@gajae-code/coding-agent 0.12.19 → 0.12.21

package/dist/types/session/internal/managed-session-storage.d.ts

@@ -1,4 +1,5 @@
 import type { NativeDirectoryTreeSnapshot, NativeExactUnlinkResult, NativeOwnerOnlySecurityResult, RecoveryFsRoot } from "@gajae-code/natives";
+import type { SessionStorageStat } from "../session-storage";
 import { type NativePublishOutcome } from "./native-publish-outcome";
 export declare const MANAGED_ARTIFACT_MAX_DEPTH = 32;
 export declare const MANAGED_ARTIFACT_MAX_FILES = 50000;
@@ -50,6 +51,38 @@ export interface ManagedFileSnapshot {
         sha256: string;
     };
 }
+/**
+ * Descriptor identity of one managed file object. Deliberately excludes the
+ * content sha256: append receipts must bind the post-operation object without
+ * re-reading the whole payload.
+ */
+export interface ManagedFileIdentity {
+    dev: bigint;
+    ino: bigint;
+    nlink: bigint;
+    size: number;
+    mtimeNs: bigint;
+    ctimeNs: bigint;
+}
+/**
+ * Post-operation evidence for one managed append. `descriptor` is the
+ * `SessionStorageStat`-shaped snapshot of the retained/successor object captured
+ * AFTER the append has been synchronized (never a pathname `statSync`); `identity`
+ * carries the same fields as the object identity. The SessionManager feeds
+ * `descriptor` directly into the commit-marker snapshot.
+ */
+export interface ManagedAppendReceipt {
+    descriptor: SessionStorageStat;
+    identity: ManagedFileIdentity;
+}
+export interface ManagedBoundedAppendExpectation {
+    readonly dev: string;
+    readonly ino: string;
+    readonly size: string;
+    readonly mtimeNs: string;
+    readonly ctimeNs: string;
+    readonly sha256: string;
+}
 export declare function validateNativeSecurityResult(value: unknown, operation: "apply" | "verify", kind: "directory" | "file"): NativeOwnerOnlySecurityResult;
 export interface ManagedLockRetirementTestEvent {
     readonly path: string;
@@ -111,7 +144,11 @@ export declare class ManagedSessionDescendantStore {
     replace(relativePath: string, bytes: Uint8Array): Promise<void>;
     replaceExpected(relativePath: string, bytes: Uint8Array, expected: ManagedFileSnapshot): void;
     replaceSync(relativePath: string, bytes: Uint8Array): void;
-    appendSync(relativePath: string, bytes: Uint8Array): void;
+    captureBoundedAppendExpectation(relativePath: string): ManagedBoundedAppendExpectation | undefined;
+    appendExpectedSync(relativePath: string, bytes: Uint8Array, expected: ManagedBoundedAppendExpectation): ManagedAppendReceipt;
+    appendSync(relativePath: string, bytes: Uint8Array): ManagedAppendReceipt;
+    /** Capture descriptor identity without copying file bytes when retained authority is available. */
+    descriptorExpected(relativePath: string): SessionStorageStat | null;
     /** Read an exact managed file without exposing its pathname as authority. */
     readExpected(relativePath: string): ManagedFileSnapshot | null;
     /** Remove an exact captured file without reopening its pathname as authority. */
@@ -135,10 +172,11 @@ export declare function ensureManagedDirectory(pathname: string, root?: ManagedD
 export declare function captureManagedFilePrefixNoFollow(pathname: string, maxBytes: number): ManagedFileSnapshot;
 /** Captures header/hash/copy input from one no-follow descriptor and rechecks the pathname before use. */
 export declare function captureManagedFileNoFollow(pathname: string): ManagedFileSnapshot;
+/** Streams a managed file once while retaining only a bounded header prefix and the full descriptor-bound digest. */
+export declare function inspectManagedFileNoFollow(pathname: string, prefixLimit: number): ManagedFileSnapshot;
 /** Atomically publishes bytes without replacing an existing destination. */
 export declare function publishManagedFileNoReplace(destination: string, bytes: Uint8Array, assertOwned?: () => void, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;
 export declare function publishManagedFileNoReplaceSync(destination: string, bytes: Uint8Array, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): ManagedFileSnapshot["identity"];
-/** Replace one managed regular file while retaining the secured staging fd through publication. */
 export declare function replaceManagedFileSync(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy, assertFence?: () => void, expectedDestination?: ManagedFileSnapshot["identity"]): void;
 export declare function replaceManagedFile(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;
 /** Copy the exact bytes captured from one no-follow source descriptor. */