@monoes/monomindcli 2.15.7 → 2.16.1

package/dist/src/catalog/stage.js

@@ -0,0 +1,316 @@
+/**
+ * Staging: bring one skill, archetype or blueprint from a Git repository or a
+ * local path into the content-addressed package store
+ * (`.monomind/catalog/packages/<name>/<sha12>/`) and record it as `staged`
+ * (clean scan) or `quarantined`. The candidate is copied first (O_NOFOLLOW)
+ * and the copy is what gets inspected, hashed and stored — so a source edited
+ * mid-stage cannot reach the store. A refused stage leaves no store debris.
+ */
+import { closeSync, constants, existsSync, fstatSync, lstatSync, mkdirSync, mkdtempSync, openSync, readdirSync, readFileSync, realpathSync, renameSync, rmdirSync, rmSync, writeFileSync, } from 'node:fs';
+import { basename, dirname, join, relative } from 'node:path';
+import { checkout, findSkillDirs, skillLicense, toSkillName } from '../orgrt/skill-import.js';
+import { parseFrontmatter } from '../orgrt/skill-library.js';
+import { BlueprintSchema } from './blueprints.js';
+import { packageDigest, packagesDir } from './digest.js';
+import { sanitizeFrontmatter } from './frontmatter.js';
+import { inspectPackage, MAX_FILE_BYTES, SKIP_DIRS } from './scan.js';
+import { CatalogStateError, HISTORY_CAP, loadCatalogState, mutateCatalogState } from './state.js';
+/** Statuses from which changed content may replace the recorded revision. */
+const RESTAGEABLE = ['staged', 'quarantined', 'disabled'];
+const DISCOVERY_SKIP = new Set(['node_modules', '.git', 'dist', 'build']);
+/** Every directory holding a blueprint.json under `root`. */
+export function findBlueprintDirs(root) {
+    const out = [];
+    const walk = (dir) => {
+        const entries = readdirSync(dir, { withFileTypes: true });
+        if (entries.some((e) => e.isFile() && e.name === 'blueprint.json'))
+            out.push(dir);
+        for (const e of entries)
+            if (e.isDirectory() && !DISCOVERY_SKIP.has(e.name))
+                walk(join(dir, e.name));
+    };
+    walk(root);
+    return out;
+}
+const byDepth = (a, b) => a.split('/').length - b.split('/').length || a.localeCompare(b);
+function discover(root, kind) {
+    const seen = new Set();
+    const out = [];
+    const add = (c) => {
+        if (seen.has(c.name))
+            return;
+        seen.add(c.name);
+        out.push(c);
+    };
+    if (kind === 'blueprint') {
+        for (const dir of findBlueprintDirs(root).sort(byDepth)) {
+            try {
+                const bp = BlueprintSchema.parse(JSON.parse(readFileSync(join(dir, 'blueprint.json'), 'utf8')));
+                add({ name: bp.name, dir });
+            }
+            catch (e) {
+                add({ name: toSkillName(basename(dir)), dir, invalid: e.message.slice(0, 300) });
+            }
+        }
+        return out;
+    }
+    for (const dir of findSkillDirs(root).sort(byDepth)) {
+        const { data } = parseFrontmatter(readFileSync(join(dir, 'SKILL.md'), 'utf8'));
+        const name = typeof data.name === 'string' ? data.name : basename(dir);
+        const license = typeof data.license === 'string' ? data.license : undefined;
+        add({ name: toSkillName(name), dir, declaredLicense: license });
+    }
+    return out;
+}
+function choose(root, opts) {
+    const kind = opts.kind ?? (findSkillDirs(root).length ? 'skill' : 'blueprint');
+    const all = discover(root, kind);
+    const picked = opts.only ? all.filter((c) => c.name === opts.only) : all;
+    if (picked.length === 0)
+        throw new CatalogStateError(opts.only
+            ? `no ${kind} named "${opts.only}" in the source`
+            : `no ${kind} found in the source`);
+    if (picked.length > 1)
+        throw new CatalogStateError(`${picked.length} candidates (${picked.map((c) => c.name).join(', ')}); pass --only <name>`);
+    const c = picked[0];
+    if (c.invalid)
+        throw new CatalogStateError(`invalid blueprint.json in ${c.dir}: ${c.invalid}`);
+    return { kind, c };
+}
+function copyNoFollow(from, to) {
+    const fd = openSync(from, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        if (!fstatSync(fd).isFile())
+            throw new Error(`not a regular file: ${from}`);
+        mkdirSync(dirname(to), { recursive: true });
+        writeFileSync(to, readFileSync(fd));
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Copy regular files of `src` into `dest`; symlinks, excluded dirs and oversize files are rejected. */
+function copyCandidate(src, dest, skip) {
+    const rejected = [];
+    const walk = (prefix) => {
+        for (const name of readdirSync(join(src, prefix)).sort()) {
+            const rel = prefix ? `${prefix}/${name}` : name;
+            const from = join(src, rel);
+            if (from === skip)
+                continue;
+            const st = lstatSync(from);
+            if (st.isSymbolicLink())
+                rejected.push({ path: rel, reason: 'symlink' });
+            else if (st.isDirectory()) {
+                if (SKIP_DIRS.has(name))
+                    rejected.push({ path: rel, reason: 'excluded directory' });
+                else
+                    walk(rel);
+            }
+            else if (!st.isFile())
+                rejected.push({ path: rel, reason: 'not a regular file' });
+            else if (st.size > MAX_FILE_BYTES)
+                rejected.push({ path: rel, reason: `larger than ${MAX_FILE_BYTES / 1024} KiB` });
+            else
+                copyNoFollow(from, join(dest, rel));
+        }
+    };
+    walk('');
+    return rejected;
+}
+function pruneEmptyDirs(dir) {
+    for (const e of readdirSync(dir, { withFileTypes: true })) {
+        if (!e.isDirectory())
+            continue;
+        const sub = join(dir, e.name);
+        pruneEmptyDirs(sub);
+        if (readdirSync(sub).length === 0)
+            rmdirSync(sub);
+    }
+}
+function sourceOf(src, co, dir, license) {
+    const inSource = relative(co.root, dir) || '.';
+    const commit = co.commit && /^[0-9a-f]{40}$/.test(co.commit) ? co.commit : undefined;
+    if (!existsSync(src)) {
+        if (!commit)
+            throw new CatalogStateError(`no commit recorded for ${co.source}`);
+        return { kind: 'git', url: co.source, commit, path: inSource, license };
+    }
+    return {
+        kind: 'local',
+        path: realpathSync(co.root),
+        ...(commit ? { commit } : {}),
+        path_in_source: inSource,
+        license,
+    };
+}
+/** Every SKILL.md below `dir` (root and nested), relative; the copy holds no links. */
+function skillMdFiles(dir, prefix = '') {
+    const out = [];
+    for (const e of readdirSync(join(dir, prefix), { withFileTypes: true })) {
+        const rel = prefix ? `${prefix}/${e.name}` : e.name;
+        if (e.name.startsWith('.'))
+            continue; // dropped by inspection
+        if (e.isDirectory())
+            out.push(...skillMdFiles(dir, rel));
+        else if (e.isFile() && e.name === 'SKILL.md')
+            out.push(rel);
+    }
+    return out;
+}
+/** Rewrites every SKILL.md's frontmatter to the allow-list in place; one reject record per dropped key. */
+function sanitizeSkillMd(dir) {
+    return skillMdFiles(dir).flatMap((rel) => {
+        const file = join(dir, rel);
+        const before = readFileSync(file, 'utf8');
+        const { text, removed } = sanitizeFrontmatter(before);
+        if (text !== before)
+            writeFileSync(file, text);
+        return removed.map((key) => ({
+            path: `${rel} (frontmatter ${key})`,
+            reason: 'frontmatter key not allowed; removed',
+        }));
+    });
+}
+/** Stage one candidate from `src` (owner/repo, git URL or local path). */
+export async function stage(root, src, opts) {
+    const now = opts.now ?? new Date().toISOString();
+    // Never echo the URL: it would print the credential it carries.
+    if (!existsSync(src) && /^[a-z][a-z0-9+.-]*:\/\/[^/?#]*@/i.test(src))
+        throw new CatalogStateError('refusing a source URL with embedded credentials (user[:token]@); use a git credential helper');
+    const co = checkout(src);
+    const store = packagesDir(root);
+    const storeExisted = existsSync(store);
+    let temp;
+    try {
+        const { kind, c } = choose(co.root, opts);
+        const id = `${kind}:${c.name}`;
+        const verdict = skillLicense(c.dir, co.root, c.declaredLicense);
+        if (!verdict.license)
+            throw new CatalogStateError(`license: ${verdict.found}`);
+        const license = verdict.license;
+        const source = sourceOf(src, co, c.dir, license);
+        // Read-only preflight; repeated under the lock below.
+        const prior = loadCatalogState(root).entries.find((e) => e.id === id);
+        if (prior?.status === 'revoked')
+            throw new CatalogStateError(`${id} is revoked`);
+        mkdirSync(join(store, '.incoming'), { recursive: true });
+        temp = mkdtempSync(join(store, '.incoming', `${c.name}-`));
+        const copyRejects = copyCandidate(c.dir, temp, verdict.file);
+        if (verdict.file)
+            copyNoFollow(verdict.file, join(temp, 'LICENSE.txt'));
+        // Before inspection and hashing: platforms execute frontmatter config.
+        if (kind !== 'blueprint')
+            copyRejects.push(...sanitizeSkillMd(temp));
+        const insp = await inspectPackage(temp, kind, { root, fence: opts.fence });
+        if (insp.fatal)
+            throw new CatalogStateError(`refused ${id}: ${insp.fatal}`);
+        for (const r of insp.rejected)
+            rmSync(join(temp, r.path), { recursive: true, force: true });
+        pruneEmptyDirs(temp);
+        const sha256 = packageDigest(temp);
+        if (prior && prior.sha256 !== sha256 && !RESTAGEABLE.includes(prior.status))
+            throw new CatalogStateError(`entry is ${prior.status}; disable it first`);
+        const dir = join(store, c.name, sha256.slice(0, 12));
+        let created = false;
+        if (existsSync(dir)) {
+            if (packageDigest(dir) !== sha256)
+                throw new CatalogStateError(`stored package ${dir} does not match its digest`);
+        }
+        else {
+            mkdirSync(dirname(dir), { recursive: true });
+            renameSync(temp, dir);
+            temp = undefined;
+            created = true;
+        }
+        const inspection = {
+            verdict: insp.verdict,
+            accepted: insp.accepted,
+            rejected: [...copyRejects, ...insp.rejected].sort((a, b) => (a.path < b.path ? -1 : 1)),
+            requestedTools: insp.requestedTools,
+            scanner: insp.scanner,
+            at: now,
+        };
+        const status = insp.verdict === 'clean' ? 'staged' : 'quarantined';
+        let entry;
+        let unchanged = false;
+        try {
+            mutateCatalogState(root, (state) => {
+                const cur = state.entries.find((e) => e.id === id);
+                if (cur?.status === 'revoked')
+                    throw new CatalogStateError(`${id} is revoked`);
+                if (cur && cur.sha256 === sha256) {
+                    unchanged = true;
+                    entry = cur;
+                    return state;
+                }
+                if (cur && !RESTAGEABLE.includes(cur.status))
+                    throw new CatalogStateError(`entry is ${cur.status}; disable it first`);
+                const next = cur
+                    ? {
+                        ...cur,
+                        sha256,
+                        source,
+                        inspection,
+                        status,
+                        targets: [],
+                        grantedTools: [],
+                        replacesLegacy: false,
+                        updatedAt: now,
+                        history: [
+                            ...cur.history,
+                            { from: cur.status, to: status, actor: opts.actor, at: now, reason: 'restaged' },
+                        ].slice(-HISTORY_CAP),
+                    }
+                    : {
+                        id,
+                        kind,
+                        status,
+                        sha256,
+                        source,
+                        inspection,
+                        targets: [],
+                        grantedTools: [],
+                        replacesLegacy: false,
+                        createdAt: now,
+                        updatedAt: now,
+                        history: [{ from: null, to: status, actor: opts.actor, at: now }],
+                    };
+                entry = next;
+                return {
+                    ...state,
+                    entries: cur
+                        ? state.entries.map((e) => (e.id === id ? next : e))
+                        : [...state.entries, next],
+                };
+            });
+        }
+        catch (e) {
+            if (created) {
+                rmSync(dir, { recursive: true, force: true });
+                rmdirIfEmpty(dirname(dir));
+            }
+            throw e;
+        }
+        return { entry: entry, dir, unchanged };
+    }
+    finally {
+        co.cleanup();
+        if (temp)
+            rmSync(temp, { recursive: true, force: true });
+        rmdirIfEmpty(join(store, '.incoming'));
+        if (!storeExisted) {
+            rmdirIfEmpty(store);
+            rmdirIfEmpty(dirname(store));
+        }
+    }
+}
+function rmdirIfEmpty(dir) {
+    try {
+        rmdirSync(dir);
+    }
+    catch {
+        // not empty (still in use) or absent
+    }
+}
+//# sourceMappingURL=stage.js.map

package/dist/src/catalog/stage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stage.js","sourceRoot":"","sources":["../../../src/catalog/stage.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,WAAW,EACX,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,SAAS,EACT,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAoB,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACxF,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAyBlG,6EAA6E;AAC7E,MAAM,WAAW,GAA6B,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;AACpF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAU1E,6DAA6D;AAC7D,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClF,KAAK,MAAM,CAAC,IAAI,OAAO;YACrB,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAChF,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,CAAC;IACX,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE,CAC/C,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AAElE,SAAS,QAAQ,CAAC,IAAY,EAAE,IAA0B;IACxD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,CAAC,CAAY,EAAE,EAAE;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO;QAC7B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC,CAAC;IACF,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,eAAe,CAAC,KAAK,CAC9B,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC,CAC9D,CAAC;gBACF,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAG,CAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,IAAkB;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QACrB,MAAM,IAAI,iBAAiB,CACzB,IAAI,CAAC,IAAI;YACP,CAAC,CAAC,MAAM,IAAI,WAAW,IAAI,CAAC,IAAI,iBAAiB;YACjD,CAAC,CAAC,MAAM,IAAI,sBAAsB,CACrC,CAAC;IACJ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QACnB,MAAM,IAAI,iBAAiB,CACzB,GAAG,MAAM,CAAC,MAAM,gBAAgB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAC5F,CAAC;IACJ,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC,OAAO;QAAE,MAAM,IAAI,iBAAiB,CAAC,6BAA6B,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/F,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,EAAU;IAC5C,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;QAC5E,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,aAAa,CAAC,EAAE,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IACtC,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,SAAS,aAAa,CAAC,GAAW,EAAE,IAAY,EAAE,IAAwB;IACxE,MAAM,QAAQ,GAAuC,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,CAAC,MAAc,EAAQ,EAAE;QACpC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACzD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5B,IAAI,IAAI,KAAK,IAAI;gBAAE,SAAS;YAC5B,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,EAAE,CAAC,cAAc,EAAE;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;iBACpE,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC1B,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;;oBAC/E,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;iBAAM,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;iBAC/E,IAAI,EAAE,CAAC,IAAI,GAAG,cAAc;gBAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,cAAc,GAAG,IAAI,MAAM,EAAE,CAAC,CAAC;;gBAC9E,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,SAAS;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9B,cAAc,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,GAAW,EACX,EAAqD,EACrD,GAAW,EACX,OAA6B;IAE7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC;IAC/C,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,iBAAiB,CAAC,0BAA0B,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC,IAAI,CAAC;QAC3B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,cAAc,EAAE,QAAQ;QACxB,OAAO;KACR,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,SAAS,YAAY,CAAC,GAAW,EAAE,MAAM,GAAG,EAAE;IAC5C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpD,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,wBAAwB;QAC9D,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;aACpD,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2GAA2G;AAC3G,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,IAAI,KAAK,MAAM;YAAE,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC3B,IAAI,EAAE,GAAG,GAAG,iBAAiB,GAAG,GAAG;YACnC,MAAM,EAAE,sCAAsC;SAC/C,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAY,EAAE,GAAW,EAAE,IAAkB;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,gEAAgE;IAChE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC;QAClE,MAAM,IAAI,iBAAiB,CACzB,8FAA8F,CAC/F,CAAC;IACJ,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,IAAI,iBAAiB,CAAC,YAAY,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,sDAAsD;QACtD,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,IAAI,KAAK,EAAE,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAEjF,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,IAAI;YAAE,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;QACxE,uEAAuE;QACvE,IAAI,IAAI,KAAK,WAAW;YAAE,WAAW,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,iBAAiB,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5E,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5F,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;YACzE,MAAM,IAAI,iBAAiB,CAAC,YAAY,KAAK,CAAC,MAAM,oBAAoB,CAAC,CAAC;QAE5E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACrD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,MAAM;gBAC/B,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,GAAG,4BAA4B,CAAC,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACtB,IAAI,GAAG,SAAS,CAAC;YACjB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QAED,MAAM,UAAU,GAA+B;YAC7C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,CAAC,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvF,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,EAAE,EAAE,GAAG;SACR,CAAC;QACF,MAAM,MAAM,GAAkB,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC;QAClF,IAAI,KAA+B,CAAC;QACpC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnD,IAAI,GAAG,EAAE,MAAM,KAAK,SAAS;oBAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;gBAC/E,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBACjC,SAAS,GAAG,IAAI,CAAC;oBACjB,KAAK,GAAG,GAAG,CAAC;oBACZ,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;oBAC1C,MAAM,IAAI,iBAAiB,CAAC,YAAY,GAAG,CAAC,MAAM,oBAAoB,CAAC,CAAC;gBAC1E,MAAM,IAAI,GAAiB,GAAG;oBAC5B,CAAC,CAAC;wBACE,GAAG,GAAG;wBACN,MAAM;wBACN,MAAM;wBACN,UAAU;wBACV,MAAM;wBACN,OAAO,EAAE,EAAE;wBACX,YAAY,EAAE,EAAE;wBAChB,cAAc,EAAE,KAAK;wBACrB,SAAS,EAAE,GAAG;wBACd,OAAO,EAAE;4BACP,GAAG,GAAG,CAAC,OAAO;4BACd,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE;yBACjF,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC;qBACtB;oBACH,CAAC,CAAC;wBACE,EAAE;wBACF,IAAI;wBACJ,MAAM;wBACN,MAAM;wBACN,MAAM;wBACN,UAAU;wBACV,OAAO,EAAE,EAAE;wBACX,YAAY,EAAE,EAAE;wBAChB,cAAc,EAAE,KAAK;wBACrB,SAAS,EAAE,GAAG;wBACd,SAAS,EAAE,GAAG;wBACd,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;qBAClE,CAAC;gBACN,KAAK,GAAG,IAAI,CAAC;gBACb,OAAO;oBACL,GAAG,KAAK;oBACR,OAAO,EAAE,GAAG;wBACV,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;wBACpD,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;iBAC7B,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9C,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,KAAqB,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAC1D,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,IAAI;YAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;AACH,CAAC"}

package/dist/src/catalog/state.d.ts

@@ -0,0 +1,23 @@
+import { type CatalogState, type CatalogStatus } from './types.js';
+export declare class CatalogStateError extends Error {
+    constructor(message: string);
+}
+export declare const statePath: (root: string) => string;
+export declare const lockPath: (root: string) => string;
+/** Lifecycle moves the catalog commands may make. Restaging changed content is `stage`'s own path. */
+export declare const TRANSITIONS: Record<CatalogStatus, readonly CatalogStatus[]>;
+export declare const HISTORY_CAP = 20;
+/** The state on disk, or the empty state when absent. Never creates directories. */
+export declare function loadCatalogState(root: string): CatalogState;
+/** load → fn → validate → atomic write, under the catalog lock. A throw writes nothing. */
+export declare function mutateCatalogState(root: string, fn: (state: CatalogState) => CatalogState): CatalogState;
+export interface TransitionContext {
+    actor: string;
+    /** ISO timestamp recorded in history. */
+    now: string;
+    reason?: string;
+    root: string;
+}
+/** One lifecycle move, enforced against `TRANSITIONS`. Returns a new state. */
+export declare function transition(state: CatalogState, id: string, to: CatalogStatus, ctx: TransitionContext): CatalogState;
+//# sourceMappingURL=state.d.ts.map

package/dist/src/catalog/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/catalog/state.ts"],"names":[],"mappings":"AAYA,OAAO,EAEL,KAAK,YAAY,EAEjB,KAAK,aAAa,EACnB,MAAM,YAAY,CAAC;AAEpB,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,eAAO,MAAM,SAAS,SAAU,MAAM,KAAG,MAA8C,CAAC;AACxF,eAAO,MAAM,QAAQ,SAAU,MAAM,KAAG,MAA0D,CAAC;AAEnG,sGAAsG;AACtG,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,aAAa,EAAE,SAAS,aAAa,EAAE,CAOvE,CAAC;AAEF,eAAO,MAAM,WAAW,KAAK,CAAC;AAE9B,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAa3D;AAED,2FAA2F;AAC3F,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,YAAY,GACxC,YAAY,CAmBd;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,+EAA+E;AAC/E,wBAAgB,UAAU,CACxB,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,aAAa,EACjB,GAAG,EAAE,iBAAiB,GACrB,YAAY,CA4Bd"}

package/dist/src/catalog/state.js

@@ -0,0 +1,102 @@
+/**
+ * Catalog lifecycle state: `.monomind/catalog/state.json`.
+ *
+ * Reading never creates anything; every write goes through
+ * `mutateCatalogState`, which holds `.monomind/locks/catalog.lock` (exclusive
+ * create, fails safe on a stale lock) and validates the whole state before an
+ * atomic write. `transition` is pure: it returns a new state.
+ */
+import { closeSync, existsSync, mkdirSync, openSync, readFileSync, unlinkSync } from 'node:fs';
+import { join } from 'node:path';
+import { writeJsonFileAtomic } from '../utils/json-file.js';
+import { catalogDir, verifyEntry } from './digest.js';
+import { CATALOG_SCHEMA_VERSION, CatalogStateSchema, } from './types.js';
+export class CatalogStateError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'CatalogStateError';
+    }
+}
+export const statePath = (root) => join(catalogDir(root), 'state.json');
+export const lockPath = (root) => join(root, '.monomind', 'locks', 'catalog.lock');
+/** Lifecycle moves the catalog commands may make. Restaging changed content is `stage`'s own path. */
+export const TRANSITIONS = {
+    staged: ['approved', 'quarantined', 'revoked'],
+    quarantined: ['staged', 'revoked'],
+    approved: ['active', 'disabled', 'revoked'],
+    active: ['disabled', 'quarantined', 'revoked'],
+    disabled: ['active', 'quarantined', 'revoked'],
+    revoked: [],
+};
+export const HISTORY_CAP = 20;
+/** The state on disk, or the empty state when absent. Never creates directories. */
+export function loadCatalogState(root) {
+    const file = statePath(root);
+    if (!existsSync(file))
+        return { schemaVersion: CATALOG_SCHEMA_VERSION, entries: [] };
+    let raw;
+    try {
+        raw = JSON.parse(readFileSync(file, 'utf8'));
+    }
+    catch (e) {
+        throw new CatalogStateError(`catalog state is not valid JSON: ${e.message}`);
+    }
+    const parsed = CatalogStateSchema.safeParse(raw);
+    if (!parsed.success)
+        throw new CatalogStateError(`catalog state is invalid: ${parsed.error.message}`);
+    return parsed.data;
+}
+/** load → fn → validate → atomic write, under the catalog lock. A throw writes nothing. */
+export function mutateCatalogState(root, fn) {
+    const lock = lockPath(root);
+    mkdirSync(join(root, '.monomind', 'locks'), { recursive: true });
+    let fd;
+    try {
+        fd = openSync(lock, 'wx');
+    }
+    catch (e) {
+        if (e.code === 'EEXIST')
+            throw new CatalogStateError(`catalog is locked by another command: ${lock}`);
+        throw e;
+    }
+    try {
+        closeSync(fd);
+        const next = CatalogStateSchema.parse(fn(loadCatalogState(root)));
+        writeJsonFileAtomic(statePath(root), next);
+        return next;
+    }
+    finally {
+        unlinkSync(lock);
+    }
+}
+/** One lifecycle move, enforced against `TRANSITIONS`. Returns a new state. */
+export function transition(state, id, to, ctx) {
+    const current = state.entries.find((e) => e.id === id);
+    if (!current)
+        throw new CatalogStateError(`no catalog entry ${id}`);
+    const from = current.status;
+    const allowed = TRANSITIONS[from];
+    if (!allowed.includes(to))
+        throw new CatalogStateError(`${id} is ${from}; cannot move to ${to} (allowed: ${allowed.join(', ') || 'none'})`);
+    const isRelease = from === 'quarantined' && to === 'staged';
+    if ((to === 'quarantined' || to === 'revoked' || isRelease) && !ctx.reason?.trim())
+        throw new CatalogStateError(`${from} → ${to} needs a reason`);
+    if (to === 'active') {
+        const check = verifyEntry(ctx.root, current);
+        if (!check.ok)
+            throw new CatalogStateError(`cannot activate ${id}: ${check.reason}`);
+    }
+    const history = [
+        ...current.history,
+        { from, to, actor: ctx.actor, at: ctx.now, ...(ctx.reason ? { reason: ctx.reason } : {}) },
+    ].slice(-HISTORY_CAP);
+    const inspection = isRelease
+        ? {
+            ...current.inspection,
+            override: { actor: ctx.actor, reason: ctx.reason, at: ctx.now },
+        }
+        : current.inspection;
+    const next = { ...current, status: to, inspection, history, updatedAt: ctx.now };
+    return { ...state, entries: state.entries.map((e) => (e.id === id ? next : e)) };
+}
+//# sourceMappingURL=state.js.map

package/dist/src/catalog/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/catalog/state.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC/F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,sBAAsB,EAEtB,kBAAkB,GAEnB,MAAM,YAAY,CAAC;AAEpB,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;AACxF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AAEnG,sGAAsG;AACtG,MAAM,CAAC,MAAM,WAAW,GAAoD;IAC1E,MAAM,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,SAAS,CAAC;IAC9C,WAAW,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;IAClC,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC;IAC3C,MAAM,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,SAAS,CAAC;IAC9C,QAAQ,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC;IAC9C,OAAO,EAAE,EAAE;CACZ,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAE9B,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrF,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,iBAAiB,CAAC,oCAAqC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,OAAO;QACjB,MAAM,IAAI,iBAAiB,CAAC,6BAA6B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACnF,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,EAAyC;IAEzC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAChD,MAAM,IAAI,iBAAiB,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,CAAC;IACV,CAAC;IACD,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClE,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,UAAU,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAUD,+EAA+E;AAC/E,MAAM,UAAU,UAAU,CACxB,KAAmB,EACnB,EAAU,EACV,EAAiB,EACjB,GAAsB;IAEtB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAC5B,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,iBAAiB,CACzB,GAAG,EAAE,OAAO,IAAI,oBAAoB,EAAE,cAAc,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CACpF,CAAC;IACJ,MAAM,SAAS,GAAG,IAAI,KAAK,aAAa,IAAI,EAAE,KAAK,QAAQ,CAAC;IAC5D,IAAI,CAAC,EAAE,KAAK,aAAa,IAAI,EAAE,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE;QAChF,MAAM,IAAI,iBAAiB,CAAC,GAAG,IAAI,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAChE,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,EAAE,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,OAAO,GAAG;QACd,GAAG,OAAO,CAAC,OAAO;QAClB,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KAC3F,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC;IACtB,MAAM,UAAU,GAAG,SAAS;QAC1B,CAAC,CAAC;YACE,GAAG,OAAO,CAAC,UAAU;YACrB,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAgB,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,EAAE;SAC1E;QACH,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IACvB,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;IACjF,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnF,CAAC"}