@mnemonik/local-setup 0.1.0

package/LICENSE

@@ -0,0 +1,38 @@
+MNEMONIK PROPRIETARY SOFTWARE LICENSE
+
+Copyright © 2026 JayDeeCo Limited. All rights reserved.
+
+This licence applies to the Mnemonik software distributed with this file
+(the "Software").
+
+Subject to the Mnemonik Terms of Service and while you are an authorised
+Mnemonik account holder, JayDeeCo Limited grants you a limited, revocable,
+non-exclusive, non-transferable, non-sublicensable licence to download,
+install, and run unmodified copies of the Software solely to access and use
+the Mnemonik service. This permission applies to authorised free, trial, and
+paid accounts.
+
+You may not:
+
+1. modify the Software or create derivative works from it;
+2. reverse engineer, decompile, or disassemble the Software, except to the
+   extent that applicable law does not permit this restriction;
+3. redistribute, publish, sell, rent, lease, sublicense, or resell the
+   Software or access to it;
+4. use the Software to build or operate a product or service that competes
+   with Mnemonik;
+5. remove or alter any copyright, trade mark, attribution, or proprietary
+   notice; or
+6. bypass authentication, service limits, or technical restrictions.
+
+JayDeeCo Limited and its licensors retain all right, title, and interest in
+the Software. No rights are granted except those expressly stated here.
+
+This licence ends automatically when your right to use Mnemonik ends or if
+you breach this licence or the Mnemonik Terms of Service. When it ends, you
+must stop using the Software and delete copies in your possession or control.
+
+Third-party components remain subject to their own licences. The warranty
+disclaimers, limitations of liability, termination terms, and governing law
+in the Mnemonik Terms of Service at https://mnemonik.ai/terms apply to this
+licence and the Software.

package/dist/contracts.d.ts

@@ -0,0 +1,76 @@
+export interface Digest {
+    algorithmVersion: 1;
+    hash: string;
+}
+export type Owner = 'personal' | {
+    teamId: string;
+};
+/** Wire types mirror src/agent/projectSetup.ts, without importing server runtime. */
+export interface SetupRequired {
+    status: 'project_setup_required';
+    state: string;
+    allowedActions: string[];
+    candidates?: Array<{
+        projectId: string;
+        displayName: string;
+    }>;
+    requestId?: string;
+    expiresAt?: string;
+    manualAction?: 'project_init' | 'project_setup';
+}
+export interface ActionRequired {
+    status: 'ACTION_REQUIRED';
+    state: string;
+    allowedActions: string[];
+    [key: string]: unknown;
+}
+export interface Evidence {
+    deviceRootContext: Digest;
+    repositoryFingerprint: Digest | null;
+}
+export interface ConsumeInput extends Evidence {
+    requestId: string;
+    action: 'create' | 'link' | 'restore';
+    projectId?: string;
+    operationId?: string;
+    displayName?: string;
+    owner?: Owner;
+    confirmCandidate?: string;
+}
+export type Complete = {
+    status: 'complete';
+    projectId: string;
+    displayName: string;
+};
+export interface SetupTransport {
+    /** POST /api/v1/project-setup/issue; caller supplies OAuth, never this package. */
+    issueSetupRequest(input: Evidence & {
+        projectId?: string;
+    }): Promise<SetupRequired | ActionRequired | Complete>;
+    /** POST /api/v1/project-setup/consume; caller supplies OAuth, never this package. */
+    consumeSetupRequest(input: ConsumeInput): Promise<Complete | ActionRequired>;
+}
+export interface EnsureOptions {
+    cwd: string;
+    owner?: Owner;
+    allowCreate: boolean;
+    allowNestedInherit: boolean;
+    nonGitSelected?: true;
+    intent?: {
+        action: 'link';
+        projectId: string;
+        replace?: true;
+    };
+    ignore?: true;
+    clearIgnore?: true;
+}
+export type SetupResult = ActionRequired | SetupRequired | {
+    status: 'done' | 'staged' | 'rolled_back' | 'ignored';
+    operationId: string;
+    root: string;
+    projectId?: string;
+    retainedRemoteUUID?: string;
+    permissionStatus: 'private' | 'acl_pending';
+};
+export declare const actionRequired: (state: string) => ActionRequired;
+//# sourceMappingURL=contracts.d.ts.map

package/dist/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,MAAM;IACrB,gBAAgB,EAAE,CAAC,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AACD,MAAM,MAAM,KAAK,GAAG,UAAU,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AACpD,qFAAqF;AACrF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,wBAAwB,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,cAAc,GAAG,eAAe,CAAC;CACjD;AACD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AACD,MAAM,WAAW,QAAQ;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AACD,MAAM,WAAW,YAAa,SAAQ,QAAQ;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AACD,MAAM,MAAM,QAAQ,GAAG;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AACtF,MAAM,WAAW,cAAc;IAC7B,mFAAmF;IACnF,iBAAiB,CACf,KAAK,EAAE,QAAQ,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACvC,OAAO,CAAC,aAAa,GAAG,cAAc,GAAG,QAAQ,CAAC,CAAC;IACtD,qFAAqF;IACrF,mBAAmB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,GAAG,cAAc,CAAC,CAAC;CAC9E;AACD,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,cAAc,CAAC,EAAE,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,IAAI,CAAA;KAAE,CAAC;IAC/D,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,WAAW,CAAC,EAAE,IAAI,CAAC;CACpB;AACD,MAAM,MAAM,WAAW,GACnB,cAAc,GACd,aAAa,GACb;IACE,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,aAAa,GAAG,SAAS,CAAC;IACtD,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,SAAS,GAAG,aAAa,CAAC;CAC7C,CAAC;AACN,eAAO,MAAM,cAAc,UAAW,MAAM,KAAG,cAI7C,CAAC"}

package/dist/contracts.js

@@ -0,0 +1,6 @@
+export const actionRequired = (state) => ({
+    status: 'ACTION_REQUIRED',
+    state,
+    allowedActions: ['retry', 'cancel'],
+});
+//# sourceMappingURL=contracts.js.map

package/dist/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAgEA,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAa,EAAkB,EAAE,CAAC,CAAC;IAChE,MAAM,EAAE,iBAAiB;IACzB,KAAK;IACL,cAAc,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;CACpC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,66 @@
+import { resolveProjectIdentity } from '@mnemonik/shared';
+import { type Evidence, type SetupTransport, type EnsureOptions, type SetupResult, type Owner } from './contracts.js';
+import { type Fault } from './storage.js';
+export * from './contracts.js';
+export * from './windowsPath.js';
+export { stateDirectory, recordPath, protectStateFile, windowsCurrentUserAcl, windowsCurrentAccount, atomicWrite, withLock, type Fault, type PermissionStatus, type ExecFile, } from './storage.js';
+type Step = {
+    complete: boolean;
+    started?: boolean;
+    beforeHash: string | null;
+    afterHash: string | null;
+};
+export interface SetupRecord {
+    schemaVersion: 1;
+    operationId: string;
+    root: string;
+    scopeKey: string;
+    owner?: Owner;
+    nonGitSelected?: true;
+    intent?: EnsureOptions['intent'];
+    ignored?: {
+        identityHash: string | null;
+        responseHash: string;
+    };
+    evidence?: Evidence;
+    remote?: {
+        projectId: string;
+        displayName?: string;
+    };
+    before: {
+        base64: string | null;
+        hash: string | null;
+    };
+    staged?: {
+        content: string;
+        hash: string;
+    };
+    steps: {
+        remote: Step & {
+            outcome?: 'created' | 'linked' | 'restored';
+        };
+        identity: Step;
+        rollback: Step;
+    };
+}
+export interface ExecutorDependencies {
+    resolver: {
+        resolveProjectIdentity: typeof resolveProjectIdentity;
+    };
+    transport: SetupTransport;
+    /** Non-secret authenticated user + device identity, stable across token refreshes. */
+    scopeKey: string;
+    /** Recompute locally using the device key and repository remote. Never return the key. */
+    bindContext(root: string): Promise<Evidence>;
+    stateDir?: string;
+    waitMs?: number;
+    /** Deterministic crash injection for filesystem/transport boundary tests. */
+    fault?: Fault;
+}
+export declare function createProjectSetupExecutor(deps: ExecutorDependencies): {
+    ensureProject: (options: EnsureOptions) => Promise<SetupResult>;
+    stage: (options: EnsureOptions) => Promise<SetupResult>;
+    apply: (options: EnsureOptions) => Promise<SetupResult>;
+    rollback: (options: EnsureOptions) => Promise<SetupResult>;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAmB,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAG3E,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,KAAK,EACX,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAOL,KAAK,KAAK,EAEX,MAAM,cAAc,CAAC;AACtB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,OAAO,EACL,cAAc,EACd,UAAU,EACV,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,WAAW,EACX,QAAQ,EACR,KAAK,KAAK,EACV,KAAK,gBAAgB,EACrB,KAAK,QAAQ,GACd,MAAM,cAAc,CAAC;AAEtB,KAAK,IAAI,GAAG;IACV,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AACF,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,CAAC,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,cAAc,CAAC,EAAE,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE;QAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAChE,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACvD,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,KAAK,EAAE;QACL,MAAM,EAAE,IAAI,GAAG;YAAE,OAAO,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAA;SAAE,CAAC;QAC/D,QAAQ,EAAE,IAAI,CAAC;QACf,QAAQ,EAAE,IAAI,CAAC;KAChB,CAAC;CACH;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE;QAAE,sBAAsB,EAAE,OAAO,sBAAsB,CAAA;KAAE,CAAC;IACpE,SAAS,EAAE,cAAc,CAAC;IAC1B,sFAAsF;IACtF,QAAQ,EAAE,MAAM,CAAC;IACjB,0FAA0F;IAC1F,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AA8CD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,oBAAoB;IA0VjE,aAAa,YAAY,aAAa;IACtC,KAAK,YAAY,aAAa;IAC9B,KAAK,YAAY,aAAa;IAC9B,QAAQ,YAAY,aAAa;EAEpC"}

package/dist/index.js

@@ -0,0 +1,367 @@
+import { randomUUID } from 'node:crypto';
+import { isCanonicalUuid } from '@mnemonik/shared';
+import { realpath, unlink } from 'node:fs/promises';
+import { basename, dirname, join } from 'node:path';
+import { actionRequired, } from './contracts.js';
+import { atomicWrite, hash, readBytes, recordPath, syncDirectory, withLock, } from './storage.js';
+export * from './contracts.js';
+export * from './windowsPath.js';
+export { stateDirectory, recordPath, protectStateFile, windowsCurrentUserAcl, windowsCurrentAccount, atomicWrite, withLock, } from './storage.js';
+const MAX_ORIGINAL_BYTES = 64 * 1024;
+const validDisplayName = (value) => typeof value === 'string' && value.length <= 200 && !/[\p{C}\p{Zl}\p{Zp}@]/u.test(value);
+const digest = (bytes) => (bytes === null ? null : hash(bytes));
+const accessResponseHash = (response) => hash(JSON.stringify({
+    status: response.status,
+    state: response.state,
+    allowedActions: [...response.allowedActions].sort(),
+    candidates: response.candidates,
+}));
+const step = (beforeHash) => ({
+    complete: false,
+    beforeHash,
+    afterHash: null,
+});
+const nonGitSelectionRequired = () => ({
+    status: 'ACTION_REQUIRED',
+    state: 'non_git_selection_required',
+    allowedActions: ['select_non_git', 'cancel'],
+    manualAction: 'mnemonik project init <path>',
+});
+const recordedCandidate = (remote, root, state) => ({
+    status: 'project_setup_required',
+    state,
+    allowedActions: ['link', 'cancel'],
+    candidates: [
+        {
+            projectId: remote.projectId,
+            displayName: remote.displayName ?? basename(root),
+        },
+    ],
+});
+export function createProjectSetupExecutor(deps) {
+    async function execute(options, mode) {
+        let resolution = await deps.resolver.resolveProjectIdentity(options.cwd, options);
+        if (resolution.kind !== 'ok' && resolution.kind !== 'absent')
+            return actionRequired(resolution.kind);
+        const root = await realpath(resolution.root);
+        const path = recordPath(root, deps.stateDir);
+        if (resolution.repository.kind === 'plain' && !options.nonGitSelected) {
+            const prior = await readBytes(path);
+            if (!prior)
+                return nonGitSelectionRequired();
+            try {
+                if (JSON.parse(prior.toString()).nonGitSelected !== true)
+                    return nonGitSelectionRequired();
+            }
+            catch {
+                return actionRequired('record_invalid');
+            }
+        }
+        return withLock(path, deps.waitMs ?? 60_000, async (assertOwned) => {
+            // The lock was acquired after resolving. Detect a changed identity/root before using it.
+            const fresh = await deps.resolver.resolveProjectIdentity(options.cwd, options);
+            if (fresh.kind !== 'ok' && fresh.kind !== 'absent')
+                return actionRequired(fresh.kind);
+            if ((await realpath(fresh.root)) !== root)
+                return actionRequired('identity_changed');
+            resolution = fresh;
+            const file = join(root, '.mnemonik.json');
+            const bytes = await readBytes(file);
+            const diskHash = digest(bytes);
+            const saved = await readBytes(path);
+            let record;
+            if (saved) {
+                try {
+                    record = JSON.parse(saved.toString());
+                }
+                catch {
+                    return actionRequired('record_invalid');
+                }
+                if (!record ||
+                    record.schemaVersion !== 1 ||
+                    record.root !== root ||
+                    !record.operationId ||
+                    !record.before ||
+                    (record.before.base64 !== null && typeof record.before.base64 !== 'string') ||
+                    (record.staged && typeof record.staged.content !== 'string') ||
+                    !record.steps?.identity ||
+                    !record.steps?.remote ||
+                    !record.steps?.rollback ||
+                    (record.ignored !== undefined &&
+                        (!record.ignored ||
+                            typeof record.ignored !== 'object' ||
+                            (record.ignored.identityHash !== null &&
+                                typeof record.ignored.identityHash !== 'string') ||
+                            typeof record.ignored.responseHash !== 'string')) ||
+                    (record.nonGitSelected !== undefined && record.nonGitSelected !== true) ||
+                    (record.intent !== undefined &&
+                        (record.intent.action !== 'link' ||
+                            typeof record.intent.projectId !== 'string' ||
+                            (record.intent.replace !== undefined && record.intent.replace !== true))))
+                    return actionRequired('record_invalid');
+                if ((record.before.base64 !== null &&
+                    record.before.hash !== hash(Buffer.from(record.before.base64, 'base64'))) ||
+                    (record.before.base64 !== null &&
+                        Buffer.from(record.before.base64, 'base64').length > MAX_ORIGINAL_BYTES) ||
+                    (record.staged && hash(record.staged.content) !== record.staged.hash) ||
+                    (record.remote && hash(JSON.stringify(record.remote)) !== record.steps.remote.afterHash))
+                    return actionRequired('record_invalid');
+                if (record.scopeKey !== hash(deps.scopeKey) ||
+                    (options.owner !== undefined &&
+                        JSON.stringify(record.owner) !== JSON.stringify(options.owner)) ||
+                    JSON.stringify(record.intent) !== JSON.stringify(options.intent)) {
+                    if (record.ignored) {
+                        delete record.ignored;
+                        await atomicWrite(path, Buffer.from(JSON.stringify(record, null, 2) + '\n'), undefined, assertOwned);
+                    }
+                    return actionRequired('operation_context_changed');
+                }
+            }
+            else {
+                if (mode === 'apply' || mode === 'rollback')
+                    return actionRequired('record_missing');
+                record = {
+                    schemaVersion: 1,
+                    operationId: randomUUID(),
+                    root,
+                    scopeKey: hash(deps.scopeKey),
+                    owner: options.owner,
+                    ...(resolution.repository.kind === 'plain' && options.nonGitSelected
+                        ? { nonGitSelected: true }
+                        : {}),
+                    ...(options.intent ? { intent: options.intent } : {}),
+                    before: {
+                        base64: bytes && bytes.length <= MAX_ORIGINAL_BYTES ? bytes.toString('base64') : null,
+                        hash: diskHash,
+                    },
+                    steps: { remote: step(diskHash), identity: step(diskHash), rollback: step(diskHash) },
+                };
+            }
+            if (resolution.repository.kind === 'plain' && record.nonGitSelected !== true) {
+                return nonGitSelectionRequired();
+            }
+            if (options.intent &&
+                resolution.kind === 'ok' &&
+                resolution.identity.projectId !== options.intent.projectId &&
+                !options.intent.replace)
+                return {
+                    status: 'ACTION_REQUIRED',
+                    state: 'identity_exists',
+                    allowedActions: ['replace', 'cancel'],
+                };
+            let permissionStatus = 'private';
+            const save = async () => {
+                permissionStatus = await atomicWrite(path, Buffer.from(JSON.stringify(record, null, 2) + '\n'), undefined, assertOwned);
+            };
+            const result = (status) => ({
+                status,
+                operationId: record.operationId,
+                root,
+                permissionStatus,
+                projectId: record.remote?.projectId,
+                ...(status === 'rolled_back' ? { retainedRemoteUUID: record.remote?.projectId } : {}),
+            });
+            const clearIgnore = async () => {
+                if (!record.ignored)
+                    return;
+                delete record.ignored;
+                await save();
+            };
+            const handleAccessResponse = async (response) => {
+                const responseHash = accessResponseHash(response);
+                if (options.ignore && response.allowedActions.includes('ignore')) {
+                    record.ignored = { identityHash: diskHash, responseHash };
+                    await save();
+                    return result('ignored');
+                }
+                if (!record.ignored)
+                    return response;
+                if (!options.clearIgnore &&
+                    record.ignored.identityHash === diskHash &&
+                    record.ignored.responseHash === responseHash)
+                    return result('ignored');
+                await clearIgnore();
+                return response;
+            };
+            if ((bytes && bytes.length > MAX_ORIGINAL_BYTES) ||
+                (record.before.base64 === null && record.before.hash !== null)) {
+                if (!saved)
+                    await save();
+                return actionRequired('identity_too_large');
+            }
+            if (record.ignored && record.ignored.identityHash !== diskHash) {
+                await clearIgnore();
+                return actionRequired('identity_changed');
+            }
+            if (diskHash !== record.before.hash && diskHash !== record.staged?.hash)
+                return actionRequired('identity_changed');
+            if (mode === 'rollback') {
+                // Durable undo intent precedes a write or removal, including crash recovery of undo.
+                record.steps.rollback.started = true;
+                record.steps.rollback.beforeHash = record.staged?.hash ?? record.before.hash;
+                record.steps.rollback.afterHash = record.before.hash;
+                await save();
+                if (diskHash !== record.before.hash) {
+                    if (record.before.base64 === null) {
+                        await assertOwned();
+                        await unlink(file);
+                        await syncDirectory(dirname(file));
+                    }
+                    else
+                        await atomicWrite(file, Buffer.from(record.before.base64, 'base64'), deps.fault, assertOwned);
+                }
+                record.steps.rollback.complete = true;
+                record.steps.identity.complete = false;
+                await save();
+                return result('rolled_back');
+            }
+            if (record.steps.rollback.started)
+                return actionRequired(record.steps.rollback.complete ? 'operation_rolled_back' : 'rollback_in_progress');
+            const evidence = await deps.bindContext(root);
+            // A path-keyed journal can survive deletion of the repository it described.
+            // When the identity file is gone, only a matching usable fingerprint may
+            // authorize automatic reuse; otherwise the old UUID is display-only.
+            const remote = record.remote;
+            const resumingWithoutIdentity = !!remote && diskHash === record.before.hash && diskHash !== record.staged?.hash;
+            if (mode !== 'apply' && remote && resumingWithoutIdentity) {
+                const previousFingerprint = record.evidence?.repositoryFingerprint ?? null;
+                const currentFingerprint = evidence.repositoryFingerprint;
+                if (!previousFingerprint ||
+                    !currentFingerprint ||
+                    previousFingerprint.algorithmVersion !== currentFingerprint.algorithmVersion ||
+                    previousFingerprint.hash !== currentFingerprint.hash) {
+                    return recordedCandidate(remote, root, previousFingerprint && currentFingerprint
+                        ? 'fingerprint_mismatch'
+                        : 'confirmation_required');
+                }
+            }
+            if (!resumingWithoutIdentity &&
+                record.steps.identity.complete &&
+                diskHash !== record.staged?.hash)
+                return actionRequired('identity_changed');
+            if (!saved)
+                await save(); // Operation ID and before-state MUST be durable before any remote request.
+            if (record.evidence && JSON.stringify(record.evidence) !== JSON.stringify(evidence))
+                return actionRequired('operation_context_changed');
+            if (record.steps.identity.complete && mode === 'ensure' && record.remote) {
+                const validated = await deps.transport.issueSetupRequest({
+                    ...evidence,
+                    projectId: record.remote.projectId,
+                });
+                if (validated.status !== 'complete')
+                    return handleAccessResponse(validated);
+                await clearIgnore();
+                if (validated.projectId !== record.remote.projectId)
+                    return actionRequired('identity_changed');
+            }
+            if (!record.remote) {
+                if (mode === 'apply')
+                    return actionRequired('not_staged');
+                record.evidence = evidence;
+                await save();
+                const identity = resolution.kind === 'ok' ? resolution.identity : null;
+                const issued = await deps.transport.issueSetupRequest({
+                    ...evidence,
+                    ...(options.intent
+                        ? { projectId: options.intent.projectId }
+                        : identity
+                            ? { projectId: identity.projectId }
+                            : {}),
+                });
+                if (issued.status !== 'complete') {
+                    const handled = await handleAccessResponse(issued);
+                    if (handled.status === 'ignored' || issued.status === 'ACTION_REQUIRED')
+                        return handled;
+                }
+                else
+                    await clearIgnore();
+                let remote;
+                let outcome = 'linked';
+                if (issued.status === 'complete')
+                    remote = issued;
+                else if (options.intent && issued.requestId && issued.allowedActions.includes('link')) {
+                    remote = await deps.transport.consumeSetupRequest({
+                        ...evidence,
+                        requestId: issued.requestId,
+                        action: 'link',
+                        projectId: options.intent.projectId,
+                    });
+                    if (remote.status === 'ACTION_REQUIRED')
+                        return remote;
+                }
+                else {
+                    // Candidate/archived/conflict/etc. decisions remain with the person and server.
+                    if (issued.state !== 'missing' ||
+                        issued.candidates?.length ||
+                        !issued.requestId ||
+                        resolution.kind !== 'absent' ||
+                        !options.allowCreate ||
+                        !issued.allowedActions.includes('create'))
+                        return issued;
+                    remote = await deps.transport.consumeSetupRequest({
+                        ...evidence,
+                        requestId: issued.requestId,
+                        action: 'create',
+                        operationId: record.operationId,
+                        displayName: basename(root),
+                        owner: record.owner,
+                    });
+                    if (remote.status === 'ACTION_REQUIRED')
+                        return remote;
+                    outcome = 'created';
+                }
+                await deps.fault?.('after_remote_response');
+                if (!isCanonicalUuid(remote.projectId))
+                    return actionRequired('invalid_server_result');
+                record.remote = {
+                    projectId: remote.projectId,
+                    ...(validDisplayName(remote.displayName) ? { displayName: remote.displayName } : {}),
+                };
+                record.steps.remote = {
+                    complete: true,
+                    outcome,
+                    beforeHash: record.before.hash,
+                    afterHash: hash(JSON.stringify(record.remote)),
+                };
+                await save();
+                await deps.fault?.('after_remote_record');
+            }
+            if (!record.staged) {
+                const content = JSON.stringify({
+                    schemaVersion: 1,
+                    projectId: record.remote.projectId,
+                    projectName: record.remote.displayName,
+                    ...(record.evidence?.repositoryFingerprint
+                        ? { repositoryFingerprint: record.evidence.repositoryFingerprint }
+                        : {}),
+                }, null, 2) + '\n';
+                record.staged = { content, hash: hash(content) };
+                record.steps.identity.afterHash = record.staged.hash;
+                await save();
+            }
+            const current = digest(await readBytes(file));
+            if (current === record.staged.hash && !record.steps.identity.complete) {
+                record.steps.identity.complete = true;
+                await save();
+            }
+            if (mode === 'stage')
+                return result('staged');
+            if (current !== record.staged.hash) {
+                if (current !== record.before.hash)
+                    return actionRequired('identity_changed');
+                await atomicWrite(file, Buffer.from(record.staged.content), deps.fault, assertOwned);
+                await deps.fault?.('after_identity_rename');
+            }
+            record.steps.identity.complete = true;
+            await save();
+            return result('done');
+        });
+    }
+    return {
+        ensureProject: (options) => execute(options, 'ensure'),
+        stage: (options) => execute(options, 'stage'),
+        apply: (options) => execute(options, 'apply'),
+        rollback: (options) => execute(options, 'rollback'),
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAA0B,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EACL,cAAc,GAMf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,WAAW,EACX,IAAI,EACJ,SAAS,EACT,UAAU,EACV,aAAa,EACb,QAAQ,GAGT,MAAM,cAAc,CAAC;AACtB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,OAAO,EACL,cAAc,EACd,UAAU,EACV,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,WAAW,EACX,QAAQ,GAIT,MAAM,cAAc,CAAC;AAuCtB,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAmB,EAAE,CAC3D,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3F,MAAM,MAAM,GAAG,CAAC,KAAoB,EAAiB,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9F,MAAM,kBAAkB,GAAG,CAAC,QAK3B,EAAU,EAAE,CACX,IAAI,CACF,IAAI,CAAC,SAAS,CAAC;IACb,MAAM,EAAE,QAAQ,CAAC,MAAM;IACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;IACrB,cAAc,EAAE,CAAC,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE;IACnD,UAAU,EAAE,QAAQ,CAAC,UAAU;CAChC,CAAC,CACH,CAAC;AACJ,MAAM,IAAI,GAAG,CAAC,UAAyB,EAAQ,EAAE,CAAC,CAAC;IACjD,QAAQ,EAAE,KAAK;IACf,UAAU;IACV,SAAS,EAAE,IAAI;CAChB,CAAC,CAAC;AACH,MAAM,uBAAuB,GAAG,GAAgB,EAAE,CAAC,CAAC;IAClD,MAAM,EAAE,iBAAiB;IACzB,KAAK,EAAE,4BAA4B;IACnC,cAAc,EAAE,CAAC,gBAAgB,EAAE,QAAQ,CAAC;IAC5C,YAAY,EAAE,8BAA8B;CAC7C,CAAC,CAAC;AACH,MAAM,iBAAiB,GAAG,CACxB,MAA0C,EAC1C,IAAY,EACZ,KAAuD,EAC1C,EAAE,CAAC,CAAC;IACjB,MAAM,EAAE,wBAAwB;IAChC,KAAK;IACL,cAAc,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAClC,UAAU,EAAE;QACV;YACE,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,IAAI,CAAC;SAClD;KACF;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,0BAA0B,CAAC,IAA0B;IACnE,KAAK,UAAU,OAAO,CACpB,OAAsB,EACtB,IAA+C;QAE/C,IAAI,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClF,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ;YAC1D,OAAO,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YACtE,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK;gBAAE,OAAO,uBAAuB,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,IAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAiB,CAAC,cAAc,KAAK,IAAI;oBACvE,OAAO,uBAAuB,EAAE,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,cAAc,CAAC,gBAAgB,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;YACjE,yFAAyF;YACzF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC/E,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtF,IAAI,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,cAAc,CAAC,kBAAkB,CAAC,CAAC;YACrF,UAAU,GAAG,KAAK,CAAC;YACnB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,MAAmB,CAAC;YACxB,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAgB,CAAC;gBACvD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,cAAc,CAAC,gBAAgB,CAAC,CAAC;gBAC1C,CAAC;gBACD,IACE,CAAC,MAAM;oBACP,MAAM,CAAC,aAAa,KAAK,CAAC;oBAC1B,MAAM,CAAC,IAAI,KAAK,IAAI;oBACpB,CAAC,MAAM,CAAC,WAAW;oBACnB,CAAC,MAAM,CAAC,MAAM;oBACd,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC;oBAC3E,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC;oBAC5D,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ;oBACvB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM;oBACrB,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ;oBACvB,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS;wBAC3B,CAAC,CAAC,MAAM,CAAC,OAAO;4BACd,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;4BAClC,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI;gCACnC,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC;4BAClD,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC;oBACrD,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC;oBACvE,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;wBAC1B,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM;4BAC9B,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ;4BAC3C,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC;oBAE7E,OAAO,cAAc,CAAC,gBAAgB,CAAC,CAAC;gBAC1C,IACE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI;oBAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;oBAC3E,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI;wBAC5B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,MAAM,GAAG,kBAAkB,CAAC;oBAC1E,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;oBACrE,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;oBAExF,OAAO,cAAc,CAAC,gBAAgB,CAAC,CAAC;gBAC1C,IACE,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;oBACvC,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;wBAC1B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBACjE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAChE,CAAC;oBACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACnB,OAAO,MAAM,CAAC,OAAO,CAAC;wBACtB,MAAM,WAAW,CACf,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,EACnD,SAAS,EACT,WAAW,CACZ,CAAC;oBACJ,CAAC;oBACD,OAAO,cAAc,CAAC,2BAA2B,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,UAAU;oBAAE,OAAO,cAAc,CAAC,gBAAgB,CAAC,CAAC;gBACrF,MAAM,GAAG;oBACP,aAAa,EAAE,CAAC;oBAChB,WAAW,EAAE,UAAU,EAAE;oBACzB,IAAI;oBACJ,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,cAAc;wBAClE,CAAC,CAAC,EAAE,cAAc,EAAE,IAAa,EAAE;wBACnC,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrD,MAAM,EAAE;wBACN,MAAM,EAAE,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;wBACrF,IAAI,EAAE,QAAQ;qBACf;oBACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;iBACtF,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;gBAC7E,OAAO,uBAAuB,EAAE,CAAC;YACnC,CAAC;YACD,IACE,OAAO,CAAC,MAAM;gBACd,UAAU,CAAC,IAAI,KAAK,IAAI;gBACxB,UAAU,CAAC,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,MAAM,CAAC,SAAS;gBAC1D,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO;gBAEvB,OAAO;oBACL,MAAM,EAAE,iBAAiB;oBACzB,KAAK,EAAE,iBAAiB;oBACxB,cAAc,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;iBACtC,CAAC;YACJ,IAAI,gBAAgB,GAAqB,SAAS,CAAC;YACnD,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;gBACtB,gBAAgB,GAAG,MAAM,WAAW,CAClC,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,EACnD,SAAS,EACT,WAAW,CACZ,CAAC;YACJ,CAAC,CAAC;YACF,MAAM,MAAM,GAAG,CAAC,MAAqD,EAAe,EAAE,CAAC,CAAC;gBACtF,MAAM;gBACN,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,IAAI;gBACJ,gBAAgB;gBAChB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS;gBACnC,GAAG,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtF,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE;gBAC7B,IAAI,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO;gBAC5B,OAAO,MAAM,CAAC,OAAO,CAAC;gBACtB,MAAM,IAAI,EAAE,CAAC;YACf,CAAC,CAAC;YACF,MAAM,oBAAoB,GAAG,KAAK,EAChC,QAAwF,EAClE,EAAE;gBACxB,MAAM,YAAY,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;gBAClD,IAAI,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACjE,MAAM,CAAC,OAAO,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;oBAC1D,MAAM,IAAI,EAAE,CAAC;oBACb,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC3B,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO,QAAQ,CAAC;gBACrC,IACE,CAAC,OAAO,CAAC,WAAW;oBACpB,MAAM,CAAC,OAAO,CAAC,YAAY,KAAK,QAAQ;oBACxC,MAAM,CAAC,OAAO,CAAC,YAAY,KAAK,YAAY;oBAE5C,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC3B,MAAM,WAAW,EAAE,CAAC;gBACpB,OAAO,QAAQ,CAAC;YAClB,CAAC,CAAC;YACF,IACE,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,kBAAkB,CAAC;gBAC5C,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,EAC9D,CAAC;gBACD,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,EAAE,CAAC;gBACzB,OAAO,cAAc,CAAC,oBAAoB,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;gBAC/D,MAAM,WAAW,EAAE,CAAC;gBACpB,OAAO,cAAc,CAAC,kBAAkB,CAAC,CAAC;YAC5C,CAAC;YACD,IAAI,QAAQ,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,QAAQ,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI;gBACrE,OAAO,cAAc,CAAC,kBAAkB,CAAC,CAAC;YAC5C,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBACxB,qFAAqF;gBACrF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;gBACrC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBAC7E,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACrD,MAAM,IAAI,EAAE,CAAC;gBACb,IAAI,QAAQ,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACpC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;wBAClC,MAAM,WAAW,EAAE,CAAC;wBACpB,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;wBACnB,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;oBACrC,CAAC;;wBACC,MAAM,WAAW,CACf,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,EAC3C,IAAI,CAAC,KAAK,EACV,WAAW,CACZ,CAAC;gBACN,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACtC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC;gBACvC,MAAM,IAAI,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO;gBAC/B,OAAO,cAAc,CACnB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,sBAAsB,CAClF,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC9C,4EAA4E;YAC5E,yEAAyE;YACzE,qEAAqE;YACrE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC7B,MAAM,uBAAuB,GAC3B,CAAC,CAAC,MAAM,IAAI,QAAQ,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,QAAQ,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;YAClF,IAAI,IAAI,KAAK,OAAO,IAAI,MAAM,IAAI,uBAAuB,EAAE,CAAC;gBAC1D,MAAM,mBAAmB,GAAG,MAAM,CAAC,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CAAC;gBAC3E,MAAM,kBAAkB,GAAG,QAAQ,CAAC,qBAAqB,CAAC;gBAC1D,IACE,CAAC,mBAAmB;oBACpB,CAAC,kBAAkB;oBACnB,mBAAmB,CAAC,gBAAgB,KAAK,kBAAkB,CAAC,gBAAgB;oBAC5E,mBAAmB,CAAC,IAAI,KAAK,kBAAkB,CAAC,IAAI,EACpD,CAAC;oBACD,OAAO,iBAAiB,CACtB,MAAM,EACN,IAAI,EACJ,mBAAmB,IAAI,kBAAkB;wBACvC,CAAC,CAAC,sBAAsB;wBACxB,CAAC,CAAC,uBAAuB,CAC5B,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IACE,CAAC,uBAAuB;gBACxB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ;gBAC9B,QAAQ,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI;gBAEhC,OAAO,cAAc,CAAC,kBAAkB,CAAC,CAAC;YAC5C,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,EAAE,CAAC,CAAC,2EAA2E;YACrG,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;gBACjF,OAAO,cAAc,CAAC,2BAA2B,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,IAAI,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACzE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC;oBACvD,GAAG,QAAQ;oBACX,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS;iBACnC,CAAC,CAAC;gBACH,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU;oBAAE,OAAO,oBAAoB,CAAC,SAAS,CAAC,CAAC;gBAC5E,MAAM,WAAW,EAAE,CAAC;gBACpB,IAAI,SAAS,CAAC,SAAS,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS;oBACjD,OAAO,cAAc,CAAC,kBAAkB,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,IAAI,IAAI,KAAK,OAAO;oBAAE,OAAO,cAAc,CAAC,YAAY,CAAC,CAAC;gBAC1D,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAC3B,MAAM,IAAI,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;gBACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC;oBACpD,GAAG,QAAQ;oBACX,GAAG,CAAC,OAAO,CAAC,MAAM;wBAChB,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE;wBACzC,CAAC,CAAC,QAAQ;4BACR,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE;4BACnC,CAAC,CAAC,EAAE,CAAC;iBACV,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;oBACjC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;oBACnD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB;wBAAE,OAAO,OAAO,CAAC;gBAC1F,CAAC;;oBAAM,MAAM,WAAW,EAAE,CAAC;gBAC3B,IAAI,MAAM,CAAC;gBACX,IAAI,OAAO,GAAsC,QAAQ,CAAC;gBAC1D,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;oBAAE,MAAM,GAAG,MAAM,CAAC;qBAC7C,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtF,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC;wBAChD,GAAG,QAAQ;wBACX,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,MAAM,EAAE,MAAM;wBACd,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;qBACpC,CAAC,CAAC;oBACH,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB;wBAAE,OAAO,MAAM,CAAC;gBACzD,CAAC;qBAAM,CAAC;oBACN,gFAAgF;oBAChF,IACE,MAAM,CAAC,KAAK,KAAK,SAAS;wBAC1B,MAAM,CAAC,UAAU,EAAE,MAAM;wBACzB,CAAC,MAAM,CAAC,SAAS;wBACjB,UAAU,CAAC,IAAI,KAAK,QAAQ;wBAC5B,CAAC,OAAO,CAAC,WAAW;wBACpB,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;wBAEzC,OAAO,MAAM,CAAC;oBAChB,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC;wBAChD,GAAG,QAAQ;wBACX,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,MAAM,EAAE,QAAQ;wBAChB,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC;wBAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;qBACpB,CAAC,CAAC;oBACH,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB;wBAAE,OAAO,MAAM,CAAC;oBACvD,OAAO,GAAG,SAAS,CAAC;gBACtB,CAAC;gBACD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,uBAAuB,CAAC,CAAC;gBAC5C,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC;oBAAE,OAAO,cAAc,CAAC,uBAAuB,CAAC,CAAC;gBACvF,MAAM,CAAC,MAAM,GAAG;oBACd,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrF,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG;oBACpB,QAAQ,EAAE,IAAI;oBACd,OAAO;oBACP,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;oBAC9B,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;iBAC/C,CAAC;gBACF,MAAM,IAAI,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,qBAAqB,CAAC,CAAC;YAC5C,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,OAAO,GACX,IAAI,CAAC,SAAS,CACZ;oBACE,aAAa,EAAE,CAAC;oBAChB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS;oBAClC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW;oBACtC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,qBAAqB;wBACxC,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE;wBAClE,CAAC,CAAC,EAAE,CAAC;iBACR,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CAAC;gBACX,MAAM,CAAC,MAAM,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACrD,MAAM,IAAI,EAAE,CAAC;YACf,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9C,IAAI,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACtC,MAAM,IAAI,EAAE,CAAC;YACf,CAAC;YACD,IAAI,IAAI,KAAK,OAAO;gBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI;oBAAE,OAAO,cAAc,CAAC,kBAAkB,CAAC,CAAC;gBAC9E,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;gBACrF,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,uBAAuB,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC;YACtC,MAAM,IAAI,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,aAAa,EAAE,CAAC,OAAsB,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC;QACrE,KAAK,EAAE,CAAC,OAAsB,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC;QAC5D,KAAK,EAAE,CAAC,OAAsB,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC;QAC5D,QAAQ,EAAE,CAAC,OAAsB,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC;KACnE,CAAC;AACJ,CAAC"}

package/dist/storage.d.ts

@@ -0,0 +1,24 @@
+import { windowsCurrentAccountSync } from '@mnemonik/shared/hook-runtime';
+export declare const hash: (bytes: string | Buffer) => string;
+export declare const codeIs: (error: unknown, code: string) => boolean;
+export declare function stateDirectory(platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv, home?: string): string;
+export declare const recordPath: (root: string, state?: string) => string;
+export declare function readBytes(path: string): Promise<Buffer | null>;
+export declare function syncDirectory(path: string): Promise<void>;
+export type PermissionStatus = 'private' | 'acl_pending';
+export type ExecFile = (file: string, args: readonly string[], callback: (error: Error | null, stdout: string, stderr: string) => void) => unknown;
+/** Resolve the process token: OpenSSH can advertise WORKGROUP as USERDOMAIN. */
+export declare const windowsCurrentAccount: typeof windowsCurrentAccountSync;
+export declare function windowsCurrentUserAcl(path: string, directory?: boolean, options?: {
+    execFile?: ExecFile;
+    username?: string;
+}): Promise<void>;
+export declare function protectStateFile(path: string, platform?: NodeJS.Platform, aclOptions?: {
+    execFile?: ExecFile;
+    username?: string;
+}): Promise<PermissionStatus>;
+export type Fault = (point: string) => void | Promise<void>;
+export declare function atomicWrite(path: string, bytes: Buffer, fault?: Fault, assertOwned?: () => Promise<void>): Promise<PermissionStatus>;
+/** Cooperative mkdir lease: all consumers must use these same stale/update values. */
+export declare function withLock<T>(path: string, waitMs: number, work: (assertOwned: () => Promise<void>) => Promise<T>): Promise<T>;
+//# sourceMappingURL=storage.d.ts.map

package/dist/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AA8B1E,eAAO,MAAM,IAAI,UAAW,MAAM,GAAG,MAAM,KAAG,MACI,CAAC;AACnD,eAAO,MAAM,MAAM,UAAW,OAAO,QAAQ,MAAM,KAAG,OACN,CAAC;AACjD,wBAAgB,cAAc,CAC5B,QAAQ,kBAAmB,EAC3B,GAAG,oBAAc,EACjB,IAAI,SAAY,GACf,MAAM,CAMR;AACD,eAAO,MAAM,UAAU,SAAU,MAAM,qBAA6B,MAChB,CAAC;AACrD,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQpE;AACD,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAS/D;AACD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,aAAa,CAAC;AACzD,MAAM,MAAM,QAAQ,GAAG,CACrB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,KACpE,OAAO,CAAC;AACb,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,kCAA4B,CAAC;AAC/D,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,SAAS,UAAQ,EACjB,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GACvD,OAAO,CAAC,IAAI,CAAC,CAUf;AACD,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,QAAQ,kBAAmB,EAC3B,UAAU,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACtD,OAAO,CAAC,gBAAgB,CAAC,CAI3B;AACD,MAAM,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAC5D,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,KAAK,EACb,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,OAAO,CAAC,gBAAgB,CAAC,CAoB3B;AACD,sFAAsF;AACtF,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GACrD,OAAO,CAAC,CAAC,CAAC,CA2EZ"}

package/dist/storage.js

@@ -0,0 +1,166 @@
+import { windowsCurrentAccountSync } from '@mnemonik/shared/hook-runtime';
+import { createHash, randomUUID } from 'node:crypto';
+import { execFile as nodeExecFile } from 'node:child_process';
+import fs from 'node:fs';
+import { open, rename, readFile, mkdir, lstat, chmod, writeFile, unlink, rmdir, } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join, win32, posix } from 'node:path';
+import { setTimeout as delay } from 'node:timers/promises';
+import { RuntimeError } from '@mnemonik/shared/hook-runtime';
+const lockfileKey = Symbol.for('mnemonik.proper-lockfile');
+function sharedLockfile() {
+    const shared = globalThis;
+    return (shared[lockfileKey] ??= import('proper-lockfile').then((module) => module.default));
+}
+export const hash = (bytes) => createHash('sha256').update(bytes).digest('hex');
+export const codeIs = (error, code) => error.code === code;
+export function stateDirectory(platform = process.platform, env = process.env, home = homedir()) {
+    if (env.MNEMONIK_STATE_DIR)
+        return env.MNEMONIK_STATE_DIR;
+    if (platform === 'win32')
+        return win32.join(env.LOCALAPPDATA || win32.join(home, 'AppData', 'Local'), 'Mnemonik');
+    if (platform === 'darwin')
+        return posix.join(home, 'Library', 'Application Support', 'Mnemonik');
+    return posix.join(env.XDG_STATE_HOME || posix.join(home, '.local', 'state'), 'mnemonik');
+}
+export const recordPath = (root, state = stateDirectory()) => join(state, 'project-setup', `${hash(root)}.json`);
+export async function readBytes(path) {
+    try {
+        if (!(await lstat(path)).isFile())
+            throw new Error('setup_requires_regular_file');
+        return await readFile(path);
+    }
+    catch (error) {
+        if (codeIs(error, 'ENOENT'))
+            return null;
+        throw error;
+    }
+}
+export async function syncDirectory(path) {
+    // Windows does not expose directory fsync through Node. File fsync still runs.
+    if (process.platform === 'win32')
+        return;
+    const fd = await open(path, 'r');
+    try {
+        await fd.sync();
+    }
+    finally {
+        await fd.close();
+    }
+}
+/** Resolve the process token: OpenSSH can advertise WORKGROUP as USERDOMAIN. */
+export const windowsCurrentAccount = windowsCurrentAccountSync;
+export async function windowsCurrentUserAcl(path, directory = false, options = {}) {
+    const username = options.username ?? `*${windowsCurrentAccount().sid}`;
+    const grant = `${username}:${directory ? '(OI)(CI)F' : 'F'}`;
+    const execFile = options.execFile ?? nodeExecFile;
+    await new Promise((resolve, reject) => {
+        execFile('icacls.exe', [path, '/inheritance:r', '/grant:r', grant], (error) => {
+            if (error)
+                reject(error);
+            else
+                resolve();
+        });
+    });
+}
+export async function protectStateFile(path, platform = process.platform, aclOptions) {
+    if (platform === 'win32')
+        await windowsCurrentUserAcl(path, false, aclOptions);
+    else
+        await chmod(path, 0o600);
+    return 'private';
+}
+export async function atomicWrite(path, bytes, fault, assertOwned) {
+    await assertOwned?.();
+    const temp = `${path}.${randomUUID()}.tmp`;
+    const fd = await open(temp, 'wx', 0o600);
+    let permissionStatus;
+    try {
+        permissionStatus = await protectStateFile(temp);
+        const split = Math.ceil(bytes.length / 2);
+        await fd.writeFile(bytes.subarray(0, split));
+        await fault?.('mid_write');
+        await assertOwned?.();
+        await fd.writeFile(bytes.subarray(split));
+        await fd.sync();
+    }
+    finally {
+        await fd.close();
+    }
+    await assertOwned?.();
+    await rename(temp, path);
+    await syncDirectory(dirname(path));
+    return permissionStatus;
+}
+/** Cooperative mkdir lease: all consumers must use these same stale/update values. */
+export async function withLock(path, waitMs, work) {
+    const lockfile = await sharedLockfile();
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    const generation = randomUUID();
+    const owner = join(`${path}.lock`, 'owner');
+    let compromised = false;
+    let acquired = false;
+    const assertOwned = async () => {
+        if (compromised || (await readBytes(owner).catch(() => null))?.toString() !== generation) {
+            compromised = true;
+            throw new Error('lock_lost');
+        }
+    };
+    // Install the owner before proper-lockfile probes mtime; a later directory write
+    // would otherwise invalidate its heartbeat. Reclamation removes the owner too.
+    const leaseFs = {
+        ...fs,
+        mkdir: (dir, callback) => {
+            void mkdir(dir)
+                .then(() => writeFile(owner, generation, { mode: 0o600, flag: 'wx' }))
+                .then(() => callback(), callback);
+        },
+        rmdir: (dir, callback) => {
+            void unlink(join(dir, 'owner'))
+                .catch((error) => {
+                if (!codeIs(error, 'ENOENT'))
+                    throw error;
+            })
+                .then(() => rmdir(dir))
+                .then(() => callback(), callback);
+        },
+        stat: (file, callback) => {
+            // A superseded holder must also stop heartbeating the replacement lease.
+            void (acquired ? assertOwned() : Promise.resolve()).then(() => fs.stat(file, callback), () => callback(Object.assign(new Error('lock_lost'), { code: 'ENOENT' })));
+        },
+    };
+    const deadline = performance.now() + waitMs;
+    let release;
+    while (!release) {
+        try {
+            release = await lockfile.lock(path, {
+                realpath: false,
+                stale: 30_000,
+                update: 5_000,
+                retries: 0,
+                fs: leaseFs,
+                onCompromised: () => {
+                    compromised = true;
+                },
+            });
+        }
+        catch (error) {
+            if (!codeIs(error, 'ELOCKED'))
+                throw error;
+            if (performance.now() >= deadline)
+                throw new RuntimeError('lock_held');
+            await delay(Math.min(100, Math.max(1, deadline - performance.now())));
+        }
+    }
+    acquired = true;
+    try {
+        return await work(assertOwned);
+    }
+    finally {
+        // Never release a successor's lease. A lost holder's heartbeat observes the
+        // generation check above and stops through onCompromised.
+        if (await assertOwned().then(() => true, () => false))
+            await release();
+    }
+}
+//# sourceMappingURL=storage.js.map

package/dist/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EACL,IAAI,EACJ,MAAM,EACN,QAAQ,EACR,KAAK,EACL,KAAK,EACL,KAAK,EACL,SAAS,EACT,MAAM,EACN,KAAK,GACN,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;AAG3D,SAAS,cAAc;IACrB,MAAM,MAAM,GAAG,UAA4B,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAC5D,CAAC,MAAM,EAAE,EAAE,CAAE,MAA2C,CAAC,OAAO,CACjE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,KAAsB,EAAU,EAAE,CACrD,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,IAAY,EAAW,EAAE,CAC7D,KAA+B,CAAC,IAAI,KAAK,IAAI,CAAC;AACjD,MAAM,UAAU,cAAc,CAC5B,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAC3B,GAAG,GAAG,OAAO,CAAC,GAAG,EACjB,IAAI,GAAG,OAAO,EAAE;IAEhB,IAAI,GAAG,CAAC,kBAAkB;QAAE,OAAO,GAAG,CAAC,kBAAkB,CAAC;IAC1D,IAAI,QAAQ,KAAK,OAAO;QACtB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;IAC1F,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,UAAU,CAAC,CAAC;IACjG,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;AAC3F,CAAC;AACD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,KAAK,GAAG,cAAc,EAAE,EAAU,EAAE,CAC3E,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACrD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAClF,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,+EAA+E;IAC/E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAOD,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAC/D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,SAAS,GAAG,KAAK,EACjB,OAAO,GAA+C,EAAE;IAExD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,qBAAqB,EAAE,CAAC,GAAG,EAAE,CAAC;IACvE,MAAM,KAAK,GAAG,GAAG,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAK,YAAoC,CAAC;IAC3E,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5E,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACpB,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAC3B,UAAuD;IAEvD,IAAI,QAAQ,KAAK,OAAO;QAAE,MAAM,qBAAqB,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;;QAC1E,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,KAAa,EACb,KAAa,EACb,WAAiC;IAEjC,MAAM,WAAW,EAAE,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAC3C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACzC,IAAI,gBAAkC,CAAC;IACvC,IAAI,CAAC;QACH,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC1C,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7C,MAAM,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC;QAC3B,MAAM,WAAW,EAAE,EAAE,CAAC;QACtB,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,WAAW,EAAE,EAAE,CAAC;IACtB,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzB,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AACD,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAY,EACZ,MAAc,EACd,IAAsD;IAEtD,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAE,CAAC;IACxC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE;QAC7B,IAAI,WAAW,IAAI,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,UAAU,EAAE,CAAC;YACzF,WAAW,GAAG,IAAI,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC;IACF,iFAAiF;IACjF,+EAA+E;IAC/E,MAAM,OAAO,GAAG;QACd,GAAG,EAAE;QACL,KAAK,EAAE,CAAC,GAAW,EAAE,QAAwD,EAAE,EAAE;YAC/E,KAAK,KAAK,CAAC,GAAG,CAAC;iBACZ,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;iBACrE,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,EAAE,CAAC,GAAW,EAAE,QAAwD,EAAE,EAAE;YAC/E,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;iBAC5B,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;oBAAE,MAAM,KAAK,CAAC;YAC5C,CAAC,CAAC;iBACD,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;iBACtB,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,EAAE,CACJ,IAAY,EACZ,QAAyE,EACzE,EAAE;YACF,yEAAyE;YACzE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CACtD,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAC7B,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAC1E,CAAC;QACJ,CAAC;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IAC5C,IAAI,OAA0C,CAAC;IAC/C,OAAO,CAAC,OAAO,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE;gBAClC,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,CAAC;gBACV,EAAE,EAAE,OAAO;gBACX,aAAa,EAAE,GAAG,EAAE;oBAClB,WAAW,GAAG,IAAI,CAAC;gBACrB,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC3C,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,IAAI,YAAY,CAAC,WAAW,CAAC,CAAC;YACvE,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,QAAQ,GAAG,IAAI,CAAC;IAChB,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,4EAA4E;QAC5E,0DAA0D;QAC1D,IACE,MAAM,WAAW,EAAE,CAAC,IAAI,CACtB,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ;YAED,MAAM,OAAO,EAAE,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/windowsPath.d.ts

@@ -0,0 +1,17 @@
+import type { ExecFile } from './storage.js';
+/** Raw HKCU value: preserve expansion tokens, empty/absent values and registry type. */
+export type WindowsPathValue = {
+    value: string;
+    kind: 'String' | 'ExpandString';
+} | null;
+export interface WindowsPathOptions {
+    execFile?: ExecFile;
+    env?: NodeJS.ProcessEnv;
+}
+export declare function windowsPathIncludes(path: string, directory: string, env?: NodeJS.ProcessEnv): boolean;
+export declare function removeWindowsPathEntry(path: string, directory: string, preferredIndex: number, env?: NodeJS.ProcessEnv): string;
+export declare function appendWindowsPath(before: WindowsPathValue, directory: string, env?: NodeJS.ProcessEnv): WindowsPathValue;
+export declare function readWindowsUserPath(options?: WindowsPathOptions): Promise<WindowsPathValue>;
+/** Compare-and-set in the same process; never overwrite a separately edited PATH. */
+export declare function writeWindowsUserPath(before: WindowsPathValue, after: WindowsPathValue, options?: WindowsPathOptions): Promise<void>;
+//# sourceMappingURL=windowsPath.d.ts.map

package/dist/windowsPath.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"windowsPath.d.ts","sourceRoot":"","sources":["../src/windowsPath.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,wFAAwF;AACxF,MAAM,MAAM,gBAAgB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,GAAG,cAAc,CAAA;CAAE,GAAG,IAAI,CAAC;AACzF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAiBD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,oBAAc,GAAG,OAAO,CAK/F;AAED,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,GAAG,oBAAc,GAChB,MAAM,CAQR;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,gBAAgB,EACxB,SAAS,EAAE,MAAM,EACjB,GAAG,oBAAc,GAChB,gBAAgB,CAQlB;AA+BD,wBAAsB,mBAAmB,CACvC,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,gBAAgB,CAAC,CAkB3B;AAED,qFAAqF;AACrF,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,gBAAgB,EACxB,KAAK,EAAE,gBAAgB,EACvB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAkBf"}

package/dist/windowsPath.js

@@ -0,0 +1,81 @@
+import { execFile as nodeExecFile } from 'node:child_process';
+import { win32 } from 'node:path';
+const normalizeWindowsPathEntry = (part, env) => win32
+    .normalize(part
+    .replace(/^"(.*)"$/, '$1')
+    .replace(/%([^%]+)%/g, (token, name) => Object.entries(env).find(([key]) => key.toLowerCase() === name.toLowerCase())?.[1] ??
+    token))
+    .replace(/[\\/]+$/, '')
+    .toLowerCase();
+export function windowsPathIncludes(path, directory, env = process.env) {
+    const directoryKey = normalizeWindowsPathEntry(directory, env);
+    return path
+        .split(';')
+        .some((part) => part !== '' && normalizeWindowsPathEntry(part, env) === directoryKey);
+}
+export function removeWindowsPathEntry(path, directory, preferredIndex, env = process.env) {
+    const parts = path.split(';');
+    const directoryKey = normalizeWindowsPathEntry(directory, env);
+    const matches = (part) => part !== '' && normalizeWindowsPathEntry(part, env) === directoryKey;
+    const index = matches(parts[preferredIndex] ?? '') ? preferredIndex : parts.findIndex(matches);
+    if (index !== -1)
+        parts.splice(index, 1);
+    return parts.join(';');
+}
+export function appendWindowsPath(before, directory, env = process.env) {
+    if (windowsPathIncludes(before?.value ?? '', directory, env))
+        return before;
+    return {
+        value: before?.value
+            ? `${before.value}${before.value.endsWith(';') ? '' : ';'}${directory}`
+            : directory,
+        kind: before?.kind ?? 'ExpandString',
+    };
+}
+const readScript = `
+$value = $key.GetValue('Path', $null, [Microsoft.Win32.RegistryValueOptions]::DoNotExpandEnvironmentNames)
+$current = if ($null -eq $value) { $null } else { @{ value = [string]$value; kind = [string]$key.GetValueKind('Path') } }
+`;
+async function powershell(script, options) {
+    const executable = win32.join(options.env?.SystemRoot ?? process.env.SystemRoot ?? 'C:\\Windows', 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe');
+    return new Promise((resolve, reject) => {
+        (options.execFile ?? nodeExecFile)(executable, [
+            '-NoProfile',
+            '-NonInteractive',
+            '-EncodedCommand',
+            Buffer.from(`$ErrorActionPreference = 'Stop'\n[Console]::OutputEncoding = [Text.UTF8Encoding]::new($false)\n${script}`, 'utf16le').toString('base64'),
+        ], (error, stdout) => (error ? reject(error) : resolve(stdout)));
+    });
+}
+export async function readWindowsUserPath(options = {}) {
+    const text = await powershell(`
+$key = [Microsoft.Win32.Registry]::CurrentUser.OpenSubKey('Environment')
+if ($null -eq $key) { 'null'; exit }
+try { ${readScript}
+ConvertTo-Json -InputObject $current -Compress
+} finally { $key.Dispose() }
+`, options);
+    const result = JSON.parse(text.trim());
+    if (result !== null &&
+        (typeof result.value !== 'string' || !['String', 'ExpandString'].includes(result.kind)))
+        throw new Error('user_path_invalid');
+    return result;
+}
+/** Compare-and-set in the same process; never overwrite a separately edited PATH. */
+export async function writeWindowsUserPath(before, after, options = {}) {
+    const payload = Buffer.from(JSON.stringify({ before, after })).toString('base64');
+    await powershell(`
+$change = [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('${payload}')) | ConvertFrom-Json
+$key = [Microsoft.Win32.Registry]::CurrentUser.CreateSubKey('Environment')
+try { ${readScript}
+if (($null -eq $current) -ne ($null -eq $change.before) -or
+    ($null -ne $current -and ($current.value -cne $change.before.value -or $current.kind -cne $change.before.kind))) { throw 'user_path_changed' }
+if ($null -eq $change.after) { $key.DeleteValue('Path', $false) }
+else { $key.SetValue('Path', [string]$change.after.value, [Microsoft.Win32.RegistryValueKind]$change.after.kind) }
+} finally { $key.Dispose() }
+Add-Type -TypeDefinition 'using System; using System.Runtime.InteropServices; public static class MnemonikEnvironment { [DllImport("user32.dll", CharSet=CharSet.Unicode)] public static extern IntPtr SendMessageTimeout(IntPtr h, uint m, UIntPtr w, string l, uint f, uint t, out UIntPtr r); }'
+$result = [UIntPtr]::Zero
+[void][MnemonikEnvironment]::SendMessageTimeout([IntPtr]0xffff, 0x1a, [UIntPtr]::Zero, 'Environment', 2, 5000, [ref]$result)
+`, options);
+}
+//# sourceMappingURL=windowsPath.js.map

package/dist/windowsPath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windowsPath.js","sourceRoot":"","sources":["../src/windowsPath.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAUlC,MAAM,yBAAyB,GAAG,CAAC,IAAY,EAAE,GAAsB,EAAU,EAAE,CACjF,KAAK;KACF,SAAS,CACR,IAAI;KACD,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC;KACzB,OAAO,CACN,YAAY,EACZ,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CACtB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAClF,KAAK,CACR,CACJ;KACA,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;KACtB,WAAW,EAAE,CAAC;AAEnB,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,SAAiB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG;IACpF,MAAM,YAAY,GAAG,yBAAyB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO,IAAI;SACR,KAAK,CAAC,GAAG,CAAC;SACV,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,yBAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,YAAY,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,SAAiB,EACjB,cAAsB,EACtB,GAAG,GAAG,OAAO,CAAC,GAAG;IAEjB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,YAAY,GAAG,yBAAyB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAC/B,IAAI,KAAK,EAAE,IAAI,yBAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,YAAY,CAAC;IACvE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/F,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAwB,EACxB,SAAiB,EACjB,GAAG,GAAG,OAAO,CAAC,GAAG;IAEjB,IAAI,mBAAmB,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5E,OAAO;QACL,KAAK,EAAE,MAAM,EAAE,KAAK;YAClB,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,SAAS,EAAE;YACvE,CAAC,CAAC,SAAS;QACb,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,cAAc;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAG;;;CAGlB,CAAC;AACF,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,OAA2B;IACnE,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAC3B,OAAO,CAAC,GAAG,EAAE,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa,EAClE,UAAU,EACV,mBAAmB,EACnB,MAAM,EACN,gBAAgB,CACjB,CAAC;IACF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,CAAC,OAAO,CAAC,QAAQ,IAAK,YAAoC,CAAC,CACzD,UAAU,EACV;YACE,YAAY;YACZ,iBAAiB;YACjB,iBAAiB;YACjB,MAAM,CAAC,IAAI,CACT,kGAAkG,MAAM,EAAE,EAC1G,SAAS,CACV,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACrB,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAC7D,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAO,GAAuB,EAAE;IAEhC,MAAM,IAAI,GAAG,MAAM,UAAU,CAC3B;;;QAGI,UAAU;;;CAGjB,EACG,OAAO,CACR,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAqB,CAAC;IAC3D,IACE,MAAM,KAAK,IAAI;QACf,CAAC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEvF,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAwB,EACxB,KAAuB,EACvB,OAAO,GAAuB,EAAE;IAEhC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClF,MAAM,UAAU,CACd;yEACqE,OAAO;;QAExE,UAAU;;;;;;;;;CASjB,EACG,OAAO,CACR,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@mnemonik/local-setup",
+  "version": "0.1.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/JayDeeCo-Limited/mnemonik.git",
+    "directory": "packages/local-setup"
+  },
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "node ../../node_modules/@typescript/native/bin/tsc",
+    "typecheck": "node ../../node_modules/@typescript/native/bin/tsc --noEmit -p tsconfig.test.json",
+    "test": "vitest run --config vitest.config.ts tests/executor.test.ts",
+    "prepublishOnly": "npm run build"
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "license": "SEE LICENSE IN LICENSE",
+  "dependencies": {
+    "@mnemonik/shared": "7.98.0",
+    "proper-lockfile": "4.1.2"
+  },
+  "devDependencies": {
+    "@types/proper-lockfile": "4.1.4",
+    "@typescript/native": "npm:typescript@7.0.2"
+  }
+}