@narumitw/pi-sync 0.51.1 → 0.52.0

package/dist/chunks/{chunk-QLSN7AGX.ts → chunk-IJ6VV6FN.ts}

@@ -1,18 +1,77 @@
 // @generated by scripts/build-runtime.mjs; do not edit.
 // @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
+import {
+  throwIfAborted
+} from "./chunk-PWMWOJP4.ts";
 import {
   ensureStateDir,
   lockPath
-} from "./chunk-YPXGU5OR.ts";
+} from "./chunk-4QVPTIZB.ts";
 import {
   LOCKFILE_FS_ADAPTER,
   LOCK_GUARD_STALE_MS,
-  LOCK_GUARD_UPDATE_MS
+  LOCK_GUARD_UPDATE_MS,
+  stateDir
 } from "./chunk-BVVP33U5.ts";
+import {
+  encodeSnapshot
+} from "./chunk-ZX2Q6THB.ts";
+import {
+  agentDir,
+  createSnapshot,
+  sessionDirFromContext,
+  sessionSnapshotPathFromAbsolute
+} from "./chunk-QOFMXPM5.ts";
+import {
+  syncDirectory
+} from "./chunk-HUZ5CR4W.ts";
+
+// src/sync/sync-local.ts
+import fs from "node:fs/promises";
+import path from "node:path";
+function protectedSessionPaths(ctx, sessionRoot = sessionDirFromContext(ctx)) {
+  const getSessionFile = ctx.sessionManager.getSessionFile;
+  if (typeof getSessionFile !== "function") return /* @__PURE__ */ new Set();
+  const sessionFile = getSessionFile.call(ctx.sessionManager);
+  const snapshotPath = sessionFile ? sessionSnapshotPathFromAbsolute(sessionFile, sessionRoot) : void 0;
+  return snapshotPath ? /* @__PURE__ */ new Set([snapshotPath]) : /* @__PURE__ */ new Set();
+}
+function captureMutationOwner(ctx, signal) {
+  const manager = ctx.sessionManager;
+  const file = manager.getSessionFile?.();
+  const id = manager.getSessionId?.();
+  const cwd = manager.getCwd?.();
+  const root = agentDir();
+  return () => {
+    throwIfAborted(signal);
+    if (ctx.sessionManager !== manager || manager.getSessionFile?.() !== file || manager.getSessionId?.() !== id || manager.getCwd?.() !== cwd || agentDir() !== root)
+      throw new Error("Session changed during file mutation; evidence retained for review.");
+  };
+}
+async function backupLocal(profile, options = {}, signal) {
+  throwIfAborted(signal);
+  const snapshot = await createSnapshot(profile, { ...options, signal });
+  throwIfAborted(signal);
+  const backupDirectory = path.join(stateDir(), "backups");
+  await fs.mkdir(backupDirectory, { recursive: true, mode: 448 });
+  throwIfAborted(signal);
+  const backupPath = path.join(backupDirectory, `${snapshot.id}.json.gz`);
+  const encoded = await encodeSnapshot(snapshot);
+  throwIfAborted(signal);
+  const handle = await fs.open(backupPath, "wx", 384);
+  try {
+    await handle.writeFile(encoded);
+    await handle.sync();
+  } finally {
+    await handle.close();
+  }
+  await syncDirectory(backupDirectory);
+  return backupPath;
+}
 
 // src/state/lock.ts
 import { randomUUID } from "node:crypto";
-import fs from "node:fs/promises";
+import fs2 from "node:fs/promises";
 import lockfile from "proper-lockfile";
 var LOCK_STALE_MS = 30 * 60 * 1e3;
 var MAX_PROCESS_ID = 2147483647;
@@ -45,7 +104,7 @@ async function withLock(command, fn, options = {}) {
       if (rechecked.status !== "valid" || rechecked.lock.id !== inspection.lock.id || !isStaleLock(rechecked.lock)) {
         throw new Error("pi-sync lock changed while preparing transaction recovery; retry.");
       }
-      await fs.rm(lockPath(), { force: true });
+      await fs2.rm(lockPath(), { force: true });
       inspection = { status: "missing" };
     }
     if (inspection.status === "valid") {
@@ -58,7 +117,7 @@ async function withLock(command, fn, options = {}) {
         "pi-sync lock metadata is unreadable. Run /sync unlock --stale after verifying no sync is running."
       );
     }
-    await fs.writeFile(lockPath(), JSON.stringify(lock, null, "	"), { flag: "wx" });
+    await fs2.writeFile(lockPath(), JSON.stringify(lock, null, "	"), { flag: "wx" });
     guard.throwIfCompromised();
     result = await fn();
     guard.throwIfCompromised();
@@ -68,7 +127,7 @@ async function withLock(command, fn, options = {}) {
   }
   try {
     const current = await readLock();
-    if (current?.id === lock.id) await fs.rm(lockPath(), { force: true });
+    if (current?.id === lock.id) await fs2.rm(lockPath(), { force: true });
   } catch (error) {
     if (!failed) {
       failed = true;
@@ -87,7 +146,7 @@ async function withLock(command, fn, options = {}) {
 }
 async function inspectLock() {
   try {
-    const text = await fs.readFile(lockPath(), "utf8");
+    const text = await fs2.readFile(lockPath(), "utf8");
     if (text.trim().length === 0) return { status: "unreadable" };
     const parsed = JSON.parse(text);
     return isLockFile(parsed) ? { status: "valid", lock: parsed } : { status: "unreadable" };
@@ -119,9 +178,9 @@ function isStaleLock(lock) {
   }
 }
 async function unlock(ctx, options) {
-  throwIfAborted(options.signal);
+  throwIfAborted2(options.signal);
   await ensureStateDir();
-  throwIfAborted(options.signal);
+  throwIfAborted2(options.signal);
   let guard;
   try {
     guard = await acquireGuard();
@@ -146,9 +205,9 @@ async function unlock(ctx, options) {
   if (failed) throw failure;
 }
 async function unlockGuarded(ctx, options) {
-  throwIfAborted(options.signal);
+  throwIfAborted2(options.signal);
   let inspection = await inspectLock();
-  throwIfAborted(options.signal);
+  throwIfAborted2(options.signal);
   if (inspection.status === "missing") {
     ctx.ui.notify("No pi-sync lock is present.", "info");
     return;
@@ -162,10 +221,10 @@ async function unlockGuarded(ctx, options) {
       return;
     }
     inspection = await inspectLock();
-    throwIfAborted(options.signal);
+    throwIfAborted2(options.signal);
     if (inspection.status === "unreadable") {
-      throwIfAborted(options.signal);
-      await fs.rm(lockPath(), { force: true });
+      throwIfAborted2(options.signal);
+      await fs2.rm(lockPath(), { force: true });
       if (!options.signal?.aborted) {
         ctx.ui.notify(
           "Removed unreadable pi-sync lock. No settings, files, sync state, or remote data were changed.",
@@ -183,13 +242,13 @@ async function unlockGuarded(ctx, options) {
     ctx.ui.notify("Lock owner is still live; refusing to remove it.", "warning");
     return;
   }
-  throwIfAborted(options.signal);
-  await fs.rm(lockPath(), { force: true });
+  throwIfAborted2(options.signal);
+  await fs2.rm(lockPath(), { force: true });
   if (!options.signal?.aborted) {
     ctx.ui.notify("Removed stale pi-sync lock. No settings, files, sync state, or remote data were changed.", "info");
   }
 }
-function throwIfAborted(signal) {
+function throwIfAborted2(signal) {
   if (!signal?.aborted) return;
   throw signal.reason instanceof Error ? signal.reason : new DOMException("The operation was aborted", "AbortError");
 }
@@ -247,6 +306,9 @@ export {
   inspectLock,
   isLockGuardHeld,
   isStaleLock,
-  unlock
+  unlock,
+  protectedSessionPaths,
+  captureMutationOwner,
+  backupLocal
 };
-//# sourceMappingURL=chunk-QLSN7AGX.ts.map
+//# sourceMappingURL=chunk-IJ6VV6FN.ts.map

package/dist/chunks/chunk-IJ6VV6FN.ts.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/sync/sync-local.ts", "../../src/state/lock.ts"],
+  "sourcesContent": ["import fs from \"node:fs/promises\";\nimport path from \"node:path\";\nimport type { ExtensionCommandContext, ExtensionContext } from \"@earendil-works/pi-coding-agent\";\nimport { agentDir, sessionDirFromContext } from \"../snapshot/session-paths.js\";\nimport { createSnapshot, sessionSnapshotPathFromAbsolute } from \"../snapshot/snapshot.js\";\nimport { encodeSnapshot } from \"../snapshot/snapshot-codec.js\";\nimport type { SnapshotOptions } from \"../snapshot/snapshot-types.js\";\nimport { syncDirectory } from \"../state/json-file.js\";\nimport { stateDir } from \"../state/state-directory.js\";\nimport { throwIfAborted } from \"./signals.js\";\n\nexport function protectedSessionPaths(\n  ctx: ExtensionCommandContext | ExtensionContext,\n  sessionRoot = sessionDirFromContext(ctx),\n) {\n  const getSessionFile = ctx.sessionManager.getSessionFile;\n  if (typeof getSessionFile !== \"function\") return new Set<string>();\n  const sessionFile = getSessionFile.call(ctx.sessionManager) as string | undefined;\n  const snapshotPath = sessionFile ? sessionSnapshotPathFromAbsolute(sessionFile, sessionRoot) : undefined;\n  return snapshotPath ? new Set([snapshotPath]) : new Set<string>();\n}\n\nexport function captureMutationOwner(ctx: ExtensionContext | ExtensionCommandContext, signal?: AbortSignal) {\n  const manager = ctx.sessionManager;\n  const file = manager.getSessionFile?.();\n  const id = manager.getSessionId?.();\n  const cwd = manager.getCwd?.();\n  const root = agentDir();\n  return () => {\n    throwIfAborted(signal);\n    if (\n      ctx.sessionManager !== manager ||\n      manager.getSessionFile?.() !== file ||\n      manager.getSessionId?.() !== id ||\n      manager.getCwd?.() !== cwd ||\n      agentDir() !== root\n    )\n      throw new Error(\"Session changed during file mutation; evidence retained for review.\");\n  };\n}\n\nexport async function backupLocal(profile: string, options: SnapshotOptions = {}, signal?: AbortSignal) {\n  throwIfAborted(signal);\n  const snapshot = await createSnapshot(profile, { ...options, signal });\n  throwIfAborted(signal);\n  const backupDirectory = path.join(stateDir(), \"backups\");\n  await fs.mkdir(backupDirectory, { recursive: true, mode: 0o700 });\n  throwIfAborted(signal);\n  const backupPath = path.join(backupDirectory, `${snapshot.id}.json.gz`);\n  const encoded = await encodeSnapshot(snapshot);\n  throwIfAborted(signal);\n  const handle = await fs.open(backupPath, \"wx\", 0o600);\n  try {\n    await handle.writeFile(encoded);\n    await handle.sync();\n  } finally {\n    await handle.close();\n  }\n  await syncDirectory(backupDirectory);\n  return backupPath;\n}\n", "import { randomUUID } from \"node:crypto\";\nimport fs from \"node:fs/promises\";\nimport type { ExtensionCommandContext } from \"@earendil-works/pi-coding-agent\";\nimport lockfile from \"proper-lockfile\";\nimport type { CommandOptions } from \"../commands/command-types.js\";\nimport { LOCK_GUARD_STALE_MS, LOCK_GUARD_UPDATE_MS } from \"./lock-policy.js\";\nimport { LOCKFILE_FS_ADAPTER } from \"./lockfile-fs.js\";\nimport type { LockFile } from \"./state-types.js\";\nimport { ensureStateDir, lockPath } from \"./sync-state-store.js\";\n\nconst LOCK_STALE_MS = 30 * 60 * 1000;\nconst MAX_PROCESS_ID = 2_147_483_647;\n\ninterface Guard {\n  release: () => Promise<void>;\n  throwIfCompromised: () => void;\n  isCompromised: () => boolean;\n}\n\nexport type LockInspection = { status: \"missing\" } | { status: \"unreadable\" } | { status: \"valid\"; lock: LockFile };\n\nexport async function withLock<T>(\n  command: string,\n  fn: () => Promise<T>,\n  options: { reclaimStale?: boolean } = {},\n): Promise<T> {\n  await ensureStateDir();\n  const lock: LockFile = {\n    id: randomUUID(),\n    pid: process.pid,\n    command,\n    startedAt: new Date().toISOString(),\n  };\n  let guard: Guard | undefined;\n  let result: T | undefined;\n  let failed = false;\n  let failure: unknown;\n  try {\n    try {\n      guard = await acquireGuard();\n    } catch (error) {\n      if (!isLockHeldError(error)) throw error;\n      throw await describeHeldLock();\n    }\n\n    let inspection = await inspectLock();\n    if (inspection.status === \"valid\" && isStaleLock(inspection.lock)) {\n      if (!options.reclaimStale) {\n        throw new Error(`pi-sync lock is stale (pid ${inspection.lock.pid}). Run /sync unlock --stale, then retry.`);\n      }\n      guard.throwIfCompromised();\n      const rechecked = await inspectLock();\n      if (rechecked.status !== \"valid\" || rechecked.lock.id !== inspection.lock.id || !isStaleLock(rechecked.lock)) {\n        throw new Error(\"pi-sync lock changed while preparing transaction recovery; retry.\");\n      }\n      await fs.rm(lockPath(), { force: true });\n      inspection = { status: \"missing\" };\n    }\n    if (inspection.status === \"valid\") {\n      throw new Error(\n        `pi-sync is already running (${inspection.lock.command}, pid ${inspection.lock.pid}, started ${inspection.lock.startedAt}).`,\n      );\n    }\n    if (inspection.status === \"unreadable\") {\n      throw new Error(\n        \"pi-sync lock metadata is unreadable. Run /sync unlock --stale after verifying no sync is running.\",\n      );\n    }\n\n    await fs.writeFile(lockPath(), JSON.stringify(lock, null, \"\\t\"), { flag: \"wx\" });\n    guard.throwIfCompromised();\n    result = await fn();\n    guard.throwIfCompromised();\n  } catch (error) {\n    failed = true;\n    failure = error;\n  }\n\n  try {\n    const current = await readLock();\n    if (current?.id === lock.id) await fs.rm(lockPath(), { force: true });\n  } catch (error) {\n    if (!failed) {\n      failed = true;\n      failure = error;\n    }\n  }\n  if (guard) {\n    const releaseError = await releaseGuard(guard);\n    if (releaseError && !failed) {\n      failed = true;\n      failure = releaseError;\n    }\n  }\n  if (failed) throw failure;\n  return result as T;\n}\n\nexport async function inspectLock(): Promise<LockInspection> {\n  try {\n    const text = await fs.readFile(lockPath(), \"utf8\");\n    if (text.trim().length === 0) return { status: \"unreadable\" };\n    const parsed = JSON.parse(text) as unknown;\n    return isLockFile(parsed) ? { status: \"valid\", lock: parsed } : { status: \"unreadable\" };\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return { status: \"missing\" };\n    if (error instanceof SyntaxError) return { status: \"unreadable\" };\n    throw error;\n  }\n}\n\nexport async function readLock(): Promise<LockFile | undefined> {\n  const inspection = await inspectLock();\n  return inspection.status === \"valid\" ? inspection.lock : undefined;\n}\n\nexport async function lockFileExists(): Promise<boolean> {\n  try {\n    await fs.stat(lockPath());\n    return true;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return false;\n    throw error;\n  }\n}\n\nexport function isLockGuardHeld() {\n  return lockfile.check(lockPath(), {\n    fs: LOCKFILE_FS_ADAPTER,\n    lockfilePath: `${lockPath()}.guard`,\n    realpath: false,\n    stale: LOCK_GUARD_STALE_MS,\n  });\n}\n\nexport function isStaleLock(lock: LockFile) {\n  try {\n    process.kill(lock.pid, 0);\n    return false;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ESRCH\") return true;\n    return Date.now() - Date.parse(lock.startedAt) > LOCK_STALE_MS;\n  }\n}\n\nexport async function unlock(ctx: ExtensionCommandContext, options: CommandOptions) {\n  throwIfAborted(options.signal);\n  await ensureStateDir();\n  throwIfAborted(options.signal);\n  let guard: Guard;\n  try {\n    guard = await acquireGuard();\n  } catch (error) {\n    if (!isLockHeldError(error)) throw error;\n    ctx.ui.notify((await describeHeldLock()).message, \"warning\");\n    return;\n  }\n\n  let failed = false;\n  let failure: unknown;\n  try {\n    await unlockGuarded(ctx, options);\n  } catch (error) {\n    failed = true;\n    failure = error;\n  }\n  const releaseError = await releaseGuard(guard);\n  if (releaseError && !failed) {\n    failed = true;\n    failure = releaseError;\n  }\n  if (failed) throw failure;\n}\n\nasync function unlockGuarded(ctx: ExtensionCommandContext, options: CommandOptions) {\n  throwIfAborted(options.signal);\n  let inspection = await inspectLock();\n  throwIfAborted(options.signal);\n  if (inspection.status === \"missing\") {\n    ctx.ui.notify(\"No pi-sync lock is present.\", \"info\");\n    return;\n  }\n  if (inspection.status === \"unreadable\") {\n    if (!options.stale) {\n      ctx.ui.notify(\n        \"Pi-sync lock metadata is unreadable. Use /sync unlock --stale only after verifying no sync is running.\",\n        \"warning\",\n      );\n      return;\n    }\n    inspection = await inspectLock();\n    throwIfAborted(options.signal);\n    if (inspection.status === \"unreadable\") {\n      // Legacy writers expose an empty file before writing owner metadata, so no\n      // automatic test can prove this file is abandoned. The explicit --stale\n      // flag is the user's confirmation that no legacy sync is still running.\n      throwIfAborted(options.signal);\n      await fs.rm(lockPath(), { force: true });\n      if (!options.signal?.aborted) {\n        ctx.ui.notify(\n          \"Removed unreadable pi-sync lock. No settings, files, sync state, or remote data were changed.\",\n          \"info\",\n        );\n      }\n      return;\n    }\n    if (inspection.status === \"missing\") {\n      ctx.ui.notify(\"No pi-sync lock is present.\", \"info\");\n      return;\n    }\n  }\n  if (!isStaleLock(inspection.lock)) {\n    ctx.ui.notify(\"Lock owner is still live; refusing to remove it.\", \"warning\");\n    return;\n  }\n  throwIfAborted(options.signal);\n  await fs.rm(lockPath(), { force: true });\n  if (!options.signal?.aborted) {\n    ctx.ui.notify(\"Removed stale pi-sync lock. No settings, files, sync state, or remote data were changed.\", \"info\");\n  }\n}\n\nfunction throwIfAborted(signal?: AbortSignal) {\n  if (!signal?.aborted) return;\n  throw signal.reason instanceof Error ? signal.reason : new DOMException(\"The operation was aborted\", \"AbortError\");\n}\n\nasync function releaseGuard(guard: Guard) {\n  try {\n    await guard.release();\n    return undefined;\n  } catch (error) {\n    return guard.isCompromised() ? undefined : error;\n  }\n}\n\nasync function acquireGuard(): Promise<Guard> {\n  let compromisedError: Error | undefined;\n  const release = await lockfile.lock(lockPath(), {\n    fs: LOCKFILE_FS_ADAPTER,\n    lockfilePath: `${lockPath()}.guard`,\n    realpath: false,\n    stale: LOCK_GUARD_STALE_MS,\n    update: LOCK_GUARD_UPDATE_MS,\n    onCompromised: (error) => {\n      compromisedError = error;\n    },\n  });\n  return {\n    release,\n    throwIfCompromised: () => {\n      if (compromisedError) throw compromisedError;\n    },\n    isCompromised: () => compromisedError !== undefined,\n  };\n}\n\nasync function describeHeldLock() {\n  const current = await readLock();\n  if (current && isStaleLock(current)) {\n    return new Error(\"pi-sync lock owner exited; retry shortly while the lock guard expires.\");\n  }\n  if (current) {\n    return new Error(\n      `Pi-sync is currently running (${current.command}, pid ${current.pid}, started ${current.startedAt}).`,\n    );\n  }\n  return new Error(\"Pi-sync is currently running (lock metadata is unreadable or still being written).\");\n}\n\nfunction isLockHeldError(error: unknown) {\n  return (error as NodeJS.ErrnoException).code === \"ELOCKED\";\n}\n\nfunction isLockFile(value: unknown): value is LockFile {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return false;\n  const lock = value as Partial<LockFile>;\n  return (\n    typeof lock.id === \"string\" &&\n    lock.id.length > 0 &&\n    Number.isInteger(lock.pid) &&\n    (lock.pid ?? 0) > 0 &&\n    (lock.pid ?? 0) <= MAX_PROCESS_ID &&\n    typeof lock.command === \"string\" &&\n    lock.command.length > 0 &&\n    typeof lock.startedAt === \"string\" &&\n    Number.isFinite(Date.parse(lock.startedAt))\n  );\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,QAAQ;AACf,OAAO,UAAU;AAUV,SAAS,sBACd,KACA,cAAc,sBAAsB,GAAG,GACvC;AACA,QAAM,iBAAiB,IAAI,eAAe;AAC1C,MAAI,OAAO,mBAAmB,WAAY,QAAO,oBAAI,IAAY;AACjE,QAAM,cAAc,eAAe,KAAK,IAAI,cAAc;AAC1D,QAAM,eAAe,cAAc,gCAAgC,aAAa,WAAW,IAAI;AAC/F,SAAO,eAAe,oBAAI,IAAI,CAAC,YAAY,CAAC,IAAI,oBAAI,IAAY;AAClE;AAEO,SAAS,qBAAqB,KAAiD,QAAsB;AAC1G,QAAM,UAAU,IAAI;AACpB,QAAM,OAAO,QAAQ,iBAAiB;AACtC,QAAM,KAAK,QAAQ,eAAe;AAClC,QAAM,MAAM,QAAQ,SAAS;AAC7B,QAAM,OAAO,SAAS;AACtB,SAAO,MAAM;AACX,mBAAe,MAAM;AACrB,QACE,IAAI,mBAAmB,WACvB,QAAQ,iBAAiB,MAAM,QAC/B,QAAQ,eAAe,MAAM,MAC7B,QAAQ,SAAS,MAAM,OACvB,SAAS,MAAM;AAEf,YAAM,IAAI,MAAM,qEAAqE;AAAA,EACzF;AACF;AAEA,eAAsB,YAAY,SAAiB,UAA2B,CAAC,GAAG,QAAsB;AACtG,iBAAe,MAAM;AACrB,QAAM,WAAW,MAAM,eAAe,SAAS,EAAE,GAAG,SAAS,OAAO,CAAC;AACrE,iBAAe,MAAM;AACrB,QAAM,kBAAkB,KAAK,KAAK,SAAS,GAAG,SAAS;AACvD,QAAM,GAAG,MAAM,iBAAiB,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAChE,iBAAe,MAAM;AACrB,QAAM,aAAa,KAAK,KAAK,iBAAiB,GAAG,SAAS,EAAE,UAAU;AACtE,QAAM,UAAU,MAAM,eAAe,QAAQ;AAC7C,iBAAe,MAAM;AACrB,QAAM,SAAS,MAAM,GAAG,KAAK,YAAY,MAAM,GAAK;AACpD,MAAI;AACF,UAAM,OAAO,UAAU,OAAO;AAC9B,UAAM,OAAO,KAAK;AAAA,EACpB,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACA,QAAM,cAAc,eAAe;AACnC,SAAO;AACT;;;AC5DA,SAAS,kBAAkB;AAC3B,OAAOA,SAAQ;AAEf,OAAO,cAAc;AAOrB,IAAM,gBAAgB,KAAK,KAAK;AAChC,IAAM,iBAAiB;AAUvB,eAAsB,SACpB,SACA,IACA,UAAsC,CAAC,GAC3B;AACZ,QAAM,eAAe;AACrB,QAAM,OAAiB;AAAA,IACrB,IAAI,WAAW;AAAA,IACf,KAAK,QAAQ;AAAA,IACb;AAAA,IACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC;AACA,MAAI;AACJ,MAAI;AACJ,MAAI,SAAS;AACb,MAAI;AACJ,MAAI;AACF,QAAI;AACF,cAAQ,MAAM,aAAa;AAAA,IAC7B,SAAS,OAAO;AACd,UAAI,CAAC,gBAAgB,KAAK,EAAG,OAAM;AACnC,YAAM,MAAM,iBAAiB;AAAA,IAC/B;AAEA,QAAI,aAAa,MAAM,YAAY;AACnC,QAAI,WAAW,WAAW,WAAW,YAAY,WAAW,IAAI,GAAG;AACjE,UAAI,CAAC,QAAQ,cAAc;AACzB,cAAM,IAAI,MAAM,8BAA8B,WAAW,KAAK,GAAG,0CAA0C;AAAA,MAC7G;AACA,YAAM,mBAAmB;AACzB,YAAM,YAAY,MAAM,YAAY;AACpC,UAAI,UAAU,WAAW,WAAW,UAAU,KAAK,OAAO,WAAW,KAAK,MAAM,CAAC,YAAY,UAAU,IAAI,GAAG;AAC5G,cAAM,IAAI,MAAM,mEAAmE;AAAA,MACrF;AACA,YAAMC,IAAG,GAAG,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC;AACvC,mBAAa,EAAE,QAAQ,UAAU;AAAA,IACnC;AACA,QAAI,WAAW,WAAW,SAAS;AACjC,YAAM,IAAI;AAAA,QACR,+BAA+B,WAAW,KAAK,OAAO,SAAS,WAAW,KAAK,GAAG,aAAa,WAAW,KAAK,SAAS;AAAA,MAC1H;AAAA,IACF;AACA,QAAI,WAAW,WAAW,cAAc;AACtC,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAMA,IAAG,UAAU,SAAS,GAAG,KAAK,UAAU,MAAM,MAAM,GAAI,GAAG,EAAE,MAAM,KAAK,CAAC;AAC/E,UAAM,mBAAmB;AACzB,aAAS,MAAM,GAAG;AAClB,UAAM,mBAAmB;AAAA,EAC3B,SAAS,OAAO;AACd,aAAS;AACT,cAAU;AAAA,EACZ;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,SAAS;AAC/B,QAAI,SAAS,OAAO,KAAK,GAAI,OAAMA,IAAG,GAAG,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC;AAAA,EACtE,SAAS,OAAO;AACd,QAAI,CAAC,QAAQ;AACX,eAAS;AACT,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,MAAI,OAAO;AACT,UAAM,eAAe,MAAM,aAAa,KAAK;AAC7C,QAAI,gBAAgB,CAAC,QAAQ;AAC3B,eAAS;AACT,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,MAAI,OAAQ,OAAM;AAClB,SAAO;AACT;AAEA,eAAsB,cAAuC;AAC3D,MAAI;AACF,UAAM,OAAO,MAAMA,IAAG,SAAS,SAAS,GAAG,MAAM;AACjD,QAAI,KAAK,KAAK,EAAE,WAAW,EAAG,QAAO,EAAE,QAAQ,aAAa;AAC5D,UAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,WAAO,WAAW,MAAM,IAAI,EAAE,QAAQ,SAAS,MAAM,OAAO,IAAI,EAAE,QAAQ,aAAa;AAAA,EACzF,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO,EAAE,QAAQ,UAAU;AACnF,QAAI,iBAAiB,YAAa,QAAO,EAAE,QAAQ,aAAa;AAChE,UAAM;AAAA,EACR;AACF;AAEA,eAAsB,WAA0C;AAC9D,QAAM,aAAa,MAAM,YAAY;AACrC,SAAO,WAAW,WAAW,UAAU,WAAW,OAAO;AAC3D;AAYO,SAAS,kBAAkB;AAChC,SAAO,SAAS,MAAM,SAAS,GAAG;AAAA,IAChC,IAAI;AAAA,IACJ,cAAc,GAAG,SAAS,CAAC;AAAA,IAC3B,UAAU;AAAA,IACV,OAAO;AAAA,EACT,CAAC;AACH;AAEO,SAAS,YAAY,MAAgB;AAC1C,MAAI;AACF,YAAQ,KAAK,KAAK,KAAK,CAAC;AACxB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,QAAS,QAAO;AAC9D,WAAO,KAAK,IAAI,IAAI,KAAK,MAAM,KAAK,SAAS,IAAI;AAAA,EACnD;AACF;AAEA,eAAsB,OAAO,KAA8B,SAAyB;AAClF,EAAAC,gBAAe,QAAQ,MAAM;AAC7B,QAAM,eAAe;AACrB,EAAAA,gBAAe,QAAQ,MAAM;AAC7B,MAAI;AACJ,MAAI;AACF,YAAQ,MAAM,aAAa;AAAA,EAC7B,SAAS,OAAO;AACd,QAAI,CAAC,gBAAgB,KAAK,EAAG,OAAM;AACnC,QAAI,GAAG,QAAQ,MAAM,iBAAiB,GAAG,SAAS,SAAS;AAC3D;AAAA,EACF;AAEA,MAAI,SAAS;AACb,MAAI;AACJ,MAAI;AACF,UAAM,cAAc,KAAK,OAAO;AAAA,EAClC,SAAS,OAAO;AACd,aAAS;AACT,cAAU;AAAA,EACZ;AACA,QAAM,eAAe,MAAM,aAAa,KAAK;AAC7C,MAAI,gBAAgB,CAAC,QAAQ;AAC3B,aAAS;AACT,cAAU;AAAA,EACZ;AACA,MAAI,OAAQ,OAAM;AACpB;AAEA,eAAe,cAAc,KAA8B,SAAyB;AAClF,EAAAA,gBAAe,QAAQ,MAAM;AAC7B,MAAI,aAAa,MAAM,YAAY;AACnC,EAAAA,gBAAe,QAAQ,MAAM;AAC7B,MAAI,WAAW,WAAW,WAAW;AACnC,QAAI,GAAG,OAAO,+BAA+B,MAAM;AACnD;AAAA,EACF;AACA,MAAI,WAAW,WAAW,cAAc;AACtC,QAAI,CAAC,QAAQ,OAAO;AAClB,UAAI,GAAG;AAAA,QACL;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AACA,iBAAa,MAAM,YAAY;AAC/B,IAAAA,gBAAe,QAAQ,MAAM;AAC7B,QAAI,WAAW,WAAW,cAAc;AAItC,MAAAA,gBAAe,QAAQ,MAAM;AAC7B,YAAMC,IAAG,GAAG,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC;AACvC,UAAI,CAAC,QAAQ,QAAQ,SAAS;AAC5B,YAAI,GAAG;AAAA,UACL;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA;AAAA,IACF;AACA,QAAI,WAAW,WAAW,WAAW;AACnC,UAAI,GAAG,OAAO,+BAA+B,MAAM;AACnD;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,YAAY,WAAW,IAAI,GAAG;AACjC,QAAI,GAAG,OAAO,oDAAoD,SAAS;AAC3E;AAAA,EACF;AACA,EAAAD,gBAAe,QAAQ,MAAM;AAC7B,QAAMC,IAAG,GAAG,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC;AACvC,MAAI,CAAC,QAAQ,QAAQ,SAAS;AAC5B,QAAI,GAAG,OAAO,4FAA4F,MAAM;AAAA,EAClH;AACF;AAEA,SAASD,gBAAe,QAAsB;AAC5C,MAAI,CAAC,QAAQ,QAAS;AACtB,QAAM,OAAO,kBAAkB,QAAQ,OAAO,SAAS,IAAI,aAAa,6BAA6B,YAAY;AACnH;AAEA,eAAe,aAAa,OAAc;AACxC,MAAI;AACF,UAAM,MAAM,QAAQ;AACpB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,WAAO,MAAM,cAAc,IAAI,SAAY;AAAA,EAC7C;AACF;AAEA,eAAe,eAA+B;AAC5C,MAAI;AACJ,QAAM,UAAU,MAAM,SAAS,KAAK,SAAS,GAAG;AAAA,IAC9C,IAAI;AAAA,IACJ,cAAc,GAAG,SAAS,CAAC;AAAA,IAC3B,UAAU;AAAA,IACV,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,eAAe,CAAC,UAAU;AACxB,yBAAmB;AAAA,IACrB;AAAA,EACF,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA,oBAAoB,MAAM;AACxB,UAAI,iBAAkB,OAAM;AAAA,IAC9B;AAAA,IACA,eAAe,MAAM,qBAAqB;AAAA,EAC5C;AACF;AAEA,eAAe,mBAAmB;AAChC,QAAM,UAAU,MAAM,SAAS;AAC/B,MAAI,WAAW,YAAY,OAAO,GAAG;AACnC,WAAO,IAAI,MAAM,wEAAwE;AAAA,EAC3F;AACA,MAAI,SAAS;AACX,WAAO,IAAI;AAAA,MACT,iCAAiC,QAAQ,OAAO,SAAS,QAAQ,GAAG,aAAa,QAAQ,SAAS;AAAA,IACpG;AAAA,EACF;AACA,SAAO,IAAI,MAAM,oFAAoF;AACvG;AAEA,SAAS,gBAAgB,OAAgB;AACvC,SAAQ,MAAgC,SAAS;AACnD;AAEA,SAAS,WAAW,OAAmC;AACrD,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,QAAM,OAAO;AACb,SACE,OAAO,KAAK,OAAO,YACnB,KAAK,GAAG,SAAS,KACjB,OAAO,UAAU,KAAK,GAAG,MACxB,KAAK,OAAO,KAAK,MACjB,KAAK,OAAO,MAAM,kBACnB,OAAO,KAAK,YAAY,YACxB,KAAK,QAAQ,SAAS,KACtB,OAAO,KAAK,cAAc,YAC1B,OAAO,SAAS,KAAK,MAAM,KAAK,SAAS,CAAC;AAE9C;",
+  "names": ["fs", "fs", "throwIfAborted", "fs"]
+}

package/dist/chunks/chunk-ORQRHEEO.ts

@@ -0,0 +1,362 @@
+// @generated by scripts/build-runtime.mjs; do not edit.
+// @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
+import {
+  fileHashMap,
+  sameHashes
+} from "./chunk-BDB4IDM3.ts";
+import {
+  mergePathIdentity,
+  planFileMerge
+} from "./chunk-76NB4R7U.ts";
+import {
+  statePathForConfig,
+  syncStateFingerprint
+} from "./chunk-4QVPTIZB.ts";
+import {
+  portableSnapshot,
+  sameLocalFields,
+  validatePortableSnapshot,
+  validateSnapshotFieldPolicy
+} from "./chunk-A6HU4ERM.ts";
+import {
+  readJsonIfExists,
+  syncDirectory,
+  writeJson
+} from "./chunk-HUZ5CR4W.ts";
+
+// src/sync/conflict-artifacts.ts
+import { createHash, randomUUID as randomUUID2 } from "node:crypto";
+import fs2 from "node:fs/promises";
+import path2 from "node:path";
+
+// src/sync/conflict-groups.ts
+function conflictGroups(plan, config) {
+  const paths = plan.decisions.map((item) => item.path);
+  const parents = paths.map((_, index) => index);
+  const ranks = paths.map(() => 0);
+  const find = (index) => {
+    while (parents[index] !== index) {
+      parents[index] = parents[parents[index] ?? index] ?? index;
+      index = parents[index] ?? index;
+    }
+    return index;
+  };
+  const join = (left, right) => {
+    let a = find(left);
+    let b = find(right);
+    if (a === b) return;
+    if ((ranks[a] ?? 0) < (ranks[b] ?? 0)) [a, b] = [b, a];
+    parents[b] = a;
+    if (ranks[a] === ranks[b]) ranks[a] = (ranks[a] ?? 0) + 1;
+  };
+  const identities = paths.map(mergePathIdentity);
+  const byIdentity = /* @__PURE__ */ new Map();
+  const byPath = new Map(paths.map((value, index) => [value, index]));
+  identities.forEach((value, index) => {
+    const previous = byIdentity.get(value);
+    if (previous !== void 0) join(index, previous);
+    else byIdentity.set(value, index);
+  });
+  const includes = new Set(
+    config.include.filter((value) => !["settings.json", "AGENTS.md", "sessions"].includes(value)).map(mergePathIdentity)
+  );
+  const buckets = /* @__PURE__ */ new Map();
+  const bucket = (key, index) => {
+    const previous = buckets.get(key);
+    if (previous === void 0) buckets.set(key, index);
+    else join(index, previous);
+  };
+  paths.forEach((value, index) => {
+    const root = value.split("/")[0] ?? "";
+    if (["extensions", "themes", "skills", "prompts"].includes(root)) bucket(`resource:${root}`, index);
+    const segments = (identities[index] ?? "").split("/");
+    let ancestor = "";
+    for (let length = 0; length < segments.length - 1; length++) {
+      ancestor = ancestor ? `${ancestor}/${segments[length]}` : segments[length] ?? "";
+      const parent = byIdentity.get(ancestor);
+      if (parent !== void 0) join(index, parent);
+      if (includes.has(ancestor)) bucket(`include:${ancestor}`, index);
+    }
+  });
+  const groups = /* @__PURE__ */ new Map();
+  for (const conflict of plan.conflicts) {
+    const index = byPath.get(conflict.path);
+    if (index === void 0) throw new Error("Conflict is missing from managed decisions.");
+    const key = find(index);
+    const group = groups.get(key) ?? { paths: [], reasons: [] };
+    if (!group.reasons.includes(conflict.reason)) group.reasons.push(conflict.reason);
+    groups.set(key, group);
+  }
+  paths.forEach((value, index) => {
+    groups.get(find(index))?.paths.push(value);
+  });
+  return [...groups.values()].map((group) => ({ ...group, paths: group.paths.sort() }));
+}
+
+// src/sync/merge-journal.ts
+import { randomUUID } from "node:crypto";
+import fs from "node:fs/promises";
+import path from "node:path";
+function mergeJournalIdentity(config, backendIdentity) {
+  return JSON.stringify([config.setupName, backendIdentity, [...config.include].sort(), config.localFields ?? null]);
+}
+function mergeJournalPath(config) {
+  return `${statePathForConfig(config)}.merge-journal.json`;
+}
+async function readMergeJournal(config) {
+  let journal;
+  try {
+    const stat = await fs.lstat(mergeJournalPath(config));
+    if (!stat.isFile() || stat.size > 384 * 1024 * 1024) throw new Error("Unsafe or oversized journal.");
+    journal = await readJsonIfExists(mergeJournalPath(config));
+  } catch (error) {
+    if (error.code === "ENOENT") return;
+    throw new Error("Cannot read the private merge journal; preserve it and review recovery.");
+  }
+  if (!journal) return;
+  if (journal.version !== 1 || typeof journal.identity !== "string" || typeof journal.backup !== "string" || typeof journal.stateIdentity !== "string" || journal.applyOnly !== void 0 && (journal.applyOnly !== true || !journal.committedHead || journal.committedHead.revision !== journal.expectedHead?.revision || journal.committedHead.snapshotId !== journal.expectedHead?.snapshotId || journal.upload?.id !== journal.expectedHead?.snapshotId) || journal.sessionRoot !== void 0 && (typeof journal.sessionRoot !== "string" || !path.isAbsolute(journal.sessionRoot) || path.resolve(journal.sessionRoot) !== journal.sessionRoot) || journal.warnings !== void 0 && (!Array.isArray(journal.warnings) || journal.warnings.length > 64 || journal.warnings.some((item) => typeof item !== "string")) || !journal.expectedHead || typeof journal.expectedHead.revision !== "string" || !journal.before || !journal.after || !journal.upload || !Array.isArray(journal.before.files) || !Array.isArray(journal.after.files) || !Array.isArray(journal.upload.files))
+    throw new Error("Unsupported or damaged merge journal; preserve it and review recovery before syncing.");
+  try {
+    const pinnedPaths = new Set(journal.progress?.groups.flatMap((group) => group.paths) ?? []);
+    for (const snapshot of [
+      journal.before,
+      journal.after,
+      journal.upload,
+      ...journal.accepted ? [journal.accepted] : []
+    ]) {
+      validateSnapshotFieldPolicy(snapshot);
+      if (snapshot.version !== 1 && snapshot.version !== 2 && snapshot.version !== 3 || typeof snapshot.id !== "string" || typeof snapshot.profile !== "string" || snapshot.files.length > 16384 || snapshot.files.reduce(
+        (bytes, file) => bytes + (typeof file?.contentBase64 === "string" ? file.contentBase64.length * 0.75 : Infinity),
+        0
+      ) > 64 * 1024 * 1024)
+        throw new Error("Invalid journal input.");
+      const plan = planFileMerge({ baseline: {}, local: snapshot.files, remote: [], selectionCompatible: true });
+      if (plan.kind !== "planned" || plan.conflicts.some((conflict) => conflict.reason !== "path-collision" || !pinnedPaths.has(conflict.path)))
+        throw new Error("Invalid journal collision group.");
+    }
+    validatePortableSnapshot(journal.upload);
+    if ((journal.upload.version === 2 || journal.upload.version === 3) && !journal.accepted)
+      throw new Error("Portable merge journal requires an explicit accepted projection.");
+    if (journal.accepted) validatePortableSnapshot(journal.accepted);
+  } catch {
+    throw new Error("Invalid merge journal paths, metadata, or bytes; preserve evidence for review.");
+  }
+  try {
+    if (journal.accepted && (!sameLocalFields(journal.accepted.localFields, journal.upload.localFields) || !sameHashes(
+      fileHashMap(portableSnapshot(journal.after, journal.upload.localFields)),
+      fileHashMap(portableSnapshot(journal.accepted, journal.upload.localFields))
+    )))
+      throw new Error("Projection mismatch.");
+  } catch {
+    throw new Error("Invalid accepted merge projection; preserve journal evidence.");
+  }
+  if (journal.progress) {
+    const known = /* @__PURE__ */ new Set([
+      ...Object.keys(journal.progress.previous?.lastFileHashes ?? {}),
+      ...[...journal.before.files, ...journal.after.files, ...journal.upload.files].map((file) => file.path)
+    ]);
+    const progress = journal.progress;
+    if (!config.partialSync || !progress.previous || syncStateFingerprint(progress.previous) !== journal.stateIdentity || !Array.isArray(progress.groups) || progress.groups.length > 16384 || progress.groups.some(
+      (group) => !Array.isArray(group.paths) || !group.paths.length || group.paths.length > 16384 || group.paths.some((filePath) => !known.has(filePath)) || !/^[a-f0-9-]{36}$/u.test(group.artifact)
+    ))
+      throw new Error("Invalid partial acceptance metadata; preserve journal evidence.");
+  }
+  if (journal.progress) {
+    const before = fileHashMap(journal.before);
+    const after = fileHashMap(journal.after);
+    const { readConflictArtifact: readConflictArtifact2 } = await import("./conflict-artifacts-BB2FZMIE.ts");
+    const backendIdentity = JSON.parse(journal.identity)[1];
+    if (typeof backendIdentity !== "string") throw new Error("Invalid partial backend identity.");
+    const byArtifact = /* @__PURE__ */ new Map();
+    for (const group of journal.progress.groups) {
+      const groups = byArtifact.get(group.artifact) ?? [];
+      groups.push(group);
+      byArtifact.set(group.artifact, groups);
+    }
+    for (const [token, groups] of byArtifact) {
+      const artifact = await readConflictArtifact2(config, backendIdentity, token);
+      const retainedGroups = new Set(artifact.groups.map((group) => JSON.stringify(group.paths)));
+      const remote = fileHashMap(artifact.remote);
+      const upload = fileHashMap(journal.upload);
+      for (const group of groups) {
+        if (!retainedGroups.has(JSON.stringify(group.paths)))
+          throw new Error("Partial group does not match retained artifact evidence.");
+        for (const filePath of group.paths)
+          if (before[filePath] !== after[filePath] || remote[filePath] !== upload[filePath] || journal.progress.previous.lastFileHashes[filePath] !== artifact.state.lastFileHashes[filePath])
+            throw new Error("Withheld version changed in journal; preserve evidence.");
+      }
+    }
+  }
+  return journal;
+}
+async function writeMergeJournal(config, journal) {
+  await writeJson(mergeJournalPath(config), journal, { maxBytes: 384 * 1024 * 1024 });
+}
+async function clearMergeJournal(config) {
+  await fs.rm(mergeJournalPath(config), { force: true });
+  await syncDirectory(path.dirname(mergeJournalPath(config)));
+}
+async function retireMergeJournal(config) {
+  if (!await readMergeJournal(config)) return;
+  const file = mergeJournalPath(config);
+  await fs.rename(file, `${file}.${randomUUID()}.resolved`);
+  await syncDirectory(path.dirname(file));
+}
+async function requireNoMergeJournal(config, options = {}) {
+  const journal = await readMergeJournal(config);
+  if (options.force || !journal) return;
+  if (journal) {
+    throw new Error(
+      "A merged transfer needs recovery. Run /sync sync to reconcile it. If newer local edits or remote revisions prevent recovery, review /sync diff and explicitly choose push --force or pull --force; the selected directional result will archive the old journal, not restore old bytes. Keep its backup; do not downgrade while recovery is pending."
+    );
+  }
+}
+
+// src/sync/conflict-artifacts.ts
+var LIMIT = 192 * 1024 * 1024;
+function conflictArtifactFingerprint(artifact) {
+  return createHash("sha256").update(JSON.stringify(artifact)).digest("hex");
+}
+function conflictDirectory(config) {
+  return `${statePathForConfig(config)}.conflicts`;
+}
+async function directory(config, create = false) {
+  const target = conflictDirectory(config);
+  if (create) await fs2.mkdir(target, { recursive: true, mode: 448 });
+  const stat = await fs2.lstat(target);
+  if (!stat.isDirectory() || stat.isSymbolicLink() || process.platform !== "win32" && (stat.mode & 63) !== 0)
+    throw new Error("Unsafe private conflict directory.");
+  return target;
+}
+function tokenPath(config, token) {
+  if (!/^[a-f0-9-]{36}$/u.test(token)) throw new Error("Invalid conflict token.");
+  return path2.join(conflictDirectory(config), `${token}.json`);
+}
+async function saveConflictArtifact(config, backend, artifact, validate, onCreated) {
+  validate();
+  const identity = mergeJournalIdentity(config, backend);
+  const local = Object.fromEntries(artifact.local.files.map((file) => [file.path, file.sha256]));
+  const remote = Object.fromEntries(artifact.remote.files.map((file) => [file.path, file.sha256]));
+  const fingerprint = createHash("sha256").update(
+    JSON.stringify([
+      identity,
+      artifact.groups.map(
+        (group) => group.paths.map((filePath) => [
+          filePath,
+          artifact.state.lastFileHashes[filePath] ?? null,
+          local[filePath] ?? null,
+          remote[filePath] ?? null
+        ])
+      )
+    ])
+  ).digest("hex").slice(0, 32);
+  const token = `${fingerprint.slice(0, 8)}-${fingerprint.slice(8, 12)}-${fingerprint.slice(12, 16)}-${fingerprint.slice(16, 20)}-${fingerprint.slice(20)}`;
+  await directory(config, true);
+  validate();
+  const reuse = async () => {
+    const existing = await readConflictArtifact(config, backend, token);
+    validate();
+    const oldLocal = Object.fromEntries(existing.local.files.map((file) => [file.path, file.sha256]));
+    const oldRemote = Object.fromEntries(existing.remote.files.map((file) => [file.path, file.sha256]));
+    if (JSON.stringify(existing.groups.map((group) => group.paths)) !== JSON.stringify(artifact.groups.map((group) => group.paths)) || artifact.groups.some(
+      (group) => group.paths.some(
+        (filePath) => existing.state.lastFileHashes[filePath] !== artifact.state.lastFileHashes[filePath] || oldLocal[filePath] !== local[filePath] || oldRemote[filePath] !== remote[filePath]
+      )
+    ))
+      throw new Error("Conflict identity does not match retained immutable evidence.");
+    return token;
+  };
+  const target = tokenPath(config, token);
+  try {
+    await fs2.lstat(target);
+    validate();
+    return await reuse();
+  } catch (error) {
+    if (error.code !== "ENOENT") throw error;
+  }
+  const temporary = `${target}.${randomUUID2()}.pending`;
+  const candidate = { version: 1, identity, ...artifact };
+  try {
+    await writeJson(temporary, candidate, { maxBytes: LIMIT });
+    validate();
+    const stat = await fs2.lstat(temporary);
+    validate();
+    try {
+      await fs2.link(temporary, target);
+    } catch (error) {
+      if (error.code !== "EEXIST") throw error;
+      validate();
+      return await reuse();
+    }
+    onCreated?.({
+      token,
+      target,
+      dev: stat.dev,
+      ino: stat.ino,
+      size: stat.size,
+      fingerprint: conflictArtifactFingerprint(candidate)
+    });
+    validate();
+    await syncDirectory(path2.dirname(target));
+    validate();
+    await syncDirectory(path2.dirname(conflictDirectory(config)));
+    validate();
+    return token;
+  } finally {
+    await fs2.rm(temporary, { force: true });
+  }
+}
+async function readConflictArtifact(config, backend, token) {
+  try {
+    await directory(config);
+    const target = tokenPath(config, token);
+    const stat = await fs2.lstat(target);
+    if (!stat.isFile() || stat.size > LIMIT || process.platform !== "win32" && (stat.mode & 63) !== 0)
+      throw new Error("Unsafe conflict artifact.");
+    const artifact = JSON.parse(await fs2.readFile(target, "utf8"));
+    if (artifact.version !== 1 || artifact.identity !== mergeJournalIdentity(config, backend) || !Array.isArray(artifact.groups) || artifact.groups.length > 16384 || artifact.groups.some(
+      (group) => !Array.isArray(group.paths) || !group.paths.length || group.paths.length > 16384 || !Array.isArray(group.reasons)
+    ))
+      throw new Error("Invalid conflict artifact.");
+    const plan = planFileMerge({
+      baseline: artifact.state.lastFileHashes,
+      local: artifact.local.files,
+      remote: artifact.remote.files,
+      selectionCompatible: true
+    });
+    if (plan.kind !== "planned") throw new Error("Invalid conflict versions.");
+    const known = new Set(plan.decisions.map((item) => item.path));
+    if (artifact.groups.some((group) => group.paths.some((value) => !known.has(value))))
+      throw new Error("Invalid conflict paths.");
+    if (artifact.ancestors) {
+      if (!Array.isArray(artifact.ancestors) || artifact.ancestors.length > 16384 || artifact.ancestors.some((file) => artifact.state.lastFileHashes[file.path] !== file.sha256))
+        throw new Error("Invalid artifact ancestor.");
+      const basePlan = planFileMerge({
+        baseline: {},
+        local: artifact.ancestors,
+        remote: [],
+        selectionCompatible: true
+      });
+      if (basePlan.kind !== "planned" || basePlan.conflicts.length) throw new Error("Invalid ancestor bytes.");
+    }
+    syncStateFingerprint(artifact.state);
+    return artifact;
+  } catch {
+    throw new Error("Cannot verify private conflict artifact; preserve evidence and review a fresh sync.");
+  }
+}
+
+export {
+  conflictGroups,
+  mergeJournalIdentity,
+  readMergeJournal,
+  writeMergeJournal,
+  clearMergeJournal,
+  retireMergeJournal,
+  requireNoMergeJournal,
+  conflictArtifactFingerprint,
+  conflictDirectory,
+  saveConflictArtifact,
+  readConflictArtifact
+};
+//# sourceMappingURL=chunk-ORQRHEEO.ts.map