@gitroll/tacitt-cli 0.4.1 → 0.4.2

package/dist/{run-CV6Io7CS.mjs → run-BGlf-W0M.mjs}

@@ -1,7 +1,7 @@
-import { tn as sessionSchema } from "./locate-U3-nkird.mjs";
-import { t as createZstdFrameCheck$1 } from "./frame-waS5FnN5.mjs";
-import "./src-DSDRF7i6.mjs";
-import { a as isRecord } from "./model-BDrntocp.mjs";
+import { tn as sessionSchema } from "./locate-CBiw-CJK.mjs";
+import { t as createZstdFrameCheck$1 } from "./frame-IeDOLy1o.mjs";
+import "./src-CBTvOa44.mjs";
+import { a as isRecord } from "./model-DGTsARtV.mjs";
 import { constants } from "node:fs";
 import { z } from "zod";
 import { lstat, open, stat } from "node:fs/promises";

package/dist/{src-BESjwh7X.mjs → src-37kIclGK.mjs}

@@ -1,7 +1,7 @@
-import { An as nativeBoolean, Hn as defaultLimits, In as retainedMainTextNodes, Mn as nativeItems, Nn as nativeText, Qt as sourceSnapshotId, Tn as parseNativeRecord, Zt as observeSource, jn as nativeField, nr as ProcessingError, vn as walkNativeFields } from "./locate-U3-nkird.mjs";
-import { Ot as nativeAdapterVersions, ni as gitMetadataBudgetBytes, tt as reviewInventory } from "./src-DSDRF7i6.mjs";
-import { a as isRecord, i as errorCode, n as checkDiscoveryAbort, o as unresolvedMetadata, r as discoveryBounds, t as DiscoveryWarnings } from "./model-BDrntocp.mjs";
-import { c as previewLimits, d as checkOpenSource, f as checkSource, h as openSource, i as pageFits, l as previewSourceVersion, m as noSymlinks, p as fileSnapshot, r as previewHeapLimits, s as previewMessageSchema, u as createZstdFrameCheck } from "./run-CV6Io7CS.mjs";
+import { An as nativeBoolean, Hn as defaultLimits, In as retainedMainTextNodes, Mn as nativeItems, Nn as nativeText, Qt as sourceSnapshotId, Tn as parseNativeRecord, Zt as observeSource, jn as nativeField, nr as ProcessingError, vn as walkNativeFields } from "./locate-CBiw-CJK.mjs";
+import { Ot as nativeAdapterVersions, ni as gitMetadataBudgetBytes, tt as reviewInventory } from "./src-CBTvOa44.mjs";
+import { a as isRecord, i as errorCode, n as checkDiscoveryAbort, o as unresolvedMetadata, r as discoveryBounds, t as DiscoveryWarnings } from "./model-DGTsARtV.mjs";
+import { c as previewLimits, d as checkOpenSource, f as checkSource, h as openSource, i as pageFits, l as previewSourceVersion, m as noSymlinks, p as fileSnapshot, r as previewHeapLimits, s as previewMessageSchema, u as createZstdFrameCheck } from "./run-BGlf-W0M.mjs";
 import { a as titleHintLimits, n as titleHeapLimits, o as titleInputSchema, r as decodeTitleError, s as titleReplySchema } from "./heap-1FYhGds4.mjs";
 import { constants } from "node:fs";
 import { lstat, open, opendir, readFile, readdir, realpath, stat } from "node:fs/promises";
@@ -4869,6 +4869,7 @@ async function scanRoot(path, harness, state, warnings, signal) {
 				id: randomUUID(),
 				path: child,
 				root,
+				harnessRelativePath: `${basename(path)}/${relative(root, child).split(sep).join("/")}`,
 				representation: entry.name.endsWith(".zst") ? "jsonl.zst" : "jsonl",
 				snapshot
 			};

package/dist/{src-DSDRF7i6.mjs → src-CBTvOa44.mjs}

@@ -1,4 +1,4 @@
-import { $ as bCountSchema, $n as scalarAfter, $t as fileIdentitySchema, A as bDuplicateMirror, B as bEvidenceReader, Bn as validatePlan, Bt as sessionPeriodSchema, C as validateBUnit, Ct as cardsSubmitSchema, D as uncoveredBObligations, Dn as entityDictionaryVersion, Dt as privacyResolveSchema, E as bLiterals, En as cleanupImplementationVersion, Et as packageConfirmActionSchema, Ft as termTypeInfo, G as subtractBRanges, Gn as detectStatic, H as codePointLength, Ht as ApplicationError, I as bIssue, It as termTypeSchema, J as bRetainedGroupSchema, Jt as reviewFamilies, Kt as familyNeedsReview, L as bOverlaps, Ln as validateProfile, Lt as termTypes, M as bLegacyBindings, Mt as reviewTermsResultSchema, N as bUnitFragments, Nt as termAssessmentSchema, O as indexBRanges, Ot as privacyTermKey, P as bAdoptedObligations, Pt as termOverrideValueSchema, Q as bAnchorSchema, Qt as sourceSnapshotId, R as unownedBObligations, Rn as orderProfile, Rt as deselectOutsidePeriod, S as validateBFields, St as cardsConfirmActionSchema, T as bLiteralTerms, Tt as emptyJourneyPrivacy, U as codePointSlice, Ut as UnfinishedJourneyError, V as bDigest, Vn as copyData, Vt as classificationTitleMaskSchema, W as createCodePointIndex, Wt as safeCode, X as bSessionDecisionSchema, Xn as createEntityMatcher, Xt as sourceKey, Y as bReviewSubmissionSchema, Yt as sourceGraph, Z as bTermSchema, Zt as observeSource, _ as semanticFindingSchema, _n as gapReasons, _t as hideConfirmSchema, a as reviewChunkSchema, at as journeyExceptionSchema, b as validateBReview, bn as staticDefaults, bt as journeyConfigurationSchema, c as textDigest, ct as journeyPreferenceScopeSchema, dt as nativeJourneySchema, en as inventorySchema, er as scalarBefore, et as bIdSchema, f as reviewAlignmentAuditSchema, ft as journeyGuidanceSchema, g as validateReviewAlignment, h as reviewFindingsDigest, hn as inspectionSemanticVersions, ht as journeyDescribeSchema, i as reviewBatchSchema, in as nativeSourceIdentitySchema, it as journeyDigestSchema, jt as reviewTermsInputSchema, l as validateReview, lt as journeyProjectTypeSchema, m as reviewAlignmentSchema, mn as currentDetectorVersion, mt as delegatedDecisionSchema, n as compileBFindings, nn as sourcePartSchema, nt as journeyAccessSchema, o as reviewDigest, ot as journeyIdSchema, p as reviewAlignmentInputSchema, pt as journeyInstructionInputSchema, q as bRepresentationSchema, qn as staticCategories, qt as familySelected, r as reviewBatchChunks, rt as journeyChoiceSchema, s as reviewSubmitSchema, st as journeyKindSchema, tr as defaultDetectionLimits, tt as bMethod, u as findingReferenceKey, ut as journeyWorkTypeSchema, vt as hidePlanInputSchema, w as bLiteralAdmitted, x as createBAnalysisUnits, xn as staticOptions, xt as cardAnswerActionSchema, y as validateBClassification, yn as createStaticProcessor, yt as hidePlanResourceSchema, z as bAnchorKey } from "./locate-U3-nkird.mjs";
+import { $ as bCountSchema, $n as scalarAfter, $t as fileIdentitySchema, A as bDuplicateMirror, B as bEvidenceReader, Bn as validatePlan, Bt as sessionPeriodSchema, C as validateBUnit, Ct as cardsSubmitSchema, D as uncoveredBObligations, Dn as entityDictionaryVersion, Dt as privacyResolveSchema, E as bLiterals, En as cleanupImplementationVersion, Et as packageConfirmActionSchema, Ft as termTypeInfo, G as subtractBRanges, Gn as detectStatic, H as codePointLength, Ht as ApplicationError, I as bIssue, It as termTypeSchema, J as bRetainedGroupSchema, Jt as reviewFamilies, Kt as familyNeedsReview, L as bOverlaps, Ln as validateProfile, Lt as termTypes, M as bLegacyBindings, Mt as reviewTermsResultSchema, N as bUnitFragments, Nt as termAssessmentSchema, O as indexBRanges, Ot as privacyTermKey, P as bAdoptedObligations, Pt as termOverrideValueSchema, Q as bAnchorSchema, Qt as sourceSnapshotId, R as unownedBObligations, Rn as orderProfile, Rt as deselectOutsidePeriod, S as validateBFields, St as cardsConfirmActionSchema, T as bLiteralTerms, Tt as emptyJourneyPrivacy, U as codePointSlice, Ut as UnfinishedJourneyError, V as bDigest, Vn as copyData, Vt as classificationTitleMaskSchema, W as createCodePointIndex, Wt as safeCode, X as bSessionDecisionSchema, Xn as createEntityMatcher, Xt as sourceKey, Y as bReviewSubmissionSchema, Yt as sourceGraph, Z as bTermSchema, Zt as observeSource, _ as semanticFindingSchema, _n as gapReasons, _t as hideConfirmSchema, a as reviewChunkSchema, at as journeyExceptionSchema, b as validateBReview, bn as staticDefaults, bt as journeyConfigurationSchema, c as textDigest, ct as journeyPreferenceScopeSchema, dt as nativeJourneySchema, en as inventorySchema, er as scalarBefore, et as bIdSchema, f as reviewAlignmentAuditSchema, ft as journeyGuidanceSchema, g as validateReviewAlignment, h as reviewFindingsDigest, hn as inspectionSemanticVersions, ht as journeyDescribeSchema, i as reviewBatchSchema, in as nativeSourceIdentitySchema, it as journeyDigestSchema, jt as reviewTermsInputSchema, l as validateReview, lt as journeyProjectTypeSchema, m as reviewAlignmentSchema, mn as currentDetectorVersion, mt as delegatedDecisionSchema, n as compileBFindings, nn as sourcePartSchema, nt as journeyAccessSchema, o as reviewDigest, ot as journeyIdSchema, p as reviewAlignmentInputSchema, pt as journeyInstructionInputSchema, q as bRepresentationSchema, qn as staticCategories, qt as familySelected, r as reviewBatchChunks, rt as journeyChoiceSchema, s as reviewSubmitSchema, st as journeyKindSchema, tr as defaultDetectionLimits, tt as bMethod, u as findingReferenceKey, ut as journeyWorkTypeSchema, vt as hidePlanInputSchema, w as bLiteralAdmitted, x as createBAnalysisUnits, xn as staticOptions, xt as cardAnswerActionSchema, y as validateBClassification, yn as createStaticProcessor, yt as hidePlanResourceSchema, z as bAnchorKey } from "./locate-CBiw-CJK.mjs";
 import { z } from "zod";
 import { createHash, createHmac, createSecretKey, randomUUID } from "node:crypto";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
@@ -1566,10 +1566,50 @@ const sendItemSchema = z.object({
 	/** The receipt whose bytes were PUT but not yet completed: the next step completes it (BL-210). */
 	uploadedReceiptId: journeyIdSchema.nullable().optional(),
 	/**
+	* Bare `settings_changed` refusals in a row for the uploaded bytes: Passport's scope kept
+	* moving, so the next completion waits longer (ADR 0235). Cleared with the upload marker.
+	*/
+	busyRefusals: count$13.positive().optional(),
+	/**
 	* Passport answered `bundle_mismatch` to this Work's checksum upload: the rest of this Send
 	* uploads through staging (ADR 0231).
 	*/
 	checksumUploadRefused: z.literal(true).optional(),
+	/** Write-ahead upload intent; completion probes recover an unacknowledged blob PUT. */
+	sessionUpload: z.object({
+		key: journeyDigestSchema,
+		sha256: journeyDigestSchema
+	}).strict().nullable().optional(),
+	/** Exact write-ahead membership request; never rebase it after an uncertain PUT. */
+	sessionMembership: z.object({
+		workId: journeyIdSchema,
+		expectedRevision: count$13,
+		keys: z.array(journeyDigestSchema),
+		title: z.string(),
+		access
+	}).strict().optional(),
+	/** Membership readback retained for visible conflict recovery. */
+	membershipConflict: z.object({
+		revision: count$13,
+		keys: z.array(journeyDigestSchema)
+	}).strict().optional(),
+	/** Informational readback for a freshly prepared recovery; never a write fence. */
+	recoveryReview: z.object({
+		previousSendId: journeyIdSchema,
+		revision: count$13,
+		currentAccess: z.enum([
+			"public",
+			"private",
+			"removed"
+		]).nullable(),
+		currentKeys: z.array(journeyDigestSchema),
+		proposedKeys: z.array(journeyDigestSchema)
+	}).strict().optional(),
+	/** Acknowledged membership revision and later scan identity; never a write-ahead intent. */
+	sessionAssembly: z.object({
+		revision: count$13,
+		scanId: journeyIdSchema.nullable()
+	}).strict().optional(),
 	status: z.enum([
 		"ready",
 		"target",
@@ -1582,6 +1622,8 @@ const sendItemSchema = z.object({
 	error: z.string().nullable()
 }).strict();
 const journeySendSchema = z.object({
+	/** Passport advertised parallel-completes when this Send was confirmed (ADR 0235). */
+	parallelCompletes: z.literal(true).optional(),
 	id: journeyIdSchema,
 	journeyId: journeyIdSchema,
 	revision: count$13,
@@ -1616,7 +1658,7 @@ const journeySendSchema = z.object({
 	error: z.string().nullable(),
 	/**
 	* When this Send replaced the owner's earlier Passport Works and how many it retired; a
-	* native Send is completed only after this is recorded (ADR 0204).
+	* historical marker is retained for compatibility only (superseded by ADR 0242).
 	*/
 	replaced: z.object({
 		at: z.iso.datetime(),
@@ -6993,6 +7035,7 @@ const manualUploadSchema = z.object({
 	subject: z.string().nullable(),
 	confirmedAt: z.iso.datetime().nullable(),
 	status: journeySendSchema.shape.status,
+	parallelCompletes: journeySendSchema.shape.parallelCompletes,
 	items: z.array(sendItemSchema),
 	/** The result slot holding each item's primary ZIP, keyed by the item's logical Work ID. */
 	slots: z.record(journeyIdSchema, count$2),

package/dist/{src-DIuh0LHk.mjs → src-D4nrfC2S.mjs}

@@ -1,6 +1,6 @@
-import { Bn as validatePlan, Cn as sessionNonce, Dn as entityDictionaryVersion, En as cleanupImplementationVersion, Fn as frameRecords, Gn as detectStatic, H as codePointLength, Hn as defaultLimits, Ht as ApplicationError, In as retainedMainTextNodes, Jn as jsonSpans, Jt as reviewFamilies, Ln as validateProfile, Mn as nativeItems, Nn as nativeText, On as nativeParserVersion, Pn as transformRecords, Qt as sourceSnapshotId, Sn as createReplacementKey, Tn as parseNativeRecord, Un as recordPointerLimits, V as bDigest, Wn as resolveLimits, Wt as safeCode, Xn as createEntityMatcher, Xt as sourceKey, Yn as agentContextLocation, an as withMandatoryCustomTerms, c as textDigest, cn as mainReviewRole, dn as renderNative, fn as createSessionPreparation, gn as createDetectionSummary, in as nativeSourceIdentitySchema, ir as isProcessingCode, j as bDuplicateShift, jn as nativeField, k as bBindingCap, kn as redactionImplementationVersion, ln as reviewRoles, nr as ProcessingError, o as reviewDigest, on as processNativeRecord, pn as bindInspection, qt as familySelected, rr as fail$1, sn as projectNativeReviewInput, tr as defaultDetectionLimits, un as createSentenceContext, vn as walkNativeFields, wn as projectNativeRecord, x as createBAnalysisUnits, zn as buildPlan } from "./locate-U3-nkird.mjs";
-import { t as createZstdFrameCheck } from "./frame-waS5FnN5.mjs";
-import { An as bContainment, Dt as metadataProcessingVersion, F as withSourceEvidence, I as agentSetupKey, Mr as agentSourceSchema, P as sourceIdentityEvidence, Pn as bWordBounded, ai as sourceChangePolicy, fi as staticCatalogRef, it as defaultAgentSetupInclusion, jn as bExceptionRanges, jr as agentSourcePathSegment, rt as classifyAgentSetup, si as approvedTreatmentSchema, ur as resolveSourceSelection } from "./src-DSDRF7i6.mjs";
+import { Bn as validatePlan, Cn as sessionNonce, Dn as entityDictionaryVersion, En as cleanupImplementationVersion, Fn as frameRecords, Gn as detectStatic, H as codePointLength, Hn as defaultLimits, Ht as ApplicationError, In as retainedMainTextNodes, Jn as jsonSpans, Jt as reviewFamilies, Ln as validateProfile, Mn as nativeItems, Nn as nativeText, On as nativeParserVersion, Pn as transformRecords, Qt as sourceSnapshotId, Sn as createReplacementKey, Tn as parseNativeRecord, Un as recordPointerLimits, V as bDigest, Wn as resolveLimits, Wt as safeCode, Xn as createEntityMatcher, Xt as sourceKey, Yn as agentContextLocation, an as withMandatoryCustomTerms, c as textDigest, cn as mainReviewRole, dn as renderNative, fn as createSessionPreparation, gn as createDetectionSummary, in as nativeSourceIdentitySchema, ir as isProcessingCode, j as bDuplicateShift, jn as nativeField, k as bBindingCap, kn as redactionImplementationVersion, ln as reviewRoles, nr as ProcessingError, o as reviewDigest, on as processNativeRecord, pn as bindInspection, qt as familySelected, rr as fail$1, sn as projectNativeReviewInput, tr as defaultDetectionLimits, un as createSentenceContext, vn as walkNativeFields, wn as projectNativeRecord, x as createBAnalysisUnits, zn as buildPlan } from "./locate-CBiw-CJK.mjs";
+import { t as createZstdFrameCheck } from "./frame-IeDOLy1o.mjs";
+import { An as bContainment, Dt as metadataProcessingVersion, F as withSourceEvidence, I as agentSetupKey, Mr as agentSourceSchema, P as sourceIdentityEvidence, Pn as bWordBounded, ai as sourceChangePolicy, fi as staticCatalogRef, it as defaultAgentSetupInclusion, jn as bExceptionRanges, jr as agentSourcePathSegment, rt as classifyAgentSetup, si as approvedTreatmentSchema, ur as resolveSourceSelection } from "./src-CBTvOa44.mjs";
 import { constants } from "node:fs";
 import { link, lstat, mkdir, open, readFile, readdir, realpath, rm, rmdir, stat, unlink } from "node:fs/promises";
 import { execFile, fork, spawn } from "node:child_process";
@@ -15,7 +15,7 @@ import { ERR_UNSUPPORTED_FORMAT, Reader, TextReader, ZipReader, ZipWriter, confi
 import "node:perf_hooks";
 import { availableParallelism, platform, tmpdir, totalmem } from "node:os";
 import { pipeline } from "node:stream/promises";
-import { constants as constants$1, createZstdDecompress } from "node:zlib";
+import { constants as constants$1, crc32, createZstdDecompress } from "node:zlib";
 import { parse } from "@decimalturn/toml-patch";
 //#region packages/file-privacy/src/windows/descriptor.ts
 const system = "S-1-5-18";
@@ -15416,6 +15416,166 @@ async function openConfiguredUpload(input, signal = new AbortController().signal
 	}
 }
 //#endregion
+//#region packages/artifact/src/configured/output/session-file.ts
+/** Unlinked private storage survives no crash and never exposes source paths. */
+async function sessionFile() {
+	const path = join(tmpdir(), `sess-pilot-send-${randomUUID()}.spool`);
+	const handle = await openPrivateFile(path, constants.O_CREAT | constants.O_EXCL | constants.O_RDWR | constants.O_NOFOLLOW, 384);
+	try {
+		await unlink(path);
+		return handle;
+	} catch (error) {
+		const cleanup = createCleanup();
+		cleanup.failed(error);
+		await cleanup.run(() => handle.close(), () => unlink(path));
+		throw error;
+	}
+}
+async function sessionFileFacts(file, size, signal) {
+	const digest = createHash("sha256");
+	let crc = 0;
+	const reader = new FileReader(file, size, 262144, true, signal);
+	for await (const bytes of reader.createReadable()) {
+		digest.update(bytes);
+		crc = crc32(bytes, crc);
+	}
+	return {
+		byteLength: size,
+		sha256: digest.digest("hex"),
+		crc32: crc
+	};
+}
+/** Verify bounded final redacted bytes before starting a second ZIP codec. */
+async function sessionPart(entry, expected, signal) {
+	if (expected.byteLength > 268435456 || entry.uncompressedSize !== expected.byteLength) fail("ARTIFACT_PART_LIMIT");
+	const file = await sessionFile();
+	let size = 0;
+	const digest = createHash("sha256");
+	let crc = 0;
+	try {
+		await entry.getData(new WritableStream({ async write(bytes) {
+			signal.throwIfAborted();
+			if (size + bytes.byteLength > expected.byteLength) fail("ARTIFACT_PART_LIMIT");
+			digest.update(bytes);
+			crc = crc32(bytes, crc);
+			let offset = 0;
+			while (offset < bytes.byteLength) {
+				const result = await file.write(bytes, offset, bytes.byteLength - offset, size + offset);
+				if (!result.bytesWritten) fail("ARTIFACT_IO_FAILED");
+				offset += result.bytesWritten;
+			}
+			size += bytes.byteLength;
+		} }), {
+			signal,
+			checkSignature: true
+		});
+		if (size !== expected.byteLength || digest.digest("hex") !== expected.sha256) fail("ARTIFACT_INVALID_ARCHIVE");
+		return {
+			file,
+			crc32: crc
+		};
+	} catch (error) {
+		const cleanup = createCleanup();
+		cleanup.failed(error);
+		await cleanup.run(() => file.close());
+		throw error;
+	}
+}
+//#endregion
+//#region packages/artifact/src/configured/output/sessions.ts
+/** Each yielded spool stays open until the caller advances or closes this iterator. */
+async function* configuredSessionUploads(input, identities, signal) {
+	const verified = await checkFrozenOutput(input, signal);
+	const archive = await openCheckedOutput(input, verified.checked, signal);
+	const cleanup = createCleanup();
+	try {
+		if (archive.manifestText !== verified.manifestText) fail("ARTIFACT_PROCESSING_MISMATCH");
+		const descriptions = new Map(verified.manifest.entries.map((entry) => [entry.entryPath, entry]));
+		for (const session of verified.manifest.sessions) {
+			signal.throwIfAborted();
+			const identity = identities.find((item) => item.archiveSessionId === session.id) ?? fail("ARTIFACT_IDENTITY_MISMATCH");
+			const workspace = verified.manifest.sourceWorkspaces.find((item) => item.id === session.workspaceId) ?? fail("ARTIFACT_INVALID_MANIFEST");
+			const entry = archive.entries.get(workspace.metadataPath) ?? fail("ARTIFACT_INVALID_ARCHIVE");
+			const description = descriptions.get(workspace.metadataPath) ?? fail("ARTIFACT_INVALID_ARCHIVE");
+			const text = await readMetadata(entry, signal);
+			if (Buffer.byteLength(text) !== description.byteLength || createHash("sha256").update(text).digest("hex") !== description.sha256) fail("ARTIFACT_INVALID_ARCHIVE");
+			const { version: _, ...facts } = validateConfiguredSourceMetadata(strictJson(text, metadataLimitBytes), workspace);
+			const nativeSessionId = session.parts[0]?.native.sessionId ?? session.sourceSessionId;
+			if (!nativeSessionId?.trim() && !identity.relativePath) fail("ARTIFACT_IDENTITY_MISMATCH");
+			const metadata = {
+				workspace: facts,
+				sourceSessionId: nativeSessionId,
+				harness: session.harness,
+				lastAt: identity.lastAt,
+				parts: []
+			};
+			const file = await sessionFile();
+			const sessionCleanup = createCleanup();
+			try {
+				let size = 0;
+				const sink = fileWriter(file, signal, (bytes) => {
+					if (bytes > 5 * 1024 ** 3) fail("ARTIFACT_ARCHIVE_LIMIT");
+					size = bytes;
+				}, false);
+				const zip = new ZipWriter(sink.writable, {
+					useWebWorkers: false,
+					useCompressionStream: true,
+					bufferedWrite: false,
+					dataDescriptor: true,
+					unixMode: 33152,
+					lastModDate: /* @__PURE__ */ new Date("1980-01-01T00:00:00.000Z"),
+					extendedTimestamp: false
+				});
+				for (const [index, part] of session.parts.entries()) {
+					const source = archive.entries.get(part.dataPath) ?? fail("ARTIFACT_INVALID_ARCHIVE");
+					const expected = descriptions.get(part.dataPath) ?? fail("ARTIFACT_INVALID_ARCHIVE");
+					const prepared = await sessionPart(source, expected, signal);
+					const partCleanup = createCleanup();
+					try {
+						const path = `p${String(index + 1).padStart(6, "0")}.jsonl`;
+						await zip.add(path, new FileReader(prepared.file, expected.byteLength, 262144, true, signal), { signal });
+						metadata.parts.push({
+							path,
+							byteLength: expected.byteLength,
+							sha256: expected.sha256,
+							crc32: prepared.crc32
+						});
+					} catch (error) {
+						partCleanup.failed(error);
+						throw error;
+					} finally {
+						await partCleanup.run(() => prepared.file.close());
+					}
+				}
+				await zip.close();
+				if (zip.warnings?.length) fail("ARTIFACT_INVALID_ARCHIVE");
+				if (size > 5 * 1024 ** 3) fail("ARTIFACT_ARCHIVE_LIMIT");
+				const content = await sessionFileFacts(file, size, signal);
+				await archive.fence();
+				yield {
+					...content,
+					metadata,
+					nativeSessionId,
+					relativePath: identity.relativePath,
+					harness: session.harness,
+					lastAt: identity.lastAt,
+					stream: () => new FileReader(file, size, 262144, true, signal).createReadable()
+				};
+			} catch (error) {
+				sessionCleanup.failed(error);
+				throw error;
+			} finally {
+				await sessionCleanup.run(() => file.close());
+			}
+		}
+	} catch (error) {
+		cleanup.failed(error);
+		throw error;
+	} finally {
+		await cleanup.run(() => archive.close());
+	}
+}
+//#endregion
 //#region packages/artifact/src/configured/output/shard/write.ts
 const zipOptions = {
 	useWebWorkers: false,
@@ -16811,4 +16971,4 @@ async function verifyPreparedSessionSources(prepared, input, signal) {
 	}
 }
 //#endregion
-export { safeError as $, runConfiguredSessionJob as A, writeLogicalJourneyOutput as B, readConfiguredSearchFields as C, captureLogicalJourneySources as D, prepareCollectionProduction as E, sessionWorkerFailure as F, staticMaskCategory as G, readLogicalJourneyFinalMasks as H, privateCollectionDirectory as I, createConfiguredPreviewStream as J, readWorkspacePair as K, defaultParallelism as L, parseCollectionWorkspaceSummary as M, createSharedSessionPool as N, capturedJourneyScope as O, SessionWorkerError as P, createCleanup as Q, gitSeedsProvider as R, readOriginalSearchFields as S, checkReusableBundle as T, readConfiguredOutputInfo as U, privateJourneyDirectory as V, processJourneyMetadataFields as W, createTemporary as X, createInspectionProcessor as Y, removeNamedTemporarySpools as Z, readStaticSessionMasks as _, scanReviewFields as a, isWindowsAclFailure as at, writePrivateReviewPayload as b, readSessionScanRecords as c, verifyOutputShard as d, exclusiveLock as et, writeOutputShard as f, processJourneyMetadata as g, readCapturedOriginalRows as h, buildWorkScanBatches as i, windowsOwnerOnly as it, readCollectionIndex as j, renderJobDigest as k, scanPreparedSession as l, captureConfiguredSessionJob as m, verifyPreparedSessionSources as n, openPrivateFile as nt, createWorkPieces as o, windowsAclCodes as ot, openConfiguredUpload as p, listAgentSetup as q, prepareSessionScans as r, restrictToOwner as rt, readSessionScanFields as s, preparedScanConfiguration as t, makePrivateDirectory as tt, runConfiguredScanJob as u, staticSessionJobs as v, createCollectionArtifacts as w, readPrivateReviewPayload as x, writeLogicalJourneyBase as y, parallelismLimits as z };
+export { createCleanup as $, renderJobDigest as A, parallelismLimits as B, readOriginalSearchFields as C, prepareCollectionProduction as D, checkReusableBundle as E, SessionWorkerError as F, processJourneyMetadataFields as G, privateJourneyDirectory as H, sessionWorkerFailure as I, listAgentSetup as J, staticMaskCategory as K, privateCollectionDirectory as L, readCollectionIndex as M, parseCollectionWorkspaceSummary as N, captureLogicalJourneySources as O, createSharedSessionPool as P, removeNamedTemporarySpools as Q, defaultParallelism as R, readPrivateReviewPayload as S, createCollectionArtifacts as T, readLogicalJourneyFinalMasks as U, writeLogicalJourneyOutput as V, readConfiguredOutputInfo as W, createInspectionProcessor as X, createConfiguredPreviewStream as Y, createTemporary as Z, processJourneyMetadata as _, scanReviewFields as a, windowsOwnerOnly as at, writeLogicalJourneyBase as b, readSessionScanRecords as c, verifyOutputShard as d, safeError as et, writeOutputShard as f, readCapturedOriginalRows as g, captureConfiguredSessionJob as h, buildWorkScanBatches as i, restrictToOwner as it, runConfiguredSessionJob as j, capturedJourneyScope as k, scanPreparedSession as l, openConfiguredUpload as m, verifyPreparedSessionSources as n, makePrivateDirectory as nt, createWorkPieces as o, isWindowsAclFailure as ot, configuredSessionUploads as p, readWorkspacePair as q, prepareSessionScans as r, openPrivateFile as rt, readSessionScanFields as s, windowsAclCodes as st, preparedScanConfiguration as t, exclusiveLock as tt, runConfiguredScanJob as u, readStaticSessionMasks as v, readConfiguredSearchFields as w, writePrivateReviewPayload as x, staticSessionJobs as y, gitSeedsProvider as z };

package/dist/store-database-worker.mjs

@@ -1,4 +1,4 @@
-import { i as createExecutor, t as assertStoreHeap } from "./heap-eZTo0VYj.mjs";
+import { i as createExecutor, t as assertStoreHeap } from "./heap-DiOlSa8T.mjs";
 import { parentPort } from "node:worker_threads";
 //#region packages/local-host/src/store/worker/entry.ts
 if (!parentPort) throw new Error("STORE_WORKER_REQUIRED");