@hearsay-tools/squawk 0.0.0-stage → 0.17.0-dev.5685

package/dist/home/migration-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-plan.js","sourceRoot":"","sources":["../../src/home/migration-plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAE5E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,yBAAyB,EAAyB,MAAM,yBAAyB,CAAC;AACjI,OAAO,EAAE,cAAc,EAA4C,MAAM,uBAAuB,CAAC;AASjG,MAAM,OAAO,GAAG,2IAA2I,CAAC;AAC5J,MAAM,CAAC,MAAM,eAAe,GAAG,wEAAwE,CAAC;AAExG,gGAAgG;AAChG,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,CAAC,aAAa,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;WAC5H,oGAAoG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IACtF,MAAM,YAAY,GAAG,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,IAAI,YAAY;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,YAAY,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAClG,IAAI,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7F,IAAI,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACpF,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,mBAAmB,CAAC,MAAY,EAAE,MAAY;IAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACrG,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAChH,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,yBAAyB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;WAC5D,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC3F,IAAI,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,MAAM,IAAI,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YAC9H,IAAI,OAAO;gBAAE,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,OAAO,CAAC,EAAE,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QAChI,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ;QACjE,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;aACzH,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC;iBAC9F,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,qCAA8C,EAAE,CAAC,CAAC,CAAC;QAC9H,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC3C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,qBAAqB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC;QACzG,KAAK,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;eACtF,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;AACvH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAmB;IACpD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;QACpF,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AACjI,CAAC"}

package/dist/home/migration-record.d.ts

@@ -0,0 +1,79 @@
+import { z } from 'zod';
+import type { Home } from './home.ts';
+export declare const migrationRootsSchema: z.ZodObject<{
+    config: z.ZodString;
+    state: z.ZodString;
+    data: z.ZodString;
+    cache: z.ZodString;
+    runtime: z.ZodString;
+}, z.core.$strip>;
+export declare const movedHomeSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    roots: z.ZodObject<{
+        config: z.ZodString;
+        state: z.ZodString;
+        data: z.ZodString;
+        cache: z.ZodString;
+        runtime: z.ZodString;
+    }, z.core.$strip>;
+    migratedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export declare const migrationFileSchema: z.ZodObject<{
+    path: z.ZodString;
+    hash: z.ZodNullable<z.ZodString>;
+    mtimeMs: z.ZodNullable<z.ZodNumber>;
+    target: z.ZodNullable<z.ZodObject<{
+        kind: z.ZodEnum<{
+            config: "config";
+            data: "data";
+            state: "state";
+        }>;
+        path: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$loose>;
+export declare const migrationRecordSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    legacyRoot: z.ZodString;
+    roots: z.ZodObject<{
+        config: z.ZodString;
+        state: z.ZodString;
+        data: z.ZodString;
+        cache: z.ZodString;
+        runtime: z.ZodString;
+    }, z.core.$strip>;
+    createdAt: z.ZodISODateTime;
+    backup: z.ZodString;
+    files: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        hash: z.ZodNullable<z.ZodString>;
+        mtimeMs: z.ZodNullable<z.ZodNumber>;
+        target: z.ZodNullable<z.ZodObject<{
+            kind: z.ZodEnum<{
+                config: "config";
+                data: "data";
+                state: "state";
+            }>;
+            path: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$loose>>;
+    stagedAt: z.ZodOptional<z.ZodISODateTime>;
+    deferredAccounts: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        configDir: z.ZodString;
+    }, z.core.$strip>>;
+    notMoved: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        configDir: z.ZodString;
+        reason: z.ZodEnum<{
+            "duplicate-account-id": "duplicate-account-id";
+            "omp-profile-root-inside-legacy-home": "omp-profile-root-inside-legacy-home";
+        }>;
+    }, z.core.$strip>>;
+}, z.core.$loose>;
+export type MigrationRecord = z.infer<typeof migrationRecordSchema>;
+export type MigrationFile = z.infer<typeof migrationFileSchema>;
+export declare function migrationRoots(home: Home): z.infer<typeof migrationRootsSchema>;
+/** One versioned reader/writer pair, also used by the legacy canary's Import and Ignore. */
+export declare function readMigrationRecord(home: Home): MigrationRecord | undefined;
+/** Caller owns config then state write.lock; pending homes permit only migration-owned writes. */
+export declare function writeMigrationRecord(home: Home, value: MigrationRecord): void;

package/dist/home/migration-record.js

@@ -0,0 +1,39 @@
+import { join } from 'node:path';
+import { z } from 'zod';
+import { assertHomePath } from './boundary.js';
+import { assertHomeReadable } from './install-marker.js';
+import { migrationPrivacy } from './migration-files.js';
+import { replacePrivate } from './private-files.js';
+import { readBytes } from './version-log.js';
+const relativePath = z.string().min(1).refine(path => !path.includes('\\') && !path.startsWith('/')
+    && !path.split('/').some(part => part === '..' || part === '.' || part === '') && !/^[a-z]:/i.test(path));
+export const migrationRootsSchema = z.object({ config: z.string(), state: z.string(), data: z.string(), cache: z.string(), runtime: z.string() });
+export const movedHomeSchema = z.object({ version: z.literal(1), roots: migrationRootsSchema, migratedAt: z.iso.datetime() });
+export const migrationFileSchema = z.object({
+    path: relativePath, hash: z.string().regex(/^[a-f0-9]{64}$/).nullable(), mtimeMs: z.number().nullable(),
+    target: z.object({ kind: z.enum(['config', 'state', 'data']), path: relativePath }).nullable(),
+}).passthrough();
+export const migrationRecordSchema = z.object({
+    version: z.literal(1), legacyRoot: z.string(), roots: migrationRootsSchema,
+    createdAt: z.iso.datetime(), backup: z.string(), files: z.array(migrationFileSchema),
+    /** Set only when a commit:false run finished its copy; boot serves such a pending home read-only. */
+    stagedAt: z.iso.datetime().optional(),
+    deferredAccounts: z.array(z.object({ id: z.string().regex(/^[a-z0-9][a-z0-9-]{0,63}$/), configDir: z.string() })),
+    notMoved: z.array(z.object({ id: z.string(), configDir: z.string(), reason: z.enum(['omp-profile-root-inside-legacy-home', 'duplicate-account-id']) })),
+}).passthrough();
+export function migrationRoots(home) {
+    return { config: home.config, state: home.state, data: home.data, cache: home.cache, runtime: home.runtime };
+}
+/** One versioned reader/writer pair, also used by the legacy canary's Import and Ignore. */
+export function readMigrationRecord(home) {
+    const bytes = readBytes(join(home.state, 'migration.json'));
+    return bytes === null ? undefined : migrationRecordSchema.parse(JSON.parse(bytes.toString('utf8')));
+}
+/** Caller owns config then state write.lock; pending homes permit only migration-owned writes. */
+export function writeMigrationRecord(home, value) {
+    assertHomeReadable(home.config);
+    const path = join(home.state, 'migration.json');
+    assertHomePath(home.state, path);
+    replacePrivate(path, `${JSON.stringify(migrationRecordSchema.parse(value), null, 2)}\n`, migrationPrivacy);
+}
+//# sourceMappingURL=migration-record.js.map

package/dist/home/migration-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-record.js","sourceRoot":"","sources":["../../src/home/migration-record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;OAC9F,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5G,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAClJ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC9H,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC/F,CAAC,CAAC,WAAW,EAAE,CAAC;AACjB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,oBAAoB;IAC1E,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACpF,qGAAqG;IACrG,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjH,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,qCAAqC,EAAE,sBAAsB,CAAC,CAAC,EAAE,CAAC,CAAC;CACxJ,CAAC,CAAC,WAAW,EAAE,CAAC;AAIjB,MAAM,UAAU,cAAc,CAAC,IAAU;IACvC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AAC/G,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,mBAAmB,CAAC,IAAU;IAC5C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC5D,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,oBAAoB,CAAC,IAAU,EAAE,KAAsB;IACrE,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAChD,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,cAAc,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;AAC7G,CAAC"}

package/dist/home/private-files.d.ts

@@ -0,0 +1,13 @@
+import type { HomeLayout } from './kind-roots.ts';
+export interface PrivateFileOptions {
+    platform?: NodeJS.Platform;
+    layout?: HomeLayout;
+}
+/** Replace the Windows DACL, rather than adding a grant to an inherited public ACL. */
+export declare function protectPrivatePath(path: string, directory: boolean, { platform, layout, }?: PrivateFileOptions): void;
+export declare function privateDirectory(path: string, options?: PrivateFileOptions): void;
+export declare function atomicTmpPath(path: string): string;
+/** Flush the directory entry as well as file bytes. Windows does not open directories. */
+export declare function syncDirectory(path: string): void;
+/** Private, durable atomic replacement. A failed write removes only its own staging file. */
+export declare function replacePrivate(path: string, bytes: string | Buffer, options?: PrivateFileOptions): void;

package/dist/home/private-files.js

@@ -0,0 +1,113 @@
+import { POWERSHELL, powershellEnv } from '../detached-process.js';
+import { execFileSync } from 'node:child_process';
+import { REBRAND_SWITCH } from './switch.js';
+import { randomBytes } from 'node:crypto';
+import { closeSync, existsSync, fsyncSync, mkdirSync, openSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+/** Replace the Windows DACL, rather than adding a grant to an inherited public ACL. */
+export function protectPrivatePath(path, directory, { platform = process.platform, layout = REBRAND_SWITCH ? 'split' : 'legacy', } = {}) {
+    if (platform !== 'win32' || layout !== 'split')
+        return;
+    const security = directory ? 'DirectorySecurity' : 'FileSecurity';
+    const inheritance = directory ? 'ContainerInherit, ObjectInherit' : 'None';
+    // PowerShell also treats typographic apostrophes as quote delimiters.
+    const literal = "'" + path.replace(/['\u2018-\u201B]/g, quote => quote + quote) + "'";
+    // A fresh descriptor has no old explicit grants. Disable inheritance and grant one SID.
+    const script = `$ErrorActionPreference = 'Stop';
+$acl = New-Object System.Security.AccessControl.${security};
+$acl.SetAccessRuleProtection($true, $false);
+$sid = [System.Security.Principal.WindowsIdentity]::GetCurrent().User;
+$rule = New-Object System.Security.AccessControl.FileSystemAccessRule($sid, 'FullControl', '${inheritance}', 'None', 'Allow');
+$acl.AddAccessRule($rule);
+Set-Acl -LiteralPath ${literal} -AclObject $acl;`;
+    execFileSync(POWERSHELL, ['-NoProfile', '-NonInteractive', '-Command', script], { env: powershellEnv(), windowsHide: true, stdio: 'pipe' });
+}
+const protectedDirectories = new Map();
+function directoryIdentity(path) {
+    try {
+        const { dev, ino } = statSync(path, { bigint: true });
+        return { dev, ino };
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Cache only successful grants for one directory identity; replacements need a fresh grant. */
+function protectDirectoryOnce(path, options, created) {
+    const platform = options.platform ?? process.platform;
+    const layout = options.layout ?? (REBRAND_SWITCH ? 'split' : 'legacy');
+    if (platform !== 'win32' || layout !== 'split')
+        return;
+    const canonical = realpathSync(path).toLowerCase();
+    const identity = directoryIdentity(path);
+    const previous = protectedDirectories.get(canonical);
+    if (!created && identity && previous?.dev === identity.dev && previous.ino === identity.ino)
+        return;
+    protectedDirectories.delete(canonical);
+    protectPrivatePath(path, true, options);
+    if (identity)
+        protectedDirectories.set(canonical, identity);
+}
+/** The directories from `path`'s nearest existing ancestor down to `path`, outermost first. */
+function missingDirectories(path) {
+    const missing = [];
+    for (let directory = resolve(path); !existsSync(directory);) {
+        missing.unshift(directory);
+        const parent = dirname(directory);
+        if (parent === directory)
+            break;
+        directory = parent;
+    }
+    return missing;
+}
+export function privateDirectory(path, options = {}) {
+    // Walk from `path` itself: on Windows the first-created path that mkdirSync returns does not
+    // share `path`'s form, so a walk relative to it named a drive as a child directory.
+    const missing = missingDirectories(path);
+    const created = mkdirSync(path, { recursive: true, mode: 0o700 });
+    if (!created || !missing.length) {
+        protectDirectoryOnce(path, options, false);
+        return;
+    }
+    syncDirectory(dirname(missing[0]));
+    for (const directory of missing) {
+        protectDirectoryOnce(directory, options, true);
+        syncDirectory(directory);
+    }
+}
+export function atomicTmpPath(path) {
+    return `${path}.${process.pid}.${randomBytes(4).toString('hex')}.tmp`;
+}
+/** Flush the directory entry as well as file bytes. Windows does not open directories. */
+export function syncDirectory(path) {
+    if (process.platform === 'win32')
+        return;
+    const fd = openSync(path, 'r');
+    try {
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Private, durable atomic replacement. A failed write removes only its own staging file. */
+export function replacePrivate(path, bytes, options = {}) {
+    privateDirectory(dirname(path), options);
+    const stage = atomicTmpPath(path);
+    try {
+        const fd = openSync(stage, 'wx', 0o600);
+        try {
+            writeFileSync(fd, bytes);
+            fsyncSync(fd);
+        }
+        finally {
+            closeSync(fd);
+        }
+        renameSync(stage, path);
+        syncDirectory(dirname(path));
+    }
+    finally {
+        rmSync(stage, { force: true });
+    }
+}
+//# sourceMappingURL=private-files.js.map

package/dist/home/private-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-files.js","sourceRoot":"","sources":["../../src/home/private-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3I,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAO7C,uFAAuF;AACvF,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,SAAkB,EAAE,EACnE,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,GAC1E,GAAuB,EAAE;IACxB,IAAI,QAAQ,KAAK,OAAO,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO;IACvD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,cAAc,CAAC;IAClE,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3E,sEAAsE;IACtE,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC;IACtF,wFAAwF;IACxF,MAAM,MAAM,GAAG;kDACiC,QAAQ;;;8FAGoC,WAAW;;uBAElF,OAAO,mBAAmB,CAAC;IAChD,YAAY,CAAC,UAAU,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9I,CAAC;AAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAwC,CAAC;AAE7E,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,gGAAgG;AAChG,SAAS,oBAAoB,CAAC,IAAY,EAAE,OAA2B,EAAE,OAAgB;IACvF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACvE,IAAI,QAAQ,KAAK,OAAO,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO;IACvD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,IAAI,QAAQ,IAAI,QAAQ,EAAE,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;QAAE,OAAO;IACpG,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACvC,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,QAAQ;QAAE,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC9D,CAAC;AAED,+FAA+F;AAC/F,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC;QAC5D,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM;QAChC,SAAS,GAAG,MAAM,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAO,GAAuB,EAAE;IAC7E,6FAA6F;IAC7F,oFAAoF;IACpF,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IACxF,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IACpC,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;QAChC,oBAAoB,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/C,aAAa,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;AACxE,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AACnD,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,KAAsB,EAAE,OAAO,GAAuB,EAAE;IACnG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC;YAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAC3E,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACxB,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/B,CAAC;YAAS,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AAC/C,CAAC"}

package/dist/home/process-identity.d.ts

@@ -0,0 +1,2 @@
+/** A process never changes its start identity. Cache absence too, without IO at import time. */
+export declare function ownProcessStartToken(): string | undefined;

package/dist/home/process-identity.js

@@ -0,0 +1,8 @@
+import { processStartToken } from '../delegation/process-liveness.js';
+let identity;
+/** A process never changes its start identity. Cache absence too, without IO at import time. */
+export function ownProcessStartToken() {
+    identity ??= { token: processStartToken(process.pid) };
+    return identity.token;
+}
+//# sourceMappingURL=process-identity.js.map

package/dist/home/process-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-identity.js","sourceRoot":"","sources":["../../src/home/process-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAEtE,IAAI,QAAmD,CAAC;AAExD,gGAAgG;AAChG,MAAM,UAAU,oBAAoB;IAClC,QAAQ,KAAK,EAAE,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;IACvD,OAAO,QAAQ,CAAC,KAAK,CAAC;AACxB,CAAC"}

package/dist/home/protected-roots.d.ts

@@ -0,0 +1,25 @@
+/**
+ * The legacy home and every platform default kind root of one account. Pure.
+ * `scripts/test-install-marker.mjs` keeps a copy; a test holds the two equal.
+ */
+export declare function protectedRootsFor(accountHome: string, env: {
+    TMPDIR?: string | undefined;
+}, platform: NodeJS.Platform): string[];
+/**
+ * The account's real cezar roots. HOME and a caller's env can name a sandbox, so the account home
+ * comes from the OS. Throws when the OS gives no absolute home: relative roots would protect nothing.
+ */
+export declare function accountProtectedRoots(): string[];
+/**
+ * True when `destination` is `root` or below it. Windows and default macOS volumes ignore case, so
+ * there an absent `.CEZAR` still names `.cezar`. `scripts/test-install-marker.mjs` keeps a copy.
+ */
+export declare function insideRoot(destination: string, root: string, platform: NodeJS.Platform): boolean;
+/**
+ * Throws `refusal()` when `path` is, or is below, an account root. Existing ancestors and
+ * symlink aliases are canonicalized. An unverifiable account home, an unreadable lookup or a
+ * dangling link fails closed.
+ */
+export declare function assertOutsideAccountHome(path: string, refusal: () => Error): void;
+/** A test install marker belongs to a sandbox. Refuse an account root in every process, test runner or not. */
+export declare function assertTestHomeOutsideAccountHome(root: string): void;

package/dist/home/protected-roots.js

@@ -0,0 +1,91 @@
+import { logPrefix } from './display.js';
+import { lstatSync, realpathSync } from 'node:fs';
+import { userInfo } from 'node:os';
+import { basename, dirname, isAbsolute, join, posix, resolve, win32 } from 'node:path';
+import { nativePathPlatform, platformKindRoots } from './kind-roots.js';
+/**
+ * The legacy home and every platform default kind root of one account. Pure.
+ * `scripts/test-install-marker.mjs` keeps a copy; a test holds the two equal.
+ */
+export function protectedRootsFor(accountHome, env, platform) {
+    const { join } = platform === 'win32' ? win32 : posix;
+    return [join(accountHome, '.cezar'), ...Object.values(platformKindRoots(accountHome, { TMPDIR: env.TMPDIR }, platform))];
+}
+/**
+ * The account's real cezar roots. HOME and a caller's env can name a sandbox, so the account home
+ * comes from the OS. Throws when the OS gives no absolute home: relative roots would protect nothing.
+ */
+export function accountProtectedRoots() {
+    const accountHome = userInfo().homedir;
+    if (!accountHome || !isAbsolute(accountHome))
+        throw new Error(`${logPrefix()} the OS gives no absolute account home`);
+    return protectedRootsFor(accountHome, { TMPDIR: process.env.TMPDIR }, nativePathPlatform);
+}
+/**
+ * True when `destination` is `root` or below it. Windows and default macOS volumes ignore case, so
+ * there an absent `.CEZAR` still names `.cezar`. `scripts/test-install-marker.mjs` keeps a copy.
+ */
+export function insideRoot(destination, root, platform) {
+    const ignoreCase = platform === 'win32' || platform === 'darwin';
+    const path = ignoreCase ? destination.toLowerCase() : destination;
+    const home = ignoreCase ? root.toLowerCase() : root;
+    const separator = platform === 'win32' ? '\\' : '/';
+    return path === home || path.startsWith(home.endsWith(separator) ? home : home + separator);
+}
+/**
+ * Throws `refusal()` when `path` is, or is below, an account root. Existing ancestors and
+ * symlink aliases are canonicalized. An unverifiable account home, an unreadable lookup or a
+ * dangling link fails closed.
+ */
+export function assertOutsideAccountHome(path, refusal) {
+    // Resolve existing ancestors too: the destination itself may not exist yet.
+    function canonicalTarget(target, rejectDangling = true) {
+        let ancestor = resolve(target);
+        const remaining = [];
+        for (;;) {
+            try {
+                return join(realpathSync(ancestor), ...remaining);
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw refusal();
+            }
+            // A dangling link has no canonical target; fail closed instead of treating it as a missing directory.
+            try {
+                if (lstatSync(ancestor).isSymbolicLink()) {
+                    if (!rejectDangling)
+                        return resolve(target);
+                    throw refusal();
+                }
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw refusal();
+            }
+            const parent = dirname(ancestor);
+            if (parent === ancestor)
+                throw refusal();
+            remaining.unshift(basename(ancestor));
+            ancestor = parent;
+        }
+    }
+    let roots;
+    try {
+        roots = accountProtectedRoots();
+    }
+    catch {
+        throw refusal();
+    }
+    const destination = canonicalTarget(path);
+    for (const root of roots) {
+        if (insideRoot(destination, canonicalTarget(root, false), nativePathPlatform))
+            throw refusal();
+    }
+}
+/** A test install marker belongs to a sandbox. Refuse an account root in every process, test runner or not. */
+export function assertTestHomeOutsideAccountHome(root) {
+    assertOutsideAccountHome(root, () => new Error(`${logPrefix()} refusing to write a test install marker to ${root}: it is the account's real cezar home, ` +
+        'or the OS gives no account home to check it against. ' +
+        'Use a sandbox directory for a test home.'));
+}
+//# sourceMappingURL=protected-roots.js.map

package/dist/home/protected-roots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-roots.js","sourceRoot":"","sources":["../../src/home/protected-roots.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAExE;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB,EAAE,GAAoC,EAAE,QAAyB;IACpH,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC3H,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,WAAW,GAAG,QAAQ,EAAE,CAAC,OAAO,CAAC;IACvC,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,EAAE,wCAAwC,CAAC,CAAC;IACtH,OAAO,iBAAiB,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAC5F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,WAAmB,EAAE,IAAY,EAAE,QAAyB;IACrF,MAAM,UAAU,GAAG,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ,CAAC;IACjE,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;IAClE,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,MAAM,SAAS,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACpD,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;AAC9F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,OAAoB;IACzE,4EAA4E;IAC5E,SAAS,eAAe,CAAC,MAAc,EAAE,cAAc,GAAG,IAAI;QAC5D,IAAI,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,SAAS,CAAC;YACR,IAAI,CAAC;gBAAC,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACxE,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,OAAO,EAAE,CAAC;YAC1E,CAAC;YACD,sGAAsG;YACtG,IAAI,CAAC;gBACH,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;oBACzC,IAAI,CAAC,cAAc;wBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC5C,MAAM,OAAO,EAAE,CAAC;gBAClB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,OAAO,EAAE,CAAC;YAC1E,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,MAAM,KAAK,QAAQ;gBAAE,MAAM,OAAO,EAAE,CAAC;YACzC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACtC,QAAQ,GAAG,MAAM,CAAC;QACpB,CAAC;IACH,CAAC;IACD,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QAAC,KAAK,GAAG,qBAAqB,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,OAAO,EAAE,CAAC;IAAC,CAAC;IACnE,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,UAAU,CAAC,WAAW,EAAE,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,kBAAkB,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;IACjG,CAAC;AACH,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,gCAAgC,CAAC,IAAY;IAC3D,wBAAwB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,KAAK,CAC5C,GAAG,SAAS,EAAE,+CAA+C,IAAI,yCAAyC;QACxG,uDAAuD;QACvD,0CAA0C,CAC7C,CAAC,CAAC;AACL,CAAC"}

package/dist/home/recovery-watch.d.ts

@@ -0,0 +1,3 @@
+import type { Home } from './home.ts';
+/** A subscription owns its watchers; no timer or watcher survives the last listener. */
+export declare function subscribeHomeRecovery(home: Home, listener: () => void, legacyCanary?: boolean): () => void;

package/dist/home/recovery-watch.js

@@ -0,0 +1,75 @@
+import { existsSync, watch } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { onHomeChange } from './changes.js';
+import { getHomeRecovery, recoveryFiles } from './recovery.js';
+import { homeFileLocation } from './file-location.js';
+import { legacyWatchDirectories } from './legacy-source.js';
+import { REBRAND_SWITCH } from './switch.js';
+/** A subscription owns its watchers; no timer or watcher survives the last listener. */
+export function subscribeHomeRecovery(home, listener, legacyCanary = REBRAND_SWITCH) {
+    let closed = false;
+    let scheduled = false;
+    const watchers = new Map();
+    const directories = [home.config, home.state, home.remoteSettings, home.serverInstances,
+        join(home.config, '.versions'), join(home.state, '.versions'),
+        join(home.config, '.versions', 'remote-settings'), join(home.state, '.versions', 'server-instances')];
+    const schedule = () => {
+        if (closed || scheduled)
+            return;
+        scheduled = true;
+        queueMicrotask(() => {
+            scheduled = false;
+            if (closed)
+                return;
+            bind();
+            getHomeRecovery(home, legacyCanary); // Inspect changed files before publishing the authoritative snapshot.
+            listener();
+        });
+    };
+    const bind = () => {
+        const journals = recoveryFiles(home).map(file => join(homeFileLocation(home, file).root, '.versions', file));
+        // Split state may not exist yet. Watch its nearest parent until the root appears.
+        const roots = [home.config, home.state].map(existingParent);
+        const legacy = legacyWatchDirectories(home, legacyCanary).map(existingParent);
+        const wanted = new Set([...directories, ...journals, ...roots, ...legacy]);
+        for (const [directory, watcher] of watchers) {
+            if (!wanted.has(directory)) {
+                watcher.close();
+                watchers.delete(directory);
+            }
+        }
+        for (const directory of wanted) {
+            if (watchers.has(directory))
+                continue;
+            try {
+                const watcher = watch(directory, { persistent: false }, () => {
+                    if (!existsSync(directory)) {
+                        watcher.close();
+                        watchers.delete(directory);
+                    }
+                    schedule();
+                });
+                watcher.on('error', () => { watcher.close(); watchers.delete(directory); });
+                watchers.set(directory, watcher);
+            }
+            catch { /* Parent watcher will retry when a missing family is created. */ }
+        }
+    };
+    bind();
+    const unsubscribe = onHomeChange(home.root, schedule);
+    // Close the subscribe/initial-snapshot race after the watches are installed.
+    schedule();
+    return () => {
+        closed = true;
+        unsubscribe();
+        for (const watcher of watchers.values())
+            watcher.close();
+        watchers.clear();
+    };
+}
+function existingParent(path) {
+    while (!existsSync(path) && dirname(path) !== path)
+        path = dirname(path);
+    return path;
+}
+//# sourceMappingURL=recovery-watch.js.map

package/dist/home/recovery-watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-watch.js","sourceRoot":"","sources":["../../src/home/recovery-watch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAkB,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,wFAAwF;AACxF,MAAM,UAAU,qBAAqB,CAAC,IAAU,EAAE,QAAoB,EAAE,YAAY,GAAG,cAAc;IACnG,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC9C,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,eAAe;QACrF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,iBAAiB,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACxG,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,IAAI,MAAM,IAAI,SAAS;YAAE,OAAO;QAChC,SAAS,GAAG,IAAI,CAAC;QACjB,cAAc,CAAC,GAAG,EAAE;YAClB,SAAS,GAAG,KAAK,CAAC;YAClB,IAAI,MAAM;gBAAE,OAAO;YACnB,IAAI,EAAE,CAAC;YACP,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,sEAAsE;YAC3G,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7G,kFAAkF;QAClF,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;QAC3E,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;QAC9E,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YAC/B,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,SAAS;YACtC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE;oBAC3D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;wBAAC,OAAO,CAAC,KAAK,EAAE,CAAC;wBAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAAC,CAAC;oBAC5E,QAAQ,EAAE,CAAC;gBACb,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5E,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC,CAAC,iEAAiE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC,CAAC;IACF,IAAI,EAAE,CAAC;IACP,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtD,6EAA6E;IAC7E,QAAQ,EAAE,CAAC;IACX,OAAO,GAAG,EAAE;QACV,MAAM,GAAG,IAAI,CAAC;QACd,WAAW,EAAE,CAAC;QACd,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;YAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACzD,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/home/recovery.d.ts

@@ -0,0 +1,10 @@
+import { type HomeFile, type HomeRecovery } from '../contract/index.js';
+import type { Home } from './home.ts';
+export { subscribeHomeRecovery } from './recovery-watch.ts';
+export declare function recoveryFiles(home: Home): HomeFile[];
+/** Content fingerprints avoid reacquiring every HomeStore lock on repeated cockpit requests. */
+export declare function getHomeRecovery(home: Home, legacyCanary?: boolean): HomeRecovery;
+/** Recovery shares the CLI's pinned writer; an already resolved incident never falls back. */
+export declare function restoreHomeRecovery(home: Home, file: HomeFile, detectedAt?: string): Promise<void>;
+export declare function acceptHomeRecovery(home: Home, file: HomeFile, detectedAt?: string, legacyCanary?: boolean): void;
+export declare function importHomeRecovery(home: Home, file: HomeFile, detectedAt?: string, legacyCanary?: boolean): void;

package/dist/home/recovery.js

@@ -0,0 +1,94 @@
+import { readdirSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { homeFileSchema } from '../contract/index.js';
+import { registryFiles } from './entry-authorization.js';
+import { HomeStore } from './store.js';
+import { digest, readBytes } from './version-log.js';
+import { restorePinnedRecovery } from '../workspace/backup-cli.js';
+import { homeFileLocation, homePathLocation } from './file-location.js';
+import { getLegacyRecovery, resolveLegacyRecovery } from './legacy-recovery.js';
+import { REBRAND_SWITCH } from './switch.js';
+export { subscribeHomeRecovery } from './recovery-watch.js';
+const caches = new Map();
+function stamp(path) {
+    try {
+        const s = statSync(path, { bigint: true });
+        const metadata = `${s.dev}:${s.ino}:${s.size}:${s.mtimeNs}:${s.ctimeNs}`;
+        // Filesystems can report identical metadata for different bytes. Read content without
+        // taking a HomeStore lock; unchanged fingerprints still reuse the recovery snapshot.
+        return s.isFile() ? `${metadata}:${digest(readBytes(path))}` : metadata;
+    }
+    catch {
+        return 'unavailable';
+    }
+}
+export function recoveryFiles(home) {
+    const files = new Set(registryFiles(home).map(path => homePathLocation(home, path).file));
+    files.add('server.install.lock');
+    // Include journals of deleted files: absence is itself an outside write.
+    for (const root of new Set([home.config, home.state])) {
+        for (const dir of ['.versions', 'remote-settings', 'server-instances', '.versions/remote-settings', '.versions/server-instances']) {
+            try {
+                for (const name of readdirSync(join(root, dir))) {
+                    const family = dir.replace(/^\.versions\/?/, '');
+                    const file = family ? `${family}/${name}` : name;
+                    if (homeFileSchema.safeParse(file).success && homeFileLocation(home, file).root === root)
+                        files.add(file);
+                }
+            }
+            catch { /* Missing or unreadable auxiliary families never prevent boot. */ }
+        }
+    }
+    return [...files].filter((file) => homeFileSchema.safeParse(file).success).sort();
+}
+/** Content fingerprints avoid reacquiring every HomeStore lock on repeated cockpit requests. */
+export function getHomeRecovery(home, legacyCanary = REBRAND_SWITCH) {
+    const key = JSON.stringify([home.config, home.state]);
+    let cache = caches.get(key);
+    if (!cache) {
+        cache = new Map();
+        caches.set(key, cache);
+    }
+    const store = new HomeStore(home);
+    const files = [];
+    for (const file of recoveryFiles(home)) {
+        const { path, root } = homeFileLocation(home, file);
+        const journal = join(root, '.versions', file);
+        const fingerprint = [path, journal, ...['HEAD', 'OUTSIDE', 'RESET', 'ACCEPTED'].map(name => join(journal, name)),
+            ...(file === 'config.json' ? [`${path}.bak`, join(home.backups, file)] : []),
+            ...(cache.get(file)?.pinnedPath ? [cache.get(file).pinnedPath] : [])].map(stamp).join('|');
+        let entry = cache.get(file);
+        if (!entry || entry.fingerprint !== fingerprint) {
+            try {
+                const recovery = store.recovery(path);
+                const state = recovery ? { file, reason: recovery.reason, detectedAt: recovery.detectedAt, canRestore: recovery.canRestore } : undefined;
+                entry = { fingerprint, state, pinnedPath: recovery?.restoreHash ? join(journal, recovery.restoreHash) : undefined };
+                cache.set(file, entry);
+            }
+            catch { /* Read-only or corrupt auxiliary state leaves the cockpit available. Retry next demand. */ }
+        }
+        if (entry?.state)
+            files.push(entry.state);
+    }
+    // A live-file incident takes precedence. Offer the legacy row once that incident resolves.
+    files.push(...getLegacyRecovery(home, legacyCanary).filter(legacy => !files.some(file => file.file === legacy.file)));
+    return { files };
+}
+/** Recovery shares the CLI's pinned writer; an already resolved incident never falls back. */
+export async function restoreHomeRecovery(home, file, detectedAt) {
+    homeFileSchema.parse(file);
+    restorePinnedRecovery(file, home, detectedAt);
+}
+export function acceptHomeRecovery(home, file, detectedAt, legacyCanary = REBRAND_SWITCH) {
+    homeFileSchema.parse(file);
+    const store = new HomeStore(home);
+    const path = homeFileLocation(home, file).path;
+    if (legacyCanary && !store.recovery(path))
+        resolveLegacyRecovery(home, file, detectedAt, 'ignore', legacyCanary);
+    else
+        store.acceptRecovery(path, detectedAt);
+}
+export function importHomeRecovery(home, file, detectedAt, legacyCanary = REBRAND_SWITCH) {
+    resolveLegacyRecovery(home, file, detectedAt, 'import', legacyCanary);
+}
+//# sourceMappingURL=recovery.js.map

package/dist/home/recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../../src/home/recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAA2D,MAAM,4CAA4C,CAAC;AAErI,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAG5D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqC,CAAC;AAE5D,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACzE,sFAAsF;QACtF,qFAAqF;QACrF,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC1E,CAAC;IACD,MAAM,CAAC;QAAC,OAAO,aAAa,CAAC;IAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAU;IACtC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1F,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACjC,yEAAyE;IACzE,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACtD,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,4BAA4B,CAAC,EAAE,CAAC;YAClI,IAAI,CAAC;gBACH,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;oBAChD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;oBACjD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBACjD,IAAI,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;wBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC5G,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,kEAAkE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAoB,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AACtG,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,eAAe,CAAC,IAAU,EAAE,YAAY,GAAG,cAAc;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;QAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC9G,GAAG,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,UAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/F,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBACzI,KAAK,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;gBACpH,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC,CAAC,2FAA2F,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,KAAK,EAAE,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,2FAA2F;IAC3F,KAAK,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtH,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAU,EAAE,IAAc,EAAE,UAAmB;IACvF,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAU,EAAE,IAAc,EAAE,UAAmB,EAAE,YAAY,GAAG,cAAc;IAC/G,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC;IAC/C,IAAI,YAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;;QAC5G,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAU,EAAE,IAAc,EAAE,UAAmB,EAAE,YAAY,GAAG,cAAc;IAC/G,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AACxE,CAAC"}

package/dist/home/registry-content.d.ts

@@ -0,0 +1,2 @@
+/** Count only registry collections. Other home files never acquire a reset flag. */
+export declare function registryCount(file: string, bytes: Buffer | null): number | undefined;