @@ async function doRunApprovalShow(idInput, options, ctx) {
   const repositoryRoot = await resolveRepositoryRootForApproval(cwd, "show");
   const paths = basouPaths(repositoryRoot);
   await assertWorkspaceInitialized(paths.root);
-  const { id } = await resolveApprovalId(paths, idInput);
+  const { id, unfollowed } = await resolveApprovalId(paths, idInput);
+  for (const entry2 of unfollowed) console.error(`Warning: ${describeUnfollowed(entry2)}`);
   const loaded = await loadApproval(paths, id);
   if (loaded === null) {
     throw new Error(`Approval not found: ${idInput}`);
@@ -328,6 +336,15 @@ async function doRunApprovalResolve(idInput, options, ctx, decision) {
   if (location === "resolved") {
     throw new Error(`Approval already resolved: ${idInput}`);
   }
+  const resolvedEntry = await inspectApprovalEntry(paths, "resolved", id);
+  if (resolvedEntry === "file") {
+    throw new Error(`Approval already resolved: ${idInput}`);
+  }
+  if (resolvedEntry !== "missing") {
+    throw new Error(
+      `Approval ${id} cannot be resolved: its entry in resolved is not a file (a symlink or a directory is not followed)`
+    );
+  }
   const pendingPath = join(paths.approvals.pending, `${id}.yaml`);
   let pendingRaw;
   try {
@@ -354,6 +371,7 @@ async function doRunApprovalResolve(idInput, options, ctx, decision) {
   const now = /* @__PURE__ */ new Date();
   const occurredAt = now.toISOString();
   const eventId = prefixedUlid("evt");
+  await assertLockStoreSafe(paths);
   try {
     await mkdir(paths.approvals.resolved, { recursive: true });
   } catch (error) {
@@ -469,20 +487,31 @@ async function resolveApprovalId(paths, input) {
     }
     byId.set(id2, "resolved");
   }
-  if (byId.size === 0) {
+  const matched = new Set(byId.keys());
+  for (const entry of enumeration.unfollowed) {
+    if (entry.id.startsWith(normalized)) matched.add(entry.id);
+  }
+  if (matched.size === 0) {
     throw new Error(`Approval not found: ${input}`);
   }
-  if (byId.size > 1) {
+  if (matched.size > 1) {
     throw new Error(
-      `Ambiguous approval id '${input}': matched ${byId.size} approvals. Disambiguate with a longer prefix.`
+      `Ambiguous approval id '${input}': matched ${matched.size} approvals. Disambiguate with a longer prefix.`
     );
   }
-  const first = byId.entries().next().value;
-  if (first === void 0) {
+  const id = matched.values().next().value;
+  if (id === void 0) {
     throw new Error(`Approval not found: ${input}`);
   }
-  const [id, location] = first;
-  return { id, location };
+  const location = byId.get(id);
+  if (location === void 0) {
+    throw new Error(`Approval ${id} is not a file; a symlink or a directory there is not followed`);
+  }
+  const unfollowed = enumeration.unfollowed.filter((entry) => entry.id === id);
+  return { id, location, unfollowed };
+}
+function describeUnfollowed(entry) {
+  return `${entry.id} in ${entry.location} is not a file (a symlink or a directory is not followed)`;
 }
 function isApprovalEvent(ev) {
   return ev.type === "approval_requested" || ev.type === "approval_approved" || ev.type === "approval_rejected" || ev.type === "approval_expired";
@@ -2082,6 +2111,7 @@ import { join as join6 } from "path";
 import {
   acquireLock as acquireLock3,
   assertBasouRootSafe as assertBasouRootSafe4,
+  assertLockStoreSafe as assertLockStoreSafe2,
   assertSessionStoreSafe,
   basouPaths as basouPaths6,
   ChildProcessRunner,
@@ -2122,6 +2152,7 @@ async function runExec(command, args, options, ctx = {}) {
   await assertBasouRootSafe4(paths.root);
   const manifest = await readManifest3(paths);
   await assertSessionStoreSafe(paths);
+  await assertLockStoreSafe2(paths);
   const sessionId = prefixedUlid3("ses");
   const sessionDir = join6(paths.sessions, sessionId);
   await mkdir2(sessionDir, { recursive: true });
@@ -2920,6 +2951,7 @@ async function loadHostsConfig(configPath = DEFAULT_HOSTS_CONFIG_PATH) {
 // src/lib/provenance-actions.ts
 import {
   assertApprovalStoreSafe,
+  assertLockStoreSafe as assertLockStoreSafe4,
   assertTaskStoreSafe,
   readMarkdownFile as readMarkdownFile5,
   renderDecisions as renderDecisions2,
@@ -2938,6 +2970,7 @@ import { createInterface } from "readline";
 import {
   AGENT_INFRA_DIRS as AGENT_INFRA_DIRS2,
   assertBasouRootSafe as assertBasouRootSafe6,
+  assertLockStoreSafe as assertLockStoreSafe3,
   assertSessionStoreSafe as assertSessionStoreSafe2,
   basouPaths as basouPaths8,
   CLAUDE_IMPORT_SOURCE,
@@ -3111,6 +3144,7 @@ async function resolveImportTarget(ctx) {
 }
 async function importDerivedSessions(paths, manifest, options, sourceKind, candidates, projectPaths, boundaryDeclared) {
   await assertSessionStoreSafe2(paths);
+  if (options.dryRun !== true) await assertLockStoreSafe3(paths);
   const { byExternalId: existingByExternalId, notDirectories } = await loadExistingByExternalId(
     paths,
     sourceKind
@@ -3692,6 +3726,7 @@ async function refreshAll(args) {
   if (!dryRun) {
     await assertTaskStoreSafe(paths);
     await assertApprovalStoreSafe(paths);
+    await assertLockStoreSafe4(paths);
   }
   const claudeCode = await importClaudeCode(options, ctx);
   const codex = await importCodex(options, ctx);
@@ -8714,6 +8749,7 @@ import { homedir as homedir10 } from "os";
 import { join as join13 } from "path";
 import {
   assertApprovalStoreSafe as assertApprovalStoreSafe2,
+  assertLockStoreSafe as assertLockStoreSafe5,
   assertTaskStoreSafe as assertTaskStoreSafe2,
   findErrorCode as findErrorCode8
 } from "@basou/core";
@@ -8778,6 +8814,7 @@ function hms(date) {
 async function runImports(deps) {
   await assertTaskStoreSafe2(deps.paths);
   await assertApprovalStoreSafe2(deps.paths);
+  await assertLockStoreSafe5(deps.paths);
   const claude = await importClaudeCode(deps.importOptions, deps.ctx);
   const codex = await importCodex(deps.importOptions, deps.ctx);
   return { claude, codex, changed: changedCount(claude) + changedCount(codex) };
@@ -9605,6 +9642,7 @@ import { join as join14 } from "path";
 import {
   acquireLock as acquireLock5,
   assertBasouRootSafe as assertBasouRootSafe12,
+  assertLockStoreSafe as assertLockStoreSafe6,
   assertSessionStoreSafe as assertSessionStoreSafe3,
   basouPaths as basouPaths17,
   ChildProcessRunner as ChildProcessRunner2,
@@ -9682,6 +9720,7 @@ async function runTrackedTool(args, options, ctx, adapter) {
   await assertBasouRootSafe12(paths.root);
   const manifest = await readManifest10(paths);
   await assertSessionStoreSafe3(paths);
+  await assertLockStoreSafe6(paths);
   const sessionId = prefixedUlid4("ses");
   const sessionDir = join14(paths.sessions, sessionId);
   await mkdir3(sessionDir, { recursive: true });
@@ -10068,6 +10107,7 @@ import {
   acquireLock as acquireLock6,
   appendEventToExistingSession as appendEventToExistingSession3,
   assertBasouRootSafe as assertBasouRootSafe13,
+  assertLockStoreSafe as assertLockStoreSafe7,
   basouPaths as basouPaths18,
   displayPath as displayPath3,
   EVENT_SCHEMA_VERSION as EVENT_SCHEMA_VERSION6,
@@ -10703,6 +10743,7 @@ async function doRunSessionRechain(options, ctx) {
   const repositoryRoot = await resolveRepositoryRootForSession(cwd, "rechain");
   const paths = basouPaths18(repositoryRoot);
   await assertWorkspaceInitialized11(paths.root);
+  await assertLockStoreSafe7(paths);
   const sessionIds = options.session !== void 0 ? [await resolveSessionId3(paths, options.session)] : await enumerateAllSessionNames(paths);
   const dryRun = options.dryRun === true;
   const rows = [];
@@ -10991,6 +11032,7 @@ import { join as join16 } from "path";
 import {
   archiveTask,
   assertBasouRootSafe as assertBasouRootSafe16,
+  assertLockStoreSafe as assertLockStoreSafe8,
   basouPaths as basouPaths21,
   createTaskWithEvent,
   deleteTask,
@@ -11528,6 +11570,7 @@ async function doRunTaskReconcile(options, ctx) {
   const repositoryRoot = await resolveRepositoryRootForTask(cwd, "reconcile");
   const paths = basouPaths21(repositoryRoot);
   await assertWorkspaceInitialized13(paths.root);
+  await assertLockStoreSafe8(paths);
   const manifest = await readManifest13(paths);
   const nowProvider = ctx.nowProvider ?? (() => /* @__PURE__ */ new Date());
   const write = options.write === true;
@@ -14199,7 +14242,7 @@ async function assertWorkspaceInitialized15(basouRoot) {
 function readBuildStamp() {
   if (false) return void 0;
   try {
-    return JSON.parse('{"version":"0.62.0","commit":"5ce774d","committedAt":"2026-10-02T23:27:57+09:00"}');
+    return JSON.parse('{"version":"0.63.0","commit":"5a404e5","committedAt":"2026-10-03T10:49:51+09:00"}');
   } catch {
     return void 0;
   }