@cortexkit/antigravity-auth-core 3.0.6 → 3.0.7

package/dist/account-migration.d.ts

@@ -304,6 +304,6 @@ export interface FreshAccountStoreOptions {
     now: () => number;
     onBoundary?: AccountMigrationOptions['onBoundary'];
 }
-/** Explicit fresh initialization publishes an owned pointer/journal before first login; pointer absence alone never authorizes credential service. */
+/** Publishes a complete empty generation, or validates and resumes an unfinished generation already named by the pointer. */
 export declare function initializeFreshAccountStore(modules: AccountMigrationModules, options: FreshAccountStoreOptions): Promise<AccountMigrationOutcome>;
 //# sourceMappingURL=account-migration.d.ts.map

package/dist/account-migration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-migration.d.ts","sourceRoot":"","sources":["../src/account-migration.ts"],"names":[],"mappings":"AAKA,OAAO,EAYL,WAAW,EACZ,MAAM,gCAAgC,CAAA;AACvC,OAAO,KAAK,EACV,sBAAsB,EACtB,eAAe,EACf,iBAAiB,EACjB,4BAA4B,EAC5B,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,eAAe,EAEhB,MAAM,+BAA+B,CAAA;AAStC,qGAAqG;AACrG,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,iBAAiB,CAmBnB;AACD,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,CAAC,CAAA;IAChB,EAAE,EAAE,MAAM,CAAA;IACV,iBAAiB,EAAE,MAAM,CAAA;CAC1B;AACD,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAElE;AA+BD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,EACd,UAAU,EAAE,MAAM,GACjB,mBAAmB,CAerB;AAgBD,wBAAsB,iCAAiC,CACrD,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAUxC;AACD,wBAAsB,qCAAqC,CACzD,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,gFAAgF;AAChF,qBAAa,qBAAsB,SAAQ,KAAK;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAIpC;AAED,MAAM,WAAW,qBAAqB;IACpC,+GAA+G;IAC/G,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,KAAK,CAAC,EAAE,UAAU,CAAA;CACnB;AAED,gGAAgG;AAChG,MAAM,WAAW,uBAAuB;IACtC,qGAAqG;IACrG,aAAa,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;IACnC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,QAAQ,EAAE,qBAAqB,EAAE,CAAA;IACjC,OAAO,EAAE,eAAe,CAAA;IACxB,oBAAoB,EAAE,MAAM,CAAA;CAC7B;AA2LD,8JAA8J;AAC9J,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,GACzB,uBAAuB,CAsEzB;AAED,iHAAiH;AACjH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,EAC1C,OAAO,EAAE,eAAe,GACvB,UAAU,CA8BZ;AAED,sGAAsG;AACtG,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,OAAO,GAAG,KAAK,CAAA;IACrB,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,UAAU,CAAC,EACP;QACE,IAAI,EAAE,OAAO,CAAA;QACb,OAAO,EAAE,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,eAAe,CAAC,EAAE,MAAM,CAAA;KACzB,GACD;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACpD,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,oBAAoB,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;IAC9C,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,KAAK,CAAC,EAAE,sBAAsB,CAAA;IAC9B,SAAS,EAAE,OAAO,CAAA;IAClB,gJAAgJ;IAChJ,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,OAAO,CAAC,EAAE,IAAI,CAAA;IACd,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAA;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,IAAI,OAAO,CACX;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,gBAAgB,EAAE,CAAA;KAAE,GAC7C;QAAE,MAAM,EAAE,mBAAmB,CAAA;KAAE,GAC/B;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAChE,CAAA;IACD,YAAY,IAAI,OAAO,CACnB;QACE,MAAM,EAAE,OAAO,GAAG,mBAAmB,CAAA;QACrC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAClC,GACD;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAChE,CAAA;IACD,UAAU,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,aAAa,GAAG,eAAe,CAAA;KAAE,CAAC,CAAA;IAClE,GAAG,CACD,KAAK,EAAE;QACL,EAAE,EAAE,MAAM,CAAA;QACV,UAAU,EAAE;YAAE,IAAI,EAAE,OAAO,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAA;QAC9C,aAAa,EAAE,OAAO,CAAA;KACvB,EACD,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,CAAA;KAAE,GACpD,OAAO,CAAC;QACT,EAAE,EAAE,MAAM,CAAA;QACV,OAAO,EAAE,OAAO,GAAG,gBAAgB,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAA;KACzE,CAAC,CAAA;IACF,OAAO,CACL,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;QACR,WAAW,CAAC,EAAE;YAAE,eAAe,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;QAC5D,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,CAAA;KACxC,GACA,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC1B,MAAM,CACJ,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE;QACR,WAAW,CAAC,EAAE;YAAE,eAAe,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;QAC5D,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,CAAA;KACxC,GACA,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC1B,WAAW,CACT,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EACrD,WAAW,EAAE,OAAO,GACnB,OAAO,CAAC,IAAI,CAAC,CAAA;IAChB,OAAO,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;IAC3D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,SAAS,GAAG,WAAW,CAAA;KAAE,CAAC,CAAA;IAC7E,cAAc,CACZ,OAAO,EAAE,CACP,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GACvC,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAA;CAClD;AAED,MAAM,MAAM,wBAAwB,GAChC,qBAAqB,GACrB,oBAAoB,GACpB,oBAAoB,GACpB,mBAAmB,CAAA;AACvB,MAAM,WAAW,cAAc;IAC7B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE;QACL,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,MACnC,GAAG,IAAI,EAAE,KAAK,EAAE,KACb,KAAK,GAAG;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;SAAE,CAAA;QACnE,aAAa,CAAC,OAAO,EAAE;YACrB,QAAQ,EAAE,MAAM,CAAA;YAChB,UAAU,EAAE,MAAM,CAAA;YAClB,SAAS,EAAE,MAAM,CAAA;YACjB,uBAAuB,EAAE,IAAI,CAAA;YAC7B,GAAG,EAAE,MAAM,MAAM,CAAA;YACjB,WAAW,CAAC,EAAE;gBAAE,SAAS,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;YACpC,KAAK,EAAE,OAAO,WAAW,CAAA;YACzB,aAAa,EAAE,4BAA4B,CAAA;YAC3C,MAAM,CAAC,EAAE,CACP,IAAI,EAAE,wBAAwB,EAC9B,IAAI,EAAE;gBAAE,SAAS,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;aAAE,KACnD,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;SAC1B,GAAG,kBAAkB,CAAA;KACvB,CAAA;IACD,EAAE,EAAE;QACF,QAAQ,CAAC,CAAC,EACR,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;YACP,IAAI,EAAE,MAAM,CAAA;YACZ,KAAK,EAAE,MAAM,CAAA;YACb,SAAS,EAAE,MAAM,CAAA;YACjB,KAAK,CAAC,EAAE,OAAO,CAAA;SAChB,EACD,EAAE,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,GACxC,OAAO,CAAC,CAAC,CAAC,CAAA;QACb,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;QACjD,eAAe,CACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE;YACR,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;YAClC,SAAS,CAAC,EAAE,MAAM,MAAM,CAAA;SACzB,GACA,OAAO,CAAC,IAAI,CAAC,CAAA;QAChB,mBAAmB,EAAE,QAAQ,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,KAAK,CAAA;QAC7D,kBAAkB,EAAE,QAAQ,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,KAAK,CAAA;KAC7D,CAAA;CACF;AACD,kJAAkJ;AAClJ,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE;QACL,aAAa,CACX,OAAO,EAAE,IAAI,CACX,UAAU,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,EAChE,QAAQ,CACT,GACA,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,cAAc,CAAC,CAAA;KACrD,CAAA;CACF;AAED,eAAO,MAAM,wBAAwB,+DAM3B,CAAA;AACV,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAA;AAC7E,uHAAuH;AACvH,eAAO,MAAM,kCAAkC,+DAA2B,CAAA;AAC1E,eAAO,MAAM,qCAAqC,0BAA0B,CAAA;AAC5E,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,CAAC,CAAA;IAChB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAA;IAC7B,qBAAqB,EAAE,MAAM,CAAA;CAC9B;AACD,yIAAyI;AACzI,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,OAAO,GACb,sBAAsB,CAmCxB;AAcD,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,OAAO,CAAA;IACrB,UAAU,EACN,wBAAwB,GACxB,oDAAoD,CAAA;CACzD;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,iBAAiB,EAAE,OAAO,CAAA;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,CAAC,CAAA;IAChB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAA;IACzC,SAAS,EAAE,SAAS,GAAG,UAAU,CAAA;IACjC,KAAK,EAAE,qBAAqB,CAAA;IAC5B,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAA;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,qBAAqB,CAAC,EAAE,IAAI,CAAA;IAC5B,QAAQ,EAAE,uBAAuB,CAAA;IACjC,8FAA8F;IAC9F,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC1C,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,SAAS,CAAC,EAAE,IAAI,CAAA;CACjB;AA2ED,iHAAiH;AACjH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,GACb,uBAAuB,CA2WzB;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAA;IAClB,uJAAuJ;IACvJ,OAAO,EAAE;QAAE,gBAAgB,EAAE,IAAI,CAAA;KAAE,CAAA;IACnC,GAAG,EAAE,MAAM,MAAM,CAAA;IACjB,mJAAmJ;IACnJ,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACxD;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAA;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAA;IAC7B,UAAU,EAAE,qBAAqB,CAAC,YAAY,CAAC,CAAA;IAC/C,eAAe,EAAE,OAAO,CAAA;CACzB;AACD,MAAM,MAAM,uBAAuB,GAC/B;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,GACzD;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,iBAAiB,GAAG,gBAAgB,CAAA;CAAE,CAAA;AAqIvE,wBAAgB,0BAA0B,CACxC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,qBAAqB,CAAC,YAAY,CAAC,CAIrC;AA6jBD,MAAM,MAAM,qBAAqB,GAC7B;IACE,MAAM,EAAE,QAAQ,CAAA;IAChB,OAAO,EAAE,uBAAuB,CAAA;IAChC,KAAK,EAAE,iBAAiB,CAAA;CACzB,GACD;IACE,MAAM,EAAE,SAAS,CAAA;IACjB,KAAK,CAAC,EAAE,qBAAqB,CAAA;IAC7B,SAAS,CAAC,EAAE,SAAS,GAAG,UAAU,CAAA;CACnC,GACD;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,MAAM,EAAE,yBAAyB,CAAA;CAAE,GACrC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvC,MAAM,MAAM,mBAAmB,GAC3B,OAAO,CAAC,qBAAqB,EAAE;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,CAAC,GACpD;IACE,MAAM,EAAE,OAAO,CAAA;IACf,OAAO,EAAE,uBAAuB,CAAA;IAChC,KAAK,EAAE,iBAAiB,CAAA;CACzB,CAAA;AAmEL,uIAAuI;AACvI,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,4BAA4B,EACrC,GAAG,EAAE,MAAM,MAAM,EACjB,kBAAkB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,mBAAmB,CAAC,CAuD9B;AACD,8GAA8G;AAC9G,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,4BAA4B,EACrC,GAAG,EAAE,MAAM,MAAM,EACjB,kBAAkB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CA0BhC;AAED,wJAAwJ;AACxJ,wBAAsB,kCAAkC,CACtD,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAef;AA+aD,oJAAoJ;AACpJ,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,uBAAuB,IAG9B,SAAS,uBAAuB,KAC/B,OAAO,CAAC,uBAAuB,CAAC,CAqNpC;AA+HD,kJAAkJ;AAClJ,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,uBAAuB,IAEzE,SAAS,uBAAuB,KAC/B,OAAO,CAAC,uBAAuB,CAAC,CAuTpC;AAED,MAAM,WAAW,wBAAwB;IACvC,2GAA2G;IAC3G,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,uBAAuB,CAAC,YAAY,CAAC,CAAA;CACnD;AAwGD,sJAAsJ;AACtJ,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,uBAAuB,EAChC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,uBAAuB,CAAC,CAuOlC"}
+{"version":3,"file":"account-migration.d.ts","sourceRoot":"","sources":["../src/account-migration.ts"],"names":[],"mappings":"AAKA,OAAO,EAYL,WAAW,EACZ,MAAM,gCAAgC,CAAA;AACvC,OAAO,KAAK,EACV,sBAAsB,EACtB,eAAe,EACf,iBAAiB,EACjB,4BAA4B,EAC5B,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,eAAe,EAEhB,MAAM,+BAA+B,CAAA;AAStC,qGAAqG;AACrG,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,iBAAiB,CAmBnB;AACD,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,CAAC,CAAA;IAChB,EAAE,EAAE,MAAM,CAAA;IACV,iBAAiB,EAAE,MAAM,CAAA;CAC1B;AACD,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAElE;AA+BD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,EACd,UAAU,EAAE,MAAM,GACjB,mBAAmB,CAerB;AAgBD,wBAAsB,iCAAiC,CACrD,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAUxC;AACD,wBAAsB,qCAAqC,CACzD,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,gFAAgF;AAChF,qBAAa,qBAAsB,SAAQ,KAAK;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAIpC;AAED,MAAM,WAAW,qBAAqB;IACpC,+GAA+G;IAC/G,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,KAAK,CAAC,EAAE,UAAU,CAAA;CACnB;AAED,gGAAgG;AAChG,MAAM,WAAW,uBAAuB;IACtC,qGAAqG;IACrG,aAAa,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;IACnC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,QAAQ,EAAE,qBAAqB,EAAE,CAAA;IACjC,OAAO,EAAE,eAAe,CAAA;IACxB,oBAAoB,EAAE,MAAM,CAAA;CAC7B;AA2LD,8JAA8J;AAC9J,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,GACzB,uBAAuB,CAsEzB;AAED,iHAAiH;AACjH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,EAC1C,OAAO,EAAE,eAAe,GACvB,UAAU,CA8BZ;AAED,sGAAsG;AACtG,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,OAAO,GAAG,KAAK,CAAA;IACrB,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,UAAU,CAAC,EACP;QACE,IAAI,EAAE,OAAO,CAAA;QACb,OAAO,EAAE,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,eAAe,CAAC,EAAE,MAAM,CAAA;KACzB,GACD;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACpD,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,oBAAoB,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;IAC9C,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,KAAK,CAAC,EAAE,sBAAsB,CAAA;IAC9B,SAAS,EAAE,OAAO,CAAA;IAClB,gJAAgJ;IAChJ,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,OAAO,CAAC,EAAE,IAAI,CAAA;IACd,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAA;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,IAAI,OAAO,CACX;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,gBAAgB,EAAE,CAAA;KAAE,GAC7C;QAAE,MAAM,EAAE,mBAAmB,CAAA;KAAE,GAC/B;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAChE,CAAA;IACD,YAAY,IAAI,OAAO,CACnB;QACE,MAAM,EAAE,OAAO,GAAG,mBAAmB,CAAA;QACrC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAClC,GACD;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAChE,CAAA;IACD,UAAU,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,aAAa,GAAG,eAAe,CAAA;KAAE,CAAC,CAAA;IAClE,GAAG,CACD,KAAK,EAAE;QACL,EAAE,EAAE,MAAM,CAAA;QACV,UAAU,EAAE;YAAE,IAAI,EAAE,OAAO,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAA;QAC9C,aAAa,EAAE,OAAO,CAAA;KACvB,EACD,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,CAAA;KAAE,GACpD,OAAO,CAAC;QACT,EAAE,EAAE,MAAM,CAAA;QACV,OAAO,EAAE,OAAO,GAAG,gBAAgB,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAA;KACzE,CAAC,CAAA;IACF,OAAO,CACL,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;QACR,WAAW,CAAC,EAAE;YAAE,eAAe,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;QAC5D,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,CAAA;KACxC,GACA,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC1B,MAAM,CACJ,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE;QACR,WAAW,CAAC,EAAE;YAAE,eAAe,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;QAC5D,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,CAAA;KACxC,GACA,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC1B,WAAW,CACT,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EACrD,WAAW,EAAE,OAAO,GACnB,OAAO,CAAC,IAAI,CAAC,CAAA;IAChB,OAAO,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;IAC3D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,SAAS,GAAG,WAAW,CAAA;KAAE,CAAC,CAAA;IAC7E,cAAc,CACZ,OAAO,EAAE,CACP,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GACvC,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAA;CAClD;AAED,MAAM,MAAM,wBAAwB,GAChC,qBAAqB,GACrB,oBAAoB,GACpB,oBAAoB,GACpB,mBAAmB,CAAA;AACvB,MAAM,WAAW,cAAc;IAC7B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE;QACL,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,MACnC,GAAG,IAAI,EAAE,KAAK,EAAE,KACb,KAAK,GAAG;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;SAAE,CAAA;QACnE,aAAa,CAAC,OAAO,EAAE;YACrB,QAAQ,EAAE,MAAM,CAAA;YAChB,UAAU,EAAE,MAAM,CAAA;YAClB,SAAS,EAAE,MAAM,CAAA;YACjB,uBAAuB,EAAE,IAAI,CAAA;YAC7B,GAAG,EAAE,MAAM,MAAM,CAAA;YACjB,WAAW,CAAC,EAAE;gBAAE,SAAS,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;YACpC,KAAK,EAAE,OAAO,WAAW,CAAA;YACzB,aAAa,EAAE,4BAA4B,CAAA;YAC3C,MAAM,CAAC,EAAE,CACP,IAAI,EAAE,wBAAwB,EAC9B,IAAI,EAAE;gBAAE,SAAS,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;aAAE,KACnD,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;SAC1B,GAAG,kBAAkB,CAAA;KACvB,CAAA;IACD,EAAE,EAAE;QACF,QAAQ,CAAC,CAAC,EACR,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;YACP,IAAI,EAAE,MAAM,CAAA;YACZ,KAAK,EAAE,MAAM,CAAA;YACb,SAAS,EAAE,MAAM,CAAA;YACjB,KAAK,CAAC,EAAE,OAAO,CAAA;SAChB,EACD,EAAE,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,GACxC,OAAO,CAAC,CAAC,CAAC,CAAA;QACb,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;QACjD,eAAe,CACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE;YACR,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;YAClC,SAAS,CAAC,EAAE,MAAM,MAAM,CAAA;SACzB,GACA,OAAO,CAAC,IAAI,CAAC,CAAA;QAChB,mBAAmB,EAAE,QAAQ,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,KAAK,CAAA;QAC7D,kBAAkB,EAAE,QAAQ,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,KAAK,CAAA;KAC7D,CAAA;CACF;AACD,kJAAkJ;AAClJ,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE;QACL,aAAa,CACX,OAAO,EAAE,IAAI,CACX,UAAU,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,EAChE,QAAQ,CACT,GACA,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,cAAc,CAAC,CAAA;KACrD,CAAA;CACF;AAED,eAAO,MAAM,wBAAwB,+DAM3B,CAAA;AACV,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAA;AAC7E,uHAAuH;AACvH,eAAO,MAAM,kCAAkC,+DAA2B,CAAA;AAC1E,eAAO,MAAM,qCAAqC,0BAA0B,CAAA;AAC5E,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,CAAC,CAAA;IAChB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAA;IAC7B,qBAAqB,EAAE,MAAM,CAAA;CAC9B;AACD,yIAAyI;AACzI,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,OAAO,GACb,sBAAsB,CAmCxB;AAcD,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,OAAO,CAAA;IACrB,UAAU,EACN,wBAAwB,GACxB,oDAAoD,CAAA;CACzD;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,iBAAiB,EAAE,OAAO,CAAA;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,CAAC,CAAA;IAChB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAA;IACzC,SAAS,EAAE,SAAS,GAAG,UAAU,CAAA;IACjC,KAAK,EAAE,qBAAqB,CAAA;IAC5B,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAA;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,qBAAqB,CAAC,EAAE,IAAI,CAAA;IAC5B,QAAQ,EAAE,uBAAuB,CAAA;IACjC,8FAA8F;IAC9F,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC1C,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,SAAS,CAAC,EAAE,IAAI,CAAA;CACjB;AA2ED,iHAAiH;AACjH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,GACb,uBAAuB,CA2WzB;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAA;IAClB,uJAAuJ;IACvJ,OAAO,EAAE;QAAE,gBAAgB,EAAE,IAAI,CAAA;KAAE,CAAA;IACnC,GAAG,EAAE,MAAM,MAAM,CAAA;IACjB,mJAAmJ;IACnJ,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACxD;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAA;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAA;IAC7B,UAAU,EAAE,qBAAqB,CAAC,YAAY,CAAC,CAAA;IAC/C,eAAe,EAAE,OAAO,CAAA;CACzB;AACD,MAAM,MAAM,uBAAuB,GAC/B;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,GACzD;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,iBAAiB,GAAG,gBAAgB,CAAA;CAAE,CAAA;AAqIvE,wBAAgB,0BAA0B,CACxC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,qBAAqB,CAAC,YAAY,CAAC,CAIrC;AAgkBD,MAAM,MAAM,qBAAqB,GAC7B;IACE,MAAM,EAAE,QAAQ,CAAA;IAChB,OAAO,EAAE,uBAAuB,CAAA;IAChC,KAAK,EAAE,iBAAiB,CAAA;CACzB,GACD;IACE,MAAM,EAAE,SAAS,CAAA;IACjB,KAAK,CAAC,EAAE,qBAAqB,CAAA;IAC7B,SAAS,CAAC,EAAE,SAAS,GAAG,UAAU,CAAA;CACnC,GACD;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,MAAM,EAAE,yBAAyB,CAAA;CAAE,GACrC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvC,MAAM,MAAM,mBAAmB,GAC3B,OAAO,CAAC,qBAAqB,EAAE;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,CAAC,GACpD;IACE,MAAM,EAAE,OAAO,CAAA;IACf,OAAO,EAAE,uBAAuB,CAAA;IAChC,KAAK,EAAE,iBAAiB,CAAA;CACzB,CAAA;AAmEL,uIAAuI;AACvI,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,4BAA4B,EACrC,GAAG,EAAE,MAAM,MAAM,EACjB,kBAAkB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,mBAAmB,CAAC,CAuD9B;AACD,8GAA8G;AAC9G,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,4BAA4B,EACrC,GAAG,EAAE,MAAM,MAAM,EACjB,kBAAkB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CA0BhC;AAED,wJAAwJ;AACxJ,wBAAsB,kCAAkC,CACtD,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAef;AA+aD,oJAAoJ;AACpJ,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,uBAAuB,IAG9B,SAAS,uBAAuB,KAC/B,OAAO,CAAC,uBAAuB,CAAC,CAsNpC;AA+HD,kJAAkJ;AAClJ,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,uBAAuB,IAEzE,SAAS,uBAAuB,KAC/B,OAAO,CAAC,uBAAuB,CAAC,CAuTpC;AAED,MAAM,WAAW,wBAAwB;IACvC,2GAA2G;IAC3G,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,uBAAuB,CAAC,YAAY,CAAC,CAAA;CACnD;AAwGD,6HAA6H;AAC7H,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,uBAAuB,EAChC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,uBAAuB,CAAC,CA+KlC"}

package/dist/account-migration.js

@@ -833,7 +833,7 @@ async function syncDirectory(path, boundary) {
     }
     await boundary?.('after-directory-sync');
 }
-async function exclusiveBytes(path, bytes, expectedHash, boundary) {
+async function exclusiveBytes(path, bytes, expectedHash, boundary, pointerStage = false) {
     let handle;
     try {
         handle = await open(path, 'wx', 0o600);
@@ -856,7 +856,10 @@ async function exclusiveBytes(path, bytes, expectedHash, boundary) {
     const reopened = await secureRead(path);
     if (digest(reopened) !== expectedHash || !reopened.equals(bytes))
         throw new AccountMigrationError('exclusive backup or recovery copy differs');
-    await syncFile(path);
+    // A new pointer stage was synced through its write handle. Reused stages and
+    // all backup, bootstrap, retired and export copies retain the reopened barrier.
+    if (handle === undefined || !pointerStage)
+        await syncFile(path);
     await syncDirectory(dirname(path), boundary);
 }
 async function readJournal(paths) {
@@ -1663,7 +1666,7 @@ export function createAccountMigrationFactory(modules) {
                                 throw new AccountMigrationError('source changed before pointer publication');
                             if (!journal)
                                 throw new AccountMigrationError('capture journal missing');
-                            await publishGenerationPointer(modules, physical, journal, parentLease, prior, options.onBoundary);
+                            await publishGenerationPointer(modules, physical, journal, parentLease, lease, prior, options.onBoundary);
                         });
                         await options.onBoundary?.('after-capture');
                     }
@@ -2029,7 +2032,7 @@ async function expectedFreshArtifacts(paths, journal) {
         !isDeepStrictEqual(decodeAccountStoreGeneration(config[ACCOUNT_STORE_GENERATION_SETTINGS_KEY]), generationJson(journal)))
         throw new AccountMigrationError('fresh generation setting differs');
 }
-/** Explicit fresh initialization publishes an owned pointer/journal before first login; pointer absence alone never authorizes credential service. */
+/** Publishes a complete empty generation, or validates and resumes an unfinished generation already named by the pointer. */
 export async function initializeFreshAccountStore(modules, options) {
     resolveAccountStorePaths(options.legacyPath);
     try {
@@ -2047,49 +2050,9 @@ export async function initializeFreshAccountStore(modules, options) {
                 timeoutMs: 2_000,
                 renew: true,
             }, async (lease) => {
-                let journal = await readJournal(physical);
-                if (pointer === undefined) {
-                    await options.onBoundary?.('before-capture');
-                    await assertSourceAbsent(physical);
-                    await modules.fs.withLock(physical.legacyPath, {
-                        name: 'accounts',
-                        ttlMs: 10_000,
-                        timeoutMs: 2_000,
-                        renew: true,
-                    }, async (accountsLease) => {
-                        await assertSourceAbsent(physical);
-                        await accountsLease.assertOwned();
-                        await lease.assertOwned();
-                        if (journal !== undefined ||
-                            (await exists(physical.configPath)) ||
-                            (await exists(physical.statePath)))
-                            throw new AccountMigrationError('fresh stage has unrelated artifacts');
-                        journal = {
-                            schemaVersion: 1,
-                            id: pathGenerationId(physical),
-                            legacyPath: physical.legacyPath,
-                            storeDir: physical.storeDir,
-                            sourceKind: 'absent',
-                            status: 'pending',
-                            operation: 'migrate',
-                            phase: 'capture',
-                            manifest: {
-                                sourceVersion: null,
-                                normalizationClock: options.now(),
-                                accounts: [],
-                                routing: { schemaVersion: 1 },
-                                effectiveActiveIndex: 0,
-                            },
-                            mapping: [],
-                            completedRows: [],
-                        };
-                        await saveJournal(modules, physical, lease, journal, true, options.onBoundary);
-                        await options.onBoundary?.('pointer:before-publication');
-                        await assertSourceAbsent(physical);
-                        await publishGenerationPointer(modules, physical, journal, parentLease, undefined, options.onBoundary);
-                        await options.onBoundary?.('pointer:after-publication');
-                    });
-                }
+                const journal = await readJournal(physical);
+                if (pointer === undefined)
+                    return initializePrivateEmptyGeneration(modules, physical, parentLease, lease, options);
                 if (journal?.sourceKind !== 'absent' ||
                     journal.operation !== 'migrate' ||
                     journal.status === 'inactive')
@@ -2168,6 +2131,205 @@ export async function initializeFreshAccountStore(modules, options) {
         throw error;
     }
 }
+// These files are not reachable through a pointer yet. Their final barriers are
+// grouped immediately before publication, rather than at each construction step.
+async function exclusiveUnpublishedBytes(path, bytes) {
+    const handle = await open(path, constants.O_WRONLY |
+        constants.O_CREAT |
+        constants.O_EXCL |
+        constants.O_NOFOLLOW, 0o600);
+    try {
+        await handle.writeFile(bytes);
+    }
+    finally {
+        await handle.close();
+    }
+    if (!(await secureRead(path)).equals(bytes))
+        throw new AccountMigrationError('private stage readback differs');
+}
+async function initializePrivateEmptyGeneration(modules, paths, parentLease, managementLease, options) {
+    return modules.fs.withLock(paths.legacyPath, { name: 'accounts', ttlMs: 10_000, timeoutMs: 2_000, renew: true }, async (accountsLease) => {
+        const directory = await lstat(paths.storeDir);
+        const assertOwned = async () => {
+            await parentLease.assertOwned();
+            await managementLease.assertOwned();
+            await accountsLease.assertOwned();
+            const current = await lstat(paths.storeDir);
+            if (!current.isDirectory() ||
+                current.isSymbolicLink() ||
+                current.dev !== directory.dev ||
+                current.ino !== directory.ino ||
+                !sameFilesystemPath(await realpath(paths.storeDir), paths.storeDir))
+                throw new AccountMigrationError('private generation directory changed');
+            privateMode(current.mode, 0o700);
+        };
+        const boundary = options.onBoundary;
+        await assertOwned();
+        await assertSourceAbsent(paths);
+        if (await readPointer(paths.legacyPath))
+            throw new AccountMigrationError('private initialization found a competing pointer');
+        if ((await readJournal(paths)) ||
+            (await exists(paths.configPath)) ||
+            (await exists(paths.statePath)))
+            throw new AccountMigrationError('fresh stage has unrelated artifacts');
+        const journal = {
+            schemaVersion: 1,
+            id: pathGenerationId(paths),
+            legacyPath: paths.legacyPath,
+            storeDir: paths.storeDir,
+            sourceKind: 'absent',
+            status: 'pending',
+            operation: 'migrate',
+            phase: 'build',
+            manifest: {
+                sourceVersion: null,
+                normalizationClock: options.now(),
+                accounts: [],
+                routing: { schemaVersion: 1 },
+                effectiveActiveIndex: 0,
+            },
+            mapping: [],
+            completedRows: [],
+        };
+        await assertOwned();
+        await exclusiveUnpublishedBytes(paths.configPath, Buffer.from('{"version":1,"accounts":[]}\n'));
+        await boundary?.('empty-stage:after-seed');
+        const store = openMigrationStore(modules, paths, options.now, async (step, info) => {
+            await assertOwned();
+            if (!step.includes('config') || (await exists(paths.statePath)))
+                throw new AccountMigrationError('private empty stage attempted a credential write');
+            await secureRead(paths.configPath);
+            await boundary?.(`public:${info.operation}:${step}`);
+            await assertOwned();
+        });
+        await assertOwned();
+        await store.initialize();
+        await boundary?.('empty-stage:after-initialize');
+        await assertOwned();
+        await store.updateSettings((settings) => {
+            settings[ROUTING_SETTINGS_KEY] = encodeRoutingSettings(journal.manifest.routing);
+            settings[ACCOUNT_STORE_GENERATION_SETTINGS_KEY] =
+                generationJson(journal);
+            settings[MANAGEMENT_SETTINGS_KEY] = {
+                id: journal.id,
+                kind: 'migration',
+                targets: [],
+                progress: { step: 'build', completedTargets: [] },
+            };
+            return settings;
+        });
+        await boundary?.('empty-stage:after-build-settings');
+        await expectedFreshArtifacts(paths, journal);
+        await assertStateOwnership(paths, journal, true);
+        await verifyImported(store, journal);
+        // Preserve the historical verification input: the real, reopened build
+        // config includes management, unlike the final management-free config.
+        const snapshot = await secureRead(paths.configPath);
+        await verifyImported(store, journal);
+        journal.verification = {
+            manifestSha256: digest(canonical(manifestJson(journal.manifest))),
+            configSha256: digest(snapshot),
+            statePresent: false,
+            durability: accountMigrationDurability(),
+        };
+        await assertOwned();
+        await assertSourceAbsent(paths);
+        journal.sourceAbsenceVerified = true;
+        await management(store, journal, true);
+        await boundary?.('empty-stage:after-clear-settings');
+        await expectedFreshArtifacts(paths, journal);
+        await currentSuccessor(store, paths, journal);
+        if ((await settingsOf(store))[MANAGEMENT_SETTINGS_KEY] !== undefined)
+            throw new AccountMigrationError('private stage still has management work');
+        journal.phase = 'activate';
+        journal.status = 'active';
+        decodeAccountMigrationJournal(journalJson(journal));
+        await assertOwned();
+        await exclusiveUnpublishedBytes(paths.migrationPath, Buffer.from(`${JSON.stringify(journalJson(journal), null, 2)}\n`));
+        await boundary?.('empty-stage:after-journal');
+        await syncFile(paths.configPath);
+        await boundary?.('empty-stage:after-config-sync');
+        await syncFile(paths.migrationPath);
+        await boundary?.('empty-stage:after-journal-sync');
+        for (const [name, path] of [
+            ['backups', paths.backupsDir],
+            ['retired', paths.retiredDir],
+            ['transfers', paths.transfersDir],
+        ]) {
+            await syncDirectory(path);
+            await boundary?.(`empty-stage:after-${name}-sync`);
+        }
+        await syncDirectory(paths.storeDir);
+        await boundary?.('empty-stage:after-generation-sync');
+        await boundary?.('pointer:before-publication');
+        const reopened = await readJournal(paths);
+        if (!isDeepStrictEqual(reopened, journal))
+            throw new AccountMigrationError('publication requires its complete synced canonical journal');
+        const pointer = {
+            schemaVersion: 1,
+            id: journal.id,
+            directoryBasename: basename(paths.storeDir),
+        };
+        const path = accountStorePointerPath(paths.legacyPath);
+        const stage = `${path}.${journal.id}.tmp`;
+        const bytes = Buffer.from(`${JSON.stringify(pointer, null, 2)}\n`);
+        await assertOwned();
+        let stageHandle;
+        try {
+            stageHandle = await open(stage, 'wx', 0o600);
+        }
+        catch (error) {
+            if (errno(error) !== 'EEXIST')
+                throw error;
+        }
+        if (stageHandle) {
+            try {
+                await stageHandle.writeFile(bytes);
+                await stageHandle.sync();
+            }
+            finally {
+                await stageHandle.close();
+            }
+        }
+        if (!(await secureRead(stage)).equals(bytes))
+            throw new AccountMigrationError('exclusive pointer stage differs');
+        if (!stageHandle)
+            await syncFile(stage);
+        await boundary?.('empty-stage:after-pointer-stage');
+        await syncDirectory(dirname(path));
+        await boundary?.('empty-stage:after-parent-prelink-sync');
+        await boundary?.('pointer:before-link');
+        await assertOwned();
+        await assertSourceAbsent(paths);
+        if (await exists(path))
+            throw new AccountMigrationError('foreign or competing pointer publication refuses overwrite');
+        if (await exists(resolveAccountStorePaths(paths.legacyPath).storeDir))
+            throw new AccountMigrationError('foreign logical store directory appeared before publication');
+        try {
+            await link(stage, path);
+        }
+        catch (error) {
+            if (errno(error) === 'EEXIST')
+                throw new AccountMigrationError('foreign or competing pointer publication refuses overwrite');
+            throw new AccountMigrationError('exclusive pointer hard-link publication failed');
+        }
+        await boundary?.('pointer:after-link-before-parent-sync');
+        await syncDirectory(dirname(path));
+        if (!isDeepStrictEqual(await readPointer(paths.legacyPath), pointer) ||
+            !isDeepStrictEqual(await readJournal(paths), journal))
+            throw new AccountMigrationError('pointer publication readback differs');
+        await expectedFreshArtifacts(paths, journal);
+        await currentSuccessor(store, paths, journal);
+        const admission = await readAccountStoreAdmission(paths.legacyPath, modules, options.now, journal.id);
+        if (admission.status !== 'active' ||
+            !isDeepStrictEqual(admission.receipt, receipt(journal)))
+            throw new AccountMigrationError('published empty generation is not admitted');
+        await boundary?.('pointer:after-sync-before-stage-cleanup');
+        await cleanupPointerStage(paths.legacyPath, pointer, parentLease);
+        await assertOwned();
+        return { status: 'completed', receipt: receipt(journal) };
+    });
+}
 async function allocateGeneration(legacyPath) {
     if (await exists(resolveAccountStorePaths(legacyPath).storeDir))
         throw new AccountMigrationError('foreign logical directory refuses generation allocation');
@@ -2176,15 +2338,20 @@ async function allocateGeneration(legacyPath) {
     await prepareDirectories(paths);
     return paths;
 }
-async function publishGenerationPointer(modules, paths, journal, parentLease, prior, boundary) {
+async function publishGenerationPointer(modules, paths, journal, parentLease, managementLease, prior, boundary, journalSavedBy) {
     await parentLease.assertOwned();
+    await managementLease.assertOwned();
     const currentJournal = await readJournal(paths);
     if (!currentJournal ||
         currentJournal.id !== journal.id ||
         !isDeepStrictEqual(journalJson(currentJournal), journalJson(journal)))
         throw new AccountMigrationError('publication requires its complete synced canonical journal');
-    await syncFile(paths.migrationPath);
-    await syncDirectory(paths.storeDir);
+    // Callers without a still-held save-owner opt-in retain both barriers rather
+    // than infer that the canonical journal was persisted by an earlier operation.
+    if (journalSavedBy !== managementLease) {
+        await syncFile(paths.migrationPath);
+        await syncDirectory(paths.storeDir);
+    }
     const pointer = {
         schemaVersion: 1,
         id: journal.id,
@@ -2194,8 +2361,9 @@ async function publishGenerationPointer(modules, paths, journal, parentLease, pr
     if (prior === undefined) {
         const stage = `${path}.${journal.id}.tmp`;
         const bytes = Buffer.from(`${JSON.stringify(pointer, null, 2)}\n`);
-        await exclusiveBytes(stage, bytes, digest(bytes));
+        await exclusiveBytes(stage, bytes, digest(bytes), undefined, true);
         await parentLease.assertOwned();
+        await managementLease.assertOwned();
         await boundary?.('pointer:before-link');
         if (await exists(resolveAccountStorePaths(paths.legacyPath).storeDir))
             throw new AccountMigrationError('foreign logical store directory appeared before publication');
@@ -2229,6 +2397,7 @@ async function publishGenerationPointer(modules, paths, journal, parentLease, pr
             stageName: () => stageName,
             beforeRename: async () => {
                 await parentLease.assertOwned();
+                await managementLease.assertOwned();
                 if (!isDeepStrictEqual(await readPointer(paths.legacyPath), prior) ||
                     (await readJournal(oldPaths))?.status !== 'inactive')
                     throw new AccountMigrationError('inactive pointer changed before transition');
@@ -2239,6 +2408,7 @@ async function publishGenerationPointer(modules, paths, journal, parentLease, pr
         await syncDirectory(dirname(path));
     }
     await parentLease.assertOwned();
+    await managementLease.assertOwned();
 }
 function withParentTopology(modules, legacyPath, body) {
     return modules.fs.withLock(legacyPath, {
@@ -2268,9 +2438,14 @@ async function finishPointerPublication(legacyPath, pointer, lease) {
     const path = accountStorePointerPath(legacyPath);
     await syncFile(path);
     await syncDirectory(dirname(path));
+    if (await cleanupPointerStage(legacyPath, pointer, lease))
+        await syncDirectory(dirname(path));
+}
+async function cleanupPointerStage(legacyPath, pointer, lease) {
+    const path = accountStorePointerPath(legacyPath);
     const stage = `${path}.${pointer.id}.tmp`;
     if (!(await exists(stage)))
-        return;
+        return false;
     const bytes = await secureRead(stage);
     if (!isDeepStrictEqual(decodeAccountStorePointer(jsonBytes(bytes), legacyPath), pointer))
         throw new AccountMigrationError('pointer stage differs from publication authority');
@@ -2279,6 +2454,6 @@ async function finishPointerPublication(legacyPath, pointer, lease) {
         throw new AccountMigrationError('pointer stage is not the published hard link');
     await lease.assertOwned();
     await unlink(stage);
-    await syncDirectory(dirname(path));
+    return true;
 }
 //# sourceMappingURL=account-migration.js.map