@hearsay-tools/squawk 0.0.0-stage → 0.17.0-dev.5682

package/dist/home/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/home/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAgB7C,MAAM,UAAU,eAAe,CAAC,OAAO,GAAY,cAAc;IAC/D,OAAO,OAAO,CAAC,CAAC,CAAC;QACf,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,uBAAuB;QACnF,QAAQ,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,sBAAsB;QACxG,WAAW,EAAE,6BAA6B,EAAE,iBAAiB,EAAE,gBAAgB;KAChF,CAAC,CAAC,CAAC;QACF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,kBAAkB;QAChF,QAAQ,EAAE,UAAU,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,wBAAwB;QACpH,WAAW,EAAE,+BAA+B,EAAE,iBAAiB,EAAE,eAAe;KACjF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAU,CAAC;AAGhE,wEAAwE;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,eAAe,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,QAAQ;IAClE,eAAe,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ;CACxD,CAAC;AAIX,oFAAoF;AACpF,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;SACnD,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,UAAU,IAAI,IAAI,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAClF,CAAC"}

package/dist/home/install-marker.d.ts

@@ -0,0 +1,27 @@
+import { z } from 'zod';
+export declare const installMarkerSchema: z.ZodObject<{
+    installId: z.ZodUUID;
+    kind: z.ZodEnum<{
+        dev: "dev";
+        live: "live";
+        test: "test";
+    }>;
+    createdAt: z.ZodISODateTime;
+    migratedFrom: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodEnum<{
+        committed: "committed";
+        pending: "pending";
+    }>>;
+}, z.core.$loose>;
+export type InstallMarker = z.infer<typeof installMarkerSchema>;
+export declare function underTestRunner(): boolean;
+export declare function readInstallMarker(root: string): InstallMarker | undefined;
+export declare function assertHomeReadable(root: string): InstallMarker;
+export declare function assertHomeWritable(root: string): InstallMarker;
+/** The migration alone replaces marker state. Normal entry preparation never overwrites it. */
+export declare function writeMigrationMarker(root: string, migratedFrom: string, state: 'pending' | 'committed'): InstallMarker;
+/**
+ * Only sandbox construction and marker-creating entry points call this. Never downgrades live.
+ * A test request refuses an account root in every process, before it can return an existing marker.
+ */
+export declare function createInstallMarker(root: string, kind: InstallMarker['kind']): InstallMarker;

package/dist/home/install-marker.js

@@ -0,0 +1,78 @@
+import { logPrefix } from './display.js';
+import { randomUUID } from 'node:crypto';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { z } from 'zod';
+import { assertCezarHomeWriteIsSandboxed } from '../paths.js';
+import { assertTestHomeOutsideAccountHome } from './protected-roots.js';
+import { replacePrivate } from './private-files.js';
+import { withHomeLock } from './write-lock.js';
+import { assertHomeMetadata } from './boundary.js';
+export const installMarkerSchema = z.object({
+    installId: z.uuid(), kind: z.enum(['live', 'dev', 'test']), createdAt: z.iso.datetime(),
+    migratedFrom: z.string().optional(), state: z.enum(['pending', 'committed']).optional(),
+}).passthrough();
+export function underTestRunner() {
+    return !!(process.env.VITEST || process.env.NODE_TEST_CONTEXT || process.env.JEST_WORKER_ID
+        || Object.keys(process.env).some(key => key.startsWith('STRYKER_')));
+}
+export function readInstallMarker(root) {
+    try {
+        return installMarkerSchema.parse(JSON.parse(readFileSync(join(root, 'install.json'), 'utf8')));
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return;
+        throw error;
+    }
+}
+export function assertHomeReadable(root) {
+    const marker = readInstallMarker(root);
+    if (marker?.kind === 'live' && underTestRunner())
+        throw new Error(`${logPrefix()} refusing to write live home ${root} from a test runner`);
+    assertCezarHomeWriteIsSandboxed(root);
+    if (!marker)
+        throw new Error(`${logPrefix()} refusing to write home ${root} without an install marker; start it through a CLI entry point`);
+    return marker;
+}
+export function assertHomeWritable(root) {
+    const marker = assertHomeReadable(root);
+    if (marker.state === 'pending')
+        throw new Error(`${logPrefix()} refusing to write pending migration home ${root}; finish or roll back the migration first`);
+    return marker;
+}
+/** The migration alone replaces marker state. Normal entry preparation never overwrites it. */
+export function writeMigrationMarker(root, migratedFrom, state) {
+    const existing = readInstallMarker(root);
+    if (existing)
+        assertHomeReadable(root);
+    assertHomeMetadata(root);
+    return withHomeLock(root, () => {
+        const marker = readInstallMarker(root) ?? { installId: randomUUID(), kind: underTestRunner() ? 'test' : 'live', createdAt: new Date().toISOString() };
+        const next = installMarkerSchema.parse({ ...marker, kind: marker.kind === 'test' ? 'test' : 'live', migratedFrom, state });
+        replacePrivate(join(root, 'install.json'), `${JSON.stringify(next, null, 2)}\n`, { layout: 'split' });
+        return next;
+    });
+}
+/**
+ * Only sandbox construction and marker-creating entry points call this. Never downgrades live.
+ * A test request refuses an account root in every process, before it can return an existing marker.
+ */
+export function createInstallMarker(root, kind) {
+    if (kind === 'test')
+        assertTestHomeOutsideAccountHome(root);
+    assertCezarHomeWriteIsSandboxed(root);
+    const marker = readInstallMarker(root);
+    if (marker)
+        return marker;
+    assertHomeMetadata(root);
+    return withHomeLock(root, () => {
+        const existing = readInstallMarker(root);
+        if (existing)
+            return existing;
+        const marker = { installId: randomUUID(), kind, createdAt: new Date().toISOString() };
+        replacePrivate(join(root, 'install.json'), `${JSON.stringify(marker, null, 2)}\n`);
+        return marker;
+    });
+}
+//# sourceMappingURL=install-marker.js.map

package/dist/home/install-marker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-marker.js","sourceRoot":"","sources":["../../src/home/install-marker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,+BAA+B,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,gCAAgC,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IACvF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxF,CAAC,CAAC,WAAW,EAAE,CAAC;AAGjB,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;WACtF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC;QAAC,OAAO,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACrH,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC/D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,MAAM,EAAE,IAAI,KAAK,MAAM,IAAI,eAAe,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,EAAE,gCAAgC,IAAI,qBAAqB,CAAC,CAAC;IAC3I,+BAA+B,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,EAAE,2BAA2B,IAAI,gEAAgE,CAAC,CAAC;IAC5I,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,EAAE,6CAA6C,IAAI,2CAA2C,CAAC,CAAC;IAC5J,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,YAAoB,EAAE,KAA8B;IACrG,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,QAAQ;QAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACvC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE;QAC7B,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACtJ,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3H,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACtG,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAA2B;IAC3E,IAAI,IAAI,KAAK,MAAM;QAAE,gCAAgC,CAAC,IAAI,CAAC,CAAC;IAC5D,+BAA+B,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE;QAC7B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACtF,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACnF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/home/kind-roots.d.ts

@@ -0,0 +1,10 @@
+/** Real filesystem operations must ignore process.platform mocks. Keep macOS defaults native too. */
+export declare const nativePathPlatform: NodeJS.Platform;
+export type HomeLayout = 'legacy' | 'split';
+export type HomeKind = 'config' | 'state' | 'data' | 'cache' | 'runtime';
+export type HomeRoots = Readonly<Record<HomeKind, string>>;
+/** Operator layout values remain available to agents. These are not home locators. */
+export declare const HOME_LAYOUT_ENV: readonly string[];
+export declare function oneRootKinds(root: string, platform: NodeJS.Platform): HomeRoots;
+/** Pure platform defaults, also used to protect passwd-home paths in test writers. */
+export declare function platformKindRoots(userHome: string, env: NodeJS.ProcessEnv, platform: NodeJS.Platform): HomeRoots;

package/dist/home/kind-roots.js

@@ -0,0 +1,36 @@
+import { type } from 'node:os';
+import { posix, sep, win32 } from 'node:path';
+/** Real filesystem operations must ignore process.platform mocks. Keep macOS defaults native too. */
+export const nativePathPlatform = sep === '\\' ? 'win32' : type() === 'Darwin' ? 'darwin' : 'linux';
+/** Operator layout values remain available to agents. These are not home locators. */
+export const HOME_LAYOUT_ENV = [
+    'XDG_CONFIG_HOME', 'XDG_STATE_HOME', 'XDG_DATA_HOME', 'XDG_CACHE_HOME',
+    'XDG_RUNTIME_DIR', 'APPDATA', 'LOCALAPPDATA', 'TMPDIR',
+];
+export function oneRootKinds(root, platform) {
+    const { join } = platform === 'win32' ? win32 : posix;
+    return { config: join(root, 'config'), state: join(root, 'state'), data: join(root, 'data'),
+        cache: join(root, 'cache'), runtime: join(root, 'run') };
+}
+/** Pure platform defaults, also used to protect passwd-home paths in test writers. */
+export function platformKindRoots(userHome, env, platform) {
+    if (platform === 'win32') {
+        const local = win32.join(env.LOCALAPPDATA || win32.join(userHome, 'AppData', 'Local'), 'Hearsay Squawk');
+        return { config: win32.join(env.APPDATA || win32.join(userHome, 'AppData', 'Roaming'), 'Hearsay Squawk'),
+            state: win32.join(local, 'state'), data: win32.join(local, 'data'),
+            cache: win32.join(local, 'cache'), runtime: win32.join(local, 'run') };
+    }
+    if (platform === 'darwin') {
+        const support = posix.join(userHome, 'Library', 'Application Support', 'Hearsay Squawk');
+        return { config: posix.join(support, 'config'), state: posix.join(support, 'state'),
+            data: posix.join(support, 'data'), cache: posix.join(userHome, 'Library', 'Caches', 'Hearsay Squawk'),
+            runtime: posix.join(env.TMPDIR || '/tmp', 'hearsay-squawk') };
+    }
+    const xdg = (name, fallback) => posix.join(env[name] && posix.isAbsolute(env[name]) ? env[name] : posix.join(userHome, fallback), 'hearsay-squawk');
+    const state = xdg('XDG_STATE_HOME', '.local/state');
+    return { config: xdg('XDG_CONFIG_HOME', '.config'), state,
+        data: xdg('XDG_DATA_HOME', '.local/share'), cache: xdg('XDG_CACHE_HOME', '.cache'),
+        runtime: env.XDG_RUNTIME_DIR && posix.isAbsolute(env.XDG_RUNTIME_DIR)
+            ? posix.join(env.XDG_RUNTIME_DIR, 'hearsay-squawk') : posix.join(state, 'run') };
+}
+//# sourceMappingURL=kind-roots.js.map

package/dist/home/kind-roots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kind-roots.js","sourceRoot":"","sources":["../../src/home/kind-roots.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAE9C,qGAAqG;AACrG,MAAM,CAAC,MAAM,kBAAkB,GAAoB,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;AAMrH,sFAAsF;AACtF,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,iBAAiB,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB;IACtE,iBAAiB,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ;CACvD,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,QAAyB;IAClE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACtD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACzF,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,GAAsB,EAAE,QAAyB;IACnG,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACzG,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,gBAAgB,CAAC;YACtG,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;YAClE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;QACzF,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;YACjF,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,CAAC;YACrG,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,MAAM,EAAE,gBAAgB,CAAC,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CACxD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC3G,MAAM,KAAK,GAAG,GAAG,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IACpD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,KAAK;QACvD,IAAI,EAAE,GAAG,CAAC,eAAe,EAAE,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC;QAClF,OAAO,EAAE,GAAG,CAAC,eAAe,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC;YACnE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;AACvF,CAAC"}

package/dist/home/leases.d.ts

@@ -0,0 +1,14 @@
+import { z } from 'zod';
+import type { Home } from './home.ts';
+declare const leaseSchema: z.ZodObject<{
+    pid: z.ZodNumber;
+    startToken: z.ZodOptional<z.ZodString>;
+    installId: z.ZodUUID;
+    port: z.ZodNumber;
+    instance: z.ZodString;
+}, z.core.$strip>;
+export type CockpitLease = z.infer<typeof leaseSchema>;
+/** Presence is advisory. It never excludes another cockpit or a CLI writer. */
+export declare function readCockpitLeases(home: Home): CockpitLease[];
+export declare function holdCockpitLease(home: Home, port: number, instance?: string): () => void;
+export {};

package/dist/home/leases.js

@@ -0,0 +1,55 @@
+import { readdirSync, readFileSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { z } from 'zod';
+import { recordedProcessLive } from '../delegation/process-liveness.js';
+import { assertHomeReadable } from './install-marker.js';
+import { privateDirectory, replacePrivate } from './private-files.js';
+import { withHomeLock } from './write-lock.js';
+import { ownProcessStartToken } from './process-identity.js';
+import { assertHomePath } from './boundary.js';
+const leaseSchema = z.object({ pid: z.number().int().positive(), startToken: z.string().optional(),
+    installId: z.uuid(), port: z.number().int().nonnegative(), instance: z.string() });
+/** Presence is advisory. It never excludes another cockpit or a CLI writer. */
+export function readCockpitLeases(home) {
+    assertHomeReadable(home.root);
+    assertHomePath(home.root, join(home.root, '.locks', 'cockpits'));
+    return withHomeLock(home.root, () => {
+        const directory = join(home.root, '.locks', 'cockpits');
+        let names;
+        try {
+            names = readdirSync(directory);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return [];
+            throw error;
+        }
+        const leases = [];
+        for (const name of names.filter(name => /^\d+\.lease$/.test(name))) {
+            const path = join(directory, name);
+            const lease = leaseSchema.parse(JSON.parse(readFileSync(path, 'utf8')));
+            if (recordedProcessLive(lease))
+                leases.push(lease);
+            else
+                rmSync(path, { force: true });
+        }
+        return leases;
+    });
+}
+export function holdCockpitLease(home, port, instance = 'default') {
+    const marker = assertHomeReadable(home.root);
+    const path = join(home.root, '.locks', 'cockpits', `${process.pid}.lease`);
+    assertHomePath(home.root, path);
+    const lease = { pid: process.pid, startToken: ownProcessStartToken(), installId: marker.installId, port, instance };
+    withHomeLock(home.root, () => {
+        readCockpitLeases(home);
+        privateDirectory(join(home.root, '.locks', 'cockpits'));
+        replacePrivate(path, JSON.stringify(lease));
+    });
+    return () => {
+        assertHomeReadable(home.root);
+        assertHomePath(home.root, path);
+        withHomeLock(home.root, () => { rmSync(path, { force: true }); });
+    };
+}
+//# sourceMappingURL=leases.js.map

package/dist/home/leases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leases.js","sourceRoot":"","sources":["../../src/home/leases.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAGrF,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,IAAU;IAC1C,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;IACjE,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxD,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YAAC,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACrD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAClE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAmB,EAAE,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACnC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACxE,IAAI,mBAAmB,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;gBAC9C,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAU,EAAE,IAAY,EAAE,QAAQ,GAAG,SAAS;IAC7E,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC3E,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,oBAAoB,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACpH,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;QAC3B,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;QACxD,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,EAAE;QACV,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC;AACJ,CAAC"}

package/dist/home/legacy-account-paths.d.ts

@@ -0,0 +1,4 @@
+import type { Home } from './home.ts';
+import type { MigrationRecord } from './migration-record.ts';
+/** Only entries changed in the old home are imported. Keep step-7 credential isolation. */
+export declare function preserveAccountRelocations(home: Home, record: MigrationRecord, base: Record<string, unknown>, legacy: Record<string, unknown>, merged: Record<string, unknown>): void;

package/dist/home/legacy-account-paths.js

@@ -0,0 +1,41 @@
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { isDeepStrictEqual } from 'node:util';
+import { AGENT_ACCOUNT_ID_RE } from '../workspace/agent-accounts.js';
+import { migrationAccountSource } from './migration-account-source.js';
+function accountRows(value) {
+    return Array.isArray(value.accounts) ? value.accounts : [];
+}
+/** Only entries changed in the old home are imported. Keep step-7 credential isolation. */
+export function preserveAccountRelocations(home, record, base, legacy, merged) {
+    if (!Array.isArray(merged.accounts) || isDeepStrictEqual(base.accounts, legacy.accounts))
+        return;
+    const previous = new Map(accountRows(base).map(account => [account.id, account]));
+    const imported = new Map(accountRows(legacy).filter(account => !isDeepStrictEqual(previous.get(account.id), account))
+        .map(account => [account.id, account]));
+    merged.accounts = accountRows(merged).map(account => {
+        const source = imported.get(account.id);
+        if (!source || typeof source.configDir !== 'string')
+            return account;
+        const canonicalSource = migrationAccountSource(record.legacyRoot, source.configDir);
+        if (canonicalSource === undefined)
+            return account;
+        const id = String(account.id);
+        if (!AGENT_ACCOUNT_ID_RE.test(id))
+            throw new Error(`Cannot import account ${id}: invalid account ID.`);
+        if (record.notMoved.some(entry => entry.id === id && entry.configDir === source.configDir
+            && entry.reason === 'omp-profile-root-inside-legacy-home') && source.provider === 'omp')
+            return account;
+        const before = previous.get(id);
+        const destination = join(home.data, 'accounts', id);
+        const sameSource = typeof before?.configDir === 'string' && migrationAccountSource(record.legacyRoot, before.configDir) === canonicalSource;
+        const relocated = record.files.some(entry => entry.target?.kind === 'data' && entry.target.path.startsWith(`accounts/${id}/`));
+        // Empty account directories have no file mapping. Their migration-created destination,
+        // original registry entry, and absence from deferredAccounts prove the same relocation.
+        if (sameSource && !record.deferredAccounts.some(entry => entry.id === id) && (relocated || existsSync(destination))) {
+            return { ...account, configDir: destination };
+        }
+        throw new Error(`Cannot import account ${id}: its configDir is inside the old home and has no completed relocation. Ignore this change or migrate the account first.`);
+    });
+}
+//# sourceMappingURL=legacy-account-paths.js.map

package/dist/home/legacy-account-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-account-paths.js","sourceRoot":"","sources":["../../src/home/legacy-account-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAGvE,SAAS,WAAW,CAAC,KAA8B;IACjD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAqC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,0BAA0B,CAAC,IAAU,EAAE,MAAuB,EAAE,IAA6B,EAC3G,MAA+B,EAAE,MAA+B;IAChE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO;IACjG,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;SAClH,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC;QACpE,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACpF,IAAI,eAAe,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAClD,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,uBAAuB,CAAC,CAAC;QACvG,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;eACpF,KAAK,CAAC,MAAM,KAAK,qCAAqC,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK;YAAE,OAAO,OAAO,CAAC;QAC1G,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,OAAO,MAAM,EAAE,SAAS,KAAK,QAAQ,IAAI,sBAAsB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,eAAe,CAAC;QAC5I,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/H,uFAAuF;QACvF,wFAAwF;QACxF,IAAI,UAAU,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YACpH,OAAO,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;QAChD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,0HAA0H,CAAC,CAAC;IACzK,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/home/legacy-merge.d.ts

@@ -0,0 +1,3 @@
+type JsonObject = Record<string, unknown>;
+export declare function mergeLegacyJson(file: string, base: unknown, legacy: unknown, live: unknown): JsonObject;
+export {};

package/dist/home/legacy-merge.js

@@ -0,0 +1,45 @@
+import { isDeepStrictEqual } from 'node:util';
+function object(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('Import requires a JSON object in each home version.');
+    return value;
+}
+function keyedArray(value) {
+    if (!Array.isArray(value))
+        throw new Error('Import requires a registry array with unique entry IDs.');
+    const entries = new Map();
+    for (const entry of value) {
+        const id = object(entry).id;
+        if (typeof id !== 'string' || entries.has(id))
+            throw new Error('Import requires a registry array with unique entry IDs.');
+        entries.set(id, entry);
+    }
+    return entries;
+}
+/** Apply only legacy deltas. An explicit Import chooses legacy when both sides changed. */
+function mergeEntries(base, legacy, live) {
+    const before = keyedArray(base ?? []), after = keyedArray(legacy), merged = keyedArray(live ?? []);
+    for (const id of new Set([...before.keys(), ...after.keys()])) {
+        if (isDeepStrictEqual(before.get(id), after.get(id)))
+            continue;
+        if (after.has(id))
+            merged.set(id, after.get(id));
+        else
+            merged.delete(id);
+    }
+    return [...merged.values()];
+}
+export function mergeLegacyJson(file, base, legacy, live) {
+    const before = object(base), after = object(legacy), merged = new Map(Object.entries(object(live)));
+    const registry = file === 'config.json' ? 'projects' : file === 'agent-accounts.json' ? 'accounts' : undefined;
+    for (const key of new Set([...Object.keys(before), ...Object.keys(after)])) {
+        if (isDeepStrictEqual(before[key], after[key]) && Object.hasOwn(before, key) === Object.hasOwn(after, key))
+            continue;
+        if (!Object.hasOwn(after, key))
+            merged.delete(key);
+        else
+            merged.set(key, key === registry ? mergeEntries(before[key], after[key], merged.get(key)) : after[key]);
+    }
+    return Object.fromEntries(merged);
+}
+//# sourceMappingURL=legacy-merge.js.map

package/dist/home/legacy-merge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-merge.js","sourceRoot":"","sources":["../../src/home/legacy-merge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI9C,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACxI,OAAO,KAAmB,CAAC;AAC7B,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACtG,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC5B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC1H,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,2FAA2F;AAC3F,SAAS,YAAY,CAAC,IAAa,EAAE,MAAe,EAAE,IAAa;IACjE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACnG,KAAK,MAAM,EAAE,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAE,SAAS;QAC/D,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;;YAC5C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAa,EAAE,MAAe,EAAE,IAAa;IACzF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpG,MAAM,QAAQ,GAAG,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/G,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,IAAI,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,SAAS;QACrH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;;YAC9C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/home/legacy-recovery.d.ts

@@ -0,0 +1,5 @@
+import type { HomeRecoveryFile } from '../contract/index.js';
+import type { Home } from './home.ts';
+export declare function getLegacyRecovery(home: Home, enabled: boolean): HomeRecoveryFile[];
+/** Both roots remain locked through the merge and baseline publication; no await under a lock. */
+export declare function resolveLegacyRecovery(home: Home, file: string, detectedAt: string | undefined, action: 'import' | 'ignore', enabled: boolean): void;

package/dist/home/legacy-recovery.js

@@ -0,0 +1,154 @@
+import { join } from 'node:path';
+import { statSync } from 'node:fs';
+import { z } from 'zod';
+import { homeFileSchema } from '../contract/index.js';
+import { HomeStore } from './store.js';
+import { homeFileKind, homeFileLocation } from './file-location.js';
+import { assertHomePath } from './boundary.js';
+import { homeChanged } from './changes.js';
+import { VersionLog, readBytes } from './version-log.js';
+import { replacePrivate } from './private-files.js';
+import { migrationPrivacy } from './migration-files.js';
+import { writeMigrationRecord } from './migration-record.js';
+import { legacyEntries, legacyMigration, readLegacySource } from './legacy-source.js';
+import { mergeLegacyJson } from './legacy-merge.js';
+import { preserveAccountRelocations } from './legacy-account-paths.js';
+const incidentSchema = z.object({ restoreHash: z.string().nullable(), observedHash: z.string().nullable(), detectedAt: z.iso.datetime() });
+const baseChecks = new Map();
+function journal(home, file) {
+    const { root } = homeFileLocation(home, file);
+    const log = new VersionLog(root, file, migrationPrivacy);
+    assertHomePath(root, join(log.directory, 'LEGACY'));
+    return log;
+}
+function incident(log, source) {
+    const value = log.record('LEGACY');
+    const previous = value === undefined ? undefined : incidentSchema.parse(value);
+    if (previous?.restoreHash === source.entry.hash && previous.observedHash === source.hash)
+        return previous;
+    const next = { restoreHash: source.entry.hash, observedHash: source.hash,
+        detectedAt: new Date(Math.max(Date.now(), previous ? Date.parse(previous.detectedAt) + 1 : 0)).toISOString() };
+    log.setRecord('LEGACY', next);
+    return next;
+}
+function importable(source) {
+    const { entry } = source;
+    return source.regular && source.bytes !== null && /\.json(?:\.bak)?$/.test(entry.path)
+        && entry.target?.path === entry.path && entry.target.kind === homeFileKind(entry.path);
+}
+/** Retained versions are immutable; metadata changes invalidate their hash/JSON check. */
+function baseAvailable(log, flag) {
+    // A recorded absence is the valid empty base for a file created after migration.
+    if (flag.restoreHash === null)
+        return true;
+    try {
+        const stat = statSync(join(log.directory, flag.restoreHash), { bigint: true });
+        const stamp = `${flag.restoreHash}:${stat.dev}:${stat.ino}:${stat.size}:${stat.mtimeNs}:${stat.ctimeNs}`;
+        const cached = baseChecks.get(log.directory);
+        if (cached?.stamp === stamp)
+            return cached.available;
+        const bytes = log.recoveryBytes(flag); // Read failures are transient: the outer catch retries next poll.
+        let available = false;
+        try {
+            const base = bytes === null ? null : JSON.parse(bytes.toString('utf8'));
+            available = base !== null && typeof base === 'object' && !Array.isArray(base);
+        }
+        catch { /* Invalid JSON stays Ignore-only without another read per poll. */ }
+        baseChecks.set(log.directory, { stamp, available });
+        return available;
+    }
+    catch {
+        baseChecks.delete(log.directory);
+        return false;
+    }
+}
+export function getLegacyRecovery(home, enabled) {
+    const files = [];
+    try {
+        const record = legacyMigration(home, enabled);
+        if (!record)
+            return files;
+        const store = new HomeStore(home);
+        for (const entry of legacyEntries(record)) {
+            try {
+                const source = readLegacySource(record, entry);
+                if (source.hash === entry.hash)
+                    continue;
+                const state = store.transaction(() => {
+                    const log = journal(home, entry.path);
+                    const flag = incident(log, source);
+                    return { detectedAt: flag.detectedAt, canImport: importable(source) && baseAvailable(log, flag) };
+                }, [homeFileLocation(home, entry.path).path]);
+                files.push({ file: entry.path, reason: 'legacy-change', canRestore: false, ...state });
+            }
+            catch { /* One unreadable legacy file or auxiliary journal must not hide other rows. */ }
+        }
+    }
+    catch { /* A missing or unreadable migration record leaves the cockpit available. */ }
+    return files;
+}
+function retainBase(home, log, source) {
+    if (source.bytes === null)
+        return;
+    const path = join(log.directory, source.hash);
+    assertHomePath(log.root, path);
+    // Retain the exact legacy bytes without changing HEAD or the live file's recovery state.
+    replacePrivate(path, source.bytes, { layout: home.layout });
+}
+function recordSource(home, record, source) {
+    const next = { ...source.entry, hash: source.hash, mtimeMs: source.mtimeMs };
+    const index = record.files.findIndex(entry => entry.path === next.path);
+    if (index < 0)
+        record.files.push(next);
+    else
+        record.files[index] = next;
+    writeMigrationRecord(home, record);
+    homeChanged(home.root);
+}
+/** Both roots remain locked through the merge and baseline publication; no await under a lock. */
+export function resolveLegacyRecovery(home, file, detectedAt, action, enabled) {
+    homeFileSchema.parse(file);
+    if (!enabled) {
+        if (action === 'import')
+            throw new Error('Legacy home import is not enabled.');
+        return;
+    }
+    const store = new HomeStore(home, { requireBackup: true });
+    const path = homeFileLocation(home, file).path;
+    store.transaction(() => {
+        const record = legacyMigration(home, enabled);
+        const entry = record && legacyEntries(record).find(entry => entry.path === file);
+        if (!record || !entry)
+            return;
+        const source = readLegacySource(record, entry);
+        if (source.hash === entry.hash)
+            return; // A resolved retry does not rewrite a live file.
+        const log = journal(home, file);
+        const flag = incident(log, source);
+        if (detectedAt !== undefined && flag.detectedAt !== detectedAt)
+            throw new Error('Recovery incident changed. Refresh and try again.');
+        if (action === 'import') {
+            if (!importable(source))
+                throw new Error('This legacy file cannot be imported. Ignore it to keep the live file.');
+            assertHomePath(record.legacyRoot, join(record.legacyRoot, file));
+            let base;
+            try {
+                base = log.recoveryBytes({ ...flag, restoreHash: entry.hash });
+            }
+            catch {
+                throw new Error('The legacy merge base is missing or corrupt. Ignore this change or recover the base version before importing.');
+            }
+            const current = readBytes(path);
+            const before = base === null ? {} : JSON.parse(base.toString('utf8'));
+            const legacy = JSON.parse(source.bytes.toString('utf8'));
+            const merged = mergeLegacyJson(file, before, legacy, current === null ? {} : JSON.parse(current.toString('utf8')));
+            if (file === 'agent-accounts.json')
+                preserveAccountRelocations(home, record, before, legacy, merged);
+            // HomeStore takes its existing rotating backup before publishing merged bytes.
+            store.writeJson(path, merged);
+        }
+        retainBase(home, log, source);
+        recordSource(home, record, source);
+    }, [home.workspaceConfig, home.workspaceUiState, path]);
+}
+//# sourceMappingURL=legacy-recovery.js.map

package/dist/home/legacy-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-recovery.js","sourceRoot":"","sources":["../../src/home/legacy-recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAE5E,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAqB,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAwB,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAqB,MAAM,oBAAoB,CAAC;AACzG,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAEvE,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC3I,MAAM,UAAU,GAAG,IAAI,GAAG,EAAiD,CAAC;AAE5E,SAAS,OAAO,CAAC,IAAU,EAAE,IAAY;IACvC,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACzD,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,GAAe,EAAE,MAAoB;IACrD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/E,IAAI,QAAQ,EAAE,WAAW,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,YAAY,KAAK,MAAM,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC;IAC1G,MAAM,IAAI,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI;QACtE,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IACjH,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,MAAoB;IACtC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IACzB,OAAO,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;WACjF,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC3F,CAAC;AAED,0FAA0F;AAC1F,SAAS,aAAa,CAAC,GAAe,EAAE,IAAkB;IACxD,iFAAiF;IACjF,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACzG,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,KAAK,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC,SAAS,CAAC;QACrD,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,kEAAkE;QACzG,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAY,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACjF,SAAS,GAAG,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC,CAAC,mEAAmE,CAAC,CAAC;QAC/E,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACpD,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAU,EAAE,OAAgB;IAC5D,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;oBAAE,SAAS;gBACzC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;oBACnC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;oBACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;oBACnC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;gBACpG,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YACzF,CAAC;YAAC,MAAM,CAAC,CAAC,+EAA+E,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,4EAA4E,CAAC,CAAC;IACxF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,IAAU,EAAE,GAAe,EAAE,MAAoB;IACnE,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,IAAK,CAAC,CAAC;IAC/C,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,yFAAyF;IACzF,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,YAAY,CAAC,IAAU,EAAE,MAAuB,EAAE,MAAoB;IAC7E,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;QAClC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAChC,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,qBAAqB,CAAC,IAAU,EAAE,IAAY,EAAE,UAA8B,EAAE,MAA2B,EAAE,OAAgB;IAC3I,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC/E,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC;IAC/C,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;QACrB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACjF,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;YAAE,OAAO;QAC9B,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;YAAE,OAAO,CAAC,iDAAiD;QACzF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,IAAI,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACrI,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;YAClH,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;YACjE,IAAI,IAAmB,CAAC;YACxB,IAAI,CAAC;gBAAC,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YACvE,MAAM,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,+GAA+G,CAAC,CAAC;YAAC,CAAC;YAC3I,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,MAAM,GAA4B,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/F,MAAM,MAAM,GAA4B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACnF,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACnH,IAAI,IAAI,KAAK,qBAAqB;gBAAE,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACrG,+EAA+E;YAC/E,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9B,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/home/legacy-source.d.ts

@@ -0,0 +1,15 @@
+import type { Home } from './home.ts';
+import { type MigrationFile, type MigrationRecord } from './migration-record.ts';
+export interface LegacySource {
+    entry: MigrationFile;
+    bytes: Buffer | null;
+    hash: string | null;
+    mtimeMs: number | null;
+    regular: boolean;
+}
+/** The release gate precedes even the marker and legacy filesystem reads. */
+export declare function legacyMigration(home: Home, enabled: boolean): MigrationRecord | undefined;
+export declare function legacyEntries(record: MigrationRecord): MigrationFile[];
+/** Links hash as links, as in migration. They can be ignored but are never imported. */
+export declare function readLegacySource(record: MigrationRecord, entry: MigrationFile): LegacySource;
+export declare function legacyWatchDirectories(home: Home, enabled: boolean): string[];

package/dist/home/legacy-source.js

@@ -0,0 +1,57 @@
+import { lstatSync, readlinkSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { homeFileSchema } from '../contract/index.js';
+import { homePaths } from './home.js';
+import { registryFiles } from './entry-authorization.js';
+import { homeFileKind } from './file-location.js';
+import { readInstallMarker } from './install-marker.js';
+import { readMigrationRecord } from './migration-record.js';
+import { digest, readBytes } from './version-log.js';
+/** The release gate precedes even the marker and legacy filesystem reads. */
+export function legacyMigration(home, enabled) {
+    if (!enabled)
+        return;
+    const marker = readInstallMarker(home.config);
+    if (marker?.state !== 'committed' || !marker.migratedFrom)
+        return;
+    const record = readMigrationRecord(home);
+    if (!record || resolve(record.legacyRoot) !== resolve(marker.migratedFrom))
+        return;
+    return record;
+}
+export function legacyEntries(record) {
+    const entries = new Map(record.files.map(entry => [entry.path, entry]));
+    // FRESH records have no files. Discover later creations without creating a legacy home.
+    const legacy = homePaths(record.legacyRoot, record.legacyRoot, undefined);
+    for (const path of registryFiles(legacy)) {
+        const file = path.slice(record.legacyRoot.length + 1).replaceAll('\\', '/');
+        if (!entries.has(file) && homeFileSchema.safeParse(file).success)
+            entries.set(file, { path: file, hash: null, mtimeMs: null, target: { kind: homeFileKind(file), path: file } });
+    }
+    return [...entries.values()].filter(entry => entry.target !== null && homeFileSchema.safeParse(entry.path).success);
+}
+/** Links hash as links, as in migration. They can be ignored but are never imported. */
+export function readLegacySource(record, entry) {
+    const path = join(record.legacyRoot, entry.path);
+    try {
+        const stat = lstatSync(path);
+        const bytes = stat.isSymbolicLink() ? Buffer.from(readlinkSync(path)) : readBytes(path);
+        return { entry, bytes, hash: digest(bytes), mtimeMs: stat.mtimeMs, regular: stat.isFile() };
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+        return { entry, bytes: null, hash: null, mtimeMs: null, regular: false };
+    }
+}
+export function legacyWatchDirectories(home, enabled) {
+    try {
+        const record = legacyMigration(home, enabled);
+        return record ? [...new Set([record.legacyRoot, join(record.legacyRoot, 'remote-settings'),
+                join(record.legacyRoot, 'server-instances'), ...legacyEntries(record).map(entry => dirname(join(record.legacyRoot, entry.path)))])] : [];
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=legacy-source.js.map