@izagood/avcs 0.1.0

package/dist/semantic/symbols.js

@@ -0,0 +1,323 @@
+// Phase 2: structured (symbol-granular) view of a source file.
+//
+// This is the seam that turns "same file" conflicts into "same symbol" conflicts.
+// A file is parsed into an ordered list of spans — named top-level symbols and the
+// gaps between them (imports, blank lines). Two operations that edit *different*
+// symbols of the same file then occupy different conflict keys and auto-merge (L1),
+// while two edits to the *same* symbol still contend.
+//
+// MVP scope: a brace/line scanner for TS/JS-shaped code. It is deliberately a
+// pluggable `EntityIndexer` so a Tree-sitter backend can replace it per language
+// without touching the reducer. It is approximate (well-formatted code), and falls
+// back to whole-file semantics when a file does not parse into named symbols.
+const DECL = /^(export\s+(default\s+)?)?(async\s+)?(function|class|interface|enum|namespace|type|const|let|var)\s+([A-Za-z0-9_$]+)/;
+/** Top-level declaration kinds that own a brace-delimited body. */
+const BRACE_FORMS = new Set(["function", "class", "interface", "enum", "namespace"]);
+/**
+ * Split TS/JS source into symbol + gap spans. Brace depth is tracked across the
+ * whole text so nested braces inside a symbol don't end it early. Strings and line
+ * comments are handled well enough for ordinary code.
+ */
+function parse(content) {
+    const lines = content.split("\n");
+    const spans = [];
+    let gapBuf = [];
+    let gapIdx = 0;
+    const flushGap = () => {
+        if (gapBuf.length) {
+            spans.push({ kind: "gap", key: `@gap:${gapIdx++}`, text: gapBuf.join("\n") });
+            gapBuf = [];
+        }
+    };
+    let i = 0;
+    while (i < lines.length) {
+        const line = lines[i];
+        const m = DECL.exec(line.trim());
+        if (!m) {
+            gapBuf.push(line);
+            i++;
+            continue;
+        }
+        const keyword = m[4];
+        const name = m[5];
+        flushGap();
+        if (BRACE_FORMS.has(keyword) || /[{(]/.test(line)) {
+            // Consume lines until brace depth returns to 0 after having opened.
+            let depth = 0;
+            let opened = false;
+            const body = [];
+            while (i < lines.length) {
+                const l = lines[i];
+                body.push(l);
+                depth += braceDelta(l);
+                if (depth > 0)
+                    opened = true;
+                i++;
+                if (opened && depth <= 0)
+                    break;
+                if (!opened && /;\s*$/.test(l))
+                    break; // e.g. `const x = 1;` with parens but no block
+            }
+            spans.push({ kind: "symbol", key: name, name, text: body.join("\n") });
+        }
+        else {
+            // Single-line / statement form (const/type/let), may span to a `;`.
+            const body = [];
+            while (i < lines.length) {
+                const l = lines[i];
+                body.push(l);
+                i++;
+                if (/;\s*$/.test(l) || !lines[i] || DECL.test((lines[i] ?? "").trim()))
+                    break;
+            }
+            spans.push({ kind: "symbol", key: name, name, text: body.join("\n") });
+        }
+    }
+    flushGap();
+    return spans;
+}
+/** Net `{`+`(` minus `}`+`)` on a line, ignoring those in strings/line comments. */
+function braceDelta(line) {
+    let depth = 0;
+    let str = null;
+    for (let j = 0; j < line.length; j++) {
+        const c = line[j];
+        if (str) {
+            if (c === "\\")
+                j++;
+            else if (c === str)
+                str = null;
+            continue;
+        }
+        if (c === '"' || c === "'" || c === "`")
+            str = c;
+        else if (c === "/" && line[j + 1] === "/")
+            break;
+        else if (c === "{")
+            depth++;
+        else if (c === "}")
+            depth--;
+    }
+    return depth;
+}
+function reassemble(spans) {
+    return spans.map((s) => s.text).join("\n");
+}
+export const tsIndexer = { language: "typescript", parse, reassemble };
+/** List the symbol names in a file (stable ids), in source order. */
+export function symbolNames(content, indexer = tsIndexer) {
+    return indexer.parse(content).filter((s) => s.kind === "symbol").map((s) => s.name);
+}
+/** A top-level declaration line starts at column 0 (no leading whitespace). This is the
+ *  fallback used when the brace scanner fails to surface a symbol that nonetheless exists
+ *  in the text — replacing its declaration in place instead of blindly appending a
+ *  duplicate. Returns null if no top-level declaration of `name` is found. */
+function replaceTopLevelDecl(content, name, newText) {
+    const lines = content.split("\n");
+    const topDeclName = (line) => {
+        if (!/^\S/.test(line))
+            return null; // must be column 0
+        const m = DECL.exec(line.trim());
+        return m && m[5] === name ? name : null;
+    };
+    let start = -1;
+    for (let i = 0; i < lines.length; i++)
+        if (topDeclName(lines[i]) === name) {
+            start = i;
+            break;
+        }
+    if (start === -1)
+        return null;
+    let end = lines.length;
+    for (let j = start + 1; j < lines.length; j++) {
+        const l = lines[j];
+        if (/^\S/.test(l) && DECL.test(l.trim())) {
+            end = j;
+            break;
+        } // next top-level decl
+    }
+    return [...lines.slice(0, start), newText, ...lines.slice(end)].join("\n");
+}
+/**
+ * Replace one symbol's text, returning the new file content. If the symbol does not
+ * exist, it is appended. Pure and deterministic.
+ *
+ * D5 duplicate-guard: when the brace scanner can't find the symbol as a span but a
+ * top-level declaration of that name DOES exist in the text (the scanner mis-parsed —
+ * e.g. a template literal containing `}`), blindly appending would create a SECOND
+ * definition of the symbol: a `set_symbol` meant to UPDATE silently duplicates instead.
+ * We fall back to a column-0 declaration scan and replace the existing decl in place. A
+ * genuinely-new symbol (no existing decl) is still appended.
+ */
+export function spliceSymbol(content, symbolName, newText, indexer = tsIndexer) {
+    const spans = indexer.parse(content);
+    const idx = spans.findIndex((s) => s.kind === "symbol" && s.name === symbolName);
+    if (idx !== -1) {
+        spans[idx] = { kind: "symbol", key: symbolName, name: symbolName, text: newText };
+        return indexer.reassemble(spans);
+    }
+    // Not found as a span. Avoid a duplicate definition if the decl actually exists.
+    const replaced = replaceTopLevelDecl(content, symbolName, newText);
+    if (replaced !== null)
+        return replaced;
+    spans.push({ kind: "symbol", key: symbolName, name: symbolName, text: newText });
+    return indexer.reassemble(spans);
+}
+const isIdChar = (c) => c >= "a" && c <= "z" || c >= "A" && c <= "Z" || c >= "0" && c <= "9" || c === "_" || c === "$";
+/**
+ * M3 AST op: rename a top-level symbol — its declaration AND its references WITHIN
+ * the same file. Renames only whole-identifier occurrences in CODE, deliberately
+ * skipping strings, template-literal text, and comments (a regex `\bfrom\b` would
+ * also rewrite `from` inside a comment or a "from" string — silent corruption; D5).
+ * Template interpolations `${…}` are treated as code, so identifiers there ARE renamed.
+ * Cross-file references need real reference analysis (tree-sitter) — Track C. Pure.
+ */
+export function renameSymbol(content, from, to) {
+    if (!from || !to || from === to)
+        return content;
+    const stack = [{ k: "code", interp: false, depth: 0 }];
+    let out = "";
+    let i = 0;
+    const n = content.length;
+    while (i < n) {
+        const m = stack[stack.length - 1];
+        const c = content[i];
+        const c2 = content[i + 1];
+        if (m.k === "code") {
+            if (c === "/" && c2 === "/") {
+                out += "//";
+                i += 2;
+                stack.push({ k: "line" });
+                continue;
+            }
+            if (c === "/" && c2 === "*") {
+                out += "/*";
+                i += 2;
+                stack.push({ k: "block" });
+                continue;
+            }
+            if (c === "'") {
+                out += c;
+                i++;
+                stack.push({ k: "sq" });
+                continue;
+            }
+            if (c === '"') {
+                out += c;
+                i++;
+                stack.push({ k: "dq" });
+                continue;
+            }
+            if (c === "`") {
+                out += c;
+                i++;
+                stack.push({ k: "tmpl" });
+                continue;
+            }
+            if (m.interp && c === "{") {
+                m.depth++;
+                out += c;
+                i++;
+                continue;
+            }
+            if (m.interp && c === "}") {
+                if (m.depth === 0) {
+                    stack.pop();
+                    out += c;
+                    i++;
+                    continue;
+                } // closes ${…} → back to tmpl
+                m.depth--;
+                out += c;
+                i++;
+                continue;
+            }
+            if (isIdChar(c) && !(c >= "0" && c <= "9")) {
+                let j = i;
+                while (j < n && isIdChar(content[j]))
+                    j++;
+                const word = content.slice(i, j);
+                out += word === from ? to : word;
+                i = j;
+                continue;
+            }
+            if (isIdChar(c)) { // a numeric/identifier run starting with a digit — never a rename target
+                let j = i;
+                while (j < n && isIdChar(content[j]))
+                    j++;
+                out += content.slice(i, j);
+                i = j;
+                continue;
+            }
+            out += c;
+            i++;
+            continue;
+        }
+        if (m.k === "line") {
+            out += c;
+            i++;
+            if (c === "\n")
+                stack.pop();
+            continue;
+        }
+        if (m.k === "block") {
+            if (c === "*" && c2 === "/") {
+                out += "*/";
+                i += 2;
+                stack.pop();
+                continue;
+            }
+            out += c;
+            i++;
+            continue;
+        }
+        if (m.k === "sq" || m.k === "dq") {
+            const q = m.k === "sq" ? "'" : '"';
+            if (c === "\\") {
+                out += content.slice(i, i + 2);
+                i += 2;
+                continue;
+            }
+            out += c;
+            i++;
+            if (c === q)
+                stack.pop();
+            continue;
+        }
+        // template literal
+        if (c === "\\") {
+            out += content.slice(i, i + 2);
+            i += 2;
+            continue;
+        }
+        if (c === "`") {
+            out += c;
+            i++;
+            stack.pop();
+            continue;
+        }
+        if (c === "$" && c2 === "{") {
+            out += "${";
+            i += 2;
+            stack.push({ k: "code", interp: true, depth: 0 });
+            continue;
+        }
+        out += c;
+        i++;
+    }
+    return out;
+}
+/**
+ * M3 AST op support: extract one top-level symbol's text and return it together with
+ * the file content that remains (symbol removed). Returns null if the symbol is absent.
+ */
+export function extractSymbol(content, symbolName, indexer = tsIndexer) {
+    const spans = indexer.parse(content);
+    const idx = spans.findIndex((s) => s.kind === "symbol" && s.name === symbolName);
+    if (idx === -1)
+        return null;
+    const text = spans[idx].text;
+    const rest = indexer.reassemble(spans.filter((_, i) => i !== idx));
+    return { text, rest };
+}
+//# sourceMappingURL=symbols.js.map

package/dist/semantic/symbols.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"symbols.js","sourceRoot":"","sources":["../../src/semantic/symbols.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,kFAAkF;AAClF,mFAAmF;AACnF,iFAAiF;AACjF,oFAAoF;AACpF,sDAAsD;AACtD,EAAE;AACF,8EAA8E;AAC9E,iFAAiF;AACjF,mFAAmF;AACnF,8EAA8E;AAgB9E,MAAM,IAAI,GACR,sHAAsH,CAAC;AAEzH,mEAAmE;AACnE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAErF;;;;GAIG;AACH,SAAS,KAAK,CAAC,OAAe;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,IAAI,MAAM,GAAa,EAAE,CAAC;IAC1B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9E,MAAM,GAAG,EAAE,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACtB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACnB,QAAQ,EAAE,CAAC;QACX,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,oEAAoE;YACpE,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;gBACpB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,KAAK,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;gBACvB,IAAI,KAAK,GAAG,CAAC;oBAAE,MAAM,GAAG,IAAI,CAAC;gBAC7B,CAAC,EAAE,CAAC;gBACJ,IAAI,MAAM,IAAI,KAAK,IAAI,CAAC;oBAAE,MAAM;gBAChC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,+CAA+C;YACxF,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,oEAAoE;YACpE,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;gBACpB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,CAAC,EAAE,CAAC;gBACJ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;oBAAE,MAAM;YAChF,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,QAAQ,EAAE,CAAC;IACX,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oFAAoF;AACpF,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,GAAG,GAAkB,IAAI,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;iBACf,IAAI,CAAC,KAAK,GAAG;gBAAE,GAAG,GAAG,IAAI,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,GAAG,GAAG,CAAC,CAAC;aAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;YAAE,MAAM;aAC5C,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACvB,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAkB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAEtF,qEAAqE;AACrE,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,UAAyB,SAAS;IAC7E,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAK,CAAC,CAAC;AACvF,CAAC;AAED;;;8EAG8E;AAC9E,SAAS,mBAAmB,CAAC,OAAe,EAAE,IAAY,EAAE,OAAe;IACzE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAiB,EAAE;QAClD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,mBAAmB;QACvD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC,CAAC;IACF,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,IAAI,EAAE,CAAC;YAAC,KAAK,GAAG,CAAC,CAAC;YAAC,MAAM;QAAC,CAAC;IACjG,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACpB,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAAC,GAAG,GAAG,CAAC,CAAC;YAAC,MAAM;QAAC,CAAC,CAAC,sBAAsB;IACtF,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,UAAkB,EAClB,OAAe,EACf,UAAyB,SAAS;IAElC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IACjF,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAClF,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IACD,iFAAiF;IACjF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACjF,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;AAExI;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,IAAY,EAAE,EAAU;IACpE,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,OAAO,CAAC;IAIhD,MAAM,KAAK,GAAW,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/D,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QACnC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACtB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,IAAI,IAAI,CAAC;gBAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC1F,IAAI,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,IAAI,IAAI,CAAC;gBAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC3F,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,IAAI,CAAC,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACpE,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,IAAI,CAAC,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACpE,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,IAAI,CAAC,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACtE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,CAAC,CAAC,KAAK,EAAE,CAAC;gBAAC,GAAG,IAAI,CAAC,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,SAAS;YAAC,CAAC;YAClE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC1B,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;oBAAC,KAAK,CAAC,GAAG,EAAE,CAAC;oBAAC,GAAG,IAAI,CAAC,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,SAAS;gBAAC,CAAC,CAAC,6BAA6B;gBAC1F,CAAC,CAAC,KAAK,EAAE,CAAC;gBAAC,GAAG,IAAI,CAAC,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,SAAS;YACrC,CAAC;YACD,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;oBAAE,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACjC,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBACjC,CAAC,GAAG,CAAC,CAAC;gBACN,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,yEAAyE;gBAC1F,IAAI,CAAC,GAAG,CAAC,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;oBAAE,CAAC,EAAE,CAAC;gBAC3C,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC3B,CAAC,GAAG,CAAC,CAAC;gBACN,SAAS;YACX,CAAC;YACD,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAC1B,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YAAC,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,IAAI;gBAAE,KAAK,CAAC,GAAG,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC7E,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,IAAI,IAAI,CAAC;gBAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBAAC,SAAS;YAAC,CAAC;YAAC,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC9H,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACnC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACrE,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,KAAK,CAAC,GAAG,EAAE,CAAC;YAAC,SAAS;QACpD,CAAC;QACD,mBAAmB;QACnB,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACrE,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAAC,GAAG,IAAI,IAAI,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAClH,GAAG,IAAI,CAAC,CAAC;QAAC,CAAC,EAAE,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAe,EACf,UAAkB,EAClB,UAAyB,SAAS;IAElC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IACjF,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAE,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACnE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC"}

package/dist/store/applyRedactions.d.ts

@@ -0,0 +1,16 @@
+import type { ObjectStore } from "./objectStore.ts";
+import type { Blob } from "../objects/types.ts";
+export declare function redactedStub(reason: string, redactionOid: string): Blob;
+/**
+ * Materialize every Redaction's stub AT its blob oid. A redacted blob's content no
+ * longer hashes to its oid, so it can't propagate through content-addressed `put`
+ * (which would re-address it). Instead the receiver syncs the (tiny) Redaction object
+ * and writes the deterministic stub in place — evicting plaintext it already had, or
+ * creating the stub on a fresh clone that never received the original. Idempotent.
+ *
+ * When governance is active (memberships exist), only redactions validly signed by an
+ * admin member are applied — a forged redaction can't be used to evict (DoS) someone
+ * else's blob. With no governance, all redactions apply (legacy/trust-all).
+ */
+export declare function applyRedactions(store: ObjectStore): Promise<number>;
+//# sourceMappingURL=applyRedactions.d.ts.map

package/dist/store/applyRedactions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applyRedactions.d.ts","sourceRoot":"","sources":["../../src/store/applyRedactions.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,IAAI,EAAyB,MAAM,qBAAqB,CAAC;AAEvE,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAQvE;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBzE"}

package/dist/store/applyRedactions.js

@@ -0,0 +1,60 @@
+// Redaction propagation (docs/08/12 WS-E): apply every Redaction tombstone present in
+// a store to its blob, evicting the bytes locally while preserving the oid. A replica
+// that pulled the plaintext before the redaction calls this on pull; the hub calls it
+// when it receives a redaction. The stub is deterministic (reason-derived) so all
+// replicas converge to the same content.
+import { Buffer } from "node:buffer";
+import { verifyMessage } from "../core/identity.js";
+export function redactedStub(reason, redactionOid) {
+    return {
+        type: "blob",
+        data: Buffer.from(`[REDACTED: ${reason}]`).toString("base64"),
+        encoding: "base64",
+        redacted: true,
+        redactionOid,
+    };
+}
+/**
+ * Materialize every Redaction's stub AT its blob oid. A redacted blob's content no
+ * longer hashes to its oid, so it can't propagate through content-addressed `put`
+ * (which would re-address it). Instead the receiver syncs the (tiny) Redaction object
+ * and writes the deterministic stub in place — evicting plaintext it already had, or
+ * creating the stub on a fresh clone that never received the original. Idempotent.
+ *
+ * When governance is active (memberships exist), only redactions validly signed by an
+ * admin member are applied — a forged redaction can't be used to evict (DoS) someone
+ * else's blob. With no governance, all redactions apply (legacy/trust-all).
+ */
+export async function applyRedactions(store) {
+    const admins = new Map();
+    for await (const m of store.list("membership")) {
+        if (!m.revokedAt && m.role === "admin")
+            admins.set(m.actorId, m);
+    }
+    const governed = admins.size > 0 || (await first(store.list("membership"))) !== null;
+    const verified = (red) => {
+        if (!governed)
+            return true; // no governance → trust all
+        const m = admins.get(red.by);
+        if (!m || !red.sig)
+            return false;
+        return verifyMessage(m.publicKey, red.oid, red.sig.sig);
+    };
+    let applied = 0;
+    for await (const red of store.list("redaction")) {
+        if (!verified(red))
+            continue; // skip forged / non-admin redactions
+        const cur = (await store.has(red.blobOid)) ? await store.get(red.blobOid) : null;
+        if (cur?.redacted && cur.redactionOid === red.oid)
+            continue; // already applied
+        await store.overwriteAt(red.blobOid, redactedStub(red.reason, red.oid));
+        applied++;
+    }
+    return applied;
+}
+async function first(gen) {
+    for await (const x of gen)
+        return x;
+    return null;
+}
+//# sourceMappingURL=applyRedactions.js.map

package/dist/store/applyRedactions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applyRedactions.js","sourceRoot":"","sources":["../../src/store/applyRedactions.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,sFAAsF;AACtF,sFAAsF;AACtF,kFAAkF;AAClF,yCAAyC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIpD,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,YAAoB;IAC/D,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7D,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,IAAI;QACd,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAkB;IACtD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAa,YAAY,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAa,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IACjG,MAAM,QAAQ,GAAG,CAAC,GAAc,EAAW,EAAE;QAC3C,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,CAAC,4BAA4B;QACxD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACjC,OAAO,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,GAAa,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpE,CAAC,CAAC;IAEF,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAY,WAAW,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,qCAAqC;QACnE,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAO,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvF,IAAI,GAAG,EAAE,QAAQ,IAAI,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,GAAG;YAAE,SAAS,CAAC,kBAAkB;QAC/E,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAa,CAAC,CAAC,CAAC;QAClF,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,KAAK,CAAI,GAAsB;IAC5C,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/store/lock.d.ts

@@ -0,0 +1,12 @@
+export interface LockOptions {
+    /** Give up acquiring after this long. */
+    maxWaitMs?: number;
+    /** Treat a held lock older than this as abandoned and reclaim it. */
+    staleMs?: number;
+}
+/**
+ * Run `fn` while holding the named lock under `locksDir`. Serializes concurrent
+ * callers (same process or different processes) on the same name.
+ */
+export declare function withLock<T>(locksDir: string, name: string, fn: () => Promise<T>, opts?: LockOptions): Promise<T>;
+//# sourceMappingURL=lock.d.ts.map

package/dist/store/lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.d.ts","sourceRoot":"","sources":["../../src/store/lock.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,WAAW;IAC1B,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC,CAAC,CAAC,CAyCZ"}

package/dist/store/lock.js

@@ -0,0 +1,63 @@
+// Cross-process advisory lock for the few read-modify-write paths that genuinely
+// race (lease acquisition). Most of the store is append-only + content-addressed
+// and needs no lock; this is only for "read the current set, decide, then write".
+//
+// Implemented with mkdir, which is atomic create-if-not-exists on POSIX and Windows:
+// exactly one caller wins the directory creation. A stale lock (holder crashed) is
+// reclaimed after `staleMs`. Always released in a finally.
+import { mkdir, writeFile, readFile, rm } from "node:fs/promises";
+import { join } from "node:path";
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+/**
+ * Run `fn` while holding the named lock under `locksDir`. Serializes concurrent
+ * callers (same process or different processes) on the same name.
+ */
+export async function withLock(locksDir, name, fn, opts = {}) {
+    const maxWaitMs = opts.maxWaitMs ?? 10_000;
+    const staleMs = opts.staleMs ?? 30_000;
+    const lockPath = join(locksDir, `${name}.lock`);
+    const ownerFile = join(lockPath, "owner");
+    const start = Date.now();
+    for (;;) {
+        try {
+            await mkdir(lockPath); // atomic; EEXIST if already held
+            await writeFile(ownerFile, `${process.pid}:${Date.now()}`, "utf8");
+            break;
+        }
+        catch (e) {
+            const code = e.code;
+            if (code === "ENOENT") {
+                await mkdir(locksDir, { recursive: true }); // locks dir not there yet
+                continue;
+            }
+            if (code !== "EEXIST")
+                throw e;
+            // Held by someone — reclaim if stale, else back off.
+            let stale = false;
+            try {
+                const ts = Number((await readFile(ownerFile, "utf8")).split(":")[1] ?? "0");
+                if (Date.now() - ts > staleMs)
+                    stale = true;
+            }
+            catch {
+                // owner file not written yet (acquire-in-progress) → treat as fresh
+            }
+            if (stale) {
+                await rm(lockPath, { recursive: true, force: true });
+                continue;
+            }
+            if (Date.now() - start > maxWaitMs)
+                throw new Error(`lock timeout acquiring "${name}"`);
+            await sleep(5 + Math.floor(Math.random() * 15)); // jittered backoff
+        }
+    }
+    try {
+        return await fn();
+    }
+    finally {
+        await rm(lockPath, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=lock.js.map

package/dist/store/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../src/store/lock.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,iFAAiF;AACjF,kFAAkF;AAClF,EAAE;AACF,qFAAqF;AACrF,mFAAmF;AACnF,2DAA2D;AAE3D,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AASD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,QAAgB,EAChB,IAAY,EACZ,EAAoB,EACpB,OAAoB,EAAE;IAEtB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,iCAAiC;YACxD,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;YACnE,MAAM;QACR,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,GAAI,CAA2B,CAAC,IAAI,CAAC;YAC/C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,0BAA0B;gBACtE,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,CAAC;YAC/B,qDAAqD;YACrD,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;gBAC5E,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO;oBAAE,KAAK,GAAG,IAAI,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;YACtE,CAAC;YACD,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrD,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,GAAG,CAAC,CAAC;YACxF,MAAM,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB;QACtE,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC"}

package/dist/store/objectStore.d.ts

@@ -0,0 +1,127 @@
+import { Buffer } from "node:buffer";
+import { type LockOptions } from "./lock.ts";
+import type { AnyObject, ObjectType } from "../objects/types.ts";
+/**
+ * A stored object's bytes could not be decoded — bit-rot, truncation, or a torn write
+ * that slipped past the atomic-write guarantee (D1). Typed (not an opaque `SyntaxError`)
+ * and carries the offending `oid` so a decode failure deep in `materialize`/`pull` is
+ * actionable: the caller knows exactly which object to `fsck`/repair. F1 (docs/13).
+ */
+export declare class CorruptObjectError extends Error {
+    readonly oid?: string;
+    constructor(message: string, opts?: {
+        oid?: string;
+        cause?: unknown;
+    });
+}
+export declare class ObjectStore {
+    #private;
+    readonly root: string;
+    constructor(repoDir: string);
+    init(): Promise<void>;
+    /**
+     * Atomically write a derived auxiliary file under the repo's `.avcs` root, reusing the
+     * crash-safe temp→fsync→rename→fsync-dir path (D1/D2). For repo-managed caches the
+     * store doesn't model as objects — e.g. the compaction snapshot. `relPath` is resolved
+     * under root; parent dirs are created. Crash-safe: a reader sees old-or-complete, and
+     * the file survives a hard crash once this returns.
+     */
+    writeAux(relPath: string, data: string | Buffer): Promise<void>;
+    /** Durably append a line to an auxiliary log under the repo's `.avcs` root (e.g. the
+     *  hub audit log, E7). Reuses the fsync-file + fsync-dir append path. */
+    appendAux(relPath: string, line: string): Promise<void>;
+    /** Run a critical section under a named cross-process lock (see lock.ts). */
+    withLock<T>(name: string, fn: () => Promise<T>, opts?: LockOptions): Promise<T>;
+    appendEntityIndex(key: string, oid: string): Promise<void>;
+    readEntityIndex(key: string): Promise<string[]>;
+    static isRepo(repoDir: string): boolean;
+    /**
+     * Write an object. Returns its oid. Idempotent: writing identical content yields
+     * the same oid and is a no-op if already present (append-only honored).
+     */
+    put<T extends AnyObject>(obj: T): Promise<string>;
+    /**
+     * Op-log in authoring/arrival order (docs/11 A5). Returns oids of every operation ever
+     * written, deduped, FIRST-WRITE order preserved. May include oids of operations later
+     * removed by GC (the store is the source of truth — callers tolerate a missing object).
+     * Empty for a store created before the op-log existed; `rebuildOpLog` backfills it.
+     */
+    readOpLog(): Promise<string[]>;
+    /**
+     * Object-log in arrival order (E5): oids of EVERY object ever written, deduped,
+     * first-write order preserved. A store predating the log (or one that just upgraded)
+     * is backfilled once from a full scan — that scan order becomes this hub's stable
+     * append base. Append-only afterward, so an index into it is a valid sync cursor.
+     */
+    readObjLog(): Promise<string[]>;
+    /** Backfill the op-log from a full scan (for stores predating it, or after corruption).
+     *  Rewrites it atomically to the current operation set in canonical oid order. */
+    rebuildOpLog(): Promise<number>;
+    /**
+     * Redaction exception (Phase 12): overwrite the object stored AT `oid` with new
+     * content that no longer hashes to it. This is the ONE place append-only/content-
+     * addressing yields — used only by an admin-signed Redaction to evict leaked bytes
+     * while keeping the oid (and every reference to it) valid.
+     */
+    overwriteAt(oid: string, obj: AnyObject): Promise<void>;
+    /**
+     * GC exception: delete an object file. Used only by `repo.gc` to reclaim objects
+     * that are unreachable from the authoritative graph (orphan blobs, expired
+     * quarantined ops). The append-only audit history of accepted ops is never removed.
+     */
+    deleteObject(oid: string): Promise<void>;
+    get<T extends AnyObject = AnyObject>(oid: string): Promise<T>;
+    has(oid: string): Promise<boolean>;
+    /** Stream every object of a given type — loose objects first, then packed ones (B2). */
+    list<T extends AnyObject = AnyObject>(type?: ObjectType): AsyncGenerator<T>;
+    /**
+     * Fold all loose NON-blob objects into a new packfile (+ index), then delete the loose
+     * copies. Idempotent in effect (already-packed objects have no loose file). Reads stay
+     * correct throughout (loose-first, then packs). Returns how many objects were packed.
+     */
+    pack(): Promise<{
+        packed: number;
+    }>;
+    collect<T extends AnyObject = AnyObject>(type?: ObjectType): Promise<T[]>;
+    setRef(name: string, oid: string): Promise<void>;
+    getRef(name: string): Promise<string | null>;
+    /** All named refs as name → oid (for hub governance distribution). */
+    listRefs(): Promise<Map<string, string>>;
+    setHead(viewName: string): Promise<void>;
+    getHead(): Promise<string>;
+    /**
+     * Re-derive every stored object's content address and compare it to the address it
+     * lives at — catching bit-rot, truncation, and a torn write that slipped past the
+     * atomic-write guarantee. A redacted blob is exempt: its bytes were deliberately
+     * overwritten by an admin Redaction and no longer hash to their oid (that's the one
+     * sanctioned exception to content-addressing). Also reconciles the op-log against the
+     * actual operation set: operation objects missing from the log are real drift (the
+     * fast-path could skip them); log entries with no object are GC'd/lost (informational).
+     * Read-only unless `rebuild` is set, which rewrites the op-log to match the object set.
+     */
+    fsck(opts?: {
+        rebuild?: boolean;
+    }): Promise<FsckReport>;
+}
+export interface FsckReport {
+    objectsChecked: number;
+    /** true iff no corrupt object and no operation missing from the op-log. */
+    ok: boolean;
+    /** Objects whose content no longer hashes to the address they live at. */
+    corrupt: {
+        oid: string;
+        reason: string;
+    }[];
+    oplogDrift: {
+        /** operation objects absent from the op-log — real drift (fast-path could skip them). */
+        opsMissingFromLog: string[];
+        /** op-log entries with no backing object — GC'd quarantine ops or lost (informational). */
+        logEntriesMissingObject: string[];
+    };
+    /** Present when `fsck({rebuild:true})` repaired op-log drift. */
+    repaired?: {
+        oplogRebuilt: boolean;
+        oplogEntries: number;
+    };
+}
+//# sourceMappingURL=objectStore.d.ts.map

package/dist/store/objectStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"objectStore.d.ts","sourceRoot":"","sources":["../../src/store/objectStore.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,OAAO,EAAY,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjE;;;;;GAKG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;gBACV,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAKtE;AAoBD,qBAAa,WAAW;;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAGV,OAAO,EAAE,MAAM;IAIrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAwE3B;;;;;;OAMG;IACG,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMrE;6EACyE;IACnE,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7D,6EAA6E;IACvE,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAY/E,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK1D,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAQrD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAWvC;;;OAGG;IACG,GAAG,CAAC,CAAC,SAAS,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IA6BvD;;;;;OAKG;IACG,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAUpC;;;;;OAKG;IACG,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAkBrC;sFACkF;IAC5E,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAQrC;;;;;OAKG;IACG,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7D;;;;OAIG;IACG,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKxC,GAAG,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAQ7D,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIxC,wFAAwF;IACjF,IAAI,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC;IA2DlF;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAmCnC,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAOzE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAGhD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAKlD,sEAAsE;IAChE,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IASxC,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAGxC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;IAKhC;;;;;;;;;OASG;IACG,IAAI,CAAC,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,UAAU,CAAC;CA2ElE;AAED,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,EAAE,EAAE,OAAO,CAAC;IACZ,0EAA0E;IAC1E,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3C,UAAU,EAAE;QACV,yFAAyF;QACzF,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAC5B,2FAA2F;QAC3F,uBAAuB,EAAE,MAAM,EAAE,CAAC;KACnC,CAAC;IACF,iEAAiE;IACjE,QAAQ,CAAC,EAAE;QAAE,YAAY,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5D"}