@dsh-cc/settings-cascade 0.5.0

package/lib/index.d.ts

@@ -0,0 +1,190 @@
+/**
+ * Claude Code-style five-level settings cascade Provider for `ctx.settings`.
+ * Five sources merge low-to-high — user settings, project settings, local
+ * settings, flag settings, policy settings — under a plugin-default base.
+ * The merged raw document feeds the user-settings seam, whose namespace
+ * resolution layers schema defaults, the registrant `base`, and this user
+ * layer in turn. A top-level `env` section is split out and applied in two
+ * stages, holding dangerous variables until trust. Writes are write-through
+ * to the user layer: they arrive here as a complete merged section and are
+ * diffed back onto the user settings file, so higher-layer contributions stay
+ * read-side only.
+ * @module @dsh-cc/settings-cascade
+ */
+import { Context, Service } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
+import { SettingsProvider, type SettingsNamespace } from '@deepseek-ai/dsh-settings';
+import { type LocalRootDeps } from './local-root.ts';
+import { type EnvSettings } from './env.ts';
+export { applyCcKeyAliases, CC_KEY_ALIASES } from './cc-key-aliases.ts';
+export { resolveLocalSettingsDir, type LocalRootDeps, type LocalRootExec, type LocalRootExecResult } from './local-root.ts';
+export { mergeValue, mergeSettingsSection, unionDenyPrecedence } from './merge.ts';
+export { AutoModeSchema, AutoModeClassifierSchema, type AutoMode, type AutoModeClassifier } from './auto-mode.ts';
+export { PermissionsSchema, PERMISSION_MODES, type Permissions, type PermissionMode } from './permissions.ts';
+export { applyEnv, applyTrustedEnv, coerceEnv, DANGEROUS_ENV_VARS, type EnvSettings } from './env.ts';
+/** All settings sources in merge order, low to high priority. */
+export declare const SETTING_SOURCES: readonly ["userSettings", "projectSettings", "localSettings", "flagSettings", "policySettings"];
+/** One source in the settings cascade. */
+export type SettingsSource = (typeof SETTING_SOURCES)[number];
+/** Policy sub-sources in first-source-wins priority order. */
+export interface CascadePolicyConfig {
+    /** Hosted remote settings — the highest-priority policy source. */
+    remoteSettings?: unknown;
+    /** System-level managed settings file. */
+    systemPath?: string;
+    /** User-writable managed settings file. */
+    userPath?: string;
+}
+/** Plugin configuration: source file locations and switches. */
+export interface Config {
+    /** Launch directory: seeds the project settings path and the git probe for the local settings path. */
+    projectDir?: string;
+    /** Harness home used for the default user settings path. */
+    dshHome?: string;
+    /** User settings file; defaults to `settings.json` under the harness home. */
+    userSettingsPath?: string;
+    /** Project settings file; defaults to `<project>/.claude/settings.json`. */
+    projectSettingsPath?: string;
+    /** Local settings file; defaults to git main-checkout / toplevel `.claude/settings.local.json`. */
+    localSettingsPath?: string;
+    /** Command-line `--settings` file; the flag layer's file half. */
+    flagSettingsPath?: string;
+    /** Inline `--settings` content; merged over the flag file. */
+    flagSettingsInline?: unknown;
+    /** Policy sub-sources; the first non-empty one wins. */
+    policy?: CascadePolicyConfig;
+}
+/** Fully resolved provider parameters; defaulting happens here, never inline. */
+export interface ResolvedSpec {
+    sources: {
+        userSettings: string | undefined;
+        projectSettings: string | undefined;
+        localSettings: string | undefined;
+        flagSettings: string | undefined;
+    };
+    flagSettingsInline: unknown;
+    policy: {
+        systemPath: string | undefined;
+        userPath: string | undefined;
+        remoteSettings: unknown;
+    };
+}
+/**
+ * Resolve the runtime spec from plugin config: explicit paths win, otherwise
+ * the defaults derive from the harness home and the project directory. The
+ * project settings stay at the launch directory, but the local settings file
+ * path hoists Claude Code-style to the git main checkout root (linked
+ * worktree) or git toplevel (subdirectory start) via
+ * {@link resolveLocalSettingsDir} — the session cwd and git operations are
+ * untouched, and explicit `localSettingsPath` never hoists.
+ * @param config - raw plugin config.
+ * @param deps - injectable local-root environment (tests only).
+ * @returns the resolved source locations, inline flag settings, and policy sources.
+ */
+export declare function resolveSpec(config: Config, deps?: LocalRootDeps): ResolvedSpec;
+/**
+ * Claude Code-style five-level settings cascade Provider. Reads the user,
+ * project, local, flag, and policy sources in low-to-high priority, deep-merges
+ * them (permission arrays union with `deny` precedence), resolves policy by
+ * first-source-wins, splits out the top-level `env` section, and publishes the
+ * merged per-namespace document into `ctx.settings`. Writes are write-through
+ * to the user layer: a merged section is persisted as a surgical leaf-delta
+ * applied onto the user settings file, keeping project/local/flag/policy
+ * contributions read-side only.
+ */
+export declare class SettingsCascadeProvider extends SettingsProvider {
+    static Config: z<Config>;
+    private readonly spec;
+    /** The top-level `env` section split out of the merged document, string-valued. */
+    private env;
+    /**
+     * Mirror of exactly what we last published to the seam via `load()`, and what
+     * persist has durably stored. Invariant: shadow moves only when the seam's
+     * document moves — it is updated at the end of a successful `load()` and,
+     * in `persist()`, only AFTER the atomic rename resolves. Never update it in
+     * a `finally` or ahead of a throw. If a file watcher is ever added, any
+     * `publish(doc)` path must also update this shadow.
+     */
+    private shadow;
+    /**
+     * Single exclusive operation chain: watcher-triggered reloads and persists
+     * run one at a time in queue order (settled tail), so a persist can never
+     * race a reload's read-modify-publish, and a reload can never read a
+     * half-committed atomic rename.
+     */
+    private operations;
+    /** Set at dispose: refuse new watcher events and let in-flight work no-op. */
+    private closed;
+    /** Opaque read of {@link closed}: control flow cannot narrow it across awaits. */
+    private isClosed;
+    constructor(ctx: Context, config: Config);
+    /** The cascade is now writable; writes edit the user layer. */
+    get writable(): boolean;
+    /** Absolute path of the user-editable document (the cascade's user source). */
+    get documentPath(): string;
+    /**
+     * Materialize the user-editable document for a native editor. The parent
+     * directory is created and an absent document is seeded with an empty
+     * namespace map. It intentionally does NOT call {@link SettingsProvider.publish}:
+     * the cascade document is the five-layer merge, and publishing `{}` here
+     * would clobber project/local/flag/policy contributions in-process (the
+     * stock file provider publishes `{}` only because its document is the user
+     * file one-to-one).
+     * @returns the absolute local document path after materialization.
+     */
+    prepareDocument(): Promise<string>;
+    /**
+     * Durably persist one namespace's merged user section by editing the user
+     * layer. The section (the seam's complete merged section for the namespace)
+     * is diffed against the shadow of what we last published, the delta is
+     * applied onto the user settings file's own section for that namespace, and
+     * the file is rewritten atomically. The shadow advances only after the
+     * atomic rename resolves, so an interrupted persist never desyncs it.
+     * @param ns - the namespace being written.
+     * @param section - the complete merged user section to store.
+     */
+    protected persist(ns: SettingsNamespace, section: Record<string, unknown>): Promise<void>;
+    /** Queue one exclusive document operation behind every earlier one. */
+    private enqueue;
+    /** Queue a reload; a failed reload keeps the last-good document and stays only a warning. */
+    private queueRefresh;
+    /**
+     * Persist one namespace with optimistic concurrency: the user-file bytes
+     * are re-read immediately before the atomic rename, and when an external
+     * writer changed them since the read the op built on, the whole round
+     * restarts from a fresh read (bounded, then loud). The shadow still moves
+     * only after the write has durably succeeded.
+     */
+    private persistSection;
+    /** Raw user-file text, or `undefined` when the file is absent. */
+    private readUserText;
+    /** Every concrete settings FILE path worth watching, canonicalized and deduped. */
+    private watchPaths;
+    [Service.init](): AsyncGenerator<() => Promise<void> | void, void, void>;
+    /**
+     * Read the merged top-level `env` section. Values are already coerced to
+     * strings. Pass the result to {@link applyEnv} / {@link applyTrustedEnv} for
+     * the untrusted and trusted application stages.
+     * @returns the detached `env` section (empty object when none is configured).
+     */
+    getEnv(): EnvSettings;
+    /**
+     * Merge all five sources low-to-high and publish the per-namespace document,
+     * splitting the top-level `env` section into {@link getEnv}. A present-but-
+     * invalid source file fails load loud; absent sources contribute nothing.
+     * @returns the merged document minus its top-level `env` key.
+     */
+    protected load(): Promise<Record<string, unknown>>;
+    /** Read a source file into raw settings, skipping absence and failing loud on invalidity. */
+    private readOptional;
+    /** Parse one settings document, throwing loud on a non-object root or invalid JSON. */
+    private parse;
+    /** Merge the flag file and inline content, inline last (highest within the flag layer). */
+    private resolveFlag;
+    /** Resolve policy by first-source-wins: remote, then system file, then user file. */
+    private resolvePolicy;
+    /** Coerce every `env` value to its string process-environment form. */
+    private coerceEnvSection;
+}
+export default SettingsCascadeProvider;
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAKxC,OAAO,EAAE,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AACpF,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAE7E,OAAO,EAAa,KAAK,WAAW,EAAE,MAAM,UAAU,CAAA;AAItD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEvE,OAAO,EAAE,uBAAuB,EAAE,KAAK,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAC3H,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAClF,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,KAAK,QAAQ,EAAE,KAAK,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACjH,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC7G,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,kBAAkB,EAAE,KAAK,WAAW,EAAE,MAAM,UAAU,CAAA;AAErG,iEAAiE;AACjE,eAAO,MAAM,eAAe,iGAMlB,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAA;AAE7D,8DAA8D;AAC9D,MAAM,WAAW,mBAAmB;IAClC,mEAAmE;IACnE,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,0CAA0C;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,gEAAgE;AAChE,MAAM,WAAW,MAAM;IACrB,uGAAuG;IACvG,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,4EAA4E;IAC5E,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,mGAAmG;IACnG,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,wDAAwD;IACxD,MAAM,CAAC,EAAE,mBAAmB,CAAA;CAC7B;AAED,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE;QACP,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;QAChC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAA;QACnC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAA;QACjC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;KACjC,CAAA;IACD,kBAAkB,EAAE,OAAO,CAAA;IAC3B,MAAM,EAAE;QACN,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;QAC9B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;QAC5B,cAAc,EAAE,OAAO,CAAA;KACxB,CAAA;CACF;AA0BD;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,YAAY,CAkB9E;AAED;;;;;;;;;GASG;AACH,qBAAa,uBAAwB,SAAQ,gBAAgB;IAC3D,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAatB;IAEF,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAc;IACnC,mFAAmF;IACnF,OAAO,CAAC,GAAG,CAAkB;IAC7B;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAA8B;IAC5C;;;;;OAKG;IACH,OAAO,CAAC,UAAU,CAAmC;IACrD,8EAA8E;IAC9E,OAAO,CAAC,MAAM,CAAQ;IAEtB,kFAAkF;IAClF,OAAO,CAAC,QAAQ;gBAIJ,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM;IAOxC,+DAA+D;IAC/D,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED,+EAA+E;IAC/E,IAAa,YAAY,IAAI,MAAM,CAMlC;IAED;;;;;;;;;OASG;IACY,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;IASjD;;;;;;;;;OASG;cACa,OAAO,CAAC,EAAE,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAO/F,uEAAuE;IACvE,OAAO,CAAC,OAAO;IAMf,6FAA6F;IAC7F,OAAO,CAAC,YAAY;IAoBpB;;;;;;OAMG;YACW,cAAc;IAwB5B,kEAAkE;YACpD,YAAY;IAS1B,mFAAmF;YACrE,UAAU;IAaR,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;IAiCxF;;;;;OAKG;IACH,MAAM,IAAI,WAAW;IAIrB;;;;;OAKG;cACa,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IA6BxD,6FAA6F;YAC/E,YAAY;IAe1B,uFAAuF;IACvF,OAAO,CAAC,KAAK;IAab,2FAA2F;YAC7E,WAAW;IAMzB,qFAAqF;YACvE,aAAa;IAa3B,uEAAuE;IACvE,OAAO,CAAC,gBAAgB;CAQzB;AAED,eAAe,uBAAuB,CAAA"}

package/lib/index.js

@@ -0,0 +1,414 @@
+/**
+ * Claude Code-style five-level settings cascade Provider for `ctx.settings`.
+ * Five sources merge low-to-high — user settings, project settings, local
+ * settings, flag settings, policy settings — under a plugin-default base.
+ * The merged raw document feeds the user-settings seam, whose namespace
+ * resolution layers schema defaults, the registrant `base`, and this user
+ * layer in turn. A top-level `env` section is split out and applied in two
+ * stages, holding dangerous variables until trust. Writes are write-through
+ * to the user layer: they arrive here as a complete merged section and are
+ * diffed back onto the user settings file, so higher-layer contributions stay
+ * read-side only.
+ * @module @dsh-cc/settings-cascade
+ */
+import { Service } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
+import { watch as chokidarWatch } from 'chokidar';
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { dirname, join, resolve } from 'node:path';
+import { canonicalizeWatchPath, resolveDshHome } from '@deepseek-ai/dsh-home-paths';
+import { SettingsProvider } from '@deepseek-ai/dsh-settings';
+import { resolveLocalSettingsDir } from "./local-root.js";
+import { mergeSettingsSection } from "./merge.js";
+import { coerceEnv } from "./env.js";
+import { applyOpsToSection, diffSections, writeJsonAtomic } from "./persist.js";
+import { applyCcKeyAliases } from "./cc-key-aliases.js";
+export { applyCcKeyAliases, CC_KEY_ALIASES } from "./cc-key-aliases.js";
+export { resolveLocalSettingsDir } from "./local-root.js";
+export { mergeValue, mergeSettingsSection, unionDenyPrecedence } from "./merge.js";
+export { AutoModeSchema, AutoModeClassifierSchema } from "./auto-mode.js";
+export { PermissionsSchema, PERMISSION_MODES } from "./permissions.js";
+export { applyEnv, applyTrustedEnv, coerceEnv, DANGEROUS_ENV_VARS } from "./env.js";
+/** All settings sources in merge order, low to high priority. */
+export const SETTING_SOURCES = [
+    'userSettings',
+    'projectSettings',
+    'localSettings',
+    'flagSettings',
+    'policySettings',
+];
+/** Whether a value is a plain data object (not an array, null, or instance). */
+function isPlainObject(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return false;
+    const proto = Object.getPrototypeOf(value);
+    return proto === Object.prototype || proto === null;
+}
+/** Whether a filesystem error simply means the file is absent. */
+function isENOENT(error) {
+    return error?.code === 'ENOENT';
+}
+/** Whether a filesystem error is a permission denial (EACCES/EPERM). */
+function isAccessDenied(error) {
+    const code = error?.code;
+    return code === 'EACCES' || code === 'EPERM';
+}
+/** Watcher write-settle window in milliseconds (mirrors the harness file provider's default). */
+const DEBOUNCE_MS = 100;
+/** Optimistic-retry bound for persist: how many read-check-write rounds before failing loud. */
+const MAX_PERSIST_ATTEMPTS = 5;
+/**
+ * Resolve the runtime spec from plugin config: explicit paths win, otherwise
+ * the defaults derive from the harness home and the project directory. The
+ * project settings stay at the launch directory, but the local settings file
+ * path hoists Claude Code-style to the git main checkout root (linked
+ * worktree) or git toplevel (subdirectory start) via
+ * {@link resolveLocalSettingsDir} — the session cwd and git operations are
+ * untouched, and explicit `localSettingsPath` never hoists.
+ * @param config - raw plugin config.
+ * @param deps - injectable local-root environment (tests only).
+ * @returns the resolved source locations, inline flag settings, and policy sources.
+ */
+export function resolveSpec(config, deps) {
+    const launchDir = resolve(config.projectDir ?? process.cwd());
+    const home = resolveDshHome(config.dshHome);
+    return {
+        sources: {
+            userSettings: config.userSettingsPath ?? join(home, 'settings.json'),
+            projectSettings: config.projectSettingsPath ?? join(launchDir, '.claude', 'settings.json'),
+            localSettings: config.localSettingsPath
+                ?? join(resolveLocalSettingsDir(launchDir, deps), '.claude', 'settings.local.json'),
+            flagSettings: config.flagSettingsPath,
+        },
+        flagSettingsInline: config.flagSettingsInline,
+        policy: {
+            remoteSettings: config.policy?.remoteSettings,
+            systemPath: config.policy?.systemPath,
+            userPath: config.policy?.userPath,
+        },
+    };
+}
+/**
+ * Claude Code-style five-level settings cascade Provider. Reads the user,
+ * project, local, flag, and policy sources in low-to-high priority, deep-merges
+ * them (permission arrays union with `deny` precedence), resolves policy by
+ * first-source-wins, splits out the top-level `env` section, and publishes the
+ * merged per-namespace document into `ctx.settings`. Writes are write-through
+ * to the user layer: a merged section is persisted as a surgical leaf-delta
+ * applied onto the user settings file, keeping project/local/flag/policy
+ * contributions read-side only.
+ */
+export class SettingsCascadeProvider extends SettingsProvider {
+    static Config = z.object({
+        projectDir: z.string(),
+        dshHome: z.string(),
+        userSettingsPath: z.string(),
+        projectSettingsPath: z.string(),
+        localSettingsPath: z.string(),
+        flagSettingsPath: z.string(),
+        flagSettingsInline: z.any(),
+        policy: z.object({
+            remoteSettings: z.any(),
+            systemPath: z.string(),
+            userPath: z.string(),
+        }),
+    });
+    spec;
+    /** The top-level `env` section split out of the merged document, string-valued. */
+    env = {};
+    /**
+     * Mirror of exactly what we last published to the seam via `load()`, and what
+     * persist has durably stored. Invariant: shadow moves only when the seam's
+     * document moves — it is updated at the end of a successful `load()` and,
+     * in `persist()`, only AFTER the atomic rename resolves. Never update it in
+     * a `finally` or ahead of a throw. If a file watcher is ever added, any
+     * `publish(doc)` path must also update this shadow.
+     */
+    shadow = {};
+    /**
+     * Single exclusive operation chain: watcher-triggered reloads and persists
+     * run one at a time in queue order (settled tail), so a persist can never
+     * race a reload's read-modify-publish, and a reload can never read a
+     * half-committed atomic rename.
+     */
+    operations = Promise.resolve();
+    /** Set at dispose: refuse new watcher events and let in-flight work no-op. */
+    closed = false;
+    /** Opaque read of {@link closed}: control flow cannot narrow it across awaits. */
+    isClosed() {
+        return this.closed;
+    }
+    constructor(ctx, config) {
+        super(ctx);
+        // Programmatic construction may bypass Schemastery normalization; resolve
+        // the same defaults in one explicit step either way.
+        this.spec = resolveSpec(config);
+    }
+    /** The cascade is now writable; writes edit the user layer. */
+    get writable() {
+        return true;
+    }
+    /** Absolute path of the user-editable document (the cascade's user source). */
+    get documentPath() {
+        const path = this.spec.sources.userSettings;
+        if (path === undefined) {
+            throw new Error('settings-cascade: userSettings source is not configured; no user layer to edit');
+        }
+        return path;
+    }
+    /**
+     * Materialize the user-editable document for a native editor. The parent
+     * directory is created and an absent document is seeded with an empty
+     * namespace map. It intentionally does NOT call {@link SettingsProvider.publish}:
+     * the cascade document is the five-layer merge, and publishing `{}` here
+     * would clobber project/local/flag/policy contributions in-process (the
+     * stock file provider publishes `{}` only because its document is the user
+     * file one-to-one).
+     * @returns the absolute local document path after materialization.
+     */
+    async prepareDocument() {
+        const path = this.documentPath;
+        await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+        await writeFile(path, '{}\n', { flag: 'wx', mode: 0o600 }).catch(error => {
+            if (error?.code !== 'EEXIST')
+                throw error;
+        });
+        return path;
+    }
+    /**
+     * Durably persist one namespace's merged user section by editing the user
+     * layer. The section (the seam's complete merged section for the namespace)
+     * is diffed against the shadow of what we last published, the delta is
+     * applied onto the user settings file's own section for that namespace, and
+     * the file is rewritten atomically. The shadow advances only after the
+     * atomic rename resolves, so an interrupted persist never desyncs it.
+     * @param ns - the namespace being written.
+     * @param section - the complete merged user section to store.
+     */
+    async persist(ns, section) {
+        // Serialize with watcher-triggered reloads on the one operation chain, and
+        // retry optimistically when an external edit lands between the read and
+        // the atomic rename.
+        return this.enqueue(() => this.persistSection(ns, section));
+    }
+    /** Queue one exclusive document operation behind every earlier one. */
+    enqueue(operation) {
+        const task = this.operations.then(operation);
+        this.operations = task.then(() => undefined, () => undefined);
+        return task;
+    }
+    /** Queue a reload; a failed reload keeps the last-good document and stays only a warning. */
+    queueRefresh() {
+        void this.enqueue(async () => {
+            if (this.isClosed())
+                return;
+            try {
+                this.publish(await this.load());
+            }
+            catch (error) {
+                // A malformed or unreadable source must never take a live session
+                // down: keep the last good document published and keep watching.
+                this.ctx.logger.warn('settings-cascade: reload failed; keeping the last good document');
+                this.ctx.logger.warn(error);
+            }
+        }).catch((error) => {
+            // Only an invariant violation escaping the commit path can reject a
+            // reload past the warn-and-keep guard; keep the queue alive so one
+            // poisoned commit cannot silently end hot reloading forever.
+            this.ctx.logger.warn('settings-cascade: reload commit failed');
+            this.ctx.logger.warn(error);
+        });
+    }
+    /**
+     * Persist one namespace with optimistic concurrency: the user-file bytes
+     * are re-read immediately before the atomic rename, and when an external
+     * writer changed them since the read the op built on, the whole round
+     * restarts from a fresh read (bounded, then loud). The shadow still moves
+     * only after the write has durably succeeded.
+     */
+    async persistSection(ns, section) {
+        const path = this.documentPath;
+        let lastError;
+        for (let attempt = 0; attempt < MAX_PERSIST_ATTEMPTS; attempt++) {
+            const ops = diffSections(this.shadow[ns] ?? {}, section);
+            if (ops.length === 0) {
+                this.shadow[ns] = structuredClone(section);
+                return;
+            }
+            const before = await this.readUserText(path);
+            const root = before === undefined || before.trim().length === 0 ? {} : this.parse(path, before);
+            const next = applyOpsToSection(root[ns], ops);
+            const updated = { ...root, [ns]: next };
+            if ((await this.readUserText(path)) !== before) {
+                lastError = new Error(`settings-cascade: user settings file at ${path} changed concurrently during persist`);
+                continue;
+            }
+            await writeJsonAtomic(path, updated);
+            this.shadow[ns] = structuredClone(section);
+            return;
+        }
+        throw lastError ?? new Error(`settings-cascade: persist at ${path} exhausted ${MAX_PERSIST_ATTEMPTS} optimistic-retry attempts`);
+    }
+    /** Raw user-file text, or `undefined` when the file is absent. */
+    async readUserText(path) {
+        try {
+            return await readFile(path, 'utf8');
+        }
+        catch (error) {
+            if (isENOENT(error))
+                return undefined;
+            throw error;
+        }
+    }
+    /** Every concrete settings FILE path worth watching, canonicalized and deduped. */
+    async watchPaths() {
+        const paths = [
+            this.spec.sources.userSettings,
+            this.spec.sources.projectSettings,
+            this.spec.sources.localSettings,
+            this.spec.sources.flagSettings,
+            this.spec.policy.systemPath,
+            this.spec.policy.userPath,
+        ].filter((path) => path !== undefined);
+        const canonical = await Promise.all(paths.map(path => canonicalizeWatchPath(path)));
+        return [...new Set(canonical)];
+    }
+    async *[Service.init]() {
+        // The base init loads and publishes the merged document; a parse failure
+        // there is a boot failure and stays loud.
+        yield* super[Service.init]();
+        const watcher = chokidarWatch(await this.watchPaths(), {
+            ignoreInitial: true,
+            awaitWriteFinish: {
+                stabilityThreshold: DEBOUNCE_MS,
+                pollInterval: Math.max(1, Math.min(DEBOUNCE_MS, 10)),
+            },
+        });
+        watcher.on('all', () => {
+            if (this.isClosed())
+                return;
+            this.queueRefresh();
+        });
+        watcher.on('ready', () => {
+            // The base init's load raced the watcher's own setup: a change written
+            // between that read and the watcher becoming active never fires an
+            // event. One reconcile at ready closes the gap.
+            if (this.isClosed())
+                return;
+            this.queueRefresh();
+        });
+        watcher.on('error', (error) => {
+            this.ctx.logger.warn('settings-cascade: watcher error');
+            this.ctx.logger.warn(error);
+        });
+        yield async () => {
+            this.closed = true;
+            await watcher.close();
+            await this.operations;
+        };
+    }
+    /**
+     * Read the merged top-level `env` section. Values are already coerced to
+     * strings. Pass the result to {@link applyEnv} / {@link applyTrustedEnv} for
+     * the untrusted and trusted application stages.
+     * @returns the detached `env` section (empty object when none is configured).
+     */
+    getEnv() {
+        return structuredClone(this.env);
+    }
+    /**
+     * Merge all five sources low-to-high and publish the per-namespace document,
+     * splitting the top-level `env` section into {@link getEnv}. A present-but-
+     * invalid source file fails load loud; absent sources contribute nothing.
+     * @returns the merged document minus its top-level `env` key.
+     */
+    async load() {
+        // The five source resolutions are independent; read them concurrently.
+        // With MULTIPLE invalid sources, serial loading surfaced the lowest layer
+        // deterministically while Promise.all surfaces whichever rejects first in
+        // time — both fail loud. Single-invalid behavior is unchanged.
+        const [user, project, local, flag, policy] = await Promise.all([
+            this.readOptional(this.spec.sources.userSettings),
+            this.readOptional(this.spec.sources.projectSettings),
+            this.readOptional(this.spec.sources.localSettings, true),
+            this.resolveFlag(),
+            this.resolvePolicy(),
+        ]);
+        const merged = [user, project, local, flag, policy]
+            .reduce((acc, layer) => (Object.keys(layer).length === 0
+            ? acc
+            : mergeSettingsSection(acc, layer)), {});
+        // CC camelCase top-level keys alias onto kebab namespaces before the env
+        // split / publish, so the shadow mirrors exactly what the seam resolves.
+        const { env, ...document } = applyCcKeyAliases(merged);
+        this.env = this.coerceEnvSection(env);
+        this.shadow = structuredClone(document);
+        return document;
+    }
+    /** Read a source file into raw settings, skipping absence and failing loud on invalidity. */
+    async readOptional(path, local = false) {
+        if (path === undefined)
+            return {};
+        let text;
+        try {
+            text = await readFile(path, 'utf8');
+        }
+        catch (error) {
+            // The hoisted local file may sit in a main checkout whose `.claude`
+            // denies us mid-session (EACCES/EPERM); treat that as absent so a
+            // cross-boundary read cannot crash boot. Other sources stay loud.
+            if (isENOENT(error) || (local && isAccessDenied(error)))
+                return {};
+            throw error;
+        }
+        return this.parse(path, text);
+    }
+    /** Parse one settings document, throwing loud on a non-object root or invalid JSON. */
+    parse(path, text) {
+        let root;
+        try {
+            root = text.trim().length === 0 ? {} : JSON.parse(text);
+        }
+        catch (error) {
+            throw new Error(`settings-cascade: invalid settings document at ${path}: ${error.message}`, { cause: error });
+        }
+        if (!isPlainObject(root)) {
+            throw new TypeError(`settings-cascade: ${path} must be a JSON object of namespace sections`);
+        }
+        return root;
+    }
+    /** Merge the flag file and inline content, inline last (highest within the flag layer). */
+    async resolveFlag() {
+        const file = await this.readOptional(this.spec.sources.flagSettings);
+        if (!isPlainObject(this.spec.flagSettingsInline))
+            return file;
+        return mergeSettingsSection(file, this.spec.flagSettingsInline);
+    }
+    /** Resolve policy by first-source-wins: remote, then system file, then user file. */
+    async resolvePolicy() {
+        const { remoteSettings, systemPath, userPath } = this.spec.policy;
+        if (isPlainObject(remoteSettings) && Object.keys(remoteSettings).length > 0) {
+            return remoteSettings;
+        }
+        for (const path of [systemPath, userPath]) {
+            if (path === undefined)
+                continue;
+            const settings = await this.readOptional(path);
+            if (Object.keys(settings).length > 0)
+                return settings;
+        }
+        return {};
+    }
+    /** Coerce every `env` value to its string process-environment form. */
+    coerceEnvSection(value) {
+        if (!isPlainObject(value))
+            return {};
+        const out = {};
+        for (const [name, raw] of Object.entries(value)) {
+            out[name] = coerceEnv(raw);
+        }
+        return out;
+    }
+}
+export default SettingsCascadeProvider;
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAW,OAAO,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,EAAE,KAAK,IAAI,aAAa,EAAE,MAAM,UAAU,CAAA;AACjD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC7D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AACnF,OAAO,EAAE,gBAAgB,EAA0B,MAAM,2BAA2B,CAAA;AACpF,OAAO,EAAE,uBAAuB,EAAsB,MAAM,iBAAiB,CAAA;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,EAAE,SAAS,EAAoB,MAAM,UAAU,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAEvD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEvE,OAAO,EAAE,uBAAuB,EAAoE,MAAM,iBAAiB,CAAA;AAC3H,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAClF,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAA0C,MAAM,gBAAgB,CAAA;AACjH,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAyC,MAAM,kBAAkB,CAAA;AAC7G,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,kBAAkB,EAAoB,MAAM,UAAU,CAAA;AAErG,iEAAiE;AACjE,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,cAAc;IACd,iBAAiB;IACjB,eAAe;IACf,cAAc;IACd,gBAAgB;CACR,CAAA;AAmDV,gFAAgF;AAChF,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,MAAM,KAAK,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;IACnD,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAA;AACrD,CAAC;AAED,kEAAkE;AAClE,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAQ,KAAsC,EAAE,IAAI,KAAK,QAAQ,CAAA;AACnE,CAAC;AAED,wEAAwE;AACxE,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,IAAI,GAAI,KAAsC,EAAE,IAAI,CAAA;IAC1D,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,CAAA;AAC9C,CAAC;AAED,iGAAiG;AACjG,MAAM,WAAW,GAAG,GAAG,CAAA;AAEvB,gGAAgG;AAChG,MAAM,oBAAoB,GAAG,CAAC,CAAA;AAE9B;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,IAAoB;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC7D,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC3C,OAAO;QACL,OAAO,EAAE;YACP,YAAY,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;YACpE,eAAe,EAAE,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC;YAC1F,aAAa,EAAE,MAAM,CAAC,iBAAiB;mBAClC,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC;YACrF,YAAY,EAAE,MAAM,CAAC,gBAAgB;SACtC;QACD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,MAAM,EAAE;YACN,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc;YAC7C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU;YACrC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ;SAClC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,uBAAwB,SAAQ,gBAAgB;IAC3D,MAAM,CAAC,MAAM,GAAc,CAAC,CAAC,MAAM,CAAC;QAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC5B,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC/B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC7B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC5B,kBAAkB,EAAE,CAAC,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;YACf,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE;YACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;SACrB,CAAC;KACH,CAAC,CAAA;IAEe,IAAI,CAAc;IACnC,mFAAmF;IAC3E,GAAG,GAAgB,EAAE,CAAA;IAC7B;;;;;;;OAOG;IACK,MAAM,GAA4B,EAAE,CAAA;IAC5C;;;;;OAKG;IACK,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IACrD,8EAA8E;IACtE,MAAM,GAAG,KAAK,CAAA;IAEtB,kFAAkF;IAC1E,QAAQ;QACd,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED,YAAY,GAAY,EAAE,MAAc;QACtC,KAAK,CAAC,GAAG,CAAC,CAAA;QACV,0EAA0E;QAC1E,qDAAqD;QACrD,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;IACjC,CAAC;IAED,+DAA+D;IAC/D,IAAI,QAAQ;QACV,OAAO,IAAI,CAAA;IACb,CAAC;IAED,+EAA+E;IAC/E,IAAa,YAAY;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAA;QAC3C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAA;QACnG,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;;;;OASG;IACM,KAAK,CAAC,eAAe;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAA;QAC9B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC5D,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YACvE,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QAC3C,CAAC,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;;;;OASG;IACO,KAAK,CAAC,OAAO,CAAC,EAAqB,EAAE,OAAgC;QAC7E,2EAA2E;QAC3E,wEAAwE;QACxE,qBAAqB;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAA;IAC7D,CAAC;IAED,uEAAuE;IAC/D,OAAO,CAAI,SAA2B;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC5C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC7D,OAAO,IAAI,CAAA;IACb,CAAC;IAED,6FAA6F;IACrF,YAAY;QAClB,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC3B,IAAI,IAAI,CAAC,QAAQ,EAAE;gBAAE,OAAM;YAC3B,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;YACjC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,kEAAkE;gBAClE,iEAAiE;gBACjE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAA;gBACvF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC7B,CAAC;QACH,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC1B,oEAAoE;YACpE,mEAAmE;YACnE,6DAA6D;YAC7D,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAA;YAC9D,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC7B,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,cAAc,CAAC,EAAqB,EAAE,OAAgC;QAClF,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAA;QAC9B,IAAI,SAAkB,CAAA;QACtB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,oBAAoB,EAAE,OAAO,EAAE,EAAE,CAAC;YAChE,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAA;YACxD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;gBAC1C,OAAM;YACR,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;YAC5C,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YAC/F,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;YAC7C,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAA;YACvC,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC/C,SAAS,GAAG,IAAI,KAAK,CAAC,2CAA2C,IAAI,sCAAsC,CAAC,CAAA;gBAC5G,SAAQ;YACV,CAAC;YACD,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YACpC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;YAC1C,OAAM;QACR,CAAC;QACD,MAAM,SAAS,IAAI,IAAI,KAAK,CAAC,gCAAgC,IAAI,cAAc,oBAAoB,4BAA4B,CAAC,CAAA;IAClI,CAAC;IAED,kEAAkE;IAC1D,KAAK,CAAC,YAAY,CAAC,IAAY;QACrC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAA;YACrC,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,mFAAmF;IAC3E,KAAK,CAAC,UAAU;QACtB,MAAM,KAAK,GAAG;YACZ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY;YAC9B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe;YACjC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa;YAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY;YAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU;YAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ;SAC1B,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAA;QACtD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAA;IAChC,CAAC;IAEQ,KAAK,CAAA,CAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAC5B,yEAAyE;QACzE,0CAA0C;QAC1C,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAA;QAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,EAAE;YACrD,aAAa,EAAE,IAAI;YACnB,gBAAgB,EAAE;gBAChB,kBAAkB,EAAE,WAAW;gBAC/B,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;aACrD;SACF,CAAC,CAAA;QACF,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,IAAI,CAAC,QAAQ,EAAE;gBAAE,OAAM;YAC3B,IAAI,CAAC,YAAY,EAAE,CAAA;QACrB,CAAC,CAAC,CAAA;QACF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,uEAAuE;YACvE,mEAAmE;YACnE,gDAAgD;YAChD,IAAI,IAAI,CAAC,QAAQ,EAAE;gBAAE,OAAM;YAC3B,IAAI,CAAC,YAAY,EAAE,CAAA;QACrB,CAAC,CAAC,CAAA;QACF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;YACvD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC7B,CAAC,CAAC,CAAA;QACF,MAAM,KAAK,IAAI,EAAE;YACf,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;YAClB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;YACrB,MAAM,IAAI,CAAC,UAAU,CAAA;QACvB,CAAC,CAAA;IACH,CAAC;IAED;;;;;OAKG;IACH,MAAM;QACJ,OAAO,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAClC,CAAC;IAED;;;;;OAKG;IACO,KAAK,CAAC,IAAI;QAClB,uEAAuE;QACvE,0EAA0E;QAC1E,0EAA0E;QAC1E,+DAA+D;QAC/D,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;YACjD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;YACpD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC;YACxD,IAAI,CAAC,WAAW,EAAE;YAClB,IAAI,CAAC,aAAa,EAAE;SACrB,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;aAChD,MAAM,CACL,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAC9C,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,EACrC,EAAE,CACH,CAAA;QAEH,yEAAyE;QACzE,yEAAyE;QACzE,MAAM,EAAE,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;QACtD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;QACrC,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;QACvC,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,6FAA6F;IACrF,KAAK,CAAC,YAAY,CAAC,IAAwB,EAAE,KAAK,GAAG,KAAK;QAChE,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,CAAA;QACjC,IAAI,IAAY,CAAA;QAChB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,oEAAoE;YACpE,kEAAkE;YAClE,kEAAkE;YAClE,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,EAAE,CAAA;YAClE,MAAM,KAAK,CAAA;QACb,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC/B,CAAC;IAED,uFAAuF;IAC/E,KAAK,CAAC,IAAY,EAAE,IAAY;QACtC,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,KAAM,KAAe,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1H,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,SAAS,CAAC,qBAAqB,IAAI,8CAA8C,CAAC,CAAA;QAC9F,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,2FAA2F;IACnF,KAAK,CAAC,WAAW;QACvB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QACpE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC;YAAE,OAAO,IAAI,CAAA;QAC7D,OAAO,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;IACjE,CAAC;IAED,qFAAqF;IAC7E,KAAK,CAAC,aAAa;QACzB,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAA;QACjE,IAAI,aAAa,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5E,OAAO,cAAc,CAAA;QACvB,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC1C,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAQ;YAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;YAC9C,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAA;QACvD,CAAC;QACD,OAAO,EAAE,CAAA;IACX,CAAC;IAED,uEAAuE;IAC/D,gBAAgB,CAAC,KAAc;QACrC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QACpC,MAAM,GAAG,GAAgB,EAAE,CAAA;QAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;QAC5B,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;;AAGH,eAAe,uBAAuB,CAAA"}

package/lib/invariant.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Package-owned invariant companion for `@dsh-cc/settings-cascade`.
+ * @module @dsh-cc/settings-cascade/invariant
+ */
+import type { Context } from '@deepseek-ai/cordis';
+/** Cordis companion plugin name. */
+export declare const name = "settings-cascade-invariant";
+/** Service required before the companion can reserve package ownership. */
+export declare const inject: string[];
+/**
+ * Register this package's invariant companion.
+ * @param ctx - Cordis context carrying the invariant service.
+ * @returns the installed registration's disposer after setup succeeds.
+ */
+export declare const apply: (ctx: Context) => Promise<() => void>;
+//# sourceMappingURL=invariant.d.ts.map

package/lib/invariant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariant.d.ts","sourceRoot":"","sources":["../src/invariant.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAKlD,oCAAoC;AACpC,eAAO,MAAM,IAAI,+BAA+B,CAAA;AAChD,2EAA2E;AAC3E,eAAO,MAAM,MAAM,UAAiB,CAAA;AASpC;;;;GAIG;AACH,eAAO,MAAM,KAAK,GAAI,KAAK,OAAO,KAAG,OAAO,CAAC,MAAM,IAAI,CACU,CAAA"}