@narumitw/pi-sync 0.54.3 → 0.56.0

package/dist/chunks/chunk-AAEEHR7H.ts.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/state/lock.ts"],
+  "sourcesContent": ["import { randomUUID } from \"node:crypto\";\nimport fs from \"node:fs/promises\";\nimport type { ExtensionCommandContext } from \"@earendil-works/pi-coding-agent\";\nimport lockfile from \"proper-lockfile\";\nimport type { CommandOptions } from \"../commands/command-types.js\";\nimport { throwIfAborted } from \"../sync/signals.js\";\nimport { LOCK_GUARD_STALE_MS, LOCK_GUARD_UPDATE_MS } from \"./lock-policy.js\";\nimport { LOCKFILE_FS_ADAPTER } from \"./lockfile-fs.js\";\nimport type { LockFile } from \"./state-types.js\";\nimport { ensureStateDir, lockPath } from \"./sync-state-store.js\";\n\nconst LOCK_STALE_MS = 30 * 60 * 1000;\nconst MAX_PROCESS_ID = 2_147_483_647;\n\ninterface Guard {\n  release: () => Promise<void>;\n  throwIfCompromised: () => void;\n  isCompromised: () => boolean;\n}\n\nexport type LockInspection = { status: \"missing\" } | { status: \"unreadable\" } | { status: \"valid\"; lock: LockFile };\n\nexport async function withLock<T>(\n  command: string,\n  fn: () => Promise<T>,\n  options: { reclaimStale?: boolean } = {},\n): Promise<T> {\n  await ensureStateDir();\n  const lock: LockFile = {\n    id: randomUUID(),\n    pid: process.pid,\n    command,\n    startedAt: new Date().toISOString(),\n  };\n  let guard: Guard | undefined;\n  let result: T | undefined;\n  let failed = false;\n  let failure: unknown;\n  try {\n    try {\n      guard = await acquireGuard();\n    } catch (error) {\n      if (!isLockHeldError(error)) throw error;\n      throw await describeHeldLock();\n    }\n\n    let inspection = await inspectLock();\n    if (inspection.status === \"valid\" && isStaleLock(inspection.lock)) {\n      if (!options.reclaimStale) {\n        throw new Error(`pi-sync lock is stale (pid ${inspection.lock.pid}). Run /sync unlock --stale, then retry.`);\n      }\n      guard.throwIfCompromised();\n      const rechecked = await inspectLock();\n      if (rechecked.status !== \"valid\" || rechecked.lock.id !== inspection.lock.id || !isStaleLock(rechecked.lock)) {\n        throw new Error(\"pi-sync lock changed while preparing transaction recovery; retry.\");\n      }\n      await fs.rm(lockPath(), { force: true });\n      inspection = { status: \"missing\" };\n    }\n    if (inspection.status === \"valid\") {\n      throw Object.assign(\n        new Error(\n          `pi-sync is already running (${inspection.lock.command}, pid ${inspection.lock.pid}, started ${inspection.lock.startedAt}).`,\n        ),\n        { code: \"ELOCKED\" },\n      );\n    }\n    if (inspection.status === \"unreadable\") {\n      throw new Error(\n        \"pi-sync lock metadata is unreadable. Run /sync unlock --stale after verifying no sync is running.\",\n      );\n    }\n\n    await fs.writeFile(lockPath(), JSON.stringify(lock, null, \"\\t\"), { flag: \"wx\" });\n    guard.throwIfCompromised();\n    result = await fn();\n    guard.throwIfCompromised();\n  } catch (error) {\n    failed = true;\n    failure = error;\n  }\n\n  try {\n    const current = await readLock();\n    if (current?.id === lock.id) await fs.rm(lockPath(), { force: true });\n  } catch (error) {\n    if (!failed) {\n      failed = true;\n      failure = error;\n    }\n  }\n  if (guard) {\n    const releaseError = await releaseGuard(guard);\n    if (releaseError && !failed) {\n      failed = true;\n      failure = releaseError;\n    }\n  }\n  if (failed) throw failure;\n  return result as T;\n}\n\nexport async function inspectLock(): Promise<LockInspection> {\n  try {\n    const text = await fs.readFile(lockPath(), \"utf8\");\n    if (text.trim().length === 0) return { status: \"unreadable\" };\n    const parsed = JSON.parse(text) as unknown;\n    return isLockFile(parsed) ? { status: \"valid\", lock: parsed } : { status: \"unreadable\" };\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return { status: \"missing\" };\n    if (error instanceof SyntaxError) return { status: \"unreadable\" };\n    throw error;\n  }\n}\n\nexport async function readLock(): Promise<LockFile | undefined> {\n  const inspection = await inspectLock();\n  return inspection.status === \"valid\" ? inspection.lock : undefined;\n}\n\nexport async function lockFileExists(): Promise<boolean> {\n  try {\n    await fs.stat(lockPath());\n    return true;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return false;\n    throw error;\n  }\n}\n\nexport function isLockGuardHeld() {\n  return lockfile.check(lockPath(), {\n    fs: LOCKFILE_FS_ADAPTER,\n    lockfilePath: `${lockPath()}.guard`,\n    realpath: false,\n    stale: LOCK_GUARD_STALE_MS,\n  });\n}\n\nexport function isStaleLock(lock: LockFile) {\n  try {\n    process.kill(lock.pid, 0);\n    return false;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ESRCH\") return true;\n    return Date.now() - Date.parse(lock.startedAt) > LOCK_STALE_MS;\n  }\n}\n\nexport async function unlock(ctx: ExtensionCommandContext, options: CommandOptions) {\n  throwIfAborted(options.signal);\n  await ensureStateDir();\n  throwIfAborted(options.signal);\n  let guard: Guard;\n  try {\n    guard = await acquireGuard();\n  } catch (error) {\n    if (!isLockHeldError(error)) throw error;\n    ctx.ui.notify((await describeHeldLock()).message, \"warning\");\n    return;\n  }\n\n  let failed = false;\n  let failure: unknown;\n  try {\n    await unlockGuarded(ctx, options);\n  } catch (error) {\n    failed = true;\n    failure = error;\n  }\n  const releaseError = await releaseGuard(guard);\n  if (releaseError && !failed) {\n    failed = true;\n    failure = releaseError;\n  }\n  if (failed) throw failure;\n}\n\nasync function unlockGuarded(ctx: ExtensionCommandContext, options: CommandOptions) {\n  throwIfAborted(options.signal);\n  let inspection = await inspectLock();\n  throwIfAborted(options.signal);\n  if (inspection.status === \"missing\") {\n    ctx.ui.notify(\"No pi-sync lock is present.\", \"info\");\n    return;\n  }\n  if (inspection.status === \"unreadable\") {\n    if (!options.stale) {\n      ctx.ui.notify(\n        \"Pi-sync lock metadata is unreadable. Use /sync unlock --stale only after verifying no sync is running.\",\n        \"warning\",\n      );\n      return;\n    }\n    inspection = await inspectLock();\n    throwIfAborted(options.signal);\n    if (inspection.status === \"unreadable\") {\n      // Legacy writers expose an empty file before writing owner metadata, so no\n      // automatic test can prove this file is abandoned. The explicit --stale\n      // flag is the user's confirmation that no legacy sync is still running.\n      throwIfAborted(options.signal);\n      await fs.rm(lockPath(), { force: true });\n      if (!options.signal?.aborted) {\n        ctx.ui.notify(\n          \"Removed unreadable pi-sync lock. No settings, files, sync state, or remote data were changed.\",\n          \"info\",\n        );\n      }\n      return;\n    }\n    if (inspection.status === \"missing\") {\n      ctx.ui.notify(\"No pi-sync lock is present.\", \"info\");\n      return;\n    }\n  }\n  if (!isStaleLock(inspection.lock)) {\n    ctx.ui.notify(\"Lock owner is still live; refusing to remove it.\", \"warning\");\n    return;\n  }\n  throwIfAborted(options.signal);\n  await fs.rm(lockPath(), { force: true });\n  if (!options.signal?.aborted) {\n    ctx.ui.notify(\"Removed stale pi-sync lock. No settings, files, sync state, or remote data were changed.\", \"info\");\n  }\n}\n\nasync function releaseGuard(guard: Guard) {\n  try {\n    await guard.release();\n    return undefined;\n  } catch (error) {\n    return guard.isCompromised() ? undefined : error;\n  }\n}\n\nasync function acquireGuard(): Promise<Guard> {\n  let compromisedError: Error | undefined;\n  const release = await lockfile.lock(lockPath(), {\n    fs: LOCKFILE_FS_ADAPTER,\n    lockfilePath: `${lockPath()}.guard`,\n    realpath: false,\n    stale: LOCK_GUARD_STALE_MS,\n    update: LOCK_GUARD_UPDATE_MS,\n    onCompromised: (error) => {\n      compromisedError = error;\n    },\n  });\n  return {\n    release,\n    throwIfCompromised: () => {\n      if (compromisedError) throw compromisedError;\n    },\n    isCompromised: () => compromisedError !== undefined,\n  };\n}\n\nasync function describeHeldLock() {\n  const current = await readLock();\n  if (current && isStaleLock(current)) {\n    return new Error(\"pi-sync lock owner exited; retry shortly while the lock guard expires.\");\n  }\n  if (current) {\n    return Object.assign(\n      new Error(`Pi-sync is currently running (${current.command}, pid ${current.pid}, started ${current.startedAt}).`),\n      { code: \"ELOCKED\" },\n    );\n  }\n  return Object.assign(\n    new Error(\"Pi-sync is currently running (lock metadata is unreadable or still being written).\"),\n    { code: \"ELOCKED\" },\n  );\n}\n\nfunction isLockHeldError(error: unknown) {\n  return (error as NodeJS.ErrnoException).code === \"ELOCKED\";\n}\n\nfunction isLockFile(value: unknown): value is LockFile {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return false;\n  const lock = value as Partial<LockFile>;\n  return (\n    typeof lock.id === \"string\" &&\n    lock.id.length > 0 &&\n    Number.isInteger(lock.pid) &&\n    (lock.pid ?? 0) > 0 &&\n    (lock.pid ?? 0) <= MAX_PROCESS_ID &&\n    typeof lock.command === \"string\" &&\n    lock.command.length > 0 &&\n    typeof lock.startedAt === \"string\" &&\n    Number.isFinite(Date.parse(lock.startedAt))\n  );\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;AAAA,SAAS,kBAAkB;AAC3B,OAAO,QAAQ;AAEf,OAAO,cAAc;AAQrB,IAAM,gBAAgB,KAAK,KAAK;AAChC,IAAM,iBAAiB;AAUvB,eAAsB,SACpB,SACA,IACA,UAAsC,CAAC,GAC3B;AACZ,QAAM,eAAe;AACrB,QAAM,OAAiB;AAAA,IACrB,IAAI,WAAW;AAAA,IACf,KAAK,QAAQ;AAAA,IACb;AAAA,IACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC;AACA,MAAI;AACJ,MAAI;AACJ,MAAI,SAAS;AACb,MAAI;AACJ,MAAI;AACF,QAAI;AACF,cAAQ,MAAM,aAAa;AAAA,IAC7B,SAAS,OAAO;AACd,UAAI,CAAC,gBAAgB,KAAK,EAAG,OAAM;AACnC,YAAM,MAAM,iBAAiB;AAAA,IAC/B;AAEA,QAAI,aAAa,MAAM,YAAY;AACnC,QAAI,WAAW,WAAW,WAAW,YAAY,WAAW,IAAI,GAAG;AACjE,UAAI,CAAC,QAAQ,cAAc;AACzB,cAAM,IAAI,MAAM,8BAA8B,WAAW,KAAK,GAAG,0CAA0C;AAAA,MAC7G;AACA,YAAM,mBAAmB;AACzB,YAAM,YAAY,MAAM,YAAY;AACpC,UAAI,UAAU,WAAW,WAAW,UAAU,KAAK,OAAO,WAAW,KAAK,MAAM,CAAC,YAAY,UAAU,IAAI,GAAG;AAC5G,cAAM,IAAI,MAAM,mEAAmE;AAAA,MACrF;AACA,YAAM,GAAG,GAAG,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC;AACvC,mBAAa,EAAE,QAAQ,UAAU;AAAA,IACnC;AACA,QAAI,WAAW,WAAW,SAAS;AACjC,YAAM,OAAO;AAAA,QACX,IAAI;AAAA,UACF,+BAA+B,WAAW,KAAK,OAAO,SAAS,WAAW,KAAK,GAAG,aAAa,WAAW,KAAK,SAAS;AAAA,QAC1H;AAAA,QACA,EAAE,MAAM,UAAU;AAAA,MACpB;AAAA,IACF;AACA,QAAI,WAAW,WAAW,cAAc;AACtC,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,GAAG,UAAU,SAAS,GAAG,KAAK,UAAU,MAAM,MAAM,GAAI,GAAG,EAAE,MAAM,KAAK,CAAC;AAC/E,UAAM,mBAAmB;AACzB,aAAS,MAAM,GAAG;AAClB,UAAM,mBAAmB;AAAA,EAC3B,SAAS,OAAO;AACd,aAAS;AACT,cAAU;AAAA,EACZ;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,SAAS;AAC/B,QAAI,SAAS,OAAO,KAAK,GAAI,OAAM,GAAG,GAAG,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC;AAAA,EACtE,SAAS,OAAO;AACd,QAAI,CAAC,QAAQ;AACX,eAAS;AACT,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,MAAI,OAAO;AACT,UAAM,eAAe,MAAM,aAAa,KAAK;AAC7C,QAAI,gBAAgB,CAAC,QAAQ;AAC3B,eAAS;AACT,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,MAAI,OAAQ,OAAM;AAClB,SAAO;AACT;AAEA,eAAsB,cAAuC;AAC3D,MAAI;AACF,UAAM,OAAO,MAAM,GAAG,SAAS,SAAS,GAAG,MAAM;AACjD,QAAI,KAAK,KAAK,EAAE,WAAW,EAAG,QAAO,EAAE,QAAQ,aAAa;AAC5D,UAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,WAAO,WAAW,MAAM,IAAI,EAAE,QAAQ,SAAS,MAAM,OAAO,IAAI,EAAE,QAAQ,aAAa;AAAA,EACzF,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO,EAAE,QAAQ,UAAU;AACnF,QAAI,iBAAiB,YAAa,QAAO,EAAE,QAAQ,aAAa;AAChE,UAAM;AAAA,EACR;AACF;AAEA,eAAsB,WAA0C;AAC9D,QAAM,aAAa,MAAM,YAAY;AACrC,SAAO,WAAW,WAAW,UAAU,WAAW,OAAO;AAC3D;AAYO,SAAS,kBAAkB;AAChC,SAAO,SAAS,MAAM,SAAS,GAAG;AAAA,IAChC,IAAI;AAAA,IACJ,cAAc,GAAG,SAAS,CAAC;AAAA,IAC3B,UAAU;AAAA,IACV,OAAO;AAAA,EACT,CAAC;AACH;AAEO,SAAS,YAAY,MAAgB;AAC1C,MAAI;AACF,YAAQ,KAAK,KAAK,KAAK,CAAC;AACxB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,QAAS,QAAO;AAC9D,WAAO,KAAK,IAAI,IAAI,KAAK,MAAM,KAAK,SAAS,IAAI;AAAA,EACnD;AACF;AAEA,eAAsB,OAAO,KAA8B,SAAyB;AAClF,iBAAe,QAAQ,MAAM;AAC7B,QAAM,eAAe;AACrB,iBAAe,QAAQ,MAAM;AAC7B,MAAI;AACJ,MAAI;AACF,YAAQ,MAAM,aAAa;AAAA,EAC7B,SAAS,OAAO;AACd,QAAI,CAAC,gBAAgB,KAAK,EAAG,OAAM;AACnC,QAAI,GAAG,QAAQ,MAAM,iBAAiB,GAAG,SAAS,SAAS;AAC3D;AAAA,EACF;AAEA,MAAI,SAAS;AACb,MAAI;AACJ,MAAI;AACF,UAAM,cAAc,KAAK,OAAO;AAAA,EAClC,SAAS,OAAO;AACd,aAAS;AACT,cAAU;AAAA,EACZ;AACA,QAAM,eAAe,MAAM,aAAa,KAAK;AAC7C,MAAI,gBAAgB,CAAC,QAAQ;AAC3B,aAAS;AACT,cAAU;AAAA,EACZ;AACA,MAAI,OAAQ,OAAM;AACpB;AAEA,eAAe,cAAc,KAA8B,SAAyB;AAClF,iBAAe,QAAQ,MAAM;AAC7B,MAAI,aAAa,MAAM,YAAY;AACnC,iBAAe,QAAQ,MAAM;AAC7B,MAAI,WAAW,WAAW,WAAW;AACnC,QAAI,GAAG,OAAO,+BAA+B,MAAM;AACnD;AAAA,EACF;AACA,MAAI,WAAW,WAAW,cAAc;AACtC,QAAI,CAAC,QAAQ,OAAO;AAClB,UAAI,GAAG;AAAA,QACL;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AACA,iBAAa,MAAM,YAAY;AAC/B,mBAAe,QAAQ,MAAM;AAC7B,QAAI,WAAW,WAAW,cAAc;AAItC,qBAAe,QAAQ,MAAM;AAC7B,YAAM,GAAG,GAAG,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC;AACvC,UAAI,CAAC,QAAQ,QAAQ,SAAS;AAC5B,YAAI,GAAG;AAAA,UACL;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA;AAAA,IACF;AACA,QAAI,WAAW,WAAW,WAAW;AACnC,UAAI,GAAG,OAAO,+BAA+B,MAAM;AACnD;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,YAAY,WAAW,IAAI,GAAG;AACjC,QAAI,GAAG,OAAO,oDAAoD,SAAS;AAC3E;AAAA,EACF;AACA,iBAAe,QAAQ,MAAM;AAC7B,QAAM,GAAG,GAAG,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC;AACvC,MAAI,CAAC,QAAQ,QAAQ,SAAS;AAC5B,QAAI,GAAG,OAAO,4FAA4F,MAAM;AAAA,EAClH;AACF;AAEA,eAAe,aAAa,OAAc;AACxC,MAAI;AACF,UAAM,MAAM,QAAQ;AACpB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,WAAO,MAAM,cAAc,IAAI,SAAY;AAAA,EAC7C;AACF;AAEA,eAAe,eAA+B;AAC5C,MAAI;AACJ,QAAM,UAAU,MAAM,SAAS,KAAK,SAAS,GAAG;AAAA,IAC9C,IAAI;AAAA,IACJ,cAAc,GAAG,SAAS,CAAC;AAAA,IAC3B,UAAU;AAAA,IACV,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,eAAe,CAAC,UAAU;AACxB,yBAAmB;AAAA,IACrB;AAAA,EACF,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA,oBAAoB,MAAM;AACxB,UAAI,iBAAkB,OAAM;AAAA,IAC9B;AAAA,IACA,eAAe,MAAM,qBAAqB;AAAA,EAC5C;AACF;AAEA,eAAe,mBAAmB;AAChC,QAAM,UAAU,MAAM,SAAS;AAC/B,MAAI,WAAW,YAAY,OAAO,GAAG;AACnC,WAAO,IAAI,MAAM,wEAAwE;AAAA,EAC3F;AACA,MAAI,SAAS;AACX,WAAO,OAAO;AAAA,MACZ,IAAI,MAAM,iCAAiC,QAAQ,OAAO,SAAS,QAAQ,GAAG,aAAa,QAAQ,SAAS,IAAI;AAAA,MAChH,EAAE,MAAM,UAAU;AAAA,IACpB;AAAA,EACF;AACA,SAAO,OAAO;AAAA,IACZ,IAAI,MAAM,oFAAoF;AAAA,IAC9F,EAAE,MAAM,UAAU;AAAA,EACpB;AACF;AAEA,SAAS,gBAAgB,OAAgB;AACvC,SAAQ,MAAgC,SAAS;AACnD;AAEA,SAAS,WAAW,OAAmC;AACrD,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,QAAM,OAAO;AACb,SACE,OAAO,KAAK,OAAO,YACnB,KAAK,GAAG,SAAS,KACjB,OAAO,UAAU,KAAK,GAAG,MACxB,KAAK,OAAO,KAAK,MACjB,KAAK,OAAO,MAAM,kBACnB,OAAO,KAAK,YAAY,YACxB,KAAK,QAAQ,SAAS,KACtB,OAAO,KAAK,cAAc,YAC1B,OAAO,SAAS,KAAK,MAAM,KAAK,SAAS,CAAC;AAE9C;",
+  "names": []
+}

package/dist/chunks/{chunk-R35N4CL3.ts → chunk-B4QZBDBT.ts}

@@ -6,7 +6,7 @@ import {
   syncSetupStorageReview,
   updateLocalConfig,
   validateConfigName
-} from "./chunk-KATKRR3D.ts";
+} from "./chunk-QO333NM4.ts";
 import {
   normalizeSyncInclude
 } from "./chunk-QOFMXPM5.ts";
@@ -195,4 +195,4 @@ export {
   removeSyncSetup,
   removeStorageConnection
 };
-//# sourceMappingURL=chunk-R35N4CL3.ts.map
+//# sourceMappingURL=chunk-B4QZBDBT.ts.map

package/dist/chunks/{chunk-KGE47GCZ.ts → chunk-CRKTAPSL.ts}

@@ -2,19 +2,19 @@
 // @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
 import {
   withLock
-} from "./chunk-GC3QOL6J.ts";
-import {
-  mergePathIdentity
-} from "./chunk-76NB4R7U.ts";
-import {
-  stateDir
-} from "./chunk-BVVP33U5.ts";
+} from "./chunk-AAEEHR7H.ts";
 import {
   agentDir,
   configuredSessionDir,
   expandSessionDir,
   sessionStorageRoot
 } from "./chunk-QOFMXPM5.ts";
+import {
+  mergePathIdentity
+} from "./chunk-76NB4R7U.ts";
+import {
+  stateDir
+} from "./chunk-SWRVXVFD.ts";
 import {
   assertWithinRoot,
   isDeniedPath,
@@ -1010,4 +1010,4 @@ export {
   recoverSnapshotTransactionsOnStartup,
   recoverPendingSnapshotTransactions
 };
-//# sourceMappingURL=chunk-KGE47GCZ.ts.map
+//# sourceMappingURL=chunk-CRKTAPSL.ts.map

package/dist/chunks/chunk-DT7M4VQS.ts

@@ -0,0 +1,69 @@
+// @generated by scripts/build-runtime.mjs; do not edit.
+// @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
+import {
+  SyncBackendConflictError
+} from "./chunk-YDVQYUHE.ts";
+
+// src/sync/continuous-errors.ts
+var ContinuousError = class extends Error {
+  constructor(kind, message, retryAfterMs) {
+    super(message);
+    this.kind = kind;
+    this.retryAfterMs = retryAfterMs;
+    this.name = "ContinuousError";
+  }
+  kind;
+  retryAfterMs;
+};
+function continuousFailure(error) {
+  const seen = /* @__PURE__ */ new Set();
+  for (let current = error; current && !seen.has(current) && seen.size < 8; ) {
+    seen.add(current);
+    if (current instanceof ContinuousError)
+      return {
+        kind: current.kind,
+        retry: ["transient", "contention", "stale", "budget"].includes(current.kind),
+        delay: current.retryAfterMs
+      };
+    if (current instanceof SyncBackendConflictError) return { kind: "stale", retry: true };
+    if (typeof current !== "object") break;
+    const value = current;
+    if (value.status === 401 || value.status === 403) return { kind: "authentication", retry: false };
+    if (value.status === 408 || value.status === 429 || typeof value.status === "number" && Number.isInteger(value.status) && value.status >= 500 && value.status <= 599)
+      return { kind: "transient", retry: true, delay: boundedRetryDelay(value.retryAfterMs) };
+    if (value.code === "ELOCKED") return { kind: "contention", retry: true };
+    if (value.code === "ECOMPROMISED") return { kind: "stale", retry: true };
+    if (value.name === "TimeoutError" || [
+      "ECONNRESET",
+      "ECONNREFUSED",
+      "ETIMEDOUT",
+      "ENETUNREACH",
+      "EHOSTUNREACH",
+      "ENOTFOUND",
+      "EAI_AGAIN",
+      "UND_ERR_CONNECT_TIMEOUT",
+      "UND_ERR_SOCKET"
+    ].includes(String(value.code)))
+      return { kind: "transient", retry: true };
+    if (["EACCES", "EPERM", "ENOSPC", "EROFS", "EIO"].includes(String(value.code)))
+      return { kind: "storage", retry: false };
+    current = value.cause;
+  }
+  return { kind: "unknown", retry: false };
+}
+function boundedRetryDelay(value) {
+  return typeof value === "number" && Number.isFinite(value) && value >= 0 ? Math.min(value, 3e5) : void 0;
+}
+function retryAfter(response) {
+  const value = response.headers.get("retry-after");
+  if (!value) return;
+  const seconds = Number(value);
+  return boundedRetryDelay(Number.isFinite(seconds) ? seconds * 1e3 : Date.parse(value) - Date.now());
+}
+
+export {
+  ContinuousError,
+  continuousFailure,
+  retryAfter
+};
+//# sourceMappingURL=chunk-DT7M4VQS.ts.map

package/dist/chunks/chunk-DT7M4VQS.ts.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/sync/continuous-errors.ts"],
+  "sourcesContent": ["import { SyncBackendConflictError } from \"../backends/sync-backend.js\";\n\nexport type ContinuousErrorKind =\n  | \"transient\"\n  | \"contention\"\n  | \"stale\"\n  | \"authentication\"\n  | \"storage\"\n  | \"unsafe\"\n  | \"model\"\n  | \"budget\"\n  | \"unknown\";\n\n/** Categories are safe to persist; provider messages and causes are not. */\nexport class ContinuousError extends Error {\n  constructor(\n    readonly kind: ContinuousErrorKind,\n    message: string,\n    readonly retryAfterMs?: number,\n  ) {\n    super(message);\n    this.name = \"ContinuousError\";\n  }\n}\n\nexport function continuousFailure(error: unknown): { kind: ContinuousErrorKind; retry: boolean; delay?: number } {\n  const seen = new Set<unknown>();\n  for (let current = error; current && !seen.has(current) && seen.size < 8; ) {\n    seen.add(current);\n    if (current instanceof ContinuousError)\n      return {\n        kind: current.kind,\n        retry: [\"transient\", \"contention\", \"stale\", \"budget\"].includes(current.kind),\n        delay: current.retryAfterMs,\n      };\n    if (current instanceof SyncBackendConflictError) return { kind: \"stale\", retry: true };\n    if (typeof current !== \"object\") break;\n    const value = current as {\n      status?: unknown;\n      code?: unknown;\n      name?: unknown;\n      cause?: unknown;\n      retryAfterMs?: unknown;\n    };\n    if (value.status === 401 || value.status === 403) return { kind: \"authentication\", retry: false };\n    if (\n      value.status === 408 ||\n      value.status === 429 ||\n      (typeof value.status === \"number\" && Number.isInteger(value.status) && value.status >= 500 && value.status <= 599)\n    )\n      return { kind: \"transient\", retry: true, delay: boundedRetryDelay(value.retryAfterMs) };\n    if (value.code === \"ELOCKED\") return { kind: \"contention\", retry: true };\n    if (value.code === \"ECOMPROMISED\") return { kind: \"stale\", retry: true };\n    if (\n      value.name === \"TimeoutError\" ||\n      [\n        \"ECONNRESET\",\n        \"ECONNREFUSED\",\n        \"ETIMEDOUT\",\n        \"ENETUNREACH\",\n        \"EHOSTUNREACH\",\n        \"ENOTFOUND\",\n        \"EAI_AGAIN\",\n        \"UND_ERR_CONNECT_TIMEOUT\",\n        \"UND_ERR_SOCKET\",\n      ].includes(String(value.code))\n    )\n      return { kind: \"transient\", retry: true };\n    if ([\"EACCES\", \"EPERM\", \"ENOSPC\", \"EROFS\", \"EIO\"].includes(String(value.code)))\n      return { kind: \"storage\", retry: false };\n    current = value.cause;\n  }\n  return { kind: \"unknown\", retry: false };\n}\n\nexport function boundedRetryDelay(value: unknown): number | undefined {\n  return typeof value === \"number\" && Number.isFinite(value) && value >= 0 ? Math.min(value, 300_000) : undefined;\n}\n\nexport function retryAfter(response: Response): number | undefined {\n  const value = response.headers.get(\"retry-after\");\n  if (!value) return;\n  const seconds = Number(value);\n  return boundedRetryDelay(Number.isFinite(seconds) ? seconds * 1000 : Date.parse(value) - Date.now());\n}\n"],
+  "mappings": ";;;;;;;AAcO,IAAM,kBAAN,cAA8B,MAAM;AAAA,EACzC,YACW,MACT,SACS,cACT;AACA,UAAM,OAAO;AAJJ;AAEA;AAGT,SAAK,OAAO;AAAA,EACd;AAAA,EANW;AAAA,EAEA;AAKb;AAEO,SAAS,kBAAkB,OAA+E;AAC/G,QAAM,OAAO,oBAAI,IAAa;AAC9B,WAAS,UAAU,OAAO,WAAW,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,OAAO,KAAK;AAC1E,SAAK,IAAI,OAAO;AAChB,QAAI,mBAAmB;AACrB,aAAO;AAAA,QACL,MAAM,QAAQ;AAAA,QACd,OAAO,CAAC,aAAa,cAAc,SAAS,QAAQ,EAAE,SAAS,QAAQ,IAAI;AAAA,QAC3E,OAAO,QAAQ;AAAA,MACjB;AACF,QAAI,mBAAmB,yBAA0B,QAAO,EAAE,MAAM,SAAS,OAAO,KAAK;AACrF,QAAI,OAAO,YAAY,SAAU;AACjC,UAAM,QAAQ;AAOd,QAAI,MAAM,WAAW,OAAO,MAAM,WAAW,IAAK,QAAO,EAAE,MAAM,kBAAkB,OAAO,MAAM;AAChG,QACE,MAAM,WAAW,OACjB,MAAM,WAAW,OAChB,OAAO,MAAM,WAAW,YAAY,OAAO,UAAU,MAAM,MAAM,KAAK,MAAM,UAAU,OAAO,MAAM,UAAU;AAE9G,aAAO,EAAE,MAAM,aAAa,OAAO,MAAM,OAAO,kBAAkB,MAAM,YAAY,EAAE;AACxF,QAAI,MAAM,SAAS,UAAW,QAAO,EAAE,MAAM,cAAc,OAAO,KAAK;AACvE,QAAI,MAAM,SAAS,eAAgB,QAAO,EAAE,MAAM,SAAS,OAAO,KAAK;AACvE,QACE,MAAM,SAAS,kBACf;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,SAAS,OAAO,MAAM,IAAI,CAAC;AAE7B,aAAO,EAAE,MAAM,aAAa,OAAO,KAAK;AAC1C,QAAI,CAAC,UAAU,SAAS,UAAU,SAAS,KAAK,EAAE,SAAS,OAAO,MAAM,IAAI,CAAC;AAC3E,aAAO,EAAE,MAAM,WAAW,OAAO,MAAM;AACzC,cAAU,MAAM;AAAA,EAClB;AACA,SAAO,EAAE,MAAM,WAAW,OAAO,MAAM;AACzC;AAEO,SAAS,kBAAkB,OAAoC;AACpE,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,SAAS,IAAI,KAAK,IAAI,OAAO,GAAO,IAAI;AACxG;AAEO,SAAS,WAAW,UAAwC;AACjE,QAAM,QAAQ,SAAS,QAAQ,IAAI,aAAa;AAChD,MAAI,CAAC,MAAO;AACZ,QAAM,UAAU,OAAO,KAAK;AAC5B,SAAO,kBAAkB,OAAO,SAAS,OAAO,IAAI,UAAU,MAAO,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI,CAAC;AACrG;",
+  "names": []
+}

package/dist/chunks/chunk-ED3TYIVW.ts

@@ -0,0 +1,229 @@
+// @generated by scripts/build-runtime.mjs; do not edit.
+// @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
+import {
+  mergeJournalIdentity
+} from "./chunk-GNH73BJ5.ts";
+import {
+  mergePathIdentity,
+  planFileMerge
+} from "./chunk-76NB4R7U.ts";
+import {
+  statePathForConfig,
+  syncStateFingerprint
+} from "./chunk-UPNVIUBN.ts";
+import {
+  syncDirectory,
+  writeJson
+} from "./chunk-HUZ5CR4W.ts";
+
+// src/sync/conflict-artifacts.ts
+import { createHash, randomUUID } from "node:crypto";
+import fs from "node:fs/promises";
+import path from "node:path";
+
+// src/sync/conflict-groups.ts
+function conflictGroups(plan, config) {
+  const paths = plan.decisions.map((item) => item.path);
+  const parents = paths.map((_, index) => index);
+  const ranks = paths.map(() => 0);
+  const find = (index) => {
+    while (parents[index] !== index) {
+      parents[index] = parents[parents[index] ?? index] ?? index;
+      index = parents[index] ?? index;
+    }
+    return index;
+  };
+  const join = (left, right) => {
+    let a = find(left);
+    let b = find(right);
+    if (a === b) return;
+    if ((ranks[a] ?? 0) < (ranks[b] ?? 0)) [a, b] = [b, a];
+    parents[b] = a;
+    if (ranks[a] === ranks[b]) ranks[a] = (ranks[a] ?? 0) + 1;
+  };
+  const identities = paths.map(mergePathIdentity);
+  const byIdentity = /* @__PURE__ */ new Map();
+  const byPath = new Map(paths.map((value, index) => [value, index]));
+  identities.forEach((value, index) => {
+    const previous = byIdentity.get(value);
+    if (previous !== void 0) join(index, previous);
+    else byIdentity.set(value, index);
+  });
+  const includes = new Set(
+    config.include.filter((value) => !["settings.json", "AGENTS.md", "sessions"].includes(value)).map(mergePathIdentity)
+  );
+  const buckets = /* @__PURE__ */ new Map();
+  const bucket = (key, index) => {
+    const previous = buckets.get(key);
+    if (previous === void 0) buckets.set(key, index);
+    else join(index, previous);
+  };
+  paths.forEach((value, index) => {
+    const root = value.split("/")[0] ?? "";
+    if (["extensions", "themes", "skills", "prompts"].includes(root)) bucket(`resource:${root}`, index);
+    const segments = (identities[index] ?? "").split("/");
+    let ancestor = "";
+    for (let length = 0; length < segments.length - 1; length++) {
+      ancestor = ancestor ? `${ancestor}/${segments[length]}` : segments[length] ?? "";
+      const parent = byIdentity.get(ancestor);
+      if (parent !== void 0) join(index, parent);
+      if (includes.has(ancestor)) bucket(`include:${ancestor}`, index);
+    }
+  });
+  const groups = /* @__PURE__ */ new Map();
+  for (const conflict of plan.conflicts) {
+    const index = byPath.get(conflict.path);
+    if (index === void 0) throw new Error("Conflict is missing from managed decisions.");
+    const key = find(index);
+    const group = groups.get(key) ?? { paths: [], reasons: [] };
+    if (!group.reasons.includes(conflict.reason)) group.reasons.push(conflict.reason);
+    groups.set(key, group);
+  }
+  paths.forEach((value, index) => {
+    groups.get(find(index))?.paths.push(value);
+  });
+  return [...groups.values()].map((group) => ({ ...group, paths: group.paths.sort() }));
+}
+
+// src/sync/conflict-artifacts.ts
+var LIMIT = 192 * 1024 * 1024;
+function conflictArtifactFingerprint(artifact) {
+  return createHash("sha256").update(JSON.stringify(artifact)).digest("hex");
+}
+function conflictDirectory(config) {
+  return `${statePathForConfig(config)}.conflicts`;
+}
+async function directory(config, create = false) {
+  const target = conflictDirectory(config);
+  if (create) await fs.mkdir(target, { recursive: true, mode: 448 });
+  const stat = await fs.lstat(target);
+  if (!stat.isDirectory() || stat.isSymbolicLink() || process.platform !== "win32" && (stat.mode & 63) !== 0)
+    throw new Error("Unsafe private conflict directory.");
+  return target;
+}
+function tokenPath(config, token) {
+  if (!/^[a-f0-9-]{36}$/u.test(token)) throw new Error("Invalid conflict token.");
+  return path.join(conflictDirectory(config), `${token}.json`);
+}
+async function saveConflictArtifact(config, backend, artifact, validate, onCreated) {
+  validate();
+  const identity = mergeJournalIdentity(config, backend);
+  const local = Object.fromEntries(artifact.local.files.map((file) => [file.path, file.sha256]));
+  const remote = Object.fromEntries(artifact.remote.files.map((file) => [file.path, file.sha256]));
+  const fingerprint = createHash("sha256").update(
+    JSON.stringify([
+      identity,
+      artifact.groups.map(
+        (group) => group.paths.map((filePath) => [
+          filePath,
+          artifact.state.lastFileHashes[filePath] ?? null,
+          local[filePath] ?? null,
+          remote[filePath] ?? null
+        ])
+      )
+    ])
+  ).digest("hex").slice(0, 32);
+  const token = `${fingerprint.slice(0, 8)}-${fingerprint.slice(8, 12)}-${fingerprint.slice(12, 16)}-${fingerprint.slice(16, 20)}-${fingerprint.slice(20)}`;
+  await directory(config, true);
+  validate();
+  const reuse = async () => {
+    const existing = await readConflictArtifact(config, backend, token);
+    validate();
+    const oldLocal = Object.fromEntries(existing.local.files.map((file) => [file.path, file.sha256]));
+    const oldRemote = Object.fromEntries(existing.remote.files.map((file) => [file.path, file.sha256]));
+    if (JSON.stringify(existing.groups.map((group) => group.paths)) !== JSON.stringify(artifact.groups.map((group) => group.paths)) || artifact.groups.some(
+      (group) => group.paths.some(
+        (filePath) => existing.state.lastFileHashes[filePath] !== artifact.state.lastFileHashes[filePath] || oldLocal[filePath] !== local[filePath] || oldRemote[filePath] !== remote[filePath]
+      )
+    ))
+      throw new Error("Conflict identity does not match retained immutable evidence.");
+    return token;
+  };
+  const target = tokenPath(config, token);
+  try {
+    await fs.lstat(target);
+    validate();
+    return await reuse();
+  } catch (error) {
+    if (error.code !== "ENOENT") throw error;
+  }
+  const temporary = `${target}.${randomUUID()}.pending`;
+  const candidate = { version: 1, identity, ...artifact };
+  try {
+    await writeJson(temporary, candidate, { maxBytes: LIMIT });
+    validate();
+    const stat = await fs.lstat(temporary);
+    validate();
+    try {
+      await fs.link(temporary, target);
+    } catch (error) {
+      if (error.code !== "EEXIST") throw error;
+      validate();
+      return await reuse();
+    }
+    onCreated?.({
+      token,
+      target,
+      dev: stat.dev,
+      ino: stat.ino,
+      size: stat.size,
+      fingerprint: conflictArtifactFingerprint(candidate)
+    });
+    validate();
+    await syncDirectory(path.dirname(target));
+    validate();
+    await syncDirectory(path.dirname(conflictDirectory(config)));
+    validate();
+    return token;
+  } finally {
+    await fs.rm(temporary, { force: true });
+  }
+}
+async function readConflictArtifact(config, backend, token) {
+  try {
+    await directory(config);
+    const target = tokenPath(config, token);
+    const stat = await fs.lstat(target);
+    if (!stat.isFile() || stat.size > LIMIT || process.platform !== "win32" && (stat.mode & 63) !== 0)
+      throw new Error("Unsafe conflict artifact.");
+    const artifact = JSON.parse(await fs.readFile(target, "utf8"));
+    if (artifact.version !== 1 || artifact.identity !== mergeJournalIdentity(config, backend) || !Array.isArray(artifact.groups) || artifact.groups.length > 16384 || artifact.groups.some(
+      (group) => !Array.isArray(group.paths) || !group.paths.length || group.paths.length > 16384 || !Array.isArray(group.reasons)
+    ))
+      throw new Error("Invalid conflict artifact.");
+    const plan = planFileMerge({
+      baseline: artifact.state.lastFileHashes,
+      local: artifact.local.files,
+      remote: artifact.remote.files,
+      selectionCompatible: true
+    });
+    if (plan.kind !== "planned") throw new Error("Invalid conflict versions.");
+    const known = new Set(plan.decisions.map((item) => item.path));
+    if (artifact.groups.some((group) => group.paths.some((value) => !known.has(value))))
+      throw new Error("Invalid conflict paths.");
+    if (artifact.ancestors) {
+      if (!Array.isArray(artifact.ancestors) || artifact.ancestors.length > 16384 || artifact.ancestors.some((file) => artifact.state.lastFileHashes[file.path] !== file.sha256))
+        throw new Error("Invalid artifact ancestor.");
+      const basePlan = planFileMerge({
+        baseline: {},
+        local: artifact.ancestors,
+        remote: [],
+        selectionCompatible: true
+      });
+      if (basePlan.kind !== "planned" || basePlan.conflicts.length) throw new Error("Invalid ancestor bytes.");
+    }
+    syncStateFingerprint(artifact.state);
+    return artifact;
+  } catch {
+    throw new Error("Cannot verify private conflict artifact; preserve evidence and review a fresh sync.");
+  }
+}
+
+export {
+  conflictGroups,
+  conflictArtifactFingerprint,
+  conflictDirectory,
+  saveConflictArtifact,
+  readConflictArtifact
+};
+//# sourceMappingURL=chunk-ED3TYIVW.ts.map

package/dist/chunks/chunk-ED3TYIVW.ts.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/sync/conflict-artifacts.ts", "../../src/sync/conflict-groups.ts"],
+  "sourcesContent": ["import { createHash, randomUUID } from \"node:crypto\";\nimport fs from \"node:fs/promises\";\nimport path from \"node:path\";\nimport type { AnySyncConfig } from \"../settings/settings-types.js\";\nimport type { Snapshot, SnapshotFile } from \"../snapshot/snapshot-types.js\";\nimport { syncDirectory, writeJson } from \"../state/json-file.js\";\nimport type { SyncState } from \"../state/state-types.js\";\nimport { statePathForConfig, syncStateFingerprint } from \"../state/sync-state-store.js\";\nimport { planFileMerge } from \"./file-merge-planner.js\";\n\nexport { conflictGroups } from \"./conflict-groups.js\";\n\nimport { mergeJournalIdentity } from \"./merge-journal.js\";\nexport interface ConflictArtifact {\n  version: 1;\n  identity: string;\n  ancestors?: SnapshotFile[];\n  state: SyncState;\n  local: Snapshot;\n  remote: Snapshot;\n  groups: { paths: string[]; reasons: string[] }[];\n  observed: { snapshotId: string; revision: string };\n}\nconst LIMIT = 192 * 1024 * 1024;\nexport function conflictArtifactFingerprint(artifact: ConflictArtifact) {\n  return createHash(\"sha256\").update(JSON.stringify(artifact)).digest(\"hex\");\n}\nexport function conflictDirectory(config: AnySyncConfig) {\n  return `${statePathForConfig(config)}.conflicts`;\n}\nasync function directory(config: AnySyncConfig, create = false) {\n  const target = conflictDirectory(config);\n  if (create) await fs.mkdir(target, { recursive: true, mode: 0o700 });\n  const stat = await fs.lstat(target);\n  if (!stat.isDirectory() || stat.isSymbolicLink() || (process.platform !== \"win32\" && (stat.mode & 0o077) !== 0))\n    throw new Error(\"Unsafe private conflict directory.\");\n  return target;\n}\nfunction tokenPath(config: AnySyncConfig, token: string) {\n  if (!/^[a-f0-9-]{36}$/u.test(token)) throw new Error(\"Invalid conflict token.\");\n  return path.join(conflictDirectory(config), `${token}.json`);\n}\nexport interface CreatedConflictArtifact {\n  token: string;\n  target: string;\n  dev: number;\n  ino: number;\n  size: number;\n  fingerprint: string;\n}\nexport async function saveConflictArtifact(\n  config: AnySyncConfig,\n  backend: string,\n  artifact: Omit<ConflictArtifact, \"version\" | \"identity\">,\n  validate: () => void,\n  onCreated?: (created: CreatedConflictArtifact) => void,\n) {\n  validate();\n  const identity = mergeJournalIdentity(config, backend);\n  const local = Object.fromEntries(artifact.local.files.map((file) => [file.path, file.sha256]));\n  const remote = Object.fromEntries(artifact.remote.files.map((file) => [file.path, file.sha256]));\n  const fingerprint = createHash(\"sha256\")\n    .update(\n      JSON.stringify([\n        identity,\n        artifact.groups.map((group) =>\n          group.paths.map((filePath) => [\n            filePath,\n            artifact.state.lastFileHashes[filePath] ?? null,\n            local[filePath] ?? null,\n            remote[filePath] ?? null,\n          ]),\n        ),\n      ]),\n    )\n    .digest(\"hex\")\n    .slice(0, 32);\n  const token = `${fingerprint.slice(0, 8)}-${fingerprint.slice(8, 12)}-${fingerprint.slice(12, 16)}-${fingerprint.slice(16, 20)}-${fingerprint.slice(20)}`;\n  await directory(config, true);\n  validate();\n  const reuse = async () => {\n    const existing = await readConflictArtifact(config, backend, token);\n    validate();\n    const oldLocal = Object.fromEntries(existing.local.files.map((file) => [file.path, file.sha256]));\n    const oldRemote = Object.fromEntries(existing.remote.files.map((file) => [file.path, file.sha256]));\n    if (\n      JSON.stringify(existing.groups.map((group) => group.paths)) !==\n        JSON.stringify(artifact.groups.map((group) => group.paths)) ||\n      artifact.groups.some((group) =>\n        group.paths.some(\n          (filePath) =>\n            existing.state.lastFileHashes[filePath] !== artifact.state.lastFileHashes[filePath] ||\n            oldLocal[filePath] !== local[filePath] ||\n            oldRemote[filePath] !== remote[filePath],\n        ),\n      )\n    )\n      throw new Error(\"Conflict identity does not match retained immutable evidence.\");\n    return token;\n  };\n  const target = tokenPath(config, token);\n  try {\n    await fs.lstat(target);\n    validate();\n    return await reuse();\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error;\n  }\n  const temporary = `${target}.${randomUUID()}.pending`;\n  const candidate: ConflictArtifact = { version: 1, identity, ...artifact };\n  try {\n    await writeJson(temporary, candidate, { maxBytes: LIMIT });\n    validate();\n    const stat = await fs.lstat(temporary);\n    validate();\n    try {\n      // Publish immutable evidence without replacing a concurrent/pre-existing owner.\n      await fs.link(temporary, target);\n    } catch (error) {\n      if ((error as NodeJS.ErrnoException).code !== \"EEXIST\") throw error;\n      validate();\n      return await reuse();\n    }\n    // Register ownership before any cancellation or durability await can fail.\n    onCreated?.({\n      token,\n      target,\n      dev: stat.dev,\n      ino: stat.ino,\n      size: stat.size,\n      fingerprint: conflictArtifactFingerprint(candidate),\n    });\n    validate();\n    await syncDirectory(path.dirname(target));\n    validate();\n    await syncDirectory(path.dirname(conflictDirectory(config)));\n    validate();\n    return token;\n  } finally {\n    await fs.rm(temporary, { force: true });\n  }\n}\nexport async function readConflictArtifact(config: AnySyncConfig, backend: string, token: string) {\n  try {\n    await directory(config);\n    const target = tokenPath(config, token);\n    const stat = await fs.lstat(target);\n    if (!stat.isFile() || stat.size > LIMIT || (process.platform !== \"win32\" && (stat.mode & 0o077) !== 0))\n      throw new Error(\"Unsafe conflict artifact.\");\n    const artifact = JSON.parse(await fs.readFile(target, \"utf8\")) as ConflictArtifact;\n    if (\n      artifact.version !== 1 ||\n      artifact.identity !== mergeJournalIdentity(config, backend) ||\n      !Array.isArray(artifact.groups) ||\n      artifact.groups.length > 16_384 ||\n      artifact.groups.some(\n        (group) =>\n          !Array.isArray(group.paths) ||\n          !group.paths.length ||\n          group.paths.length > 16_384 ||\n          !Array.isArray(group.reasons),\n      )\n    )\n      throw new Error(\"Invalid conflict artifact.\");\n    const plan = planFileMerge({\n      baseline: artifact.state.lastFileHashes,\n      local: artifact.local.files,\n      remote: artifact.remote.files,\n      selectionCompatible: true,\n    });\n    if (plan.kind !== \"planned\") throw new Error(\"Invalid conflict versions.\");\n    const known = new Set(plan.decisions.map((item) => item.path));\n    if (artifact.groups.some((group) => group.paths.some((value) => !known.has(value))))\n      throw new Error(\"Invalid conflict paths.\");\n    if (artifact.ancestors) {\n      if (\n        !Array.isArray(artifact.ancestors) ||\n        artifact.ancestors.length > 16_384 ||\n        artifact.ancestors.some((file) => artifact.state.lastFileHashes[file.path] !== file.sha256)\n      )\n        throw new Error(\"Invalid artifact ancestor.\");\n      const basePlan = planFileMerge({\n        baseline: {},\n        local: artifact.ancestors,\n        remote: [],\n        selectionCompatible: true,\n      });\n      if (basePlan.kind !== \"planned\" || basePlan.conflicts.length) throw new Error(\"Invalid ancestor bytes.\");\n    }\n    syncStateFingerprint(artifact.state);\n    return artifact;\n  } catch {\n    throw new Error(\"Cannot verify private conflict artifact; preserve evidence and review a fresh sync.\");\n  }\n}\n", "import type { AnySyncConfig } from \"../settings/settings-types.js\";\nimport { type FileMergePlan, mergePathIdentity } from \"./file-merge-planner.js\";\n\n/** Indexed connected closure; path relationships are identical to the conservative merge policy. */\nexport function conflictGroups(plan: Extract<FileMergePlan, { kind: \"planned\" }>, config: AnySyncConfig) {\n  const paths = plan.decisions.map((item) => item.path);\n  const parents = paths.map((_, index) => index);\n  const ranks = paths.map(() => 0);\n  const find = (index: number): number => {\n    while (parents[index] !== index) {\n      parents[index] = parents[parents[index] ?? index] ?? index;\n      index = parents[index] ?? index;\n    }\n    return index;\n  };\n  const join = (left: number, right: number) => {\n    let a = find(left);\n    let b = find(right);\n    if (a === b) return;\n    if ((ranks[a] ?? 0) < (ranks[b] ?? 0)) [a, b] = [b, a];\n    parents[b] = a;\n    if (ranks[a] === ranks[b]) ranks[a] = (ranks[a] ?? 0) + 1;\n  };\n  const identities = paths.map(mergePathIdentity);\n  const byIdentity = new Map<string, number>();\n  const byPath = new Map(paths.map((value, index) => [value, index]));\n  identities.forEach((value, index) => {\n    const previous = byIdentity.get(value);\n    if (previous !== undefined) join(index, previous);\n    else byIdentity.set(value, index);\n  });\n  const includes = new Set(\n    config.include\n      .filter((value) => ![\"settings.json\", \"AGENTS.md\", \"sessions\"].includes(value))\n      .map(mergePathIdentity),\n  );\n  const buckets = new Map<string, number>();\n  const bucket = (key: string, index: number) => {\n    const previous = buckets.get(key);\n    if (previous === undefined) buckets.set(key, index);\n    else join(index, previous);\n  };\n  paths.forEach((value, index) => {\n    const root = value.split(\"/\")[0] ?? \"\";\n    if ([\"extensions\", \"themes\", \"skills\", \"prompts\"].includes(root)) bucket(`resource:${root}`, index);\n    const segments = (identities[index] ?? \"\").split(\"/\");\n    let ancestor = \"\";\n    for (let length = 0; length < segments.length - 1; length++) {\n      ancestor = ancestor ? `${ancestor}/${segments[length]}` : (segments[length] ?? \"\");\n      const parent = byIdentity.get(ancestor);\n      if (parent !== undefined) join(index, parent);\n      if (includes.has(ancestor)) bucket(`include:${ancestor}`, index);\n    }\n  });\n  const groups = new Map<number, { paths: string[]; reasons: string[] }>();\n  for (const conflict of plan.conflicts) {\n    const index = byPath.get(conflict.path);\n    if (index === undefined) throw new Error(\"Conflict is missing from managed decisions.\");\n    const key = find(index);\n    const group = groups.get(key) ?? { paths: [], reasons: [] };\n    if (!group.reasons.includes(conflict.reason)) group.reasons.push(conflict.reason);\n    groups.set(key, group);\n  }\n  paths.forEach((value, index) => {\n    groups.get(find(index))?.paths.push(value);\n  });\n  return [...groups.values()].map((group) => ({ ...group, paths: group.paths.sort() }));\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;AAAA,SAAS,YAAY,kBAAkB;AACvC,OAAO,QAAQ;AACf,OAAO,UAAU;;;ACEV,SAAS,eAAe,MAAmD,QAAuB;AACvG,QAAM,QAAQ,KAAK,UAAU,IAAI,CAAC,SAAS,KAAK,IAAI;AACpD,QAAM,UAAU,MAAM,IAAI,CAAC,GAAG,UAAU,KAAK;AAC7C,QAAM,QAAQ,MAAM,IAAI,MAAM,CAAC;AAC/B,QAAM,OAAO,CAAC,UAA0B;AACtC,WAAO,QAAQ,KAAK,MAAM,OAAO;AAC/B,cAAQ,KAAK,IAAI,QAAQ,QAAQ,KAAK,KAAK,KAAK,KAAK;AACrD,cAAQ,QAAQ,KAAK,KAAK;AAAA,IAC5B;AACA,WAAO;AAAA,EACT;AACA,QAAM,OAAO,CAAC,MAAc,UAAkB;AAC5C,QAAI,IAAI,KAAK,IAAI;AACjB,QAAI,IAAI,KAAK,KAAK;AAClB,QAAI,MAAM,EAAG;AACb,SAAK,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,KAAK,GAAI,EAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;AACrD,YAAQ,CAAC,IAAI;AACb,QAAI,MAAM,CAAC,MAAM,MAAM,CAAC,EAAG,OAAM,CAAC,KAAK,MAAM,CAAC,KAAK,KAAK;AAAA,EAC1D;AACA,QAAM,aAAa,MAAM,IAAI,iBAAiB;AAC9C,QAAM,aAAa,oBAAI,IAAoB;AAC3C,QAAM,SAAS,IAAI,IAAI,MAAM,IAAI,CAAC,OAAO,UAAU,CAAC,OAAO,KAAK,CAAC,CAAC;AAClE,aAAW,QAAQ,CAAC,OAAO,UAAU;AACnC,UAAM,WAAW,WAAW,IAAI,KAAK;AACrC,QAAI,aAAa,OAAW,MAAK,OAAO,QAAQ;AAAA,QAC3C,YAAW,IAAI,OAAO,KAAK;AAAA,EAClC,CAAC;AACD,QAAM,WAAW,IAAI;AAAA,IACnB,OAAO,QACJ,OAAO,CAAC,UAAU,CAAC,CAAC,iBAAiB,aAAa,UAAU,EAAE,SAAS,KAAK,CAAC,EAC7E,IAAI,iBAAiB;AAAA,EAC1B;AACA,QAAM,UAAU,oBAAI,IAAoB;AACxC,QAAM,SAAS,CAAC,KAAa,UAAkB;AAC7C,UAAM,WAAW,QAAQ,IAAI,GAAG;AAChC,QAAI,aAAa,OAAW,SAAQ,IAAI,KAAK,KAAK;AAAA,QAC7C,MAAK,OAAO,QAAQ;AAAA,EAC3B;AACA,QAAM,QAAQ,CAAC,OAAO,UAAU;AAC9B,UAAM,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK;AACpC,QAAI,CAAC,cAAc,UAAU,UAAU,SAAS,EAAE,SAAS,IAAI,EAAG,QAAO,YAAY,IAAI,IAAI,KAAK;AAClG,UAAM,YAAY,WAAW,KAAK,KAAK,IAAI,MAAM,GAAG;AACpD,QAAI,WAAW;AACf,aAAS,SAAS,GAAG,SAAS,SAAS,SAAS,GAAG,UAAU;AAC3D,iBAAW,WAAW,GAAG,QAAQ,IAAI,SAAS,MAAM,CAAC,KAAM,SAAS,MAAM,KAAK;AAC/E,YAAM,SAAS,WAAW,IAAI,QAAQ;AACtC,UAAI,WAAW,OAAW,MAAK,OAAO,MAAM;AAC5C,UAAI,SAAS,IAAI,QAAQ,EAAG,QAAO,WAAW,QAAQ,IAAI,KAAK;AAAA,IACjE;AAAA,EACF,CAAC;AACD,QAAM,SAAS,oBAAI,IAAoD;AACvE,aAAW,YAAY,KAAK,WAAW;AACrC,UAAM,QAAQ,OAAO,IAAI,SAAS,IAAI;AACtC,QAAI,UAAU,OAAW,OAAM,IAAI,MAAM,6CAA6C;AACtF,UAAM,MAAM,KAAK,KAAK;AACtB,UAAM,QAAQ,OAAO,IAAI,GAAG,KAAK,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,EAAE;AAC1D,QAAI,CAAC,MAAM,QAAQ,SAAS,SAAS,MAAM,EAAG,OAAM,QAAQ,KAAK,SAAS,MAAM;AAChF,WAAO,IAAI,KAAK,KAAK;AAAA,EACvB;AACA,QAAM,QAAQ,CAAC,OAAO,UAAU;AAC9B,WAAO,IAAI,KAAK,KAAK,CAAC,GAAG,MAAM,KAAK,KAAK;AAAA,EAC3C,CAAC;AACD,SAAO,CAAC,GAAG,OAAO,OAAO,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,OAAO,OAAO,MAAM,MAAM,KAAK,EAAE,EAAE;AACtF;;;AD5CA,IAAM,QAAQ,MAAM,OAAO;AACpB,SAAS,4BAA4B,UAA4B;AACtE,SAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,UAAU,QAAQ,CAAC,EAAE,OAAO,KAAK;AAC3E;AACO,SAAS,kBAAkB,QAAuB;AACvD,SAAO,GAAG,mBAAmB,MAAM,CAAC;AACtC;AACA,eAAe,UAAU,QAAuB,SAAS,OAAO;AAC9D,QAAM,SAAS,kBAAkB,MAAM;AACvC,MAAI,OAAQ,OAAM,GAAG,MAAM,QAAQ,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACnE,QAAM,OAAO,MAAM,GAAG,MAAM,MAAM;AAClC,MAAI,CAAC,KAAK,YAAY,KAAK,KAAK,eAAe,KAAM,QAAQ,aAAa,YAAY,KAAK,OAAO,QAAW;AAC3G,UAAM,IAAI,MAAM,oCAAoC;AACtD,SAAO;AACT;AACA,SAAS,UAAU,QAAuB,OAAe;AACvD,MAAI,CAAC,mBAAmB,KAAK,KAAK,EAAG,OAAM,IAAI,MAAM,yBAAyB;AAC9E,SAAO,KAAK,KAAK,kBAAkB,MAAM,GAAG,GAAG,KAAK,OAAO;AAC7D;AASA,eAAsB,qBACpB,QACA,SACA,UACA,UACA,WACA;AACA,WAAS;AACT,QAAM,WAAW,qBAAqB,QAAQ,OAAO;AACrD,QAAM,QAAQ,OAAO,YAAY,SAAS,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,MAAM,KAAK,MAAM,CAAC,CAAC;AAC7F,QAAM,SAAS,OAAO,YAAY,SAAS,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,MAAM,KAAK,MAAM,CAAC,CAAC;AAC/F,QAAM,cAAc,WAAW,QAAQ,EACpC;AAAA,IACC,KAAK,UAAU;AAAA,MACb;AAAA,MACA,SAAS,OAAO;AAAA,QAAI,CAAC,UACnB,MAAM,MAAM,IAAI,CAAC,aAAa;AAAA,UAC5B;AAAA,UACA,SAAS,MAAM,eAAe,QAAQ,KAAK;AAAA,UAC3C,MAAM,QAAQ,KAAK;AAAA,UACnB,OAAO,QAAQ,KAAK;AAAA,QACtB,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAAA,EACH,EACC,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE;AACd,QAAM,QAAQ,GAAG,YAAY,MAAM,GAAG,CAAC,CAAC,IAAI,YAAY,MAAM,GAAG,EAAE,CAAC,IAAI,YAAY,MAAM,IAAI,EAAE,CAAC,IAAI,YAAY,MAAM,IAAI,EAAE,CAAC,IAAI,YAAY,MAAM,EAAE,CAAC;AACvJ,QAAM,UAAU,QAAQ,IAAI;AAC5B,WAAS;AACT,QAAM,QAAQ,YAAY;AACxB,UAAM,WAAW,MAAM,qBAAqB,QAAQ,SAAS,KAAK;AAClE,aAAS;AACT,UAAM,WAAW,OAAO,YAAY,SAAS,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,MAAM,KAAK,MAAM,CAAC,CAAC;AAChG,UAAM,YAAY,OAAO,YAAY,SAAS,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,MAAM,KAAK,MAAM,CAAC,CAAC;AAClG,QACE,KAAK,UAAU,SAAS,OAAO,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,MACxD,KAAK,UAAU,SAAS,OAAO,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,KAC5D,SAAS,OAAO;AAAA,MAAK,CAAC,UACpB,MAAM,MAAM;AAAA,QACV,CAAC,aACC,SAAS,MAAM,eAAe,QAAQ,MAAM,SAAS,MAAM,eAAe,QAAQ,KAClF,SAAS,QAAQ,MAAM,MAAM,QAAQ,KACrC,UAAU,QAAQ,MAAM,OAAO,QAAQ;AAAA,MAC3C;AAAA,IACF;AAEA,YAAM,IAAI,MAAM,+DAA+D;AACjF,WAAO;AAAA,EACT;AACA,QAAM,SAAS,UAAU,QAAQ,KAAK;AACtC,MAAI;AACF,UAAM,GAAG,MAAM,MAAM;AACrB,aAAS;AACT,WAAO,MAAM,MAAM;AAAA,EACrB,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,OAAM;AAAA,EAChE;AACA,QAAM,YAAY,GAAG,MAAM,IAAI,WAAW,CAAC;AAC3C,QAAM,YAA8B,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS;AACxE,MAAI;AACF,UAAM,UAAU,WAAW,WAAW,EAAE,UAAU,MAAM,CAAC;AACzD,aAAS;AACT,UAAM,OAAO,MAAM,GAAG,MAAM,SAAS;AACrC,aAAS;AACT,QAAI;AAEF,YAAM,GAAG,KAAK,WAAW,MAAM;AAAA,IACjC,SAAS,OAAO;AACd,UAAK,MAAgC,SAAS,SAAU,OAAM;AAC9D,eAAS;AACT,aAAO,MAAM,MAAM;AAAA,IACrB;AAEA,gBAAY;AAAA,MACV;AAAA,MACA;AAAA,MACA,KAAK,KAAK;AAAA,MACV,KAAK,KAAK;AAAA,MACV,MAAM,KAAK;AAAA,MACX,aAAa,4BAA4B,SAAS;AAAA,IACpD,CAAC;AACD,aAAS;AACT,UAAM,cAAc,KAAK,QAAQ,MAAM,CAAC;AACxC,aAAS;AACT,UAAM,cAAc,KAAK,QAAQ,kBAAkB,MAAM,CAAC,CAAC;AAC3D,aAAS;AACT,WAAO;AAAA,EACT,UAAE;AACA,UAAM,GAAG,GAAG,WAAW,EAAE,OAAO,KAAK,CAAC;AAAA,EACxC;AACF;AACA,eAAsB,qBAAqB,QAAuB,SAAiB,OAAe;AAChG,MAAI;AACF,UAAM,UAAU,MAAM;AACtB,UAAM,SAAS,UAAU,QAAQ,KAAK;AACtC,UAAM,OAAO,MAAM,GAAG,MAAM,MAAM;AAClC,QAAI,CAAC,KAAK,OAAO,KAAK,KAAK,OAAO,SAAU,QAAQ,aAAa,YAAY,KAAK,OAAO,QAAW;AAClG,YAAM,IAAI,MAAM,2BAA2B;AAC7C,UAAM,WAAW,KAAK,MAAM,MAAM,GAAG,SAAS,QAAQ,MAAM,CAAC;AAC7D,QACE,SAAS,YAAY,KACrB,SAAS,aAAa,qBAAqB,QAAQ,OAAO,KAC1D,CAAC,MAAM,QAAQ,SAAS,MAAM,KAC9B,SAAS,OAAO,SAAS,SACzB,SAAS,OAAO;AAAA,MACd,CAAC,UACC,CAAC,MAAM,QAAQ,MAAM,KAAK,KAC1B,CAAC,MAAM,MAAM,UACb,MAAM,MAAM,SAAS,SACrB,CAAC,MAAM,QAAQ,MAAM,OAAO;AAAA,IAChC;AAEA,YAAM,IAAI,MAAM,4BAA4B;AAC9C,UAAM,OAAO,cAAc;AAAA,MACzB,UAAU,SAAS,MAAM;AAAA,MACzB,OAAO,SAAS,MAAM;AAAA,MACtB,QAAQ,SAAS,OAAO;AAAA,MACxB,qBAAqB;AAAA,IACvB,CAAC;AACD,QAAI,KAAK,SAAS,UAAW,OAAM,IAAI,MAAM,4BAA4B;AACzE,UAAM,QAAQ,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;AAC7D,QAAI,SAAS,OAAO,KAAK,CAAC,UAAU,MAAM,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;AAChF,YAAM,IAAI,MAAM,yBAAyB;AAC3C,QAAI,SAAS,WAAW;AACtB,UACE,CAAC,MAAM,QAAQ,SAAS,SAAS,KACjC,SAAS,UAAU,SAAS,SAC5B,SAAS,UAAU,KAAK,CAAC,SAAS,SAAS,MAAM,eAAe,KAAK,IAAI,MAAM,KAAK,MAAM;AAE1F,cAAM,IAAI,MAAM,4BAA4B;AAC9C,YAAM,WAAW,cAAc;AAAA,QAC7B,UAAU,CAAC;AAAA,QACX,OAAO,SAAS;AAAA,QAChB,QAAQ,CAAC;AAAA,QACT,qBAAqB;AAAA,MACvB,CAAC;AACD,UAAI,SAAS,SAAS,aAAa,SAAS,UAAU,OAAQ,OAAM,IAAI,MAAM,yBAAyB;AAAA,IACzG;AACA,yBAAqB,SAAS,KAAK;AACnC,WAAO;AAAA,EACT,QAAQ;AACN,UAAM,IAAI,MAAM,qFAAqF;AAAA,EACvG;AACF;",
+  "names": []
+}

package/dist/chunks/{chunk-HMXUKU43.ts → chunk-EUMINX7L.ts}

@@ -3,17 +3,17 @@
 import {
   runCancellableOperation,
   showRemoteSelectionReview
-} from "./chunk-CAGJOKB7.ts";
+} from "./chunk-JJTARUSO.ts";
 import {
   safeTerminalText
 } from "./chunk-AMJRUXFT.ts";
-import {
-  loadConfig,
-  syncConfigReviewIdentity
-} from "./chunk-KATKRR3D.ts";
 import {
   errorMessage
 } from "./chunk-7D5SF7P3.ts";
+import {
+  loadConfig,
+  syncConfigReviewIdentity
+} from "./chunk-QO333NM4.ts";
 
 // src/ui/sync-resolution-ui.ts
 import { defineMenu, runMenu } from "@narumitw/pi-tui-kit";
@@ -206,4 +206,4 @@ async function dispatchManagerResult(ctx, initialResult, origin, runRoute, signa
 export {
   dispatchManagerResult
 };
-//# sourceMappingURL=chunk-HMXUKU43.ts.map
+//# sourceMappingURL=chunk-EUMINX7L.ts.map