@indigoai-us/hq-cloud 6.18.44-alpha.9 → 6.18.44

package/dist/manifest/import-graph.test.js

@@ -1,120 +0,0 @@
-/**
- * The manifest builder's import graph must stay LEAN.
- *
- * `buildSyncManifest` is client hot-path code: it runs on the user's laptop
- * beside their editor, and it is imported by the CLI. Its cost budget is a
- * stat walk, not a module graph. The package already draws this line
- * explicitly (see the `"//exports"` note in package.json, which keeps
- * `./outposts` free of the AWS SDK) and it is easy to cross by accident — one
- * convenience import of a helper that happens to live next to the S3 client
- * pulls in `@aws-sdk/client-s3`, Cognito auth and telemetry for the sake of a
- * one-line pure function. That has already happened twice on this branch:
- * `isSafeCompanySlug` from `manifest-reconcile.ts`, and `toPosixKey` reaching
- * `journal.ts` from `s3.ts`. Both are now leaf modules.
- *
- * A type-level assertion cannot catch this, and neither can a unit test of the
- * builder's behaviour, so the graph itself is the thing under test: walk the
- * relative imports from `build-manifest.ts` and assert the closure never
- * reaches the heavy modules.
- *
- * `import type` / `export type` statements are excluded — tsc erases them, so
- * they cost nothing at runtime (this is why `pull-scope.ts`'s type-only
- * reference to `vault-client.ts` is fine).
- */
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { fileURLToPath } from "node:url";
-import { describe, expect, it } from "vitest";
-const SRC_DIR = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const ENTRY = path.join(SRC_DIR, "manifest", "build-manifest.ts");
-/** Local modules whose transitive weight is the whole point of this test. */
-const FORBIDDEN_LOCAL = ["vault-client.ts", "cognito-auth.ts", "s3.ts", "object-io.ts", "telemetry.ts"];
-/** Package prefixes that must never appear in the builder's runtime graph. */
-const FORBIDDEN_PACKAGES = ["@aws-sdk/", "pino", "chokidar"];
-function stripNonCode(source) {
-    return source
-        .replace(/\/\*[\s\S]*?\*\//g, "")
-        .replace(/^\s*\/\/.*$/gm, "")
-        // Erased by the compiler: not part of the runtime graph.
-        .replace(/\b(?:import|export)\s+type\b[^;'"]*?\bfrom\s*["'][^"']+["']/g, "");
-}
-function specifiersIn(source) {
-    const code = stripNonCode(source);
-    const re = /\b(?:import|export)\b[^;'"]*?\bfrom\s*["']([^"']+)["']|(?:^|[\n;])\s*import\s*["']([^"']+)["']|\bimport\(\s*["']([^"']+)["']\s*\)/g;
-    const found = [];
-    for (let m = re.exec(code); m !== null; m = re.exec(code)) {
-        const spec = m[1] ?? m[2] ?? m[3];
-        if (spec)
-            found.push(spec);
-    }
-    return found;
-}
-/** Resolve a relative TS specifier the way NodeNext + tsc does (".js" → ".ts"). */
-function resolveLocal(fromFile, spec) {
-    const base = path.resolve(path.dirname(fromFile), spec.replace(/\.js$/, ""));
-    for (const candidate of [`${base}.ts`, path.join(base, "index.ts")]) {
-        if (fs.existsSync(candidate))
-            return candidate;
-    }
-    return null;
-}
-function buildClosure(entry) {
-    const key = (abs) => path.relative(SRC_DIR, abs).split(path.sep).join("/");
-    const closure = {
-        local: new Set([key(entry)]),
-        packages: new Map(),
-        parent: new Map([[key(entry), null]]),
-    };
-    const queue = [entry];
-    const unresolved = [];
-    while (queue.length > 0) {
-        const file = queue.shift();
-        for (const spec of specifiersIn(fs.readFileSync(file, "utf8"))) {
-            if (!spec.startsWith(".")) {
-                if (!closure.packages.has(spec))
-                    closure.packages.set(spec, key(file));
-                continue;
-            }
-            const resolved = resolveLocal(file, spec);
-            if (resolved === null) {
-                unresolved.push(`${key(file)} -> ${spec}`);
-                continue;
-            }
-            if (closure.local.has(key(resolved)))
-                continue;
-            closure.local.add(key(resolved));
-            closure.parent.set(key(resolved), key(file));
-            queue.push(resolved);
-        }
-    }
-    // A specifier this walker cannot resolve is a HOLE in the graph, which would
-    // let a forbidden module slip through unnoticed. Fail loudly instead.
-    expect(unresolved).toEqual([]);
-    return closure;
-}
-/** "a -> b -> c": how the offending module got pulled in. */
-function blameChain(closure, target) {
-    const chain = [];
-    for (let cur = target; cur; cur = closure.parent.get(cur)) {
-        chain.unshift(cur);
-    }
-    return chain.join(" -> ");
-}
-describe("manifest builder import graph", () => {
-    const closure = buildClosure(ENTRY);
-    it("resolves a non-trivial closure (the walker actually walked)", () => {
-        // Guards against the walker silently matching nothing and passing vacuously.
-        expect(closure.local.size).toBeGreaterThan(5);
-        expect(closure.local).toContain("journal.ts");
-        expect(closure.local).toContain("ignore.ts");
-    });
-    it.each(FORBIDDEN_LOCAL)("does not reach %s", (module) => {
-        const hit = [...closure.local].find((f) => f === module || f.endsWith(`/${module}`));
-        expect(hit ? blameChain(closure, hit) : undefined).toBeUndefined();
-    });
-    it.each(FORBIDDEN_PACKAGES)("does not pull in %s", (prefix) => {
-        const hit = [...closure.packages].find(([spec]) => spec.startsWith(prefix));
-        expect(hit ? `${hit[0]} <- ${blameChain(closure, hit[1])}` : undefined).toBeUndefined();
-    });
-});
-//# sourceMappingURL=import-graph.test.js.map

package/dist/manifest/import-graph.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"import-graph.test.js","sourceRoot":"","sources":["../../src/manifest/import-graph.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AACjF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;AAElE,6EAA6E;AAC7E,MAAM,eAAe,GAAG,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;AACxG,8EAA8E;AAC9E,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAW7D,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO,MAAM;SACV,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAChC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;QAC7B,yDAAyD;SACxD,OAAO,CAAC,8DAA8D,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,EAAE,GACN,oIAAoI,CAAC;IACvI,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mFAAmF;AACnF,SAAS,YAAY,CAAC,QAAgB,EAAE,IAAY;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7E,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnF,MAAM,OAAO,GAAY;QACvB,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5B,QAAQ,EAAE,IAAI,GAAG,EAAE;QACnB,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;KACtC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAY,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvE,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC3C,SAAS;YACX,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAAE,SAAS;YAC/C,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,6DAA6D;AAC7D,SAAS,UAAU,CAAC,OAAgB,EAAE,MAAc;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,GAAG,GAA8B,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACrF,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAEpC,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,6EAA6E;QAC7E,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,mBAAmB,EAAE,CAAC,MAAM,EAAE,EAAE;QACvD,MAAM,GAAG,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;QACrF,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,qBAAqB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC5D,MAAM,GAAG,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/manifest/ledger-shard-isolation.test.d.ts

@@ -1,18 +0,0 @@
-/**
- * The manifest build reads ONE journal shard: the one describing its scope.
- *
- * This is a memory invariant expressed as a behavioural one. `listJournals()`
- * reads and parses every shard on the machine, and on a laptop holding a
- * personal vault plus several cloud companies that was the single largest line
- * item in the tail step's footprint — hundreds of megabytes spent parsing
- * ledgers whose rows were then dropped on the floor, repaid once per scope in
- * a fanout.
- *
- * A byte counter would be the obvious gate and the wrong one: it moves with
- * fixture size and tempts a future reader to widen it. The thing that must not
- * come back is the ENUMERATION, so the assertion counts journal files opened.
- * One is correct; anything above one means a caller has gone back to reading
- * the machine instead of the scope, no matter what the megabytes say.
- */
-export {};
-//# sourceMappingURL=ledger-shard-isolation.test.d.ts.map

package/dist/manifest/ledger-shard-isolation.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ledger-shard-isolation.test.d.ts","sourceRoot":"","sources":["../../src/manifest/ledger-shard-isolation.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG"}

package/dist/manifest/ledger-shard-isolation.test.js

@@ -1,153 +0,0 @@
-/**
- * The manifest build reads ONE journal shard: the one describing its scope.
- *
- * This is a memory invariant expressed as a behavioural one. `listJournals()`
- * reads and parses every shard on the machine, and on a laptop holding a
- * personal vault plus several cloud companies that was the single largest line
- * item in the tail step's footprint — hundreds of megabytes spent parsing
- * ledgers whose rows were then dropped on the floor, repaid once per scope in
- * a fanout.
- *
- * A byte counter would be the obvious gate and the wrong one: it moves with
- * fixture size and tempts a future reader to widen it. The thing that must not
- * come back is the ENUMERATION, so the assertion counts journal files opened.
- * One is correct; anything above one means a caller has gone back to reading
- * the machine instead of the scope, no matter what the megabytes say.
- */
-import * as os from "node:os";
-import * as path from "node:path";
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-/**
- * Journal reads reach the filesystem through two specifiers — `journal.ts`
- * imports `"fs"` and the streaming ledger reader imports `"node:fs"` — and a
- * counter that watches only one of them would report a comfortable "1" while
- * the other quietly read the whole state dir. Both are instrumented, and the
- * counts are keyed by resolved path so a shard opened twice through different
- * specifiers is still one shard.
- */
-const opened = vi.hoisted(() => ({ paths: [] }));
-function recordIfJournal(target) {
-    const value = String(target);
-    if (/sync-journal\..*\.json$/.test(value))
-        opened.paths.push(value);
-}
-vi.mock("node:fs", async (importOriginal) => {
-    const actual = await importOriginal();
-    return {
-        ...actual,
-        default: actual,
-        openSync: ((target, ...rest) => {
-            recordIfJournal(target);
-            return actual.openSync(target, ...rest);
-        }),
-        readFileSync: ((target, ...rest) => {
-            recordIfJournal(target);
-            return actual.readFileSync(target, ...rest);
-        }),
-    };
-});
-vi.mock("fs", async (importOriginal) => {
-    const actual = await importOriginal();
-    return {
-        ...actual,
-        default: actual,
-        openSync: ((target, ...rest) => {
-            recordIfJournal(target);
-            return actual.openSync(target, ...rest);
-        }),
-        readFileSync: ((target, ...rest) => {
-            recordIfJournal(target);
-            return actual.readFileSync(target, ...rest);
-        }),
-    };
-});
-const fs = await import("node:fs");
-const { buildSyncManifest } = await import("./build-manifest.js");
-const { PERSONAL_VAULT_JOURNAL_SLUG } = await import("../journal.js");
-const OTHER_SLUGS = ["acme", "globex", "initech"];
-let base;
-let hqRoot;
-let stateDir;
-let previousStateDir;
-function writeShard(slug, files) {
-    fs.writeFileSync(path.join(stateDir, `sync-journal.${slug}.json`), JSON.stringify({ version: "2", files, pulls: [] }), "utf8");
-}
-function ledgerRow(index) {
-    return {
-        hash: `sha256:${index.toString(16).padStart(64, "0")}`,
-        size: 100 + index,
-        syncedAt: "2026-01-01T00:00:00.000Z",
-        direction: "up",
-    };
-}
-beforeEach(() => {
-    base = fs.mkdtempSync(path.join(os.tmpdir(), "hq-shard-isolation-"));
-    hqRoot = path.join(base, "hq");
-    stateDir = path.join(base, "state");
-    fs.mkdirSync(stateDir, { recursive: true });
-    fs.mkdirSync(path.join(hqRoot, "notes"), { recursive: true });
-    fs.writeFileSync(path.join(hqRoot, "notes", "kept.md"), "kept\n");
-    writeShard(PERSONAL_VAULT_JOURNAL_SLUG, {
-        "notes/kept.md": ledgerRow(1),
-        "notes/gone.md": ledgerRow(2),
-    });
-    // Present only so they can be NOT read. Each carries a row that would be
-    // unmistakable if it leaked into the personal manifest.
-    OTHER_SLUGS.forEach((slug, index) => {
-        writeShard(slug, { [`${slug}/secret-${index}.md`]: ledgerRow(100 + index) });
-    });
-    previousStateDir = process.env.HQ_STATE_DIR;
-    process.env.HQ_STATE_DIR = stateDir;
-    opened.paths = [];
-});
-afterEach(() => {
-    if (previousStateDir === undefined)
-        delete process.env.HQ_STATE_DIR;
-    else
-        process.env.HQ_STATE_DIR = previousStateDir;
-    fs.rmSync(base, { recursive: true, force: true });
-});
-describe("buildSyncManifest — the ledger read is scoped to one shard", () => {
-    it("opens the scope's journal file and no other", async () => {
-        const result = await buildSyncManifest({
-            scope: { kind: "personal" },
-            hqRoot,
-            stateDir,
-            installationId: "install-shard",
-            machineId: "machine-shard",
-            source: "cli",
-            sequence: 1,
-            hashPolicy: "never",
-            maxWallMs: 60_000,
-            persistSnapshot: false,
-        });
-        const distinct = [...new Set(opened.paths)];
-        expect(distinct).toEqual([path.join(stateDir, `sync-journal.${PERSONAL_VAULT_JOURNAL_SLUG}.json`)]);
-        // The count is only meaningful if the shard was actually USED: a read that
-        // returns nothing also opens nothing.
-        const reported = result.chunks.flatMap((chunk) => chunk.entries);
-        expect(reported.map((entry) => entry.path).sort()).toEqual(["notes/gone.md", "notes/kept.md"]);
-        // And nothing from a neighbouring tenant's shard came along for the ride.
-        expect(reported.some((entry) => entry.path.includes("secret-"))).toBe(false);
-    });
-    it("stays at one shard as the machine accumulates more companies", async () => {
-        for (let index = 0; index < 12; index += 1) {
-            writeShard(`extra-${index}`, { [`extra-${index}/a.md`]: ledgerRow(index) });
-        }
-        opened.paths = [];
-        await buildSyncManifest({
-            scope: { kind: "personal" },
-            hqRoot,
-            stateDir,
-            installationId: "install-shard",
-            machineId: "machine-shard",
-            source: "cli",
-            sequence: 1,
-            hashPolicy: "never",
-            maxWallMs: 60_000,
-            persistSnapshot: false,
-        });
-        expect(new Set(opened.paths).size).toBe(1);
-    });
-});
-//# sourceMappingURL=ledger-shard-isolation.test.js.map

package/dist/manifest/ledger-shard-isolation.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ledger-shard-isolation.test.js","sourceRoot":"","sources":["../../src/manifest/ledger-shard-isolation.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAc,EAAE,CAAC,CAAC,CAAC;AAE7D,SAAS,eAAe,CAAC,MAAe;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC1C,MAAM,MAAM,GAAG,MAAM,cAAc,EAA4B,CAAC;IAChE,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,CAAC,CAAC,MAAe,EAAE,GAAG,IAAe,EAAE,EAAE;YACjD,eAAe,CAAC,MAAM,CAAC,CAAC;YACxB,OAAQ,MAAM,CAAC,QAAsD,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;QACzF,CAAC,CAA2B;QAC5B,YAAY,EAAE,CAAC,CAAC,MAAe,EAAE,GAAG,IAAe,EAAE,EAAE;YACrD,eAAe,CAAC,MAAM,CAAC,CAAC;YACxB,OAAQ,MAAM,CAAC,YAA2D,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9F,CAAC,CAA+B;KACjC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrC,MAAM,MAAM,GAAG,MAAM,cAAc,EAA4B,CAAC;IAChE,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,CAAC,CAAC,MAAe,EAAE,GAAG,IAAe,EAAE,EAAE;YACjD,eAAe,CAAC,MAAM,CAAC,CAAC;YACxB,OAAQ,MAAM,CAAC,QAAsD,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;QACzF,CAAC,CAA2B;QAC5B,YAAY,EAAE,CAAC,CAAC,MAAe,EAAE,GAAG,IAAe,EAAE,EAAE;YACrD,eAAe,CAAC,MAAM,CAAC,CAAC;YACxB,OAAQ,MAAM,CAAC,YAA2D,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9F,CAAC,CAA+B;KACjC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;AACnC,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAClE,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;AAEtE,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAElD,IAAI,IAAY,CAAC;AACjB,IAAI,MAAc,CAAC;AACnB,IAAI,QAAgB,CAAC;AACrB,IAAI,gBAAoC,CAAC;AAEzC,SAAS,UAAU,CAAC,IAAY,EAAE,KAA8B;IAC9D,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,IAAI,OAAO,CAAC,EAChD,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAClD,MAAM,CACP,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO;QACL,IAAI,EAAE,UAAU,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE;QACtD,IAAI,EAAE,GAAG,GAAG,KAAK;QACjB,QAAQ,EAAE,0BAA0B;QACpC,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACrE,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;IAElE,UAAU,CAAC,2BAA2B,EAAE;QACtC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7B,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;KAC9B,CAAC,CAAC;IACH,yEAAyE;IACzE,wDAAwD;IACxD,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAClC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,WAAW,KAAK,KAAK,CAAC,EAAE,SAAS,CAAC,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,QAAQ,CAAC;IACpC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;AACpB,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;;QAC/D,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,gBAAgB,CAAC;IACjD,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4DAA4D,EAAE,GAAG,EAAE;IAC1E,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YAC3B,MAAM;YACN,QAAQ;YACR,cAAc,EAAE,eAAe;YAC/B,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,OAAO;YACnB,SAAS,EAAE,MAAM;YACjB,eAAe,EAAE,KAAK;SACvB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,2BAA2B,OAAO,CAAC,CAAC,CAAC,CAAC;QAEpG,2EAA2E;QAC3E,sCAAsC;QACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC;QAC/F,0EAA0E;QAC1E,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3C,UAAU,CAAC,SAAS,KAAK,EAAE,EAAE,EAAE,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;QAElB,MAAM,iBAAiB,CAAC;YACtB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YAC3B,MAAM;YACN,QAAQ;YACR,cAAc,EAAE,eAAe;YAC/B,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,OAAO;YACnB,SAAS,EAAE,MAAM;YACjB,eAAe,EAAE,KAAK;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/manifest/snapshot-store.test.d.ts

@@ -1,11 +0,0 @@
-/**
- * Snapshot-store hardening regressions (US-002, Codex review).
- *
- * The store's contract is "tolerate corruption, return null or a clean
- * subset" — it must never throw, and it must never hand the builder a row it
- * would not have produced itself. That second half is the sharp edge: snapshot
- * KEYS flow straight into the next delta's `removedPaths`, so a key the
- * contract would reject is a claimed deletion the server cannot even parse.
- */
-export {};
-//# sourceMappingURL=snapshot-store.test.d.ts.map

package/dist/manifest/snapshot-store.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"snapshot-store.test.d.ts","sourceRoot":"","sources":["../../src/manifest/snapshot-store.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/manifest/snapshot-store.test.js

@@ -1,206 +0,0 @@
-/**
- * Snapshot-store hardening regressions (US-002, Codex review).
- *
- * The store's contract is "tolerate corruption, return null or a clean
- * subset" — it must never throw, and it must never hand the builder a row it
- * would not have produced itself. That second half is the sharp edge: snapshot
- * KEYS flow straight into the next delta's `removedPaths`, so a key the
- * contract would reject is a claimed deletion the server cannot even parse.
- */
-import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { validateSyncManifestUpload } from "./contract.js";
-import { buildSyncManifest } from "./build-manifest.js";
-import { MANIFEST_SNAPSHOT_DIRNAME, manifestSnapshotPath, manifestSnapshotScopeKey, readManifestSnapshot, } from "./snapshot-store.js";
-const NOW_MS = Date.parse("2026-09-04T12:00:00.000Z");
-const VALID_ROW = { hash: "a".repeat(64), size: 1, mtimeMs: NOW_MS };
-let hqRoot;
-let stateDir;
-beforeEach(() => {
-    const base = fs.mkdtempSync(path.join(os.tmpdir(), "hq-manifest-snap-"));
-    hqRoot = path.join(base, "hq");
-    stateDir = path.join(base, "state");
-    fs.mkdirSync(hqRoot, { recursive: true });
-    fs.mkdirSync(stateDir, { recursive: true });
-});
-afterEach(() => {
-    fs.rmSync(path.dirname(hqRoot), { recursive: true, force: true });
-});
-/** Write a snapshot file BY HAND — the point is payloads the writer never emits. */
-function writeRawSnapshot(scopeKey, entries) {
-    const target = manifestSnapshotPath(stateDir, scopeKey);
-    fs.mkdirSync(path.dirname(target), { recursive: true });
-    const payload = {
-        snapshotId: "snap-deadbeefdeadbeefdeadbeefdeadbeef",
-        generatedAt: new Date(NOW_MS - 60_000).toISOString(),
-        sequence: 6,
-        entries,
-    };
-    fs.writeFileSync(target, `${JSON.stringify(payload)}\n`, "utf8");
-}
-describe("readManifestSnapshot — key validation", () => {
-    it.each([
-        ["absolute", "/etc/passwd"],
-        ["parent escape", "../../etc/passwd"],
-        ["dot segment", "notes/./file.md"],
-        ["backslash separator", "notes\\file.md"],
-        ["drive letter", "C:/secrets.md"],
-        ["home relative", "~/secrets.md"],
-        ["trailing slash", "notes/"],
-        ["empty", ""],
-        ["NFD", "notes/cafe\u0301.md"],
-    ])("drops a %s key while keeping the valid rows", (_label, badKey) => {
-        writeRawSnapshot("personal", { [badKey]: VALID_ROW, "notes/keep.md": VALID_ROW });
-        const snapshot = readManifestSnapshot(stateDir, "personal");
-        expect(snapshot).not.toBeNull();
-        expect(Object.keys(snapshot?.entries ?? {})).toEqual(["notes/keep.md"]);
-    });
-    it("keeps a literal __proto__ row as an own property instead of mutating the object", () => {
-        // Built via `fromEntries` because `{ __proto__: … }` in a literal sets the
-        // prototype rather than creating the key we are trying to test.
-        writeRawSnapshot("personal", Object.fromEntries([
-            ["__proto__", VALID_ROW],
-            ["notes/keep.md", VALID_ROW],
-        ]));
-        const snapshot = readManifestSnapshot(stateDir, "personal");
-        // `__proto__` is a perfectly legal filename AND a legal contract path, so
-        // it must survive — as a ROW. On a `{}` literal the assignment would have
-        // been swallowed by the prototype setter instead.
-        expect(Object.prototype.hasOwnProperty.call(snapshot.entries, "__proto__")).toBe(true);
-        expect(Object.getPrototypeOf(snapshot.entries)).toBeNull();
-        // Nothing leaked onto the shared prototype.
-        expect(({}.hash)).toBeUndefined();
-        expect(Object.keys(snapshot.entries).sort()).toEqual(["__proto__", "notes/keep.md"]);
-    });
-    it("still returns null (never throws) for structurally broken payloads", () => {
-        const target = manifestSnapshotPath(stateDir, "personal");
-        fs.mkdirSync(path.dirname(target), { recursive: true });
-        fs.writeFileSync(target, "{not json", "utf8");
-        expect(readManifestSnapshot(stateDir, "personal")).toBeNull();
-    });
-});
-describe("buildSyncManifest — a corrupt snapshot cannot poison removedPaths", () => {
-    it("never emits an unrepresentable snapshot key as a removal", async () => {
-        fs.mkdirSync(path.join(hqRoot, "notes"), { recursive: true });
-        fs.writeFileSync(path.join(hqRoot, "notes", "keep.md"), "hello", "utf8");
-        writeRawSnapshot("personal", {
-            "/etc/passwd": VALID_ROW,
-            "../../escape.md": VALID_ROW,
-            "notes/gone.md": VALID_ROW,
-        });
-        const result = await buildSyncManifest({
-            scope: { kind: "personal" },
-            hqRoot,
-            stateDir,
-            installationId: "install-abc123",
-            machineId: "machine-abc123",
-            source: "cli",
-            sequence: 7,
-            now: NOW_MS,
-            listJournalsImpl: () => [],
-        });
-        expect(result.mode).toBe("delta");
-        // Only the genuinely deleted, genuinely representable path is claimed.
-        expect(result.chunks[0].removedPaths).toEqual(["notes/gone.md"]);
-        // And the chunk is something the server can actually parse — an absolute
-        // path in `removedPaths` fails the contract outright.
-        expect(() => validateSyncManifestUpload(result.chunks[0])).not.toThrow();
-    });
-});
-describe("manifestSnapshotPath — tenant isolation", () => {
-    it("gives two company scopes that sanitize alike DIFFERENT snapshot files", () => {
-        // The contract's identifier rule admits `.` and `:` inside a companyUid,
-        // and the filename sanitizer collapses both to `_`. Without a disambiguator
-        // these two tenants would share one delta base — and the second scope's
-        // delta would then claim every file of the first as `removedPaths`.
-        const first = manifestSnapshotPath(stateDir, manifestSnapshotScopeKey({ kind: "company", companyUid: "acme.eu" }));
-        const second = manifestSnapshotPath(stateDir, manifestSnapshotScopeKey({ kind: "company", companyUid: "acme:eu" }));
-        expect(first).not.toBe(second);
-    });
-    it("never lets a scope key escape the snapshot directory", () => {
-        const dir = path.join(stateDir, MANIFEST_SNAPSHOT_DIRNAME);
-        for (const uid of ["../../etc/passwd", "a/b", "a\\b", ".."]) {
-            const file = manifestSnapshotPath(stateDir, `company:${uid}`);
-            expect(path.dirname(file)).toBe(dir);
-        }
-    });
-    it("keeps personal and company scopes on separate files", () => {
-        expect(manifestSnapshotPath(stateDir, manifestSnapshotScopeKey({ kind: "personal" }))).not.toBe(manifestSnapshotPath(stateDir, manifestSnapshotScopeKey({ kind: "company", companyUid: "personal" })));
-    });
-});
-// ─── Failure-reason fields (2026-09-07 personal-scope incident) ──────────────
-//
-// These are additive and read from an UNTRUSTED file, so they follow the same
-// rule as every other US-004 field: a malformed value degrades to "we do not
-// know", never to a failed read. Losing a reason costs one line of forensics;
-// failing the read costs a full re-send of the scope.
-describe("readManifestSnapshot — failure reason fields", () => {
-    /** Write a full record by hand, including whatever failure fields are given. */
-    function writeRawRecord(extra) {
-        const target = manifestSnapshotPath(stateDir, "personal");
-        fs.mkdirSync(path.dirname(target), { recursive: true });
-        fs.writeFileSync(target, `${JSON.stringify({
-            snapshotId: "snap-deadbeefdeadbeefdeadbeefdeadbeef",
-            generatedAt: new Date(NOW_MS - 60_000).toISOString(),
-            sequence: 6,
-            entries: {},
-            ...extra,
-        })}\n`, "utf8");
-    }
-    it("round-trips a well-formed reason, kind and status", () => {
-        writeRawRecord({
-            lastFailureReason: "http_error",
-            lastFailureKind: "rejected",
-            lastFailureStatus: 500,
-            consecutiveFailures: 2,
-        });
-        const snapshot = readManifestSnapshot(stateDir, "personal");
-        expect(snapshot?.lastFailureReason).toBe("http_error");
-        expect(snapshot?.lastFailureKind).toBe("rejected");
-        expect(snapshot?.lastFailureStatus).toBe(500);
-    });
-    it("reads a pre-incident snapshot as 'reason unknown' rather than corrupt", () => {
-        // Exactly the shape the 2026-09-07 record had: a failure count and an
-        // attempt time, with no reason anywhere.
-        writeRawRecord({
-            lastAttemptAt: new Date(NOW_MS).toISOString(),
-            consecutiveFailures: 1,
-        });
-        const snapshot = readManifestSnapshot(stateDir, "personal");
-        expect(snapshot).not.toBeNull();
-        expect(snapshot?.consecutiveFailures).toBe(1);
-        expect(snapshot?.lastFailureReason).toBeUndefined();
-    });
-    it.each([
-        ["a number", 500],
-        ["an object", { kind: "rejected" }],
-        ["an array", ["rejected"]],
-        ["null", null],
-        ["an empty string", ""],
-    ])("drops a reason that is %s, without failing the read", (_label, value) => {
-        writeRawRecord({ lastFailureReason: value, sequence: 6 });
-        const snapshot = readManifestSnapshot(stateDir, "personal");
-        expect(snapshot).not.toBeNull();
-        expect(snapshot?.sequence).toBe(6);
-        expect(snapshot?.lastFailureReason).toBeUndefined();
-    });
-    it.each([
-        ["a fractional status", 500.5],
-        ["a string status", "500"],
-    ])("drops %s while keeping the reason", (_label, value) => {
-        writeRawRecord({ lastFailureReason: "http_error", lastFailureStatus: value });
-        const snapshot = readManifestSnapshot(stateDir, "personal");
-        expect(snapshot?.lastFailureReason).toBe("http_error");
-        expect(snapshot?.lastFailureStatus).toBeUndefined();
-    });
-    it("caps an absurdly long reason instead of carrying it into memory", () => {
-        // Only a corrupt file produces this: every value the writer emits is a
-        // short fixed token.
-        writeRawRecord({ lastFailureReason: "x".repeat(100_000) });
-        const snapshot = readManifestSnapshot(stateDir, "personal");
-        expect(snapshot?.lastFailureReason?.length).toBe(200);
-    });
-});
-//# sourceMappingURL=snapshot-store.test.js.map

package/dist/manifest/snapshot-store.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"snapshot-store.test.js","sourceRoot":"","sources":["../../src/manifest/snapshot-store.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,GAErB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AACtD,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAErE,IAAI,MAAc,CAAC;AACnB,IAAI,QAAgB,CAAC;AAErB,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACzE,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,oFAAoF;AACpF,SAAS,gBAAgB,CAAC,QAAgB,EAAE,OAAgC;IAC1E,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;QACpD,QAAQ,EAAE,CAAC;QACX,OAAO;KACR,CAAC;IACF,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,UAAU,EAAE,aAAa,CAAC;QAC3B,CAAC,eAAe,EAAE,kBAAkB,CAAC;QACrC,CAAC,aAAa,EAAE,iBAAiB,CAAC;QAClC,CAAC,qBAAqB,EAAE,gBAAgB,CAAC;QACzC,CAAC,cAAc,EAAE,eAAe,CAAC;QACjC,CAAC,eAAe,EAAE,cAAc,CAAC;QACjC,CAAC,gBAAgB,EAAE,QAAQ,CAAC;QAC5B,CAAC,OAAO,EAAE,EAAE,CAAC;QACb,CAAC,KAAK,EAAE,qBAAqB,CAAC;KAC/B,CAAC,CAAC,6CAA6C,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;QACnE,gBAAgB,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;QAElF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE5D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,2EAA2E;QAC3E,gEAAgE;QAChE,gBAAgB,CACd,UAAU,EACV,MAAM,CAAC,WAAW,CAAC;YACjB,CAAC,WAAW,EAAE,SAAS,CAAC;YACxB,CAAC,eAAe,EAAE,SAAS,CAAC;SAC7B,CAAC,CACH,CAAC;QAEF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAqB,CAAC;QAEhF,0EAA0E;QAC1E,0EAA0E;QAC1E,kDAAkD;QAClD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvF,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3D,4CAA4C;QAC5C,MAAM,CAAC,CAAE,EAA8B,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC1D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAE9C,MAAM,CAAC,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mEAAmE,EAAE,GAAG,EAAE;IACjF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACzE,gBAAgB,CAAC,UAAU,EAAE;YAC3B,aAAa,EAAE,SAAS;YACxB,iBAAiB,EAAE,SAAS;YAC5B,eAAe,EAAE,SAAS;SAC3B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YAC3B,MAAM;YACN,QAAQ;YACR,cAAc,EAAE,gBAAgB;YAChC,SAAS,EAAE,gBAAgB;YAC3B,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,CAAC;YACX,GAAG,EAAE,MAAM;YACX,gBAAgB,EAAE,GAAG,EAAE,CAAC,EAAE;SAC3B,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,uEAAuE;QACvE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QACjE,yEAAyE;QACzE,sDAAsD;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,yEAAyE;QACzE,4EAA4E;QAC5E,wEAAwE;QACxE,oEAAoE;QACpE,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACnH,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAEpH,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QAC3D,KAAK,MAAM,GAAG,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;YAC9D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,oBAAoB,CAAC,QAAQ,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAC7F,oBAAoB,CAAC,QAAQ,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CACtG,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,sDAAsD;AACtD,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,gFAAgF;IAChF,SAAS,cAAc,CAAC,KAA8B;QACpD,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC1D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,EAAE,CAAC,aAAa,CACd,MAAM,EACN,GAAG,IAAI,CAAC,SAAS,CAAC;YAChB,UAAU,EAAE,uCAAuC;YACnD,WAAW,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;YACpD,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,EAAE;YACX,GAAG,KAAK;SACT,CAAC,IAAI,EACN,MAAM,CACP,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,cAAc,CAAC;YACb,iBAAiB,EAAE,YAAY;YAC/B,eAAe,EAAE,UAAU;YAC3B,iBAAiB,EAAE,GAAG;YACtB,mBAAmB,EAAE,CAAC;SACvB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,sEAAsE;QACtE,yCAAyC;QACzC,cAAc,CAAC;YACb,aAAa,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;YAC7C,mBAAmB,EAAE,CAAC;SACvB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,aAAa,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,UAAU,EAAE,GAAG,CAAC;QACjB,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACnC,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,CAAC;QAC1B,CAAC,MAAM,EAAE,IAAI,CAAC;QACd,CAAC,iBAAiB,EAAE,EAAE,CAAC;KACxB,CAAC,CAAC,qDAAqD,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC1E,cAAc,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QAE1D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,aAAa,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,qBAAqB,EAAE,KAAK,CAAC;QAC9B,CAAC,iBAAiB,EAAE,KAAK,CAAC;KAC3B,CAAC,CAAC,mCAAmC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QACxD,cAAc,CAAC,EAAE,iBAAiB,EAAE,YAAY,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;QAE9E,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,aAAa,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,uEAAuE;QACvE,qBAAqB;QACrB,cAAc,CAAC,EAAE,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/manifest/upload-manifest.test.d.ts

@@ -1,10 +0,0 @@
-/**
- * Unit tests for the shared manifest upload pass (US-004).
- *
- * Every acceptance criterion of the story is a `it()` here, and the suite is
- * deliberately network-free: the transport is the injected seam, so the whole
- * protocol — resend_full, soft skip, 413, the `materialised` gate — is
- * exercised by returning literal server bodies.
- */
-export {};
-//# sourceMappingURL=upload-manifest.test.d.ts.map

package/dist/manifest/upload-manifest.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"upload-manifest.test.d.ts","sourceRoot":"","sources":["../../src/manifest/upload-manifest.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}