@gitroll/tacitt-cli 0.6.0 → 0.6.2

package/dist/{query-Cm5lumS4.mjs → query-CQ6Tr5zC.mjs}

@@ -1,9 +1,9 @@
-import { $ as createCleanup, B as parallelismLimits, C as readOriginalSearchFields, E as checkReusableBundle, F as SessionWorkerError, G as processJourneyMetadataFields, H as privateJourneyDirectory, I as sessionWorkerFailure, K as staticMaskCategory, L as privateCollectionDirectory, M as readCollectionIndex, N as parseCollectionWorkspaceSummary, O as captureLogicalJourneySources, P as createSharedSessionPool, Q as removeNamedTemporarySpools, R as defaultParallelism, T as createCollectionArtifacts, U as readLogicalJourneyFinalMasks, W as readConfiguredOutputInfo, Z as createTemporary, _ as processJourneyMetadata, a as scanReviewFields, at as windowsOwnerOnly, c as readSessionScanRecords, g as readCapturedOriginalRows, i as buildWorkScanBatches, it as restrictToOwner, j as runConfiguredSessionJob, k as capturedJourneyScope, l as scanPreparedSession, m as openConfiguredUpload, n as verifyPreparedSessionSources, nt as makePrivateDirectory, o as createWorkPieces, ot as isWindowsAclFailure, p as configuredSessionUploads, q as readWorkspacePair, r as prepareSessionScans, rt as openPrivateFile, s as readSessionScanFields, st as windowsAclCodes, t as preparedScanConfiguration, v as readStaticSessionMasks, w as readConfiguredSearchFields, y as staticSessionJobs, z as gitSeedsProvider } from "./src-BMSLVcgs.mjs";
+import { $ as createCleanup, B as parallelismLimits, C as readOriginalSearchFields, E as checkReusableBundle, F as SessionWorkerError, G as processJourneyMetadataFields, H as privateJourneyDirectory, I as sessionWorkerFailure, K as staticMaskCategory, L as privateCollectionDirectory, M as readCollectionIndex, N as parseCollectionWorkspaceSummary, O as captureLogicalJourneySources, P as createSharedSessionPool, Q as removeNamedTemporarySpools, R as defaultParallelism, T as createCollectionArtifacts, U as readLogicalJourneyFinalMasks, W as readConfiguredOutputInfo, Z as createTemporary, _ as processJourneyMetadata, a as scanReviewFields, at as windowsOwnerOnly, c as readSessionScanRecords, g as readCapturedOriginalRows, i as buildWorkScanBatches, it as restrictToOwner, j as runConfiguredSessionJob, k as capturedJourneyScope, l as scanPreparedSession, m as openConfiguredUpload, n as verifyPreparedSessionSources, nt as makePrivateDirectory, o as createWorkPieces, ot as isWindowsAclFailure, p as configuredSessionUploads, q as readWorkspacePair, r as prepareSessionScans, rt as openPrivateFile, s as readSessionScanFields, st as windowsAclCodes, t as preparedScanConfiguration, v as readStaticSessionMasks, w as readConfiguredSearchFields, y as staticSessionJobs, z as gitSeedsProvider } from "./src-JoT3L94j.mjs";
 import { $t as safeField, Bt as sessionPeriodSchema, Dn as createStaticProcessor, F as bClassificationKey, Fn as entityDictionaryVersion, Ft as termTypeInfo, Gt as ownerProfileSchema, H as codePointLength, Ht as journeyProfileAddressActionSchema, K as utf16Offset, Kt as passportAddressSchema, N as bUnitFragments, Ot as privacyTermKey, Qt as safeCode, Sn as currentDetectorVersion, T as bLiteralTerms, Un as frameRecords, Ut as journeyProfileLinksActionSchema, V as bDigest, Wt as mergeOwnerProfile, Xt as ApplicationError, Zt as UnfinishedJourneyError, an as observeSource, ar as admitCustomTerm, b as validateBReview, c as textDigest, h as reviewFindingsDigest, ht as journeyDescribeSchema, ir as createEntityMatcher, jt as reviewTermsInputSchema, l as validateReview, n as compileBFindings, nn as reviewFamilies, or as admitGitName, qt as profileHasChoices, r as reviewBatchChunks, s as reviewSubmitSchema, t as locateTerms, tn as familySelected, z as bAnchorKey, zt as filterInventoryByPeriod } from "./locate-JYtFmKu-.mjs";
 import { a as mainTextChunks, c as previewInWorker, i as nearestSortingRepository, l as createNativeAdapters, n as createProjectEvidenceCollector, o as mainTextFields, r as sortingRepositoryId, s as textChunks, t as createHarnesses, u as createGitNameSeedProvider } from "./src-CGFwLUd6.mjs";
 import { $ as settingsQuerySchema, $r as journeyRenderSchema, A as deviceProfileScopeSchema, B as validateInspectionBatch, Bn as journeyConfirmedHides, Br as hasCompleteWorkDescription, Bt as newJourneyWork, C as rebindReviewSubmit, Cr as privacyDecisionDigest, Ct as sendStartSchema, D as createAccount, Dr as hasCurrentStaticReview, E as staticallyHiddenFindings, Er as nativeRespondSchema, Et as obsoleteJourney, Fn as confirmedHideGroupIds, Fr as sendArtifactSchema, Hr as isIncludedWork, Ht as journeyContextQuerySchema, Ir as sendReceiptSchema, Jn as reviewCandidateResourceSchema, Kn as workCorrectionBinding, L as createApplication, Ln as confirmedHideKinds, Lr as sendReplaceResultSchema, Lt as classificationPartition, M as readAccountAvatarUrl, Mr as agentSourceSchema, Mt as applyClassification, N as storedCredentialSchema, Nn as bTermMatcher, Nr as agentSourcesSchema, O as accountProfileSchema, Or as staticReviewDigest, Pr as journeySendSchema, Pt as journeyReviewStorageQuerySchema, Q as settingsBatchSchema, Qn as bReviewDigest, Qr as journeyRenderInputSchema, Qt as journeyResourceQuerySchema, R as inspectionCancelSchema, Rr as sendResolutionSchema, Rt as classificationWorks, S as rebindReviewOverlay, Sn as readConfirmedHideChange, Sr as assertJourneyPrivacyReady, St as sendPrepareSchema, T as guardedFindingText, Tn as termHideAdditions, Tr as nativeGetSchema, Tt as currentJourneyAdapters, U as inspectionQuerySchema, Un as retireWorkDescription, Ur as isReadingComplete, Vn as maskedHitsStale, Vr as isClassifying, Vt as reviewCompileSchema, Wn as workDecisionDigest, Wr as isSelectedWork, Xn as reviewRepairResourceSchema, Xr as journeyFindingsSchema, Xt as journeyPolicyRespondSchema, Yn as reviewRepairInputSchema, Yr as journeyFindingImpactSchema, Yt as searchScopeDigest, Zr as journeyPreviewSchema, _t as maximumTermsFileBytes, a as bCrossSegmentReviewSchema, ai as producerVersion, ar as scanGitSeedsId, b as bReviewScope, bn as confirmedHideAdditions, br as journeyClassificationSessionsSchema, bt as sendActionSchema, c as reconstructBFields, ci as recommendParallelism, cr as scanExclusionResourceSchema, ct as validateFailureLocation, d as selectedValueMembers, dn as sessionReviewInputSchema, dr as journeyInventoryQuerySchema, dt as manualUploadChoiceSchema, ei as commandSchema, er as planBRepair, et as readWorkspaceOutcomes, f as splitSelectorValues, fn as sessionReviewQuerySchema, ft as manualUploadPrepareSchema, g as changeJourney, gt as emptyTermsRevision, hn as sessionUsefulnessInputSchema, hr as emptyPreparationFacts, i as validateBCrossSegmentReview, ir as scanSessionResourceSchema, j as profileUrlMatchesIdentity, k as deviceAuthorizationSchema, ln as sessionRereadInputSchema, lt as manualUploadActionSchema, m as hideScopeDigest, mt as manualUploadStartSchema, n as scanBatchEquivalenceDigest, ni as selectionBatchSchema, nt as appendSensitiveTerms, o as bRereadDigest, oi as stateSchema, on as sessionReconcileInputSchema, or as scanGitSeedsResource, ot as artifactFailureDetailSchema, p as activeJourneyTerms, pt as manualUploadSchema, qn as reviewCandidateInputSchema, qr as withReadingProgress, qt as journeySearchResultSchema, r as locateTermEvidence, ri as selectionSchema, rn as reviewAttemptResourceSchema, rr as scanPreparationDigest, s as reconcileBSession, sr as verifiedScanGitSeeds, st as resolveFailureLocation, t as scanBatchContextDigest, ti as packageCommandSchema, tn as journeyPlaceSchema, vt as normalizeSensitiveTerms, w as reviewBatchReuse, wr as nativeEventsSchema, x as rebindReviewAlignment, xt as sendChoiceSchema, y as isGenericPublicTerm, yt as replaceSensitiveTermsSchema, z as inspectionStartSchema, zr as sendSettingsSchema, zt as retireScanGeneration } from "./src--Ln5GHdz.mjs";
-import { $ as checkVersion, A as resourceSelectionQuerySchema, B as termReuseQuerySchema, C as loadAcceptedReview, D as aggregateUsefulness, E as loadPrivateResource, F as validateUnitCandidate, G as requireActiveBatch, H as batchHeader, I as reuseQuerySchema, J as validateDatabase, K as initializeAndClaim, L as batchQuery, M as evaluateUnitEvidence, N as sameCandidateRequest, O as sessionUsefulnessRecommendation, P as validateCandidateAttempt, Q as validateState, R as isPrivateResourceKind, S as validateSessionBindings, T as loadBatch, U as createJourneyPayloadFiles, V as privateReviewHash, W as validateBatchBody, X as readBundleDirectory, Y as withDatabase, Z as readStoredState, _ as loadReconciliation, _t as isCoordinationBusy, a as decodeError, at as hasResetMarker, b as validatePreparationSelection, c as dropsAnchor, ct as privatePath, d as parseDelivery, dt as stateDirectory, et as schemaVersion, f as validateCandidate, ft as syncDirectory, g as loadPreparedBodies, gt as errorCode$1, h as loadPreparation, ht as StoreError, i as createExecutor, it as finishReset, j as inspectionQuerySchema$1, k as sessionQuery, l as replySchema, lt as readResetMarker, m as loadStatus, mt as withFileCheckTimings, n as releaseInheritedHeapFlags, nt as createDatabaseFile, o as ProtocolError, ot as inspectStateFiles, p as classificationJourneyCommit, pt as withStateSnapshot, q as ownership, r as storeHeapLimits, rt as databaseName, s as allowedReplies, st as present, tt as beginReset, u as operations, ut as recheckPrivatePath, v as loadRereadBodies, vt as isSqliteCorruption, w as loadAuthenticatedReview, x as validateSessionReconciliation, y as loadSessionBodies, z as privateResourceHeader } from "./heap-DY5n4EVC.mjs";
-import { C as journeyDirectory, S as saveRemoteState, _ as staticBaseProduction, a as writeJourneyOutput, b as isRemoteImport, c as mergeHideIndexTokens, f as writeJourneyBase, g as staticBaseInputs, h as staticSessions, l as packRenderHideIndex, m as saveStaticSession, o as createHideIndexTokens, p as readStaticResult, s as hideIndexTexts, t as journeyOutputJob, u as journeyBaseJob, v as prepareSourcePlan, w as collectRemoteWorkers, x as readRemoteState, y as workApproval } from "./job-BxUVFocm.mjs";
+import { $ as checkVersion, A as resourceSelectionQuerySchema, B as termReuseQuerySchema, C as loadAcceptedReview, D as aggregateUsefulness, E as loadPrivateResource, F as validateUnitCandidate, G as requireActiveBatch, H as batchHeader, I as reuseQuerySchema, J as validateDatabase, K as initializeAndClaim, L as batchQuery, M as evaluateUnitEvidence, N as sameCandidateRequest, O as sessionUsefulnessRecommendation, P as validateCandidateAttempt, Q as validateState, R as isPrivateResourceKind, S as validateSessionBindings, T as loadBatch, U as createJourneyPayloadFiles, V as privateReviewHash, W as validateBatchBody, X as readBundleDirectory, Y as withDatabase, Z as readStoredState, _ as loadReconciliation, _t as isCoordinationBusy, a as decodeError, at as hasResetMarker, b as validatePreparationSelection, c as dropsAnchor, ct as privatePath, d as parseDelivery, dt as stateDirectory, et as schemaVersion, f as validateCandidate, ft as syncDirectory, g as loadPreparedBodies, gt as errorCode$1, h as loadPreparation, ht as StoreError, i as createExecutor, it as finishReset, j as inspectionQuerySchema$1, k as sessionQuery, l as replySchema, lt as readResetMarker, m as loadStatus, mt as withFileCheckTimings, n as releaseInheritedHeapFlags, nt as createDatabaseFile, o as ProtocolError, ot as inspectStateFiles, p as classificationJourneyCommit, pt as withStateSnapshot, q as ownership, r as storeHeapLimits, rt as databaseName, s as allowedReplies, st as present, tt as beginReset, u as operations, ut as recheckPrivatePath, v as loadRereadBodies, vt as isSqliteCorruption, w as loadAuthenticatedReview, x as validateSessionReconciliation, y as loadSessionBodies, z as privateResourceHeader } from "./heap-BR8WjR25.mjs";
+import { C as journeyDirectory, S as saveRemoteState, _ as staticBaseProduction, a as writeJourneyOutput, b as isRemoteImport, c as mergeHideIndexTokens, f as writeJourneyBase, g as staticBaseInputs, h as staticSessions, l as packRenderHideIndex, m as saveStaticSession, o as createHideIndexTokens, p as readStaticResult, s as hideIndexTexts, t as journeyOutputJob, u as journeyBaseJob, v as prepareSourcePlan, w as collectRemoteWorkers, x as readRemoteState, y as workApproval } from "./job-CYsjL4AT.mjs";
 import { t as createAgentSetupPort } from "./agent-setup-Dv_mQ38P.mjs";
 import { t as workerMessageSchema } from "./messages-D3m3bhva.mjs";
 import { constants, write } from "node:fs";
@@ -13,7 +13,8 @@ import { execFile, spawn } from "node:child_process";
 import { basename, dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
 import { createInterface } from "node:readline";
 import { Writable } from "node:stream";
-import { parseArgs, promisify, types } from "node:util";
+import { isDeepStrictEqual, parseArgs, promisify, types } from "node:util";
+import { pathToFileURL } from "node:url";
 import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { fastify } from "fastify";
@@ -1231,7 +1232,7 @@ function closeConnection(root, db, onFatal, primary) {
 //#region packages/local-host/src/coordination/files.ts
 const coordinationApplicationId = 1397769036;
 function invalid() {
-	throw new StoreError("STATE_LAYOUT_INVALID", "Coordination files are incomplete or changed. Stop all SessPilot instances and use a fresh private --state-dir. Reset does not replace coordination files.");
+	throw new StoreError("STATE_LAYOUT_INVALID", "Coordination files are incomplete or changed. Close every running Tacitt CLI and use a fresh private --state-dir. Reset does not replace coordination files.");
 }
 function initialize(root, path, onFatal) {
 	const db = new DatabaseSync(path, { timeout: 0 });
@@ -1348,7 +1349,7 @@ async function tryAcquireCoordination(stateDir, domain, onFatal, onPhase) {
 		observe("coordination.begin");
 		db.exec("BEGIN IMMEDIATE");
 		observe("coordination.header");
-		if (db.prepare("PRAGMA application_id").get()?.["application_id"] !== 1397769036 || db.prepare("PRAGMA journal_mode").get()?.["journal_mode"] !== "delete" || db.prepare("SELECT name FROM sqlite_schema").all().length !== 0) throw new StoreError("STATE_LAYOUT_INVALID", "The coordination database is not a recognized header-only file. Stop all SessPilot instances and use a fresh private --state-dir.");
+		if (db.prepare("PRAGMA application_id").get()?.["application_id"] !== 1397769036 || db.prepare("PRAGMA journal_mode").get()?.["journal_mode"] !== "delete" || db.prepare("SELECT name FROM sqlite_schema").all().length !== 0) throw new StoreError("STATE_LAYOUT_INVALID", "The coordination database is not a recognized header-only file. Close every running Tacitt CLI and use a fresh private --state-dir.");
 	} catch (error) {
 		observe("coordination.close");
 		closeConnection(file.root, db, onFatal, { error });
@@ -5440,8 +5441,8 @@ const longCommands = /* @__PURE__ */ new Set([
 //#endregion
 //#region apps/cli/src/account/defaults.ts
 /**
-* Where the shipped CLI signs in. `--identity-url`, `--identity-client-id`, `--passport-api-url`
-* and the matching `SESS_PILOT_*` variables override these for development targets.
+* Where the shipped CLI signs in. `--identity-url`, `--identity-client-id`, `--profile-api-url`
+* (or the older `--passport-api-url`) and the matching `SESS_PILOT_*` variables override these for development targets.
 *
 * The client ID is the public value Identity issues when the `sess-pilot` App declaration is
 * applied to the production target (`APP_SESS_PILOT_OIDC_CLI_CLIENT_ID`). Release builds inject
@@ -5512,6 +5513,7 @@ function parseOptions(args, source = sourceCheckout) {
 					until: { type: "string" },
 					"identity-url": { type: "string" },
 					"identity-client-id": { type: "string" },
+					"profile-api-url": { type: "string" },
 					"passport-api-url": { type: "string" },
 					help: {
 						type: "boolean",
@@ -5571,7 +5573,7 @@ function parseOptions(args, source = sourceCheckout) {
 		sessionPeriod: period.data,
 		identityUrl: readOrigin(parsed.values["identity-url"] ?? process.env["SESS_PILOT_IDENTITY_URL"] ?? accountDefaults.identityUrl),
 		identityClientId: identityClientId === "" ? null : identityClientId,
-		passportApiUrl: readOrigin(parsed.values["passport-api-url"] ?? process.env["SESS_PILOT_PASSPORT_API_URL"] ?? accountDefaults.passportApiUrl),
+		passportApiUrl: readOrigin(parsed.values["profile-api-url"] ?? parsed.values["passport-api-url"] ?? process.env["SESS_PILOT_PROFILE_API_URL"] ?? process.env["SESS_PILOT_PASSPORT_API_URL"] ?? accountDefaults.passportApiUrl),
 		stateDir: resolve(parsed.values["state-dir"] ?? defaultState),
 		bundleDir: parsed.values["bundle-dir"] === void 0 ? void 0 : resolve(parsed.values["bundle-dir"]),
 		claudeHome: resolve(parsed.values["claude-home"] ?? process.env["CLAUDE_CONFIG_DIR"] ?? join(home, ".claude")),
@@ -5607,11 +5609,11 @@ Configured previews use current cleanup/redaction settings, including metadata.
 Original-mode previews use a separate basic guard; sampling never limits export.
 Workspace ZIPs and collection indexes use the saved bundle library directory.
 --bundle-dir overrides that location for this CLI run only.
-Native Skill Send uploads only the confirmed primary artifacts to the configured Passport API.
+Native Skill Send uploads only the confirmed primary artifacts to the configured Tacitt profile API.
 status prints safe workspace outcomes from the latest saved packaging operation.
 Private packaging error details stay in <state-dir>/diagnostics/ (up to 4 MiB).
 Sign in from the Web UI to link this tool to your GitRoll Identity account; the CLI contacts
-only the Identity and Skill Passport origins below, only when you ask, and keeps the issued
+only the Identity and profile API origins below, only when you ask, and keeps the issued
 token in <state-dir>/account/ (owner-only).
 
 Options:
@@ -5632,7 +5634,7 @@ Options:
                             (DATE: YYYY-MM-DD local day, inclusive, or an ISO timestamp)
   --identity-url URL        Identity origin for sign-in (default: ${accountDefaults.identityUrl})
   --identity-client-id ID   Public device client ID registered for this tool
-  --passport-api-url URL    Skill Passport API origin the token is checked against
+  --profile-api-url URL     Profile API origin the token is checked against
   --output PATH             Write a sensitive state dump to a new private file
   --dev                     Serve the repository UI through Vite (source checkout only)
   --help                    Show this help
@@ -10274,6 +10276,27 @@ async function* sessionArtifacts(storage, find, journeyId, artifact, signal) {
 		}
 	};
 }
+/** Own one live upload iterator; advancing it releases the preceding session ZIP. */
+async function prepareSessionArtifacts(storage, find, journeyId, artifact, signal) {
+	const source = sessionArtifacts(storage, find, journeyId, artifact, signal);
+	let closed = false;
+	async function* iterate() {
+		try {
+			yield* source;
+		} finally {
+			closed = true;
+		}
+	}
+	const items = iterate();
+	return {
+		items,
+		async close() {
+			if (closed) return;
+			closed = true;
+			await items.return(void 0);
+		}
+	};
+}
 //#endregion
 //#region apps/cli/src/journey/send-artifacts.ts
 function createJourneySendArtifacts(storage) {
@@ -10292,6 +10315,7 @@ function createJourneySendArtifacts(storage) {
 		return output;
 	}
 	return {
+		prepareSessions: (journeyId, artifact, signal) => prepareSessionArtifacts(storage, find, journeyId, artifact, signal),
 		sessions: (journeyId, artifact, signal) => sessionArtifacts(storage, find, journeyId, artifact, signal),
 		async describe(journey, work, signal) {
 			const output = await find(journey.journeyId, work.id, work.revision);
@@ -10376,6 +10400,74 @@ async function putPrimary(primary, byteLength, upload, signal) {
 	}
 }
 //#endregion
+//#region apps/cli/src/account/journey/session-preparation.ts
+/** Phase-local facts retain no bytes; only upload steps acquire live iterators. */
+function createSessionPreparation(dependencies) {
+	const prepare = dependencies.artifacts.prepareSessions;
+	const prepared = [];
+	const facts = /* @__PURE__ */ new Map();
+	const sessions = async function* (journeyId, artifact, signal) {
+		if (!prepare) {
+			const original = dependencies.artifacts.sessions;
+			if (original) yield* original(journeyId, artifact, signal);
+			return;
+		}
+		const result = await prepare(journeyId, artifact, signal);
+		prepared.push(result);
+		for await (const item of result.items) {
+			signal.throwIfAborted();
+			yield item;
+		}
+	};
+	const sessionFacts = async function* (journeyId, artifact, signal) {
+		const key = JSON.stringify([
+			journeyId,
+			artifact.workId,
+			artifact.revision,
+			artifact.sha256
+		]);
+		let pending = facts.get(key);
+		if (!pending) {
+			pending = (async () => {
+				const original = dependencies.artifacts.sessionFacts ?? dependencies.artifacts.sessions;
+				const items = [];
+				if (original) for await (const item of original(journeyId, artifact, signal)) {
+					const { nativeSessionId, relativePath, harness, lastAt, metadata, sha256, byteLength, crc32 } = item;
+					items.push({
+						nativeSessionId,
+						relativePath,
+						harness,
+						lastAt,
+						metadata,
+						sha256,
+						byteLength,
+						crc32
+					});
+				}
+				return items;
+			})();
+			facts.set(key, pending);
+		}
+		for (const item of await pending) {
+			signal.throwIfAborted();
+			yield item;
+		}
+	};
+	return {
+		dependencies: {
+			...dependencies,
+			artifacts: {
+				...dependencies.artifacts,
+				sessions,
+				sessionFacts
+			}
+		},
+		async close() {
+			await createCleanup().run(...prepared.map((result) => () => result.close()));
+		}
+	};
+}
+//#endregion
 //#region apps/cli/src/account/journey/session-key.ts
 /** Engine native identity, or harness-root-relative path identity when native identity is absent. */
 async function sessionKeyFor(input) {
@@ -10394,12 +10486,25 @@ async function sessionKeyFor(input) {
 //#region apps/cli/src/account/journey/session-access.ts
 /** Check the entire pending Send before admitting any session mutation. */
 async function sessionAccessBlocked(dependencies, journeyId, items, inventory, signal) {
-	const sessions = dependencies.artifacts.sessions;
+	const sessions = dependencies.artifacts.sessionFacts ?? dependencies.artifacts.sessions;
 	if (!sessions) return false;
 	const requestedAccess = /* @__PURE__ */ new Map();
 	const requestedDigests = /* @__PURE__ */ new Map();
 	for (const item of items) {
-		if (item.sessionAssembly || item.status === "completed") continue;
+		if (item.status === "blocked" || item.sessionAssembly || !item.sessionMembership) continue;
+		const destination = inventory.works.find((work) => work.logicalWorkId === item.workId);
+		if (destination?.access === "removed") throw new ApplicationError("WORK_REMOVED");
+		for (const key of item.sessionMembership.keys) {
+			const access = requestedAccess.get(key);
+			if (access !== void 0 && access !== item.access) return true;
+			requestedAccess.set(key, item.access);
+			const source = inventory.works.find((work) => work.sessions.some((entry) => entry.key === key));
+			if (source && source.logicalWorkId !== item.workId && source.access !== item.access) return true;
+			if (destination && destination.access !== item.access && !destination.sessions.some((entry) => entry.key === key)) return true;
+		}
+	}
+	for (const item of items) {
+		if (item.sessionAssembly || item.sessionMembership || ["completed", "blocked"].includes(item.status)) continue;
 		const destination = inventory.works.find((work) => work.logicalWorkId === item.workId);
 		if (destination?.access === "removed") throw new ApplicationError("WORK_REMOVED");
 		for await (const session of sessions(journeyId, item.artifact, signal)) {
@@ -10419,14 +10524,14 @@ async function sessionAccessBlocked(dependencies, journeyId, items, inventory, s
 }
 /** Keep overlapping session ownership serial through membership, including retained members. */
 async function sessionIndependentItems(dependencies, journeyId, items, inventory, signal) {
-	const sessions = dependencies.artifacts.sessions;
+	const sessions = dependencies.artifacts.sessionFacts ?? dependencies.artifacts.sessions;
 	if (!sessions) return [];
 	const pending = items.filter((item) => item.status === "uploading" || item.status === "ready").toSorted((left, right) => Number(right.status === "uploading") - Number(left.status === "uploading") || right.artifact.byteLength - left.artifact.byteLength);
 	const claimed = /* @__PURE__ */ new Set();
 	const independent = [];
 	for (const item of pending) {
 		const keys = /* @__PURE__ */ new Set([...inventory.works.find((work) => work.logicalWorkId === item.workId)?.sessions.map((session) => session.key) ?? [], ...item.sessionMembership?.keys ?? []]);
-		for await (const session of sessions(journeyId, item.artifact, signal)) keys.add(await sessionKeyFor(session));
+		if (!item.sessionMembership && !item.sessionAssembly) for await (const session of sessions(journeyId, item.artifact, signal)) keys.add(await sessionKeyFor(session));
 		if (![...keys].some((key) => claimed.has(key))) independent.push(item);
 		for (const key of keys) claimed.add(key);
 	}
@@ -11187,7 +11292,7 @@ function renewed(item, error) {
 //#endregion
 //#region apps/cli/src/account/journey/session-step.ts
 /** Reconcile against completed server facts on every retry, including after process loss. */
-async function stepSessionWork(dependencies, journeyId, context, item, connection, signal) {
+async function stepSessionWork(dependencies, journeyId, context, item, connection, signal, checkpoint) {
 	const remote = connection.sessions;
 	const sessions = dependencies.artifacts.sessions;
 	if (!remote || !sessions) throw new ApplicationError("INVALID_STATE");
@@ -11266,7 +11371,6 @@ async function stepSessionWork(dependencies, journeyId, context, item, connectio
 			throw error;
 		}
 	}
-	const assembly = await remote.assembly(item.workId, signal);
 	const inventory = await remote.inventory(signal);
 	const stored = new Map([...inventory.unassigned, ...inventory.works.flatMap((work) => work.sessions)].map((session) => [session.key, session]));
 	const keys = [];
@@ -11282,13 +11386,17 @@ async function stepSessionWork(dependencies, journeyId, context, item, connectio
 			lastAt: session.lastAt,
 			harness: session.harness
 		};
-		if (item.sessionUpload?.key !== key || item.sessionUpload.sha256 !== session.sha256) return {
-			...item,
-			sessionUpload: {
-				key,
-				sha256: session.sha256
-			}
-		};
+		if (item.sessionUpload?.key !== key || item.sessionUpload.sha256 !== session.sha256) {
+			await guard();
+			item = {
+				...item,
+				sessionUpload: {
+					key,
+					sha256: session.sha256
+				}
+			};
+			await checkpoint(item);
+		}
 		await guard();
 		try {
 			await remote.complete({
@@ -11310,13 +11418,14 @@ async function stepSessionWork(dependencies, journeyId, context, item, connectio
 			}
 		}
 		await guard();
-		return {
+		item = {
 			...item,
 			sessionUpload: null
 		};
 	}
 	await guard();
-	const current = inventory.works.find((work) => work.logicalWorkId === item.workId);
+	const assembly = await remote.assembly(item.workId, signal);
+	const current = (await remote.inventory(signal)).works.find((work) => work.logicalWorkId === item.workId);
 	if (current && current.access !== item.access) {
 		const resolution = await connection.resolve(resolveInput(item, context.bindingId), signal);
 		const [candidate] = resolution.candidates;
@@ -11557,9 +11666,12 @@ async function captureProfile(connection, guard, signal, failure) {
 //#region apps/cli/src/account/journey/advance.ts
 /** A Work Passport is done with: assessed, or stopped unless Resume retries it. */
 const settled = (item) => ["completed", "blocked"].includes(item.status);
+/** Stored state equality: key order and explicit undefined fields do not count. */
+const sameJson = (left, right) => isDeepStrictEqual(JSON.parse(JSON.stringify(left)), JSON.parse(JSON.stringify(right)));
 /** The stored Send still holds exactly this Work state, whatever else changed meanwhile. */
 function sameItem(items, item) {
-	return JSON.stringify(items.find((value) => value.workId === item.workId)) === JSON.stringify(item);
+	const current = items.find((value) => value.workId === item.workId);
+	return current !== void 0 && sameJson(current, item);
 }
 /** Shared sign-in, account and per-item rules for native Send and Manual upload. */
 async function advanceItems(host, signal) {
@@ -11678,7 +11790,7 @@ async function advanceItems(host, signal) {
 			status: "sign-in",
 			error: null
 		});
-		if (JSON.stringify(items) === JSON.stringify(send.items) && send.error === error) return host.applied();
+		if (sameJson(items, send.items) && send.error === error) return host.applied();
 		return host.save(aggregate({
 			...send,
 			error,
@@ -11736,7 +11848,7 @@ function completeAtUpload(send, sessions) {
 	};
 }
 async function advanceSend(dependencies, address, signal, chain) {
-	const snapshot = requireSend(await dependencies.storage.loadSend(address.journeyId, address.sendId));
+	let snapshot = requireSend(await dependencies.storage.loadSend(address.journeyId, address.sendId));
 	if (chain) chain.revision = snapshot.send.revision;
 	if ((await dependencies.storage.loadSend(address.journeyId))?.send?.id !== snapshot.send.id) return {
 		...snapshot,
@@ -11747,13 +11859,36 @@ async function advanceSend(dependencies, address, signal, chain) {
 		...snapshot,
 		status: "applied"
 	};
-	const save = (next) => !completed ? saveSend(dependencies, snapshot, completeAtUpload(next, usesSessionSend(dependencies, next))) : JSON.stringify(next.items) === JSON.stringify(snapshot.send.items) ? Promise.resolve({
-		...snapshot,
-		status: "applied"
-	}) : saveSend(dependencies, snapshot, {
-		...snapshot.send,
-		items: next.items
-	});
+	const checkpoints = /* @__PURE__ */ new Map();
+	const fulfilled = /* @__PURE__ */ new Set();
+	let saving = Promise.resolve();
+	async function active(item) {
+		const current = requireSend(await dependencies.storage.loadSend(address.journeyId));
+		if (current.send.id !== snapshot.send.id || !sameItem(current.send.items, checkpoints.get(item.workId) ?? item) || current.send.status === "paused" || current.journey.phase === "paused") throw new ApplicationError("REVISION_CONFLICT");
+		assertScope(current.journey, current.send);
+		return current;
+	}
+	const save = (proposed) => {
+		const next = {
+			...proposed,
+			items: proposed.items.map((item) => {
+				const checkpoint = checkpoints.get(item.workId);
+				return checkpoint && !fulfilled.has(item.workId) ? {
+					...checkpoint,
+					...item,
+					sessionUpload: checkpoint.sessionUpload
+				} : item;
+			})
+		};
+		return !completed ? saveSend(dependencies, snapshot, completeAtUpload(next, usesSessionSend(dependencies, next))) : sameJson(next.items, snapshot.send.items) ? Promise.resolve({
+			...snapshot,
+			status: "applied"
+		}) : saveSend(dependencies, snapshot, {
+			...snapshot.send,
+			items: next.items
+		});
+	};
+	const send = withoutQuestions(snapshot.send);
 	try {
 		assertScope(snapshot.journey, snapshot.send);
 	} catch (error) {
@@ -11775,67 +11910,94 @@ async function advanceSend(dependencies, address, signal, chain) {
 		...snapshot,
 		status: "applied"
 	};
-	const send = withoutQuestions(snapshot.send);
 	if (send !== snapshot.send) return save(send);
 	let independentItems = [];
-	return advanceItems({
-		send,
-		failure: dependencies.failure,
-		...usesSessionSend(dependencies, send) ? {
-			batch: () => {
-				const limit = send.parallelCompletes ? 3 : 1;
-				return independentItems.length ? pickBatch(independentItems, Date.now(), limit) : pickBatch(send.items, Date.now(), limit);
-			},
-			preflight: async (connection, preflightSignal) => {
-				if (!connection.sessions) throw new ApplicationError("INVALID_STATE");
-				const inventory = await connection.sessions.inventory(preflightSignal);
-				if (!await sessionAccessBlocked(dependencies, snapshot.journey.journeyId, send.items, inventory, preflightSignal)) {
-					independentItems = await sessionIndependentItems(dependencies, snapshot.journey.journeyId, send.items, inventory, preflightSignal);
-					return null;
-				}
-				await connection.assertCurrent(preflightSignal);
-				return save({
-					...send,
-					status: "blocked",
-					items: send.items.map((item) => item.sessionAssembly || item.status === "completed" ? item : {
-						...item,
+	const preparation = createSessionPreparation(dependencies);
+	const cleanup = createCleanup();
+	try {
+		return await advanceItems({
+			send,
+			failure: dependencies.failure,
+			...usesSessionSend(dependencies, send) ? {
+				batch: () => {
+					const limit = send.parallelCompletes ? 3 : 1;
+					return independentItems.length ? pickBatch(independentItems, Date.now(), limit) : pickBatch(send.items, Date.now(), limit);
+				},
+				preflight: async (connection, preflightSignal) => {
+					if (!connection.sessions) throw new ApplicationError("INVALID_STATE");
+					if (!send.items.some((item) => item.status === "uploading" && !item.sessionAssembly && !item.receipt && !item.reservation)) return null;
+					const inventory = await connection.sessions.inventory(preflightSignal);
+					if (!await sessionAccessBlocked(preparation.dependencies, snapshot.journey.journeyId, send.items, inventory, preflightSignal)) {
+						independentItems = await sessionIndependentItems(preparation.dependencies, snapshot.journey.journeyId, send.items, inventory, preflightSignal);
+						return null;
+					}
+					await connection.assertCurrent(preflightSignal);
+					return save({
+						...send,
 						status: "blocked",
-						error: "SESSION_MOVE_ACCESS_REQUIRED"
-					})
-				});
-			},
-			step: (context, item, connection, stepSignal) => stepSessionWork(dependencies, snapshot.journey.journeyId, context, item, connection, stepSignal)
-		} : {},
-		connect: chain?.connect ?? dependencies.auth.connect,
-		profile: (connection, profileSignal) => prepareProfile(dependencies, snapshot, connection, profileSignal),
-		context: (item) => {
-			const binding = snapshot.journey.works.find((value) => value.id === item.workId)?.binding;
-			return {
-				snapshot: true,
-				...chain ? { fresh: chain.fresh } : {},
-				active: async () => {
-					const current = requireSend(await dependencies.storage.loadSend(snapshot.journey.journeyId));
-					if (current.send.id !== snapshot.send.id || !sameItem(current.send.items, item) || current.send.status === "paused" || current.journey.phase === "paused") throw new ApplicationError("REVISION_CONFLICT");
-					assertScope(current.journey, current.send);
+						items: send.items.map((item) => item.sessionAssembly || item.status === "completed" ? item : {
+							...item,
+							status: "blocked",
+							error: "SESSION_MOVE_ACCESS_REQUIRED"
+						})
+					});
 				},
-				bindingId: binding?.subject === send.subject ? binding.bundleRecordId : void 0,
-				upload: async (artifact, upload, uploadSignal) => {
-					const started = performance.now();
-					await dependencies.artifacts.upload(snapshot.journey.journeyId, artifact, upload, uploadSignal);
-					dependencies.uploaded?.(artifact.workId, artifact.byteLength, Math.round(performance.now() - started));
-				}
-			};
-		},
-		save,
-		applied: () => ({
-			...snapshot,
-			status: "applied"
-		}),
-		stale: async () => ({
-			...requireSend(await dependencies.storage.loadSend(address.journeyId, address.sendId)),
-			status: "stale"
-		})
-	}, signal);
+				step: (context, item, connection, stepSignal) => stepSessionWork(preparation.dependencies, snapshot.journey.journeyId, context, item, connection, stepSignal, (next) => {
+					const pending = saving.then(async () => {
+						const current = await active(item);
+						if (current.send.revision !== snapshot.send.revision || current.journey.revision !== snapshot.journey.revision) throw new ApplicationError("REVISION_CONFLICT");
+						stepSignal.throwIfAborted();
+						const result = await saveSend(dependencies, current, {
+							...current.send,
+							items: current.send.items.map((value) => value.workId === next.workId ? next : value)
+						});
+						if (result.status === "stale") throw new ApplicationError("REVISION_CONFLICT");
+						snapshot = requireSend(result);
+						const saved = snapshot.send.items.find((value) => value.workId === next.workId);
+						if (!saved) throw new ApplicationError("INVALID_STATE");
+						checkpoints.set(next.workId, saved);
+					});
+					saving = pending.catch(() => void 0);
+					return pending;
+				}).then((result) => {
+					fulfilled.add(item.workId);
+					return result;
+				})
+			} : {},
+			connect: chain?.connect ?? dependencies.auth.connect,
+			profile: (connection, profileSignal) => prepareProfile(dependencies, snapshot, connection, profileSignal),
+			context: (item) => {
+				const binding = snapshot.journey.works.find((value) => value.id === item.workId)?.binding;
+				return {
+					snapshot: true,
+					...chain ? { fresh: chain.fresh } : {},
+					active: async () => {
+						await active(item);
+					},
+					bindingId: binding?.subject === send.subject ? binding.bundleRecordId : void 0,
+					upload: async (artifact, upload, uploadSignal) => {
+						const started = performance.now();
+						await dependencies.artifacts.upload(snapshot.journey.journeyId, artifact, upload, uploadSignal);
+						dependencies.uploaded?.(artifact.workId, artifact.byteLength, Math.round(performance.now() - started));
+					}
+				};
+			},
+			save,
+			applied: () => ({
+				...snapshot,
+				status: "applied"
+			}),
+			stale: async () => ({
+				...requireSend(await dependencies.storage.loadSend(address.journeyId, address.sendId)),
+				status: "stale"
+			})
+		}, signal);
+	} catch (error) {
+		cleanup.failed(error);
+		throw error;
+	} finally {
+		await cleanup.run(() => preparation.close());
+	}
 }
 /** The first wait after a bare refusal of staged bytes, doubled per refusal up to the cap. */
 const busyBaseMs = 2e3;
@@ -15209,7 +15371,13 @@ async function createRuntime(options, callbacks = {}) {
 	let bundles;
 	if (import.meta.url.endsWith(".ts")) {
 		traceStartup("worker-build-start");
-		bundles = await (await import(new URL("../../../scripts/workers/build.ts", import.meta.url).href)).buildWorkerBundles();
+		const shared = process.env["SESS_PILOT_TEST_WORKER_BUNDLES"];
+		if (shared) bundles = {
+			directory: shared,
+			url: (name) => pathToFileURL(join(shared, `${name}.mjs`)),
+			dispose: async () => {}
+		};
+		else bundles = await (await import(new URL("../../../scripts/workers/build.ts", import.meta.url).href)).buildWorkerBundles();
 		traceStartup("worker-build-end");
 	}
 	try {
@@ -15240,7 +15408,7 @@ async function compose(options, callbacks, bundles) {
 				event: "STATE_SCHEMA_BACKED_UP",
 				schema,
 				backup: path,
-				detail: "State from an older SessPilot release was kept at this backup path and fresh state was started. Earlier journey progress and approvals start over; source logs, completed ZIP files and private sensitive terms are unchanged. Delete the backup once it is no longer needed."
+				detail: "State from an older Tacitt CLI version was kept at this backup path and fresh state was started. Earlier journey progress and approvals start over; source logs, completed ZIP files and private sensitive terms are unchanged. Delete the backup once it is no longer needed."
 			})}\n`);
 		},
 		...process.env["SESS_PILOT_TEST_STARTUP_TRACE"] === "1" ? { onStartupPhase: traceStartup } : {}

package/dist/{src-BMSLVcgs.mjs → src-JoT3L94j.mjs}

@@ -15524,7 +15524,7 @@ async function* configuredSessionUploads(input, identities, signal) {
 					bufferedWrite: false,
 					dataDescriptor: true,
 					unixMode: 33152,
-					lastModDate: /* @__PURE__ */ new Date("1980-01-01T00:00:00.000Z"),
+					lastModDate: new Date(1980, 0, 1),
 					extendedTimestamp: false
 				});
 				for (const [index, part] of session.parts.entries()) {

package/dist/store-database-worker.mjs

@@ -1,4 +1,4 @@
-import { i as createExecutor, t as assertStoreHeap } from "./heap-DY5n4EVC.mjs";
+import { i as createExecutor, t as assertStoreHeap } from "./heap-BR8WjR25.mjs";
 import { parentPort } from "node:worker_threads";
 //#region packages/local-host/src/store/worker/entry.ts
 if (!parentPort) throw new Error("STORE_WORKER_REQUIRED");