@lannguyensi/harness 0.64.0 → 1.0.0

package/dist/cli/gate/codex-snapshot.d.ts

@@ -0,0 +1,208 @@
+import { type CodexManagedHookUnit } from "../apply/install-codex-config.js";
+export declare const CODEX_SNAPSHOT_BASENAME_PREFIX = "harness.gate-disable-codex.";
+/** Why `gate enable --runtime codex` retired a snapshot: it was applied or
+ * found already applied (`restored`), or its units were brought back by
+ * something else since it was taken, such as a re-install (`superseded`). */
+export type CodexSnapshotRetirement = "restored" | "superseded";
+export declare const CODEX_SNAPSHOT_VERSION: 3;
+export declare const CODEX_SNAPSHOT_TARGET: "codex";
+/** The value a neutralised unit's `hooks` line carries. */
+export declare const CODEX_NEUTRALISED_HOOKS = "hooks = []";
+export interface CodexDisabledUnit {
+    event: string;
+    /** Position of the unit among the units of its event in the block. */
+    eventIndex: number;
+    /** Position of the unit among all units of the block. */
+    ordinal: number;
+    id: string;
+    matcher: string | null;
+    /** The unit's original `hooks = [...]` line, verbatim, without its line terminator. */
+    hooksText: string;
+}
+/** One later `gate disable` merged into a live snapshot, kept for audit. */
+export interface CodexSnapshotMerge {
+    createdAt: string;
+    matcher: string;
+    /** The pre-merge copy of the config that disable wrote. */
+    configBackupPath: string;
+}
+export interface CodexGateSnapshot {
+    version: typeof CODEX_SNAPSHOT_VERSION;
+    target: typeof CODEX_SNAPSHOT_TARGET;
+    createdAt: string;
+    /** Absolute path as requested (the symlink when the config is one). */
+    configPath: string;
+    /** Absolute path the pre-mutation copy was written to. */
+    configBackupPath: string;
+    /** The config before the first disable this snapshot covers. */
+    configBeforeSha256: string;
+    /** The config after the latest disable merged into this snapshot. */
+    configAfterSha256: string;
+    filter: {
+        matcher?: string;
+    };
+    /** The neutralised units in block order, merged over every disable since the snapshot was created. */
+    neutralised: CodexDisabledUnit[];
+    /** Later disables merged into this snapshot, oldest first (absent when there were none). */
+    merges?: CodexSnapshotMerge[];
+    /** The generation marker of the block the snapshot was taken from
+     * (`CODEX_BLOCK_GENERATION_PREFIX`); absent when that block carried none,
+     * and in a snapshot written before the marker existed. */
+    blockGeneration?: string;
+}
+export interface ResolvedCodexConfig {
+    /** The requested path, absolute. Snapshots and backups sit beside it. */
+    requestedPath: string;
+    /** The regular file read and written (the symlink's target when linked). */
+    configPath: string;
+    /** `requestedPath` when the call named a config (`--config`), else null: a
+     * command a message prints repeats the flag only when the call had it. */
+    namedPath: string | null;
+}
+/** ` <flag> <path>` with the path shell-quoted when the call named a config, else "". */
+export declare function codexConfigFlag(namedPath: string | null, flag?: string): string;
+/** The install command the installer's refusal texts and hints print. */
+export declare const CODEX_INSTALL_COMMAND = "harness apply --runtime codex --install";
+/** `message` with every bare install command followed by the call's
+ * `--codex-config <path>` (shell-quoted) when the call named a config, so a
+ * pasted command acts on the config the call acted on and not on the default
+ * `~/.codex/config.toml`. A call without a named config prints it unchanged.
+ * Apply once, at the boundary that knows the call's path. */
+export declare function nameInstallConfig(message: string, namedPath: string | null): string;
+/** The message of an installer refusal in the gate's wording. */
+export declare function gateWording(message: string): string;
+/** An installer refusal becomes the gate verb's own error type (same text in
+ * the gate's wording, its install commands naming the config the call named,
+ * `namedPath`); anything else is rethrown unchanged by the caller. */
+export declare function toGateError(err: unknown, makeError: (message: string) => Error, namedPath?: string | null): unknown;
+/** Resolves `--config` (or the default `~/.codex/config.toml`) the way the
+ * installer does: a symlinked config is edited at its resolved target. The
+ * symlink refusals (dangling, not a regular file) surface as `makeError`. */
+export declare function resolveCodexConfig(opts: {
+    configPath?: string | undefined;
+    homeDir?: string | undefined;
+}, makeError: (message: string) => Error): ResolvedCodexConfig;
+export declare function codexSnapshotPath(requestedPath: string, now: Date): string;
+/** The name a snapshot is renamed to once retired. The file stays for audit;
+ * `listCodexSnapshots` never offers it again. */
+export declare function retiredCodexSnapshotPath(snapPath: string, why: CodexSnapshotRetirement): string;
+/** The snapshot a call retired: `from` was renamed to `to`. */
+export interface CodexRetiredSnapshot {
+    from: string;
+    to: string;
+    why: CodexSnapshotRetirement;
+    /** For an install-superseded snapshot: the installer backup that dates the install. */
+    installBackup?: string;
+    /** For a snapshot superseded because the block carries another generation
+     * marker than the one it recorded: both markers. */
+    generation?: {
+        snapshot: string;
+        block: string;
+    };
+}
+/** Renames a live snapshot to its retired name and returns that name; the
+ * file stays for audit. A failed rename surfaces as `makeError`: `context`
+ * (what the call has done so far) and the move-aside step. */
+export declare function retireCodexSnapshot(snapPath: string, why: CodexSnapshotRetirement, makeError: (message: string) => Error, context?: string): string;
+/** The ways out of a live snapshot that no gate command can apply. */
+export declare function codexSnapshotExits(live: LoadedCodexSnapshot, namedPath?: string | null): string;
+export type CodexRestorePlan = {
+    ok: true;
+    text: string;
+    restored: CodexDisabledUnit[];
+    skipped: string[];
+} | {
+    ok: false;
+    reason: string;
+};
+/** The config with each still-neutralised unit of the snapshot given its
+ * original `hooks` line back, found by id in the block as it is now. A unit
+ * that is present once and not neutralised is back already, whatever its
+ * event or matcher now: it is skipped and named in `skipped`, and its current
+ * line is never overwritten. A unit that is missing, listed twice, or still
+ * neutralised under another event or matcher cannot be restored by any gate
+ * command, so the plan fails and its reason names the ways out. `units` is
+ * null when the config has no managed block. */
+export declare function planCodexRestore(current: string, units: readonly CodexManagedHookUnit[] | null, configPath: string, live: LoadedCodexSnapshot, namedPath?: string | null): CodexRestorePlan;
+/** The installer's newest write of the config, read from its backups beside
+ * the requested path, beside every further hop of its link chain and beside
+ * the resolved target (an install leaves them beside the path it was run
+ * through, which may be any of these). An install through a link outside this
+ * chain leaves its backups where this cannot look. */
+export declare function latestInstall(requestedPath: string, configPath: string): {
+    ms: number;
+    path: string;
+} | null;
+/** Whether a live snapshot is spent, i.e. `gate enable` would only retire it
+ * without writing: an install re-rendered the block after it was taken (its
+ * hooks lines may be outdated), the config already matches its pre-disable
+ * sha, or none of its units is disabled any more. The last case counts only
+ * when every unit it names is still in the block: a unit deleted by hand is
+ * neither enabled nor restorable, so the snapshot stays live and `missing`
+ * names it. `units` is null when the config has no managed block.
+ *
+ * An install is dated two ways: by the installer's backup files (`install`,
+ * newer than the snapshot), and by the block's generation marker
+ * (`blockGeneration`, null when the block carries none): a snapshot that
+ * recorded a marker and finds the block carrying another one was taken from a
+ * block an install has re-rendered since, which no link spelling and no
+ * deleted backup file hides. A snapshot without a recorded marker, or a block
+ * without one, is dated by the backup files alone. */
+export declare function spentCodexSnapshot(snapshot: CodexGateSnapshot, currentSha: string, units: ReadonlyArray<{
+    id: string;
+    disabled: boolean;
+}> | null, install: {
+    ms: number;
+    path: string;
+} | null, blockGeneration: string | null): {
+    retire: Pick<CodexRetiredSnapshot, "why" | "installBackup" | "generation"> | null;
+    missing: string[];
+};
+/** The Codex snapshots beside a config that are still live (not retired). */
+export declare function listCodexSnapshots(dir: string): string[];
+export interface LoadedCodexSnapshot {
+    path: string;
+    snapshot: CodexGateSnapshot;
+}
+/** A live snapshot beside a config that was taken for another config. */
+export interface ForeignCodexSnapshot {
+    /** The snapshot file. */
+    path: string;
+    /** The config it was taken for: its recorded basename in the snapshot's directory. */
+    configPath: string;
+    /** Whether a file (or link) is at `configPath` now. */
+    configExists: boolean;
+    /** The backup its first disable wrote: the pre-disable copy of that config. */
+    configBackupPath: string;
+}
+/** The way out of a snapshot taken for another config: the gate command that
+ * restores the config the snapshot was taken for (with the extra steps when
+ * no file is at that name any more). */
+export declare function foreignCodexExit(f: ForeignCodexSnapshot): string;
+/** The live snapshots beside a config, split into those taken for it, newest
+ * first by their recorded `createdAt` (equal times by file name, newest name
+ * first; never by file mtime, which a directory copy reorders), and those
+ * taken for another config. Snapshots sit beside their config and record its
+ * path, so only the basename counts, never how the directory was spelled; a
+ * snapshot is the config's own when the requested path names the directory
+ * entry that basename names (`namesSameEntry`, the Claude gate's rule): the
+ * same spelling, or another spelling of the one entry on a filesystem that
+ * folds letter case or normalization. A hard link or a symlink to the config
+ * under another name is another entry, so a snapshot recorded for either is
+ * foreign to the other. An unreadable snapshot refuses via `makeError`. */
+export declare function readLiveCodexSnapshots(requestedPath: string, makeError: (message: string) => Error, namedPath?: string | null): {
+    own: LoadedCodexSnapshot[];
+    foreign: ForeignCodexSnapshot[];
+};
+export interface CodexSnapshotReadOk {
+    ok: true;
+    snapshot: CodexGateSnapshot;
+}
+export interface CodexSnapshotReadErr {
+    ok: false;
+    reason: string;
+}
+/** Parses a Codex snapshot. Anything that is not a version-3 snapshot with
+ * `target: "codex"` is refused, so a Claude snapshot renamed into place is
+ * never restored into a TOML file. */
+export declare function readCodexSnapshot(filePath: string, namedPath?: string | null): CodexSnapshotReadOk | CodexSnapshotReadErr;

package/dist/cli/gate/codex-snapshot.js

@@ -0,0 +1,402 @@
+// Snapshot file format and shared path handling for `harness gate disable
+// --runtime codex` / `harness gate enable --runtime codex`.
+//
+// `gate disable --runtime codex` does not delete a hook unit: it neutralises
+// it in place, replacing the unit's `hooks = [...]` line with `hooks = []`.
+// Codex keys a user hook's trust and enabled state by its position in the
+// event's array, and an empty group takes its position without registering
+// a handler, so every other hook keeps its trust. A Codex snapshot records
+// the neutralised units: per unit its identity and the verbatim original
+// `hooks = [...]` line, plus the sha256 of the config before the first
+// disable and after the latest one, and the generation marker of the block it
+// was taken from, which dates it against a later install. At most one
+// snapshot per config is live: a later disable merges its units into it. It
+// lives beside the Codex config under its own file prefix and carries
+// `version: 3` and `target: "codex"`,
+// so a Claude settings snapshot (version 1 or 2, no target) can never be restored
+// into TOML and a Codex snapshot can never be read as a settings.json one
+// (`readSnapshot` rejects version 3). Once `gate enable` has applied a
+// snapshot, or found it applied or superseded, it renames the file to
+// `*.restored.json` or `*.superseded.json`, and so does a `gate disable` that
+// finds the live snapshot spent: the file stays for audit,
+// `listCodexSnapshots` never offers it again.
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { CodexInstallRefusalError, defaultCodexConfigPath, latestCodexInstallBackup, resolveConfigSymlink, } from "../apply/install-codex-config.js";
+import { kernelEntry, linkChain } from "./link-chain.js";
+import { shellQuote } from "../shell-quote.js";
+import { listSnapshots, namesSameEntry, SNAPSHOT_BASENAME_SUFFIX, snapshotFieldProblem } from "./snapshot.js";
+export const CODEX_SNAPSHOT_BASENAME_PREFIX = "harness.gate-disable-codex.";
+const RETIRED_SUFFIXES = [".restored", ".superseded"].map((s) => `${s}${SNAPSHOT_BASENAME_SUFFIX}`);
+export const CODEX_SNAPSHOT_VERSION = 3;
+export const CODEX_SNAPSHOT_TARGET = "codex";
+/** The value a neutralised unit's `hooks` line carries. */
+export const CODEX_NEUTRALISED_HOOKS = "hooks = []";
+/** ` <flag> <path>` with the path shell-quoted when the call named a config, else "". */
+export function codexConfigFlag(namedPath, flag = "--config") {
+    return namedPath === null ? "" : ` ${flag} ${shellQuote(namedPath)}`;
+}
+/** The install command the installer's refusal texts and hints print. */
+export const CODEX_INSTALL_COMMAND = "harness apply --runtime codex --install";
+/** `message` with every bare install command followed by the call's
+ * `--codex-config <path>` (shell-quoted) when the call named a config, so a
+ * pasted command acts on the config the call acted on and not on the default
+ * `~/.codex/config.toml`. A call without a named config prints it unchanged.
+ * Apply once, at the boundary that knows the call's path. */
+export function nameInstallConfig(message, namedPath) {
+    if (namedPath === null)
+        return message;
+    return message
+        .split(CODEX_INSTALL_COMMAND)
+        .join(`${CODEX_INSTALL_COMMAND}${codexConfigFlag(namedPath, "--codex-config")}`);
+}
+/** Installer refusal texts are worded for `harness apply --install`. Reached
+ * through the gate they would tell the operator about an install that never
+ * ran, so each known phrase is mapped to the gate's own wording. */
+const GATE_WORDING = [
+    [
+        "refusing to install, because without parsing it harness cannot confirm that every table outside the harness-managed hook block would survive the install",
+        "refusing to edit, because without parsing it harness cannot confirm that every table outside the harness-managed hook block would survive the edit",
+    ],
+    ["installing would change", "the gate edit would change"],
+    ["refusing to install rather than risk", "refusing to edit rather than risk"],
+    ["refusing to install, nothing was written", "refusing to edit, nothing was written"],
+    ["The Codex config harness would write to", "The Codex config the gate would write to"],
+    [
+        "restore it from the most recent .harness-backup-* file (if one exists)",
+        "restore it from the backup the gate wrote beside it (<config>.bak.<timestamp>, if one exists)",
+    ],
+];
+/** The message of an installer refusal in the gate's wording. */
+export function gateWording(message) {
+    let out = message;
+    for (const [from, to] of GATE_WORDING)
+        out = out.split(from).join(to);
+    return out;
+}
+/** An installer refusal becomes the gate verb's own error type (same text in
+ * the gate's wording, its install commands naming the config the call named,
+ * `namedPath`); anything else is rethrown unchanged by the caller. */
+export function toGateError(err, makeError, namedPath = null) {
+    return err instanceof CodexInstallRefusalError
+        ? makeError(nameInstallConfig(gateWording(err.message), namedPath))
+        : err;
+}
+/** The absolute spelling of a config path. One with a `..` segment is taken
+ * through the directory the kernel reaches (`kernelEntry`), not folded
+ * lexically: `via/..` is the parent of where the directory link `via` leads,
+ * and the snapshot and the backup sit beside the config as the kernel finds it. */
+function absoluteEntry(spelled) {
+    if (!spelled.split(path.sep).includes(".."))
+        return path.resolve(spelled);
+    const entry = kernelEntry(spelled);
+    // A directory that cannot be resolved stays as written (nothing can be read
+    // or written through it), made absolute without a fold.
+    return path.isAbsolute(entry) ? entry : `${process.cwd()}${path.sep}${entry}`;
+}
+/** Resolves `--config` (or the default `~/.codex/config.toml`) the way the
+ * installer does: a symlinked config is edited at its resolved target. The
+ * symlink refusals (dangling, not a regular file) surface as `makeError`. */
+export function resolveCodexConfig(opts, makeError) {
+    const named = typeof opts.configPath === "string" && opts.configPath.length > 0;
+    const requestedPath = absoluteEntry(named ? opts.configPath : defaultCodexConfigPath(opts.homeDir));
+    try {
+        return { requestedPath, configPath: resolveConfigSymlink(requestedPath), namedPath: named ? requestedPath : null };
+    }
+    catch (err) {
+        throw toGateError(err, makeError, named ? requestedPath : null);
+    }
+}
+function stamp(now) {
+    return now.toISOString().replace(/:/g, "-");
+}
+export function codexSnapshotPath(requestedPath, now) {
+    return path.join(path.dirname(requestedPath), `${CODEX_SNAPSHOT_BASENAME_PREFIX}${stamp(now)}${SNAPSHOT_BASENAME_SUFFIX}`);
+}
+/** The name a snapshot is renamed to once retired. The file stays for audit;
+ * `listCodexSnapshots` never offers it again. */
+export function retiredCodexSnapshotPath(snapPath, why) {
+    return `${snapPath.slice(0, snapPath.length - SNAPSHOT_BASENAME_SUFFIX.length)}.${why}${SNAPSHOT_BASENAME_SUFFIX}`;
+}
+/** Renames a live snapshot to its retired name and returns that name; the
+ * file stays for audit. A failed rename surfaces as `makeError`: `context`
+ * (what the call has done so far) and the move-aside step. */
+export function retireCodexSnapshot(snapPath, why, makeError, context = "") {
+    const to = retiredCodexSnapshotPath(snapPath, why);
+    try {
+        fs.renameSync(snapPath, to);
+    }
+    catch (err) {
+        throw makeError(`${context}cannot retire the snapshot ${snapPath} (${err.message}); move it out of this ` +
+            "directory by hand so it is never applied again, then run the command again.");
+    }
+    return to;
+}
+/** The ways out of a live snapshot that no gate command can apply. */
+export function codexSnapshotExits(live, namedPath = null) {
+    return (`Ways out: run \`harness apply --runtime codex --install${codexConfigFlag(namedPath, "--codex-config")}\`, which ` +
+        `re-renders the block and supersedes the snapshot, or restore the config from ${live.snapshot.configBackupPath} ` +
+        `(its state before the snapshot's first disable); either way the next ` +
+        `\`harness gate enable --runtime codex${codexConfigFlag(namedPath)}\` (or disable) retires the ` +
+        `snapshot. Or move ${live.path} out of this directory and put back by hand any unit it names that is ` +
+        "still disabled.");
+}
+/** The config with each still-neutralised unit of the snapshot given its
+ * original `hooks` line back, found by id in the block as it is now. A unit
+ * that is present once and not neutralised is back already, whatever its
+ * event or matcher now: it is skipped and named in `skipped`, and its current
+ * line is never overwritten. A unit that is missing, listed twice, or still
+ * neutralised under another event or matcher cannot be restored by any gate
+ * command, so the plan fails and its reason names the ways out. `units` is
+ * null when the config has no managed block. */
+export function planCodexRestore(current, units, configPath, live, namedPath = null) {
+    if (units === null) {
+        return {
+            ok: false,
+            reason: `${configPath} has no harness-managed Codex hook block any more; the snapshot ${live.path} cannot ` +
+                `restore units into it. The config is untouched. ${codexSnapshotExits(live, namedPath)}`,
+        };
+    }
+    const edits = [];
+    const restored = [];
+    const skipped = [];
+    for (const wanted of live.snapshot.neutralised) {
+        const found = units.filter((u) => u.id === wanted.id);
+        const unit = found.length === 1 ? found[0] : undefined;
+        if (unit !== undefined && !unit.disabled) {
+            skipped.push(wanted.id);
+            continue;
+        }
+        if (unit === undefined || unit.event !== wanted.event || unit.matcher !== wanted.matcher) {
+            return {
+                ok: false,
+                reason: `the hook unit ${JSON.stringify(wanted.id)} of the snapshot ${live.path} is not in the block of ` +
+                    `${configPath} as it was (missing, listed twice, or changed event or matcher while still disabled), ` +
+                    `so no gate command can restore it. The config is untouched. ${codexSnapshotExits(live, namedPath)}`,
+            };
+        }
+        edits.push({ start: unit.hooksStart, end: unit.hooksEnd, text: wanted.hooksText });
+        restored.push(wanted);
+    }
+    edits.sort((a, b) => a.start - b.start);
+    let out = "";
+    let cursor = 0;
+    for (const edit of edits) {
+        out += current.slice(cursor, edit.start) + edit.text;
+        cursor = edit.end;
+    }
+    return { ok: true, text: out + current.slice(cursor), restored, skipped };
+}
+/** The installer's newest write of the config, read from its backups beside
+ * the requested path, beside every further hop of its link chain and beside
+ * the resolved target (an install leaves them beside the path it was run
+ * through, which may be any of these). An install through a link outside this
+ * chain leaves its backups where this cannot look. */
+export function latestInstall(requestedPath, configPath) {
+    const found = [...new Set([...linkChain(requestedPath), configPath])]
+        .map(latestCodexInstallBackup)
+        .filter((t) => t !== null);
+    return found.reduce((a, b) => (a === null || b.ms > a.ms ? b : a), null);
+}
+/** Whether a live snapshot is spent, i.e. `gate enable` would only retire it
+ * without writing: an install re-rendered the block after it was taken (its
+ * hooks lines may be outdated), the config already matches its pre-disable
+ * sha, or none of its units is disabled any more. The last case counts only
+ * when every unit it names is still in the block: a unit deleted by hand is
+ * neither enabled nor restorable, so the snapshot stays live and `missing`
+ * names it. `units` is null when the config has no managed block.
+ *
+ * An install is dated two ways: by the installer's backup files (`install`,
+ * newer than the snapshot), and by the block's generation marker
+ * (`blockGeneration`, null when the block carries none): a snapshot that
+ * recorded a marker and finds the block carrying another one was taken from a
+ * block an install has re-rendered since, which no link spelling and no
+ * deleted backup file hides. A snapshot without a recorded marker, or a block
+ * without one, is dated by the backup files alone. */
+export function spentCodexSnapshot(snapshot, currentSha, units, install, blockGeneration) {
+    if (install !== null && install.ms > Date.parse(snapshot.createdAt)) {
+        return { retire: { why: "superseded", installBackup: install.path }, missing: [] };
+    }
+    const recorded = snapshot.blockGeneration;
+    if (recorded !== undefined && blockGeneration !== null && recorded !== blockGeneration) {
+        return {
+            retire: { why: "superseded", generation: { snapshot: recorded, block: blockGeneration } },
+            missing: [],
+        };
+    }
+    if (currentSha === snapshot.configBeforeSha256)
+        return { retire: { why: "restored" }, missing: [] };
+    const ids = snapshot.neutralised.map((u) => u.id);
+    if (units !== null && !units.some((u) => u.disabled && ids.includes(u.id))) {
+        const missing = ids.filter((id) => !units.some((u) => u.id === id));
+        return { retire: missing.length === 0 ? { why: "superseded" } : null, missing };
+    }
+    return { retire: null, missing: [] };
+}
+/** The Codex snapshots beside a config that are still live (not retired). */
+export function listCodexSnapshots(dir) {
+    return listSnapshots(dir, CODEX_SNAPSHOT_BASENAME_PREFIX).filter((p) => !RETIRED_SUFFIXES.some((suffix) => p.endsWith(suffix)));
+}
+/** The way out of a snapshot taken for another config: the gate command that
+ * restores the config the snapshot was taken for (with the extra steps when
+ * no file is at that name any more). */
+export function foreignCodexExit(f) {
+    return (`run \`harness gate enable --runtime codex --config ${shellQuote(f.configPath)}\`` +
+        (f.configExists
+            ? ""
+            : ` (no file is at that name now: if the config was renamed after the disable, rename it back first; ` +
+                `if it is gone, restore it from ${f.configBackupPath}, which is the file before that disable, then run ` +
+                "that command, which retires the snapshot; or move the snapshot out of the directory by hand once its " +
+                "units are back)"));
+}
+/** The live snapshots beside a config, split into those taken for it, newest
+ * first by their recorded `createdAt` (equal times by file name, newest name
+ * first; never by file mtime, which a directory copy reorders), and those
+ * taken for another config. Snapshots sit beside their config and record its
+ * path, so only the basename counts, never how the directory was spelled; a
+ * snapshot is the config's own when the requested path names the directory
+ * entry that basename names (`namesSameEntry`, the Claude gate's rule): the
+ * same spelling, or another spelling of the one entry on a filesystem that
+ * folds letter case or normalization. A hard link or a symlink to the config
+ * under another name is another entry, so a snapshot recorded for either is
+ * foreign to the other. An unreadable snapshot refuses via `makeError`. */
+export function readLiveCodexSnapshots(requestedPath, makeError, namedPath = null) {
+    const own = [];
+    const foreign = [];
+    const dir = path.dirname(requestedPath);
+    const targetName = path.basename(requestedPath);
+    for (const snapPath of listCodexSnapshots(dir)) {
+        const read = readCodexSnapshot(snapPath, namedPath);
+        if (!read.ok) {
+            throw makeError(`${read.reason.replace(/\.$/, "")}. A live Codex snapshot beside ${requestedPath} that harness cannot read blocks the gate: ` +
+                `move ${snapPath} aside (rename it out of this directory) and run the command again.`);
+        }
+        const recordedName = path.basename(read.snapshot.configPath);
+        if (namesSameEntry(dir, recordedName, targetName, { symlinks: true })) {
+            own.push({ path: snapPath, snapshot: read.snapshot });
+        }
+        else {
+            const configPath = path.join(dir, recordedName);
+            foreign.push({
+                path: snapPath,
+                configPath,
+                configExists: pathExists(configPath),
+                configBackupPath: read.snapshot.configBackupPath,
+            });
+        }
+    }
+    const time = (l) => Date.parse(l.snapshot.createdAt);
+    own.sort((a, b) => time(b) - time(a) || (a.path < b.path ? 1 : -1));
+    return { own, foreign };
+}
+/** Whether anything, a dangling symlink included, is at `p`. */
+function pathExists(p) {
+    try {
+        fs.lstatSync(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** A block generation marker as the installer writes it: a sha256 in lowercase hex. */
+const GENERATION_RE = /^[0-9a-f]{64}$/;
+function isNonNegativeInteger(value) {
+    return Number.isInteger(value) && value >= 0;
+}
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isMerge(value) {
+    if (!isRecord(value))
+        return false;
+    const m = value;
+    return typeof m["createdAt"] === "string" && typeof m["matcher"] === "string" && typeof m["configBackupPath"] === "string";
+}
+function isDisabledUnit(value) {
+    if (!isRecord(value))
+        return false;
+    const u = value;
+    return (typeof u["event"] === "string" &&
+        typeof u["id"] === "string" &&
+        (u["matcher"] === null || typeof u["matcher"] === "string") &&
+        isNonNegativeInteger(u["eventIndex"]) &&
+        isNonNegativeInteger(u["ordinal"]) &&
+        typeof u["hooksText"] === "string" &&
+        u["hooksText"].startsWith("hooks = [") &&
+        !/[\r\n]/.test(u["hooksText"]));
+}
+/** Parses a Codex snapshot. Anything that is not a version-3 snapshot with
+ * `target: "codex"` is refused, so a Claude snapshot renamed into place is
+ * never restored into a TOML file. */
+export function readCodexSnapshot(filePath, namedPath = null) {
+    let parsed;
+    try {
+        parsed = JSON.parse(fs.readFileSync(filePath, "utf8"));
+    }
+    catch (err) {
+        return { ok: false, reason: `cannot read snapshot ${filePath}: ${err.message}` };
+    }
+    if (!isRecord(parsed)) {
+        return { ok: false, reason: `snapshot ${filePath} is not a JSON object` };
+    }
+    const obj = parsed;
+    if (obj["target"] === CODEX_SNAPSHOT_TARGET && obj["version"] === 2) {
+        return {
+            ok: false,
+            reason: `snapshot ${filePath} is a version 2 Codex gate snapshot, written by an earlier build that ` +
+                "deleted the hook unit instead of neutralising it; it cannot be restored. Re-run " +
+                `\`${CODEX_INSTALL_COMMAND}${codexConfigFlag(namedPath, "--codex-config")}\` to rewrite the block, or restore the config ` +
+                "from the backup beside it, then remove this snapshot.",
+        };
+    }
+    if (obj["version"] !== CODEX_SNAPSHOT_VERSION || obj["target"] !== CODEX_SNAPSHOT_TARGET) {
+        return {
+            ok: false,
+            reason: `snapshot ${filePath} is not a Codex gate snapshot (expected version ${CODEX_SNAPSHOT_VERSION} ` +
+                `with target ${JSON.stringify(CODEX_SNAPSHOT_TARGET)}, got version ${JSON.stringify(obj["version"])} ` +
+                `with target ${JSON.stringify(obj["target"] ?? null)})`,
+        };
+    }
+    const problem = snapshotFieldProblem(filePath, obj, [
+        "createdAt",
+        "configPath",
+        "configBackupPath",
+        "configBeforeSha256",
+        "configAfterSha256",
+    ]);
+    if (problem !== null)
+        return { ok: false, reason: problem };
+    // Ownership is decided by the recorded file name, so a path with none (empty, `.`, `..`, `/`) is unreadable.
+    const recordedName = path.basename(obj["configPath"]);
+    if (recordedName === "" || recordedName === "." || recordedName === "..") {
+        return { ok: false, reason: `snapshot ${filePath} has a "configPath" that names no file` };
+    }
+    // Several live snapshots (an earlier build kept one per disable) are ordered by this time, never by file mtime.
+    if (Number.isNaN(Date.parse(obj["createdAt"]))) {
+        return { ok: false, reason: `snapshot ${filePath} has a "createdAt" that is not a timestamp` };
+    }
+    const units = obj["neutralised"];
+    if (!Array.isArray(units) || units.length === 0 || !units.every(isDisabledUnit)) {
+        return { ok: false, reason: `snapshot ${filePath} has a malformed "neutralised" list` };
+    }
+    const ids = new Set(units.map((u) => u.id));
+    const ordinals = new Set(units.map((u) => u.ordinal));
+    if (ids.size !== units.length || ordinals.size !== units.length) {
+        return {
+            ok: false,
+            reason: `snapshot ${filePath} lists the same hook unit id or block position twice in "neutralised"`,
+        };
+    }
+    const merges = obj["merges"];
+    if (merges !== undefined && !(Array.isArray(merges) && merges.every(isMerge))) {
+        return { ok: false, reason: `snapshot ${filePath} has a malformed "merges" list` };
+    }
+    // The marker decides whether the snapshot is applied at all, so a value that is not one is not guessed at.
+    const generation = obj["blockGeneration"];
+    if (generation !== undefined && !(typeof generation === "string" && GENERATION_RE.test(generation))) {
+        return { ok: false, reason: `snapshot ${filePath} has a "blockGeneration" that is not a block generation marker` };
+    }
+    return { ok: true, snapshot: obj };
+}
+//# sourceMappingURL=codex-snapshot.js.map

package/dist/cli/gate/codex-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-snapshot.js","sourceRoot":"","sources":["../../../src/cli/gate/codex-snapshot.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,4DAA4D;AAC5D,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,yEAAyE;AACzE,uEAAuE;AACvE,8EAA8E;AAC9E,sEAAsE;AACtE,4EAA4E;AAC5E,sEAAsE;AACtE,sCAAsC;AACtC,kFAAkF;AAClF,0EAA0E;AAC1E,uEAAuE;AACvE,sEAAsE;AACtE,8EAA8E;AAC9E,2DAA2D;AAC3D,8CAA8C;AAE9C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,wBAAwB,EAExB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE9G,MAAM,CAAC,MAAM,8BAA8B,GAAG,6BAA6B,CAAC;AAK5E,MAAM,gBAAgB,GAAsB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,wBAAwB,EAAE,CAAC,CAAC;AACvH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAU,CAAC;AACjD,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAgB,CAAC;AACtD,2DAA2D;AAC3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAC;AAuDpD,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAAC,SAAwB,EAAE,IAAI,GAAG,UAAU;IACzE,OAAO,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,yCAAyC,CAAC;AAE/E;;;;6DAI6D;AAC7D,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,SAAwB;IACzE,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACvC,OAAO,OAAO;SACX,KAAK,CAAC,qBAAqB,CAAC;SAC5B,IAAI,CAAC,GAAG,qBAAqB,GAAG,eAAe,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC;AACrF,CAAC;AAED;;oEAEoE;AACpE,MAAM,YAAY,GAA6C;IAC7D;QACE,0JAA0J;QAC1J,oJAAoJ;KACrJ;IACD,CAAC,yBAAyB,EAAE,4BAA4B,CAAC;IACzD,CAAC,sCAAsC,EAAE,mCAAmC,CAAC;IAC7E,CAAC,0CAA0C,EAAE,uCAAuC,CAAC;IACrF,CAAC,yCAAyC,EAAE,0CAA0C,CAAC;IACvF;QACE,wEAAwE;QACxE,+FAA+F;KAChG;CACF,CAAC;AAEF,iEAAiE;AACjE,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,YAAY;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;sEAEsE;AACtE,MAAM,UAAU,WAAW,CACzB,GAAY,EACZ,SAAqC,EACrC,YAA2B,IAAI;IAE/B,OAAO,GAAG,YAAY,wBAAwB;QAC5C,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;QACnE,CAAC,CAAC,GAAG,CAAC;AACV,CAAC;AAED;;;mFAGmF;AACnF,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,4EAA4E;IAC5E,wDAAwD;IACxD,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC;AAChF,CAAC;AAED;;6EAE6E;AAC7E,MAAM,UAAU,kBAAkB,CAChC,IAAuE,EACvE,SAAqC;IAErC,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IAChF,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,UAAW,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACrG,IAAI,CAAC;QACH,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,oBAAoB,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,GAAS;IACtB,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,aAAqB,EAAE,GAAS;IAChE,OAAO,IAAI,CAAC,IAAI,CACd,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAC3B,GAAG,8BAA8B,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,wBAAwB,EAAE,CAC5E,CAAC;AACJ,CAAC;AAED;iDACiD;AACjD,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAE,GAA4B;IACrF,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,wBAAwB,CAAC,MAAM,CAAC,IAAI,GAAG,GAAG,wBAAwB,EAAE,CAAC;AACrH,CAAC;AAcD;;8DAE8D;AAC9D,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,GAA4B,EAC5B,SAAqC,EACrC,OAAO,GAAG,EAAE;IAEZ,MAAM,EAAE,GAAG,wBAAwB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,SAAS,CACb,GAAG,OAAO,8BAA8B,QAAQ,KAAM,GAAa,CAAC,OAAO,yBAAyB;YAClG,6EAA6E,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,kBAAkB,CAAC,IAAyB,EAAE,YAA2B,IAAI;IAC3F,OAAO,CACL,0DAA0D,eAAe,CAAC,SAAS,EAAE,gBAAgB,CAAC,YAAY;QAClH,gFAAgF,IAAI,CAAC,QAAQ,CAAC,gBAAgB,GAAG;QACjH,uEAAuE;QACvE,wCAAwC,eAAe,CAAC,SAAS,CAAC,8BAA8B;QAChG,qBAAqB,IAAI,CAAC,IAAI,wEAAwE;QACtG,iBAAiB,CAClB,CAAC;AACJ,CAAC;AAMD;;;;;;;gDAOgD;AAChD,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,KAA6C,EAC7C,UAAkB,EAClB,IAAyB,EACzB,YAA2B,IAAI;IAE/B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,GAAG,UAAU,mEAAmE,IAAI,CAAC,IAAI,UAAU;gBACnG,mDAAmD,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE;SAC3F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAwD,EAAE,CAAC;IACtE,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACxD,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;YACzF,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EACJ,iBAAiB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,oBAAoB,IAAI,CAAC,IAAI,0BAA0B;oBACjG,GAAG,UAAU,wFAAwF;oBACrG,+DAA+D,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE;aACvG,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACnF,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACrD,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC5E,CAAC;AAED;;;;sDAIsD;AACtD,MAAM,UAAU,aAAa,CAAC,aAAqB,EAAE,UAAkB;IACrE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,aAAa,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;SAClE,GAAG,CAAC,wBAAwB,CAAC;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAC7B,OAAO,KAAK,CAAC,MAAM,CAAsC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAChH,CAAC;AAED;;;;;;;;;;;;;;sDAcsD;AACtD,MAAM,UAAU,kBAAkB,CAChC,QAA2B,EAC3B,UAAkB,EAClB,KAA8D,EAC9D,OAA4C,EAC5C,eAA8B;IAK9B,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrF,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC;IAC1C,IAAI,QAAQ,KAAK,SAAS,IAAI,eAAe,KAAK,IAAI,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;QACvF,OAAO;YACL,MAAM,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE;YACzF,OAAO,EAAE,EAAE;SACZ,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,QAAQ,CAAC,kBAAkB;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACpG,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACvC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,OAAO,aAAa,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC,MAAM,CAC9D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAC9D,CAAC;AACJ,CAAC;AAmBD;;wCAEwC;AACxC,MAAM,UAAU,gBAAgB,CAAC,CAAuB;IACtD,OAAO,CACL,sDAAsD,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI;QAClF,CAAC,CAAC,CAAC,YAAY;YACb,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,oGAAoG;gBACpG,kCAAkC,CAAC,CAAC,gBAAgB,oDAAoD;gBACxG,uGAAuG;gBACvG,iBAAiB,CAAC,CACvB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;2EAU2E;AAC3E,MAAM,UAAU,sBAAsB,CACpC,aAAqB,EACrB,SAAqC,EACrC,YAA2B,IAAI;IAE/B,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAChD,KAAK,MAAM,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,SAAS,CACb,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,kCAAkC,aAAa,6CAA6C;gBAC3H,QAAQ,QAAQ,qEAAqE,CACxF,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU;gBACV,YAAY,EAAE,UAAU,CAAC,UAAU,CAAC;gBACpC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB;aACjD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAsB,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClF,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED,gEAAgE;AAChE,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAYD,uFAAuF;AACvF,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAEvC,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,CAAC,GAAG,KAAK,CAAC;IAChB,OAAO,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,QAAQ,CAAC;AAC7H,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,CAAC,GAAG,KAAK,CAAC;IAChB,OAAO,CACL,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ;QAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ;QAC3B,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC;QAC3D,oBAAoB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACrC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ;QAClC,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;QACtC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED;;sCAEsC;AACtC,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,YAA2B,IAAI;IACjF,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,QAAQ,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,QAAQ,uBAAuB,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC;IACnB,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,qBAAqB,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,YAAY,QAAQ,wEAAwE;gBAC5F,kFAAkF;gBAClF,KAAK,qBAAqB,GAAG,eAAe,CAAC,SAAS,EAAE,gBAAgB,CAAC,iDAAiD;gBAC1H,uDAAuD;SAC1D,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,sBAAsB,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,qBAAqB,EAAE,CAAC;QACzF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,YAAY,QAAQ,mDAAmD,sBAAsB,GAAG;gBAChG,eAAe,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG;gBACtG,eAAe,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,GAAG;SAC1D,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE;QAClD,WAAW;QACX,YAAY;QACZ,kBAAkB;QAClB,oBAAoB;QACpB,mBAAmB;KACpB,CAAC,CAAC;IACH,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC5D,6GAA6G;IAC7G,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAW,CAAC,CAAC;IAChE,IAAI,YAAY,KAAK,EAAE,IAAI,YAAY,KAAK,GAAG,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,QAAQ,wCAAwC,EAAE,CAAC;IAC7F,CAAC;IACD,gHAAgH;IAChH,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAW,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,QAAQ,4CAA4C,EAAE,CAAC;IACjG,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAChF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,QAAQ,qCAAqC,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAChE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,YAAY,QAAQ,uEAAuE;SACpG,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,QAAQ,gCAAgC,EAAE,CAAC;IACrF,CAAC;IACD,2GAA2G;IAC3G,MAAM,UAAU,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC1C,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACpG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,QAAQ,gEAAgE,EAAE,CAAC;IACrH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAmC,EAAE,CAAC;AACrE,CAAC"}

package/dist/cli/gate/disable.d.ts

@@ -35,6 +35,15 @@ export type GateDisableResult = {
     backupPath: string;
     snapshotPath: string;
     removed: RemovedGroup[];
+    /** True when the groups were merged into an already live snapshot. */
+    merged: boolean;
+    /** Spent snapshots this call retired, under their retired names. */
+    retired: string[];
+    /** A merge into a snapshot beside the settings path moved the snapshot beside the file the path leads to; the old one, under its retired name. */
+    carriedFrom?: {
+        from: string;
+        to: string;
+    };
 };
 export declare class GateDisableError extends Error {
     constructor(message: string);