@codyswann/lisa 4.17.19 → 4.18.0

package/dist/cli/ui-config-write-persistence.js

@@ -0,0 +1,294 @@
+/**
+ * @file ui-config-write-persistence.ts
+ * @description Safe, surgical persistence for localhost UI config writes.
+ *
+ * Requests are serialized across processes because both config files are
+ * shared read-modify-write state. Every request snapshots, reconciles, and
+ * validates both files before publishing either one. Canonical-path and
+ * filesystem-identity checks fail closed when a project root or ancestor is
+ * replaced at a checked boundary. Node has no portable descriptor-relative
+ * temp-create/rename API, so a same-user swap inside the final check-to-use gap
+ * remains possible. The two final renames also cannot form one filesystem
+ * transaction, so a failure between them can leave the first target published.
+ * @module cli/ui-config-write-persistence
+ */
+import { createHash } from "node:crypto";
+import { lstat, mkdir, open, realpath, } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import * as path from "node:path";
+import { withFileTargetLock } from "../core/learnings-lock.js";
+import { writeFileAtomically } from "../utils/atomic-file-write.js";
+import { parseConfigDocument, renderConfigChanges, } from "./ui-config-write-document.js";
+import { assertProjectRootIdentity, requireCanonicalProjectRoot, } from "./ui-config-write-root-identity.js";
+import { provenanceRemovals } from "./ui-config-write-provenance.js";
+const CONFIG_FILE = ".lisa.config.json";
+const LOCAL_CONFIG_FILE = ".lisa.config.local.json";
+const MAX_CONFIG_BYTES = 128 * 1024;
+const READ_CHUNK_BYTES = 16 * 1024;
+const WRITE_PERMISSION_BITS = 0o222;
+const LOCK_DIRECTORY_PRIVATE_BITS = 0o077;
+const LOCK_DIRECTORY_MODE = 0o700;
+const CONFIG_LOCK_DIRECTORY = path.join(tmpdir(), `lisa-ui-config-write-${process.getuid?.() ?? "user"}`);
+const configWriteQueues = new Map();
+/**
+ * Persist one pre-classified request under the project write queue.
+ * @param destDir - Project root containing the two fixed config filenames
+ * @param changes - Changes split by committed versus local ownership
+ * @param validateCommitted - Registry validation applied before either write
+ * @returns Prospective committed config only; local values are never echoed
+ */
+export async function persistRoutedConfigChanges(destDir, changes, validateCommitted) {
+    const projectRoot = await requireCanonicalProjectRoot(destDir);
+    const lockTarget = await resolveConfigLockTarget(projectRoot.path);
+    return await withConfigWriteLock(projectRoot.path, async () => await withFileTargetLock(lockTarget, async () => {
+        await assertProjectRootIdentity(projectRoot);
+        const committedTarget = path.join(projectRoot.path, CONFIG_FILE);
+        const localTarget = path.join(projectRoot.path, LOCAL_CONFIG_FILE);
+        const [committedSnapshot, localSnapshot] = await Promise.all([
+            readConfigSnapshot(committedTarget, CONFIG_FILE, projectRoot),
+            readConfigSnapshot(localTarget, LOCAL_CONFIG_FILE, projectRoot),
+        ]);
+        await assertProjectRootIdentity(projectRoot);
+        const committed = prepareConfig(committedSnapshot, Object.keys(changes.local), changes.committed, provenanceRemovals(changes.committed));
+        const local = prepareConfig(localSnapshot, Object.keys(changes.committed), changes.local);
+        assertPreparedSize(committed);
+        assertPreparedSize(local);
+        validateCommitted(committed.document);
+        await assertProjectRootIdentity(projectRoot);
+        assertWritableWhenChanged(committed);
+        assertWritableWhenChanged(local);
+        await publishPrepared(committed, false, projectRoot);
+        await assertProjectRootIdentity(projectRoot);
+        await publishPrepared(local, true, projectRoot);
+        await assertProjectRootIdentity(projectRoot);
+        return committed.document;
+    }));
+}
+/**
+ * Derive a private, repository-external lock identity from the canonical root.
+ *
+ * The lock cannot live beside either config: the committed file would leave
+ * transient untracked state, while the local file's exact ignore rule does not
+ * cover an adjacent `.lock`. A user-private temp directory keeps lock metadata
+ * outside version control; hashing avoids publishing project paths there.
+ * @param projectRoot - Canonical project directory
+ * @returns Hardened lock primitive target shared by every alias and process
+ */
+async function resolveConfigLockTarget(projectRoot) {
+    await mkdir(CONFIG_LOCK_DIRECTORY, {
+        recursive: true,
+        mode: LOCK_DIRECTORY_MODE,
+    });
+    const metadata = await lstat(CONFIG_LOCK_DIRECTORY);
+    const currentUid = process.getuid?.();
+    if (!metadata.isDirectory() ||
+        metadata.isSymbolicLink() ||
+        (currentUid !== undefined && metadata.uid !== currentUid) ||
+        (process.platform !== "win32" &&
+            (metadata.mode & LOCK_DIRECTORY_PRIVATE_BITS) !== 0)) {
+        throw new Error("Unsafe UI config lock directory");
+    }
+    const canonicalLockDirectory = await realpath(CONFIG_LOCK_DIRECTORY);
+    const identity = createHash("sha256").update(projectRoot).digest("hex");
+    return path.join(canonicalLockDirectory, identity);
+}
+/**
+ * Serialize whole mixed-file transactions per canonical project root.
+ * @param projectRoot - Absolute project root used as the queue identity
+ * @param operation - Complete snapshot, validate, and publish transaction
+ * @returns Operation result after all earlier writes settle
+ */
+async function withConfigWriteLock(projectRoot, operation) {
+    const previous = configWriteQueues.get(projectRoot) ?? Promise.resolve();
+    const running = previous.catch(() => undefined).then(operation);
+    const marker = running.then(() => undefined, () => undefined);
+    // eslint-disable-next-line functional/immutable-data -- per-project async queue
+    configWriteQueues.set(projectRoot, marker);
+    try {
+        return await running;
+    }
+    finally {
+        if (configWriteQueues.get(projectRoot) === marker) {
+            // eslint-disable-next-line functional/immutable-data -- completed queue slot
+            configWriteQueues.delete(projectRoot);
+        }
+    }
+}
+/**
+ * Capture a bounded regular file without following a symlink or special entry.
+ * @param target - Fixed config path inside the project root
+ * @param filename - Public filename used only in safe diagnostics
+ * @param projectRoot - Anchored directory identity checked around file access
+ * @returns Existing strict-JSON image, or an empty absent-file image
+ */
+async function readConfigSnapshot(target, filename, projectRoot) {
+    try {
+        await assertProjectRootIdentity(projectRoot);
+        const before = await lstat(target);
+        if (!before.isFile()) {
+            throw new Error(`${filename} must be a regular file`);
+        }
+        if (before.size > MAX_CONFIG_BYTES) {
+            throw new Error(`${filename} exceeds the 128 KiB safety limit`);
+        }
+        const handle = await open(target, "r");
+        try {
+            const opened = await handle.stat();
+            if (!opened.isFile() ||
+                opened.dev !== before.dev ||
+                opened.ino !== before.ino) {
+                throw new Error(`${filename} changed while it was opened`);
+            }
+            const bytes = await readBounded(handle);
+            const after = await handle.stat();
+            if (after.dev !== opened.dev ||
+                after.ino !== opened.ino ||
+                after.size !== bytes.byteLength) {
+                throw new Error(`${filename} changed while it was read`);
+            }
+            const text = decodeUtf8(bytes, filename);
+            const parsed = parseConfigDocument(text, filename);
+            await assertProjectRootIdentity(projectRoot);
+            return {
+                target,
+                filename,
+                bytes,
+                text,
+                document: parsed,
+                mode: before.mode & 0o7777,
+            };
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    catch (error) {
+        if (error.code === "ENOENT") {
+            await assertProjectRootIdentity(projectRoot);
+            return {
+                target,
+                filename,
+                bytes: undefined,
+                text: "{}\n",
+                document: {},
+                mode: undefined,
+            };
+        }
+        throw error;
+    }
+}
+/**
+ * Decode without replacement characters so a write can never normalize unsafe
+ * source bytes into a different valid document.
+ * @param bytes - Exact bounded file image
+ * @param filename - Safe fixed filename used in diagnostics
+ * @returns Valid UTF-8 text
+ */
+function decodeUtf8(bytes, filename) {
+    try {
+        return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    }
+    catch {
+        throw new Error(`${filename} must contain valid UTF-8`);
+    }
+}
+/**
+ * Read no more than the configured limit plus one sentinel byte.
+ * @param handle - Already inode-verified regular-file handle
+ * @param position - Next byte offset, used by bounded recursive reads
+ * @param chunks - Immutable chunks collected so far
+ * @returns Exact file bytes when within the safety limit
+ */
+async function readBounded(handle, position = 0, chunks = []) {
+    if (position > MAX_CONFIG_BYTES) {
+        throw new Error("Config file exceeds the 128 KiB safety limit");
+    }
+    const remaining = MAX_CONFIG_BYTES + 1 - position;
+    const buffer = Buffer.alloc(Math.min(READ_CHUNK_BYTES, remaining));
+    const { bytesRead } = await handle.read(buffer, 0, buffer.length, position);
+    if (bytesRead === 0) {
+        return Buffer.concat(chunks, position);
+    }
+    return await readBounded(handle, position + bytesRead, [
+        ...chunks,
+        buffer.subarray(0, bytesRead),
+    ]);
+}
+/**
+ * Apply ordered dot-path edits while preserving untouched source bytes.
+ * @param snapshot - Strict JSON source image
+ * @param removals - Owner paths that must not remain in this non-owner file
+ * @param changes - Routed values for this one target
+ * @param exactRemovals - Exact property paths whose segments may contain dots
+ * @returns Rendered text plus the matching prospective object
+ */
+function prepareConfig(snapshot, removals, changes, exactRemovals = []) {
+    return {
+        snapshot,
+        ...renderConfigChanges(snapshot, removals, changes, exactRemovals),
+    };
+}
+/**
+ * Refuse replacement of an existing target whose owner intentionally removed
+ * every write bit; directory-level rename permission must not bypass that
+ * policy, and a mixed request must fail before its first publish.
+ * @param prepared - Fully rendered target awaiting publication
+ */
+function assertWritableWhenChanged(prepared) {
+    if (prepared.changed &&
+        prepared.snapshot.mode !== undefined &&
+        (prepared.snapshot.mode & WRITE_PERMISSION_BITS) === 0) {
+        throw new Error(`${prepared.snapshot.filename} is read-only`);
+    }
+}
+/**
+ * Bound the rendered image, not only the source snapshot. Surgical insertion
+ * can grow a previously valid file, and both targets must be rejected before
+ * the first publish if either prospective image crosses the shared limit.
+ * @param prepared - Fully rendered target awaiting publication
+ */
+function assertPreparedSize(prepared) {
+    if (Buffer.byteLength(prepared.text, "utf8") > MAX_CONFIG_BYTES) {
+        throw new Error(`${prepared.snapshot.filename} exceeds the 128 KiB safety limit`);
+    }
+}
+/**
+ * Atomically publish a changed target after proving its source image is fresh.
+ * A mode change is part of that image because restoring snapshot permissions
+ * would otherwise undo a concurrent hardening even when the bytes still match.
+ * @param prepared - Rendered target and its original snapshot
+ * @param local - Whether a new file must be restricted to owner-only access
+ * @param projectRoot - Anchored directory identity checked around publication
+ */
+async function publishPrepared(prepared, local, projectRoot) {
+    if (!prepared.changed)
+        return;
+    const mode = prepared.snapshot.mode ?? (local ? 0o600 : undefined);
+    await assertProjectRootIdentity(projectRoot);
+    await writeFileAtomically(prepared.snapshot.target, prepared.text, {
+        ...(mode === undefined ? {} : { mode }),
+        beforeRename: async () => {
+            await assertProjectRootIdentity(projectRoot);
+            const current = await readConfigSnapshot(prepared.snapshot.target, prepared.snapshot.filename, projectRoot);
+            if (!sameBytes(current.bytes, prepared.snapshot.bytes) ||
+                current.mode !== prepared.snapshot.mode) {
+                throw new Error(`${prepared.snapshot.filename} changed before atomic replacement`);
+            }
+            await assertProjectRootIdentity(projectRoot);
+        },
+    });
+    await assertProjectRootIdentity(projectRoot);
+}
+/**
+ * Compare absent/present source images without coercing UTF-8 bytes.
+ * @param current - Bytes observed immediately before replacement
+ * @param original - Bytes used to render the prospective document
+ * @returns Whether the target still contains the exact source image
+ */
+function sameBytes(current, original) {
+    if (current === undefined || original === undefined) {
+        return current === original;
+    }
+    return current.equals(original);
+}
+//# sourceMappingURL=ui-config-write-persistence.js.map

package/dist/cli/ui-config-write-persistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-config-write-persistence.js","sourceRoot":"","sources":["../../src/cli/ui-config-write-persistence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,KAAK,EACL,KAAK,EACL,IAAI,EACJ,QAAQ,GAET,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,yBAAyB,EACzB,2BAA2B,GAE5B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AACpD,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC;AACpC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAC1C,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,MAAM,qBAAqB,GAAG,IAAI,CAAC,IAAI,CACrC,MAAM,EAAE,EACR,wBAAwB,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,MAAM,EAAE,CACvD,CAAC;AACF,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAyB,CAAC;AA+B3D;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAe,EACf,OAA4B,EAC5B,iBAA0C;IAE1C,MAAM,WAAW,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACnE,OAAO,MAAM,mBAAmB,CAC9B,WAAW,CAAC,IAAI,EAChB,KAAK,IAAI,EAAE,CACT,MAAM,kBAAkB,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACjE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACnE,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3D,kBAAkB,CAAC,eAAe,EAAE,WAAW,EAAE,WAAW,CAAC;YAC7D,kBAAkB,CAAC,WAAW,EAAE,iBAAiB,EAAE,WAAW,CAAC;SAChE,CAAC,CAAC;QACH,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,aAAa,CAC7B,iBAAiB,EACjB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAC1B,OAAO,CAAC,SAAS,EACjB,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,CACtC,CAAC;QACF,MAAM,KAAK,GAAG,aAAa,CACzB,aAAa,EACb,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAC9B,OAAO,CAAC,KAAK,CACd,CAAC;QAEF,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC9B,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC1B,iBAAiB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;QAC7C,yBAAyB,CAAC,SAAS,CAAC,CAAC;QACrC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,eAAe,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QACrD,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QAChD,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;QAC7C,OAAO,SAAS,CAAC,QAAQ,CAAC;IAC5B,CAAC,CAAC,CACL,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,uBAAuB,CAAC,WAAmB;IACxD,MAAM,KAAK,CAAC,qBAAqB,EAAE;QACjC,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,mBAAmB;KAC1B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IACtC,IACE,CAAC,QAAQ,CAAC,WAAW,EAAE;QACvB,QAAQ,CAAC,cAAc,EAAE;QACzB,CAAC,UAAU,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,KAAK,UAAU,CAAC;QACzD,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC3B,CAAC,QAAQ,CAAC,IAAI,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC,EACtD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,sBAAsB,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB,CAChC,WAAmB,EACnB,SAA2B;IAE3B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACzE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;IACF,gFAAgF;IAChF,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,IAAI,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,MAAM,EAAE,CAAC;YAClD,6EAA6E;YAC7E,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB,CAC/B,MAAc,EACd,QAAgB,EAChB,WAAgC;IAEhC,IAAI,CAAC;QACH,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,yBAAyB,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,GAAG,gBAAgB,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,mCAAmC,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,IACE,CAAC,MAAM,CAAC,MAAM,EAAE;gBAChB,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;gBACzB,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,EACzB,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,8BAA8B,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,IACE,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;gBACxB,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;gBACxB,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,UAAU,EAC/B,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,4BAA4B,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACnD,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;YAC7C,OAAO;gBACL,MAAM;gBACN,QAAQ;gBACR,KAAK;gBACL,IAAI;gBACJ,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,MAAM,CAAC,IAAI,GAAG,MAAM;aAC3B,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;YAC7C,OAAO;gBACL,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,EAAE;gBACZ,IAAI,EAAE,SAAS;aAChB,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,KAAa,EAAE,QAAgB;IACjD,IAAI,CAAC;QACH,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,2BAA2B,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,WAAW,CACxB,MAAkB,EAClB,QAAQ,GAAG,CAAC,EACZ,SAA4B,EAAE;IAE9B,IAAI,QAAQ,GAAG,gBAAgB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,SAAS,GAAG,gBAAgB,GAAG,CAAC,GAAG,QAAQ,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC,CAAC;IACnE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5E,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,WAAW,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,EAAE;QACrD,GAAG,MAAM;QACT,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CACpB,QAAwB,EACxB,QAA2B,EAC3B,OAA4C,EAC5C,gBAAgD,EAAE;IAElD,OAAO;QACL,QAAQ;QACR,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC;KACnE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,yBAAyB,CAAC,QAAwB;IACzD,IACE,QAAQ,CAAC,OAAO;QAChB,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS;QACpC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,qBAAqB,CAAC,KAAK,CAAC,EACtD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,eAAe,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,QAAwB;IAClD,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,gBAAgB,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,mCAAmC,CACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAC5B,QAAwB,EACxB,KAAc,EACd,WAAgC;IAEhC,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO;IAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE;QACjE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,YAAY,EAAE,KAAK,IAAI,EAAE;YACvB,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,MAAM,kBAAkB,CACtC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EACxB,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAC1B,WAAW,CACZ,CAAC;YACF,IACE,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAClD,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,QAAQ,CAAC,IAAI,EACvC,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,oCAAoC,CAClE,CAAC;YACJ,CAAC;YACD,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;QAC/C,CAAC;KACF,CAAC,CAAC;IACH,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAChB,OAA2B,EAC3B,QAA4B;IAE5B,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpD,OAAO,OAAO,KAAK,QAAQ,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC"}

package/dist/cli/ui-config-write-property-edits.d.ts

@@ -0,0 +1,40 @@
+/**
+ * @file ui-config-write-property-edits.ts
+ * @description Minimal strict-JSON property edits against original source offsets.
+ * @module cli/ui-config-write-property-edits
+ */
+import { type Edit as JsonTextEdit, type Node as JsonNode } from "jsonc-parser";
+import type { JsonValue } from "../sync/json-path.js";
+/** One minimal source-relative property mutation after overlap collapse. */
+export interface ConfigPatch {
+    /** Original syntax-tree path to replace, remove, or insert. */
+    readonly path: readonly string[];
+    /** Final value, or undefined when the property must be absent. */
+    readonly value: JsonValue | undefined;
+    /** Stable request order used for grouped insertions. */
+    readonly order: number;
+}
+/** Direct child mutations sharing one original object node. */
+export interface ObjectPatchGroup {
+    /** Original path of the object containing the direct children. */
+    readonly parentPath: readonly string[];
+    /** Direct property names to remove. */
+    readonly removals: readonly string[];
+    /** Missing direct properties to insert in request order. */
+    readonly insertions: readonly ConfigPatch[];
+}
+/**
+ * Plan direct child changes inside one original object.
+ * @param text - Original strict JSON text
+ * @param tree - Original syntax tree
+ * @param group - Direct removals and insertions for one object
+ * @returns Minimal edits for this object, all against original offsets
+ */
+export declare function planObjectPatchEdits(text: string, tree: JsonNode, group: ObjectPatchGroup): readonly JsonTextEdit[];
+/**
+ * Serialize a JSON value while refusing the impossible `undefined` result.
+ * @param value - Registry-validated JSON value
+ * @returns Strict JSON syntax for only the targeted value span
+ */
+export declare function serializeConfigValue(value: JsonValue): string;
+//# sourceMappingURL=ui-config-write-property-edits.d.ts.map

package/dist/cli/ui-config-write-property-edits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-config-write-property-edits.d.ts","sourceRoot":"","sources":["../../src/cli/ui-config-write-property-edits.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAEL,KAAK,IAAI,IAAI,YAAY,EACzB,KAAK,IAAI,IAAI,QAAQ,EACtB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtD,4EAA4E;AAC5E,MAAM,WAAW,WAAW;IAC1B,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAAC;IACtC,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,+DAA+D;AAC/D,MAAM,WAAW,gBAAgB;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,uCAAuC;IACvC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,EAAE,SAAS,WAAW,EAAE,CAAC;CAC7C;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,gBAAgB,GACtB,SAAS,YAAY,EAAE,CA+BzB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAM7D"}

package/dist/cli/ui-config-write-property-edits.js

@@ -0,0 +1,250 @@
+/**
+ * @file ui-config-write-property-edits.ts
+ * @description Minimal strict-JSON property edits against original source offsets.
+ * @module cli/ui-config-write-property-edits
+ */
+import { findNodeAtLocation, } from "jsonc-parser";
+/**
+ * Plan direct child changes inside one original object.
+ * @param text - Original strict JSON text
+ * @param tree - Original syntax tree
+ * @param group - Direct removals and insertions for one object
+ * @returns Minimal edits for this object, all against original offsets
+ */
+export function planObjectPatchEdits(text, tree, group) {
+    const objectNode = findObjectNode(tree, group.parentPath);
+    const properties = objectNode.children ?? [];
+    const kept = properties.filter(property => !group.removals.includes(propertyKey(property)));
+    if (properties.length > 0 &&
+        kept.length === 0 &&
+        group.insertions.length > 0) {
+        const first = requireNode(properties[0]);
+        const last = requireNode(properties.at(-1));
+        return [
+            {
+                offset: first.offset,
+                length: nodeEnd(last) - first.offset,
+                content: renderInsertedProperties(text, objectNode, group.insertions),
+            },
+        ];
+    }
+    return [
+        ...planPropertyRemovals(text, properties, group.removals),
+        ...planPropertyInsertions(text, objectNode, properties, kept, group.insertions),
+    ];
+}
+/**
+ * Serialize a JSON value while refusing the impossible `undefined` result.
+ * @param value - Registry-validated JSON value
+ * @returns Strict JSON syntax for only the targeted value span
+ */
+export function serializeConfigValue(value) {
+    const serialized = JSON.stringify(value);
+    if (serialized === undefined) {
+        throw new Error("Config value is not JSON-serializable");
+    }
+    return serialized;
+}
+/**
+ * Resolve and require an original object node at a property path.
+ * @param tree - Original strict-JSON syntax tree
+ * @param path - Object property path
+ * @returns Original object node at that path
+ */
+function findObjectNode(tree, path) {
+    const node = path.length === 0 ? tree : findNodeAtLocation(tree, [...path]);
+    if (node?.type !== "object") {
+        throw new Error("Config surgical edit parent is not an object");
+    }
+    return node;
+}
+/**
+ * Require a syntax node that an earlier length check proved exists.
+ * @param node - Candidate property node
+ * @returns Present node or a deterministic planning failure
+ */
+function requireNode(node) {
+    if (node === undefined) {
+        throw new Error("Config surgical edit lost its source property");
+    }
+    return node;
+}
+/**
+ * Read a property node's decoded key.
+ * @param property - Original direct property node
+ * @returns Decoded strict-JSON property name
+ */
+function propertyKey(property) {
+    const key = property.children?.[0]?.value;
+    if (property.type !== "property" || typeof key !== "string") {
+        throw new Error("Config surgical edit encountered an invalid property");
+    }
+    return key;
+}
+/**
+ * Compute a node's exclusive original-text end offset.
+ * @param node - Original syntax-tree node
+ * @returns First source offset after the node
+ */
+function nodeEnd(node) {
+    return node.offset + node.length;
+}
+/**
+ * Delete consecutive target properties with one delimiter-aware edit per run.
+ * @param text - Original strict JSON text
+ * @param properties - Direct properties in original source order
+ * @param removalKeys - Direct keys absent from the prospective object
+ * @returns Non-overlapping deletions that retain every kept property byte
+ */
+function planPropertyRemovals(text, properties, removalKeys) {
+    const indices = properties
+        .map((property, index) => removalKeys.includes(propertyKey(property)) ? index : -1)
+        .filter(index => index >= 0);
+    const runs = indices.reduce((result, index) => {
+        const previous = result.at(-1);
+        return previous !== undefined && previous[1] + 1 === index
+            ? [...result.slice(0, -1), [previous[0], index]]
+            : [...result, [index, index]];
+    }, []);
+    return runs.map(([firstIndex, lastIndex]) => {
+        const first = requireNode(properties[firstIndex]);
+        const last = requireNode(properties[lastIndex]);
+        const next = properties[lastIndex + 1];
+        if (next !== undefined) {
+            return {
+                offset: first.offset,
+                length: next.offset - first.offset,
+                content: "",
+            };
+        }
+        const previous = properties[firstIndex - 1];
+        if (previous === undefined) {
+            return {
+                offset: first.offset,
+                length: nodeEnd(last) - first.offset,
+                content: "",
+            };
+        }
+        const comma = requireComma(text, nodeEnd(previous), first.offset);
+        return { offset: comma, length: nodeEnd(last) - comma, content: "" };
+    });
+}
+/**
+ * Locate the strict-JSON comma separating adjacent property nodes.
+ * @param text - Original strict JSON text
+ * @param start - End offset of the preceding property
+ * @param end - Start offset of the following property
+ * @returns Comma offset between those properties
+ */
+function requireComma(text, start, end) {
+    const comma = text.indexOf(",", start);
+    if (comma === -1 || comma >= end) {
+        throw new Error("Config surgical edit could not locate a property comma");
+    }
+    return comma;
+}
+/**
+ * Insert missing properties beside a retained anchor or inside an empty object.
+ * @param text - Original strict JSON text
+ * @param objectNode - Original parent object
+ * @param properties - All original direct properties
+ * @param kept - Direct properties not removed by this transaction
+ * @param insertions - Missing properties with final prospective values
+ * @returns Zero or one source-relative insertion
+ */
+function planPropertyInsertions(text, objectNode, properties, kept, insertions) {
+    if (insertions.length === 0)
+        return [];
+    const content = renderInsertedProperties(text, objectNode, insertions);
+    const anchor = kept.at(-1);
+    if (anchor !== undefined) {
+        return [
+            {
+                offset: nodeEnd(anchor),
+                length: 0,
+                content: `${inferPropertySeparator(text, objectNode, properties)}${content}`,
+            },
+        ];
+    }
+    const interior = text.slice(objectNode.offset + 1, nodeEnd(objectNode) - 1);
+    const prefix = interior.includes("\n")
+        ? `${inferEol(text)}${inferChildIndent(text, objectNode)}`
+        : "";
+    return [
+        {
+            offset: objectNode.offset + 1,
+            length: 0,
+            content: `${prefix}${content}`,
+        },
+    ];
+}
+/**
+ * Render only new property syntax; existing property text never enters here.
+ * @param text - Original strict JSON text
+ * @param objectNode - Parent object supplying separator style
+ * @param insertions - Missing properties in stable request order
+ * @returns Strict JSON property fragments
+ */
+function renderInsertedProperties(text, objectNode, insertions) {
+    const separator = inferPropertySeparator(text, objectNode, objectNode.children ?? []);
+    return insertions
+        .map(patch => {
+        const key = patch.path.at(-1);
+        if (key === undefined || patch.value === undefined) {
+            throw new Error("Config insertion is missing a property value");
+        }
+        return `${JSON.stringify(key)}: ${serializeConfigValue(patch.value)}`;
+    })
+        .join(separator);
+}
+/**
+ * Reuse an original property separator, falling back to inferred indentation.
+ * @param text - Original strict JSON text
+ * @param objectNode - Parent object supplying the fallback style
+ * @param properties - Original direct properties
+ * @returns Comma plus whitespace before the next property
+ */
+function inferPropertySeparator(text, objectNode, properties) {
+    const [first, second] = properties;
+    if (first !== undefined && second !== undefined) {
+        const comma = requireComma(text, nodeEnd(first), second.offset);
+        return text.slice(comma, second.offset);
+    }
+    if (first === undefined)
+        return ",";
+    const prefix = text.slice(objectNode.offset + 1, first.offset);
+    if (prefix.includes("\n")) {
+        return `,${inferEol(text)}${lineIndentAt(text, first.offset)}`;
+    }
+    return prefix.length > 0 ? `,${prefix}` : ",";
+}
+/**
+ * Infer the original newline sequence without normalizing source bytes.
+ * @param text - Original strict JSON text
+ * @returns CRLF when present, otherwise LF
+ */
+function inferEol(text) {
+    return text.includes("\r\n") ? "\r\n" : "\n";
+}
+/**
+ * Read exact indentation immediately before a node on its source line.
+ * @param text - Original strict JSON text
+ * @param offset - Node start offset
+ * @returns Whitespace-only line prefix, or empty for inline nodes
+ */
+function lineIndentAt(text, offset) {
+    const lineStart = text.lastIndexOf("\n", offset - 1) + 1;
+    const prefix = text.slice(lineStart, offset);
+    return /^[ \t]*$/u.test(prefix) ? prefix : "";
+}
+/**
+ * Infer one child indentation level for a genuinely empty multiline object.
+ * @param text - Original strict JSON text
+ * @param objectNode - Empty object receiving its first property
+ * @returns Parent indentation plus the document's indentation unit
+ */
+function inferChildIndent(text, objectNode) {
+    const indentation = /\r?\n([ \t]+)"/u.exec(text)?.[1] ?? "  ";
+    return `${lineIndentAt(text, objectNode.offset)}${indentation}`;
+}
+//# sourceMappingURL=ui-config-write-property-edits.js.map

package/dist/cli/ui-config-write-property-edits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-config-write-property-edits.js","sourceRoot":"","sources":["../../src/cli/ui-config-write-property-edits.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,kBAAkB,GAGnB,MAAM,cAAc,CAAC;AAuBtB;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,IAAc,EACd,KAAuB;IAEvB,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAC5B,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAC5D,CAAC;IACF,IACE,UAAU,CAAC,MAAM,GAAG,CAAC;QACrB,IAAI,CAAC,MAAM,KAAK,CAAC;QACjB,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAC3B,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,OAAO;YACL;gBACE,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM;gBACpC,OAAO,EAAE,wBAAwB,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC;aACtE;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC;QACzD,GAAG,sBAAsB,CACvB,IAAI,EACJ,UAAU,EACV,UAAU,EACV,IAAI,EACJ,KAAK,CAAC,UAAU,CACjB;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAgB;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,IAAc,EAAE,IAAuB;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC5E,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAA0B;IAC7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,QAAkB;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IAC1C,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO,CAAC,IAAc;IAC7B,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAC3B,IAAY,EACZ,UAA+B,EAC/B,WAA8B;IAE9B,MAAM,OAAO,GAAG,UAAU;SACvB,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CACvB,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CACzD;SACA,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CACzB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAChB,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK;YACxD,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,CAAU,CAAC;YACzD,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,CAAU,CAAC,CAAC;IAC3C,CAAC,EACD,EAAE,CACH,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO;gBACL,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;gBAClC,OAAO,EAAE,EAAE;aACZ,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO;gBACL,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM;gBACpC,OAAO,EAAE,EAAE;aACZ,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAClE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAC7B,IAAY,EACZ,UAAoB,EACpB,UAA+B,EAC/B,IAAyB,EACzB,UAAkC;IAElC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO;YACL;gBACE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;gBACvB,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,GAAG,sBAAsB,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,OAAO,EAAE;aAC7E;SACF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE;QAC1D,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL;YACE,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;YAC7B,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,GAAG,MAAM,GAAG,OAAO,EAAE;SAC/B;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,wBAAwB,CAC/B,IAAY,EACZ,UAAoB,EACpB,UAAkC;IAElC,MAAM,SAAS,GAAG,sBAAsB,CACtC,IAAI,EACJ,UAAU,EACV,UAAU,CAAC,QAAQ,IAAI,EAAE,CAC1B,CAAC;IACF,OAAO,UAAU;SACd,GAAG,CAAC,KAAK,CAAC,EAAE;QACX,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;IACxE,CAAC,CAAC;SACD,IAAI,CAAC,SAAS,CAAC,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAC7B,IAAY,EACZ,UAAoB,EACpB,UAA+B;IAE/B,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,UAAU,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,IAAY,EAAE,MAAc;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,UAAoB;IAC1D,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC9D,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;AAClE,CAAC"}

package/dist/cli/ui-config-write-provenance.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Provenance cleanup routing for human-authored UI config writes.
+ * @module cli/ui-config-write-provenance
+ */
+import type { JsonValue } from "../sync/json-path.js";
+/**
+ * Resolve descendant human edits to literal registry-owner provenance paths.
+ * @param changes - Committed registry-root or descendant edits
+ * @returns Unique exact paths under `_lisaSync.populated`
+ */
+export declare function provenanceRemovals(changes: Readonly<Record<string, JsonValue>>): readonly (readonly string[])[];
+//# sourceMappingURL=ui-config-write-provenance.d.ts.map

package/dist/cli/ui-config-write-provenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-config-write-provenance.d.ts","sourceRoot":"","sources":["../../src/cli/ui-config-write-provenance.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAItD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,GAC3C,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAKhC"}

package/dist/cli/ui-config-write-provenance.js

@@ -0,0 +1,29 @@
+import { SYNC_REGISTRY } from "../sync/registry.js";
+import { populationPropertyPath } from "../sync/sync-population.js";
+/**
+ * Resolve descendant human edits to literal registry-owner provenance paths.
+ * @param changes - Committed registry-root or descendant edits
+ * @returns Unique exact paths under `_lisaSync.populated`
+ */
+export function provenanceRemovals(changes) {
+    const owners = Object.keys(changes)
+        .map(syncOwnerKey)
+        .filter((owner) => owner !== undefined);
+    return [...new Set(owners)].map(populationPropertyPath);
+}
+/**
+ * Find the most specific registry owner for one already-routed key.
+ * @param key - Registry root or descendant dot path
+ * @returns Owning registry key, when present
+ */
+function syncOwnerKey(key) {
+    return SYNC_REGISTRY.reduce((owner, entry) => {
+        if (key !== entry.key && !key.startsWith(`${entry.key}.`)) {
+            return owner;
+        }
+        return owner === undefined || entry.key.length > owner.length
+            ? entry.key
+            : owner;
+    }, undefined);
+}
+//# sourceMappingURL=ui-config-write-provenance.js.map