@decibelsystems/tools 3.0.0 → 3.1.0

package/dist/killSwitch.js

@@ -0,0 +1,161 @@
+/**
+ * The kill switch — one durable STOP for unattended work (ISS-0178).
+ *
+ * WHAT IT STOPS, AND WHAT IT DELIBERATELY DOES NOT. The metaphor is a machine
+ * tool's big red button: it halts the automation, it does not power down the
+ * panel. Unattended work — the agentic queue replaying remote writes, the dojo
+ * experiment runner spawning a script — refuses while stopped. Interactive
+ * calls keep working on purpose, because the first thing anyone does after
+ * hitting stop is ask what went wrong, and that takes sentinel, oracle and this
+ * module itself.
+ *
+ * THE SAFETY INVARIANT. You can never stop yourself out of resuming. That holds
+ * BY CONSTRUCTION rather than by an exception list: nothing in this file gates
+ * itself, and enforcement lives at the call sites of the work being stopped.
+ * There is no path where `resume` consults the flag it is trying to clear.
+ *
+ * WHY A FILE, AND WHY THIS FILE. State lives at ~/.decibel/killswitch.json:
+ *
+ *   - machine-global, because a button on a desk is machine-global. Stopping
+ *     "the project you happen to be in" is not what a red button means.
+ *   - a file, so it survives a daemon restart, a crash, and a reboot. A stop
+ *     that forgets itself is worse than no stop, because it teaches people the
+ *     switch is unreliable.
+ *   - plain JSON with no schema tricks, so a process that is not this one — a
+ *     shell script, a microcontroller, a future physical button — can read and
+ *     write it without linking anything.
+ *
+ * WHAT IT IS NOT. It is not a security control. Anything that can write to
+ * ~/.decibel can clear it. It is an operational brake for work you started, in
+ * the same spirit as the daemon's own PID file.
+ */
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+/** Machine-global, deliberately — see the header. */
+export const KILL_SWITCH_PATH = path.join(os.homedir(), '.decibel', 'killswitch.json');
+const RUNNING = { stopped: false };
+/**
+ * Read the current state, treating every failure as RUNNING.
+ *
+ * FAIL-OPEN IS THE RIGHT CHOICE HERE and it is worth saying why, because the
+ * opposite is defensible and wrong for this case. A corrupt or unreadable
+ * killswitch file would, under fail-closed, halt all unattended work on the
+ * machine with no way to diagnose it except editing the very file that is
+ * broken — a brake that jams on is worse than one that does not engage. The
+ * stop is an operational convenience, not a safety interlock, and it says so in
+ * the header.
+ *
+ * Note this is the one place the module is deliberately quiet: a missing file
+ * is the overwhelmingly common case (nobody has ever pressed stop) and must not
+ * be noise.
+ */
+export function readKillSwitch() {
+    try {
+        const raw = fs.readFileSync(KILL_SWITCH_PATH, 'utf-8');
+        const parsed = JSON.parse(raw);
+        // Anything other than an explicit `true` is running. A file containing
+        // `{"stopped":"yes"}` from a well-meaning script must not read as stopped,
+        // because a truthy-string check would make the brake depend on spelling.
+        return parsed.stopped === true ? parsed : RUNNING;
+    }
+    catch {
+        return RUNNING;
+    }
+}
+/** True when unattended work should refuse. */
+export function isStopped() {
+    return readKillSwitch().stopped;
+}
+/**
+ * Engage the stop. Idempotent: a second press reports the FIRST stop rather
+ * than overwriting it, because a button will be pressed twice and the original
+ * reason and time are the ones worth keeping.
+ *
+ * @returns the state now in force, and whether this call is what engaged it
+ */
+export function engageStop(opts = {}) {
+    const current = readKillSwitch();
+    if (current.stopped) {
+        return { state: current, already: true };
+    }
+    const state = {
+        stopped: true,
+        stopped_at: new Date().toISOString(),
+        ...(opts.reason ? { reason: opts.reason } : {}),
+        // An unattributed stop is allowed — a physical button cannot type — but it
+        // is recorded as unattributed rather than silently attributed to whoever
+        // happened to be running.
+        actor: opts.actor || 'unattributed',
+        ...(opts.source ? { source: opts.source } : {}),
+    };
+    writeState(state);
+    return { state, already: false };
+}
+/**
+ * Release the stop. Idempotent, and never gated — see the safety invariant.
+ *
+ * @returns the state that was cleared, when there was one
+ */
+export function releaseStop() {
+    const current = readKillSwitch();
+    if (!current.stopped)
+        return { released: null };
+    writeState(RUNNING);
+    return { released: current };
+}
+function writeState(state) {
+    const dir = path.dirname(KILL_SWITCH_PATH);
+    fs.mkdirSync(dir, { recursive: true });
+    // Write-then-rename: a physical button may be pressed while something else is
+    // reading, and a half-written file must never be observable as either state.
+    const tmp = `${KILL_SWITCH_PATH}.${process.pid}.tmp`;
+    fs.writeFileSync(tmp, JSON.stringify(state, null, 2) + '\n', 'utf-8');
+    fs.renameSync(tmp, KILL_SWITCH_PATH);
+}
+/**
+ * Thrown at the gate. Carries the stop's own reason and time so the refusal can
+ * say WHY work stopped rather than merely that it did — the difference between
+ * a legible brake and a mystery.
+ */
+export class KillSwitchEngagedError extends Error {
+    code = 'KILL_SWITCH_ENGAGED';
+    state;
+    constructor(operation, state) {
+        const when = state.stopped_at ? ` at ${state.stopped_at}` : '';
+        const who = state.actor && state.actor !== 'unattributed' ? ` by ${state.actor}` : '';
+        const why = state.reason ? ` — ${state.reason}` : '';
+        super(`Kill switch engaged${when}${who}${why}. Refusing: ${operation}. ` +
+            `Release it with killswitch.resume (never blocked), or delete ${KILL_SWITCH_PATH}.`);
+        this.name = 'KillSwitchEngagedError';
+        this.state = state;
+    }
+}
+/**
+ * The gate. Call at the top of anything that runs without someone watching.
+ *
+ * Takes the operation name so the refusal names what it refused — "agentic
+ * queue replay" is actionable, "operation failed" is not.
+ */
+export function assertRunnable(operation) {
+    const state = readKillSwitch();
+    if (state.stopped)
+        throw new KillSwitchEngagedError(operation, state);
+}
+/**
+ * Non-throwing form of {@link assertRunnable}, for call sites whose contract is
+ * to RETURN an error rather than throw one.
+ *
+ * Both forms exist deliberately. `assertRunnable` suits functions that already
+ * throw (agentQueueSync throws for unconfigured Supabase, so a throw is in
+ * keeping); this suits functions that declare `Promise<Output | SomeError>`,
+ * where throwing would be a lie about the signature and would behave
+ * differently when called directly than when called through a handler that
+ * catches. That divergence between the direct and dispatched path is a bug
+ * shape this repo has been bitten by more than once.
+ */
+export function checkRunnable(operation) {
+    const state = readKillSwitch();
+    return state.stopped ? new KillSwitchEngagedError(operation, state) : null;
+}
+//# sourceMappingURL=killSwitch.js.map

package/dist/killSwitch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"killSwitch.js","sourceRoot":"","sources":["../src/killSwitch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,qDAAqD;AACrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;AAevF,MAAM,OAAO,GAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAEpD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAClD,uEAAuE;QACvE,2EAA2E;QAC3E,yEAAyE;QACzE,OAAO,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,SAAS;IACvB,OAAO,cAAc,EAAE,CAAC,OAAO,CAAC;AAClC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,OAA6D,EAAE;IAIxF,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,KAAK,GAAoB;QAC7B,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,2EAA2E;QAC3E,yEAAyE;QACzE,0BAA0B;QAC1B,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,cAAc;QACnC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC;IACF,UAAU,CAAC,KAAK,CAAC,CAAC;IAClB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAChD,UAAU,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,KAAsB;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,8EAA8E;IAC9E,6EAA6E;IAC7E,MAAM,GAAG,GAAG,GAAG,gBAAgB,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACrD,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACtE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,GAAG,qBAAqB,CAAC;IAC7B,KAAK,CAAkB;IAEhC,YAAY,SAAiB,EAAE,KAAsB;QACnD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,KAAK,CACH,sBAAsB,IAAI,GAAG,GAAG,GAAG,GAAG,eAAe,SAAS,IAAI;YAChE,gEAAgE,gBAAgB,GAAG,CACtF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,IAAI,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC"}

package/dist/lib/atomicWrite.d.ts

@@ -23,4 +23,27 @@
  * record does not quietly widen or narrow its mode.
  */
 export declare function writeFileAtomic(filePath: string, content: string, encoding?: BufferEncoding): Promise<void>;
+/**
+ * Create `filePath` with `content`, atomically AND exclusively (ISS-0195).
+ *
+ * `writeFile(…, { flag: 'wx' })` is exclusive but not atomic: O_EXCL creates
+ * the file empty and the bytes follow, so a SIGKILL in between leaves a 0-byte
+ * record under a real id. Temp-and-rename is atomic but not exclusive: rename
+ * silently replaces an existing file. `link(2)` is both. It publishes a fully
+ * written, fsynced temp under the final name in one step, and fails with
+ * EEXIST when the name is taken, exactly like O_EXCL. A kill can only leave
+ * the dot-temp behind, which no record scan reads; see sweepAllocationTemps.
+ *
+ * Where hard links are unavailable (some FAT, exFAT and network mounts), this
+ * falls back to the O_EXCL write: still exclusive, and no worse than before.
+ */
+export declare function createFileExclusive(filePath: string, content: string, encoding?: BufferEncoding): Promise<void>;
+/** Suffix of createFileExclusive's temp files. */
+export declare const ALLOC_TEMP_SUFFIX = ".alloc.tmp";
+/**
+ * Remove createFileExclusive temps in `dir` older than `maxAgeMs`: the debris
+ * a killed writer leaves behind. The age floor keeps it from touching a temp
+ * a live writer is still filling. Never throws; this is housekeeping.
+ */
+export declare function sweepAllocationTemps(dir: string, maxAgeMs?: number): Promise<number>;
 //# sourceMappingURL=atomicWrite.d.ts.map

package/dist/lib/atomicWrite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"atomicWrite.d.ts","sourceRoot":"","sources":["../../src/lib/atomicWrite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAMH;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,cAAwB,GACjC,OAAO,CAAC,IAAI,CAAC,CA2Cf"}
+{"version":3,"file":"atomicWrite.d.ts","sourceRoot":"","sources":["../../src/lib/atomicWrite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAMH;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,cAAwB,GACjC,OAAO,CAAC,IAAI,CAAC,CA2Cf;AAKD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,cAAwB,GACjC,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED,kDAAkD;AAClD,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAE9C;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAoB/F"}

package/dist/lib/atomicWrite.js

@@ -70,4 +70,88 @@ export async function writeFileAtomic(filePath, content, encoding = 'utf-8') {
         throw err;
     }
 }
+/** Errors meaning "this filesystem cannot hard-link", not "the target exists". */
+const LINK_UNSUPPORTED = new Set(['EPERM', 'ENOTSUP', 'EOPNOTSUPP', 'EXDEV', 'ENOSYS']);
+/**
+ * Create `filePath` with `content`, atomically AND exclusively (ISS-0195).
+ *
+ * `writeFile(…, { flag: 'wx' })` is exclusive but not atomic: O_EXCL creates
+ * the file empty and the bytes follow, so a SIGKILL in between leaves a 0-byte
+ * record under a real id. Temp-and-rename is atomic but not exclusive: rename
+ * silently replaces an existing file. `link(2)` is both. It publishes a fully
+ * written, fsynced temp under the final name in one step, and fails with
+ * EEXIST when the name is taken, exactly like O_EXCL. A kill can only leave
+ * the dot-temp behind, which no record scan reads; see sweepAllocationTemps.
+ *
+ * Where hard links are unavailable (some FAT, exFAT and network mounts), this
+ * falls back to the O_EXCL write: still exclusive, and no worse than before.
+ */
+export async function createFileExclusive(filePath, content, encoding = 'utf-8') {
+    const dir = path.dirname(filePath);
+    const tmpPath = path.join(dir, `.${path.basename(filePath)}.${randomBytes(6).toString('hex')}${ALLOC_TEMP_SUFFIX}`);
+    let handle;
+    try {
+        handle = await fs.open(tmpPath, 'wx');
+        await handle.writeFile(content, encoding);
+        await handle.sync();
+        await handle.close();
+        handle = undefined;
+        try {
+            await fs.link(tmpPath, filePath);
+        }
+        catch (err) {
+            const code = err.code ?? '';
+            if (!LINK_UNSUPPORTED.has(code))
+                throw err; // EEXIST included: the caller retries.
+            await fs.writeFile(filePath, content, { encoding, flag: 'wx' });
+        }
+    }
+    finally {
+        if (handle) {
+            try {
+                await handle.close();
+            }
+            catch {
+                // Already closed or never opened cleanly.
+            }
+        }
+        try {
+            await fs.unlink(tmpPath);
+        }
+        catch {
+            // Nothing to clean up.
+        }
+    }
+}
+/** Suffix of createFileExclusive's temp files. */
+export const ALLOC_TEMP_SUFFIX = '.alloc.tmp';
+/**
+ * Remove createFileExclusive temps in `dir` older than `maxAgeMs`: the debris
+ * a killed writer leaves behind. The age floor keeps it from touching a temp
+ * a live writer is still filling. Never throws; this is housekeeping.
+ */
+export async function sweepAllocationTemps(dir, maxAgeMs = 10 * 60_000) {
+    let removed = 0;
+    try {
+        const now = Date.now();
+        for (const name of await fs.readdir(dir)) {
+            if (!name.startsWith('.') || !name.endsWith(ALLOC_TEMP_SUFFIX))
+                continue;
+            const full = path.join(dir, name);
+            try {
+                if (now - (await fs.stat(full)).mtimeMs > maxAgeMs) {
+                    await fs.unlink(full);
+                    removed++;
+                }
+            }
+            catch {
+                // Raced with another sweeper, or already gone.
+            }
+        }
+    }
+    catch {
+        // Directory unreadable or absent: nothing to sweep.
+    }
+    return removed;
+}
 //# sourceMappingURL=atomicWrite.js.map

package/dist/lib/atomicWrite.js.map

@@ -1 +1 @@
-{"version":3,"file":"atomicWrite.js","sourceRoot":"","sources":["../../src/lib/atomicWrite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,OAAe,EACf,WAA2B,OAAO;IAElC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEpG,qEAAqE;IACrE,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IAED,IAAI,MAAoD,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1C,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,YAAY;QACZ,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;QAEnB,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;QACH,CAAC;QACD,2EAA2E;QAC3E,sEAAsE;QACtE,uDAAuD;QACvD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"atomicWrite.js","sourceRoot":"","sources":["../../src/lib/atomicWrite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,OAAe,EACf,WAA2B,OAAO;IAElC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEpG,qEAAqE;IACrE,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IAED,IAAI,MAAoD,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1C,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,YAAY;QACZ,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;QAEnB,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;QACH,CAAC;QACD,2EAA2E;QAC3E,sEAAsE;QACtE,uDAAuD;QACvD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAExF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,OAAe,EACf,WAA2B,OAAO;IAElC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,iBAAiB,EAAE,CAAC,CAAC;IAEpH,IAAI,MAAoD,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;QAEnB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,IAAI,EAAE,CAAC;YACvD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,GAAG,CAAC,CAAC,uCAAuC;YACnF,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAE9C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAW,EAAE,QAAQ,GAAG,EAAE,GAAG,MAAM;IAC5E,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAAE,SAAS;YACzE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC;gBACH,IAAI,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;oBACnD,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBACtB,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,+CAA+C;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/recordIdAllocator.d.ts

@@ -4,9 +4,22 @@
  * The defect this closes: `create_issue` picked the next id by scanning the
  * issues directory for the current maximum, then wrote the file many awaits
  * later. Two processes could read the same maximum and both write ISS-0141.
- * Four duplicate-id groups exist on disk from exactly this (ISS-0015, ISS-0028,
- * ISS-0054, ISS-0112), reported independently by the `machina` peer and
- * reproduced locally.
+ * Four duplicate-id groups were produced by exactly this and were found on disk
+ * (ISS-0015, ISS-0028, ISS-0054, ISS-0112), reported independently by the
+ * `machina` peer and reproduced locally. THIS repo's four were cleared: as of
+ * 2026-09-19 it holds 200 issues and 38 epics with ZERO duplicate frontmatter
+ * ids. ISS-0136 remains OPEN, because it is portfolio-wide and 61 groups still
+ * sit in five other projects (frontend_v0.2, senken-trading-agent, machina,
+ * decibel-studio, decibel-tools-mobile). Do not read "clean" here as "clean
+ * everywhere". The history is kept because it is the evidence
+ * this lock exists, not because the state persists — stated in the past tense
+ * deliberately, since the present-tense version outlived the fact and was read
+ * as current by an outside reader, who repeated it in a document.
+ *
+ * Verify by parsing frontmatter, not by grepping. `grep "^id: ISS-"` over this
+ * store counts documents that QUOTE an id — a report about malformed
+ * frontmatter contains the line it is reporting — and that false positive has
+ * already cost one confidently wrong correction.
  *
  * Two independent defences, because a lock only protects callers that take it:
  *
@@ -14,9 +27,12 @@
  *      calculation. Serializing only the scan leaves the same race — both
  *      processes still compute 141 before either file lands.
  *
- *   2. The write itself is O_EXCL. If a caller bypasses the lock entirely — an
- *      old client, a migration script, a future mistake — a colliding write
+ *   2. The write itself is exclusive. If a caller bypasses the lock entirely —
+ *      an old client, a migration script, a future mistake — a colliding write
  *      fails loudly with EEXIST instead of silently overwriting a real issue.
+ *      It is also atomic (ISS-0195): the record is published by link(2) from a
+ *      complete, fsynced temp, so a SIGKILL mid-write can no longer leave a
+ *      0-byte record under a real id, which plain O_EXCL could.
  *
  * Both `createIssue` implementations (src/tools/sentinel.ts and
  * src/sentinelIssues.ts) allocate from a single numbering space and write

package/dist/lib/recordIdAllocator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recordIdAllocator.d.ts","sourceRoot":"","sources":["../../src/lib/recordIdAllocator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAcH,qDAAqD;AACrD,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,MAAM,CAAC;AAgB1C,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAExE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAiC5F;AAED,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE3E;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,IAAI,GAAG,KAAK,EACvB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,EAC1C,OAAO,GAAE;IACP,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;yEACqE;IACrE,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC,GACL,OAAO,CAAC,eAAe,CAAC,CAgC1B;AAED,+DAA+D;AAC/D,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,IAAI,GAAG,KAAK,EACvB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,EACzC,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;CAAO,GAChG,OAAO,CAAC,eAAe,CAAC,CAE1B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,EACxC,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;CAAO,GAChG,OAAO,CAAC,eAAe,CAAC,CAE1B"}
+{"version":3,"file":"recordIdAllocator.d.ts","sourceRoot":"","sources":["../../src/lib/recordIdAllocator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAeH,qDAAqD;AACrD,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,MAAM,CAAC;AAgB1C,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAExE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAiC5F;AAED,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE3E;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,IAAI,GAAG,KAAK,EACvB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,EAC1C,OAAO,GAAE;IACP,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;yEACqE;IACrE,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC,GACL,OAAO,CAAC,eAAe,CAAC,CAiC1B;AAED,+DAA+D;AAC/D,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,IAAI,GAAG,KAAK,EACvB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,EACzC,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;CAAO,GAChG,OAAO,CAAC,eAAe,CAAC,CAE1B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,EACxC,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;CAAO,GAChG,OAAO,CAAC,eAAe,CAAC,CAE1B"}

package/dist/lib/recordIdAllocator.js

@@ -4,9 +4,22 @@
  * The defect this closes: `create_issue` picked the next id by scanning the
  * issues directory for the current maximum, then wrote the file many awaits
  * later. Two processes could read the same maximum and both write ISS-0141.
- * Four duplicate-id groups exist on disk from exactly this (ISS-0015, ISS-0028,
- * ISS-0054, ISS-0112), reported independently by the `machina` peer and
- * reproduced locally.
+ * Four duplicate-id groups were produced by exactly this and were found on disk
+ * (ISS-0015, ISS-0028, ISS-0054, ISS-0112), reported independently by the
+ * `machina` peer and reproduced locally. THIS repo's four were cleared: as of
+ * 2026-09-19 it holds 200 issues and 38 epics with ZERO duplicate frontmatter
+ * ids. ISS-0136 remains OPEN, because it is portfolio-wide and 61 groups still
+ * sit in five other projects (frontend_v0.2, senken-trading-agent, machina,
+ * decibel-studio, decibel-tools-mobile). Do not read "clean" here as "clean
+ * everywhere". The history is kept because it is the evidence
+ * this lock exists, not because the state persists — stated in the past tense
+ * deliberately, since the present-tense version outlived the fact and was read
+ * as current by an outside reader, who repeated it in a document.
+ *
+ * Verify by parsing frontmatter, not by grepping. `grep "^id: ISS-"` over this
+ * store counts documents that QUOTE an id — a report about malformed
+ * frontmatter contains the line it is reporting — and that false positive has
+ * already cost one confidently wrong correction.
  *
  * Two independent defences, because a lock only protects callers that take it:
  *
@@ -14,9 +27,12 @@
  *      calculation. Serializing only the scan leaves the same race — both
  *      processes still compute 141 before either file lands.
  *
- *   2. The write itself is O_EXCL. If a caller bypasses the lock entirely — an
- *      old client, a migration script, a future mistake — a colliding write
+ *   2. The write itself is exclusive. If a caller bypasses the lock entirely —
+ *      an old client, a migration script, a future mistake — a colliding write
  *      fails loudly with EEXIST instead of silently overwriting a real issue.
+ *      It is also atomic (ISS-0195): the record is published by link(2) from a
+ *      complete, fsynced temp, so a SIGKILL mid-write can no longer leave a
+ *      0-byte record under a real id, which plain O_EXCL could.
  *
  * Both `createIssue` implementations (src/tools/sentinel.ts and
  * src/sentinelIssues.ts) allocate from a single numbering space and write
@@ -26,6 +42,7 @@
 import { promises as fs } from 'fs';
 import path from 'path';
 import { withFileLock } from './fileLock.js';
+import { createFileExclusive, sweepAllocationTemps } from './atomicWrite.js';
 /**
  * Lock file guarding id allocation, scoped per record directory.
  *
@@ -118,6 +135,7 @@ export async function allocateAndWriteRecord(dir, prefix, extension, slug, build
     const maxAttempts = options.maxAttempts ?? 5;
     const lockPath = path.join(dir, LOCK_FILENAME);
     return withFileLock(lockPath, async () => {
+        await sweepAllocationTemps(dir);
         let next = (await scanMaxRecordNumber(dir, prefix)) + 1;
         for (let attempt = 0; attempt < maxAttempts; attempt++) {
             const id = formatRecordId(prefix, next);
@@ -125,8 +143,8 @@ export async function allocateAndWriteRecord(dir, prefix, extension, slug, build
             const filePath = path.join(dir, filename);
             options.validate?.(filePath);
             try {
-                // 'wx' is O_EXCL: fails rather than clobbering an existing record.
-                await fs.writeFile(filePath, buildContent(id), { encoding: 'utf-8', flag: 'wx' });
+                // Exclusive (EEXIST rather than clobbering) and atomic (never partial).
+                await createFileExclusive(filePath, buildContent(id));
                 return { id, filename, filePath };
             }
             catch (err) {

package/dist/lib/recordIdAllocator.js.map

@@ -1 +1 @@
-{"version":3,"file":"recordIdAllocator.js","sourceRoot":"","sources":["../../src/lib/recordIdAllocator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAKxC,6EAA6E;AAC7E,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IACnC,sEAAsE;IACtE,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAoB,EAAE,GAAW;IAC9D,OAAO,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAW,EAAE,MAAoB;IACzE,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,CAAC,gCAAgC;IAC5C,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,SAAS,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,UAAU,EAAE,GAAG,CAAC,CAAC;IAErD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,WAAW,EAAE,CAAC;YAChB,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAClD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAAE,SAAS;QAClC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YACxF,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,OAAO;gBAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACxD,OAAO,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAC/C,CAAC;AAQD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAW,EACX,MAAoB,EACpB,SAAuB,EACvB,IAAY,EACZ,YAA0C,EAC1C,UAMI,EAAE;IAEN,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAE/C,OAAO,YAAY,CACjB,QAAQ,EACR,KAAK,IAAI,EAAE;QACT,IAAI,IAAI,GAAG,CAAC,MAAM,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;QAExD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,GAAG,EAAE,IAAI,IAAI,IAAI,SAAS,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC1C,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC;YAC7B,IAAI,CAAC;gBACH,mEAAmE;gBACnE,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClF,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;YACpC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAC;gBAChE,IAAI,EAAE,CAAC,CAAC,8DAA8D;YACxE,CAAC;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,UAAU,GAAG,UAAU,WAAW,YAAY;YAClF,eAAe,cAAc,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,uCAAuC;YACtF,gDAAgD,CACnD,CAAC;IACJ,CAAC,EACD,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACjC,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,SAAuB,EACvB,IAAY,EACZ,YAAyC,EACzC,UAA+F,EAAE;IAEjG,OAAO,sBAAsB,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAgB,EAChB,IAAY,EACZ,YAAwC,EACxC,UAA+F,EAAE;IAEjG,OAAO,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;AACrF,CAAC"}
+{"version":3,"file":"recordIdAllocator.js","sourceRoot":"","sources":["../../src/lib/recordIdAllocator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAE7E;;;;;GAKG;AACH,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAKxC,6EAA6E;AAC7E,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IACnC,sEAAsE;IACtE,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAoB,EAAE,GAAW;IAC9D,OAAO,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAW,EAAE,MAAoB;IACzE,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,CAAC,gCAAgC;IAC5C,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,SAAS,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,UAAU,EAAE,GAAG,CAAC,CAAC;IAErD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,WAAW,EAAE,CAAC;YAChB,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAClD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAAE,SAAS;QAClC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YACxF,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,OAAO;gBAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACxD,OAAO,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAC/C,CAAC;AAQD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAW,EACX,MAAoB,EACpB,SAAuB,EACvB,IAAY,EACZ,YAA0C,EAC1C,UAMI,EAAE;IAEN,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAE/C,OAAO,YAAY,CACjB,QAAQ,EACR,KAAK,IAAI,EAAE;QACT,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,IAAI,GAAG,CAAC,MAAM,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;QAExD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,GAAG,EAAE,IAAI,IAAI,IAAI,SAAS,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC1C,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC;YAC7B,IAAI,CAAC;gBACH,wEAAwE;gBACxE,MAAM,mBAAmB,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;gBACtD,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;YACpC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAC;gBAChE,IAAI,EAAE,CAAC,CAAC,8DAA8D;YACxE,CAAC;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,UAAU,GAAG,UAAU,WAAW,YAAY;YAClF,eAAe,cAAc,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,uCAAuC;YACtF,gDAAgD,CACnD,CAAC;IACJ,CAAC,EACD,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACjC,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,SAAuB,EACvB,IAAY,EACZ,YAAyC,EACzC,UAA+F,EAAE;IAEjG,OAAO,sBAAsB,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAgB,EAChB,IAAY,EACZ,YAAwC,EACxC,UAA+F,EAAE;IAEjG,OAAO,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;AACrF,CAAC"}

package/dist/orgId.d.ts

@@ -0,0 +1,23 @@
+export declare class OrgIdError extends Error {
+}
+/**
+ * The configured org, or null when DECIBEL_ORG_ID is unset or blank.
+ * A value that is set but not a uuid throws: a typo must not look like "unset".
+ */
+export declare function getOrgId(): string | null;
+/** The configured org, or an actionable error naming the variable. */
+export declare function requireOrgId(): string;
+/** True when this process holds HQ service credentials. */
+export declare function isHqConnected(): boolean;
+/**
+ * Startup gate. Throws when HQ credentials are present but no valid org is.
+ * Returns the org when connected, or null for a local-only install.
+ */
+export declare function assertOrgForHqConnection(): string | null;
+/**
+ * For the HQ writers' entry points, which must never throw into the daemon:
+ * the org, or null after logging why the feature is off. Reaching null on the
+ * daemon path means the startup gate was skipped.
+ */
+export declare function orgOrLog(feature: string): string | null;
+//# sourceMappingURL=orgId.d.ts.map

package/dist/orgId.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orgId.d.ts","sourceRoot":"","sources":["../src/orgId.ts"],"names":[],"mappings":"AAqBA,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAExC;;;GAGG;AACH,wBAAgB,QAAQ,IAAI,MAAM,GAAG,IAAI,CAUxC;AAED,sEAAsE;AACtE,wBAAgB,YAAY,IAAI,MAAM,CAWrC;AAED,2DAA2D;AAC3D,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,GAAG,IAAI,CAGxD;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOvD"}

package/dist/orgId.js

@@ -0,0 +1,73 @@
+// ============================================================================
+// The org this daemon serves: one source (EPIC-0040, ADR-0014)
+// ============================================================================
+// There is no default. This used to fall back to a hardcoded uuid, Ben's org,
+// so an HQ-connected daemon that forgot DECIBEL_ORG_ID silently wrote presence
+// and command settlements into that org under service_role. RLS sits below
+// service_role, so nothing caught it. Once HQ gives every account a personal
+// org (decibel-hq ADR-0016), that fallback becomes a cross-tenant write on
+// every solo install, which is why removing it is step (a) of ADR-0014.
+//
+// The org is required exactly where it is used: the HQ-connected path, i.e.
+// SUPABASE_URL and SUPABASE_SERVICE_KEY are set. A local-only install never
+// reads it. assertOrgForHqConnection() is the daemon's startup gate; the
+// readers call requireOrgId() lazily, never at import time, so a missing
+// variable cannot break boot for a process that would never use it.
+// ============================================================================
+import { log } from './config.js';
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+export class OrgIdError extends Error {
+}
+/**
+ * The configured org, or null when DECIBEL_ORG_ID is unset or blank.
+ * A value that is set but not a uuid throws: a typo must not look like "unset".
+ */
+export function getOrgId() {
+    const raw = process.env.DECIBEL_ORG_ID?.trim();
+    if (!raw)
+        return null;
+    if (!UUID_RE.test(raw)) {
+        throw new OrgIdError('DECIBEL_ORG_ID is set but is not a uuid. It must be the id of your org ' +
+            'in HQ (hq.orgs.id).');
+    }
+    return raw.toLowerCase();
+}
+/** The configured org, or an actionable error naming the variable. */
+export function requireOrgId() {
+    const org = getOrgId();
+    if (!org) {
+        throw new OrgIdError('DECIBEL_ORG_ID is not set. HQ-connected features (presence, agent commands, ' +
+            'roster resolution) need the id of the org this machine works for. Set ' +
+            'DECIBEL_ORG_ID to your org id from HQ (hq.orgs.id) in the daemon environment. ' +
+            'There is no default, so writes cannot land in someone else\'s org.');
+    }
+    return org;
+}
+/** True when this process holds HQ service credentials. */
+export function isHqConnected() {
+    return Boolean(process.env.SUPABASE_URL && process.env.SUPABASE_SERVICE_KEY);
+}
+/**
+ * Startup gate. Throws when HQ credentials are present but no valid org is.
+ * Returns the org when connected, or null for a local-only install.
+ */
+export function assertOrgForHqConnection() {
+    if (!isHqConnected())
+        return null;
+    return requireOrgId();
+}
+/**
+ * For the HQ writers' entry points, which must never throw into the daemon:
+ * the org, or null after logging why the feature is off. Reaching null on the
+ * daemon path means the startup gate was skipped.
+ */
+export function orgOrLog(feature) {
+    try {
+        return requireOrgId();
+    }
+    catch (e) {
+        log(`${feature}: disabled. ${e instanceof Error ? e.message : String(e)}`);
+        return null;
+    }
+}
+//# sourceMappingURL=orgId.js.map

package/dist/orgId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orgId.js","sourceRoot":"","sources":["../src/orgId.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,+DAA+D;AAC/D,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,wEAAwE;AACxE,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,yEAAyE;AACzE,oEAAoE;AACpE,+EAA+E;AAE/E,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,MAAM,OAAO,GAAG,iEAAiE,CAAC;AAElF,MAAM,OAAO,UAAW,SAAQ,KAAK;CAAG;AAExC;;;GAGG;AACH,MAAM,UAAU,QAAQ;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,UAAU,CAClB,yEAAyE;YACvE,qBAAqB,CACxB,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC;AAC3B,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,UAAU,CAClB,8EAA8E;YAC5E,wEAAwE;YACxE,gFAAgF;YAChF,oEAAoE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,YAAY,EAAE,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,IAAI,CAAC;QACH,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,GAAG,OAAO,eAAe,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/pairCli.d.ts

@@ -0,0 +1,2 @@
+export declare function runPairCli(argv: string[]): Promise<number>;
+//# sourceMappingURL=pairCli.d.ts.map

package/dist/pairCli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairCli.d.ts","sourceRoot":"","sources":["../src/pairCli.ts"],"names":[],"mappings":"AAwCA,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA0DhE"}