@indigoai-us/hq-cloud 6.18.44-alpha.48 → 6.18.44-alpha.49

package/dist/active-company.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=active-company.test.d.ts.map

package/dist/active-company.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-company.test.d.ts","sourceRoot":"","sources":["../src/active-company.test.ts"],"names":[],"mappings":""}

package/dist/active-company.test.js

@@ -0,0 +1,149 @@
+import { afterEach, describe, expect, it } from "vitest";
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { seedActiveCompany } from "./active-company.js";
+let hqRoot;
+afterEach(() => {
+    if (hqRoot) {
+        fs.rmSync(hqRoot, { recursive: true, force: true });
+        hqRoot = undefined;
+    }
+});
+function makeHqRoot() {
+    return fs.mkdtempSync(path.join(os.tmpdir(), "hq-active-company-"));
+}
+function configPath(root) {
+    return path.join(root, ".hq", "config.json");
+}
+function writeConfig(root, contents) {
+    const p = configPath(root);
+    fs.mkdirSync(path.dirname(p), { recursive: true });
+    fs.writeFileSync(p, contents, "utf8");
+    return p;
+}
+function readConfig(root) {
+    return JSON.parse(fs.readFileSync(configPath(root), "utf8"));
+}
+describe("seedActiveCompany", () => {
+    it("seeds the single company when activeCompany is unset", () => {
+        hqRoot = makeHqRoot();
+        writeConfig(hqRoot, JSON.stringify({ someOtherSetting: true }));
+        expect(seedActiveCompany({ hqRoot, companySlugs: ["boring-ecom"] })).toEqual({
+            written: true,
+            activeCompany: "boring-ecom",
+        });
+        expect(readConfig(hqRoot)).toEqual({
+            someOtherSetting: true,
+            activeCompany: "boring-ecom",
+        });
+    });
+    it("creates a missing config file", () => {
+        hqRoot = makeHqRoot();
+        expect(fs.existsSync(configPath(hqRoot))).toBe(false);
+        expect(seedActiveCompany({ hqRoot, companySlugs: ["boring-ecom"] })).toEqual({
+            written: true,
+            activeCompany: "boring-ecom",
+        });
+        expect(readConfig(hqRoot)).toEqual({ activeCompany: "boring-ecom" });
+    });
+    it("no-ops on zero companies", () => {
+        hqRoot = makeHqRoot();
+        const before = writeConfig(hqRoot, JSON.stringify({ keep: 1 }));
+        const raw = fs.readFileSync(before, "utf8");
+        expect(seedActiveCompany({ hqRoot, companySlugs: [] })).toEqual({
+            written: false,
+            skippedReason: "no-companies",
+        });
+        expect(fs.readFileSync(before, "utf8")).toBe(raw);
+    });
+    // Two companies is a real choice. Guessing would route the user somewhere
+    // arbitrary, which is indistinguishable from a bug to the person it happens to.
+    it("no-ops on two or more companies rather than guessing", () => {
+        hqRoot = makeHqRoot();
+        const p = writeConfig(hqRoot, JSON.stringify({ keep: 1 }));
+        const raw = fs.readFileSync(p, "utf8");
+        expect(seedActiveCompany({ hqRoot, companySlugs: ["boring-ecom", "acme"] })).toEqual({ written: false, skippedReason: "ambiguous" });
+        expect(fs.readFileSync(p, "utf8")).toBe(raw);
+    });
+    it("never overwrites an existing activeCompany", () => {
+        hqRoot = makeHqRoot();
+        const p = writeConfig(hqRoot, JSON.stringify({ activeCompany: "chosen-by-user" }));
+        const raw = fs.readFileSync(p, "utf8");
+        expect(seedActiveCompany({ hqRoot, companySlugs: ["boring-ecom"] })).toEqual({
+            written: false,
+            skippedReason: "already-set",
+        });
+        expect(fs.readFileSync(p, "utf8")).toBe(raw);
+    });
+    // Even when the existing value names a company they have since left. Repairing
+    // that is a separate, user-visible decision — not something a sync should do
+    // silently underneath them.
+    it("never overwrites activeCompany even for a company the user has left", () => {
+        hqRoot = makeHqRoot();
+        writeConfig(hqRoot, JSON.stringify({ activeCompany: "former-employer" }));
+        expect(seedActiveCompany({ hqRoot, companySlugs: ["boring-ecom"] })).toEqual({
+            written: false,
+            skippedReason: "already-set",
+        });
+        expect(readConfig(hqRoot).activeCompany).toBe("former-employer");
+    });
+    // sync-core's resolveActiveCompany falls back to `companySlug`, so a config
+    // carrying only that already HAS an effective answer. Writing activeCompany
+    // would silently re-route the user.
+    it("treats a legacy companySlug as already-set", () => {
+        hqRoot = makeHqRoot();
+        const p = writeConfig(hqRoot, JSON.stringify({ companySlug: "legacy-choice" }));
+        const raw = fs.readFileSync(p, "utf8");
+        expect(seedActiveCompany({ hqRoot, companySlugs: ["boring-ecom"] })).toEqual({
+            written: false,
+            skippedReason: "already-set",
+        });
+        expect(fs.readFileSync(p, "utf8")).toBe(raw);
+    });
+    it("leaves malformed JSON untouched and reports a diagnostic", () => {
+        hqRoot = makeHqRoot();
+        const p = writeConfig(hqRoot, '{"activeCompany": "half-edited"');
+        const raw = fs.readFileSync(p, "utf8");
+        const diagnostics = [];
+        expect(seedActiveCompany({
+            hqRoot,
+            companySlugs: ["boring-ecom"],
+            reportDiagnostic: (d) => diagnostics.push(d),
+        })).toEqual({ written: false, skippedReason: "unreadable-config" });
+        expect(fs.readFileSync(p, "utf8")).toBe(raw);
+        expect(diagnostics).toHaveLength(1);
+        expect(diagnostics[0].event).toBe("runner.active_company.config_malformed");
+    });
+    it("leaves a non-object config untouched", () => {
+        hqRoot = makeHqRoot();
+        const p = writeConfig(hqRoot, "[1, 2, 3]");
+        const raw = fs.readFileSync(p, "utf8");
+        expect(seedActiveCompany({ hqRoot, companySlugs: ["boring-ecom"] })).toEqual({
+            written: false,
+            skippedReason: "unreadable-config",
+        });
+        expect(fs.readFileSync(p, "utf8")).toBe(raw);
+    });
+    it("preserves unknown keys and leaves no temp files behind", () => {
+        hqRoot = makeHqRoot();
+        writeConfig(hqRoot, JSON.stringify({ nested: { a: 1 }, list: [1, 2], flag: false }));
+        expect(seedActiveCompany({ hqRoot, companySlugs: ["boring-ecom"] }).written).toBe(true);
+        expect(readConfig(hqRoot)).toEqual({
+            nested: { a: 1 },
+            list: [1, 2],
+            flag: false,
+            activeCompany: "boring-ecom",
+        });
+        const strays = fs
+            .readdirSync(path.join(hqRoot, ".hq"))
+            .filter((f) => f.startsWith(".config-"));
+        expect(strays).toEqual([]);
+    });
+    it("collapses duplicate slugs — one company named twice is not ambiguous", () => {
+        hqRoot = makeHqRoot();
+        expect(seedActiveCompany({ hqRoot, companySlugs: ["boring-ecom", "boring-ecom"] })).toEqual({ written: true, activeCompany: "boring-ecom" });
+        expect(readConfig(hqRoot).activeCompany).toBe("boring-ecom");
+    });
+});
+//# sourceMappingURL=active-company.test.js.map

package/dist/active-company.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-company.test.js","sourceRoot":"","sources":["../src/active-company.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,IAAI,MAA0B,CAAC;AAE/B,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,MAAM,EAAE,CAAC;QACX,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,SAAS,UAAU;IACjB,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,QAAgB;IACjD,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAA4B,CAAC;AAC1F,CAAC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,GAAG,UAAU,EAAE,CAAC;QACtB,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAEhE,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3E,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,aAAa;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACjC,gBAAgB,EAAE,IAAI;YACtB,aAAa,EAAE,aAAa;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,GAAG,UAAU,EAAE,CAAC;QACtB,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEtD,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3E,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,aAAa;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,GAAG,UAAU,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAE5C,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9D,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,cAAc;SAC9B,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,gFAAgF;IAChF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,GAAG,UAAU,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAEvC,MAAM,CACJ,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,CACrE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,GAAG,UAAU,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QACnF,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAEvC,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3E,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,aAAa;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,6EAA6E;IAC7E,4BAA4B;IAC5B,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,GAAG,UAAU,EAAE,CAAC;QACtB,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;QAE1E,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3E,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,aAAa;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,4EAA4E;IAC5E,oCAAoC;IACpC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,GAAG,UAAU,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAEvC,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3E,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,aAAa;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,GAAG,UAAU,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,WAAW,GAA6B,EAAE,CAAC;QAEjD,MAAM,CACJ,iBAAiB,CAAC;YAChB,MAAM;YACN,YAAY,EAAE,CAAC,aAAa,CAAC;YAC7B,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;SAC7C,CAAC,CACH,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAElE,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,GAAG,UAAU,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAEvC,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3E,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,mBAAmB;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,GAAG,UAAU,EAAE,CAAC;QACtB,WAAW,CACT,MAAM,EACN,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAChE,CAAC;QAEF,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAC/E,IAAI,CACL,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACjC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE;YAChB,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACZ,IAAI,EAAE,KAAK;YACX,aAAa,EAAE,aAAa;SAC7B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,EAAE;aACd,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;aACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,GAAG,UAAU,EAAE,CAAC;QACtB,MAAM,CACJ,iBAAiB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC,EAAE,CAAC,CAC5E,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/agent-codex-instructions.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=agent-codex-instructions.test.d.ts.map

package/dist/agent-codex-instructions.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-codex-instructions.test.d.ts","sourceRoot":"","sources":["../src/agent-codex-instructions.test.ts"],"names":[],"mappings":""}

package/dist/agent-codex-instructions.test.js

@@ -0,0 +1,276 @@
+import { describe, it, expect, beforeEach, afterEach, vi } from "vitest";
+import * as fs from "fs";
+import * as os from "os";
+import * as path from "path";
+import { composeCodexAgentsMd, orderCapabilityFiles, gatherCodexAgentSections, materializeCodexAgents, codexHomeDir, CODEX_AGENTS_MARKER, AGENT_CONTRACT_FILE, AGENTS_PROFILE_REL, AGENT_CAPABILITIES_REL, } from "./agent-codex-instructions.js";
+describe("composeCodexAgentsMd (pure)", () => {
+    it("returns empty string for no sections", () => {
+        expect(composeCodexAgentsMd([])).toBe("");
+    });
+    it("returns empty string when every section is whitespace-only", () => {
+        const sections = [
+            { name: "a", content: "   \n\t " },
+            { name: "b", content: "" },
+        ];
+        expect(composeCodexAgentsMd(sections)).toBe("");
+    });
+    it("emits the generated marker header then the joined body", () => {
+        const out = composeCodexAgentsMd([
+            { name: "profile", content: "I am the agent." },
+            { name: "contract", content: "Build your own tools." },
+        ]);
+        expect(out.startsWith(CODEX_AGENTS_MARKER)).toBe(true);
+        expect(out).toContain("I am the agent.");
+        expect(out).toContain("Build your own tools.");
+        // body sections separated by a blank line, trailing newline
+        expect(out).toContain("I am the agent.\n\nBuild your own tools.");
+        expect(out.endsWith("\n")).toBe(true);
+    });
+    it("trims sections and drops the empty ones", () => {
+        const out = composeCodexAgentsMd([
+            { name: "a", content: "\n\n  kept  \n\n" },
+            { name: "b", content: "   " },
+            { name: "c", content: "also" },
+        ]);
+        expect(out).toContain("kept\n\nalso");
+        expect(out).not.toMatch(/ {2}kept/);
+    });
+    it("is deterministic / carries no timestamp (idempotent bytes)", () => {
+        const sections = [{ name: "x", content: "stable" }];
+        expect(composeCodexAgentsMd(sections)).toBe(composeCodexAgentsMd(sections));
+    });
+});
+describe("orderCapabilityFiles (pure)", () => {
+    it("orders the contract first, then the rest alphabetically", () => {
+        expect(orderCapabilityFiles(["slack.md", "zeta.md", AGENT_CONTRACT_FILE, "alpha.md"])).toEqual([AGENT_CONTRACT_FILE, "alpha.md", "slack.md", "zeta.md"]);
+    });
+    it("drops non-markdown entries", () => {
+        expect(orderCapabilityFiles([AGENT_CONTRACT_FILE, "_seed-allowlist.yaml", "notes.txt", "x.md"])).toEqual([AGENT_CONTRACT_FILE, "x.md"]);
+    });
+    it("handles a missing contract gracefully", () => {
+        expect(orderCapabilityFiles(["b.md", "a.md"])).toEqual(["a.md", "b.md"]);
+    });
+});
+describe("gatherCodexAgentSections + materializeCodexAgents (IO)", () => {
+    let hqRoot;
+    let codexHome;
+    const capDir = () => path.join(hqRoot, AGENT_CAPABILITIES_REL);
+    beforeEach(() => {
+        const base = fs.mkdtempSync(path.join(os.tmpdir(), "hq-codex-test-"));
+        hqRoot = path.join(base, "hq");
+        codexHome = path.join(base, ".codex");
+        fs.mkdirSync(capDir(), { recursive: true });
+    });
+    afterEach(() => {
+        try {
+            fs.rmSync(path.dirname(hqRoot), { recursive: true, force: true });
+        }
+        catch {
+            /* best-effort cleanup */
+        }
+    });
+    const seedProfile = (s) => fs.writeFileSync(path.join(hqRoot, AGENTS_PROFILE_REL), s);
+    const seedCap = (name, s) => fs.writeFileSync(path.join(capDir(), name), s);
+    it("gathers profile + contract + others in the right order", () => {
+        fs.mkdirSync(path.join(hqRoot, "personal"), { recursive: true });
+        seedProfile("PROFILE briefing");
+        seedCap("slack.md", "SLACK doc");
+        seedCap(AGENT_CONTRACT_FILE, "CONTRACT body");
+        const sections = gatherCodexAgentSections(hqRoot);
+        expect(sections.map((s) => s.name)).toEqual([
+            AGENTS_PROFILE_REL,
+            `${AGENT_CAPABILITIES_REL}/${AGENT_CONTRACT_FILE}`,
+            `${AGENT_CAPABILITIES_REL}/slack.md`,
+        ]);
+    });
+    it("writes ~/.codex/AGENTS.md with contract ahead of other capabilities", () => {
+        seedCap(AGENT_CONTRACT_FILE, "CONTRACT body");
+        seedCap("slack.md", "SLACK doc");
+        const res = materializeCodexAgents({ hqRoot, codexHome });
+        expect(res.written).toBe(true);
+        expect(res.sectionCount).toBe(2);
+        const written = fs.readFileSync(path.join(codexHome, "AGENTS.md"), "utf8");
+        expect(written.startsWith(CODEX_AGENTS_MARKER)).toBe(true);
+        expect(written.indexOf("CONTRACT body")).toBeLessThan(written.indexOf("SLACK doc"));
+    });
+    it("SKIPS (no write, no delete) when the overlay is empty — never destructive", () => {
+        // Pre-existing materialized file from a prior good sync.
+        fs.mkdirSync(codexHome, { recursive: true });
+        const existing = `${CODEX_AGENTS_MARKER} prior -->\n\nPRIOR CONTENT\n`;
+        fs.writeFileSync(path.join(codexHome, "AGENTS.md"), existing);
+        // Overlay is empty (transient unsynced tree).
+        const res = materializeCodexAgents({ hqRoot, codexHome });
+        expect(res.written).toBe(false);
+        expect(res.skippedReason).toBe("empty-overlay");
+        // The previously-materialized file is left intact.
+        expect(fs.readFileSync(path.join(codexHome, "AGENTS.md"), "utf8")).toBe(existing);
+    });
+    it("creates the codex home dir if missing", () => {
+        seedCap(AGENT_CONTRACT_FILE, "CONTRACT body");
+        expect(fs.existsSync(codexHome)).toBe(false);
+        const res = materializeCodexAgents({ hqRoot, codexHome });
+        expect(res.written).toBe(true);
+        expect(fs.existsSync(path.join(codexHome, "AGENTS.md"))).toBe(true);
+    });
+    it("is idempotent — two runs produce byte-identical output", () => {
+        seedCap(AGENT_CONTRACT_FILE, "CONTRACT body");
+        seedCap("slack.md", "SLACK doc");
+        materializeCodexAgents({ hqRoot, codexHome });
+        const first = fs.readFileSync(path.join(codexHome, "AGENTS.md"), "utf8");
+        materializeCodexAgents({ hqRoot, codexHome });
+        const second = fs.readFileSync(path.join(codexHome, "AGENTS.md"), "utf8");
+        expect(second).toBe(first);
+    });
+    it("never throws on an unreadable hq-root (returns error result)", () => {
+        const res = materializeCodexAgents({
+            hqRoot: path.join(hqRoot, "does-not-exist"),
+            codexHome,
+        });
+        expect(res.written).toBe(false);
+        // No capability dir → empty overlay → skip (not a hard error).
+        expect(res.skippedReason).toBe("empty-overlay");
+    });
+});
+describe("materializeCodexAgents — hardening (security + failure modes)", () => {
+    let base;
+    let hqRoot;
+    let codexHome;
+    const capDir = () => path.join(hqRoot, AGENT_CAPABILITIES_REL);
+    beforeEach(() => {
+        base = fs.mkdtempSync(path.join(os.tmpdir(), "hq-codex-harden-"));
+        hqRoot = path.join(base, "hq");
+        codexHome = path.join(base, ".codex");
+        fs.mkdirSync(capDir(), { recursive: true });
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+        try {
+            fs.rmSync(base, { recursive: true, force: true });
+        }
+        catch {
+            /* best-effort */
+        }
+    });
+    it("does NOT follow a symlinked capability file (no out-of-tree exfiltration)", () => {
+        // A secret outside the overlay; a symlink inside capDir pointing at it.
+        const secret = path.join(base, "secret.txt");
+        fs.writeFileSync(secret, "TOP-SECRET-CREDENTIAL");
+        fs.writeFileSync(path.join(capDir(), AGENT_CONTRACT_FILE), "CONTRACT body");
+        fs.symlinkSync(secret, path.join(capDir(), "escape.md"));
+        const sections = gatherCodexAgentSections(hqRoot);
+        // The symlink is skipped; only the real contract file is gathered.
+        expect(sections.map((s) => s.name)).toEqual([
+            `${AGENT_CAPABILITIES_REL}/${AGENT_CONTRACT_FILE}`,
+        ]);
+        const res = materializeCodexAgents({ hqRoot, codexHome });
+        const written = fs.readFileSync(path.join(codexHome, "AGENTS.md"), "utf8");
+        expect(written).not.toContain("TOP-SECRET-CREDENTIAL");
+        expect(res.sectionCount).toBe(1);
+    });
+    it("skips a symlinked capability DIR (no descent through a symlinked capDir)", () => {
+        // Replace capDir with a symlink to an external dir containing a real .md.
+        const external = path.join(base, "external-caps");
+        fs.mkdirSync(external, { recursive: true });
+        fs.writeFileSync(path.join(external, AGENT_CONTRACT_FILE), "EXTERNAL body");
+        fs.rmSync(capDir(), { recursive: true, force: true });
+        fs.symlinkSync(external, capDir());
+        const sections = gatherCodexAgentSections(hqRoot);
+        expect(sections).toEqual([]);
+    });
+    it("refuses to clobber a SYMLINK target (preserves it; distinct skip reason)", () => {
+        fs.writeFileSync(path.join(capDir(), AGENT_CONTRACT_FILE), "CONTRACT body");
+        fs.mkdirSync(codexHome, { recursive: true });
+        const realTarget = path.join(base, "managed-agents.md");
+        fs.writeFileSync(realTarget, "MANAGED BY DOTFILES");
+        fs.symlinkSync(realTarget, path.join(codexHome, "AGENTS.md"));
+        const res = materializeCodexAgents({ hqRoot, codexHome });
+        expect(res.written).toBe(false);
+        expect(res.skippedReason).toBe("target-not-regular-file");
+        // The symlink is intact and still points at the managed file.
+        expect(fs.lstatSync(path.join(codexHome, "AGENTS.md")).isSymbolicLink()).toBe(true);
+        expect(fs.readFileSync(realTarget, "utf8")).toBe("MANAGED BY DOTFILES");
+    });
+    it("refuses when the target is a DIRECTORY (no EISDIR crash, distinct reason)", () => {
+        fs.writeFileSync(path.join(capDir(), AGENT_CONTRACT_FILE), "CONTRACT body");
+        fs.mkdirSync(path.join(codexHome, "AGENTS.md"), { recursive: true });
+        const res = materializeCodexAgents({ hqRoot, codexHome });
+        expect(res.written).toBe(false);
+        expect(res.skippedReason).toBe("target-not-regular-file");
+        expect(fs.statSync(path.join(codexHome, "AGENTS.md")).isDirectory()).toBe(true);
+    });
+    // chmod 0o500 does not make a directory unwritable on Windows, so
+    // writeFileSync (agent-codex-instructions.ts:283) succeeds and this EACCES
+    // cleanup cannot be built. POSIX coverage stays in this test.
+    it.skipIf(process.platform === "win32")("returns an error result and leaves no .hq-tmp orphan when the write fails", () => {
+        // Root ignores mode bits, so this deterministic perms-based failure only
+        // holds for a non-root user (agent boxes + CI run non-root).
+        if (typeof process.getuid === "function" && process.getuid() === 0)
+            return;
+        fs.writeFileSync(path.join(capDir(), AGENT_CONTRACT_FILE), "CONTRACT body");
+        // Read-only codex home → the temp write inside it fails (EACCES). The
+        // write+rename block's catch must unlink any temp before rethrowing, so no
+        // `*.hq-tmp` is left behind.
+        fs.mkdirSync(codexHome, { recursive: true });
+        fs.chmodSync(codexHome, 0o500);
+        try {
+            const res = materializeCodexAgents({ hqRoot, codexHome });
+            expect(res.written).toBe(false);
+            expect(res.skippedReason).toBe("error");
+            const leftovers = fs
+                .readdirSync(codexHome)
+                .filter((f) => f.endsWith(".hq-tmp"));
+            expect(leftovers).toEqual([]);
+        }
+        finally {
+            fs.chmodSync(codexHome, 0o700); // restore so afterEach cleanup works
+        }
+    });
+    it("writes the file with owner-only perms (0o600)", () => {
+        fs.writeFileSync(path.join(capDir(), AGENT_CONTRACT_FILE), "CONTRACT body");
+        materializeCodexAgents({ hqRoot, codexHome });
+        const mode = fs.statSync(path.join(codexHome, "AGENTS.md")).mode & 0o777;
+        // writeFileSync uses mode 0o600 (agent-codex-instructions.ts:283). Node on
+        // win32 reports 0o666 for every writable file (file-mode-portability.ts:23).
+        expect(mode).toBe(process.platform === "win32" ? 0o666 : 0o600);
+    });
+    it("emits a distinct event when the overlay is empty but a prior file exists", () => {
+        fs.mkdirSync(codexHome, { recursive: true });
+        fs.writeFileSync(path.join(codexHome, "AGENTS.md"), "PRIOR\n");
+        const events = [];
+        const res = materializeCodexAgents({
+            hqRoot, // capDir empty, no profile → empty overlay
+            codexHome,
+            log: (e) => events.push(e.event),
+        });
+        expect(res.skippedReason).toBe("empty-overlay");
+        expect(events).toContain("runner.agent_codex_instructions.skipped_empty_target_exists");
+        // Prior file left intact.
+        expect(fs.readFileSync(path.join(codexHome, "AGENTS.md"), "utf8")).toBe("PRIOR\n");
+    });
+});
+describe("codexHomeDir (CODEX_HOME validation)", () => {
+    const orig = process.env.CODEX_HOME;
+    afterEach(() => {
+        if (orig === undefined)
+            delete process.env.CODEX_HOME;
+        else
+            process.env.CODEX_HOME = orig;
+    });
+    it("defaults to ~/.codex when CODEX_HOME is unset", () => {
+        delete process.env.CODEX_HOME;
+        expect(codexHomeDir()).toBe(path.join(os.homedir(), ".codex"));
+    });
+    it("honors an absolute CODEX_HOME with no traversal", () => {
+        process.env.CODEX_HOME = "/var/lib/agent-codex";
+        expect(codexHomeDir()).toBe("/var/lib/agent-codex");
+    });
+    it("rejects a relative CODEX_HOME (falls back to ~/.codex)", () => {
+        process.env.CODEX_HOME = "relative/codex";
+        expect(codexHomeDir()).toBe(path.join(os.homedir(), ".codex"));
+    });
+    it("rejects a traversing CODEX_HOME (falls back to ~/.codex)", () => {
+        process.env.CODEX_HOME = "/tmp/../../etc";
+        expect(codexHomeDir()).toBe(path.join(os.homedir(), ".codex"));
+    });
+});
+//# sourceMappingURL=agent-codex-instructions.test.js.map

package/dist/agent-codex-instructions.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-codex-instructions.test.js","sourceRoot":"","sources":["../src/agent-codex-instructions.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,EACtB,YAAY,EACZ,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,GAEvB,MAAM,+BAA+B,CAAC;AAEvC,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,QAAQ,GAAmB;YAC/B,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE;YAClC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE;SAC3B,CAAC;QACF,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,GAAG,GAAG,oBAAoB,CAAC;YAC/B,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE;YAC/C,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,uBAAuB,EAAE;SACvD,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAC/C,4DAA4D;QAC5D,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,0CAA0C,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,GAAG,GAAG,oBAAoB,CAAC;YAC/B,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,kBAAkB,EAAE;YAC1C,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;YAC7B,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;SAC/B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CACJ,oBAAoB,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC,CAC/E,CAAC,OAAO,CAAC,CAAC,mBAAmB,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CACJ,oBAAoB,CAAC,CAAC,mBAAmB,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CACzF,CAAC,OAAO,CAAC,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,oBAAoB,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wDAAwD,EAAE,GAAG,EAAE;IACtE,IAAI,MAAc,CAAC;IACnB,IAAI,SAAiB,CAAC;IACtB,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAE/D,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACtE,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/B,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACtC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,EAAE,CAChC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,CAAS,EAAE,EAAE,CAC1C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAEjD,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,WAAW,CAAC,kBAAkB,CAAC,CAAC;QAChC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACjC,OAAO,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;QAE9C,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,kBAAkB;YAClB,GAAG,sBAAsB,IAAI,mBAAmB,EAAE;YAClD,GAAG,sBAAsB,WAAW;SACrC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,OAAO,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;QAC9C,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAEjC,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEjC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3E,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY,CACnD,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAC7B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,yDAAyD;QACzD,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,GAAG,mBAAmB,+BAA+B,CAAC;QACvE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;QAE9D,8CAA8C;QAC9C,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChD,mDAAmD;QACnD,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CACrE,QAAQ,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,OAAO,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;QAC9C,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,OAAO,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;QAC9C,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACjC,sBAAsB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QACzE,sBAAsB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,GAAG,GAAG,sBAAsB,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC;YAC3C,SAAS;SACV,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,+DAA+D;QAC/D,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+DAA+D,EAAE,GAAG,EAAE;IAC7E,IAAI,IAAY,CAAC;IACjB,IAAI,MAAc,CAAC;IACnB,IAAI,SAAiB,CAAC;IACtB,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAE/D,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAClE,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/B,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACtC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,wEAAwE;QACxE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC7C,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;QAClD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,EAAE,eAAe,CAAC,CAAC;QAC5E,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;QAEzD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAClD,mEAAmE;QACnE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,GAAG,sBAAsB,IAAI,mBAAmB,EAAE;SACnD,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3E,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAClD,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,EAAE,eAAe,CAAC,CAAC;QAC5E,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAEnC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,EAAE,eAAe,CAAC,CAAC;QAC5E,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QACxD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;QACpD,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;QAE9D,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC1D,8DAA8D;QAC9D,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAC3E,IAAI,CACL,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,EAAE,eAAe,CAAC,CAAC;QAC5E,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAErE,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC1D,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,2EAA2E;IAC3E,8DAA8D;IAC9D,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACxH,yEAAyE;QACzE,6DAA6D;QAC7D,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO;QAC3E,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,EAAE,eAAe,CAAC,CAAC;QAC5E,sEAAsE;QACtE,2EAA2E;QAC3E,6BAA6B;QAC7B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAC1D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,EAAE;iBACjB,WAAW,CAAC,SAAS,CAAC;iBACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChC,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,qCAAqC;QACvE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,EAAE,eAAe,CAAC,CAAC;QAC5E,sBAAsB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QACzE,2EAA2E;QAC3E,6EAA6E;QAC7E,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,sBAAsB,CAAC;YACjC,MAAM,EAAE,2CAA2C;YACnD,SAAS;YACT,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CACtB,6DAA6D,CAC9D,CAAC;QACF,0BAA0B;QAC1B,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CACrE,SAAS,CACV,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACpC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;;YACjD,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAC9B,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,sBAAsB,CAAC;QAChD,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,gBAAgB,CAAC;QAC1C,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,gBAAgB,CAAC;QAC1C,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/backup-prune.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=backup-prune.test.d.ts.map

package/dist/backup-prune.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-prune.test.d.ts","sourceRoot":"","sources":["../src/backup-prune.test.ts"],"names":[],"mappings":""}

package/dist/backup-prune.test.js

@@ -0,0 +1,154 @@
+import { describe, expect, it } from "vitest";
+import * as fs from "fs";
+import * as os from "os";
+import * as path from "path";
+import { applyBackupPrune, applyBackupPruneBounded, canonicalRootHash, inventoryManagedSnapshots, planBackupPrune, } from "./backup-prune.js";
+const DAY = 86_400_000;
+const now = Date.UTC(2026, 6, 15, 12);
+const rootA = "/tmp/hq-a";
+const rootB = "/tmp/hq-b";
+function entry(name, age, status, root = rootA) {
+    const at = new Date(now - age * DAY).toISOString();
+    return { name, createdMs: now - age * DAY, completedMs: now - age * DAY, bytes: 1,
+        manifest: { schemaVersion: 1, status, canonicalHqRoot: root, rootHash: canonicalRootHash(root), runId: name,
+            creatorPid: 1, creatorStartedAt: at, source: "source", ref: "main", sourceSha: "sha", createdAt: at,
+            completedAt: at, includedRoots: ["core"], fileCount: 1, byteCount: 1 } };
+}
+const names = (x) => x.candidates.map((c) => c.entry.name).sort();
+const protectedNames = (x) => x.protected.map((p) => `${p.entry.name}:${p.reason}`).sort();
+describe("planBackupPrune", () => {
+    it("keeps the newest two known-good snapshots per canonical root", () => {
+        const p = planBackupPrune([entry("a1", 0, "completed-good"), entry("a2", 1, "completed-good"), entry("a3", 2, "completed-good"), entry("a4", 3, "completed-good"), entry("b1", 0, "completed-good", rootB)], now);
+        expect(names(p)).toEqual(["a3", "a4"]);
+        expect(protectedNames(p)).toContain("a1:newest-good");
+        expect(protectedNames(p)).toContain("b1:newest-good");
+    });
+    it("never selects the sole, old known-good snapshot", () => {
+        const p = planBackupPrune([entry("only", 30, "completed-good")], now);
+        expect(names(p)).toEqual([]);
+        expect(protectedNames(p)).toEqual(["only:newest-good"]);
+    });
+    it("retains copying and unsuperseded recovery evidence", () => {
+        const p = planBackupPrune([entry("copy", 40, "copying"), entry("recovery", 40, "recovery-required")], now);
+        expect(names(p)).toEqual([]);
+        expect(protectedNames(p)).toContain("copy:copying-not-superseded");
+        expect(protectedNames(p)).toContain("recovery:recovery-required-no-later-good");
+    });
+    it("requires a later good run before pruning recovery-required snapshots", () => {
+        const p = planBackupPrune([entry("recovery-old", 30, "recovery-required"), entry("recovery-new", 2, "recovery-required"), entry("good", 1, "completed-good")], now);
+        expect(names(p)).toEqual(["recovery-old"]);
+        expect(protectedNames(p)).toContain("recovery-new:newest-recovery-required-grace");
+    });
+    it("only prunes failed-pre-mutation snapshots after a newer ready/good snapshot", () => {
+        const noSuccess = planBackupPrune([entry("failure", 20, "failed-pre-mutation")], now);
+        expect(names(noSuccess)).toEqual([]);
+        const p = planBackupPrune([entry("failure-new", 1, "failed-pre-mutation"), entry("failure-old", 2, "failed-pre-mutation"), entry("ready", 0, "ready")], now);
+        expect(names(p)).toEqual(["failure-old"]);
+    });
+    it("prunes older incomplete snapshots after a newer incomplete snapshot", () => {
+        const p = planBackupPrune([
+            entry("incomplete-new", 0, "incomplete"),
+            entry("incomplete-middle", 1, "incomplete"),
+            entry("incomplete-old", 2, "incomplete"),
+            entry("failed", 3, "failed-pre-mutation"),
+        ], now, { keepFailedPreMutation: 1 });
+        expect(names(p)).toEqual(["incomplete-middle", "incomplete-old"]);
+        expect(protectedNames(p)).toContain("incomplete-new:incomplete-not-superseded");
+        expect(protectedNames(p)).toContain("failed:failed-pre-mutation-not-superseded");
+    });
+    it("clamps malformed retention so the newest good is still protected", () => {
+        const p = planBackupPrune([entry("one", 30, "completed-good"), entry("two", 31, "completed-good"), entry("three", 32, "completed-good")], now, { keepGood: 0, maxAgeDays: Number.NaN });
+        expect(names(p)).toEqual(["three"]);
+        expect(protectedNames(p)).toContain("one:newest-good");
+    });
+});
+describe("managed snapshot filesystem boundary", () => {
+    it("does not select prefix matches, mcp, symlinks, malformed metadata, or changed candidates", () => {
+        const root = fs.mkdtempSync(path.join(os.tmpdir(), "hq-prune-root-"));
+        const backup = fs.mkdtempSync(path.join(os.tmpdir(), "hq-prune-backup-"));
+        try {
+            const make = (name, age) => {
+                const dir = path.join(backup, name);
+                fs.mkdirSync(dir);
+                const at = new Date(now - age * DAY).toISOString();
+                fs.writeFileSync(path.join(dir, "SNAPSHOT.json"), JSON.stringify({ ...entry(name, age, "completed-good", root).manifest, runId: name, createdAt: at, completedAt: at }));
+                return dir;
+            };
+            const good1 = make("pre-update-2026-07-15T12-00-00Z-" + canonicalRootHash(root) + "-one", 0);
+            const good2 = make("pre-update-2026-07-14T12-00-00Z-" + canonicalRootHash(root) + "-two", 1);
+            const old = make("pre-update-2026-07-13T12-00-00Z-" + canonicalRootHash(root) + "-three", 2);
+            fs.mkdirSync(path.join(backup, "mcp"));
+            fs.mkdirSync(path.join(backup, "pre-update-not-managed"));
+            fs.symlinkSync(good1, path.join(backup, "pre-update-2026-07-12T12-00-00Z-" + canonicalRootHash(root) + "-symlink"));
+            const inventory = inventoryManagedSnapshots(backup, root);
+            expect(inventory.candidates.map((x) => x.entry.name)).toEqual([path.basename(old)]);
+            expect(inventory.unmanaged.map((x) => x.name)).toEqual(expect.arrayContaining(["mcp", "pre-update-not-managed"]));
+            // A changed manifest invalidates the dry-run identity and cannot be removed.
+            fs.writeFileSync(path.join(old, "SNAPSHOT.json"), JSON.stringify({ ...entry("replacement", 2, "completed-good", root).manifest }));
+            const result = applyBackupPrune(backup, root, inventory);
+            expect(result.deleted).toEqual([]);
+            expect(fs.existsSync(old)).toBe(true);
+            expect(fs.existsSync(path.join(backup, "mcp"))).toBe(true);
+            expect(fs.existsSync(good2)).toBe(true);
+        }
+        finally {
+            fs.rmSync(root, { recursive: true, force: true });
+            fs.rmSync(backup, { recursive: true, force: true });
+        }
+    });
+    it("rejects a non-array symlink collection during manifest admission", () => {
+        const root = fs.mkdtempSync(path.join(os.tmpdir(), "hq-prune-root-"));
+        const backup = fs.mkdtempSync(path.join(os.tmpdir(), "hq-prune-backup-"));
+        try {
+            const name = `pre-update-2026-07-15T12-00-00Z-${canonicalRootHash(root)}-badlinks`;
+            const dir = path.join(backup, name);
+            fs.mkdirSync(dir);
+            const manifest = {
+                ...entry(name, 0, "recovery-required", root).manifest,
+                runId: "badlinks",
+                symlinks: { path: "core/link", target: "release.txt" },
+            };
+            fs.writeFileSync(path.join(dir, "SNAPSHOT.json"), JSON.stringify(manifest));
+            const inventory = inventoryManagedSnapshots(backup, root);
+            expect(inventory.entries).toEqual([]);
+            expect(inventory.unmanaged).toContainEqual({
+                name,
+                reason: "metadata-does-not-match-canonical-root",
+            });
+        }
+        finally {
+            fs.rmSync(root, { recursive: true, force: true });
+            fs.rmSync(backup, { recursive: true, force: true });
+        }
+    });
+});
+describe("bounded prune application", () => {
+    it("yields after one destructive unit so a chore can be preempted", () => {
+        const root = fs.mkdtempSync(path.join(os.tmpdir(), "hq-prune-bounded-root-"));
+        const backup = fs.mkdtempSync(path.join(os.tmpdir(), "hq-prune-bounded-backup-"));
+        try {
+            const make = (suffix, age) => {
+                const name = `pre-update-2026-07-${String(15 - age).padStart(2, "0")}T12-00-00Z-${canonicalRootHash(root)}-${suffix}`;
+                const dir = path.join(backup, name);
+                fs.mkdirSync(dir);
+                fs.writeFileSync(path.join(dir, "SNAPSHOT.json"), JSON.stringify(entry(suffix, age, "completed-good", root).manifest));
+            };
+            make("one", 0);
+            make("two", 1);
+            make("three", 2);
+            make("four", 3);
+            const plan = inventoryManagedSnapshots(backup, root, () => false, { keepGood: 1 });
+            expect(plan.candidates).toHaveLength(3);
+            const first = applyBackupPruneBounded(backup, root, plan, { maxUnits: 1 });
+            expect(first.deleted).toHaveLength(1);
+            expect(first.complete).toBe(false);
+            expect(first.nextIndex).toBe(1);
+            expect(fs.existsSync(path.join(backup, plan.candidates[1].entry.name))).toBe(true);
+        }
+        finally {
+            fs.rmSync(root, { recursive: true, force: true });
+            fs.rmSync(backup, { recursive: true, force: true });
+        }
+    });
+});
+//# sourceMappingURL=backup-prune.test.js.map