@codyswann/lisa 4.60.12 → 4.61.0

package/dist/cli/starter-sync-content.d.ts

@@ -0,0 +1,25 @@
+import type { TemplateCandidate } from "../health/template-inspection.js";
+import type { StarterChange } from "./starter-sync-source.js";
+/**
+ * Resolve canonical markers; markerless copy-contents uses whole-file ownership.
+ * @param candidates - Applicable copy-contents template sources.
+ * @returns Distinct governed opening markers.
+ */
+export declare function starterBlockMarkers(candidates: readonly TemplateCandidate[]): Promise<readonly string[]>;
+/**
+ * Apply only the blocks governed by the existing canonical template sources.
+ * @param change - Exact before/after starter file.
+ * @param current - Existing consumer bytes.
+ * @param markers - Canonical opening markers for this path.
+ * @returns Updated bytes, preserving all consumer content outside those blocks.
+ */
+export declare function mergeStarterBlocks(change: StarterChange, current: Buffer | undefined, markers: readonly string[]): Promise<Buffer>;
+/**
+ * Reuse Lisa's JSON strategies for paths governed by JSON merge semantics.
+ * @param change - Pinned starter JSON file.
+ * @param current - Existing consumer bytes.
+ * @param candidates - Applicable JSON strategies in canonical order.
+ * @returns Merged bytes; source removal preserves the consumer's JSON document.
+ */
+export declare function mergeStarterJson(change: StarterChange, current: Buffer | undefined, candidates: readonly TemplateCandidate[]): Buffer | undefined;
+//# sourceMappingURL=starter-sync-content.d.ts.map

package/dist/cli/starter-sync-content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"starter-sync-content.d.ts","sourceRoot":"","sources":["../../src/cli/starter-sync-content.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAQ1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAyD9D;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,SAAS,iBAAiB,EAAE,GACvC,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAW5B;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,OAAO,CAAC,MAAM,CAAC,CAejB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,UAAU,EAAE,SAAS,iBAAiB,EAAE,GACvC,MAAM,GAAG,SAAS,CAiBpB"}

package/dist/cli/starter-sync-content.js

@@ -0,0 +1,106 @@
+import { readFile } from "node:fs/promises";
+import { findCopyContentsBlock, mergeCopyContents, } from "../strategies/copy-contents.js";
+import { mergeTemplateJson } from "../strategies/merge.js";
+import { TaggedMergeStrategy } from "../strategies/tagged-merge.js";
+import { isJsonObject } from "../sync/json-path.js";
+const BEGIN = "# BEGIN: AI GUARDRAILS";
+const END = "# END: AI GUARDRAILS";
+/**
+ * Decode managed text without silently replacing invalid bytes.
+ * @param bytes - File payload, if the path exists.
+ * @returns Strict UTF-8 content.
+ */
+function text(bytes) {
+    return bytes === undefined
+        ? ""
+        : new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+}
+/**
+ * Extract one complete marker pair without importing outside starter content.
+ * @param content - Flat starter or consumer file.
+ * @param begin - Canonical Lisa template's opening marker.
+ * @returns Normalized managed block, or undefined when absent.
+ */
+function block(content, begin) {
+    const end = END + begin.slice(BEGIN.length);
+    const lines = content.split(/\r?\n/u);
+    const starts = lines.flatMap((line, index) => line === begin ? [index] : []);
+    const ends = lines.flatMap((line, index) => (line === end ? [index] : []));
+    if (starts.length === 0 && ends.length === 0)
+        return undefined;
+    if (starts.length !== 1 || ends.length !== 1 || starts[0] >= ends[0]) {
+        throw new Error("Incomplete or ambiguous starter managed block");
+    }
+    return lines.slice(starts[0], ends[0] + 1).join("\n");
+}
+/**
+ * Replace or remove a verified managed block while retaining outside bytes.
+ * @param current - Consumer content.
+ * @param begin - Canonical opening marker.
+ * @param replacement - New block, or undefined for removal.
+ * @returns Updated content.
+ */
+function replaceBlock(current, begin, replacement) {
+    if (replacement !== undefined)
+        return mergeCopyContents(`${replacement}\n`, current);
+    const end = END + begin.slice(BEGIN.length);
+    const offsets = findCopyContentsBlock(current, begin, end);
+    return offsets === undefined
+        ? current
+        : current.slice(0, offsets.start) + current.slice(offsets.end);
+}
+/**
+ * Resolve canonical markers; markerless copy-contents uses whole-file ownership.
+ * @param candidates - Applicable copy-contents template sources.
+ * @returns Distinct governed opening markers.
+ */
+export async function starterBlockMarkers(candidates) {
+    const canonical = await Promise.all(candidates.map(candidate => readFile(candidate.source, "utf8")));
+    return [
+        ...new Set(canonical.flatMap(source => source.split(/\r?\n/u).filter(line => line.startsWith(BEGIN)))),
+    ];
+}
+/**
+ * Apply only the blocks governed by the existing canonical template sources.
+ * @param change - Exact before/after starter file.
+ * @param current - Existing consumer bytes.
+ * @param markers - Canonical opening markers for this path.
+ * @returns Updated bytes, preserving all consumer content outside those blocks.
+ */
+export async function mergeStarterBlocks(change, current, markers) {
+    const before = text(change.before?.bytes);
+    const after = text(change.after?.bytes);
+    const merged = markers.reduce((content, begin) => {
+        const previous = block(before, begin);
+        const next = block(after, begin);
+        const existing = block(content, begin);
+        if (existing === next || previous === next)
+            return content;
+        if (existing !== undefined && existing !== previous)
+            throw new Error(`Starter managed block conflicts with local changes: ${change.path}`);
+        return replaceBlock(content, begin, next);
+    }, text(current));
+    return Buffer.from(merged);
+}
+/**
+ * Reuse Lisa's JSON strategies for paths governed by JSON merge semantics.
+ * @param change - Pinned starter JSON file.
+ * @param current - Existing consumer bytes.
+ * @param candidates - Applicable JSON strategies in canonical order.
+ * @returns Merged bytes; source removal preserves the consumer's JSON document.
+ */
+export function mergeStarterJson(change, current, candidates) {
+    if (change.after === undefined)
+        return current;
+    const source = JSON.parse(text(change.after.bytes));
+    const destination = JSON.parse(current === undefined ? "{}" : text(current));
+    if (!isJsonObject(source) || !isJsonObject(destination))
+        throw new Error(`Starter JSON merge requires objects: ${change.path}`);
+    const merged = candidates.reduce((result, candidate) => candidate.strategy === "tagged-merge"
+        ? new TaggedMergeStrategy().mergeJson(source, result)
+        : mergeTemplateJson(source, result), destination);
+    if (JSON.stringify(merged) === JSON.stringify(destination))
+        return current;
+    return Buffer.from(`${JSON.stringify(merged, null, 2)}\n`);
+}
+//# sourceMappingURL=starter-sync-content.js.map

package/dist/cli/starter-sync-content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"starter-sync-content.js","sourceRoot":"","sources":["../../src/cli/starter-sync-content.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EACL,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,MAAM,KAAK,GAAG,wBAAwB,CAAC;AACvC,MAAM,GAAG,GAAG,sBAAsB,CAAC;AAEnC;;;;GAIG;AACH,SAAS,IAAI,CAAC,KAA6B;IACzC,OAAO,KAAK,KAAK,SAAS;QACxB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,SAAS,KAAK,CAAC,OAAe,EAAE,KAAa;IAC3C,MAAM,GAAG,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC3C,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAC9B,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAE,IAAI,IAAI,CAAC,CAAC,CAAE,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CACnB,OAAe,EACf,KAAa,EACb,WAA+B;IAE/B,IAAI,WAAW,KAAK,SAAS;QAC3B,OAAO,iBAAiB,CAAC,GAAG,WAAW,IAAI,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC3D,OAAO,OAAO,KAAK,SAAS;QAC1B,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAwC;IAExC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAChE,CAAC;IACF,OAAO;QACL,GAAG,IAAI,GAAG,CACR,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CACzB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAC9D,CACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAqB,EACrB,OAA2B,EAC3B,OAA0B;IAE1B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC;QAC3D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,QAAQ;YACjD,MAAM,IAAI,KAAK,CACb,uDAAuD,MAAM,CAAC,IAAI,EAAE,CACrE,CAAC;QACJ,OAAO,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAClB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAqB,EACrB,OAA2B,EAC3B,UAAwC;IAExC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC/C,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAY,IAAI,CAAC,KAAK,CACrC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAC7C,CAAC;IACF,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAC9B,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CACpB,SAAS,CAAC,QAAQ,KAAK,cAAc;QACnC,CAAC,CAAC,IAAI,mBAAmB,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;QACrD,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,EACvC,WAAW,CACZ,CAAC;IACF,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;QAAE,OAAO,OAAO,CAAC;IAC3E,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAC7D,CAAC"}

package/dist/cli/starter-sync-source.d.ts

@@ -0,0 +1,33 @@
+import type { StarterTemplate } from "../core/project-config-starter.js";
+import { type CaptureCommand } from "./starter-provenance.js";
+/** Exact regular-file or link bytes at one immutable starter revision. */
+export interface StarterFile {
+    readonly bytes: Buffer;
+    readonly mode: string;
+}
+/** A path changed between the recorded baseline and the pinned tracked head. */
+export interface StarterChange {
+    readonly path: string;
+    readonly before?: StarterFile;
+    readonly after?: StarterFile;
+}
+/** A complete, read-only diff suitable for one independently tracked starter. */
+export interface StarterChanges {
+    readonly sha: string;
+    readonly changes: readonly StarterChange[];
+}
+/**
+ * Keep Git paths relative without rejecting colon-scoped agent commands.
+ * @param value - Repository path or configured scope.
+ * @returns Validated path, with a scope's trailing slash removed.
+ */
+export declare function starterRelativePath(value: string): string;
+/**
+ * Diff the actual recorded tree against one pinned head, never a merge base.
+ * @param template - Independently tracked starter and optional path scopes.
+ * @param capture - Bounded read-only GitHub metadata/content runner.
+ * @param accepts - Applicable ownership filter, applied before reading contents.
+ * @returns Complete scoped changes and the exact revision they describe.
+ */
+export declare function readStarterChanges(template: StarterTemplate, capture?: CaptureCommand, accepts?: (name: string) => boolean): Promise<StarterChanges>;
+//# sourceMappingURL=starter-sync-source.d.ts.map

package/dist/cli/starter-sync-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"starter-sync-source.d.ts","sourceRoot":"","sources":["../../src/cli/starter-sync-source.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEzE,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AAEjC,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;CAC5C;AAoBD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAWzD;AAyFD;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,eAAe,EACzB,OAAO,GAAE,cAA+B,EACxC,OAAO,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAoB,GAC9C,OAAO,CAAC,cAAc,CAAC,CA0CzB"}

package/dist/cli/starter-sync-source.js

@@ -0,0 +1,154 @@
+import { isJsonObject } from "../sync/json-path.js";
+import { captureCommand, readGitHubStarter, validateStarterRepo, } from "./starter-provenance.js";
+/**
+ * Require a pinned Git object before putting it into a remote endpoint.
+ * @param value - Supplied or returned object identifier.
+ * @returns Validated identifier.
+ */
+function objectId(value) {
+    if (!/^(?:[a-f\d]{40}|[a-f\d]{64})$/i.test(value)) {
+        throw new Error("Starter revision is not a valid Git object identifier");
+    }
+    return value;
+}
+/**
+ * Keep Git paths relative without rejecting colon-scoped agent commands.
+ * @param value - Repository path or configured scope.
+ * @returns Validated path, with a scope's trailing slash removed.
+ */
+export function starterRelativePath(value) {
+    const normalized = value.replace(/\/$/, "");
+    if (!normalized ||
+        /[\\\u0000-\u001f]/u.test(normalized) ||
+        /^[a-z]:/iu.test(normalized) ||
+        normalized.split("/").some(part => !part || part === "." || part === "..")) {
+        throw new Error(`Invalid starter path: ${value}`);
+    }
+    return normalized;
+}
+/**
+ * Decode a file entry while leaving directory entries to the recursive tree.
+ * @param entry - Untrusted GitHub tree entry.
+ * @returns Zero or one validated file tuple.
+ */
+function treeEntry(entry) {
+    if (!isJsonObject(entry))
+        throw new Error("Starter returned an invalid tree entry");
+    if (entry.type === "tree")
+        return [];
+    if (typeof entry.path !== "string" ||
+        typeof entry.sha !== "string" ||
+        typeof entry.mode !== "string") {
+        throw new Error("Starter returned an invalid tree entry");
+    }
+    return [
+        [
+            starterRelativePath(entry.path),
+            { sha: objectId(entry.sha), mode: entry.mode },
+        ],
+    ];
+}
+/**
+ * Read a complete tree; an API limit must never look like deleted files.
+ * @param endpoint - Validated repository API endpoint.
+ * @param tree - Pinned tree object.
+ * @param capture - Read-only command runner.
+ * @returns Files indexed by their exact repository paths.
+ */
+async function readTree(endpoint, tree, capture) {
+    const data = JSON.parse(await capture("gh", [
+        "api",
+        `${endpoint}/git/trees/${objectId(tree)}?recursive=1`,
+    ]));
+    if (!isJsonObject(data) || !Array.isArray(data.tree)) {
+        throw new Error("Starter returned an invalid Git tree");
+    }
+    if (data.truncated !== false) {
+        throw new Error("Starter Git tree is truncated or completeness is unknown");
+    }
+    const entries = data.tree.flatMap(treeEntry);
+    const files = new Map(entries);
+    if (files.size !== entries.length)
+        throw new Error("Starter returned duplicate tree paths");
+    return files;
+}
+/**
+ * Decode a pinned blob without trimming whitespace or executable metadata.
+ * @param endpoint - Validated repository API endpoint.
+ * @param file - File from the complete tree, or an absent side of the diff.
+ * @param capture - Read-only command runner.
+ * @returns Exact bytes and Git mode, or undefined when absent.
+ */
+async function readBlob(endpoint, file, capture) {
+    if (file === undefined)
+        return undefined;
+    if (!["100644", "100755", "120000"].includes(file.mode)) {
+        throw new Error("Starter change has an unsupported Git file mode");
+    }
+    const data = JSON.parse(await capture("gh", ["api", `${endpoint}/git/blobs/${file.sha}`]));
+    if (!isJsonObject(data) ||
+        data.encoding !== "base64" ||
+        typeof data.content !== "string") {
+        throw new Error("Starter returned an invalid Git blob");
+    }
+    const bytes = Buffer.from(data.content, "base64");
+    if (data.size !== bytes.length)
+        throw new Error("Starter blob size does not match its contents");
+    return { bytes, mode: file.mode };
+}
+/**
+ * Diff the actual recorded tree against one pinned head, never a merge base.
+ * @param template - Independently tracked starter and optional path scopes.
+ * @param capture - Bounded read-only GitHub metadata/content runner.
+ * @param accepts - Applicable ownership filter, applied before reading contents.
+ * @returns Complete scoped changes and the exact revision they describe.
+ */
+export async function readStarterChanges(template, capture = captureCommand, accepts = () => true) {
+    const endpoint = `repos/${validateStarterRepo(template.repo)}`;
+    const baseline = objectId(template.lastSync.sha);
+    const scopes = template.paths?.map(starterRelativePath);
+    const head = await readGitHubStarter(template.repo, template.ref, capture);
+    const sha = head.template.lastSync.sha;
+    if (sha === baseline)
+        return { sha, changes: [] };
+    const baseTree = await capture("gh", [
+        "api",
+        `${endpoint}/git/commits/${baseline}`,
+        "--jq",
+        ".tree.sha",
+    ]);
+    const before = await readTree(endpoint, baseTree, capture);
+    const after = await readTree(endpoint, head.tree, capture);
+    const paths = [...new Set([...before.keys(), ...after.keys()])]
+        .sort((left, right) => left.localeCompare(right))
+        .filter(name => inScope(name, scopes))
+        .filter(accepts)
+        .filter(name => before.get(name)?.sha !== after.get(name)?.sha ||
+        before.get(name)?.mode !== after.get(name)?.mode);
+    // Read serially so a large starter never creates an unbounded request burst.
+    const changes = await paths.reduce(async (pending, name) => {
+        const completed = await pending;
+        const oldBytes = await readBlob(endpoint, before.get(name), capture);
+        const newBytes = await readBlob(endpoint, after.get(name), capture);
+        return [
+            ...completed,
+            {
+                path: name,
+                ...(oldBytes === undefined ? {} : { before: oldBytes }),
+                ...(newBytes === undefined ? {} : { after: newBytes }),
+            },
+        ];
+    }, Promise.resolve([]));
+    return { sha, changes };
+}
+/**
+ * Match exact files or directory boundaries, rather than similar prefixes.
+ * @param name - Changed repository path.
+ * @param scopes - Validated optional configuration scopes.
+ * @returns Whether this path belongs to the requested diff.
+ */
+function inScope(name, scopes) {
+    return (scopes === undefined ||
+        scopes.some(scope => name === scope || name.startsWith(`${scope}/`)));
+}
+//# sourceMappingURL=starter-sync-source.js.map

package/dist/cli/starter-sync-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"starter-sync-source.js","sourceRoot":"","sources":["../../src/cli/starter-sync-source.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,mBAAmB,GAEpB,MAAM,yBAAyB,CAAC;AA2BjC;;;;GAIG;AACH,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5C,IACE,CAAC,UAAU;QACX,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC;QACrC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;QAC5B,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAC1E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IACrC,IACE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO;QACL;YACE,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC;YAC/B,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;SAC/C;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,QAAQ,CACrB,QAAgB,EAChB,IAAY,EACZ,OAAuB;IAEvB,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAC9B,MAAM,OAAO,CAAC,IAAI,EAAE;QAClB,KAAK;QACL,GAAG,QAAQ,cAAc,QAAQ,CAAC,IAAI,CAAC,cAAc;KACtD,CAAC,CACH,CAAC;IACF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM;QAC/B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,QAAQ,CACrB,QAAgB,EAChB,IAA0B,EAC1B,OAAuB;IAEvB,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAC9B,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,QAAQ,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAClE,CAAC;IACF,IACE,CAAC,YAAY,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAC1B,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAChC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAC5B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAyB,EACzB,UAA0B,cAAc,EACxC,UAAqC,GAAG,EAAE,CAAC,IAAI;IAE/C,MAAM,QAAQ,GAAG,SAAS,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;IACvC,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;QACnC,KAAK;QACL,GAAG,QAAQ,gBAAgB,QAAQ,EAAE;QACrC,MAAM;QACN,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;SAC5D,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SAChD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;SACrC,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CACL,IAAI,CAAC,EAAE,CACL,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG;QAC9C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CACnD,CAAC;IACJ,6EAA6E;IAC7E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAChC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACtB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACpE,OAAO;YACL,GAAG,SAAS;YACZ;gBACE,IAAI,EAAE,IAAI;gBACV,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;gBACvD,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;aACvD;SACF,CAAC;IACJ,CAAC,EACD,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CACpB,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO,CAAC,IAAY,EAAE,MAAqC;IAClE,OAAO,CACL,MAAM,KAAK,SAAS;QACpB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CACrE,CAAC;AACJ,CAAC"}

package/dist/cli/starter-sync-write.d.ts

@@ -0,0 +1,11 @@
+import { type ProjectFileSnapshot } from "../health/read-only-fs.js";
+/**
+ * Publish one guarded file update; an interrupted apply retains its old baseline.
+ * @param root - Canonical consumer root.
+ * @param name - Validated relative path.
+ * @param expected - Previously inspected bytes and mode.
+ * @param bytes - Replacement payload, or undefined to remove an owned file.
+ * @param mode - Final file permission bits.
+ */
+export declare function writeStarterFile(root: string, name: string, expected: ProjectFileSnapshot | undefined, bytes: Buffer | undefined, mode: number): Promise<void>;
+//# sourceMappingURL=starter-sync-write.d.ts.map

package/dist/cli/starter-sync-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"starter-sync-write.d.ts","sourceRoot":"","sources":["../../src/cli/starter-sync-write.ts"],"names":[],"mappings":"AAWA,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,2BAA2B,CAAC;AAyHnC;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,mBAAmB,GAAG,SAAS,EACzC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAcf"}

package/dist/cli/starter-sync-write.js

@@ -0,0 +1,126 @@
+import { link, lstat, mkdir, mkdtemp, realpath, rename, rmdir, unlink, } from "node:fs/promises";
+import path from "node:path";
+import { readProjectFile, resolveProjectPath, } from "../health/read-only-fs.js";
+import { writeFileAtomically } from "../utils/atomic-file-write.js";
+/**
+ * Verify every destination parent and create only missing consumer directories.
+ * @param root - Canonical consumer root.
+ * @param name - Validated relative file path.
+ * @param create - Whether missing parents may be created.
+ */
+async function parents(root, name, create) {
+    if ((await realpath(root)) !== root || (await lstat(root)).isSymbolicLink())
+        throw new Error("Starter consumer root changed");
+    const target = resolveProjectPath(root, name);
+    const parts = path
+        .relative(root, path.dirname(target))
+        .split(path.sep)
+        .filter(Boolean);
+    await parts.reduce(async (pending, part) => {
+        const parent = path.join(await pending, part);
+        if (create) {
+            try {
+                await mkdir(parent);
+            }
+            catch (error) {
+                if (error.code !== "EEXIST")
+                    throw error;
+            }
+        }
+        const stat = await lstat(parent);
+        if (!stat.isDirectory() || stat.isSymbolicLink())
+            throw new Error("Unsafe starter destination parent");
+        return parent;
+    }, Promise.resolve(root));
+}
+/**
+ * Refuse concurrent edits rather than overwriting a newer consumer snapshot.
+ * @param root - Canonical consumer root.
+ * @param name - Validated file path.
+ * @param expected - Snapshot used to decide this update.
+ */
+async function unchanged(root, name, expected) {
+    await parents(root, name, false);
+    const actual = await readProjectFile(root, name);
+    const sameBytes = actual === undefined
+        ? expected === undefined
+        : expected !== undefined && actual.bytes.equals(expected.bytes);
+    if (!sameBytes || actual?.mode !== expected?.mode)
+        throw new Error(`Starter destination changed during sync: ${name}`);
+}
+/**
+ * Restore a displaced entry without overwriting another concurrent replacement.
+ * @param root - Canonical consumer root.
+ * @param name - Original relative path.
+ * @param quarantine - Private path holding the displaced entry.
+ * @param failure - Original verification or removal error.
+ */
+async function restoreDisplaced(root, name, quarantine, failure) {
+    try {
+        await parents(root, name, false);
+        await link(quarantine, resolveProjectPath(root, name));
+        await unlink(quarantine);
+    }
+    catch (error) {
+        throw new Error(`Starter destination changed during sync: ${name}; displaced entry preserved at ${path.relative(root, quarantine)}`, { cause: new AggregateError([failure, error]) });
+    }
+}
+/**
+ * Pin a deletion by moving it privately and checking identity before unlinking.
+ * @param root - Canonical consumer root.
+ * @param name - Relative owned-file path.
+ * @param expected - Contents and permissions that justified deletion.
+ */
+async function removeUnchanged(root, name, expected) {
+    const target = resolveProjectPath(root, name);
+    const directory = await mkdtemp(path.join(path.dirname(target), ".lisa-starter-remove-"));
+    const quarantine = path.join(directory, "entry");
+    try {
+        const before = await lstat(target);
+        await unchanged(root, name, expected);
+        await rename(target, quarantine);
+        try {
+            const after = await lstat(quarantine);
+            if (before.dev !== after.dev || before.ino !== after.ino)
+                throw new Error(`Starter destination changed during sync: ${name}`);
+            await unchanged(root, path.relative(root, quarantine), expected);
+            await unchanged(root, name, undefined);
+            await unlink(quarantine);
+        }
+        catch (error) {
+            await restoreDisplaced(root, name, quarantine, error);
+            throw error;
+        }
+    }
+    finally {
+        await rmdir(directory).catch((error) => {
+            if (error.code !== "ENOTEMPTY")
+                throw error;
+        });
+    }
+}
+/**
+ * Publish one guarded file update; an interrupted apply retains its old baseline.
+ * @param root - Canonical consumer root.
+ * @param name - Validated relative path.
+ * @param expected - Previously inspected bytes and mode.
+ * @param bytes - Replacement payload, or undefined to remove an owned file.
+ * @param mode - Final file permission bits.
+ */
+export async function writeStarterFile(root, name, expected, bytes, mode) {
+    if (process.platform === "win32" && /[:<>"|?*]|[. ](?:\/|$)/u.test(name))
+        throw new Error("Starter path is not representable safely on Windows");
+    await parents(root, name, bytes !== undefined);
+    await unchanged(root, name, expected);
+    const target = resolveProjectPath(root, name);
+    if (bytes === undefined) {
+        if (expected !== undefined)
+            await removeUnchanged(root, name, expected);
+        return;
+    }
+    await writeFileAtomically(target, bytes, {
+        mode,
+        beforeRename: () => unchanged(root, name, expected),
+    });
+}
+//# sourceMappingURL=starter-sync-write.js.map

package/dist/cli/starter-sync-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"starter-sync-write.js","sourceRoot":"","sources":["../../src/cli/starter-sync-write.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EACJ,KAAK,EACL,KAAK,EACL,OAAO,EACP,QAAQ,EACR,MAAM,EACN,KAAK,EACL,MAAM,GACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,kBAAkB,GAEnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEpE;;;;;GAKG;AACH,KAAK,UAAU,OAAO,CACpB,IAAY,EACZ,IAAY,EACZ,MAAe;IAEf,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE;QACzE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI;SACf,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;SACpC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;SACf,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YACtE,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAC9C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,OAAO,MAAM,CAAC;IAChB,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CACtB,IAAY,EACZ,IAAY,EACZ,QAAyC;IAEzC,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,SAAS,GACb,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,QAAQ,KAAK,SAAS;QACxB,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpE,IAAI,CAAC,SAAS,IAAI,MAAM,EAAE,IAAI,KAAK,QAAQ,EAAE,IAAI;QAC/C,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAC7B,IAAY,EACZ,IAAY,EACZ,UAAkB,EAClB,OAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACvD,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,4CAA4C,IAAI,kCAAkC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EACnH,EAAE,KAAK,EAAE,IAAI,cAAc,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,CAChD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAC5B,IAAY,EACZ,IAAY,EACZ,QAA6B;IAE7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,OAAO,CAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,uBAAuB,CAAC,CACzD,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;gBACtD,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;YACtE,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;YACjE,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YACvC,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;YAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,MAAM,KAAK,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,IAAY,EACZ,QAAyC,EACzC,KAAyB,EACzB,IAAY;IAEZ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC;IAC/C,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IACD,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE;QACvC,IAAI;QACJ,YAAY,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC;KACpD,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/starter-sync.d.ts

@@ -0,0 +1,22 @@
+import type { StarterTemplate } from "../core/project-config-starter.js";
+import { type StarterChanges } from "./starter-sync-source.js";
+/** Result for one independently tracked starter. */
+export interface StarterSyncResult {
+    readonly repo: string;
+    readonly state: "updated" | "current" | "failed";
+    readonly changed: readonly string[];
+    readonly error?: string;
+}
+/** The caller supplies the isolated landing worktree; this is not a CLI default. */
+export interface StarterSyncOptions {
+    readonly lisaRoot: string;
+    readonly projectRoot: string;
+    readonly readChanges?: (template: StarterTemplate, accepts: (name: string) => boolean) => Promise<StarterChanges>;
+}
+/**
+ * Apply each starter independently using the existing template ownership rules.
+ * @param options - Lisa installation and caller-owned landing worktree.
+ * @returns Per-template outcomes, preserving failed baselines for retries.
+ */
+export declare function syncStarterTemplates(options: StarterSyncOptions): Promise<readonly StarterSyncResult[]>;
+//# sourceMappingURL=starter-sync.d.ts.map

package/dist/cli/starter-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"starter-sync.d.ts","sourceRoot":"","sources":["../../src/cli/starter-sync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAczE,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,0BAA0B,CAAC;AAUlC,oDAAoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,CACrB,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,KAC/B,OAAO,CAAC,cAAc,CAAC,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAwBvC"}