@dharma-ai-labs/agent-fabric 0.2.119 → 0.2.121

package/dist/workspaceRegistry.js

@@ -0,0 +1,24 @@
+import { readFile } from 'node:fs/promises';
+export async function readWorkspaceRegistry(path, read = (file) => readFile(file, 'utf8')) {
+    let contents;
+    try {
+        contents = await read(path);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            return { state: 'absent', records: [] };
+        }
+        throw new Error('workspace_registry_read_failed', { cause: error });
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(contents);
+    }
+    catch (error) {
+        throw new Error('workspace_registry_invalid', { cause: error });
+    }
+    if (!Array.isArray(parsed))
+        throw new Error('workspace_registry_invalid');
+    return { state: 'valid', records: parsed };
+}
+//# sourceMappingURL=workspaceRegistry.js.map

package/dist/workspaceRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceRegistry.js","sourceRoot":"","sources":["../src/workspaceRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAO5C,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,OAA0C,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAE1E,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC1E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAa,EAAE,CAAC;AACpD,CAAC"}

package/dist/workspaceRegistry.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=workspaceRegistry.test.d.ts.map

package/dist/workspaceRegistry.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceRegistry.test.d.ts","sourceRoot":"","sources":["../src/workspaceRegistry.test.ts"],"names":[],"mappings":""}

package/dist/workspaceRegistry.test.js

@@ -0,0 +1,57 @@
+import assert from 'node:assert/strict';
+import { mkdir, mkdtemp, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { run } from './index.js';
+import { readWorkspaceRegistry } from './workspaceRegistry.js';
+test('workspace registry distinguishes absence from a valid empty registry', async () => {
+    assert.deepEqual(await readWorkspaceRegistry('/unused', async () => {
+        throw Object.assign(new Error('missing'), { code: 'ENOENT' });
+    }), { state: 'absent', records: [] });
+    assert.deepEqual(await readWorkspaceRegistry('/unused', async () => '[]'), {
+        state: 'valid', records: [],
+    });
+});
+test('workspace registry fails closed on unreadable or malformed state', async () => {
+    await assert.rejects(readWorkspaceRegistry('/unused', async () => {
+        throw Object.assign(new Error('denied'), { code: 'EACCES' });
+    }), /workspace_registry_read_failed/);
+    await assert.rejects(readWorkspaceRegistry('/unused', async () => '{'), /workspace_registry_invalid/);
+    await assert.rejects(readWorkspaceRegistry('/unused', async () => '{}'), /workspace_registry_invalid/);
+});
+test('diagnostic status reports registry health instead of masking corruption', async () => {
+    const home = await mkdtemp(join(tmpdir(), 'dharma-registry-health-'));
+    await writeFile(join(home, 'device.json'), JSON.stringify({
+        organizationId: 'org_test', deviceId: 'device_test',
+    }));
+    const previous = process.env.DHARMA_HOME;
+    process.env.DHARMA_HOME = home;
+    try {
+        const absent = await run(['status', '--diagnostic']);
+        assert.deepEqual(absent.workspaceRegistry, { state: 'absent', count: 0 });
+        assert.deepEqual(absent.repositoryRelays, {
+            state: 'unavailable', repositories: [], reason: 'workspace_registry_missing',
+        });
+        await mkdir(join(home, 'registry'));
+        await writeFile(join(home, 'registry', 'workspaces.json'), '[]');
+        const valid = await run(['status', '--diagnostic']);
+        assert.deepEqual(valid.workspaceRegistry, { state: 'valid', count: 0 });
+        await writeFile(join(home, 'registry', 'workspaces.json'), '{');
+        const invalid = await run(['status', '--diagnostic']);
+        assert.deepEqual(invalid.workspaceRegistry, {
+            state: 'unavailable', reason: 'workspace_registry_invalid',
+        });
+        assert.deepEqual(invalid.repositoryRelays, {
+            state: 'unavailable', repositories: [], reason: 'workspace_registry_invalid',
+        });
+        await assert.rejects(run(['repositories', 'list']), /workspace_registry_invalid/);
+    }
+    finally {
+        if (previous === undefined)
+            delete process.env.DHARMA_HOME;
+        else
+            process.env.DHARMA_HOME = previous;
+    }
+});
+//# sourceMappingURL=workspaceRegistry.test.js.map

package/dist/workspaceRegistry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceRegistry.test.js","sourceRoot":"","sources":["../src/workspaceRegistry.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,IAAI,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;IACtF,MAAM,CAAC,SAAS,CAAC,MAAM,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACtC,MAAM,CAAC,SAAS,CAAC,MAAM,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;QACzE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;KAC5B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;IAClF,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACtC,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACtG,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,4BAA4B,CAAC,CAAC;AACzG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACtE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;QACxD,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa;KACpD,CAAC,CAAC,CAAC;IACJ,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAA4B,CAAC;QAChF,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE;YACxC,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,4BAA4B;SAC7E,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QACpC,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAAE,IAAI,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAA4B,CAAC;QAC/E,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAAE,GAAG,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAA4B,CAAC;QACjF,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE;YAC1C,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,4BAA4B;SAC3D,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE;YACzC,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,4BAA4B;SAC7E,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACpF,CAAC;YAAS,CAAC;QACT,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;;YACtD,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,QAAQ,CAAC;IAC1C,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/workspaceRegistryRecovery.d.ts

@@ -0,0 +1,60 @@
+export declare function resolveRegistryRecoveryProjection(input: {
+    organizationId: string;
+    deviceId: string;
+    workspaceId: string;
+    policyRevision: string;
+    repositoryFingerprint: string;
+    workspaces: unknown;
+    repositoryAgents: unknown;
+}): {
+    repositoryBindingId: string;
+    repositoryAgentId: string;
+    repositoryAgentKey: string;
+    controlBranch: string;
+    endpointId: string | null;
+    name: string | null;
+    defaultBranch: string | null;
+};
+export declare function appendRecoveredWorkspace<T extends {
+    workspaceId: string;
+    organizationId: string;
+    path: string;
+    repositoryRemoteHash: string | null;
+}>(records: readonly T[], recovered: T): {
+    records: T[];
+    alreadyPresent: boolean;
+};
+export declare function inspectRegistryRecoveryFile<T>(path: string): Promise<{
+    kind: "absent" | "valid" | "corrupt_zero";
+    bytes: Buffer<ArrayBufferLike> | null;
+    records: T[];
+    hash: string | null;
+}>;
+export declare function backupRegistryRecoveryFile(input: {
+    home: string;
+    path: string;
+    expectedBytes: Buffer | null;
+}): Promise<string | null>;
+export declare function applyRegistryRecoveryFile<T extends {
+    workspaceId: string;
+    organizationId: string;
+    path: string;
+    repositoryRemoteHash: string | null;
+}>(input: {
+    home: string;
+    path: string;
+    expectedKind: 'absent' | 'corrupt_zero' | 'valid';
+    expectedHash: string | null;
+    entry: T;
+}): Promise<{
+    state: "already_present";
+    backup: null;
+    previousHash: string | null;
+    restoredCount: number;
+} | {
+    state: "recovered";
+    backup: string | null;
+    previousHash: string | null;
+    restoredCount: number;
+}>;
+//# sourceMappingURL=workspaceRegistryRecovery.d.ts.map

package/dist/workspaceRegistryRecovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceRegistryRecovery.d.ts","sourceRoot":"","sources":["../src/workspaceRegistryRecovery.ts"],"names":[],"mappings":"AAgBA,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;yBA4CsC,MAAM;uBACW,MAAM;wBACnB,MAAM;mBACJ,MAAM;;;;EAKlD;AAED,wBAAgB,wBAAwB,CAAC,CAAC,SAAS;IACjD,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CAChG,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG;IAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,CAoBjF;AAED,wBAAsB,2BAA2B,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM;;;;;GAwBhE;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,0BAUA;AAED,wBAAsB,yBAAyB,CAAC,CAAC,SAAS;IACxD,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CAChG,EAAE,KAAK,EAAE;IACR,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,QAAQ,GAAG,cAAc,GAAG,OAAO,CAAC;IAClD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC;CACV;;;;;;;;;;GA+BA"}

package/dist/workspaceRegistryRecovery.js

@@ -0,0 +1,167 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { lstat, mkdir, readFile, rename, unlink, writeFile } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+function object(value) {
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : null;
+}
+function unique(rows, predicate, code) {
+    const matching = rows.map(object).filter((row) => Boolean(row && predicate(row)));
+    if (matching.length !== 1)
+        throw new Error(code);
+    return matching[0];
+}
+export function resolveRegistryRecoveryProjection(input) {
+    const workspaces = object(input.workspaces);
+    const agents = object(input.repositoryAgents);
+    if (workspaces?.ok !== true || workspaces.organizationId !== input.organizationId
+        || !Array.isArray(workspaces.workspaces)
+        || agents?.ok !== true || agents.organizationId !== input.organizationId
+        || !Array.isArray(agents.repositoryAgents)) {
+        throw new Error('registry_recovery_server_scope_mismatch');
+    }
+    const workspace = unique(workspaces.workspaces, row => row.id === input.workspaceId, 'registry_recovery_workspace_missing_or_ambiguous');
+    if (workspace.device_id !== input.deviceId || workspace.status !== 'active'
+        || workspace.policy_revision !== input.policyRevision
+        || typeof workspace.repository_binding_id !== 'string') {
+        throw new Error('registry_recovery_workspace_authority_mismatch');
+    }
+    const binding = unique(agents.repositoryAgents, row => row.id === workspace.repository_binding_id, 'registry_recovery_binding_missing_or_ambiguous');
+    if (binding.status !== 'active'
+        || binding.source_repository_fingerprint !== input.repositoryFingerprint
+        || typeof binding.organization_agent_id !== 'string'
+        || typeof binding.control_branch !== 'string' || !binding.control_branch) {
+        throw new Error('registry_recovery_repository_mismatch');
+    }
+    const agent = object(binding.agent);
+    if (!agent || agent.id !== binding.organization_agent_id
+        || typeof agent.agent_key !== 'string' || !agent.agent_key) {
+        throw new Error('registry_recovery_agent_mismatch');
+    }
+    if (!Array.isArray(binding.workspaces)
+        || !binding.workspaces.some(value => {
+            const row = object(value);
+            return row?.id === input.workspaceId && row.device_id === input.deviceId
+                && row.repository_binding_id === binding.id && row.status === 'active';
+        })) {
+        throw new Error('registry_recovery_binding_workspace_mismatch');
+    }
+    const endpoints = Array.isArray(binding.endpoints) ? binding.endpoints : [];
+    const matchingEndpoints = endpoints.map(object).filter((row) => Boolean(row
+        && row.workspace_id === input.workspaceId && row.device_id === input.deviceId
+        && row.organization_agent_id === binding.organization_agent_id && row.status === 'active'));
+    if (matchingEndpoints.length > 1)
+        throw new Error('registry_recovery_endpoint_ambiguous');
+    return {
+        repositoryBindingId: binding.id,
+        repositoryAgentId: binding.organization_agent_id,
+        repositoryAgentKey: agent.agent_key,
+        controlBranch: binding.control_branch,
+        endpointId: typeof matchingEndpoints[0]?.id === 'string' ? matchingEndpoints[0].id : null,
+        name: typeof workspace.name === 'string' && workspace.name ? workspace.name : null,
+        defaultBranch: typeof workspace.default_branch === 'string' ? workspace.default_branch : null,
+    };
+}
+export function appendRecoveredWorkspace(records, recovered) {
+    if (records.some(row => !row || typeof row.workspaceId !== 'string'
+        || typeof row.organizationId !== 'string' || typeof row.path !== 'string')) {
+        throw new Error('registry_recovery_existing_rows_invalid');
+    }
+    if (records.some(row => row.organizationId !== recovered.organizationId)) {
+        throw new Error('registry_recovery_foreign_organization');
+    }
+    const matches = records.filter(row => row.workspaceId === recovered.workspaceId || row.path === recovered.path);
+    if (matches.length > 1)
+        throw new Error('registry_recovery_existing_rows_ambiguous');
+    if (matches.length === 1) {
+        const row = matches[0];
+        if (row.workspaceId !== recovered.workspaceId || row.path !== recovered.path
+            || row.organizationId !== recovered.organizationId
+            || row.repositoryRemoteHash !== recovered.repositoryRemoteHash) {
+            throw new Error('registry_recovery_existing_row_conflict');
+        }
+        return { records: [...records], alreadyPresent: true };
+    }
+    return { records: [...records, recovered], alreadyPresent: false };
+}
+export async function inspectRegistryRecoveryFile(path) {
+    let bytes = null;
+    try {
+        const metadata = await lstat(path);
+        if (!metadata.isFile() || metadata.isSymbolicLink() || metadata.nlink !== 1) {
+            throw new Error('registry_recovery_registry_file_unsafe');
+        }
+        bytes = await readFile(path);
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+    let records = [];
+    if (bytes && bytes.length > 0) {
+        let parsed;
+        try {
+            parsed = JSON.parse(bytes.toString('utf8'));
+        }
+        catch {
+            throw new Error('registry_recovery_nonempty_registry_invalid');
+        }
+        if (!Array.isArray(parsed))
+            throw new Error('registry_recovery_nonempty_registry_invalid');
+        records = parsed;
+    }
+    return {
+        kind: bytes === null ? 'absent' : bytes.length === 0 ? 'corrupt_zero' : 'valid',
+        bytes, records,
+        hash: bytes === null ? null : `sha256:${createHash('sha256').update(bytes).digest('hex')}`,
+    };
+}
+export async function backupRegistryRecoveryFile(input) {
+    if (input.expectedBytes === null)
+        return null;
+    const directory = resolve(input.home, 'registry', 'recovery-backups');
+    await mkdir(directory, { recursive: true, mode: 0o700 });
+    if (!(await lstat(directory)).isDirectory())
+        throw new Error('registry_recovery_backup_directory_unsafe');
+    const backup = resolve(directory, `workspaces-${Date.now()}-${randomUUID()}.bin`);
+    await writeFile(backup, input.expectedBytes, { flag: 'wx', mode: 0o600 });
+    const current = await readFile(input.path);
+    if (!current.equals(input.expectedBytes))
+        throw new Error('registry_recovery_registry_changed');
+    return backup;
+}
+export async function applyRegistryRecoveryFile(input) {
+    const current = await inspectRegistryRecoveryFile(input.path);
+    if (current.kind !== input.expectedKind || current.hash !== input.expectedHash) {
+        throw new Error('registry_recovery_registry_changed');
+    }
+    const final = appendRecoveredWorkspace(current.records, input.entry);
+    if (final.alreadyPresent)
+        return { state: 'already_present', backup: null,
+            previousHash: current.hash, restoredCount: final.records.length };
+    const backup = await backupRegistryRecoveryFile({ home: input.home, path: input.path,
+        expectedBytes: current.bytes });
+    const temporary = `${input.path}.${process.pid}.${randomUUID()}.tmp`;
+    await mkdir(dirname(input.path), { recursive: true, mode: 0o700 });
+    try {
+        await writeFile(temporary, `${JSON.stringify(final.records, null, 2)}\n`, { flag: 'wx', mode: 0o600 });
+        const beforeReplace = await inspectRegistryRecoveryFile(input.path);
+        if (beforeReplace.kind !== current.kind || beforeReplace.hash !== current.hash) {
+            throw new Error('registry_recovery_registry_changed');
+        }
+        await rename(temporary, input.path);
+    }
+    finally {
+        await unlink(temporary).catch(error => {
+            if (error.code !== 'ENOENT')
+                throw error;
+        });
+    }
+    const confirmed = await inspectRegistryRecoveryFile(input.path);
+    if (confirmed.kind !== 'valid' || confirmed.records.length !== final.records.length
+        || !confirmed.records.some(row => row.workspaceId === input.entry.workspaceId && row.path === input.entry.path)) {
+        throw new Error('registry_recovery_write_unconfirmed');
+    }
+    return { state: 'recovered', backup, previousHash: current.hash,
+        restoredCount: confirmed.records.length };
+}
+//# sourceMappingURL=workspaceRegistryRecovery.js.map

package/dist/workspaceRegistryRecovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceRegistryRecovery.js","sourceRoot":"","sources":["../src/workspaceRegistryRecovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAI7C,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAY,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3F,CAAC;AAED,SAAS,MAAM,CAAC,IAAe,EAAE,SAAgC,EAAE,IAAY;IAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAc,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;IACjD,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAQjD;IACC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC9C,IAAI,UAAU,EAAE,EAAE,KAAK,IAAI,IAAI,UAAU,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;WAC5E,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;WACrC,MAAM,EAAE,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;WACrE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,WAAW,EACjF,kDAAkD,CAAC,CAAC;IACtD,IAAI,SAAS,CAAC,SAAS,KAAK,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ;WACtE,SAAS,CAAC,eAAe,KAAK,KAAK,CAAC,cAAc;WAClD,OAAO,SAAS,CAAC,qBAAqB,KAAK,QAAQ,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAC5C,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,qBAAqB,EACjD,gDAAgD,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;WAC1B,OAAO,CAAC,6BAA6B,KAAK,KAAK,CAAC,qBAAqB;WACrE,OAAO,OAAO,CAAC,qBAAqB,KAAK,QAAQ;WACjD,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,qBAAqB;WACnD,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC;WACjC,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YAClC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO,GAAG,EAAE,EAAE,KAAK,KAAK,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,QAAQ;mBACnE,GAAG,CAAC,qBAAqB,KAAK,OAAO,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC;QAC3E,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,MAAM,iBAAiB,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAc,EAAE,CAAC,OAAO,CAAC,GAAG;WAClF,GAAG,CAAC,YAAY,KAAK,KAAK,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,QAAQ;WAC1E,GAAG,CAAC,qBAAqB,KAAK,OAAO,CAAC,qBAAqB,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC;IAC9F,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1F,OAAO;QACL,mBAAmB,EAAE,OAAO,CAAC,EAAY;QACzC,iBAAiB,EAAE,OAAO,CAAC,qBAA+B;QAC1D,kBAAkB,EAAE,KAAK,CAAC,SAAmB;QAC7C,aAAa,EAAE,OAAO,CAAC,cAAwB;QAC/C,UAAU,EAAE,OAAO,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;QACzF,IAAI,EAAE,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAClF,aAAa,EAAE,OAAO,SAAS,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;KAC9F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAErC,OAAqB,EAAE,SAAY;IACpC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;WAC9D,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC;IAChH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACrF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACxB,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI;eACvE,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,cAAc;eAC/C,GAAG,CAAC,oBAAoB,KAAK,SAAS,CAAC,oBAAoB,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,SAAS,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAI,IAAY;IAC/D,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,QAAQ,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,GAAQ,EAAE,CAAC;IACtB,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QACpD,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAAC,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC3F,OAAO,GAAG,MAAa,CAAC;IAC1B,CAAC;IACD,OAAO;QACL,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,cAAuB,CAAC,CAAC,CAAC,OAAgB;QAC1G,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;KAC3F,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAIhD;IACC,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;IACtE,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC1G,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,cAAc,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAClF,MAAM,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAChG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAE5C,KAMF;IACC,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAI,KAAK,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,YAAY,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,KAAK,GAAG,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,cAAc;QAAE,OAAO,EAAE,KAAK,EAAE,iBAA0B,EAAE,MAAM,EAAE,IAAI;YAChF,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;QAClF,aAAa,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACrE,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvG,MAAM,aAAa,GAAG,MAAM,2BAA2B,CAAI,KAAK,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,aAAa,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,aAAa,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YACpC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAI,KAAK,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM;WAC9E,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAClH,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,WAAoB,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI;QACtE,aAAa,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;AAC9C,CAAC"}

package/dist/workspaceRegistryRecovery.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=workspaceRegistryRecovery.test.d.ts.map

package/dist/workspaceRegistryRecovery.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceRegistryRecovery.test.d.ts","sourceRoot":"","sources":["../src/workspaceRegistryRecovery.test.ts"],"names":[],"mappings":""}

package/dist/workspaceRegistryRecovery.test.js

@@ -0,0 +1,111 @@
+import assert from 'node:assert/strict';
+import { link, mkdtemp, mkdir, readFile, symlink, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { appendRecoveredWorkspace, applyRegistryRecoveryFile, backupRegistryRecoveryFile, inspectRegistryRecoveryFile, resolveRegistryRecoveryProjection } from './workspaceRegistryRecovery.js';
+const scope = { organizationId: 'org_test', deviceId: 'device_test', workspaceId: 'workspace_test',
+    policyRevision: 'policy_test', repositoryFingerprint: 'sha256:source' };
+const workspaces = { ok: true, organizationId: scope.organizationId, workspaces: [{
+            id: scope.workspaceId, device_id: scope.deviceId, status: 'active', repository_binding_id: 'binding_test',
+            name: 'repo', default_branch: 'main', policy_revision: scope.policyRevision,
+        }] };
+const repositoryAgents = { ok: true, organizationId: scope.organizationId, repositoryAgents: [{
+            id: 'binding_test', status: 'active', source_repository_fingerprint: scope.repositoryFingerprint,
+            organization_agent_id: 'agent_test', control_branch: 'agent-fabric/control',
+            agent: { id: 'agent_test', agent_key: 'repo-key' },
+            workspaces: [{ id: scope.workspaceId, device_id: scope.deviceId, repository_binding_id: 'binding_test', status: 'active' }],
+            endpoints: [{ id: 'endpoint_test', workspace_id: scope.workspaceId, device_id: scope.deviceId,
+                    organization_agent_id: 'agent_test', status: 'active' }],
+        }] };
+test('registry recovery accepts only one current-device canonical binding', () => {
+    assert.deepEqual(resolveRegistryRecoveryProjection({ ...scope, workspaces, repositoryAgents }), {
+        repositoryBindingId: 'binding_test', repositoryAgentId: 'agent_test', repositoryAgentKey: 'repo-key',
+        controlBranch: 'agent-fabric/control', endpointId: 'endpoint_test', name: 'repo', defaultBranch: 'main',
+    });
+});
+test('registry recovery rejects foreign, revoked, duplicate and mismatched projections', () => {
+    const resolve = (workspaceRows, agentRows) => resolveRegistryRecoveryProjection({ ...scope, workspaces: workspaceRows, repositoryAgents: agentRows });
+    assert.throws(() => resolve({ ...workspaces, organizationId: 'org_other' }, repositoryAgents), /scope_mismatch/);
+    assert.throws(() => resolve({ ...workspaces, workspaces: [workspaces.workspaces[0], workspaces.workspaces[0]] }, repositoryAgents), /workspace_missing_or_ambiguous/);
+    assert.throws(() => resolve({ ...workspaces, workspaces: [{ ...workspaces.workspaces[0], device_id: 'foreign' }] }, repositoryAgents), /workspace_authority_mismatch/);
+    assert.throws(() => resolve({ ...workspaces, workspaces: [{ ...workspaces.workspaces[0], status: 'revoked' }] }, repositoryAgents), /workspace_authority_mismatch/);
+    assert.throws(() => resolve({ ...workspaces, workspaces: [{ ...workspaces.workspaces[0], policy_revision: 'newer' }] }, repositoryAgents), /workspace_authority_mismatch/);
+    const binding = repositoryAgents.repositoryAgents[0];
+    assert.throws(() => resolve(workspaces, { ...repositoryAgents, repositoryAgents: [{ ...binding,
+                source_repository_fingerprint: 'sha256:other' }] }), /repository_mismatch/);
+    assert.throws(() => resolve(workspaces, { ...repositoryAgents, repositoryAgents: [{ ...binding,
+                workspaces: [] }] }), /binding_workspace_mismatch/);
+    assert.throws(() => resolve(workspaces, { ...repositoryAgents, repositoryAgents: [{ ...binding,
+                endpoints: [binding.endpoints[0], binding.endpoints[0]] }] }), /endpoint_ambiguous/);
+});
+test('registry recovery appends without overwriting another workspace or foreign state', () => {
+    const first = { workspaceId: 'first', organizationId: 'org_test', path: '/first', repositoryRemoteHash: 'sha256:first' };
+    const second = { workspaceId: 'second', organizationId: 'org_test', path: '/second', repositoryRemoteHash: 'sha256:second' };
+    assert.deepEqual(appendRecoveredWorkspace([first], second), { records: [first, second], alreadyPresent: false });
+    assert.deepEqual(appendRecoveredWorkspace([first], first), { records: [first], alreadyPresent: true });
+    assert.throws(() => appendRecoveredWorkspace([first], { ...second, path: '/first' }), /existing_row_conflict/);
+    assert.throws(() => appendRecoveredWorkspace([first, first], first), /existing_rows_ambiguous/);
+    assert.throws(() => appendRecoveredWorkspace([{ ...first, organizationId: 'foreign' }], second), /foreign_organization/);
+});
+test('registry recovery preserves zero-byte evidence and rejects changed files', async () => {
+    const home = await mkdtemp(join(tmpdir(), 'registry-recovery-'));
+    const directory = join(home, 'registry');
+    await mkdir(directory);
+    const path = join(directory, 'workspaces.json');
+    await writeFile(path, '');
+    const snapshot = await inspectRegistryRecoveryFile(path);
+    assert.equal(snapshot.kind, 'corrupt_zero');
+    assert.equal(snapshot.hash, 'sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855');
+    const backup = await backupRegistryRecoveryFile({ home, path, expectedBytes: snapshot.bytes });
+    assert.ok(backup);
+    assert.equal((await readFile(backup)).length, 0);
+    assert.equal((await readFile(path)).length, 0);
+    await writeFile(path, '[]');
+    await assert.rejects(backupRegistryRecoveryFile({ home, path, expectedBytes: snapshot.bytes }), /registry_recovery_registry_changed/);
+    assert.equal((await inspectRegistryRecoveryFile(path)).kind, 'valid');
+    await writeFile(path, '{');
+    await assert.rejects(inspectRegistryRecoveryFile(path), /registry_recovery_nonempty_registry_invalid/);
+    assert.equal((await readFile(path, 'utf8')), '{');
+});
+test('registry recovery refuses symlinked registry and does not follow its target', async () => {
+    const home = await mkdtemp(join(tmpdir(), 'registry-recovery-link-'));
+    const target = join(home, 'target.json');
+    await writeFile(target, '[]');
+    await mkdir(join(home, 'registry'));
+    await symlink(target, join(home, 'registry', 'workspaces.json'));
+    await assert.rejects(inspectRegistryRecoveryFile(join(home, 'registry', 'workspaces.json')), /registry_recovery_registry_file_unsafe/);
+    assert.equal(await readFile(target, 'utf8'), '[]');
+});
+test('registry recovery refuses a hardlinked registry file', async () => {
+    const home = await mkdtemp(join(tmpdir(), 'registry-recovery-hardlink-'));
+    const target = join(home, 'target.json');
+    await writeFile(target, '[]');
+    await mkdir(join(home, 'registry'));
+    await link(target, join(home, 'registry', 'workspaces.json'));
+    await assert.rejects(inspectRegistryRecoveryFile(join(home, 'registry', 'workspaces.json')), /registry_recovery_registry_file_unsafe/);
+    assert.equal(await readFile(target, 'utf8'), '[]');
+});
+test('registry recovery applies one row atomically and preserves the corrupt file', async () => {
+    const home = await mkdtemp(join(tmpdir(), 'registry-recovery-apply-'));
+    const directory = join(home, 'registry');
+    await mkdir(directory);
+    const path = join(directory, 'workspaces.json');
+    await writeFile(path, '');
+    const entry = { workspaceId: 'anchor', organizationId: 'org_test', path: '/anchor',
+        repositoryRemoteHash: 'sha256:source' };
+    const expectedHash = (await inspectRegistryRecoveryFile(path)).hash;
+    const applied = await applyRegistryRecoveryFile({ home, path, expectedKind: 'corrupt_zero', expectedHash, entry });
+    assert.equal(applied.state, 'recovered');
+    assert.ok(applied.backup);
+    assert.equal((await readFile(applied.backup)).length, 0);
+    assert.deepEqual(JSON.parse(await readFile(path, 'utf8')), [entry]);
+    await assert.rejects(applyRegistryRecoveryFile({ home, path, expectedKind: 'corrupt_zero', expectedHash, entry }), /registry_recovery_registry_changed/);
+    const second = { ...entry, workspaceId: 'second', path: '/second' };
+    const currentHash = (await inspectRegistryRecoveryFile(path)).hash;
+    const added = await applyRegistryRecoveryFile({ home, path, expectedKind: 'valid', expectedHash: currentHash,
+        entry: second });
+    assert.equal(added.restoredCount, 2);
+    assert.deepEqual(JSON.parse(await readFile(path, 'utf8')), [entry, second]);
+});
+//# sourceMappingURL=workspaceRegistryRecovery.test.js.map

package/dist/workspaceRegistryRecovery.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceRegistryRecovery.test.js","sourceRoot":"","sources":["../src/workspaceRegistryRecovery.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,2BAA2B,EACnH,iCAAiC,EAAE,MAAM,gCAAgC,CAAC;AAE5E,MAAM,KAAK,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB;IAChG,cAAc,EAAE,aAAa,EAAE,qBAAqB,EAAE,eAAe,EAAE,CAAC;AAC1E,MAAM,UAAU,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,UAAU,EAAE,CAAC;YAChF,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,qBAAqB,EAAE,cAAc;YACzG,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,cAAc;SAC5E,CAAC,EAAE,CAAC;AACL,MAAM,gBAAgB,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,gBAAgB,EAAE,CAAC;YAC5F,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,6BAA6B,EAAE,KAAK,CAAC,qBAAqB;YAChG,qBAAqB,EAAE,YAAY,EAAE,cAAc,EAAE,sBAAsB;YAC3E,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE;YAClD,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAC3H,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ;oBAC3F,qBAAqB,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;SAC3D,CAAC,EAAE,CAAC;AAEL,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,MAAM,CAAC,SAAS,CAAC,iCAAiC,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,EAAE;QAC9F,mBAAmB,EAAE,cAAc,EAAE,iBAAiB,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU;QACpG,aAAa,EAAE,sBAAsB,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;KACxG,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kFAAkF,EAAE,GAAG,EAAE;IAC5F,MAAM,OAAO,GAAG,CAAC,aAAsB,EAAE,SAAkB,EAAE,EAAE,CAC7D,iCAAiC,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1G,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACjH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,UAAU,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAC7G,gBAAgB,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACvD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,UAAU,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,EAChH,gBAAgB,CAAC,EAAE,8BAA8B,CAAC,CAAC;IACrD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,UAAU,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,EAC7G,gBAAgB,CAAC,EAAE,8BAA8B,CAAC,CAAC;IACrD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,UAAU,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,EAAE,EACpH,gBAAgB,CAAC,EAAE,8BAA8B,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAAE,CAAC;IACtD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,GAAG,gBAAgB,EAAE,gBAAgB,EAAE,CAAC,EAAE,GAAG,OAAO;gBAC5F,6BAA6B,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC9E,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,GAAG,gBAAgB,EAAE,gBAAgB,EAAE,CAAC,EAAE,GAAG,OAAO;gBAC5F,UAAU,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACtD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,GAAG,gBAAgB,EAAE,gBAAgB,EAAE,CAAC,EAAE,GAAG,OAAO;gBAC5F,SAAS,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,oBAAoB,CAAC,CAAC;AACzF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kFAAkF,EAAE,GAAG,EAAE;IAC5F,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,cAAc,EAAE,CAAC;IACzH,MAAM,MAAM,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,oBAAoB,EAAE,eAAe,EAAE,CAAC;IAC7H,MAAM,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IACjH,MAAM,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IACvG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC/G,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAChG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,CAAC,EAC7F,sBAAsB,CAAC,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,yEAAyE,CAAC,CAAC;IACvG,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/F,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IAClB,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/C,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5B,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,EAC5F,oCAAoC,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtE,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,MAAM,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,6CAA6C,CAAC,CAAC;IACvG,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;IAC7F,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACzC,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9B,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACpC,MAAM,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACjE,MAAM,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC,EACzF,wCAAwC,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;IACtE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACzC,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9B,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACpC,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC9D,MAAM,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC,EACzF,wCAAwC,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;IAC7F,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS;QAChF,oBAAoB,EAAE,eAAe,EAAE,CAAC;IAC1C,MAAM,YAAY,GAAG,CAAC,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACnH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACzC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAC/G,oCAAoC,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACpE,MAAM,WAAW,GAAG,CAAC,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW;QAC1G,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACnB,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9E,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dharma-ai-labs/agent-fabric",
-  "version": "0.2.119",
+  "version": "0.2.121",
   "description": "Local-first CLI for connecting coding agents to Dharma evaluation, orchestration, and signed Skill delivery",
   "license": "MIT",
   "homepage": "https://github.com/dharma-ai-labs/dharma-agent-fabric/tree/main/packages/cli#readme",