@gitroll/tacitt-cli 0.6.11 → 0.6.13

package/dist/{job-BKsifhyv.mjs → job--zxwgaPy.mjs}

@@ -1,7 +1,7 @@
-import { A as renderJobDigest, D as prepareCollectionProduction, E as checkReusableBundle, L as privateCollectionDirectory, M as readCollectionIndex, N as parseCollectionWorkspaceSummary, V as writeLogicalJourneyOutput, W as readConfiguredOutputInfo, b as writeLogicalJourneyBase, d as verifyOutputShard, f as writeOutputShard, it as openPrivateFile, ot as windowsOwnerOnly, rt as makePrivateDirectory, st as isWindowsAclFailure, w as readConfiguredSearchFields, z as gitSeedsProvider } from "./src-DlVbGB32.mjs";
-import { F as bUnitFragments, Gt as filterInventoryByPeriod, J as utf16Offset, Jt as journeyProfileAddressActionSchema, L as bClassificationKey, Lt as reviewTermsInputSchema, Qt as passportAddressSchema, S as validateBReview, U as bDigest, V as bAnchorKey, Vt as termTypeInfo, W as codePointLength, Yt as journeyProfileLinksActionSchema, _ as reviewFindingsDigest, a as reviewBatchChunks, an as safeField, cn as reviewFamilies, d as validateReview, i as compileBFindings, in as safeCode, l as reviewSubmitSchema, n as matchesReadReceipts, nn as ApplicationError, t as locateTerms, u as textDigest, yt as journeyDescribeSchema } from "./locate-Cx52Zqxv.mjs";
-import { $n as hideKeyId, Ar as journeyPreviewSchema, Br as nativeRespondSchema, C as rebindReviewOverlay, Ci as selectFrozenConfiguration, Ct as sendActionSchema, D as staticallyHiddenFindings, Dr as journeyClassificationSessionsSchema, Dt as sendStartSchema, E as guardedFindingText, Et as sendRequestSchema, Fn as journeyInventoryQuerySchema, Gt as journeyContextQuerySchema, H as inspectionStartSchema, Jn as readConfirmedHideChange, K as inspectionQuerySchema, Kn as confirmedHideAdditions, Kr as staticSessionResourceSchema, Lt as journeyReviewStorageQuerySchema, Mr as journeyRenderSchema, Or as journeyFindingImpactSchema, Qn as addHideIndexTokens, Qt as journeyResourceQuerySchema, Rr as nativeEventsSchema, S as rebindReviewAlignment, Si as freezeConfiguration, Sn as bReviewDigest, St as replaceSensitiveTermsSchema, T as reviewBatchReuse, Tt as sendPrepareSchema, V as inspectionCancelSchema, Vr as retryReviewActionSchema, Wt as reviewCompileSchema, Xt as journeyPolicyRespondSchema, Yn as renderedHideValue, Zn as termHideAdditions, _n as reviewCandidateInputSchema, _t as manualUploadStartSchema, a as bCrossSegmentReviewSchema, b as isGenericPublicTerm, bn as reviewRepairResourceSchema, bt as maximumTermsFileBytes, c as reconstructBFields, di as packageCommandSchema, dn as sessionReviewInputSchema, f as selectedValueMembers, fi as selectionBatchSchema, fn as sessionReviewQuerySchema, ft as manualUploadActionSchema, gi as stateSchema, hi as producerVersion, hn as sessionUsefulnessInputSchema, ht as manualUploadPrepareSchema, i as validateBCrossSegmentReview, jr as journeyRenderInputSchema, kr as journeyFindingsSchema, ln as sessionRereadInputSchema, mt as manualUploadChoiceSchema, n as scanBatchEquivalenceDigest, nt as settingsQuerySchema, o as bRereadDigest, on as sessionReconcileInputSchema, p as splitSelectorValues, pi as selectionSchema, pr as maskedHitsStale, r as locateTermEvidence, rn as reviewAttemptResourceSchema, rt as readWorkspaceOutcomes, s as reconcileBSession, sr as confirmedHideGroupIds, t as scanBatchContextDigest, tn as journeyPlaceSchema, tr as packHideIndex, tt as settingsBatchSchema, ui as commandSchema, ut as resolveFailureLocation, vn as reviewCandidateResourceSchema, w as rebindReviewSubmit, wn as planBRepair, wt as sendChoiceSchema, x as bReviewScope, xi as defaultScopedSettings, yn as reviewRepairInputSchema, zr as nativeGetSchema } from "./src-D1iONla3.mjs";
-import { $ as validateState, A as resourceSelectionQuerySchema, B as termReuseQuerySchema, C as loadAcceptedReview, D as aggregateUsefulness, E as loadPrivateResource, F as validateUnitCandidate, G as validateBatchBody, H as privateReviewHash, I as reuseQuerySchema, J as ownership, K as requireActiveBatch, L as batchQuery, M as evaluateUnitEvidence, N as sameCandidateRequest, O as sessionUsefulnessRecommendation, P as validateCandidateAttempt, Q as readStoredState, R as isPrivateResourceKind, S as validateSessionBindings, T as loadBatch, U as batchHeader, V as scanAliasRequestKey, W as createJourneyPayloadFiles, X as withDatabase, Y as validateDatabase, Z as readBundleDirectory, _ as loadReconciliation, _t as errorCode, a as decodeError, at as finishReset, b as validatePreparationSelection, c as dropsAnchor, ct as present, d as parseDelivery, dt as recheckPrivatePath, et as checkVersion, f as validateCandidate, ft as stateDirectory, g as loadPreparedBodies, gt as StoreError, h as loadPreparation, ht as withFileCheckTimings, i as createExecutor, it as databaseName, j as inspectionQuerySchema$1, k as sessionQuery, l as replySchema, lt as privatePath, m as loadStatus, mt as withStateSnapshot, n as releaseInheritedHeapFlags, nt as beginReset, o as ProtocolError, ot as hasResetMarker, p as classificationJourneyCommit, pt as syncDirectory, q as initializeAndClaim, r as storeHeapLimits, rt as createDatabaseFile, s as allowedReplies, st as inspectStateFiles, tt as schemaVersion, u as operations, ut as readResetMarker, v as loadRereadBodies, vt as isCoordinationBusy, w as loadAuthenticatedReview, x as validateSessionReconciliation, y as loadSessionBodies, yt as isSqliteCorruption, z as privateResourceHeader } from "./heap-CV8Eca8V.mjs";
+import { E as readConfiguredSearchFields, F as parseCollectionWorkspaceSummary, K as readConfiguredOutputInfo, M as renderJobDigest, O as checkReusableBundle, P as readCollectionIndex, S as writeLogicalJourneyBase, U as writeLogicalJourneyOutput, V as gitSeedsProvider, ct as openPrivateFile, dt as isWindowsAclFailure, k as prepareCollectionProduction, m as writeOutputShard, p as verifyOutputShard, st as makePrivateDirectory, ut as windowsOwnerOnly, z as privateCollectionDirectory } from "./src-CP-K2PBv.mjs";
+import { C as validateBReview, J as bAnchorKey, Ut as termTypeInfo, X as bDigest, Xt as journeyProfileAddressActionSchema, Z as codePointLength, Zt as journeyProfileLinksActionSchema, d as reviewSubmitSchema, en as passportAddressSchema, f as textDigest, i as matchesReadReceipts, in as ApplicationError, j as bUnitFragments, n as runOccurrences, o as compileBFindings, on as safeCode, p as validateReview, qt as filterInventoryByPeriod, r as termSearchRuns, s as reviewBatchChunks, sn as safeField, t as locateTerms, tt as utf16Offset, un as reviewFamilies, xt as journeyDescribeSchema, y as reviewFindingsDigest, z as bClassificationKey, zt as reviewTermsInputSchema } from "./locate-PLEyLYW-.mjs";
+import { $t as journeyPlaceSchema, Ar as retryReviewActionSchema, C as rebindReviewOverlay, Ct as sendActionSchema, D as staticallyHiddenFindings, Di as packageCommandSchema, Dr as nativeGetSchema, Dt as sendStartSchema, E as guardedFindingText, Ei as commandSchema, Er as nativeEventsSchema, Et as sendRequestSchema, Gn as confirmedHideAdditions, H as inspectionStartSchema, Ht as journeyContextQuerySchema, Jn as renderedHideValue, K as inspectionQuerySchema, Kr as staticSessionResourceSchema, Li as defaultScopedSettings, Mi as stateSchema, Nt as journeyReviewStorageQuerySchema, Oi as selectionBatchSchema, Or as nativeRespondSchema, Pn as journeyInventoryQuerySchema, Qn as hideKeyId, Ri as freezeConfiguration, S as rebindReviewAlignment, Sn as planBRepair, St as replaceSensitiveTermsSchema, T as reviewBatchReuse, Tt as sendPrepareSchema, V as inspectionCancelSchema, Vt as reviewCompileSchema, Xn as termHideAdditions, Xt as journeyResourceQuerySchema, Zn as addHideIndexTokens, _n as reviewRepairInputSchema, _r as journeyRenderInputSchema, _t as manualUploadStartSchema, a as bCrossSegmentReviewSchema, b as isGenericPublicTerm, bn as bReviewDigest, bt as maximumTermsFileBytes, c as reconstructBFields, di as withReadingProgress, er as packHideIndex, f as selectedValueMembers, fi as confirmedHideGroupIds, ft as manualUploadActionSchema, gn as reviewCandidateResourceSchema, gr as journeyPreviewSchema, hn as reviewCandidateInputSchema, hr as journeyFindingsSchema, ht as manualUploadPrepareSchema, i as validateBCrossSegmentReview, in as sessionReconcileInputSchema, ji as producerVersion, ki as selectionSchema, ln as sessionReviewInputSchema, mr as journeyFindingImpactSchema, mt as manualUploadChoiceSchema, n as scanBatchEquivalenceDigest, nt as settingsQuerySchema, o as bRereadDigest, p as splitSelectorValues, pn as sessionUsefulnessInputSchema, pr as journeyClassificationSessionsSchema, qn as readConfirmedHideChange, qt as journeyPolicyRespondSchema, r as locateTermEvidence, rt as readWorkspaceOutcomes, s as reconcileBSession, si as isSelectedWork, sn as sessionRereadInputSchema, t as scanBatchContextDigest, tn as reviewAttemptResourceSchema, tt as settingsBatchSchema, un as sessionReviewQuerySchema, ut as resolveFailureLocation, vi as maskedHitsStale, vn as reviewRepairResourceSchema, vr as journeyRenderSchema, w as rebindReviewSubmit, wt as sendChoiceSchema, x as bReviewScope, zi as selectFrozenConfiguration } from "./src-CttNuxOn.mjs";
+import { $ as validateState, A as resourceSelectionQuerySchema, B as termReuseQuerySchema, C as loadAcceptedReview, D as aggregateUsefulness, E as loadPrivateResource, F as validateUnitCandidate, G as validateBatchBody, H as privateReviewHash, I as reuseQuerySchema, J as ownership, K as requireActiveBatch, L as batchQuery, M as evaluateUnitEvidence, N as sameCandidateRequest, O as sessionUsefulnessRecommendation, P as validateCandidateAttempt, Q as readStoredState, R as isPrivateResourceKind, S as validateSessionBindings, T as loadBatch, U as batchHeader, V as scanAliasRequestKey, W as createJourneyPayloadFiles, X as withDatabase, Y as validateDatabase, Z as readBundleDirectory, _ as loadReconciliation, _t as errorCode, a as decodeError, at as finishReset, b as validatePreparationSelection, c as dropsAnchor, ct as present, d as parseDelivery, dt as recheckPrivatePath, et as checkVersion, f as validateCandidate, ft as stateDirectory, g as loadPreparedBodies, gt as StoreError, h as loadPreparation, ht as withFileCheckTimings, i as createExecutor, it as databaseName, j as inspectionQuerySchema$1, k as sessionQuery, l as replySchema, lt as privatePath, m as loadStatus, mt as withStateSnapshot, n as releaseInheritedHeapFlags, nt as beginReset, o as ProtocolError, ot as hasResetMarker, p as classificationJourneyCommit, pt as syncDirectory, q as initializeAndClaim, r as storeHeapLimits, rt as createDatabaseFile, s as allowedReplies, st as inspectStateFiles, tt as schemaVersion, u as operations, ut as readResetMarker, v as loadRereadBodies, vt as isCoordinationBusy, w as loadAuthenticatedReview, x as validateSessionReconciliation, y as loadSessionBodies, yt as isSqliteCorruption, z as privateResourceHeader } from "./heap-DCS_WXIA.mjs";
 import { constants, write } from "node:fs";
 import { z } from "zod";
 import { copyFile, link, lstat, mkdir, mkdtemp, open, opendir, readFile, readdir, realpath, rename, rm, unlink, writeFile } from "node:fs/promises";
@@ -20,8 +20,8 @@ import { AsyncLocalStorage } from "node:async_hooks";
 import { ZipWriter } from "@zip.js/zip.js/index-native.js";
 import { tmpdir } from "node:os";
 import { pipeline } from "node:stream/promises";
-import { DatabaseSync } from "node:sqlite";
 import { Worker } from "node:worker_threads";
+import { DatabaseSync } from "node:sqlite";
 import { quote } from "shell-quote";
 //#region packages/file-privacy/src/sharing.ts
 const sharingCodes = /* @__PURE__ */ new Set([
@@ -595,6 +595,9 @@ const operation = z.enum([
 	"journey.current",
 	"journey.resources",
 	"journey.send.load",
+	"journey.send.current",
+	"journey.send.transfer",
+	"journey.send.output",
 	"journey.send.commit",
 	"manual.upload.load",
 	"manual.upload.commit",
@@ -650,6 +653,7 @@ const operation = z.enum([
 	"journey.commit",
 	"journey.commit.checked",
 	"journey.classification.commit",
+	"journey.receipt.revision",
 	"journey.events",
 	"journey.inventory",
 	"journey.preparation.progress",
@@ -932,7 +936,7 @@ function createRouter(application, account, stopping, delivery, nativeInspection
 		}),
 		send: t.router({
 			request: t.procedure.input(sendRequestSchema).mutation(({ input }) => sending().request(input, "panel")),
-			get: t.procedure.input(sendAddress.partial({ sendId: true })).query(({ input, signal }) => readThroughContention(() => sending().get(input), signal)),
+			get: t.procedure.input(sendAddress.partial({ sendId: true }).extend({ observedRevision: z.number().int().nonnegative().optional() })).query(({ input, signal }) => readThroughContention(() => sending().get(input), signal)),
 			prepare: t.procedure.input(sendPrepareSchema).mutation(({ input, signal }) => sending().prepare(input, signal)),
 			start: t.procedure.input(sendStartSchema).mutation(({ input, signal }) => sending().start(input, signal)),
 			respond: t.procedure.input(sendChoiceSchema).mutation(({ input }) => sending().respond(input)),
@@ -940,6 +944,8 @@ function createRouter(application, account, stopping, delivery, nativeInspection
 			resume: t.procedure.input(sendActionSchema).mutation(({ input }) => sending().resume(input)),
 			withdraw: t.procedure.input(sendActionSchema).mutation(({ input }) => sending().withdraw(input)),
 			advance: t.procedure.input(sendAddress).mutation(({ input }) => sending().advance(input, stopping)),
+			uploadAssessments: t.procedure.input(sendAddress).query(({ input }) => sending().uploadAssessments(input)),
+			ownedPassport: t.procedure.input(sendAddress).query(({ input, signal }) => sending().ownedPassport(input, signal ?? stopping)),
 			ownerProfile: t.procedure.query(({ signal }) => sending().ownerProfile(signal ?? stopping)),
 			addressTaken: t.procedure.input(z.object({ address: passportAddressSchema }).strict()).query(({ input, signal }) => sending().addressTaken(input, signal ?? stopping)),
 			saveSentProfile: t.procedure.input(z.object({ journeyId: z.uuid() }).strict()).mutation(({ input }) => sending().saveSentProfile(input, stopping))
@@ -4610,7 +4616,7 @@ function createStagedTerms(access, files) {
 		return leg.run("journey.terms.finish", {
 			before,
 			located,
-			occurrences: batches.flatMap((batch) => locateTerms([batch], terms).located.map((term) => ({
+			occurrences: batches.flatMap((batch) => locateTerms([batch], terms).located.filter((term) => term.count > 0).map((term) => ({
 				...term,
 				batchId: batch.id
 			}))),
@@ -4684,34 +4690,12 @@ function createStagedTerms(access, files) {
 }
 /** A UUID named by a digest, so a replayed carry-over reuses its request key. */
 const digestId = (digest) => `${digest.slice(0, 8)}-${digest.slice(8, 12)}-4${digest.slice(13, 16)}-8${digest.slice(17, 20)}-${digest.slice(20, 32)}`;
-/** Locate provenance over the same contiguous core fields admitted by locateTerms. */
+/** Locate provenance over the same field runs and core-overlapping occurrence as locateTerms. */
 function findingSources(batches) {
-	const fields = [];
-	for (const batch of batches) {
-		const groups = Map.groupBy(batch.chunks.filter((chunk) => chunk.core), (chunk) => JSON.stringify([chunk.fieldId, chunk.fieldHash]));
-		for (const group of groups.values()) {
-			let chunks = [];
-			let end = -1;
-			const flush = () => {
-				if (chunks.length) fields.push({
-					batch,
-					chunks,
-					text: chunks.map((chunk) => chunk.text).join("").normalize("NFC")
-				});
-			};
-			for (const chunk of group.toSorted((a, b) => a.offset - b.offset)) {
-				if (chunk.offset !== end) {
-					flush();
-					chunks = [];
-				}
-				chunks.push(chunk);
-				end = chunk.offset + chunk.text.length;
-			}
-			flush();
-		}
-	}
-	return (value) => fields.flatMap(({ batch, chunks, text }) => {
-		const at = text.indexOf(value);
+	const runs = [...termSearchRuns(batches)];
+	return (value) => runs.flatMap((run) => {
+		const { batch, chunks } = run;
+		const at = runOccurrences(run, value).first;
 		if (at < 0) return [];
 		let offset = 0;
 		return chunks.flatMap((chunk) => {
@@ -5064,11 +5048,13 @@ async function openStore(options, backupObsolete) {
 			sessionReviewStatus: (input) => stagedJourney.sessionReviewStatus(input),
 			reviewAttempts: (input) => access.run("journey.review.attempts", input),
 			acknowledgeSessionUsefulness: (input) => stagedJourney.acknowledgeSessionUsefulness(input),
+			readSendOutput: (input) => access.run("journey.send.output", input),
 			preparationState: (journeyId) => access.run("journey.preparation.state", { journeyId }),
 			preparationPermission: (journeyId) => access.run("journey.preparation.permission", { journeyId }),
 			updatePreparation: (input) => access.run("journey.preparation.update", input),
 			current: (journeyId) => access.run("journey.current", journeyId ? { journeyId } : {}),
 			commit: (input) => stagedJourney.commit(input),
+			receiptRevision: (input) => access.run("journey.receipt.revision", input),
 			commitClassification: (input) => stagedJourney.commitClassification(input),
 			hideIndexKey: (journeyId) => stagedJourney.hideIndexKey(journeyId),
 			reopenEmpty: (input) => access.run("journey.terms.reopen-empty", input),
@@ -5081,11 +5067,18 @@ async function openStore(options, backupObsolete) {
 			})
 		},
 		journeySend: {
-			loadSend: (journeyId, sendId) => access.run("journey.send.load", {
+			isCurrentSend: (journeyId, sendId, revision) => access.run("journey.send.current", {
 				journeyId,
-				...sendId ? { sendId } : {}
+				sendId,
+				revision
 			}),
-			commitSend: (input) => access.run("journey.send.commit", input)
+			loadSend: (journeyId, sendId, observedRevision) => access.run("journey.send.load", {
+				journeyId,
+				...sendId ? { sendId } : {},
+				...observedRevision !== void 0 ? { observedRevision } : {}
+			}),
+			commitSend: (input) => access.run("journey.send.commit", input),
+			checkpointTransfer: (input) => access.run("journey.send.transfer", input)
 		},
 		manualUpload: {
 			load: (uploadId) => access.run("manual.upload.load", uploadId ? { uploadId } : {}),
@@ -5543,7 +5536,17 @@ async function collectRemoteWorkers(dispatches, confirmations, home, transport =
 	const copied = [];
 	const failures = /* @__PURE__ */ new Set();
 	const seen = /* @__PURE__ */ new Set();
-	for (const window of dispatches) {
+	const resolved = dispatches.flatMap((window) => window.harness === "unknown" ? [{
+		...window,
+		harness: "codex"
+	}, {
+		...window,
+		harness: "claude"
+	}] : [{
+		...window,
+		harness: window.harness
+	}]);
+	for (const window of resolved) {
 		if (confirmations[window.host] !== true || failures.has(window.host)) continue;
 		let temporary;
 		try {
@@ -5646,7 +5649,11 @@ async function readRemoteState(stateDir, journeyId) {
 		return z.object({
 			windows: z.array(z.object({
 				host: z.string(),
-				harness: z.enum(["codex", "claude"]),
+				harness: z.enum([
+					"codex",
+					"claude",
+					"unknown"
+				]),
 				transport: z.enum(["ssh", "gcloud"]),
 				args: z.array(z.string()),
 				sourceSessionId: z.string(),
@@ -5808,6 +5815,92 @@ function workApproval(approval, rootIds) {
 	};
 }
 //#endregion
+//#region apps/cli/src/journey/prepare/update.ts
+/** Preparation owns only the changed Work rows, progress and package invalidation. */
+async function changePreparation(storage, journeyId, kind, change, attempts = Number.POSITIVE_INFINITY, clearPackageApproval = false) {
+	for (let attempt = 0; attempt < attempts; attempt++) {
+		const before = await storage.preparationState(journeyId);
+		if (!before?.consent) throw new ApplicationError("CONFIRMATION_REQUIRED");
+		const after = change(before);
+		if (after === before) return before;
+		const previous = new Map(before.works.map((work) => [work.id, work]));
+		const result = await storage.updatePreparation({
+			journeyId,
+			expectedRevision: before.revision,
+			requestKey: randomUUID(),
+			at: (/* @__PURE__ */ new Date()).toISOString(),
+			kind,
+			works: after.works.filter((work) => work !== previous.get(work.id)),
+			phase: after.phase,
+			readingComplete: after.readingComplete,
+			readingStartedAt: after.readingStartedAt,
+			clearPackageApproval: clearPackageApproval && before !== after
+		});
+		if (result.status !== "stale") return result.state;
+	}
+	throw new ApplicationError("REVISION_CONFLICT");
+}
+//#endregion
+//#region apps/cli/src/journey/prepare/isolation.ts
+/** A Work-level refusal caused by identified roots, each with its own public-safe code. */
+var RootPreparationFailure = class extends ApplicationError {
+	roots;
+	constructor(code, roots, options) {
+		super(code, void 0, options);
+		this.roots = roots;
+	}
+};
+/** The distinct public-safe codes of the identified failing roots, else the Work-level code. */
+function blockedCodes(error, code) {
+	return error instanceof RootPreparationFailure && error.roots.size ? [...new Set(error.roots.values())] : [code];
+}
+/**
+* ADR 0188 (restoring ADR 0059 D06): moves the failing roots of a multi-root Work into its
+* stable blocked "<title> – couldn't prepare" Work so the rest can be prepared again. False
+* when the failure names no root or every root, or the Work changed. Track B may
+* reopen its still-current reading/review generation before the pending-only store call.
+*/
+async function isolateFailingRoots(storage, journeyId, work, error, afterRead = false) {
+	if (!(error instanceof RootPreparationFailure)) return false;
+	if ([
+		error.code,
+		...error.roots.values(),
+		...work.blockedCodes
+	].includes("PRIVACY_CHANGE_PENDING")) return false;
+	const roots = work.rootSessionIds.flatMap((sessionId) => {
+		const code = error.roots.get(sessionId);
+		return code ? [{
+			sessionId,
+			code
+		}] : [];
+	});
+	if (roots.length === 0 || roots.length === work.rootSessionIds.length) return false;
+	if (afterRead) await changePreparation(storage, journeyId, "snapshot", (state) => {
+		const current = state.works.find((item) => item.id === work.id);
+		if (state.phase === "paused" || state.phase === "sending" || state.phase === "completed" || state.scope.status !== "confirmed" || state.pendingHideId || current?.inputRevision !== work.inputRevision || !isSelectedWork(current) || current.blockedCodes.includes("PRIVACY_CHANGE_PENDING") || !["reading", "review"].includes(current.status)) return state;
+		return withReadingProgress({
+			...state,
+			works: state.works.map((item) => item.id === work.id ? {
+				...item,
+				status: "pending"
+			} : item)
+		});
+	}, 100, true);
+	for (;;) {
+		const state = await storage.preparationState(journeyId);
+		const current = state?.works.find((item) => item.id === work.id);
+		if (!state || state.phase === "paused" || state.phase === "sending" || state.phase === "completed" || state.scope.status !== "confirmed" || state.pendingHideId || current?.inputRevision !== work.inputRevision || current.blockedCodes.includes("PRIVACY_CHANGE_PENDING") || current.status !== "pending") return false;
+		if ((await storage.isolateRoots({
+			journeyId,
+			workId: work.id,
+			inputRevision: work.inputRevision,
+			roots,
+			expectedRevision: state.revision,
+			idempotencyKey: randomUUID()
+		})).status !== "stale") return true;
+	}
+}
+//#endregion
 //#region apps/cli/src/journey/captures.ts
 /** Bound each store reply to selected source IDs, including for a large single Work. */
 async function readSelectedCaptures(storage, journeyId, partIds) {
@@ -5884,8 +5977,29 @@ async function staticBaseFromInputs(inputs, processing, hooks) {
 		captures: inputs.captures,
 		everyAdmissionRefusal: true
 	}, hooks);
-	if (production.kind !== "configured" || production.workspaceFailures.length) throw new ApplicationError("SCOPE_NOT_READY");
+	if (production.kind !== "configured") throw new ApplicationError("SCOPE_NOT_READY");
 	const families = reviewFamilies(approval.inventory);
+	if (production.workspaceFailures.length) {
+		const failures = /* @__PURE__ */ new Map();
+		let unattributed = false;
+		for (const failure of production.workspaceFailures) {
+			let attributed = false;
+			for (const session of approval.inventory.sessions) {
+				if (session.workspaceId !== failure.workspaceId) continue;
+				if (failure.location.sessionId && session.id !== failure.location.sessionId) continue;
+				const root = families.owners.get(session.id);
+				if (!root || !roots.includes(root.id)) unattributed = true;
+				else {
+					failures.set(root.id, failure.code);
+					attributed = true;
+				}
+			}
+			if (!attributed) unattributed = true;
+		}
+		const cause = new AggregateError(production.workspaceFailures.map((failure) => failure.cause), "SCOPE_NOT_READY");
+		if (unattributed) throw new ApplicationError("SCOPE_NOT_READY", void 0, { cause });
+		throw new RootPreparationFailure("SCOPE_NOT_READY", failures, { cause });
+	}
 	const admitted = new Set(production.selection.sessions.map((item) => item.session.id));
 	return {
 		production,
@@ -6335,4 +6449,4 @@ async function runJourneyOutputJob(job, live, signal, onPath) {
 	};
 }
 //#endregion
-export { createExecutionPort as A, saveRemoteState as C, createPackagingProgressPort as D, exportDelivery as E, loadDeliveryResults as F, inBackgroundStatusPoll as I, inBackgroundStoreLane as L, withStateMutex as M, createDeliveryService as N, createStore as O, preflight as P, isBackgroundStatusPoll as R, readRemoteState as S, collectRemoteWorkers as T, staticBaseProduction as _, writeJourneyOutput as a, workApproval as b, mergeHideIndexTokens as c, runJourneyBaseJob as d, writeJourneyBase as f, staticBaseInputs as g, staticSessions as h, runJourneyOutputVerifyJob as i, startHost as j, readStateDump as k, packRenderHideIndex as l, saveStaticSession as m, runJourneyOutputJob as n, createHideIndexTokens as o, readStaticResult as p, runJourneyOutputShardJob as r, hideIndexTexts as s, journeyOutputJob as t, journeyBaseJob as u, readSelectedCaptures as v, journeyDirectory as w, isRemoteImport as x, prepareSourcePlan as y, retrySharingViolation as z };
+export { exportDelivery as A, inBackgroundStatusPoll as B, prepareSourcePlan as C, saveRemoteState as D, readRemoteState as E, startHost as F, isBackgroundStatusPoll as H, withStateMutex as I, createDeliveryService as L, createStore as M, readStateDump as N, journeyDirectory as O, createExecutionPort as P, preflight as R, changePreparation as S, isRemoteImport as T, retrySharingViolation as U, inBackgroundStoreLane as V, staticBaseProduction as _, writeJourneyOutput as a, blockedCodes as b, mergeHideIndexTokens as c, runJourneyBaseJob as d, writeJourneyBase as f, staticBaseInputs as g, staticSessions as h, runJourneyOutputVerifyJob as i, createPackagingProgressPort as j, collectRemoteWorkers as k, packRenderHideIndex as l, saveStaticSession as m, runJourneyOutputJob as n, createHideIndexTokens as o, readStaticResult as p, runJourneyOutputShardJob as r, hideIndexTexts as s, journeyOutputJob as t, journeyBaseJob as u, readSelectedCaptures as v, workApproval as w, isolateFailingRoots as x, RootPreparationFailure as y, loadDeliveryResults as z };