@hearsay-tools/squawk 0.0.0-stage → 0.17.0-dev.5685

package/dist/home/registry-content.js

@@ -0,0 +1,17 @@
+/** Count only registry collections. Other home files never acquire a reset flag. */
+export function registryCount(file, bytes) {
+    const key = file === 'config.json' ? 'projects' : file === 'agent-accounts.json' ? 'accounts' : undefined;
+    if (!key || bytes === null)
+        return undefined;
+    try {
+        const value = JSON.parse(bytes.toString('utf8'));
+        if (!value || typeof value !== 'object' || Array.isArray(value))
+            return undefined;
+        const entries = value[key];
+        return Array.isArray(entries) ? entries.length : 0;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=registry-content.js.map

package/dist/home/registry-content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-content.js","sourceRoot":"","sources":["../../src/home/registry-content.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAAoB;IAC9D,MAAM,GAAG,GAAG,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1G,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAClF,MAAM,OAAO,GAAa,KAAiC,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC"}

package/dist/home/reset-detection.d.ts

@@ -0,0 +1,5 @@
+import type { Home } from './home.ts';
+import type { VersionLog } from './version-log.ts';
+export declare function flagResetOnWrite(log: VersionLog, previous: Buffer | null, next: Buffer | null): void;
+/** Called on recovery demand, never on a normal hot registry read. */
+export declare function flagResetFromBackup(log: VersionLog, bytes: Buffer | null, home?: Home | string): void;

package/dist/home/reset-detection.js

@@ -0,0 +1,22 @@
+import { readFileSync } from 'node:fs';
+import { basename } from 'node:path';
+import { listBackups } from '../workspace/backups.js';
+import { registryCount } from './registry-content.js';
+export function flagResetOnWrite(log, previous, next) {
+    if (previous && (registryCount(log.relativePath, previous) ?? 0) > 0 && registryCount(log.relativePath, next) === 0) {
+        log.flagReset(previous, next, true);
+    }
+}
+/** Called on recovery demand, never on a normal hot registry read. */
+export function flagResetFromBackup(log, bytes, home = log.root) {
+    if (log.relativePath !== 'config.json' || registryCount(log.relativePath, bytes) !== 0 || log.reset() || log.accepted(bytes))
+        return;
+    // The snapshot loader's recovery contract is separate; listing alone treats .bak as newest.
+    const newest = listBackups('config.json', home)[0];
+    if (!newest)
+        return;
+    const previous = readFileSync(newest.path);
+    if ((registryCount(basename(log.relativePath), previous) ?? 0) > 0)
+        log.flagReset(previous, bytes);
+}
+//# sourceMappingURL=reset-detection.js.map

package/dist/home/reset-detection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-detection.js","sourceRoot":"","sources":["../../src/home/reset-detection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAItD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,MAAM,UAAU,gBAAgB,CAAC,GAAe,EAAE,QAAuB,EAAE,IAAmB;IAC5F,IAAI,QAAQ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpH,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,mBAAmB,CAAC,GAAe,EAAE,KAAoB,EAAE,IAAI,GAAkB,GAAG,CAAC,IAAI;IACvG,IAAI,GAAG,CAAC,YAAY,KAAK,aAAa,IAAI,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IACrI,4FAA4F;IAC5F,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACrG,CAAC"}

package/dist/home/resolve.d.ts

@@ -0,0 +1,10 @@
+import { type Home } from './home.ts';
+import { type HomeLayout } from './kind-roots.ts';
+export interface ResolveHomeOptions {
+    purpose: 'cli' | 'server';
+    env?: NodeJS.ProcessEnv;
+    layout?: HomeLayout;
+    platform?: NodeJS.Platform;
+}
+/** Resolve paths only. No filesystem reads, writes, markers or migrations. See ADR 0059. */
+export declare function resolveHome({ env, layout, platform }: ResolveHomeOptions): Home;

package/dist/home/resolve.js

@@ -0,0 +1,28 @@
+import { homedir } from 'node:os';
+import { posix, win32 } from 'node:path';
+import { legacyHomeEnv, preferredHomeEnv } from '../core/product-env.js';
+import { kindHomePaths } from './home.js';
+import { HOME_LAYOUT_ENV, oneRootKinds, platformKindRoots } from './kind-roots.js';
+import { REBRAND_SWITCH } from './switch.js';
+/** Resolve paths only. No filesystem reads, writes, markers or migrations. See ADR 0059. */
+export function resolveHome({ env = process.env, layout = REBRAND_SWITCH ? 'split' : 'legacy', platform = process.platform }) {
+    const legacyHome = legacyHomeEnv(env);
+    const preferredHome = preferredHomeEnv(env);
+    const { join } = platform === 'win32' ? win32 : posix;
+    const userHome = homedir();
+    const legacyDefault = join(userHome, '.cezar');
+    if (layout === 'legacy') {
+        const root = legacyHome || legacyDefault;
+        return kindHomePaths({ config: root, state: root, data: root, runtime: root,
+            cache: join(userHome, '.cache', 'cez') }, layout, platform, legacyHome || undefined);
+    }
+    const { resolve } = platform === 'win32' ? win32 : posix;
+    const normalize = (path) => platform === 'win32' ? resolve(path).toLowerCase() : resolve(path);
+    const legacyOverride = legacyHome && normalize(legacyHome) !== normalize(legacyDefault)
+        ? legacyHome : undefined;
+    const override = preferredHome || legacyOverride || undefined;
+    const layoutEnv = Object.fromEntries(HOME_LAYOUT_ENV.map(name => [name, env[name]]));
+    const roots = override ? oneRootKinds(override, platform) : platformKindRoots(userHome, layoutEnv, platform);
+    return kindHomePaths(roots, layout, platform, override);
+}
+//# sourceMappingURL=resolve.js.map

package/dist/home/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/home/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAa,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,iBAAiB,EAAmB,MAAM,iBAAiB,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAS7C,4FAA4F;AAC5F,MAAM,UAAU,WAAW,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAC3F,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAsB;IACjD,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;IAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,UAAU,IAAI,aAAa,CAAC;QACzC,OAAO,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI;YACzE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,IAAI,SAAS,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACzD,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvG,MAAM,cAAc,GAAG,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,aAAa,CAAC;QACrF,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3B,MAAM,QAAQ,GAAG,aAAa,IAAI,cAAc,IAAI,SAAS,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC7G,OAAO,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC1D,CAAC"}

package/dist/home/store.d.ts

@@ -0,0 +1,48 @@
+import type { Home } from './home.ts';
+import { type OutsideWrite } from './version-log.ts';
+/** A path-derived reader preserves APIs that already accept a resolved Home path (ADR 0059). */
+export declare function homeFileRoot(path: string): string;
+/** Registry files only. No ambient paths, no user settings, no layout selection. */
+export declare class HomeStore {
+    private readonly home;
+    private readonly options;
+    readonly root: string;
+    private writeDepth;
+    constructor(home: Home | string, options?: {
+        requireBackup?: boolean;
+    });
+    private journal;
+    private lockRoot;
+    /** Synchronous transactions never retain the filesystem lock over an event-loop yield. */
+    transaction<T>(operation: (reportOnly?: boolean) => T, writePaths?: readonly string[], readOnly?: boolean): T;
+    assertBoundary(paths: readonly string[], backups?: boolean): Map<string, unknown>;
+    read(path: string): string;
+    private canJournal;
+    private requiredBytes;
+    writeJson(path: string, value: unknown, recoveredBase?: Buffer): void;
+    replace(path: string, bytes: Buffer | null, recoveredBase?: Buffer): void;
+    private checkOutside;
+    outsideWrite(path: string): OutsideWrite | undefined;
+    createExclusive(path: string, bytes: Buffer): void;
+    restoreOutsideWrite(path: string): void;
+    /** Bounded flag reads; outside inspection still owns the normal per-file lock. */
+    recovery(path: string): {
+        reason: 'outside-write' | 'reset';
+        detectedAt: string;
+        canRestore: boolean;
+        restoreHash: string | null;
+    } | undefined;
+    /** Explicit restore resolves any incident; normal writes only self-heal a proven registry deletion. */
+    restoreFile(path: string, bytes: Buffer | null, keepReset?: boolean): void;
+    restoreRecovery(path: string, detectedAt?: string): string | undefined;
+    /** Stale cockpit retries cannot accept a different incident or an unflagged file. */
+    acceptRecovery(path: string, detectedAt?: string): void;
+    acceptOutsideWrite(path: string): void;
+}
+export declare function readHomeFile(path: string, home?: Home): string;
+/** Managed-layout files stay outside HomeStore, but their entry's first write still marks it. */
+export declare function prepareAuthorizedHomeWrite(home: Home): void;
+/** Callers preserve their existing write-failure surface; best-effort writers can warn by type. */
+export declare class HomeOutsideWriteError extends Error {
+    constructor(path: string);
+}

package/dist/home/store.js

@@ -0,0 +1,324 @@
+import { existsSync } from 'node:fs';
+import { registryCount } from './registry-content.js';
+import { homeChanged } from './changes.js';
+import { flagResetFromBackup, flagResetOnWrite } from './reset-detection.js';
+import { basename, dirname, join } from 'node:path';
+import { backupBeforeWrite } from '../workspace/backups.js';
+import { assertCezarHomeWriteIsSandboxed } from '../paths.js';
+import { assertHomeReadable, assertHomeWritable, createInstallMarker, readInstallMarker, underTestRunner } from './install-marker.js';
+import { digest, OUTSIDE_WRITE_ENFORCEMENT, readBytes, VersionLog } from './version-log.js';
+import { withHomeLock } from './write-lock.js';
+import { assertHomePaths } from './boundary.js';
+import { homeEntryAuthorization, registryFiles, seedHomeRegistry } from './entry-authorization.js';
+import { homePathLocation } from './file-location.js';
+import { assertNoMigration } from './migration-guard.js';
+/** A path-derived reader preserves APIs that already accept a resolved Home path (ADR 0059). */
+export function homeFileRoot(path) {
+    const parent = dirname(path);
+    // An explicit CEZ_HOME may itself be named remote-settings or server-instances.
+    try {
+        if (readInstallMarker(parent))
+            return parent;
+    }
+    catch {
+        return parent;
+    }
+    return ['remote-settings', 'server-instances'].includes(basename(parent)) ? dirname(parent) : parent;
+}
+/** Registry files only. No ambient paths, no user settings, no layout selection. */
+export class HomeStore {
+    home;
+    options;
+    root;
+    writeDepth = 0;
+    constructor(home, options = {}) {
+        this.home = home;
+        this.options = options;
+        this.root = typeof home === 'string' ? home : home.root;
+    }
+    journal(path, reportOnly = false) {
+        const { root, file } = homePathLocation(this.home, path);
+        return new VersionLog(root, file, {}, reportOnly);
+    }
+    lockRoot(path) {
+        if (typeof this.home !== 'string') {
+            if ([this.home.config, this.home.remoteSettings].includes(path))
+                return this.home.config;
+            if ([this.home.state, this.home.serverInstances].includes(path))
+                return this.home.state;
+        }
+        return this.journal(path).root;
+    }
+    /** Synchronous transactions never retain the filesystem lock over an event-loop yield. */
+    transaction(operation, writePaths = [], readOnly = false) {
+        if (!readOnly && this.writeDepth === 0)
+            assertNoMigration(this.root);
+        const authorization = homeEntryAuthorization(this.root);
+        const beforeWrite = readOnly ? undefined : authorization?.beforeWrite;
+        if (authorization && beforeWrite) {
+            // Consume first: preparation writes through this store, and a refusal stays armed for the next write.
+            authorization.beforeWrite = undefined;
+            try {
+                beforeWrite();
+            }
+            catch (error) {
+                authorization.beforeWrite = beforeWrite;
+                throw error;
+            }
+        }
+        const marker = readInstallMarker(this.root);
+        const entry = authorization && (!marker || !authorization.seeded) ? authorization : undefined;
+        if (readOnly)
+            assertHomeReadable(this.root);
+        if (!readOnly && (marker || !entry))
+            assertHomeWritable(this.root);
+        const files = entry ? registryFiles(entry.home) : [];
+        this.assertBoundary(writePaths, true);
+        // Seeding is auxiliary. Check every path before the first mutation, but skip unsafe ones.
+        const seedable = files.filter(path => {
+            try {
+                this.assertBoundary([path]);
+                return true;
+            }
+            catch {
+                return false;
+            }
+        });
+        const roots = [...new Set([...(entry ? [this.root] : []), ...writePaths.map(path => this.lockRoot(path))])];
+        if (!roots.length)
+            roots.push(this.root);
+        // Entry seeding takes config before state too; keep that order for multi-file callers.
+        roots.sort((a, b) => Number(b === this.root) - Number(a === this.root));
+        const operationWithEntry = () => {
+            if (!readOnly)
+                assertNoMigration(this.root, true);
+            const reportOnly = readOnly && (existsSync(join(this.root, '.migrating')) || readInstallMarker(this.root)?.state === 'pending');
+            if (entry && !reportOnly)
+                createInstallMarker(this.root, underTestRunner() ? 'test' : entry.kind);
+            if (!readOnly)
+                assertHomeWritable(this.root);
+            if (entry && !reportOnly)
+                entry.seeded = seedHomeRegistry(this, seedable, entry.home) && seedable.length === files.length;
+            if (!readOnly)
+                this.writeDepth++;
+            try {
+                return operation(reportOnly);
+            }
+            finally {
+                if (!readOnly)
+                    this.writeDepth--;
+            }
+        };
+        return roots.reduceRight((next, root) => () => withHomeLock(root, next), operationWithEntry)();
+    }
+    assertBoundary(paths, backups = false) {
+        const unavailable = new Map();
+        assertHomePaths(this.root, [join(this.root, 'install.json')]);
+        const files = paths.filter(path => /\.(?:json|bak|lock)$/.test(path));
+        for (const path of paths) {
+            const targets = [path];
+            if (files.includes(path))
+                targets.push(join(this.journal(path).directory, 'HEAD'));
+            assertHomePaths(this.lockRoot(path), targets);
+        }
+        if (backups)
+            for (const path of files) {
+                const file = this.journal(path).relativePath;
+                const root = typeof this.home === 'string' ? this.root : this.home.state;
+                try {
+                    assertHomePaths(root, [join(typeof this.home === 'string' ? join(root, 'backups') : this.home.backups, file)]);
+                }
+                catch (error) {
+                    unavailable.set(path, error);
+                }
+            }
+        return unavailable;
+    }
+    read(path) {
+        const log = this.journal(path);
+        // Reading an old or protected home never creates a marker or lets a test mutate a live home.
+        if (!this.canJournal())
+            return this.requiredBytes(path).toString('utf8');
+        try {
+            this.assertBoundary([path]);
+            return withHomeLock(log.root, () => {
+                const bytes = readBytes(path);
+                // A pending transition can happen while waiting. Ordinary reads do not probe .migrating:
+                // their legacy journal is excluded from copied files and the legacy hash comparison.
+                if (this.canJournal())
+                    log.inspect(bytes);
+                return this.requiredBytes(path, bytes).toString('utf8');
+            });
+        }
+        catch {
+            // Auxiliary failures must never hide readable saved data. Only this live read may throw.
+            return this.requiredBytes(path).toString('utf8');
+        }
+    }
+    canJournal() {
+        try {
+            const marker = readInstallMarker(this.root);
+            if (!marker || marker.state === 'pending' || (marker.kind === 'live' && underTestRunner()))
+                return false;
+            assertCezarHomeWriteIsSandboxed(this.root);
+            return true;
+        }
+        catch {
+            // Invalid marker or protected passwd-home: reads remain read-only and keep saved data visible.
+            return false;
+        }
+    }
+    requiredBytes(path, bytes = readBytes(path)) {
+        if (bytes !== null)
+            return bytes;
+        throw Object.assign(new Error(`ENOENT: no such file, open '${path}'`), { code: 'ENOENT' });
+    }
+    writeJson(path, value, recoveredBase) {
+        this.replace(path, Buffer.from(`${JSON.stringify(value, null, 2)}\n`), recoveredBase);
+    }
+    replace(path, bytes, recoveredBase) {
+        const unavailable = this.assertBoundary([path], true).get(path);
+        this.transaction(() => {
+            const log = this.journal(path);
+            const previous = readBytes(path);
+            const restoredDeletion = this.checkOutside(path, log, previous, recoveredBase);
+            backupBeforeWrite(path, bytes, { home: this.home, unavailable, required: this.options.requireBackup });
+            const reset = log.reset(); // Finish any reset whose primary committed before a crash.
+            const keepAcceptance = !reset && registryCount(log.relativePath, previous) === 0 && log.accepted(previous);
+            flagResetOnWrite(log, previous, bytes);
+            log.replace(path, bytes);
+            log.reset(); // The durable reset now survives later ordinary writes.
+            if (keepAcceptance || restoredDeletion)
+                log.clearRecovery(bytes);
+            homeChanged(this.root);
+        }, [path]);
+    }
+    checkOutside(path, log, previous, recoveredBase) {
+        const outside = log.inspect(previous);
+        if (outside && OUTSIDE_WRITE_ENFORCEMENT) {
+            // Only the registry loader self-heals deletions. Prove its unmodified backup base is
+            // the pinned version before permitting the merged save; outside content still refuses.
+            if (log.relativePath === 'config.json' && previous === null && recoveredBase !== undefined
+                && digest(recoveredBase) === outside.restoreHash)
+                return true;
+            homeChanged(this.root);
+            throw new HomeOutsideWriteError(path);
+        }
+        return false;
+    }
+    outsideWrite(path) {
+        if (readInstallMarker(this.root)?.state === 'pending')
+            return;
+        this.assertBoundary([path]);
+        return this.transaction(reportOnly => {
+            const log = this.journal(path, reportOnly);
+            return log.inspect(readBytes(path));
+        }, [path], true);
+    }
+    createExclusive(path, bytes) {
+        this.assertBoundary([path], true);
+        this.transaction(() => {
+            const log = this.journal(path);
+            this.checkOutside(path, log, readBytes(path));
+            // Exclusive publication can only replace absence, which needs no snapshot.
+            log.createExclusive(path, bytes);
+            homeChanged(this.root);
+        }, [path]);
+    }
+    restoreOutsideWrite(path) {
+        this.assertBoundary([path]);
+        this.restoreRecovery(path);
+    }
+    /** Bounded flag reads; outside inspection still owns the normal per-file lock. */
+    recovery(path) {
+        if (!this.canJournal())
+            return;
+        this.assertBoundary([path]);
+        // Observing a never-created optional file must not create its first journal.
+        if (!existsSync(path) && !existsSync(this.journal(path).directory))
+            return;
+        return this.transaction(reportOnly => {
+            const log = this.journal(path, reportOnly);
+            const bytes = readBytes(path);
+            const outside = log.inspect(bytes);
+            if (!outside)
+                flagResetFromBackup(log, bytes, this.home);
+            const flag = outside ?? log.reset();
+            let canRestore = true;
+            if (flag)
+                try {
+                    log.recoveryBytes(flag);
+                }
+                catch {
+                    canRestore = false;
+                }
+            return flag ? { reason: outside ? 'outside-write' : 'reset', detectedAt: flag.detectedAt, canRestore, restoreHash: flag.restoreHash } : undefined;
+        }, [path], true);
+    }
+    /** Explicit restore resolves any incident; normal writes only self-heal a proven registry deletion. */
+    restoreFile(path, bytes, keepReset = false) {
+        const unavailable = this.assertBoundary([path], true).get(path);
+        this.transaction(() => {
+            const log = this.journal(path);
+            log.inspect(readBytes(path));
+            backupBeforeWrite(path, bytes, { home: this.home, unavailable, required: this.options.requireBackup });
+            log.replace(path, bytes);
+            log.clearRecovery(bytes, keepReset);
+            homeChanged(this.root);
+        }, [path]);
+    }
+    restoreRecovery(path, detectedAt) {
+        this.assertBoundary([path], true);
+        return this.transaction(() => {
+            const log = this.journal(path);
+            const outside = log.inspect(readBytes(path));
+            const reset = log.reset();
+            const flag = outside ?? reset;
+            if (!flag)
+                return;
+            assertRecoveryIncident(flag, detectedAt);
+            // Restoring an outside write must not accept a separate, unresolved registry reset.
+            this.restoreFile(path, log.recoveryBytes(flag), Boolean(outside && reset));
+            return flag.detectedAt;
+        }, [path]);
+    }
+    /** Stale cockpit retries cannot accept a different incident or an unflagged file. */
+    acceptRecovery(path, detectedAt) {
+        this.assertBoundary([path]);
+        this.transaction(() => {
+            const log = this.journal(path);
+            const flag = log.inspect(readBytes(path)) ?? log.reset();
+            if (!flag)
+                return;
+            assertRecoveryIncident(flag, detectedAt);
+            this.acceptOutsideWrite(path);
+        }, [path]);
+    }
+    acceptOutsideWrite(path) {
+        this.assertBoundary([path]);
+        this.transaction(() => {
+            const log = this.journal(path);
+            log.inspect(readBytes(path));
+            log.accept(path);
+            homeChanged(this.root);
+        }, [path]);
+    }
+}
+function assertRecoveryIncident(flag, detectedAt) {
+    if (detectedAt !== undefined && flag.detectedAt !== detectedAt) {
+        throw new Error('Recovery incident changed. Refresh and try again.');
+    }
+}
+export function readHomeFile(path, home) {
+    return new HomeStore(home ?? homeFileRoot(path)).read(path);
+}
+/** Managed-layout files stay outside HomeStore, but their entry's first write still marks it. */
+export function prepareAuthorizedHomeWrite(home) {
+    if (homeEntryAuthorization(home.root))
+        new HomeStore(home).transaction(() => { });
+}
+/** Callers preserve their existing write-failure surface; best-effort writers can warn by type. */
+export class HomeOutsideWriteError extends Error {
+    constructor(path) { super(`Outside write to ${path}; restore or accept it first`); this.name = 'HomeOutsideWriteError'; }
+}
+//# sourceMappingURL=store.js.map

package/dist/home/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/home/store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,+BAA+B,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtI,OAAO,EAAE,MAAM,EAAE,yBAAyB,EAAE,SAAS,EAAE,UAAU,EAAqB,MAAM,kBAAkB,CAAC;AAC/G,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,gGAAgG;AAChG,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,gFAAgF;IAChF,IAAI,CAAC;QAAC,IAAI,iBAAiB,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,MAAM,CAAC;IAAC,CAAC;IAC9E,OAAO,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AACvG,CAAC;AAED,oFAAoF;AACpF,MAAM,OAAO,SAAS;IAGS,IAAI;IAAkC,OAAO;IAFjE,IAAI,CAAS;IACd,UAAU,GAAG,CAAC,CAAC;IACvB,YAA6B,IAAmB,EAAmB,OAAO,GAAgC,EAAE;oBAA/E,IAAI;uBAAkC,OAAO;QAAsC,IAAI,CAAC,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAAC,CAAC;IAElK,OAAO,CAAC,IAAY,EAAE,UAAU,GAAG,KAAK;QAC9C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzD,OAAO,IAAI,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;IACpD,CAAC;IAEO,QAAQ,CAAC,IAAY;QAC3B,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YACzF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1F,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;IACjC,CAAC;IAED,0FAA0F;IAC1F,WAAW,CAAI,SAAsC,EAAE,UAAU,GAAsB,EAAE,EAAE,QAAQ,GAAG,KAAK;QACzG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC;YAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,aAAa,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC;QACtE,IAAI,aAAa,IAAI,WAAW,EAAE,CAAC;YACjC,sGAAsG;YACtG,aAAa,CAAC,WAAW,GAAG,SAAS,CAAC;YACtC,IAAI,CAAC;gBAAC,WAAW,EAAE,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,aAAa,CAAC,WAAW,GAAG,WAAW,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;QAChG,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,aAAa,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,IAAI,QAAQ;YAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC;YAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACtC,0FAA0F;QAC1F,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YACnC,IAAI,CAAC;gBAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5G,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,uFAAuF;QACvF,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACxE,MAAM,kBAAkB,GAAG,GAAG,EAAE;YAC9B,IAAI,CAAC,QAAQ;gBAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC;YAChI,IAAI,KAAK,IAAI,CAAC,UAAU;gBAAE,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClG,IAAI,CAAC,QAAQ;gBAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,KAAK,IAAI,CAAC,UAAU;gBAAE,KAAK,CAAC,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;YAC1H,IAAI,CAAC,QAAQ;gBAAE,IAAI,CAAC,UAAU,EAAE,CAAC;YACjC,IAAI,CAAC;gBAAC,OAAO,SAAS,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,IAAI,CAAC,QAAQ;oBAAE,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,CAAC;QACrF,CAAC,CAAC;QACF,OAAO,KAAK,CAAC,WAAW,CAAU,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,kBAAkB,CAAC,EAAE,CAAC;IAC1G,CAAC;IAED,cAAc,CAAC,KAAwB,EAAE,OAAO,GAAG,KAAK;QACtD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmB,CAAC;QAC/C,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;YACnF,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,OAAO;YAAE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC;gBAC7C,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;gBACzE,IAAI,CAAC;oBAAC,eAAe,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACvH,OAAO,KAAK,EAAE,CAAC;oBAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAAC,CAAC;YACjD,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,CAAC,IAAY;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,6FAA6F;QAC7F,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE;gBACjC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC9B,yFAAyF;gBACzF,qFAAqF;gBACrF,IAAI,IAAI,CAAC,UAAU,EAAE;oBAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC1C,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1D,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,yFAAyF;YACzF,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,eAAe,EAAE,CAAC;gBAAE,OAAO,KAAK,CAAC;YACzG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,+FAA+F;YAC/F,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,IAAY,EAAE,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC;QACzD,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACjC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,KAAc,EAAE,aAAsB;QAC5D,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,CAAC,IAAY,EAAE,KAAoB,EAAE,aAAsB;QAChE,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YACpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC/E,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;YACvG,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,2DAA2D;YACtF,MAAM,cAAc,GAAG,CAAC,KAAK,IAAI,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3G,gBAAgB,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACvC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzB,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,wDAAwD;YACrE,IAAI,cAAc,IAAI,gBAAgB;gBAAE,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YACjE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACb,CAAC;IAEO,YAAY,CAAC,IAAY,EAAE,GAAe,EAAE,QAAuB,EAAE,aAAsB;QACjG,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,OAAO,IAAI,yBAAyB,EAAE,CAAC;YACzC,qFAAqF;YACrF,uFAAuF;YACvF,IAAI,GAAG,CAAC,YAAY,KAAK,aAAa,IAAI,QAAQ,KAAK,IAAI,IAAI,aAAa,KAAK,SAAS;mBACrF,MAAM,CAAC,aAAa,CAAC,KAAK,OAAO,CAAC,WAAW;gBAAE,OAAO,IAAI,CAAC;YAChE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,YAAY,CAAC,IAAY;QACvB,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,SAAS;YAAE,OAAO;QAC9D,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC3C,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,eAAe,CAAC,IAAY,EAAE,KAAa;QACzC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YACpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9C,2EAA2E;YAC3E,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACb,CAAC;IAED,mBAAmB,CAAC,IAAY;QAC9B,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,kFAAkF;IAClF,QAAQ,CAAC,IAAY;QACnB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YAAE,OAAO;QAC/B,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5B,6EAA6E;QAC7E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;YAAE,OAAO;QAC3E,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO;gBAAE,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,OAAO,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,UAAU,GAAG,IAAI,CAAC;YACtB,IAAI,IAAI;gBAAE,IAAI,CAAC;oBAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,UAAU,GAAG,KAAK,CAAC;gBAAC,CAAC;YACxE,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,eAAwB,CAAC,CAAC,CAAC,OAAgB,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACtK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,uGAAuG;IACvG,WAAW,CAAC,IAAY,EAAE,KAAoB,EAAE,SAAS,GAAG,KAAK;QAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YACpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7B,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;YACvG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzB,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACpC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACb,CAAC;IAED,eAAe,CAAC,IAAY,EAAE,UAAmB;QAC/C,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,CAAC;YAC9B,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,sBAAsB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACzC,oFAAoF;YACpF,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC,UAAU,CAAC;QACzB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACb,CAAC;IAED,qFAAqF;IACrF,cAAc,CAAC,IAAY,EAAE,UAAmB;QAC9C,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YACpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACzD,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,sBAAsB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACzC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACb,CAAC;IAED,kBAAkB,CAAC,IAAY;QAC7B,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YACpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACjB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACb,CAAC;CAEF;AAED,SAAS,sBAAsB,CAAC,IAAkB,EAAE,UAA8B;IAChF,IAAI,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,IAAW;IACpD,OAAO,IAAI,SAAS,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,0BAA0B,CAAC,IAAU;IACnD,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,mGAAmG;AACnG,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,IAAY,IAAI,KAAK,CAAC,oBAAoB,IAAI,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC,CAAC,CAAC;CAClI"}

package/dist/home/switch.d.ts

@@ -0,0 +1,2 @@
+/** Release gate for the rebrand and new home layout. Not an environment setting. */
+export declare const REBRAND_SWITCH = true;

package/dist/home/switch.js

@@ -0,0 +1,3 @@
+/** Release gate for the rebrand and new home layout. Not an environment setting. */
+export const REBRAND_SWITCH = true;
+//# sourceMappingURL=switch.js.map

package/dist/home/switch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"switch.js","sourceRoot":"","sources":["../../src/home/switch.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC"}

package/dist/home/version-log.d.ts

@@ -0,0 +1,48 @@
+import { z } from 'zod';
+import { type PrivateFileOptions } from './private-files.ts';
+declare const hashSchema: z.ZodNullable<z.ZodString>;
+declare const outsideSchema: z.ZodObject<{
+    restoreHash: z.ZodNullable<z.ZodString>;
+    observedHash: z.ZodNullable<z.ZodString>;
+    detectedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export type OutsideWrite = z.infer<typeof outsideSchema>;
+type Hash = z.infer<typeof hashSchema>;
+export declare const OUTSIDE_WRITE_ENFORCEMENT = true;
+export declare function readBytes(path: string): Buffer | null;
+export declare function digest(bytes: Buffer | null): Hash;
+/** A journal belongs to the root that owns the live file, independent of runtime/env paths. */
+export declare class VersionLog {
+    readonly root: string;
+    readonly relativePath: string;
+    private readonly privacy;
+    readonly directory: string;
+    /** Report-only journals run the same interpretation and keep every record change in memory. */
+    private readonly overlay;
+    constructor(root: string, relativePath: string, privacy?: PrivateFileOptions, reportOnly?: boolean);
+    private readEntry;
+    private writeEntry;
+    private assertWritable;
+    record(name: string): unknown | undefined;
+    setRecord(name: string, record: unknown): void;
+    private store;
+    private clearPending;
+    /** Caller owns write.lock. Seed old installs without changing even one live byte. */
+    inspect(bytes: Buffer | null): OutsideWrite | undefined;
+    outside(): OutsideWrite | undefined;
+    /** Crash-safe journal order: durable bytes, PENDING, replace, HEAD, clear PENDING. */
+    replace(path: string, bytes: Buffer | null): void;
+    /** Install locks must also exclude older binaries, which create their lock with wx. */
+    createExclusive(path: string, bytes: Buffer): void;
+    reset(): OutsideWrite | undefined;
+    flagReset(previous: Buffer, observed: Buffer | null, pending?: boolean): void;
+    accepted(bytes: Buffer | null): boolean;
+    /** Migration retains an operator's exact acceptance, never pending writes or recovery flags. */
+    copyAcceptanceFrom(source: VersionLog, bytes: Buffer | null): void;
+    /** Resolve without rewriting the operator's bytes or changing their mtime. */
+    accept(path: string): void;
+    clearRecovery(bytes: Buffer | null, keepReset?: boolean): void;
+    recoveryBytes(flag: OutsideWrite): Buffer | null;
+    restore(path: string): void;
+}
+export {};