@dharma-ai-labs/agent-fabric 0.2.153 → 0.2.155

package/dist/startupCommitScope.test.js

@@ -0,0 +1,172 @@
+import assert from 'node:assert/strict';
+import { execFile } from 'node:child_process';
+import { createHash, randomUUID } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import test from 'node:test';
+import { promisify } from 'node:util';
+import { compileFunction } from 'node:vm';
+import ts from 'typescript';
+import { currentBootstrapHostScope, prepareCodexBootstrapHost, runCodexBootstrapHostScope } from './bootstrapHostScope.js';
+const id = (n) => `${String(n).padStart(8, '0')}-1111-4111-8111-111111111111`;
+// Whole production declarations, real lifetime fencing, synthetic OS/filesystem.
+// No Docker, private store, native client, disk probe or real file mutation.
+async function fixture(phase, failure = 'withdraw') {
+    const workspace = resolve(tmpdir(), 'dharma-startup-commit-synthetic'), signal = new AbortController();
+    const now = Date.now(), lifetime = failure === 'expire' ? 1500 : 60_000;
+    let valid = true;
+    const hash = `sha256:${'a'.repeat(64)}`;
+    const prepared = prepareCodexBootstrapHost({ workspace, signal: signal.signal, current: async () => valid,
+        intent: { schema: 'dharma.codex-setup-intent/v1', operationId: id(1), setupReference: id(2),
+            organizationId: 'org_demo', recipientMembershipId: id(3), origin: 'https://hq.example',
+            repositoryFingerprint: hash, policyRevision: 'policy-v1', scopeDigest: hash, contractDigest: hash,
+            hostContextId: id(4), issuedAt: new Date(now - 1000).toISOString(), expiresAt: new Date(now + lifetime).toISOString() } });
+    const writes = [], commits = [], removals = [], commands = [];
+    const stored = new Map(), phases = [];
+    const boundary = async (at) => {
+        phases.push(at);
+        await Promise.resolve();
+        if (at !== phase)
+            return;
+        if (failure === 'withdraw')
+            signal.abort();
+        else if (failure === 'identity')
+            valid = false;
+        else if (failure === 'error')
+            throw new Error('synthetic_commit_uncertain');
+        else
+            await new Promise(done => setTimeout(done, Math.max(1, now + lifetime - Date.now()) + 40));
+    };
+    const registration = { schema: 'dharma.relay-autostart/v3', backend: 'container-entrypoint',
+        launcher: resolve(workspace, '.dharma', 'bin', 'dharma'), workspace,
+        policy: resolve(workspace, '.dharma', 'approved-policy.json'), version: '0.2.153', taskName: null };
+    const options = { home: resolve(workspace, 'private-home') };
+    const dependencies = {
+        currentBootstrapHostScope, createHash, randomUUID, join,
+        privatePath: (home, name) => join(home, 'relay', name),
+        privateDirectory: async () => boundary('directory'),
+        privateJson: async () => boundary('existing'),
+        containerEntrypointAvailable: async () => { await boundary('controller'); return true; },
+        writeFile: async (path, bytes) => { writes.push(path); stored.set(path, bytes); await boundary('temporary'); },
+        rename: async (path, destination) => {
+            commits.push(destination);
+            stored.set(destination, stored.get(path));
+            stored.delete(path);
+            await boundary('commit');
+        },
+        rm: async (path) => { removals.push(path); stored.delete(path); },
+        readRegistration: async () => { await boundary('registration'); return { ...registration, backend: 'systemd-user' }; },
+        relayAutostartStatus: async () => { await boundary('status'); return { state: 'enabled' }; },
+        defaultRunner: async (file, args) => { commands.push([file, args]); await boundary('os'); return { stdout: '' }; },
+        unavailable: () => new Error('container_startup_unavailable'), UNIT_NAME: 'dharma-agent-fabric.service',
+    };
+    const baseline = process.env.DHARMA_STARTUP_COMMIT_BASELINE_SHA;
+    if (baseline && !/^[a-f0-9]{40}$/.test(baseline))
+        throw new Error('startup_commit_baseline_invalid');
+    const declaration = async (file, name) => {
+        const source = baseline ? (await promisify(execFile)('git', ['show', `${baseline}:packages/cli/src/${file}`], { cwd: resolve(import.meta.dirname, '../../..'), maxBuffer: 1024 * 1024 })).stdout
+            : await readFile(new URL(`../src/${file}`, import.meta.url), 'utf8');
+        const ast = ts.createSourceFile(file, source, ts.ScriptTarget.Latest, true);
+        const nodes = ast.statements.filter(node => ts.isFunctionDeclaration(node) && node.name?.text === name);
+        assert.equal(nodes.length, 1);
+        const compiled = ts.transpileModule(nodes[0].getText(ast), { compilerOptions: {
+                target: ts.ScriptTarget.ES2023, module: ts.ModuleKind.CommonJS
+            }, reportDiagnostics: true });
+        assert.equal(compiled.diagnostics?.filter(d => d.category === ts.DiagnosticCategory.Error).length, 0);
+        return compileFunction(compiled.outputText + `\nreturn ${name};`, ['exports', ...Object.keys(dependencies)])({}, ...Object.values(dependencies));
+    };
+    dependencies.registrationHash = await declaration('containerRelayLifecycle.ts', 'registrationHash');
+    dependencies.writePrivateJson = await declaration('containerRelayLifecycle.ts', 'writePrivateJson');
+    const control = await declaration('containerRelayLifecycle.ts', 'containerStartupControl');
+    dependencies.containerStartupControl = control;
+    const start = await declaration('relayAutostart.ts', 'startRelayAutostart');
+    return { prepared, phases, writes, commits, removals, commands, stored, options,
+        cancel: () => signal.abort(),
+        call: () => runCodexBootstrapHostScope(prepared.scope, () => control(options, registration, true)),
+        legacy: () => control(options, registration, true),
+        start: () => runCodexBootstrapHostScope(prepared.scope, () => start(options)) };
+}
+test('startup commit retains one active scoped control with private temporary cleanup', async () => {
+    const f = await fixture();
+    await f.call();
+    assert.equal(f.writes.length, 1);
+    assert.equal(f.commits.length, 1);
+    assert.equal(f.removals.length, 1);
+    assert.equal(f.stored.size, 1);
+    assert.equal(JSON.parse(f.stored.get(f.commits[0])).running, true);
+});
+for (const phase of ['controller', 'directory', 'existing']) {
+    test(`startup commit refuses withdrawal during ${phase} verification before any write`, async () => {
+        const f = await fixture(phase);
+        await assert.rejects(f.call(), /codex_setup_host_scope_unavailable/);
+        assert.equal(f.writes.length, 0);
+        assert.equal(f.commits.length, 0);
+    });
+}
+test('startup commit refuses expired original authority after controller verification', async () => {
+    const f = await fixture('controller', 'expire');
+    await assert.rejects(f.call(), /codex_setup_host_scope_unavailable/);
+    assert.equal(f.writes.length, 0);
+    assert.equal(f.commits.length, 0);
+});
+test('startup commit refuses changed owner identity after controller verification', async () => {
+    const f = await fixture('controller', 'identity');
+    await assert.rejects(f.call(), /codex_setup_host_scope_unavailable/);
+    assert.equal(f.writes.length, 0);
+    assert.equal(f.commits.length, 0);
+});
+for (const failure of ['withdraw', 'identity']) {
+    test(`startup commit refuses ${failure} between temporary write and control rename`, async () => {
+        const f = await fixture('temporary', failure);
+        await assert.rejects(f.call(), /codex_setup_host_scope_unavailable/);
+        assert.equal(f.writes.length, 1);
+        assert.equal(f.commits.length, 0);
+        assert.equal(f.removals.length, 1);
+        assert.equal(f.stored.size, 0);
+    });
+}
+test('startup commit does not turn an admitted rename with lost authority into rollback or success', async () => {
+    const f = await fixture('commit');
+    await assert.rejects(f.call(), /codex_setup_host_scope_unavailable/);
+    assert.equal(f.commits.length, 1);
+    assert.equal(f.stored.size, 1);
+    assert.equal(JSON.parse(f.stored.get(f.commits[0])).running, true);
+});
+test('startup commit preserves an uncertain commit error without replay or success', async () => {
+    const f = await fixture('commit', 'error');
+    await assert.rejects(f.call(), /synthetic_commit_uncertain/);
+    assert.equal(f.commits.length, 1);
+    assert.equal(f.stored.size, 1);
+});
+test('startup commit retains legacy unscoped control behavior', async () => {
+    const f = await fixture();
+    await f.legacy();
+    assert.equal(f.commits.length, 1);
+});
+test('startup commit never dispatches verification after prior withdrawal', async () => {
+    const f = await fixture();
+    f.cancel();
+    await assert.rejects(f.call(), /codex_setup_host_scope_unavailable/);
+    assert.equal(f.phases.length, 0);
+    assert.equal(f.writes.length, 0);
+});
+for (const phase of ['registration', 'status']) {
+    test(`user startup refuses withdrawal during ${phase} readback before OS command`, async () => {
+        const f = await fixture(phase);
+        await assert.rejects(f.start(), /codex_setup_host_scope_unavailable/);
+        assert.equal(f.commands.length, 0);
+    });
+}
+test('user startup dispatches only the owned fixed service while original authority is current', async () => {
+    const f = await fixture();
+    const result = await f.start();
+    assert.deepEqual(f.commands, [['systemctl', ['--user', 'start', 'dharma-agent-fabric.service']]]);
+    assert.equal(result.state, 'start_requested');
+});
+test('user startup withholds a late OS acknowledgement without claiming reversal', async () => {
+    const f = await fixture('os');
+    await assert.rejects(f.start(), /codex_setup_host_scope_unavailable/);
+    assert.equal(f.commands.length, 1);
+});
+//# sourceMappingURL=startupCommitScope.test.js.map

package/dist/startupCommitScope.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startupCommitScope.test.js","sourceRoot":"","sources":["../src/startupCommitScope.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAC,QAAQ,EAAC,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAC,UAAU,EAAE,UAAU,EAAC,MAAM,aAAa,CAAC;AACnD,OAAO,EAAC,QAAQ,EAAC,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAC,MAAM,EAAC,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAC,IAAI,EAAE,OAAO,EAAC,MAAM,WAAW,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAC,SAAS,EAAC,MAAM,WAAW,CAAC;AACpC,OAAO,EAAC,eAAe,EAAC,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAC,yBAAyB,EAAE,yBAAyB,EAAE,0BAA0B,EAAC,MAAM,yBAAyB,CAAC;AAEzH,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,8BAA8B,CAAC;AAGtF,iFAAiF;AACjF,6EAA6E;AAC7E,KAAK,UAAU,OAAO,CAAC,KAAa,EAAE,UAAwD,UAAU;IACtG,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,iCAAiC,CAAC,EAAE,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACvG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,GAAG,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACxE,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,MAAM,IAAI,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,EAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK;QACtG,MAAM,EAAE,EAAC,MAAM,EAAE,8BAA8B,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;YACxF,cAAc,EAAE,UAAU,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB;YACtF,qBAAqB,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI;YACjG,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAC,EAAC,CAAC,CAAC;IAC7H,MAAM,MAAM,GAAa,EAAE,EAAE,OAAO,GAAa,EAAE,EAAE,QAAQ,GAAa,EAAE,EAAE,QAAQ,GAA8B,EAAE,CAAC;IACvH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,EAAE,MAAM,GAAY,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAG,KAAK,EAAE,EAAS,EAAE,EAAE;QACnC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACzC,IAAI,EAAE,KAAK,KAAK;YAAE,OAAO;QACzB,IAAI,OAAO,KAAK,UAAU;YAAE,MAAM,CAAC,KAAK,EAAE,CAAC;aACtC,IAAI,OAAO,KAAK,UAAU;YAAE,KAAK,GAAG,KAAK,CAAC;aAC1C,IAAI,OAAO,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;;YACvE,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAClG,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,EAAC,MAAM,EAAE,2BAA2B,EAAE,OAAO,EAAE,sBAAsB;QACxF,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,SAAS;QACnE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,sBAAsB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAC,CAAC;IACrG,MAAM,OAAO,GAAG,EAAC,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,EAAC,CAAC;IAC3D,MAAM,YAAY,GAA4B;QAC5C,yBAAyB,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI;QACvD,WAAW,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;QACtE,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnD,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC7C,4BAA4B,EAAE,KAAK,IAAI,EAAE,GAAE,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAA,CAAC;QACtF,SAAS,EAAE,KAAK,EAAE,IAAY,EAAE,KAAa,EAAE,EAAE,GAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAA,CAAC;QAC5H,MAAM,EAAE,KAAK,EAAE,IAAY,EAAE,WAAmB,EAAE,EAAE;YAClD,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACvH,CAAC;QACD,EAAE,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE,GAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,CAAC;QACvE,gBAAgB,EAAE,KAAK,IAAI,EAAE,GAAE,MAAM,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,EAAC,GAAG,YAAY,EAAE,OAAO,EAAE,cAAc,EAAC,CAAC,CAAA,CAAC;QAClH,oBAAoB,EAAE,KAAK,IAAI,EAAE,GAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,EAAE,SAAS,EAAC,CAAC,CAAA,CAAC;QACxF,aAAa,EAAE,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,EAAE,GAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAC,MAAM,EAAE,EAAE,EAAC,CAAC,CAAA,CAAC;QAChI,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,EAAE,SAAS,EAAE,6BAA6B;KACxG,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC;IAChE,IAAI,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrG,MAAM,WAAW,GAAG,KAAK,EAAE,IAAY,EAAE,IAAY,EAAE,EAAE;QACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,GAAG,QAAQ,qBAAqB,IAAI,EAAE,CAAC,EAC1G,EAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAC,CAAC,CAAC,CAAC,MAAM;YAChF,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC;QACxG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAC,eAAe,EAAE;gBAC5E,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ;aAAC,EAAE,iBAAiB,EAAE,IAAI,EAAC,CAAC,CAAC;QAC7F,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtG,OAAO,eAAe,CAAC,QAAQ,CAAC,UAAU,GAAG,YAAY,IAAI,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IACnJ,CAAC,CAAC;IACF,YAAY,CAAC,gBAAgB,GAAG,MAAM,WAAW,CAAC,4BAA4B,EAAE,kBAAkB,CAAC,CAAC;IACpG,YAAY,CAAC,gBAAgB,GAAG,MAAM,WAAW,CAAC,4BAA4B,EAAE,kBAAkB,CAAC,CAAC;IACpG,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,4BAA4B,EAAE,yBAAyB,CAAC,CAAC;IAC3F,YAAY,CAAC,uBAAuB,GAAG,OAAO,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IAC5E,OAAO,EAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO;QAC5E,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;QAC5B,IAAI,EAAE,GAAG,EAAE,CAAC,0BAA0B,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;QAClG,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC;QAClD,KAAK,EAAE,GAAG,EAAE,CAAC,0BAA0B,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAC,CAAC;AACnF,CAAC;AAED,IAAI,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;IACjG,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACvG,CAAC,CAAC,CAAC;AAEH,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,UAAU,CAAU,EAAE,CAAC;IACrE,IAAI,CAAC,4CAA4C,KAAK,gCAAgC,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,oCAAoC,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;IACjG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,oCAAoC,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;IAC7F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,oCAAoC,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH,KAAK,MAAM,OAAO,IAAI,CAAC,UAAU,EAAE,UAAU,CAAU,EAAE,CAAC;IACxD,IAAI,CAAC,0BAA0B,OAAO,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,oCAAoC,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;IAC9G,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,oCAAoC,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACvE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;IAC9F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,4BAA4B,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;IACzE,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACtC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,oCAAoC,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC;AAEH,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAU,EAAE,CAAC;IACxD,IAAI,CAAC,0CAA0C,KAAK,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,oCAAoC,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;IAC1G,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAAC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,KAAK,EAAqB,CAAC;IAC7E,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;IAC5F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,oCAAoC,CAAC,CAAC;IACrG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC"}

package/dist/workspaceRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspaceRegistry.d.ts","sourceRoot":"","sources":["../src/workspaceRegistry.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,qBAAqB,CAAC,CAAC,IAAI;IACrC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC1B,OAAO,EAAE,CAAC,EAAE,CAAC;CACd,CAAC;AAEF,wBAAsB,qBAAqB,CAAC,CAAC,EAC3C,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAoC,GACzE,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAkBnC"}
+{"version":3,"file":"workspaceRegistry.d.ts","sourceRoot":"","sources":["../src/workspaceRegistry.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,qBAAqB,CAAC,CAAC,IAAI;IACrC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC1B,OAAO,EAAE,CAAC,EAAE,CAAC;CACd,CAAC;AAEF,wBAAsB,qBAAqB,CAAC,CAAC,EAC3C,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAoC,GACzE,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAqBnC"}

package/dist/workspaceRegistry.js

@@ -1,24 +1,28 @@
 import { readFile } from 'node:fs/promises';
+import { currentBootstrapHostScope } from './bootstrapHostScope.js';
 export async function readWorkspaceRegistry(path, read = (file) => readFile(file, 'utf8')) {
+    const scope = currentBootstrapHostScope();
     let contents;
     try {
-        contents = await read(path);
+        contents = await (scope ? scope.step(() => read(path)) : read(path));
     }
     catch (error) {
+        await scope?.assert();
         if (error.code === 'ENOENT') {
             return { state: 'absent', records: [] };
         }
-        throw new Error('workspace_registry_read_failed', { cause: error });
+        throw new Error('workspace_registry_read_failed', scope ? undefined : { cause: error });
     }
     let parsed;
     try {
         parsed = JSON.parse(contents);
     }
     catch (error) {
-        throw new Error('workspace_registry_invalid', { cause: error });
+        throw new Error('workspace_registry_invalid', scope ? undefined : { cause: error });
     }
     if (!Array.isArray(parsed))
         throw new Error('workspace_registry_invalid');
+    await scope?.assert();
     return { state: 'valid', records: parsed };
 }
 //# sourceMappingURL=workspaceRegistry.js.map

package/dist/workspaceRegistry.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspaceRegistry.js","sourceRoot":"","sources":["../src/workspaceRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAO5C,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,OAA0C,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAE1E,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC1E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAa,EAAE,CAAC;AACpD,CAAC"}
+{"version":3,"file":"workspaceRegistry.js","sourceRoot":"","sources":["../src/workspaceRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAC,yBAAyB,EAAC,MAAM,yBAAyB,CAAC;AAOlE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,OAA0C,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAE1E,MAAM,KAAK,GAAG,yBAAyB,EAAE,CAAC;IAC1C,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,EAAE,MAAM,EAAE,CAAC;QACtB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC1E,MAAM,KAAK,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAa,EAAE,CAAC;AACpD,CAAC"}

package/dist/workspaceRegistry.test.js

@@ -5,6 +5,57 @@ import { join } from 'node:path';
 import test from 'node:test';
 import { run } from './index.js';
 import { readWorkspaceRegistry } from './workspaceRegistry.js';
+import { runCodexBootstrapHost } from './bootstrapHostScope.js';
+function intent(workspace) {
+    const now = Date.now(), hash = `sha256:${'a'.repeat(64)}`;
+    const id = (n) => `${String(n).padStart(8, '0')}-1111-4111-8111-111111111111`;
+    return { workspace, current: async () => true, signal: new AbortController().signal,
+        intent: { schema: 'dharma.codex-setup-intent/v1', operationId: id(1), setupReference: id(2),
+            organizationId: 'org_demo', recipientMembershipId: id(3), origin: 'https://hq.example',
+            repositoryFingerprint: hash, policyRevision: 'policy-v1', scopeDigest: hash, contractDigest: hash,
+            hostContextId: id(4), issuedAt: new Date(now - 1000).toISOString(), expiresAt: new Date(now + 60_000).toISOString() } };
+}
+test('scoped registry read refuses a closed owner before invoking its reader', async () => {
+    let reads = 0, result = [];
+    await assert.rejects(runCodexBootstrapHost(intent(tmpdir()), async ({ scope }) => {
+        scope.close();
+        result = await Promise.allSettled([readWorkspaceRegistry('/unused', async () => { reads++; return '[]'; })]);
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(result[0]?.status, 'rejected');
+    assert.equal(reads, 0);
+});
+test('scoped registry read cannot return data or absence after reader withdrawal', async () => {
+    for (const absent of [false, true]) {
+        let returned = false;
+        await assert.rejects(runCodexBootstrapHost(intent(tmpdir()), async ({ scope }) => {
+            const result = await readWorkspaceRegistry('/unused', async () => {
+                scope.close();
+                if (absent)
+                    throw Object.assign(new Error('private-reader-canary'), { code: 'ENOENT' });
+                return '[{"workspaceId":"private-row-canary"}]';
+            });
+            returned = true;
+            return result;
+        }), { message: 'codex_setup_host_scope_unavailable' });
+        assert.equal(returned, false);
+    }
+});
+test('scoped registry failures withhold reader and parser diagnostic causes', async () => {
+    for (const read of [async () => { throw new Error('private-reader-canary'); }, async () => '{private-parser-canary']) {
+        let captured;
+        await runCodexBootstrapHost(intent(tmpdir()), async () => {
+            try {
+                await readWorkspaceRegistry('/unused', read);
+            }
+            catch (error) {
+                captured = error;
+            }
+        });
+        assert.ok(captured instanceof Error);
+        assert.equal(captured.cause, undefined);
+        assert.doesNotMatch(captured.message, /private/);
+    }
+});
 test('workspace registry distinguishes absence from a valid empty registry', async () => {
     assert.deepEqual(await readWorkspaceRegistry('/unused', async () => {
         throw Object.assign(new Error('missing'), { code: 'ENOENT' });

package/dist/workspaceRegistry.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspaceRegistry.test.js","sourceRoot":"","sources":["../src/workspaceRegistry.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,IAAI,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;IACtF,MAAM,CAAC,SAAS,CAAC,MAAM,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACtC,MAAM,CAAC,SAAS,CAAC,MAAM,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;QACzE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;KAC5B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;IAClF,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACtC,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACtG,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,4BAA4B,CAAC,CAAC;AACzG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACtE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;QACxD,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa;KACpD,CAAC,CAAC,CAAC;IACJ,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAA4B,CAAC;QAChF,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE;YACxC,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,4BAA4B;SAC7E,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QACpC,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAAE,IAAI,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAA4B,CAAC;QAC/E,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAAE,GAAG,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAA4B,CAAC;QACjF,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE;YAC1C,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,4BAA4B;SAC3D,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE;YACzC,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,4BAA4B;SAC7E,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACpF,CAAC;YAAS,CAAC;QACT,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;;YACtD,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,QAAQ,CAAC;IAC1C,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"workspaceRegistry.test.js","sourceRoot":"","sources":["../src/workspaceRegistry.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAC,qBAAqB,EAAC,MAAM,yBAAyB,CAAC;AAE9D,SAAS,MAAM,CAAC,SAAiB;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAC1D,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,8BAA8B,CAAC;IACtF,OAAO,EAAC,SAAS,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;QAChF,MAAM,EAAE,EAAC,MAAM,EAAE,8BAAuC,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;YACjG,cAAc,EAAE,UAAU,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB;YACtF,qBAAqB,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI;YACjG,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAC,EAAC,CAAC;AAC5H,CAAC;AAED,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;IACxF,IAAI,KAAK,GAAG,CAAC,EAAE,MAAM,GAAoC,EAAE,CAAC;IAC5D,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAC,KAAK,EAAC,EAAE,EAAE;QAC7E,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,GAAE,KAAK,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5H,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;IAC5F,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAC,KAAK,EAAC,EAAE,EAAE;YAC7E,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;gBAC/D,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,IAAI,MAAM;oBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC,CAAC,CAAC;gBACtF,OAAO,wCAAwC,CAAC;YAClD,CAAC,CAAC,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC;YAAC,OAAO,MAAM,CAAC;QACjC,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;IACvF,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,GAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAA,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACnH,IAAI,QAAiB,CAAC;QACtB,MAAM,qBAAqB,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE;YACvD,IAAI,CAAC;gBAAA,MAAM,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAAA,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAA,QAAQ,GAAG,KAAK,CAAC;YAAA,CAAC;QACvF,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,QAAQ,YAAY,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;IACtF,MAAM,CAAC,SAAS,CAAC,MAAM,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACtC,MAAM,CAAC,SAAS,CAAC,MAAM,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;QACzE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;KAC5B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;IAClF,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACtC,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACtG,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,4BAA4B,CAAC,CAAC;AACzG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACtE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;QACxD,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa;KACpD,CAAC,CAAC,CAAC;IACJ,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAA4B,CAAC;QAChF,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE;YACxC,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,4BAA4B;SAC7E,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QACpC,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAAE,IAAI,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAA4B,CAAC;QAC/E,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAAE,GAAG,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAA4B,CAAC;QACjF,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE;YAC1C,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,4BAA4B;SAC3D,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE;YACzC,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,4BAA4B;SAC7E,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACpF,CAAC;YAAS,CAAC;QACT,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;;YACtD,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,QAAQ,CAAC;IAC1C,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/workspaceRegistryRecovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspaceRegistryRecovery.d.ts","sourceRoot":"","sources":["../src/workspaceRegistryRecovery.ts"],"names":[],"mappings":"AAgBA,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;yBAyDsC,MAAM;uBACW,MAAM;wBACnB,MAAM;mBACJ,MAAM;;;;EAKlD;AAED,wBAAgB,wBAAwB,CAAC,CAAC,SAAS;IACjD,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CAChG,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG;IAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,CAoBjF;AAED,wBAAsB,2BAA2B,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM;;;;;GAwBhE;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,0BAUA;AAED,wBAAsB,yBAAyB,CAAC,CAAC,SAAS;IACxD,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CAChG,EAAE,KAAK,EAAE;IACR,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,QAAQ,GAAG,cAAc,GAAG,OAAO,CAAC;IAClD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC;CACV;;;;;;;;;;GA+BA"}
+{"version":3,"file":"workspaceRegistryRecovery.d.ts","sourceRoot":"","sources":["../src/workspaceRegistryRecovery.ts"],"names":[],"mappings":"AAkCA,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;yBAyDsC,MAAM;uBACW,MAAM;wBACnB,MAAM;mBACJ,MAAM;;;;EAKlD;AAED,wBAAgB,wBAAwB,CAAC,CAAC,SAAS;IACjD,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CAChG,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG;IAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,CAoBjF;AAED,wBAAsB,2BAA2B,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM;;;;;GA+BhE;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,0BAiCA;AAED,wBAAsB,yBAAyB,CAAC,CAAC,SAAS;IACxD,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CAChG,EAAE,KAAK,EAAE;IACR,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,QAAQ,GAAG,cAAc,GAAG,OAAO,CAAC;IAClD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC;CACV;;;;;;;;;;GAyEA"}

package/dist/workspaceRegistryRecovery.js

@@ -1,6 +1,23 @@
 import { createHash, randomUUID } from 'node:crypto';
-import { lstat, mkdir, readFile, rename, unlink, writeFile } from 'node:fs/promises';
+import { lstat, mkdir, open, readFile, rename, unlink } from 'node:fs/promises';
 import { dirname, resolve } from 'node:path';
+import { currentBootstrapHostScope } from './bootstrapHostScope.js';
+function step(scope, operation) {
+    return scope ? scope.step(operation) : operation();
+}
+async function failure(scope, error, code) {
+    if (!scope)
+        throw error;
+    await scope.assert();
+    const safe = error instanceof Error && [
+        'registry_recovery_registry_file_unsafe', 'registry_recovery_nonempty_registry_invalid',
+        'registry_recovery_backup_directory_unsafe', 'registry_recovery_registry_changed',
+        'registry_recovery_existing_rows_invalid', 'registry_recovery_foreign_organization',
+        'registry_recovery_existing_rows_ambiguous', 'registry_recovery_existing_row_conflict',
+        'registry_recovery_write_unconfirmed', 'registry_recovery_cleanup_unconfirmed',
+    ].includes(error.message) ? error.message : code;
+    throw new Error(safe);
+}
 function object(value) {
     return value && typeof value === 'object' && !Array.isArray(value) ? value : null;
 }
@@ -97,84 +114,174 @@ export function appendRecoveredWorkspace(records, recovered) {
     return { records: [...records, recovered], alreadyPresent: false };
 }
 export async function inspectRegistryRecoveryFile(path) {
+    const scope = currentBootstrapHostScope();
     let bytes = null;
     try {
-        const metadata = await lstat(path);
-        if (!metadata.isFile() || metadata.isSymbolicLink() || metadata.nlink !== 1) {
-            throw new Error('registry_recovery_registry_file_unsafe');
+        try {
+            const metadata = await step(scope, () => lstat(path));
+            if (!metadata.isFile() || metadata.isSymbolicLink() || metadata.nlink !== 1) {
+                throw new Error('registry_recovery_registry_file_unsafe');
+            }
+            bytes = await step(scope, () => readFile(path));
         }
-        bytes = await readFile(path);
+        catch (error) {
+            await scope?.assert();
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        let records = [];
+        if (bytes && bytes.length > 0) {
+            let parsed;
+            try {
+                parsed = JSON.parse(bytes.toString('utf8'));
+            }
+            catch {
+                throw new Error('registry_recovery_nonempty_registry_invalid');
+            }
+            if (!Array.isArray(parsed))
+                throw new Error('registry_recovery_nonempty_registry_invalid');
+            records = parsed;
+        }
+        await scope?.assert();
+        return {
+            kind: bytes === null ? 'absent' : bytes.length === 0 ? 'corrupt_zero' : 'valid',
+            bytes, records,
+            hash: bytes === null ? null : `sha256:${createHash('sha256').update(bytes).digest('hex')}`,
+        };
     }
     catch (error) {
-        if (error.code !== 'ENOENT')
-            throw error;
+        return failure(scope, error, 'registry_recovery_read_failed');
     }
-    let records = [];
-    if (bytes && bytes.length > 0) {
-        let parsed;
-        try {
-            parsed = JSON.parse(bytes.toString('utf8'));
+}
+export async function backupRegistryRecoveryFile(input) {
+    const scope = currentBootstrapHostScope();
+    let handle;
+    try {
+        const home = input.home, path = input.path;
+        const expected = input.expectedBytes === null ? null : Buffer.from(input.expectedBytes);
+        await scope?.assert();
+        if (expected === null)
+            return null;
+        const directory = resolve(home, 'registry', 'recovery-backups');
+        await step(scope, () => mkdir(directory, { recursive: true, mode: 0o700 }));
+        const metadata = await step(scope, () => lstat(directory));
+        if (!metadata.isDirectory() || metadata.isSymbolicLink()) {
+            throw new Error('registry_recovery_backup_directory_unsafe');
         }
-        catch {
-            throw new Error('registry_recovery_nonempty_registry_invalid');
+        const backup = resolve(directory, `workspaces-${Date.now()}-${randomUUID()}.bin`);
+        await step(scope, async () => { handle = await open(backup, 'wx', 0o600); });
+        await step(scope, () => handle.writeFile(expected));
+        await step(scope, () => handle.sync());
+        const current = await step(scope, () => readFile(path));
+        if (!current.equals(expected))
+            throw new Error('registry_recovery_registry_changed');
+        await scope?.assert();
+        return backup;
+    }
+    catch (error) {
+        return await failure(scope, error, 'registry_recovery_backup_failed');
+    }
+    finally {
+        // A created backup is evidence, including when installation is interrupted.
+        if (handle) {
+            try {
+                await handle.close();
+            }
+            catch (error) {
+                if (scope)
+                    throw new Error('registry_recovery_backup_close_unconfirmed');
+                throw error;
+            }
         }
-        if (!Array.isArray(parsed))
-            throw new Error('registry_recovery_nonempty_registry_invalid');
-        records = parsed;
     }
-    return {
-        kind: bytes === null ? 'absent' : bytes.length === 0 ? 'corrupt_zero' : 'valid',
-        bytes, records,
-        hash: bytes === null ? null : `sha256:${createHash('sha256').update(bytes).digest('hex')}`,
-    };
-}
-export async function backupRegistryRecoveryFile(input) {
-    if (input.expectedBytes === null)
-        return null;
-    const directory = resolve(input.home, 'registry', 'recovery-backups');
-    await mkdir(directory, { recursive: true, mode: 0o700 });
-    if (!(await lstat(directory)).isDirectory())
-        throw new Error('registry_recovery_backup_directory_unsafe');
-    const backup = resolve(directory, `workspaces-${Date.now()}-${randomUUID()}.bin`);
-    await writeFile(backup, input.expectedBytes, { flag: 'wx', mode: 0o600 });
-    const current = await readFile(input.path);
-    if (!current.equals(input.expectedBytes))
-        throw new Error('registry_recovery_registry_changed');
-    return backup;
 }
 export async function applyRegistryRecoveryFile(input) {
-    const current = await inspectRegistryRecoveryFile(input.path);
-    if (current.kind !== input.expectedKind || current.hash !== input.expectedHash) {
-        throw new Error('registry_recovery_registry_changed');
-    }
-    const final = appendRecoveredWorkspace(current.records, input.entry);
-    if (final.alreadyPresent)
-        return { state: 'already_present', backup: null,
-            previousHash: current.hash, restoredCount: final.records.length };
-    const backup = await backupRegistryRecoveryFile({ home: input.home, path: input.path,
-        expectedBytes: current.bytes });
-    const temporary = `${input.path}.${process.pid}.${randomUUID()}.tmp`;
-    await mkdir(dirname(input.path), { recursive: true, mode: 0o700 });
+    const scope = currentBootstrapHostScope();
     try {
-        await writeFile(temporary, `${JSON.stringify(final.records, null, 2)}\n`, { flag: 'wx', mode: 0o600 });
-        const beforeReplace = await inspectRegistryRecoveryFile(input.path);
-        if (beforeReplace.kind !== current.kind || beforeReplace.hash !== current.hash) {
+        const snapshot = structuredClone(input);
+        await scope?.assert();
+        const current = await step(scope, () => inspectRegistryRecoveryFile(snapshot.path));
+        if (current.kind !== snapshot.expectedKind || current.hash !== snapshot.expectedHash) {
             throw new Error('registry_recovery_registry_changed');
         }
-        await rename(temporary, input.path);
-    }
-    finally {
-        await unlink(temporary).catch(error => {
-            if (error.code !== 'ENOENT')
-                throw error;
-        });
+        const final = appendRecoveredWorkspace(current.records, snapshot.entry);
+        if (final.alreadyPresent) {
+            await scope?.assert();
+            return { state: 'already_present', backup: null,
+                previousHash: current.hash, restoredCount: final.records.length };
+        }
+        const serialized = Buffer.from(`${JSON.stringify(final.records, null, 2)}\n`);
+        const backup = await step(scope, () => backupRegistryRecoveryFile({ home: snapshot.home, path: snapshot.path,
+            expectedBytes: current.bytes }));
+        const temporary = `${snapshot.path}.${process.pid}.${randomUUID()}.tmp`;
+        let handle;
+        let owned;
+        let renamed = false;
+        await step(scope, () => mkdir(dirname(snapshot.path), { recursive: true, mode: 0o700 }));
+        try {
+            await step(scope, async () => {
+                handle = await open(temporary, 'wx', 0o600);
+                const metadata = await handle.stat({ bigint: true });
+                owned = { dev: metadata.dev, ino: metadata.ino };
+            });
+            await step(scope, () => handle.writeFile(serialized));
+            await step(scope, () => handle.sync());
+            await step(scope, async () => { await handle.close(); handle = undefined; });
+            const beforeReplace = await step(scope, () => inspectRegistryRecoveryFile(snapshot.path));
+            if (beforeReplace.kind !== current.kind || beforeReplace.hash !== current.hash) {
+                throw new Error('registry_recovery_registry_changed');
+            }
+            const metadata = await step(scope, () => lstat(temporary, { bigint: true }));
+            if (!owned || metadata.dev !== owned.dev || metadata.ino !== owned.ino
+                || !metadata.isFile() || metadata.isSymbolicLink() || metadata.nlink !== 1n) {
+                throw new Error('registry_recovery_cleanup_unconfirmed');
+            }
+            await step(scope, async () => { await rename(temporary, snapshot.path); renamed = true; });
+        }
+        finally {
+            let cleanupFailed = false;
+            if (handle) {
+                try {
+                    await handle.close();
+                }
+                catch {
+                    cleanupFailed = true;
+                }
+            }
+            // Cooperatively clean only this exclusive-open inode, even after withdrawal.
+            if (!renamed && owned) {
+                try {
+                    const metadata = await lstat(temporary, { bigint: true });
+                    if (metadata.dev !== owned.dev || metadata.ino !== owned.ino
+                        || !metadata.isFile() || metadata.isSymbolicLink() || metadata.nlink !== 1n)
+                        cleanupFailed = true;
+                    else
+                        await unlink(temporary);
+                }
+                catch (error) {
+                    if (error.code !== 'ENOENT')
+                        cleanupFailed = true;
+                }
+            }
+            else if (!renamed && handle && !owned)
+                cleanupFailed = true;
+            if (cleanupFailed)
+                throw new Error('registry_recovery_cleanup_unconfirmed');
+        }
+        const confirmed = await step(scope, () => inspectRegistryRecoveryFile(snapshot.path));
+        if (confirmed.kind !== 'valid' || !confirmed.bytes?.equals(serialized)) {
+            throw new Error('registry_recovery_write_unconfirmed');
+        }
+        await scope?.assert();
+        return { state: 'recovered', backup, previousHash: current.hash,
+            restoredCount: confirmed.records.length };
     }
-    const confirmed = await inspectRegistryRecoveryFile(input.path);
-    if (confirmed.kind !== 'valid' || confirmed.records.length !== final.records.length
-        || !confirmed.records.some(row => row.workspaceId === input.entry.workspaceId && row.path === input.entry.path)) {
-        throw new Error('registry_recovery_write_unconfirmed');
+    catch (error) {
+        // Preserve an ownership/close failure even if the owning scope also closed.
+        if (error instanceof Error && ['registry_recovery_cleanup_unconfirmed',
+            'registry_recovery_backup_close_unconfirmed'].includes(error.message))
+            throw error;
+        return failure(scope, error, 'registry_recovery_write_failed');
     }
-    return { state: 'recovered', backup, previousHash: current.hash,
-        restoredCount: confirmed.records.length };
 }
 //# sourceMappingURL=workspaceRegistryRecovery.js.map