@coderook/cli 0.31.13 → 0.32.1

package/.claude-plugin/plugin.json

@@ -2,13 +2,13 @@
   "name": "coderook",
   "displayName": "CodeRook",
   "description": "Save, browse and restore whole-snapshot versions of a project on CodeRook, from Claude Code.",
-  "version": "0.31.13",
+  "version": "0.32.1",
   "author": {
     "name": "ACCA Gaming Productions",
     "url": "https://coderook.com"
   },
   "homepage": "https://coderook.com/docs#assistants",
-  "license": "SEE LICENSE IN LICENSE.txt",
+  "license": "Apache-2.0",
   "keywords": [
     "coderook",
     "versioning",

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/NOTICE

@@ -0,0 +1,8 @@
+cbx command line
+Copyright 2026 ACCA Gaming Productions
+
+This product includes software developed by ACCA Gaming Productions
+for CodeRook (https://coderook.com), including the CBX engine.
+
+"CodeRook" is a name of ACCA Gaming Productions. The Apache License
+grants no rights to use it; see section 6 of the licence.

package/README.md

@@ -118,6 +118,46 @@ on a decision. `cbx merges` lists them and `cbx merge <ref>` walks
 through it; `cbx tracks` shows them beside the ordinary lines, because
 somebody looking for where they can save needs to see the one they cannot.
 
+## A history on this machine
+
+A folder can keep its own history, with no account and no connection:
+
+```
+cbx init                          start one; it lives in .cbx/
+cbx save -m "First playable build"
+cbx status                        what changed since the last save
+cbx diff                          the same, line by line
+cbx log                           the saves on this line
+cbx switch -c new-movement        start a line here; no files change
+cbx switch main                   go back; only files that differ are rewritten
+cbx merge new-movement            bring that line's work into this one
+cbx restore --from main~2         put the folder back two saves
+cbx restore src/player.ts --force throw away unsaved changes to one file
+cbx push                          send this line's new saves to CodeRook
+cbx pull                          bring CodeRook's new saves here
+cbx pull my-project               start from a project already on CodeRook
+```
+
+Nothing in `.cbx/` is sent anywhere until you push. Each save becomes a
+CodeRook save of its own, and the first push creates the project, private,
+unless the folder is already linked to one. If somebody saved to that line on
+CodeRook since your last push, nothing is sent and you are told to pull
+first. If you both saved, pull merges their saves with yours; push then sends
+the merge.
+
+A merge takes whatever only one side changed, merges text files both changed
+line by line, and marks only what is left. Fix the marked files and
+`cbx save`, or take one side with `cbx merge --mine` / `--theirs`
+(`--path <file>` for one file), or `cbx merge --cancel` to put everything
+back.
+
+Once a folder has a history, `status`, `diff`, `log`, `switch`, `merge`,
+`push` and `pull` answer from it. Everywhere else they mean what they always meant.
+
+`restore` and `switch` stop and list the files if they would overwrite an
+unsaved change. `--force` discards those changes. Files the history has never
+held are never touched.
+
 ## Proposals
 
 A line gets back to main by being proposed. The proposal is checked and
@@ -324,7 +364,9 @@ cbx checkout      cbx merge         cbx tag
 Each is the CodeRook command it always was, reachable by the name a git user
 would reach for: `push` is `submit`, `pull` is `get`, `log` is `versions`,
 `branch` is `tracks`, `checkout` is `track`, `tag` is `release`. The original
-names still work and mean the same thing.
+names still work and mean the same thing. The one exception is a folder with
+a history of its own (`cbx init`): there `log`, `switch`, `merge`, `push`
+and `pull` work on that history.
 
 That is also what the git remote does. `git push` performs the operation
 `cbx push` performs — the same code decides what changed, the same code
@@ -483,3 +525,13 @@ is reachable, and who this machine is signed in as.
 
 `0` on success, `1` on failure. Every command prints why it failed on standard
 error, so a script can branch on the status and log the reason.
+
+## Source and licence
+
+The `cbx` command line and the CBX engine it is built on are open source under
+the Apache License 2.0: <https://github.com/AlexC1991/cbx>. The storage format
+and the sync protocol are specified there too, so other tools can read and
+write the same histories.
+
+Copyright 2026 ACCA Gaming Productions. "CodeRook" is a name of ACCA Gaming
+Productions, and the licence grants no right to use it.

package/dist/cbx/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/cbx/NOTICE

@@ -0,0 +1,8 @@
+CBX
+Copyright 2026 ACCA Gaming Productions
+
+This product includes software developed by ACCA Gaming Productions
+for CodeRook (https://coderook.com).
+
+"CodeRook" is a name of ACCA Gaming Productions. The Apache License
+grants no rights to use it; see section 6 of the licence.

package/dist/{desktop-app/src/main → cbx/src/core}/cbx.js

@@ -4,6 +4,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FOOTER_MAGIC = exports.MANIFEST_MAGIC = exports.CHUNK_MAGIC = exports.HEADER_MAGIC = exports.cutPoints = void 0;
+exports.chunkFrame = chunkFrame;
+exports.openChunkFrame = openChunkFrame;
 exports.packBundle = packBundle;
 exports.readManifest = readManifest;
 exports.unpackBundle = unpackBundle;
@@ -95,6 +97,35 @@ function chunkFrame(raw) {
         },
     };
 }
+/**
+ * The original bytes of a whole chunk frame, checked against `expected`.
+ *
+ * A frame carries both digests, so damage to the stored bytes is caught
+ * before anything is decompressed, and a frame filed under the wrong name is
+ * caught after. The local store keeps each chunk as one of these, which is
+ * why a chunk looks the same inside a bundle and on its own.
+ */
+function openChunkFrame(frame, expected) {
+    if (frame.length < CHUNK_HEADER_BYTES || frame.toString("latin1", 0, 4) !== exports.CHUNK_MAGIC) {
+        throw new Error(`Chunk ${expected.slice(0, 12)} is not a chunk frame`);
+    }
+    const codec = frame.readUInt8(4);
+    const rawSize = Number(frame.readBigUInt64LE(8));
+    const storedSize = Number(frame.readBigUInt64LE(16));
+    const stored = frame.subarray(CHUNK_HEADER_BYTES);
+    if (stored.length !== storedSize ||
+        sha256(stored) !== frame.subarray(56, 88).toString("hex")) {
+        throw new Error(`Chunk ${expected.slice(0, 12)} is damaged`);
+    }
+    if (codec !== CODEC_NONE && codec !== CODEC_ZSTD) {
+        throw new Error(`Chunk ${expected.slice(0, 12)} uses an unknown codec (${codec})`);
+    }
+    const raw = codec === CODEC_ZSTD ? (0, node_zlib_1.zstdDecompressSync)(stored) : stored;
+    if (raw.length !== rawSize || sha256(raw) !== expected) {
+        throw new Error(`Chunk ${expected.slice(0, 12)} does not match its identity`);
+    }
+    return raw;
+}
 /**
  * Write a bundle. Frames stream out as files are read, and the completed
  * file is renamed into place only at the end, so an interrupted pack leaves

package/dist/{desktop-app/src/main → cbx/src/core}/download.js

@@ -255,7 +255,11 @@ class Downloader {
             fileCount: Number(row.fileCount ?? 0),
             sourceSize: Number(row.sourceSize ?? 0),
             createdAt: String(row.createdAt ?? ""),
-            authorName: String(row.authorName ?? ""),
+            /* The service sends `author.displayName`; `authorName` was never filled. */
+            authorName: String(row.authorName ?? row.author?.displayName ?? ""),
+            ...(Array.isArray(row.parentVersionIds)
+                ? { parentVersionIds: row.parentVersionIds.map((id) => String(id)) }
+                : {}),
         }));
     }
     /**
@@ -428,6 +432,63 @@ class Downloader {
             await (0, promises_1.rm)(scratch, { recursive: true, force: true });
         }
     }
+    /**
+     * Hand each of `files` to `visit`, verified, without writing a folder.
+     *
+     * For a caller that keeps files somewhere of its own: the local history
+     * stores them as objects. A solid pack is fetched once and its members
+     * handed over as bytes; anything else arrives at `scratch` first, so a
+     * large file is never held in memory, and is gone before the next one.
+     */
+    async collect(repositoryId, versionId, files, scratch, visit) {
+        await (0, promises_1.mkdir)(scratch, { recursive: true });
+        const temporary = node_path_1.default.join(scratch, "arriving.partial");
+        const packs = new Map();
+        const single = [];
+        for (const file of files) {
+            const id = file.sealed ? undefined : file.pack?.objectId;
+            if (!id) {
+                single.push(file);
+                continue;
+            }
+            const group = packs.get(id) ?? [];
+            group.push(file);
+            packs.set(id, group);
+        }
+        try {
+            for (const [packId, members] of packs) {
+                this.check();
+                const reply = await this.request(`/v1/repositories/${repositoryId}/objects/${packId}`);
+                const body = Buffer.from(await reply.arrayBuffer());
+                const expected = reply.headers.get("x-coderook-sha256");
+                if (expected && (0, node_crypto_1.createHash)("sha256").update(body).digest("hex") !== expected) {
+                    throw new Error("A solid pack did not arrive intact");
+                }
+                for (const member of members) {
+                    const { offset, length } = member.pack;
+                    if (offset < 0 || length < 0 || offset + length > body.byteLength) {
+                        throw new Error(`${member.path} points outside its solid pack`);
+                    }
+                    const bytes = Buffer.from(body.subarray(offset, offset + length));
+                    if ((0, node_crypto_1.createHash)("sha256").update(bytes).digest("hex") !== member.sha256) {
+                        throw new Error(`${member.path} did not arrive intact`);
+                    }
+                    await visit(member, { bytes });
+                }
+            }
+            for (const file of single) {
+                this.check();
+                const digest = await this.fetchInto(repositoryId, versionId, file, temporary);
+                if (digest !== file.sha256)
+                    throw new Error(`${file.path} did not arrive intact`);
+                await visit(file, { path: temporary });
+                await (0, promises_1.rm)(temporary, { force: true });
+            }
+        }
+        finally {
+            await (0, promises_1.rm)(temporary, { force: true });
+        }
+    }
     async fetchInto(repositoryId, versionId, file, target) {
         const whole = (0, node_crypto_1.createHash)("sha256");
         /*

package/dist/{desktop-app/src/main → cbx/src/core}/rules.js

@@ -17,6 +17,8 @@ exports.UNCOUNTED_DIRECTORIES = new Set([
     ".hg",
     ".svn",
     ".coderook",
+    /* The local history `cbx init` keeps; saving it into itself would never end. */
+    ".cbx",
 ]);
 /**
  * Whether an entry is version-control plumbing rather than project content.