@claudexor/workspace 4.8.1 → 5.0.1

package/dist/anchor-store.d.ts

@@ -1,10 +1,21 @@
-/** Persist a binary/mode-aware turn patch outside Git before its dangling
- * snapshot commits can be collected. The patch digest is the immutable ID. */
-export declare function createRevertAnchor(repo: string, preTurnSha: string, postTurnSha: string): Promise<string>;
+import { GitDeliveryPair } from "@claudexor/schema";
+/**
+ * Anchor the actual pair (T, M) for revert. Its objects enter the project store
+ * owned by the anchor file itself, so they live exactly as long as the anchor
+ * (retention prunes anchors by the runs that name them). `repo` is where Git
+ * reads the pair; `projectRoot` is the project that keeps it, where retention
+ * finds it (a delegated run's or an isolated thread's project).
+ */
+export declare function createPairRevertAnchor(repo: string, pair: GitDeliveryPair, projectRoot?: string): Promise<string>;
+export declare function createPairRevertAnchorOrNull(repo: string, pair: GitDeliveryPair | null | undefined, projectRoot?: string): Promise<string | null>;
+/** The recorded pair of an object anchor; null for a legacy patch anchor. */
+export declare function readRevertPair(projectRoot: string, id: string): GitDeliveryPair | null;
+/** An in-place turn's pair from its pre/post snapshot commits (no patch is rendered). */
+export declare function createRevertAnchor(repo: string, preTurnSha: string, postTurnSha: string, projectRoot?: string): Promise<string>;
 export declare function createRevertAnchorFromPatchOrNull(repo: string, patch: string): string | null;
 export declare function readRevertAnchor(repo: string, id: string, maxBytes?: number): string;
-/** The typed refusal every consumer of a saved patch shares when the saved
- * copy is display-only and its exact bytes cannot be produced (INV-062). */
+/** The typed refusal every consumer of a saved patch shares when a historical
+ * saved copy is display-only and its exact bytes cannot be produced. */
 export declare const PATCH_EXACT_BYTES_UNAVAILABLE = "patch_exact_bytes_unavailable";
 export type ExactPatchResolution = {
     ok: true;
@@ -17,9 +28,9 @@ export type ExactPatchResolution = {
 /**
  * Resolve the EXACT patch bytes behind a run's saved `final/patch.diff`.
  *
- * A saved copy is byte-exact unless the work product says
- * `persisted_patch: redacted` — then secret-like strings were hidden in it and
- * it is display-only. Apply, apply/check, the operator-decision binding and
+ * A saved copy is byte-exact. Only historical runs whose work product says
+ * `persisted_patch: redacted` saved a copy with secret-like strings hidden; it
+ * is display-only. Apply, apply/check, the operator-decision binding and
  * eligibility must read the private exact patch object instead (same private
  * store and digest identity as a revert anchor: id === `patch_sha256`). A
  * missing, unrecorded or corrupt object is a typed refusal; the redacted copy
@@ -33,5 +44,5 @@ export declare function resolveExactPatch(input: {
 }): ExactPatchResolution;
 /** Revert is an optional recovery affordance; never advertise it until the
  * immutable anchor has finalized successfully. */
-export declare function createRevertAnchorOrNull(repo: string, preTurnSha: string | null, postTurnSha: string | null): Promise<string | null>;
+export declare function createRevertAnchorOrNull(repo: string, preTurnSha: string | null, postTurnSha: string | null, projectRoot?: string): Promise<string | null>;
 //# sourceMappingURL=anchor-store.d.ts.map

package/dist/anchor-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anchor-store.d.ts","sourceRoot":"","sources":["../src/anchor-store.ts"],"names":[],"mappings":"AAmBA;8EAC8E;AAC9E,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,CAGjB;AAOD,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM5F;AAiBD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAMpF;AAED;4EAC4E;AAC5E,eAAO,MAAM,6BAA6B,kCAAkC,CAAC;AAE7E,MAAM,MAAM,oBAAoB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExF;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC;IACjD,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,oBAAoB,CAwBvB;AAED;kDACkD;AAClD,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,WAAW,EAAE,MAAM,GAAG,IAAI,GACzB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOxB"}
+{"version":3,"file":"anchor-store.d.ts","sourceRoot":"","sources":["../src/anchor-store.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAkB,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAmBpE;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,eAAe,EACrB,WAAW,SAAO,GACjB,OAAO,CAAC,MAAM,CAAC,CA8BjB;AAED,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,EACxC,WAAW,SAAO,GACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOxB;AAED,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAMtF;AAED,yFAAyF;AACzF,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,WAAW,SAAO,GACjB,OAAO,CAAC,MAAM,CAAC,CAYjB;AAOD,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM5F;AAqBD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAMpF;AAED;wEACwE;AACxE,eAAO,MAAM,6BAA6B,kCAAkC,CAAC;AAE7E,MAAM,MAAM,oBAAoB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExF;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC;IACjD,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,oBAAoB,CAwBvB;AAED;kDACkD;AAClD,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,WAAW,SAAO,GACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOxB"}

package/dist/anchor-store.js

@@ -1,19 +1,94 @@
-import { existsSync, readFileSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, utimesSync, writeFileSync, } from "node:fs";
+import { randomUUID } from "node:crypto";
 import { dirname, join } from "node:path";
 import { fsyncDirectory, projectRuntimeDir, sha256, writePatchObject, readFileUtf8BoundedSync, } from "@claudexor/util";
 import { WorkspaceError } from "@claudexor/core";
-import { diffTrees } from "./git.js";
+import { GIT_OBJECTS_V1, GitDeliveryPair } from "@claudexor/schema";
+import { repositoryObjectFormat, storeBoundaryCommit, treeOf } from "./git-result.js";
+import { repositoryEndpoint, retainInObjectStore } from "./object-store.js";
 const ANCHOR_ID = /^sha256:[0-9a-f]{64}$/;
 function objectPath(repo, id) {
     if (!ANCHOR_ID.test(id))
         throw new WorkspaceError("invalid revert anchor id");
     return join(projectRuntimeDir(repo), "anchors", "objects", `${id.slice(7)}.patch`);
 }
-/** Persist a binary/mode-aware turn patch outside Git before its dangling
- * snapshot commits can be collected. The patch digest is the immutable ID. */
-export async function createRevertAnchor(repo, preTurnSha, postTurnSha) {
-    const patch = await diffTrees(repo, preTurnSha, postTurnSha);
-    return persistRevertAnchor(repo, patch);
+/** An object revert anchor (#535): the actual pair a delivery or an in-place
+ * turn produced. Same id space and directory as patch anchors, so one handle
+ * (`revert_anchor_id`) and one retention owner serve both representations. */
+function pairPath(repo, id) {
+    if (!ANCHOR_ID.test(id))
+        throw new WorkspaceError("invalid revert anchor id");
+    return join(projectRuntimeDir(repo), "anchors", "objects", `${id.slice(7)}.pair`);
+}
+/**
+ * Anchor the actual pair (T, M) for revert. Its objects enter the project store
+ * owned by the anchor file itself, so they live exactly as long as the anchor
+ * (retention prunes anchors by the runs that name them). `repo` is where Git
+ * reads the pair; `projectRoot` is the project that keeps it, where retention
+ * finds it (a delegated run's or an isolated thread's project).
+ */
+export async function createPairRevertAnchor(repo, pair, projectRoot = repo) {
+    const parsed = GitDeliveryPair.parse(pair);
+    const text = `${JSON.stringify(parsed)}\n`;
+    const id = sha256(text);
+    const target = pairPath(projectRoot, id);
+    mkdirSync(dirname(target), { recursive: true });
+    const created = !existsSync(target);
+    if (created) {
+        const temp = `${target}.tmp-${process.pid}-${randomUUID()}`;
+        writeFileSync(temp, text, { mode: 0o600 });
+        renameSync(temp, target);
+    }
+    try {
+        const boundary = await storeBoundaryCommit(repo, parsed.pre_commit);
+        await retainInObjectStore({
+            projectRoot,
+            source: await repositoryEndpoint(repo),
+            roots: [parsed.post_tree, parsed.pre_commit],
+            boundary: boundary ? { commit: boundary, tree: await treeOf(repo, boundary) } : null,
+            objectFormat: parsed.object_format,
+            owner: target,
+        });
+    }
+    catch (error) {
+        // An anchor whose objects never entered the store is none: this call's own goes.
+        if (created)
+            rmSync(target, { force: true });
+        throw error;
+    }
+    const now = new Date();
+    utimesSync(target, now, now);
+    return id;
+}
+export async function createPairRevertAnchorOrNull(repo, pair, projectRoot = repo) {
+    if (!pair)
+        return null;
+    try {
+        return await createPairRevertAnchor(repo, pair, projectRoot);
+    }
+    catch {
+        return null;
+    }
+}
+/** The recorded pair of an object anchor; null for a legacy patch anchor. */
+export function readRevertPair(projectRoot, id) {
+    const path = pairPath(projectRoot, id);
+    if (!existsSync(path))
+        return null;
+    const text = readFileSync(path, "utf8");
+    if (sha256(text) !== id)
+        throw new WorkspaceError(`revert anchor ${id} is corrupt`);
+    return GitDeliveryPair.parse(JSON.parse(text));
+}
+/** An in-place turn's pair from its pre/post snapshot commits (no patch is rendered). */
+export async function createRevertAnchor(repo, preTurnSha, postTurnSha, projectRoot = repo) {
+    return createPairRevertAnchor(repo, {
+        schema: GIT_OBJECTS_V1,
+        object_format: await repositoryObjectFormat(repo),
+        pre_commit: preTurnSha,
+        pre_tree: await treeOf(repo, preTurnSha),
+        post_tree: await treeOf(repo, postTurnSha),
+    }, projectRoot);
 }
 /** Persist the exact canonical patch written by a protected delivery. */
 function createRevertAnchorFromPatch(repo, patch) {
@@ -36,9 +111,14 @@ function persistRevertAnchor(repo, patch) {
             throw new WorkspaceError(`revert anchor ${id} failed its content digest`);
         }
         fsyncDirectory(targetDir);
-        return id;
     }
-    writePatchObject(projectRuntimeDir(repo), target, patch);
+    else {
+        writePatchObject(projectRuntimeDir(repo), target, patch);
+    }
+    // Every publication renews the run-owned anchor, including a fresh hard link
+    // to an old cache inode. Sibling unlink ctime does not extend this age window.
+    const now = new Date();
+    utimesSync(target, now, now);
     return id;
 }
 export function readRevertAnchor(repo, id, maxBytes) {
@@ -48,15 +128,15 @@ export function readRevertAnchor(repo, id, maxBytes) {
         throw new WorkspaceError(`revert anchor ${id} is corrupt`);
     return patch;
 }
-/** The typed refusal every consumer of a saved patch shares when the saved
- * copy is display-only and its exact bytes cannot be produced (INV-062). */
+/** The typed refusal every consumer of a saved patch shares when a historical
+ * saved copy is display-only and its exact bytes cannot be produced. */
 export const PATCH_EXACT_BYTES_UNAVAILABLE = "patch_exact_bytes_unavailable";
 /**
  * Resolve the EXACT patch bytes behind a run's saved `final/patch.diff`.
  *
- * A saved copy is byte-exact unless the work product says
- * `persisted_patch: redacted` — then secret-like strings were hidden in it and
- * it is display-only. Apply, apply/check, the operator-decision binding and
+ * A saved copy is byte-exact. Only historical runs whose work product says
+ * `persisted_patch: redacted` saved a copy with secret-like strings hidden; it
+ * is display-only. Apply, apply/check, the operator-decision binding and
  * eligibility must read the private exact patch object instead (same private
  * store and digest identity as a revert anchor: id === `patch_sha256`). A
  * missing, unrecorded or corrupt object is a typed refusal; the redacted copy
@@ -90,11 +170,11 @@ export function resolveExactPatch(input) {
 }
 /** Revert is an optional recovery affordance; never advertise it until the
  * immutable anchor has finalized successfully. */
-export async function createRevertAnchorOrNull(repo, preTurnSha, postTurnSha) {
+export async function createRevertAnchorOrNull(repo, preTurnSha, postTurnSha, projectRoot = repo) {
     if (!preTurnSha || !postTurnSha)
         return null;
     try {
-        return await createRevertAnchor(repo, preTurnSha, postTurnSha);
+        return await createRevertAnchor(repo, preTurnSha, postTurnSha, projectRoot);
     }
     catch {
         return null;

package/dist/anchor-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"anchor-store.js","sourceRoot":"","sources":["../src/anchor-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,MAAM,EACN,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAE1C,SAAS,UAAU,CAAC,IAAY,EAAE,EAAU;IAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,0BAA0B,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AACrF,CAAC;AAED;8EAC8E;AAC9E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,UAAkB,EAClB,WAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAC7D,OAAO,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,yEAAyE;AACzE,SAAS,2BAA2B,CAAC,IAAY,EAAE,KAAa;IAC9D,OAAO,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,IAAY,EAAE,KAAa;IAC3E,IAAI,CAAC;QACH,OAAO,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;QAC5E,CAAC;QACD,cAAc,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,gBAAgB,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACzD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,EAAU,EAAE,QAAiB;IAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClC,MAAM,KAAK,GACT,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChG,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;QAAE,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;4EAC4E;AAC5E,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAK7E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAKjC;IACC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,KAAK,UAAU;QAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IACtE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC5C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;QAC7D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,oGAAoG;SACvG,CAAC;IACJ,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;QAChG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA2B,CAAC,IAAI,EAAE,UAAU,CAAC,gBAAgB,CAAC;gBAAE,MAAM,KAAK,CAAC;YACjF,6EAA6E;QAC/E,CAAC;IACH,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EACJ,iGAAiG;KACpG,CAAC;AACJ,CAAC;AAED;kDACkD;AAClD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAY,EACZ,UAAyB,EACzB,WAA0B;IAE1B,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,OAAO,MAAM,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"anchor-store.js","sourceRoot":"","sources":["../src/anchor-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,MAAM,EACN,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,MAAM,EACN,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE5E,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAE1C,SAAS,UAAU,CAAC,IAAY,EAAE,EAAU;IAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,0BAA0B,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AACrF,CAAC;AAED;;8EAE8E;AAC9E,SAAS,QAAQ,CAAC,IAAY,EAAE,EAAU;IACxC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,0BAA0B,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAY,EACZ,IAAqB,EACrB,WAAW,GAAG,IAAI;IAElB,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;IAC3C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACzC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,GAAG,MAAM,QAAQ,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC;QAC5D,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QACpE,MAAM,mBAAmB,CAAC;YACxB,WAAW;YACX,MAAM,EAAE,MAAM,kBAAkB,CAAC,IAAI,CAAC;YACtC,KAAK,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC;YAC5C,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;YACpF,YAAY,EAAE,MAAM,CAAC,aAAa;YAClC,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iFAAiF;QACjF,IAAI,OAAO;YAAE,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,IAAY,EACZ,IAAwC,EACxC,WAAW,GAAG,IAAI;IAElB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,MAAM,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,WAAmB,EAAE,EAAU;IAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE;QAAE,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACpF,OAAO,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,UAAkB,EAClB,WAAmB,EACnB,WAAW,GAAG,IAAI;IAElB,OAAO,sBAAsB,CAC3B,IAAI,EACJ;QACE,MAAM,EAAE,cAAc;QACtB,aAAa,EAAE,MAAM,sBAAsB,CAAC,IAAI,CAAC;QACjD,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,MAAM,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC;QACxC,SAAS,EAAE,MAAM,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC;KAC3C,EACD,WAAW,CACZ,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAS,2BAA2B,CAAC,IAAY,EAAE,KAAa;IAC9D,OAAO,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,IAAY,EAAE,KAAa;IAC3E,IAAI,CAAC;QACH,OAAO,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;QAC5E,CAAC;QACD,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,gBAAgB,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,6EAA6E;IAC7E,+EAA+E;IAC/E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,EAAU,EAAE,QAAiB;IAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClC,MAAM,KAAK,GACT,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChG,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;QAAE,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;wEACwE;AACxE,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAK7E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAKjC;IACC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,KAAK,UAAU;QAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IACtE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC5C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;QAC7D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,oGAAoG;SACvG,CAAC;IACJ,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;QAChG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA2B,CAAC,IAAI,EAAE,UAAU,CAAC,gBAAgB,CAAC;gBAAE,MAAM,KAAK,CAAC;YACjF,6EAA6E;QAC/E,CAAC;IACH,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EACJ,iGAAiG;KACpG,CAAC;AACJ,CAAC;AAED;kDACkD;AAClD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAY,EACZ,UAAyB,EACzB,WAA0B,EAC1B,WAAW,GAAG,IAAI;IAElB,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,OAAO,MAAM,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/capture-failure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capture-failure.d.ts","sourceRoot":"","sources":["../src/capture-failure.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAE1D,mFAAmF;AACnF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,CAOhF;AAED,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,GAAG,uBAAuB,CAwBxF"}
+{"version":3,"file":"capture-failure.d.ts","sourceRoot":"","sources":["../src/capture-failure.ts"],"names":[],"mappings":"AACA,OAAO,EAA0B,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAEpF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAE1D,mFAAmF;AACnF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,CAMhF;AAED,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,GAAG,uBAAuB,CAgCxF"}

package/dist/capture-failure.js

@@ -1,11 +1,10 @@
 import { WorkspaceError } from "@claudexor/core";
-import { WorkspaceCaptureFailure } from "@claudexor/schema";
+import { CaptureChangeInventory, WorkspaceCaptureFailure } from "@claudexor/schema";
 import { redactSecrets } from "@claudexor/util";
 /** Keep the original error until scratch cleanup has attached its own evidence. */
 export function incompleteWorkspaceCapture(error) {
     return {
         diff: "",
-        binarySecretPaths: [],
         captureIncomplete: true,
         captureFailure: error instanceof Error ? error : new WorkspaceError(String(error)),
     };
@@ -17,6 +16,7 @@ export function captureFailureEvidence(error) {
     const safe = (text) => redactSecrets(text).slice(0, 4000);
     const cleanup = facts["cleanupError"];
     const cleanupCode = cleanup?.code;
+    const inventory = CaptureChangeInventory.safeParse(facts["captureInventory"]);
     return WorkspaceCaptureFailure.parse({
         code: code.success ? code.data : "capture_failed",
         message: safe(error?.message ?? "Workspace changes could not be captured completely"),
@@ -26,6 +26,11 @@ export function captureFailureEvidence(error) {
             : {}),
         ...(["stdout", "stderr"].includes(String(facts["stream"])) ? { stream: facts["stream"] } : {}),
         ...(facts["drain"] === "truncated" ? { drain: "truncated" } : {}),
+        ...Object.fromEntries(["requiredBytes", "availableBytes", "stallMs"]
+            .filter((key) => Number.isSafeInteger(facts[key]) && Number(facts[key]) >= 0)
+            .map((key) => [key, facts[key]])),
+        ...(typeof facts["signal"] === "string" ? { signal: safe(facts["signal"]).slice(0, 32) } : {}),
+        ...(inventory.success ? { inventory: inventory.data } : {}),
         ...(cleanup === undefined
             ? {}
             : {

package/dist/capture-failure.js.map

@@ -1 +1 @@
-{"version":3,"file":"capture-failure.js","sourceRoot":"","sources":["../src/capture-failure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGhD,mFAAmF;AACnF,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,OAAO;QACL,IAAI,EAAE,EAAE;QACR,iBAAiB,EAAE,EAAE;QACrB,iBAAiB,EAAE,IAAI;QACvB,cAAc,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KACnF,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CAAC,KAAwB;IAC7D,MAAM,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;IACvD,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IACtC,MAAM,WAAW,GAAI,OAA0C,EAAE,IAAI,CAAC;IACtE,OAAO,uBAAuB,CAAC,KAAK,CAAC;QACnC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB;QACjD,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,oDAAoD,CAAC;QACrF,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC;YAC7F,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,mBAAmB,CAAC,EAAE;YACnD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,OAAO,KAAK,SAAS;YACvB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;oBAChE,OAAO,EAAE,IAAI,CAAC,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;iBAC5E;aACF,CAAC;KACP,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"capture-failure.js","sourceRoot":"","sources":["../src/capture-failure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGhD,mFAAmF;AACnF,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,OAAO;QACL,IAAI,EAAE,EAAE;QACR,iBAAiB,EAAE,IAAI;QACvB,cAAc,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KACnF,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CAAC,KAAwB;IAC7D,MAAM,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;IACvD,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IACtC,MAAM,WAAW,GAAI,OAA0C,EAAE,IAAI,CAAC;IACtE,MAAM,SAAS,GAAG,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC9E,OAAO,uBAAuB,CAAC,KAAK,CAAC;QACnC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB;QACjD,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,oDAAoD,CAAC;QACrF,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC;YAC7F,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,mBAAmB,CAAC,EAAE;YACnD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,MAAM,CAAC,WAAW,CAClB,CAAC,eAAe,EAAE,gBAAgB,EAAE,SAAS,CAAW;aACtD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;aAC5E,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CACnC;QACD,GAAG,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,OAAO,KAAK,SAAS;YACvB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;oBAChE,OAAO,EAAE,IAAI,CAAC,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;iBAC5E;aACF,CAAC;KACP,CAAC,CAAC;AACL,CAAC"}

package/dist/capture-inventory.d.ts

@@ -0,0 +1,10 @@
+import { CaptureChangeInventory } from "@claudexor/schema";
+/**
+ * A bounded, NON-EXACT inventory of the changed files behind a refused capture:
+ * its own tree-to-tree `git diff --raw` and blob-size pass over the candidate
+ * tree the capture already wrote, through the same raw capture budget. It never
+ * reads file contents or the refused patch bytes (those are already released).
+ * Null when this pass cannot complete; the capture refusal stands either way.
+ */
+export declare function changedFileInventory(repo: string, baseSha: string, tree: string, env: Record<string, string>): Promise<CaptureChangeInventory | null>;
+//# sourceMappingURL=capture-inventory.d.ts.map

package/dist/capture-inventory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-inventory.d.ts","sourceRoot":"","sources":["../src/capture-inventory.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,sBAAsB,EAEvB,MAAM,mBAAmB,CAAC;AAU3B;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1B,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAmDxC"}

package/dist/capture-inventory.js

@@ -0,0 +1,63 @@
+import { CAPTURE_INVENTORY_LIMIT, CaptureChangeInventory, } from "@claudexor/schema";
+import { gitEnv } from "./git-run.js";
+const CHANGE = {
+    A: "added",
+    M: "modified",
+    D: "deleted",
+    T: "type_changed",
+};
+/**
+ * A bounded, NON-EXACT inventory of the changed files behind a refused capture:
+ * its own tree-to-tree `git diff --raw` and blob-size pass over the candidate
+ * tree the capture already wrote, through the same raw capture budget. It never
+ * reads file contents or the refused patch bytes (those are already released).
+ * Null when this pass cannot complete; the capture refusal stands either way.
+ */
+export async function changedFileInventory(repo, baseSha, tree, env) {
+    try {
+        const raw = await gitEnv(repo, ["diff", "--raw", "-z", "--no-renames", "--no-abbrev", baseSha, tree], env);
+        if (raw.code !== 0)
+            return null;
+        // `-z --raw`: ":<old mode> <new mode> <old oid> <new oid> <status>\0<path>\0".
+        const fields = raw.stdout.split("\0");
+        const rows = [];
+        for (let index = 0; index + 1 < fields.length; index += 2) {
+            const meta = fields[index];
+            const [, , oldOid, newOid, status] = meta.slice(1).split(" ");
+            const change = CHANGE[status ?? ""];
+            // An unexpected record yields no inventory rather than a wrong one.
+            if (!meta.startsWith(":") || !change || !oldOid || !newOid)
+                return null;
+            rows.push({ path: fields[index + 1], change, oid: change === "deleted" ? oldOid : newOid });
+        }
+        const sizes = new Map();
+        const oids = [...new Set(rows.map((row) => row.oid))];
+        if (oids.length > 0) {
+            const check = await gitEnv(repo, ["cat-file", "--batch-check=%(objectname) %(objectsize)"], env, `${oids.join("\n")}\n`);
+            // A missing object (a submodule link) answers "<oid> missing": size unknown.
+            for (const line of check.code === 0 ? check.stdout.split("\n") : []) {
+                const [oid, size] = line.split(" ");
+                if (oid && size && /^\d+$/.test(size))
+                    sizes.set(oid, Number(size));
+            }
+        }
+        const entries = rows
+            .map((row) => ({
+            // A changed path is working content: exact, within the entry's length cap.
+            path: row.path.slice(0, 1024),
+            change: row.change,
+            sizeBytes: sizes.get(row.oid) ?? null,
+        }))
+            .sort((a, b) => (b.sizeBytes ?? -1) - (a.sizeBytes ?? -1) || a.path.localeCompare(b.path));
+        return CaptureChangeInventory.parse({
+            exact: false,
+            changedFiles: rows.length,
+            largest: entries.slice(0, CAPTURE_INVENTORY_LIMIT),
+        });
+    }
+    catch {
+        // Its own overflow, timeout or I/O fault leaves no inventory, never a partial claim.
+        return null;
+    }
+}
+//# sourceMappingURL=capture-inventory.js.map

package/dist/capture-inventory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-inventory.js","sourceRoot":"","sources":["../src/capture-inventory.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GAEvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,MAAM,MAAM,GAAoD;IAC9D,CAAC,EAAE,OAAO;IACV,CAAC,EAAE,UAAU;IACb,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,cAAc;CAClB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAY,EACZ,OAAe,EACf,IAAY,EACZ,GAA2B;IAE3B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CACtB,IAAI,EACJ,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EACrE,GAAG,CACJ,CAAC;QACF,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAChC,+EAA+E;QAC/E,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,IAAI,GAA6E,EAAE,CAAC;QAC1F,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC;YAC5B,MAAM,CAAC,EAAE,AAAD,EAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YACpC,oEAAoE;YACpE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACxE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,CAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QACxC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,MAAM,CACxB,IAAI,EACJ,CAAC,UAAU,EAAE,2CAA2C,CAAC,EACzD,GAAG,EACH,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACvB,CAAC;YACF,6EAA6E;YAC7E,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACpE,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACpC,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,IAAI;aACjB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACb,2EAA2E;YAC3E,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI;SACtC,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7F,OAAO,sBAAsB,CAAC,KAAK,CAAC;YAClC,KAAK,EAAE,KAAK;YACZ,YAAY,EAAE,IAAI,CAAC,MAAM;YACzB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC;SACnD,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,qFAAqF;QACrF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/capture-objects.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Estimate of the rendered patch view of B..C from blob sizes alone (no blob is
+ * read): every changed path contributes its old and new size plus a fixed header
+ * allowance (a mode-only change, the allowance alone). Text hunks hold at most both sides' lines; a `--binary` payload is
+ * base85 of deflated data (5/4 of at most the raw size) per side. It decides
+ * whether a render is attempted. It is NOT an upper bound: per-line prefixes and
+ * per-hunk headers are not counted, so many short changed lines render larger.
+ * The render is bounded separately by its own buffer, and one that overflows is
+ * the same typed absence.
+ */
+export declare function estimatePatchViewBytes(repo: string, base: string, candidate: string, env: Record<string, string>): Promise<{
+    bytes: number;
+    paths: string[];
+    existingPaths: string[];
+}>;
+/** Cheap object-growth evidence for the stall watchdog of a writing Git child. */
+export declare function objectDirectoryProgress(objectsDir: string): () => number;
+/**
+ * Free-space preflight BEFORE a capture writes anything (owner decision
+ * 29.10 17:10): the scratch object directory will hold at most the bytes of the
+ * worktree's changed and untracked files, so refuse with exact numbers when the
+ * filesystem cannot hold them; nothing has been written at that point.
+ */
+export declare function preflightCaptureSpace(repo: string, scratchDir: string, env: Record<string, string>): Promise<number>;
+/**
+ * D2 for an isolated envelope: when its base is a Claudexor dirty snapshot (no
+ * user ref keeps it), retain the snapshot's own closure beyond its parent in
+ * the project store before the clone exists. Returns the store's object
+ * directory for the clone's second alternate.
+ */
+export declare function isolatedBaseCustody(repo: string, projectRoot: string, baseSha: string, owners: [string, ...string[]]): Promise<string | undefined>;
+//# sourceMappingURL=capture-objects.d.ts.map

package/dist/capture-objects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-objects.d.ts","sourceRoot":"","sources":["../src/capture-objects.ts"],"names":[],"mappings":"AAcA;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1B,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA4CtE;AAED,kFAAkF;AAClF,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,MAAM,CAcxE;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1B,OAAO,CAAC,MAAM,CAAC,CAyBjB;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,GAC5B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmB7B"}

package/dist/capture-objects.js

@@ -0,0 +1,129 @@
+import { existsSync, lstatSync, readdirSync, statSync } from "node:fs";
+import { join } from "node:path";
+import { gitObserved } from "./git-observed.js";
+import { repositoryObjectFormat, storeBoundaryCommit, treeOf } from "./git-result.js";
+import { assertProjectObjectFormat, objectStorePath, repositoryEndpoint, retainInObjectStore, writeRootRecord, } from "./object-store.js";
+import { assertSpaceFor } from "./object-transfer.js";
+import { parseRawRecords } from "./object-compose.js";
+/**
+ * Estimate of the rendered patch view of B..C from blob sizes alone (no blob is
+ * read): every changed path contributes its old and new size plus a fixed header
+ * allowance (a mode-only change, the allowance alone). Text hunks hold at most both sides' lines; a `--binary` payload is
+ * base85 of deflated data (5/4 of at most the raw size) per side. It decides
+ * whether a render is attempted. It is NOT an upper bound: per-line prefixes and
+ * per-hunk headers are not counted, so many short changed lines render larger.
+ * The render is bounded separately by its own buffer, and one that overflows is
+ * the same typed absence.
+ */
+export async function estimatePatchViewBytes(repo, base, candidate, env) {
+    const listed = await gitObserved(repo, ["diff-tree", "-r", "--raw", "-z", "--no-renames", "--no-abbrev", base, candidate], { env, label: "diff-tree --raw (estimate)" });
+    const records = parseRawRecords(listed.stdout);
+    const zero = /^0+$/;
+    const oids = [
+        ...new Set(records.flatMap((record) => [record.oldOid, record.newOid]).filter((oid) => !zero.test(oid))),
+    ];
+    const sizes = new Map();
+    if (oids.length > 0) {
+        const checked = await gitObserved(repo, ["cat-file", "--batch-check=%(objectname) %(objectsize)"], {
+            env,
+            input: `${oids.join("\n")}\n`,
+            label: "cat-file --batch-check (estimate)",
+        });
+        for (const line of checked.stdout.split("\n")) {
+            const [oid, size] = line.split(" ");
+            if (oid && size && /^\d+$/.test(size))
+                sizes.set(oid, Number(size));
+        }
+    }
+    let bytes = 0;
+    for (const record of records) {
+        // A mode-only change renders its header and reads no blob.
+        const sides = record.oldOid === record.newOid
+            ? []
+            : [record.oldOid, record.newOid].filter((oid) => !zero.test(oid));
+        bytes += 1024 + sides.reduce((sum, oid) => sum + Math.ceil(((sizes.get(oid) ?? 0) * 5) / 4), 0);
+    }
+    return {
+        bytes,
+        paths: records.map((record) => record.src),
+        // No renames are detected here: an old side exists for M, T and D records.
+        existingPaths: records.filter((record) => record.status !== "A").map((record) => record.src),
+    };
+}
+/** Cheap object-growth evidence for the stall watchdog of a writing Git child. */
+export function objectDirectoryProgress(objectsDir) {
+    return () => {
+        let total = 0;
+        try {
+            const pack = join(objectsDir, "pack");
+            if (existsSync(pack))
+                for (const name of readdirSync(pack))
+                    total += statSync(join(pack, name)).size;
+            for (const fan of readdirSync(objectsDir))
+                if (fan.length === 2)
+                    total += readdirSync(join(objectsDir, fan)).length;
+        }
+        catch {
+            // A directory being created or removed is not a stall.
+        }
+        return total;
+    };
+}
+/**
+ * Free-space preflight BEFORE a capture writes anything (owner decision
+ * 29.10 17:10): the scratch object directory will hold at most the bytes of the
+ * worktree's changed and untracked files, so refuse with exact numbers when the
+ * filesystem cannot hold them; nothing has been written at that point.
+ */
+export async function preflightCaptureSpace(repo, scratchDir, env) {
+    const status = await gitObserved(repo, ["status", "--porcelain=v1", "-z", "--untracked-files=all", "--no-renames"], { env, label: "status (space preflight)", allowFailure: true });
+    if (status.code !== 0)
+        return 0;
+    const top = (await gitObserved(repo, ["rev-parse", "--show-toplevel"], {
+        env,
+        label: "rev-parse --show-toplevel",
+    })).stdout.trim();
+    let bytes = 0;
+    for (const entry of status.stdout.split("\0")) {
+        if (entry.length < 4 || entry[1] === "D" || entry[0] === "D")
+            continue;
+        try {
+            const stat = lstatSync(join(top, entry.slice(3)));
+            if (stat.isFile())
+                bytes += stat.size;
+        }
+        catch {
+            // Vanished meanwhile: it adds nothing to write.
+        }
+    }
+    assertSpaceFor(scratchDir, bytes, "capture");
+    return bytes;
+}
+/**
+ * D2 for an isolated envelope: when its base is a Claudexor dirty snapshot (no
+ * user ref keeps it), retain the snapshot's own closure beyond its parent in
+ * the project store before the clone exists. Returns the store's object
+ * directory for the clone's second alternate.
+ */
+export async function isolatedBaseCustody(repo, projectRoot, baseSha, owners) {
+    // One project keeps one object format: its store never becomes a foreign clone's alternate.
+    if (projectRoot !== repo)
+        await assertProjectObjectFormat(projectRoot, await repositoryObjectFormat(repo));
+    const boundary = await storeBoundaryCommit(repo, baseSha);
+    if (boundary && boundary !== baseSha) {
+        const retained = await retainInObjectStore({
+            projectRoot,
+            source: await repositoryEndpoint(repo),
+            roots: [baseSha],
+            boundary: { commit: boundary, tree: await treeOf(repo, boundary) },
+            objectFormat: await repositoryObjectFormat(repo),
+            owner: owners[0],
+        });
+        // Live while ANY owner exists: the holder run, or the envelope itself.
+        for (const owner of owners.slice(1))
+            writeRootRecord(retained.store, owner, [baseSha]);
+    }
+    const objects = join(objectStorePath(projectRoot), "objects");
+    return existsSync(objects) ? objects : undefined;
+}
+//# sourceMappingURL=capture-objects.js.map

package/dist/capture-objects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-objects.js","sourceRoot":"","sources":["../src/capture-objects.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACtF,OAAO,EACL,yBAAyB,EACzB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAY,EACZ,IAAY,EACZ,SAAiB,EACjB,GAA2B;IAE3B,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,IAAI,EACJ,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,EAClF,EAAE,GAAG,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAC7C,CAAC;IACF,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC;IACpB,MAAM,IAAI,GAAG;QACX,GAAG,IAAI,GAAG,CACR,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAC7F;KACF,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,IAAI,EACJ,CAAC,UAAU,EAAE,2CAA2C,CAAC,EACzD;YACE,GAAG;YACH,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC7B,KAAK,EAAE,mCAAmC;SAC3C,CACF,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,2DAA2D;QAC3D,MAAM,KAAK,GACT,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAC7B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACtE,KAAK,IAAI,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClG,CAAC;IACD,OAAO;QACL,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;QAC1C,2EAA2E;QAC3E,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;KAC7F,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,OAAO,GAAG,EAAE;QACV,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACtC,IAAI,UAAU,CAAC,IAAI,CAAC;gBAClB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC;oBAAE,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACjF,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC;gBACvC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;oBAAE,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,UAAkB,EAClB,GAA2B;IAE3B,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,IAAI,EACJ,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,uBAAuB,EAAE,cAAc,CAAC,EAC3E,EAAE,GAAG,EAAE,KAAK,EAAE,0BAA0B,EAAE,YAAY,EAAE,IAAI,EAAE,CAC/D,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,CACV,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE;QACxD,GAAG;QACH,KAAK,EAAE,2BAA2B;KACnC,CAAC,CACH,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAChB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,SAAS;QACvE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,IAAI,IAAI,CAAC,MAAM,EAAE;gBAAE,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;IACH,CAAC;IACD,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAY,EACZ,WAAmB,EACnB,OAAe,EACf,MAA6B;IAE7B,4FAA4F;IAC5F,IAAI,WAAW,KAAK,IAAI;QACtB,MAAM,yBAAyB,CAAC,WAAW,EAAE,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,QAAQ,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;YACzC,WAAW;YACX,MAAM,EAAE,MAAM,kBAAkB,CAAC,IAAI,CAAC;YACtC,KAAK,EAAE,CAAC,OAAO,CAAC;YAChB,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE;YAClE,YAAY,EAAE,MAAM,sBAAsB,CAAC,IAAI,CAAC;YAChD,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;SACjB,CAAC,CAAC;QACH,uEAAuE;QACvE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,eAAe,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9D,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC"}

package/dist/cleanup-fault.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Keep a cleanup fault beside the outcome it followed, never in its place: a
+ * non-enumerable `cleanupError` (the lane capture and revert already use), so no
+ * receipt or record serializes it and the outcome's own facts stay as they were.
+ * An outcome that already carries one, or cannot take one (frozen), keeps its own.
+ */
+export declare function noteCleanupFault(outcome: unknown, fault: unknown): void;
+/** A disposable scratch directory `body` may allocate (`held.dir`). */
+export interface HeldScratch {
+    dir: string | null;
+}
+/**
+ * Run `body`, then remove the scratch it allocated. A removal that fails leaves the
+ * directory where it is (the OS temp dir) and never replaces what `body` returned or
+ * threw: its fault is noted beside that outcome ({@link noteCleanupFault}).
+ */
+export declare function withDisposableScratch<T>(body: (held: HeldScratch) => Promise<T>): Promise<T>;
+//# sourceMappingURL=cleanup-fault.d.ts.map

package/dist/cleanup-fault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup-fault.d.ts","sourceRoot":"","sources":["../src/cleanup-fault.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAQvE;AAED,uEAAuE;AACvE,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,EAC3C,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,GACtC,OAAO,CAAC,CAAC,CAAC,CAeZ"}

package/dist/cleanup-fault.js

@@ -0,0 +1,45 @@
+import { rmSync } from "node:fs";
+/**
+ * Keep a cleanup fault beside the outcome it followed, never in its place: a
+ * non-enumerable `cleanupError` (the lane capture and revert already use), so no
+ * receipt or record serializes it and the outcome's own facts stay as they were.
+ * An outcome that already carries one, or cannot take one (frozen), keeps its own.
+ */
+export function noteCleanupFault(outcome, fault) {
+    if (fault === undefined || outcome === null || typeof outcome !== "object")
+        return;
+    if ("cleanupError" in outcome)
+        return;
+    try {
+        Object.defineProperty(outcome, "cleanupError", { value: fault, enumerable: false });
+    }
+    catch {
+        // Frozen: the outcome stands without the diagnostic.
+    }
+}
+/**
+ * Run `body`, then remove the scratch it allocated. A removal that fails leaves the
+ * directory where it is (the OS temp dir) and never replaces what `body` returned or
+ * threw: its fault is noted beside that outcome ({@link noteCleanupFault}).
+ */
+export async function withDisposableScratch(body) {
+    const held = { dir: null };
+    let outcome;
+    try {
+        return (outcome = await body(held));
+    }
+    catch (error) {
+        outcome = error;
+        throw error;
+    }
+    finally {
+        try {
+            if (held.dir)
+                rmSync(held.dir, { recursive: true, force: true });
+        }
+        catch (fault) {
+            noteCleanupFault(outcome, fault);
+        }
+    }
+}
+//# sourceMappingURL=cleanup-fault.js.map

package/dist/cleanup-fault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup-fault.js","sourceRoot":"","sources":["../src/cleanup-fault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB,EAAE,KAAc;IAC/D,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO;IACnF,IAAI,cAAc,IAAI,OAAO;QAAE,OAAO;IACtC,IAAI,CAAC;QACH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;IACvD,CAAC;AACH,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAuC;IAEvC,MAAM,IAAI,GAAgB,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,GAAG,KAAK,CAAC;QAChB,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,GAAG;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;AACH,CAAC"}