@indigoai-us/hq-cloud 6.18.44-alpha.48 → 6.18.44-alpha.49

package/dist/manifest/import-graph.test.js

@@ -0,0 +1,120 @@
+/**
+ * The manifest builder's import graph must stay LEAN.
+ *
+ * `buildSyncManifest` is client hot-path code: it runs on the user's laptop
+ * beside their editor, and it is imported by the CLI. Its cost budget is a
+ * stat walk, not a module graph. The package already draws this line
+ * explicitly (see the `"//exports"` note in package.json, which keeps
+ * `./outposts` free of the AWS SDK) and it is easy to cross by accident — one
+ * convenience import of a helper that happens to live next to the S3 client
+ * pulls in `@aws-sdk/client-s3`, Cognito auth and telemetry for the sake of a
+ * one-line pure function. That has already happened twice on this branch:
+ * `isSafeCompanySlug` from `manifest-reconcile.ts`, and `toPosixKey` reaching
+ * `journal.ts` from `s3.ts`. Both are now leaf modules.
+ *
+ * A type-level assertion cannot catch this, and neither can a unit test of the
+ * builder's behaviour, so the graph itself is the thing under test: walk the
+ * relative imports from `build-manifest.ts` and assert the closure never
+ * reaches the heavy modules.
+ *
+ * `import type` / `export type` statements are excluded — tsc erases them, so
+ * they cost nothing at runtime (this is why `pull-scope.ts`'s type-only
+ * reference to `vault-client.ts` is fine).
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+const SRC_DIR = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const ENTRY = path.join(SRC_DIR, "manifest", "build-manifest.ts");
+/** Local modules whose transitive weight is the whole point of this test. */
+const FORBIDDEN_LOCAL = ["vault-client.ts", "cognito-auth.ts", "s3.ts", "object-io.ts", "telemetry.ts"];
+/** Package prefixes that must never appear in the builder's runtime graph. */
+const FORBIDDEN_PACKAGES = ["@aws-sdk/", "pino", "chokidar"];
+function stripNonCode(source) {
+    return source
+        .replace(/\/\*[\s\S]*?\*\//g, "")
+        .replace(/^\s*\/\/.*$/gm, "")
+        // Erased by the compiler: not part of the runtime graph.
+        .replace(/\b(?:import|export)\s+type\b[^;'"]*?\bfrom\s*["'][^"']+["']/g, "");
+}
+function specifiersIn(source) {
+    const code = stripNonCode(source);
+    const re = /\b(?:import|export)\b[^;'"]*?\bfrom\s*["']([^"']+)["']|(?:^|[\n;])\s*import\s*["']([^"']+)["']|\bimport\(\s*["']([^"']+)["']\s*\)/g;
+    const found = [];
+    for (let m = re.exec(code); m !== null; m = re.exec(code)) {
+        const spec = m[1] ?? m[2] ?? m[3];
+        if (spec)
+            found.push(spec);
+    }
+    return found;
+}
+/** Resolve a relative TS specifier the way NodeNext + tsc does (".js" → ".ts"). */
+function resolveLocal(fromFile, spec) {
+    const base = path.resolve(path.dirname(fromFile), spec.replace(/\.js$/, ""));
+    for (const candidate of [`${base}.ts`, path.join(base, "index.ts")]) {
+        if (fs.existsSync(candidate))
+            return candidate;
+    }
+    return null;
+}
+function buildClosure(entry) {
+    const key = (abs) => path.relative(SRC_DIR, abs).split(path.sep).join("/");
+    const closure = {
+        local: new Set([key(entry)]),
+        packages: new Map(),
+        parent: new Map([[key(entry), null]]),
+    };
+    const queue = [entry];
+    const unresolved = [];
+    while (queue.length > 0) {
+        const file = queue.shift();
+        for (const spec of specifiersIn(fs.readFileSync(file, "utf8"))) {
+            if (!spec.startsWith(".")) {
+                if (!closure.packages.has(spec))
+                    closure.packages.set(spec, key(file));
+                continue;
+            }
+            const resolved = resolveLocal(file, spec);
+            if (resolved === null) {
+                unresolved.push(`${key(file)} -> ${spec}`);
+                continue;
+            }
+            if (closure.local.has(key(resolved)))
+                continue;
+            closure.local.add(key(resolved));
+            closure.parent.set(key(resolved), key(file));
+            queue.push(resolved);
+        }
+    }
+    // A specifier this walker cannot resolve is a HOLE in the graph, which would
+    // let a forbidden module slip through unnoticed. Fail loudly instead.
+    expect(unresolved).toEqual([]);
+    return closure;
+}
+/** "a -> b -> c": how the offending module got pulled in. */
+function blameChain(closure, target) {
+    const chain = [];
+    for (let cur = target; cur; cur = closure.parent.get(cur)) {
+        chain.unshift(cur);
+    }
+    return chain.join(" -> ");
+}
+describe("manifest builder import graph", () => {
+    const closure = buildClosure(ENTRY);
+    it("resolves a non-trivial closure (the walker actually walked)", () => {
+        // Guards against the walker silently matching nothing and passing vacuously.
+        expect(closure.local.size).toBeGreaterThan(5);
+        expect(closure.local).toContain("journal.ts");
+        expect(closure.local).toContain("ignore.ts");
+    });
+    it.each(FORBIDDEN_LOCAL)("does not reach %s", (module) => {
+        const hit = [...closure.local].find((f) => f === module || f.endsWith(`/${module}`));
+        expect(hit ? blameChain(closure, hit) : undefined).toBeUndefined();
+    });
+    it.each(FORBIDDEN_PACKAGES)("does not pull in %s", (prefix) => {
+        const hit = [...closure.packages].find(([spec]) => spec.startsWith(prefix));
+        expect(hit ? `${hit[0]} <- ${blameChain(closure, hit[1])}` : undefined).toBeUndefined();
+    });
+});
+//# sourceMappingURL=import-graph.test.js.map

package/dist/manifest/import-graph.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-graph.test.js","sourceRoot":"","sources":["../../src/manifest/import-graph.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AACjF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;AAElE,6EAA6E;AAC7E,MAAM,eAAe,GAAG,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;AACxG,8EAA8E;AAC9E,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAW7D,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO,MAAM;SACV,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAChC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;QAC7B,yDAAyD;SACxD,OAAO,CAAC,8DAA8D,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,EAAE,GACN,oIAAoI,CAAC;IACvI,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mFAAmF;AACnF,SAAS,YAAY,CAAC,QAAgB,EAAE,IAAY;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7E,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnF,MAAM,OAAO,GAAY;QACvB,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5B,QAAQ,EAAE,IAAI,GAAG,EAAE;QACnB,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;KACtC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAY,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvE,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC3C,SAAS;YACX,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAAE,SAAS;YAC/C,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,6DAA6D;AAC7D,SAAS,UAAU,CAAC,OAAgB,EAAE,MAAc;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,GAAG,GAA8B,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACrF,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAEpC,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,6EAA6E;QAC7E,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,mBAAmB,EAAE,CAAC,MAAM,EAAE,EAAE;QACvD,MAAM,GAAG,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;QACrF,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,qBAAqB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC5D,MAAM,GAAG,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/manifest/ledger-shard-isolation.test.d.ts

@@ -0,0 +1,18 @@
+/**
+ * The manifest build reads ONE journal shard: the one describing its scope.
+ *
+ * This is a memory invariant expressed as a behavioural one. `listJournals()`
+ * reads and parses every shard on the machine, and on a laptop holding a
+ * personal vault plus several cloud companies that was the single largest line
+ * item in the tail step's footprint — hundreds of megabytes spent parsing
+ * ledgers whose rows were then dropped on the floor, repaid once per scope in
+ * a fanout.
+ *
+ * A byte counter would be the obvious gate and the wrong one: it moves with
+ * fixture size and tempts a future reader to widen it. The thing that must not
+ * come back is the ENUMERATION, so the assertion counts journal files opened.
+ * One is correct; anything above one means a caller has gone back to reading
+ * the machine instead of the scope, no matter what the megabytes say.
+ */
+export {};
+//# sourceMappingURL=ledger-shard-isolation.test.d.ts.map

package/dist/manifest/ledger-shard-isolation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-shard-isolation.test.d.ts","sourceRoot":"","sources":["../../src/manifest/ledger-shard-isolation.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG"}

package/dist/manifest/ledger-shard-isolation.test.js

@@ -0,0 +1,153 @@
+/**
+ * The manifest build reads ONE journal shard: the one describing its scope.
+ *
+ * This is a memory invariant expressed as a behavioural one. `listJournals()`
+ * reads and parses every shard on the machine, and on a laptop holding a
+ * personal vault plus several cloud companies that was the single largest line
+ * item in the tail step's footprint — hundreds of megabytes spent parsing
+ * ledgers whose rows were then dropped on the floor, repaid once per scope in
+ * a fanout.
+ *
+ * A byte counter would be the obvious gate and the wrong one: it moves with
+ * fixture size and tempts a future reader to widen it. The thing that must not
+ * come back is the ENUMERATION, so the assertion counts journal files opened.
+ * One is correct; anything above one means a caller has gone back to reading
+ * the machine instead of the scope, no matter what the megabytes say.
+ */
+import * as os from "node:os";
+import * as path from "node:path";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+/**
+ * Journal reads reach the filesystem through two specifiers — `journal.ts`
+ * imports `"fs"` and the streaming ledger reader imports `"node:fs"` — and a
+ * counter that watches only one of them would report a comfortable "1" while
+ * the other quietly read the whole state dir. Both are instrumented, and the
+ * counts are keyed by resolved path so a shard opened twice through different
+ * specifiers is still one shard.
+ */
+const opened = vi.hoisted(() => ({ paths: [] }));
+function recordIfJournal(target) {
+    const value = String(target);
+    if (/sync-journal\..*\.json$/.test(value))
+        opened.paths.push(value);
+}
+vi.mock("node:fs", async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        default: actual,
+        openSync: ((target, ...rest) => {
+            recordIfJournal(target);
+            return actual.openSync(target, ...rest);
+        }),
+        readFileSync: ((target, ...rest) => {
+            recordIfJournal(target);
+            return actual.readFileSync(target, ...rest);
+        }),
+    };
+});
+vi.mock("fs", async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        default: actual,
+        openSync: ((target, ...rest) => {
+            recordIfJournal(target);
+            return actual.openSync(target, ...rest);
+        }),
+        readFileSync: ((target, ...rest) => {
+            recordIfJournal(target);
+            return actual.readFileSync(target, ...rest);
+        }),
+    };
+});
+const fs = await import("node:fs");
+const { buildSyncManifest } = await import("./build-manifest.js");
+const { PERSONAL_VAULT_JOURNAL_SLUG } = await import("../journal.js");
+const OTHER_SLUGS = ["acme", "globex", "initech"];
+let base;
+let hqRoot;
+let stateDir;
+let previousStateDir;
+function writeShard(slug, files) {
+    fs.writeFileSync(path.join(stateDir, `sync-journal.${slug}.json`), JSON.stringify({ version: "2", files, pulls: [] }), "utf8");
+}
+function ledgerRow(index) {
+    return {
+        hash: `sha256:${index.toString(16).padStart(64, "0")}`,
+        size: 100 + index,
+        syncedAt: "2026-01-01T00:00:00.000Z",
+        direction: "up",
+    };
+}
+beforeEach(() => {
+    base = fs.mkdtempSync(path.join(os.tmpdir(), "hq-shard-isolation-"));
+    hqRoot = path.join(base, "hq");
+    stateDir = path.join(base, "state");
+    fs.mkdirSync(stateDir, { recursive: true });
+    fs.mkdirSync(path.join(hqRoot, "notes"), { recursive: true });
+    fs.writeFileSync(path.join(hqRoot, "notes", "kept.md"), "kept\n");
+    writeShard(PERSONAL_VAULT_JOURNAL_SLUG, {
+        "notes/kept.md": ledgerRow(1),
+        "notes/gone.md": ledgerRow(2),
+    });
+    // Present only so they can be NOT read. Each carries a row that would be
+    // unmistakable if it leaked into the personal manifest.
+    OTHER_SLUGS.forEach((slug, index) => {
+        writeShard(slug, { [`${slug}/secret-${index}.md`]: ledgerRow(100 + index) });
+    });
+    previousStateDir = process.env.HQ_STATE_DIR;
+    process.env.HQ_STATE_DIR = stateDir;
+    opened.paths = [];
+});
+afterEach(() => {
+    if (previousStateDir === undefined)
+        delete process.env.HQ_STATE_DIR;
+    else
+        process.env.HQ_STATE_DIR = previousStateDir;
+    fs.rmSync(base, { recursive: true, force: true });
+});
+describe("buildSyncManifest — the ledger read is scoped to one shard", () => {
+    it("opens the scope's journal file and no other", async () => {
+        const result = await buildSyncManifest({
+            scope: { kind: "personal" },
+            hqRoot,
+            stateDir,
+            installationId: "install-shard",
+            machineId: "machine-shard",
+            source: "cli",
+            sequence: 1,
+            hashPolicy: "never",
+            maxWallMs: 60_000,
+            persistSnapshot: false,
+        });
+        const distinct = [...new Set(opened.paths)];
+        expect(distinct).toEqual([path.join(stateDir, `sync-journal.${PERSONAL_VAULT_JOURNAL_SLUG}.json`)]);
+        // The count is only meaningful if the shard was actually USED: a read that
+        // returns nothing also opens nothing.
+        const reported = result.chunks.flatMap((chunk) => chunk.entries);
+        expect(reported.map((entry) => entry.path).sort()).toEqual(["notes/gone.md", "notes/kept.md"]);
+        // And nothing from a neighbouring tenant's shard came along for the ride.
+        expect(reported.some((entry) => entry.path.includes("secret-"))).toBe(false);
+    });
+    it("stays at one shard as the machine accumulates more companies", async () => {
+        for (let index = 0; index < 12; index += 1) {
+            writeShard(`extra-${index}`, { [`extra-${index}/a.md`]: ledgerRow(index) });
+        }
+        opened.paths = [];
+        await buildSyncManifest({
+            scope: { kind: "personal" },
+            hqRoot,
+            stateDir,
+            installationId: "install-shard",
+            machineId: "machine-shard",
+            source: "cli",
+            sequence: 1,
+            hashPolicy: "never",
+            maxWallMs: 60_000,
+            persistSnapshot: false,
+        });
+        expect(new Set(opened.paths).size).toBe(1);
+    });
+});
+//# sourceMappingURL=ledger-shard-isolation.test.js.map

package/dist/manifest/ledger-shard-isolation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-shard-isolation.test.js","sourceRoot":"","sources":["../../src/manifest/ledger-shard-isolation.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAc,EAAE,CAAC,CAAC,CAAC;AAE7D,SAAS,eAAe,CAAC,MAAe;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC1C,MAAM,MAAM,GAAG,MAAM,cAAc,EAA4B,CAAC;IAChE,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,CAAC,CAAC,MAAe,EAAE,GAAG,IAAe,EAAE,EAAE;YACjD,eAAe,CAAC,MAAM,CAAC,CAAC;YACxB,OAAQ,MAAM,CAAC,QAAsD,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;QACzF,CAAC,CAA2B;QAC5B,YAAY,EAAE,CAAC,CAAC,MAAe,EAAE,GAAG,IAAe,EAAE,EAAE;YACrD,eAAe,CAAC,MAAM,CAAC,CAAC;YACxB,OAAQ,MAAM,CAAC,YAA2D,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9F,CAAC,CAA+B;KACjC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrC,MAAM,MAAM,GAAG,MAAM,cAAc,EAA4B,CAAC;IAChE,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,CAAC,CAAC,MAAe,EAAE,GAAG,IAAe,EAAE,EAAE;YACjD,eAAe,CAAC,MAAM,CAAC,CAAC;YACxB,OAAQ,MAAM,CAAC,QAAsD,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;QACzF,CAAC,CAA2B;QAC5B,YAAY,EAAE,CAAC,CAAC,MAAe,EAAE,GAAG,IAAe,EAAE,EAAE;YACrD,eAAe,CAAC,MAAM,CAAC,CAAC;YACxB,OAAQ,MAAM,CAAC,YAA2D,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9F,CAAC,CAA+B;KACjC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;AACnC,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAClE,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;AAEtE,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAElD,IAAI,IAAY,CAAC;AACjB,IAAI,MAAc,CAAC;AACnB,IAAI,QAAgB,CAAC;AACrB,IAAI,gBAAoC,CAAC;AAEzC,SAAS,UAAU,CAAC,IAAY,EAAE,KAA8B;IAC9D,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,IAAI,OAAO,CAAC,EAChD,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAClD,MAAM,CACP,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO;QACL,IAAI,EAAE,UAAU,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE;QACtD,IAAI,EAAE,GAAG,GAAG,KAAK;QACjB,QAAQ,EAAE,0BAA0B;QACpC,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACrE,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;IAElE,UAAU,CAAC,2BAA2B,EAAE;QACtC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7B,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;KAC9B,CAAC,CAAC;IACH,yEAAyE;IACzE,wDAAwD;IACxD,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAClC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,WAAW,KAAK,KAAK,CAAC,EAAE,SAAS,CAAC,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,QAAQ,CAAC;IACpC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;AACpB,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;;QAC/D,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,gBAAgB,CAAC;IACjD,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4DAA4D,EAAE,GAAG,EAAE;IAC1E,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YAC3B,MAAM;YACN,QAAQ;YACR,cAAc,EAAE,eAAe;YAC/B,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,OAAO;YACnB,SAAS,EAAE,MAAM;YACjB,eAAe,EAAE,KAAK;SACvB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,2BAA2B,OAAO,CAAC,CAAC,CAAC,CAAC;QAEpG,2EAA2E;QAC3E,sCAAsC;QACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC;QAC/F,0EAA0E;QAC1E,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3C,UAAU,CAAC,SAAS,KAAK,EAAE,EAAE,EAAE,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;QAElB,MAAM,iBAAiB,CAAC;YACtB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YAC3B,MAAM;YACN,QAAQ;YACR,cAAc,EAAE,eAAe;YAC/B,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,OAAO;YACnB,SAAS,EAAE,MAAM;YACjB,eAAe,EAAE,KAAK;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/manifest/snapshot-store.test.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Snapshot-store hardening regressions (US-002, Codex review).
+ *
+ * The store's contract is "tolerate corruption, return null or a clean
+ * subset" — it must never throw, and it must never hand the builder a row it
+ * would not have produced itself. That second half is the sharp edge: snapshot
+ * KEYS flow straight into the next delta's `removedPaths`, so a key the
+ * contract would reject is a claimed deletion the server cannot even parse.
+ */
+export {};
+//# sourceMappingURL=snapshot-store.test.d.ts.map

package/dist/manifest/snapshot-store.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-store.test.d.ts","sourceRoot":"","sources":["../../src/manifest/snapshot-store.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/manifest/snapshot-store.test.js

@@ -0,0 +1,206 @@
+/**
+ * Snapshot-store hardening regressions (US-002, Codex review).
+ *
+ * The store's contract is "tolerate corruption, return null or a clean
+ * subset" — it must never throw, and it must never hand the builder a row it
+ * would not have produced itself. That second half is the sharp edge: snapshot
+ * KEYS flow straight into the next delta's `removedPaths`, so a key the
+ * contract would reject is a claimed deletion the server cannot even parse.
+ */
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { validateSyncManifestUpload } from "./contract.js";
+import { buildSyncManifest } from "./build-manifest.js";
+import { MANIFEST_SNAPSHOT_DIRNAME, manifestSnapshotPath, manifestSnapshotScopeKey, readManifestSnapshot, } from "./snapshot-store.js";
+const NOW_MS = Date.parse("2026-09-04T12:00:00.000Z");
+const VALID_ROW = { hash: "a".repeat(64), size: 1, mtimeMs: NOW_MS };
+let hqRoot;
+let stateDir;
+beforeEach(() => {
+    const base = fs.mkdtempSync(path.join(os.tmpdir(), "hq-manifest-snap-"));
+    hqRoot = path.join(base, "hq");
+    stateDir = path.join(base, "state");
+    fs.mkdirSync(hqRoot, { recursive: true });
+    fs.mkdirSync(stateDir, { recursive: true });
+});
+afterEach(() => {
+    fs.rmSync(path.dirname(hqRoot), { recursive: true, force: true });
+});
+/** Write a snapshot file BY HAND — the point is payloads the writer never emits. */
+function writeRawSnapshot(scopeKey, entries) {
+    const target = manifestSnapshotPath(stateDir, scopeKey);
+    fs.mkdirSync(path.dirname(target), { recursive: true });
+    const payload = {
+        snapshotId: "snap-deadbeefdeadbeefdeadbeefdeadbeef",
+        generatedAt: new Date(NOW_MS - 60_000).toISOString(),
+        sequence: 6,
+        entries,
+    };
+    fs.writeFileSync(target, `${JSON.stringify(payload)}\n`, "utf8");
+}
+describe("readManifestSnapshot — key validation", () => {
+    it.each([
+        ["absolute", "/etc/passwd"],
+        ["parent escape", "../../etc/passwd"],
+        ["dot segment", "notes/./file.md"],
+        ["backslash separator", "notes\\file.md"],
+        ["drive letter", "C:/secrets.md"],
+        ["home relative", "~/secrets.md"],
+        ["trailing slash", "notes/"],
+        ["empty", ""],
+        ["NFD", "notes/cafe\u0301.md"],
+    ])("drops a %s key while keeping the valid rows", (_label, badKey) => {
+        writeRawSnapshot("personal", { [badKey]: VALID_ROW, "notes/keep.md": VALID_ROW });
+        const snapshot = readManifestSnapshot(stateDir, "personal");
+        expect(snapshot).not.toBeNull();
+        expect(Object.keys(snapshot?.entries ?? {})).toEqual(["notes/keep.md"]);
+    });
+    it("keeps a literal __proto__ row as an own property instead of mutating the object", () => {
+        // Built via `fromEntries` because `{ __proto__: … }` in a literal sets the
+        // prototype rather than creating the key we are trying to test.
+        writeRawSnapshot("personal", Object.fromEntries([
+            ["__proto__", VALID_ROW],
+            ["notes/keep.md", VALID_ROW],
+        ]));
+        const snapshot = readManifestSnapshot(stateDir, "personal");
+        // `__proto__` is a perfectly legal filename AND a legal contract path, so
+        // it must survive — as a ROW. On a `{}` literal the assignment would have
+        // been swallowed by the prototype setter instead.
+        expect(Object.prototype.hasOwnProperty.call(snapshot.entries, "__proto__")).toBe(true);
+        expect(Object.getPrototypeOf(snapshot.entries)).toBeNull();
+        // Nothing leaked onto the shared prototype.
+        expect(({}.hash)).toBeUndefined();
+        expect(Object.keys(snapshot.entries).sort()).toEqual(["__proto__", "notes/keep.md"]);
+    });
+    it("still returns null (never throws) for structurally broken payloads", () => {
+        const target = manifestSnapshotPath(stateDir, "personal");
+        fs.mkdirSync(path.dirname(target), { recursive: true });
+        fs.writeFileSync(target, "{not json", "utf8");
+        expect(readManifestSnapshot(stateDir, "personal")).toBeNull();
+    });
+});
+describe("buildSyncManifest — a corrupt snapshot cannot poison removedPaths", () => {
+    it("never emits an unrepresentable snapshot key as a removal", async () => {
+        fs.mkdirSync(path.join(hqRoot, "notes"), { recursive: true });
+        fs.writeFileSync(path.join(hqRoot, "notes", "keep.md"), "hello", "utf8");
+        writeRawSnapshot("personal", {
+            "/etc/passwd": VALID_ROW,
+            "../../escape.md": VALID_ROW,
+            "notes/gone.md": VALID_ROW,
+        });
+        const result = await buildSyncManifest({
+            scope: { kind: "personal" },
+            hqRoot,
+            stateDir,
+            installationId: "install-abc123",
+            machineId: "machine-abc123",
+            source: "cli",
+            sequence: 7,
+            now: NOW_MS,
+            listJournalsImpl: () => [],
+        });
+        expect(result.mode).toBe("delta");
+        // Only the genuinely deleted, genuinely representable path is claimed.
+        expect(result.chunks[0].removedPaths).toEqual(["notes/gone.md"]);
+        // And the chunk is something the server can actually parse — an absolute
+        // path in `removedPaths` fails the contract outright.
+        expect(() => validateSyncManifestUpload(result.chunks[0])).not.toThrow();
+    });
+});
+describe("manifestSnapshotPath — tenant isolation", () => {
+    it("gives two company scopes that sanitize alike DIFFERENT snapshot files", () => {
+        // The contract's identifier rule admits `.` and `:` inside a companyUid,
+        // and the filename sanitizer collapses both to `_`. Without a disambiguator
+        // these two tenants would share one delta base — and the second scope's
+        // delta would then claim every file of the first as `removedPaths`.
+        const first = manifestSnapshotPath(stateDir, manifestSnapshotScopeKey({ kind: "company", companyUid: "acme.eu" }));
+        const second = manifestSnapshotPath(stateDir, manifestSnapshotScopeKey({ kind: "company", companyUid: "acme:eu" }));
+        expect(first).not.toBe(second);
+    });
+    it("never lets a scope key escape the snapshot directory", () => {
+        const dir = path.join(stateDir, MANIFEST_SNAPSHOT_DIRNAME);
+        for (const uid of ["../../etc/passwd", "a/b", "a\\b", ".."]) {
+            const file = manifestSnapshotPath(stateDir, `company:${uid}`);
+            expect(path.dirname(file)).toBe(dir);
+        }
+    });
+    it("keeps personal and company scopes on separate files", () => {
+        expect(manifestSnapshotPath(stateDir, manifestSnapshotScopeKey({ kind: "personal" }))).not.toBe(manifestSnapshotPath(stateDir, manifestSnapshotScopeKey({ kind: "company", companyUid: "personal" })));
+    });
+});
+// ─── Failure-reason fields (2026-09-07 personal-scope incident) ──────────────
+//
+// These are additive and read from an UNTRUSTED file, so they follow the same
+// rule as every other US-004 field: a malformed value degrades to "we do not
+// know", never to a failed read. Losing a reason costs one line of forensics;
+// failing the read costs a full re-send of the scope.
+describe("readManifestSnapshot — failure reason fields", () => {
+    /** Write a full record by hand, including whatever failure fields are given. */
+    function writeRawRecord(extra) {
+        const target = manifestSnapshotPath(stateDir, "personal");
+        fs.mkdirSync(path.dirname(target), { recursive: true });
+        fs.writeFileSync(target, `${JSON.stringify({
+            snapshotId: "snap-deadbeefdeadbeefdeadbeefdeadbeef",
+            generatedAt: new Date(NOW_MS - 60_000).toISOString(),
+            sequence: 6,
+            entries: {},
+            ...extra,
+        })}\n`, "utf8");
+    }
+    it("round-trips a well-formed reason, kind and status", () => {
+        writeRawRecord({
+            lastFailureReason: "http_error",
+            lastFailureKind: "rejected",
+            lastFailureStatus: 500,
+            consecutiveFailures: 2,
+        });
+        const snapshot = readManifestSnapshot(stateDir, "personal");
+        expect(snapshot?.lastFailureReason).toBe("http_error");
+        expect(snapshot?.lastFailureKind).toBe("rejected");
+        expect(snapshot?.lastFailureStatus).toBe(500);
+    });
+    it("reads a pre-incident snapshot as 'reason unknown' rather than corrupt", () => {
+        // Exactly the shape the 2026-09-07 record had: a failure count and an
+        // attempt time, with no reason anywhere.
+        writeRawRecord({
+            lastAttemptAt: new Date(NOW_MS).toISOString(),
+            consecutiveFailures: 1,
+        });
+        const snapshot = readManifestSnapshot(stateDir, "personal");
+        expect(snapshot).not.toBeNull();
+        expect(snapshot?.consecutiveFailures).toBe(1);
+        expect(snapshot?.lastFailureReason).toBeUndefined();
+    });
+    it.each([
+        ["a number", 500],
+        ["an object", { kind: "rejected" }],
+        ["an array", ["rejected"]],
+        ["null", null],
+        ["an empty string", ""],
+    ])("drops a reason that is %s, without failing the read", (_label, value) => {
+        writeRawRecord({ lastFailureReason: value, sequence: 6 });
+        const snapshot = readManifestSnapshot(stateDir, "personal");
+        expect(snapshot).not.toBeNull();
+        expect(snapshot?.sequence).toBe(6);
+        expect(snapshot?.lastFailureReason).toBeUndefined();
+    });
+    it.each([
+        ["a fractional status", 500.5],
+        ["a string status", "500"],
+    ])("drops %s while keeping the reason", (_label, value) => {
+        writeRawRecord({ lastFailureReason: "http_error", lastFailureStatus: value });
+        const snapshot = readManifestSnapshot(stateDir, "personal");
+        expect(snapshot?.lastFailureReason).toBe("http_error");
+        expect(snapshot?.lastFailureStatus).toBeUndefined();
+    });
+    it("caps an absurdly long reason instead of carrying it into memory", () => {
+        // Only a corrupt file produces this: every value the writer emits is a
+        // short fixed token.
+        writeRawRecord({ lastFailureReason: "x".repeat(100_000) });
+        const snapshot = readManifestSnapshot(stateDir, "personal");
+        expect(snapshot?.lastFailureReason?.length).toBe(200);
+    });
+});
+//# sourceMappingURL=snapshot-store.test.js.map

package/dist/manifest/snapshot-store.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-store.test.js","sourceRoot":"","sources":["../../src/manifest/snapshot-store.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,GAErB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AACtD,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAErE,IAAI,MAAc,CAAC;AACnB,IAAI,QAAgB,CAAC;AAErB,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACzE,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,oFAAoF;AACpF,SAAS,gBAAgB,CAAC,QAAgB,EAAE,OAAgC;IAC1E,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;QACpD,QAAQ,EAAE,CAAC;QACX,OAAO;KACR,CAAC;IACF,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,UAAU,EAAE,aAAa,CAAC;QAC3B,CAAC,eAAe,EAAE,kBAAkB,CAAC;QACrC,CAAC,aAAa,EAAE,iBAAiB,CAAC;QAClC,CAAC,qBAAqB,EAAE,gBAAgB,CAAC;QACzC,CAAC,cAAc,EAAE,eAAe,CAAC;QACjC,CAAC,eAAe,EAAE,cAAc,CAAC;QACjC,CAAC,gBAAgB,EAAE,QAAQ,CAAC;QAC5B,CAAC,OAAO,EAAE,EAAE,CAAC;QACb,CAAC,KAAK,EAAE,qBAAqB,CAAC;KAC/B,CAAC,CAAC,6CAA6C,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;QACnE,gBAAgB,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;QAElF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE5D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,2EAA2E;QAC3E,gEAAgE;QAChE,gBAAgB,CACd,UAAU,EACV,MAAM,CAAC,WAAW,CAAC;YACjB,CAAC,WAAW,EAAE,SAAS,CAAC;YACxB,CAAC,eAAe,EAAE,SAAS,CAAC;SAC7B,CAAC,CACH,CAAC;QAEF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAqB,CAAC;QAEhF,0EAA0E;QAC1E,0EAA0E;QAC1E,kDAAkD;QAClD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvF,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3D,4CAA4C;QAC5C,MAAM,CAAC,CAAE,EAA8B,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC1D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAE9C,MAAM,CAAC,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mEAAmE,EAAE,GAAG,EAAE;IACjF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACzE,gBAAgB,CAAC,UAAU,EAAE;YAC3B,aAAa,EAAE,SAAS;YACxB,iBAAiB,EAAE,SAAS;YAC5B,eAAe,EAAE,SAAS;SAC3B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YAC3B,MAAM;YACN,QAAQ;YACR,cAAc,EAAE,gBAAgB;YAChC,SAAS,EAAE,gBAAgB;YAC3B,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,CAAC;YACX,GAAG,EAAE,MAAM;YACX,gBAAgB,EAAE,GAAG,EAAE,CAAC,EAAE;SAC3B,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,uEAAuE;QACvE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QACjE,yEAAyE;QACzE,sDAAsD;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,yEAAyE;QACzE,4EAA4E;QAC5E,wEAAwE;QACxE,oEAAoE;QACpE,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACnH,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAEpH,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QAC3D,KAAK,MAAM,GAAG,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;YAC9D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,oBAAoB,CAAC,QAAQ,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAC7F,oBAAoB,CAAC,QAAQ,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CACtG,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,sDAAsD;AACtD,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,gFAAgF;IAChF,SAAS,cAAc,CAAC,KAA8B;QACpD,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC1D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,EAAE,CAAC,aAAa,CACd,MAAM,EACN,GAAG,IAAI,CAAC,SAAS,CAAC;YAChB,UAAU,EAAE,uCAAuC;YACnD,WAAW,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;YACpD,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,EAAE;YACX,GAAG,KAAK;SACT,CAAC,IAAI,EACN,MAAM,CACP,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,cAAc,CAAC;YACb,iBAAiB,EAAE,YAAY;YAC/B,eAAe,EAAE,UAAU;YAC3B,iBAAiB,EAAE,GAAG;YACtB,mBAAmB,EAAE,CAAC;SACvB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,sEAAsE;QACtE,yCAAyC;QACzC,cAAc,CAAC;YACb,aAAa,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;YAC7C,mBAAmB,EAAE,CAAC;SACvB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,aAAa,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,UAAU,EAAE,GAAG,CAAC;QACjB,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACnC,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,CAAC;QAC1B,CAAC,MAAM,EAAE,IAAI,CAAC;QACd,CAAC,iBAAiB,EAAE,EAAE,CAAC;KACxB,CAAC,CAAC,qDAAqD,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC1E,cAAc,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QAE1D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,aAAa,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,qBAAqB,EAAE,KAAK,CAAC;QAC9B,CAAC,iBAAiB,EAAE,KAAK,CAAC;KAC3B,CAAC,CAAC,mCAAmC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QACxD,cAAc,CAAC,EAAE,iBAAiB,EAAE,YAAY,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;QAE9E,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,aAAa,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,uEAAuE;QACvE,qBAAqB;QACrB,cAAc,CAAC,EAAE,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/manifest/upload-manifest.test.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Unit tests for the shared manifest upload pass (US-004).
+ *
+ * Every acceptance criterion of the story is a `it()` here, and the suite is
+ * deliberately network-free: the transport is the injected seam, so the whole
+ * protocol — resend_full, soft skip, 413, the `materialised` gate — is
+ * exercised by returning literal server bodies.
+ */
+export {};
+//# sourceMappingURL=upload-manifest.test.d.ts.map

package/dist/manifest/upload-manifest.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-manifest.test.d.ts","sourceRoot":"","sources":["../../src/manifest/upload-manifest.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}