@narumitw/pi-sync 0.57.9 → 0.57.11

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @narumitw/pi-sync
 
+## 0.57.11
+
+### Patch Changes
+
+- 41c32db: Fix settings and transfer safety findings. Keep canonical settings available during replacement, order reads behind pending writes, and stop cancelled initialization. Bind manager actions and remote content-list adoption to the reviewed setup and connection, with cancellable network checks. Reject S3 redirects and correct SigV4 URI encoding. Preserve BOM-prefixed Pi settings and refuse unsafe aliased snapshot mutation paths while retaining recovery evidence.
+
+## 0.57.10
+
+### Patch Changes
+
+- a6582dc: Reduce Pi startup loading by deferring command, transfer, and recovery implementations until needed. Preserve awaited recovery for pending file transactions and all existing sync settings.
+- Updated dependencies [4f79c28]
+  - @narumitw/pi-tui-kit@0.69.1
+
 ## 0.57.9
 
 ### Patch Changes

package/README.md

@@ -77,7 +77,7 @@ Remote status: Not checked
 
 Use **Sync now** for bidirectional merging, or **Pull from remote…** and **Push to remote…** for reviewed directional transfers. **Settings**, **History**, and **Diagnostics** are also directly available. Switching appears only when multiple valid setups exist; review and access-recovery actions appear when needed. Pull and Push do not implicitly force overwrites.
 
-The main summary separates current state from actions and uses local state and cached check-time observations, not a fresh remote comparison. Choose **Check remote status** for a fresh read/check or **View differences** for file differences; `/sync status`, `/sync diff`, and `/sync help` remain available. Last applied shows a compact snapshot ID and states when application time is unavailable; History retains full IDs.
+The main summary separates current state from actions and uses local state and cached check-time observations, not a fresh remote comparison. Setup-specific actions stay bound to the displayed setup; if its configuration changes while the menu is open, review the refreshed setup before continuing. Choose **Check remote status** for a fresh read/check or **View differences** for file differences; `/sync status`, `/sync diff`, and `/sync help` remain available. Last applied shows a compact snapshot ID and states when application time is unavailable; History retains full IDs.
 
 After Pi Sync detects an included-content mismatch, the manager shows **Sync status: Review needed** and puts **Review synced content (recommended)** first.
 **Sync now** remains unavailable until you review the mismatch.
@@ -172,6 +172,8 @@ See [Debug startup timings](./skills/configure-pi-sync/references/configuration.
 
 ### Background startup checks
 
+Startup loads command and transfer implementations only when needed. When no transaction directory is pending, a local directory check skips loading the file-recovery implementation. Pending transactions still complete recovery before Pi accepts user edits; this safety barrier is not deferred.
+
 With **Automatic sync** enabled, session startup schedules a background check instead of waiting for a transfer. Pi remains usable while Git, WebDAV, R2, or S3 checks local hashes and remote metadata. Results follow the [status and review classifications](#resolve-conflicts-in-the-manager); check failures provide `/sync` guidance without opening a dialog. Use **Sync now** to start a reviewed transfer, or `/sync status` to retry a check. Foreground `/sync` cancels and drains the background check before starting.
 
 Checks run once per session start, including `/reload`, new, resumed, and forked sessions, in TUI and RPC only. Print/JSON skip startup checks. This one-shot policy has no polling or automatic retry loop; separately enabled Continuous sync owns recurring work. The overall deadline is 30 seconds, followed by underlying cleanup where needed; Git process termination and temporary-ref cleanup can take additional time. Git checks can still fetch objects and update the extension's private bare cache, but never push, apply managed files, update the sync baseline, or reload Pi.
@@ -323,12 +325,16 @@ WebDAV requires HTTPS except loopback tests.
 URL credentials, query strings, fragments, unsafe redirects, weak/missing ETags, and ignored conditional headers fail closed.
 `/sync doctor` verifies collection and conditional-write behavior with an isolated probe, then repairs a missing active-snapshot history entry.
 
+S3/R2 requests reject redirects, including same-origin redirects; configure the canonical endpoint before syncing. Credentials and snapshot bodies are never forwarded to a redirect destination.
+
 S3/R2 publishes `latest.json` and history using ETag `If-Match`, or `If-None-Match: *` for first creation, then verifies the active pointer. Before each publication, an isolated `.pi-sync-probes/<random-id>` object verifies that the server rejects stale ETags and create-only writes to existing objects and rotates strong ETags. Credentials must allow read, write, and delete under the selected storage path; the probe is deleted even after cancellation. Missing/weak ETags, ignored conditions, and probe or cleanup failures stop publication. A failed cleanup reports the probe key for manual removal; bucket versioning may retain probe versions. `/sync doctor` remains read-only for S3/R2 and does not verify write support.
 
 Snapshot recovery is guarded: new journals record before/after images, older journals are retired only when their unchanged preimages are provable, and unrecognized bytes remain untouched for manual review. Current-session targets are never restored during startup. Preserve a blocked transaction and its backup, close Pi, and review the private evidence before restoring selected paths; malformed/unsupported journals are not disposable. Pi may have loaded resources before lifecycle recovery, so reload or restart explicitly after recovery if loaded resources need to match the restored files.
 
 Before pull or rollback, pi-sync writes a backup under `<agent-dir>/pi-sync/backups/`.
+Snapshot apply and recovery require canonical agent and session paths. Symlinked or otherwise aliased parent paths are refused before changing managed local files because Pi's file queue uses different keys for existing and missing aliases. Use canonical paths for local mutations and preserve any pending recovery evidence; an unresolved startup recovery barrier still blocks transfers. Old journals recorded under an alias require manual review because their exact root and target paths remain pinned. Changing the agent path alone does not authorize recovery or rewriting those journals.
 Apply preflights paths and checksums, journals mutations, and restores prior state only when current bytes match verified preimages or planned postimages. Unknown intermediate directory states and newer edits require review rather than a blind rollback. An interruption after replacement is armed can require manual recovery even if installation never ran; a later deletion of installed content is not treated as an unfinished remove.
+The file queue coordinates one Pi runtime, not separate processes or lock-unaware editors. Hash-based journals cannot distinguish a later write of identical recorded bytes; they do not provide a cross-process compare-and-swap.
 Merged transfers instead retain a private publication/apply/baseline journal and roll forward only when the active remote candidate and every changed local preimage/postimage can be verified. A crash or uncertain publication is reconciled through `/sync sync` without blind republishing. If newer local or remote changes prevent reconciliation, preserve the evidence, review `/sync diff`, and explicitly choose `push --force` or `pull --force`; the chosen direction archives the old journal. Disabling automatic transfer does not undo completed transfers. Do not downgrade while a merge or snapshot recovery journal is pending.
 
 Removing a local setup or connection never deletes remote data.

package/dist/chunks/{agent-candidate-GNEYR225.ts → agent-candidate-OCDPRI5G.ts}

@@ -5,22 +5,25 @@ import {
   buildAgentEvidence,
   digest,
   parseAgentCandidate
-} from "./chunk-5QAE3G3K.ts";
-import "./chunk-S7QS4AWK.ts";
-import "./chunk-QOFMXPM5.ts";
-import "./chunk-IWZH5KYS.ts";
-import "./chunk-76NB4R7U.ts";
+} from "./chunk-67INJPKR.ts";
+import "./chunk-AKMV47YC.ts";
+import "./chunk-6LD5KX55.ts";
 import "./chunk-ZW5ZLGBI.ts";
-import "./chunk-PRUEIIK7.ts";
-import "./chunk-UPNVIUBN.ts";
+import "./chunk-XJHQPB3E.ts";
+import "./chunk-DN4IA7MR.ts";
+import "./chunk-AR2DGDUI.ts";
 import "./chunk-SWRVXVFD.ts";
 import "./chunk-2JZFHNLM.ts";
 import "./chunk-T2SJD3N7.ts";
-import "./chunk-HUZ5CR4W.ts";
+import "./chunk-ESKOPQVB.ts";
+import "./chunk-KYTT7KV4.ts";
+import "./chunk-CBLTWXAU.ts";
+import "./chunk-FHE2DCA2.ts";
+import "./chunk-PRUEIIK7.ts";
 export {
   applyAgentCandidate,
   buildAgentEvidence,
   digest,
   parseAgentCandidate
 };
-//# sourceMappingURL=agent-candidate-GNEYR225.ts.map
+//# sourceMappingURL=agent-candidate-OCDPRI5G.ts.map

package/dist/chunks/{agent-plan-3L7CRFDM.ts → agent-plan-P5B5RGZ7.ts}

@@ -3,41 +3,45 @@
 import {
   fileHashMap,
   sameHashes
-} from "./chunk-BDB4IDM3.ts";
+} from "./chunk-Y4UVXOLQ.ts";
 import {
   AgentResolutionRequired
 } from "./chunk-3ST7RSYN.ts";
+import "./chunk-MKSMJPVA.ts";
 import {
   syncConfigReviewIdentity
-} from "./chunk-QO333NM4.ts";
-import "./chunk-A6HU4ERM.ts";
-import {
-  ContinuousError
-} from "./chunk-DT7M4VQS.ts";
-import "./chunk-YDVQYUHE.ts";
+} from "./chunk-OVBAW7KV.ts";
+import "./chunk-X7R6DCVF.ts";
 import {
   applyAgentCandidate,
   buildAgentEvidence,
   digest
-} from "./chunk-5QAE3G3K.ts";
-import "./chunk-S7QS4AWK.ts";
-import {
-  createSnapshot
-} from "./chunk-QOFMXPM5.ts";
+} from "./chunk-67INJPKR.ts";
+import "./chunk-AKMV47YC.ts";
 import {
   readMergeAncestors
-} from "./chunk-IWZH5KYS.ts";
-import "./chunk-76NB4R7U.ts";
+} from "./chunk-6LD5KX55.ts";
 import "./chunk-ZW5ZLGBI.ts";
-import "./chunk-PRUEIIK7.ts";
+import "./chunk-XJHQPB3E.ts";
 import {
   readStateForConfig,
   syncStateFingerprint
-} from "./chunk-UPNVIUBN.ts";
+} from "./chunk-DN4IA7MR.ts";
+import "./chunk-AR2DGDUI.ts";
 import "./chunk-SWRVXVFD.ts";
 import "./chunk-2JZFHNLM.ts";
 import "./chunk-T2SJD3N7.ts";
-import "./chunk-HUZ5CR4W.ts";
+import {
+  createSnapshot
+} from "./chunk-ESKOPQVB.ts";
+import "./chunk-KYTT7KV4.ts";
+import "./chunk-CBLTWXAU.ts";
+import "./chunk-FHE2DCA2.ts";
+import {
+  ContinuousError
+} from "./chunk-DT7M4VQS.ts";
+import "./chunk-YDVQYUHE.ts";
+import "./chunk-PRUEIIK7.ts";
 
 // src/sync/agent-plan.ts
 async function resolveAgentPlan(ctx, options, config, backend, state, local, localRaw, remote, head, plan, snapshotOptions, validate) {
@@ -113,4 +117,4 @@ async function resolveAgentPlan(ctx, options, config, backend, state, local, loc
 export {
   resolveAgentPlan
 };
-//# sourceMappingURL=agent-plan-3L7CRFDM.ts.map
+//# sourceMappingURL=agent-plan-P5B5RGZ7.ts.map

package/dist/chunks/{agent-plan-3L7CRFDM.ts.map → agent-plan-P5B5RGZ7.ts.map}

@@ -2,6 +2,6 @@
   "version": 3,
   "sources": ["../../src/sync/agent-plan.ts"],
   "sourcesContent": ["import type { ExtensionContext } from \"@earendil-works/pi-coding-agent\";\nimport type { RemoteHead, SyncBackend } from \"../backends/sync-backend.js\";\nimport type { CommandOptions } from \"../commands/command-types.js\";\nimport { syncConfigReviewIdentity } from \"../settings/config.js\";\nimport type { AnySyncConfig } from \"../settings/settings-types.js\";\nimport { createSnapshot } from \"../snapshot/snapshot.js\";\nimport type { Snapshot, SnapshotOptions } from \"../snapshot/snapshot-types.js\";\nimport { readMergeAncestors } from \"../state/merge-baseline-store.js\";\nimport type { SyncState } from \"../state/state-types.js\";\nimport { readStateForConfig, syncStateFingerprint } from \"../state/sync-state-store.js\";\nimport { applyAgentCandidate, buildAgentEvidence, digest } from \"./agent-candidate.js\";\nimport { AgentResolutionRequired } from \"./agent-request.js\";\nimport { ContinuousError } from \"./continuous-errors.js\";\nimport type { FileMergePlan } from \"./file-merge-planner.js\";\nimport { fileHashMap, sameHashes } from \"./sync-state.js\";\n\nexport async function resolveAgentPlan(\n  ctx: ExtensionContext,\n  options: CommandOptions,\n  config: AnySyncConfig,\n  backend: SyncBackend,\n  state: SyncState,\n  local: Snapshot,\n  localRaw: Snapshot,\n  remote: Snapshot,\n  head: RemoteHead,\n  plan: FileMergePlan,\n  snapshotOptions: SnapshotOptions,\n  validate: () => Promise<void>,\n): Promise<FileMergePlan> {\n  if (plan.kind !== \"planned\" || !plan.conflicts.length) {\n    if (options.agentRetryRefusal)\n      throw new ContinuousError(\"unsafe\", \"No eligible cached refusal for the current evidence. Use Sync now.\");\n    return plan;\n  }\n  if (!ctx.hasUI || (ctx.mode !== \"tui\" && ctx.mode !== \"rpc\"))\n    throw new Error(\"Agent mode paused: TUI/RPC is required.\");\n  const ancestors = (await readMergeAncestors(config, state)) ?? [];\n  await validate();\n  let evidence: ReturnType<typeof buildAgentEvidence>;\n  try {\n    evidence = buildAgentEvidence(plan, local, remote, ancestors);\n  } catch {\n    throw new ContinuousError(\"unsafe\", \"Agent mode paused: unsafe or unsupported conflict evidence.\");\n  }\n  if (!config.partialSync && evidence.unsupported.length)\n    throw new ContinuousError(\"unsafe\", \"Agent mode paused: unsupported conflicts prevent an all-or-nothing transfer.\");\n  if (!evidence.files.length) {\n    if (options.agentRetryRefusal)\n      throw new ContinuousError(\"unsafe\", \"No eligible cached refusal for the current evidence. Use Sync now.\");\n    if (config.partialSync) return plan;\n    throw new ContinuousError(\n      \"unsafe\",\n      \"Agent mode paused: unsupported conflict or missing verified ancestor; evidence is unchanged.\",\n    );\n  }\n  if (!evidence.units.length) {\n    if (options.agentRetryRefusal)\n      throw new ContinuousError(\"unsafe\", \"No eligible cached refusal for the current evidence. Use Sync now.\");\n    return applyAgentCandidate(plan, evidence, { version: 1, results: [] });\n  }\n  if (!ctx.model) throw new ContinuousError(\"model\", \"Agent mode paused: select an available model first.\");\n  const model = digest(ctx.model);\n  const key = digest([\n    1,\n    backend.identity,\n    syncConfigReviewIdentity(config),\n    syncStateFingerprint(state),\n    head.revision,\n    fileHashMap(localRaw),\n    evidence,\n    model,\n  ]);\n  if (options.agentAcceptance?.key === key) {\n    try {\n      return applyAgentCandidate(plan, evidence, options.agentAcceptance.candidate);\n    } catch {\n      throw new ContinuousError(\"unsafe\", \"Agent mode paused: candidate refused or unsupported conflict remains.\");\n    }\n  }\n  const validateEvidence = async (signal = options.signal) => {\n    const check = async () => {\n      signal?.throwIfAborted();\n      await validate();\n      signal?.throwIfAborted();\n    };\n    await check();\n    if (digest(ctx.model) !== model) throw new Error(\"Agent mode paused: selected model changed.\");\n    const current = await createSnapshot(config.snapshotIdentity, { ...snapshotOptions, signal });\n    await check();\n    const currentState = await readStateForConfig(config);\n    await check();\n    const currentHead = await backend.readHead(signal);\n    await check();\n    if (\n      !sameHashes(fileHashMap(current), fileHashMap(localRaw)) ||\n      syncStateFingerprint(currentState) !== syncStateFingerprint(state) ||\n      !currentHead ||\n      !backend.sameRevision(head.revision, currentHead.revision)\n    )\n      throw new ContinuousError(\"stale\", \"Agent mode paused: conflict evidence changed; retry a fresh sync.\");\n  };\n  throw new AgentResolutionRequired(key, evidence, validateEvidence);\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,eAAsB,iBACpB,KACA,SACA,QACA,SACA,OACA,OACA,UACA,QACA,MACA,MACA,iBACA,UACwB;AACxB,MAAI,KAAK,SAAS,aAAa,CAAC,KAAK,UAAU,QAAQ;AACrD,QAAI,QAAQ;AACV,YAAM,IAAI,gBAAgB,UAAU,oEAAoE;AAC1G,WAAO;AAAA,EACT;AACA,MAAI,CAAC,IAAI,SAAU,IAAI,SAAS,SAAS,IAAI,SAAS;AACpD,UAAM,IAAI,MAAM,yCAAyC;AAC3D,QAAM,YAAa,MAAM,mBAAmB,QAAQ,KAAK,KAAM,CAAC;AAChE,QAAM,SAAS;AACf,MAAI;AACJ,MAAI;AACF,eAAW,mBAAmB,MAAM,OAAO,QAAQ,SAAS;AAAA,EAC9D,QAAQ;AACN,UAAM,IAAI,gBAAgB,UAAU,6DAA6D;AAAA,EACnG;AACA,MAAI,CAAC,OAAO,eAAe,SAAS,YAAY;AAC9C,UAAM,IAAI,gBAAgB,UAAU,8EAA8E;AACpH,MAAI,CAAC,SAAS,MAAM,QAAQ;AAC1B,QAAI,QAAQ;AACV,YAAM,IAAI,gBAAgB,UAAU,oEAAoE;AAC1G,QAAI,OAAO,YAAa,QAAO;AAC/B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,SAAS,MAAM,QAAQ;AAC1B,QAAI,QAAQ;AACV,YAAM,IAAI,gBAAgB,UAAU,oEAAoE;AAC1G,WAAO,oBAAoB,MAAM,UAAU,EAAE,SAAS,GAAG,SAAS,CAAC,EAAE,CAAC;AAAA,EACxE;AACA,MAAI,CAAC,IAAI,MAAO,OAAM,IAAI,gBAAgB,SAAS,qDAAqD;AACxG,QAAM,QAAQ,OAAO,IAAI,KAAK;AAC9B,QAAM,MAAM,OAAO;AAAA,IACjB;AAAA,IACA,QAAQ;AAAA,IACR,yBAAyB,MAAM;AAAA,IAC/B,qBAAqB,KAAK;AAAA,IAC1B,KAAK;AAAA,IACL,YAAY,QAAQ;AAAA,IACpB;AAAA,IACA;AAAA,EACF,CAAC;AACD,MAAI,QAAQ,iBAAiB,QAAQ,KAAK;AACxC,QAAI;AACF,aAAO,oBAAoB,MAAM,UAAU,QAAQ,gBAAgB,SAAS;AAAA,IAC9E,QAAQ;AACN,YAAM,IAAI,gBAAgB,UAAU,uEAAuE;AAAA,IAC7G;AAAA,EACF;AACA,QAAM,mBAAmB,OAAO,SAAS,QAAQ,WAAW;AAC1D,UAAM,QAAQ,YAAY;AACxB,cAAQ,eAAe;AACvB,YAAM,SAAS;AACf,cAAQ,eAAe;AAAA,IACzB;AACA,UAAM,MAAM;AACZ,QAAI,OAAO,IAAI,KAAK,MAAM,MAAO,OAAM,IAAI,MAAM,4CAA4C;AAC7F,UAAM,UAAU,MAAM,eAAe,OAAO,kBAAkB,EAAE,GAAG,iBAAiB,OAAO,CAAC;AAC5F,UAAM,MAAM;AACZ,UAAM,eAAe,MAAM,mBAAmB,MAAM;AACpD,UAAM,MAAM;AACZ,UAAM,cAAc,MAAM,QAAQ,SAAS,MAAM;AACjD,UAAM,MAAM;AACZ,QACE,CAAC,WAAW,YAAY,OAAO,GAAG,YAAY,QAAQ,CAAC,KACvD,qBAAqB,YAAY,MAAM,qBAAqB,KAAK,KACjE,CAAC,eACD,CAAC,QAAQ,aAAa,KAAK,UAAU,YAAY,QAAQ;AAEzD,YAAM,IAAI,gBAAgB,SAAS,mEAAmE;AAAA,EAC1G;AACA,QAAM,IAAI,wBAAwB,KAAK,UAAU,gBAAgB;AACnE;",
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,eAAsB,iBACpB,KACA,SACA,QACA,SACA,OACA,OACA,UACA,QACA,MACA,MACA,iBACA,UACwB;AACxB,MAAI,KAAK,SAAS,aAAa,CAAC,KAAK,UAAU,QAAQ;AACrD,QAAI,QAAQ;AACV,YAAM,IAAI,gBAAgB,UAAU,oEAAoE;AAC1G,WAAO;AAAA,EACT;AACA,MAAI,CAAC,IAAI,SAAU,IAAI,SAAS,SAAS,IAAI,SAAS;AACpD,UAAM,IAAI,MAAM,yCAAyC;AAC3D,QAAM,YAAa,MAAM,mBAAmB,QAAQ,KAAK,KAAM,CAAC;AAChE,QAAM,SAAS;AACf,MAAI;AACJ,MAAI;AACF,eAAW,mBAAmB,MAAM,OAAO,QAAQ,SAAS;AAAA,EAC9D,QAAQ;AACN,UAAM,IAAI,gBAAgB,UAAU,6DAA6D;AAAA,EACnG;AACA,MAAI,CAAC,OAAO,eAAe,SAAS,YAAY;AAC9C,UAAM,IAAI,gBAAgB,UAAU,8EAA8E;AACpH,MAAI,CAAC,SAAS,MAAM,QAAQ;AAC1B,QAAI,QAAQ;AACV,YAAM,IAAI,gBAAgB,UAAU,oEAAoE;AAC1G,QAAI,OAAO,YAAa,QAAO;AAC/B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,SAAS,MAAM,QAAQ;AAC1B,QAAI,QAAQ;AACV,YAAM,IAAI,gBAAgB,UAAU,oEAAoE;AAC1G,WAAO,oBAAoB,MAAM,UAAU,EAAE,SAAS,GAAG,SAAS,CAAC,EAAE,CAAC;AAAA,EACxE;AACA,MAAI,CAAC,IAAI,MAAO,OAAM,IAAI,gBAAgB,SAAS,qDAAqD;AACxG,QAAM,QAAQ,OAAO,IAAI,KAAK;AAC9B,QAAM,MAAM,OAAO;AAAA,IACjB;AAAA,IACA,QAAQ;AAAA,IACR,yBAAyB,MAAM;AAAA,IAC/B,qBAAqB,KAAK;AAAA,IAC1B,KAAK;AAAA,IACL,YAAY,QAAQ;AAAA,IACpB;AAAA,IACA;AAAA,EACF,CAAC;AACD,MAAI,QAAQ,iBAAiB,QAAQ,KAAK;AACxC,QAAI;AACF,aAAO,oBAAoB,MAAM,UAAU,QAAQ,gBAAgB,SAAS;AAAA,IAC9E,QAAQ;AACN,YAAM,IAAI,gBAAgB,UAAU,uEAAuE;AAAA,IAC7G;AAAA,EACF;AACA,QAAM,mBAAmB,OAAO,SAAS,QAAQ,WAAW;AAC1D,UAAM,QAAQ,YAAY;AACxB,cAAQ,eAAe;AACvB,YAAM,SAAS;AACf,cAAQ,eAAe;AAAA,IACzB;AACA,UAAM,MAAM;AACZ,QAAI,OAAO,IAAI,KAAK,MAAM,MAAO,OAAM,IAAI,MAAM,4CAA4C;AAC7F,UAAM,UAAU,MAAM,eAAe,OAAO,kBAAkB,EAAE,GAAG,iBAAiB,OAAO,CAAC;AAC5F,UAAM,MAAM;AACZ,UAAM,eAAe,MAAM,mBAAmB,MAAM;AACpD,UAAM,MAAM;AACZ,UAAM,cAAc,MAAM,QAAQ,SAAS,MAAM;AACjD,UAAM,MAAM;AACZ,QACE,CAAC,WAAW,YAAY,OAAO,GAAG,YAAY,QAAQ,CAAC,KACvD,qBAAqB,YAAY,MAAM,qBAAqB,KAAK,KACjE,CAAC,eACD,CAAC,QAAQ,aAAa,KAAK,UAAU,YAAY,QAAQ;AAEzD,YAAM,IAAI,gBAAgB,SAAS,mEAAmE;AAAA,EAC1G;AACA,QAAM,IAAI,wBAAwB,KAAK,UAAU,gBAAgB;AACnE;",
   "names": []
 }

package/dist/chunks/{agent-refusal-retry-RPTMUQXK.ts → agent-refusal-retry-476YGNU5.ts}

@@ -3,24 +3,27 @@
 import {
   confirmMergeReview
 } from "./chunk-KHBPED6W.ts";
+import "./chunk-TZC7GDJE.ts";
+import "./chunk-FLHCOJCD.ts";
 import {
   captureMutationOwner
-} from "./chunk-UOHR7LRO.ts";
+} from "./chunk-GNYGNHFF.ts";
 import {
   safeTerminalText
 } from "./chunk-AMJRUXFT.ts";
-import "./chunk-UBV24CG4.ts";
 import {
   loadConfig
-} from "./chunk-QO333NM4.ts";
-import "./chunk-A6HU4ERM.ts";
+} from "./chunk-OVBAW7KV.ts";
+import "./chunk-X7R6DCVF.ts";
 import "./chunk-PWMWOJP4.ts";
-import "./chunk-QOFMXPM5.ts";
-import "./chunk-ZW5ZLGBI.ts";
+import "./chunk-AR2DGDUI.ts";
 import "./chunk-SWRVXVFD.ts";
 import "./chunk-2JZFHNLM.ts";
 import "./chunk-T2SJD3N7.ts";
-import "./chunk-HUZ5CR4W.ts";
+import "./chunk-ESKOPQVB.ts";
+import "./chunk-KYTT7KV4.ts";
+import "./chunk-CBLTWXAU.ts";
+import "./chunk-FHE2DCA2.ts";
 
 // src/sync/agent-refusal-retry.ts
 async function confirmAgentRefusalRetry(ctx, setup, evidence, validate, signal) {
@@ -66,4 +69,4 @@ async function confirmAgentRefusalRetry(ctx, setup, evidence, validate, signal)
 export {
   confirmAgentRefusalRetry
 };
-//# sourceMappingURL=agent-refusal-retry-RPTMUQXK.ts.map
+//# sourceMappingURL=agent-refusal-retry-476YGNU5.ts.map

package/dist/chunks/{agent-refusal-retry-RPTMUQXK.ts.map → agent-refusal-retry-476YGNU5.ts.map}

@@ -2,6 +2,6 @@
   "version": 3,
   "sources": ["../../src/sync/agent-refusal-retry.ts"],
   "sourcesContent": ["import type { ExtensionContext } from \"@earendil-works/pi-coding-agent\";\nimport { loadConfig } from \"../settings/config.js\";\nimport { confirmMergeReview } from \"../ui/merge-review.js\";\nimport { safeTerminalText } from \"../ui/terminal-text.js\";\nimport type { AgentEvidence } from \"./agent-candidate.js\";\nimport { captureMutationOwner } from \"./sync-local.js\";\n\n/** Review uses fresh request validation; no private text or provider error enters the summary. */\nexport async function confirmAgentRefusalRetry(\n  ctx: ExtensionContext,\n  setup: string | undefined,\n  evidence: AgentEvidence,\n  validate: () => Promise<void>,\n  signal?: AbortSignal,\n) {\n  const owner = captureMutationOwner(ctx, signal);\n  owner();\n  const config = await loadConfig(setup);\n  owner();\n  await validate();\n  owner();\n  const summary = [\n    `Setup: ${safeTerminalText(config.setupName)}`,\n    `Storage connection: ${safeTerminalText(config.connectionName)}`,\n    `Storage path: ${safeTerminalText(config.storagePath)}`,\n    ...(config.backend.type === \"s3\" ? [`Bucket: ${safeTerminalText(config.backend.destination.bucket)}`] : []),\n    ...(config.backend.type === \"git\" ? [`Branch: ${safeTerminalText(config.backend.destination.branch)}`] : []),\n    `Selected model: ${safeTerminalText(ctx.model?.provider ?? \"unknown\")}/${safeTerminalText(ctx.model?.id ?? \"unknown\")}`,\n    `Conflict paths: ${[...new Set(evidence.units.map((unit) => unit.path))].map(safeTerminalText).join(\", \")}`,\n    \"Send this conflict evidence again despite the cached refusal? This permits one fresh provider request for the reviewed candidate, may incur costs, and can replace selected local and remote content if the result passes validation. Semantic correctness is not guaranteed.\",\n    \"Ordinary Sync now continues to reuse cached results. Automatic request accounting is not cleared or reset. The previous refusal is retained privately. No resources reload automatically. Cancellation cannot recall submitted content, provider charges, or committed writes.\",\n  ].join(\"\\n\\n\");\n  const confirmed = await confirmMergeReview(\n    ctx,\n    \"Retry refused model result?\",\n    summary,\n    signal,\n    () => {\n      try {\n        owner();\n        return true;\n      } catch {\n        return false;\n      }\n    },\n    \"Send one fresh request\",\n    summary.split(\"\\n\"),\n  );\n  owner();\n  if (!confirmed) return false;\n  await validate();\n  owner();\n  return true;\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;AAQA,eAAsB,yBACpB,KACA,OACA,UACA,UACA,QACA;AACA,QAAM,QAAQ,qBAAqB,KAAK,MAAM;AAC9C,QAAM;AACN,QAAM,SAAS,MAAM,WAAW,KAAK;AACrC,QAAM;AACN,QAAM,SAAS;AACf,QAAM;AACN,QAAM,UAAU;AAAA,IACd,UAAU,iBAAiB,OAAO,SAAS,CAAC;AAAA,IAC5C,uBAAuB,iBAAiB,OAAO,cAAc,CAAC;AAAA,IAC9D,iBAAiB,iBAAiB,OAAO,WAAW,CAAC;AAAA,IACrD,GAAI,OAAO,QAAQ,SAAS,OAAO,CAAC,WAAW,iBAAiB,OAAO,QAAQ,YAAY,MAAM,CAAC,EAAE,IAAI,CAAC;AAAA,IACzG,GAAI,OAAO,QAAQ,SAAS,QAAQ,CAAC,WAAW,iBAAiB,OAAO,QAAQ,YAAY,MAAM,CAAC,EAAE,IAAI,CAAC;AAAA,IAC1G,mBAAmB,iBAAiB,IAAI,OAAO,YAAY,SAAS,CAAC,IAAI,iBAAiB,IAAI,OAAO,MAAM,SAAS,CAAC;AAAA,IACrH,mBAAmB,CAAC,GAAG,IAAI,IAAI,SAAS,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,EAAE,IAAI,gBAAgB,EAAE,KAAK,IAAI,CAAC;AAAA,IACzG;AAAA,IACA;AAAA,EACF,EAAE,KAAK,MAAM;AACb,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM;AACJ,UAAI;AACF,cAAM;AACN,eAAO;AAAA,MACT,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA;AAAA,IACA,QAAQ,MAAM,IAAI;AAAA,EACpB;AACA,QAAM;AACN,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,SAAS;AACf,QAAM;AACN,SAAO;AACT;",
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,eAAsB,yBACpB,KACA,OACA,UACA,UACA,QACA;AACA,QAAM,QAAQ,qBAAqB,KAAK,MAAM;AAC9C,QAAM;AACN,QAAM,SAAS,MAAM,WAAW,KAAK;AACrC,QAAM;AACN,QAAM,SAAS;AACf,QAAM;AACN,QAAM,UAAU;AAAA,IACd,UAAU,iBAAiB,OAAO,SAAS,CAAC;AAAA,IAC5C,uBAAuB,iBAAiB,OAAO,cAAc,CAAC;AAAA,IAC9D,iBAAiB,iBAAiB,OAAO,WAAW,CAAC;AAAA,IACrD,GAAI,OAAO,QAAQ,SAAS,OAAO,CAAC,WAAW,iBAAiB,OAAO,QAAQ,YAAY,MAAM,CAAC,EAAE,IAAI,CAAC;AAAA,IACzG,GAAI,OAAO,QAAQ,SAAS,QAAQ,CAAC,WAAW,iBAAiB,OAAO,QAAQ,YAAY,MAAM,CAAC,EAAE,IAAI,CAAC;AAAA,IAC1G,mBAAmB,iBAAiB,IAAI,OAAO,YAAY,SAAS,CAAC,IAAI,iBAAiB,IAAI,OAAO,MAAM,SAAS,CAAC;AAAA,IACrH,mBAAmB,CAAC,GAAG,IAAI,IAAI,SAAS,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,EAAE,IAAI,gBAAgB,EAAE,KAAK,IAAI,CAAC;AAAA,IACzG;AAAA,IACA;AAAA,EACF,EAAE,KAAK,MAAM;AACb,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM;AACJ,UAAI;AACF,cAAM;AACN,eAAO;AAAA,MACT,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA;AAAA,IACA,QAAQ,MAAM,IAAI;AAAA,EACpB;AACA,QAAM;AACN,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,SAAS;AACf,QAAM;AACN,SAAO;AACT;",
   "names": []
 }

package/dist/chunks/{agent-store-55CZOCPX.ts → agent-store-RJSMNOYP.ts}

@@ -2,16 +2,12 @@
 // @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
 import {
   withLock
-} from "./chunk-AAEEHR7H.ts";
-import {
-  ContinuousError
-} from "./chunk-DT7M4VQS.ts";
-import "./chunk-YDVQYUHE.ts";
+} from "./chunk-6O3EDBRL.ts";
 import "./chunk-PWMWOJP4.ts";
+import "./chunk-DN4IA7MR.ts";
 import {
-  AGENT_OUTPUT_BYTES
-} from "./chunk-PRUEIIK7.ts";
-import "./chunk-UPNVIUBN.ts";
+  writeJson
+} from "./chunk-AR2DGDUI.ts";
 import {
   LOCKFILE_FS_ADAPTER,
   LOCK_GUARD_STALE_MS,
@@ -20,9 +16,14 @@ import {
 } from "./chunk-SWRVXVFD.ts";
 import "./chunk-2JZFHNLM.ts";
 import "./chunk-T2SJD3N7.ts";
+import "./chunk-FHE2DCA2.ts";
 import {
-  writeJson
-} from "./chunk-HUZ5CR4W.ts";
+  ContinuousError
+} from "./chunk-DT7M4VQS.ts";
+import "./chunk-YDVQYUHE.ts";
+import {
+  AGENT_OUTPUT_BYTES
+} from "./chunk-PRUEIIK7.ts";
 
 // src/sync/agent-store.ts
 import { createHash, randomUUID } from "node:crypto";
@@ -171,4 +172,4 @@ export {
   saveAgentCandidate,
   withAgentClaim
 };
-//# sourceMappingURL=agent-store-55CZOCPX.ts.map
+//# sourceMappingURL=agent-store-RJSMNOYP.ts.map

package/dist/chunks/{agent-store-55CZOCPX.ts.map → agent-store-RJSMNOYP.ts.map}

@@ -2,6 +2,6 @@
   "version": 3,
   "sources": ["../../src/sync/agent-store.ts"],
   "sourcesContent": ["import { createHash, randomUUID } from \"node:crypto\";\nimport fs from \"node:fs/promises\";\nimport path from \"node:path\";\nimport lockfile from \"proper-lockfile\";\nimport { writeJson } from \"../state/json-file.js\";\nimport { withLock } from \"../state/lock.js\";\nimport { LOCK_GUARD_STALE_MS, LOCK_GUARD_UPDATE_MS } from \"../state/lock-policy.js\";\nimport { LOCKFILE_FS_ADAPTER } from \"../state/lockfile-fs.js\";\nimport { stateDir } from \"../state/state-directory.js\";\nimport type { AgentCandidate } from \"./agent-candidate.js\";\nimport { AGENT_OUTPUT_BYTES } from \"./agent-policy.js\";\nimport { ContinuousError } from \"./continuous-errors.js\";\n\ninterface Claim {\n  version: 1;\n  id: string;\n  pid: number;\n}\nfunction paths() {\n  const root = path.join(stateDir(), \"agent-resolver\");\n  return { root, claim: path.join(root, \"claim.json\") };\n}\nasync function directory() {\n  const { root } = paths();\n  await fs.mkdir(root, { mode: 0o700 });\n}\nasync function checkDirectory() {\n  const stat = await fs.lstat(paths().root);\n  if (!stat.isDirectory() || stat.isSymbolicLink() || (process.platform !== \"win32\" && stat.mode & 0o077))\n    throw new Error(\"Unsafe agent resolver directory; evidence retained.\");\n}\nasync function readPrivate(file: string): Promise<unknown> {\n  try {\n    await checkDirectory();\n    const stat = await fs.lstat(file);\n    if (\n      !stat.isFile() ||\n      stat.isSymbolicLink() ||\n      stat.nlink !== 1 ||\n      stat.size > AGENT_OUTPUT_BYTES * 2 ||\n      (process.platform !== \"win32\" && stat.mode & 0o077)\n    )\n      throw new Error(\"Unsafe agent resolver record; evidence retained.\");\n    return JSON.parse(await fs.readFile(file, \"utf8\"));\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return undefined;\n    throw new Error(\"Unreadable agent resolver record; evidence retained.\");\n  }\n}\nasync function readClaim(): Promise<Claim | undefined> {\n  const value = await readPrivate(paths().claim);\n  if (value === undefined) return;\n  const claim = value as Claim;\n  if (\n    claim?.version !== 1 ||\n    typeof claim.id !== \"string\" ||\n    !/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/u.test(claim.id) ||\n    Object.keys(claim).sort().join(\",\") !== \"id,pid,version\" ||\n    !Number.isSafeInteger(claim.pid) ||\n    claim.pid < 1 ||\n    claim.pid > 2_147_483_647\n  )\n    throw new Error(\"Invalid agent resolver claim; evidence retained.\");\n  return claim;\n}\nfunction alive(pid: number) {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (error) {\n    return (error as NodeJS.ErrnoException).code !== \"ESRCH\";\n  }\n}\n\n/** Caller retains the state-directory migration guard; claim changes use a separate short-lived guard. */\nexport async function withAgentClaim<T>(fn: (assertOwner: () => Promise<void>) => Promise<T>): Promise<T> {\n  const claim: Claim = { version: 1, id: randomUUID(), pid: process.pid };\n  let armed = false;\n  const assertOwner = async () => {\n    const current = await readClaim();\n    if (current?.id !== claim.id || current.pid !== process.pid)\n      throw new Error(\"Agent resolver ownership changed; candidate not applied.\");\n  };\n  try {\n    await withLock(\"agent-claim\", async () => {\n      try {\n        await directory();\n      } catch (error) {\n        if ((error as NodeJS.ErrnoException).code !== \"EEXIST\") throw error;\n      }\n      await checkDirectory();\n      await withClaimGuard(async () => {\n        const existing = await readClaim();\n        if (existing && alive(existing.pid))\n          throw new ContinuousError(\"contention\", \"Agent mode deferred: another local resolver is running.\");\n        // A durability failure can occur after rename: cleanup must own partial initialization too.\n        armed = true;\n        await writeJson(paths().claim, claim);\n      });\n    });\n    return await fn(assertOwner);\n  } finally {\n    if (armed) await releaseClaim(claim);\n  }\n}\nasync function releaseClaim(claim: Claim) {\n  // Ordinary transfers may hold the operation lock for an arbitrary time.\n  // Cleanup needs only the claim guard; it never waits for that operation lock.\n  await withClaimGuard(async () => {\n    const current = await readClaim();\n    if (current?.id === claim.id && current.pid === claim.pid) await fs.rm(paths().claim);\n  });\n}\nasync function withClaimGuard<T>(run: () => Promise<T>): Promise<T> {\n  await checkDirectory();\n  let compromisedError: Error | undefined;\n  const release = await lockfile.lock(paths().claim, {\n    fs: LOCKFILE_FS_ADAPTER,\n    realpath: false,\n    stale: LOCK_GUARD_STALE_MS,\n    update: LOCK_GUARD_UPDATE_MS,\n    retries: { retries: 100, factor: 1.2, minTimeout: 10, maxTimeout: 100 },\n    onCompromised: (error) => {\n      compromisedError = error;\n    },\n  });\n  try {\n    const result = await run();\n    if (compromisedError) throw compromisedError;\n    return result;\n  } finally {\n    await release();\n  }\n}\nfunction candidatePath(key: string) {\n  if (!/^[a-f0-9]{64}$/u.test(key)) throw new Error(\"Invalid agent candidate key.\");\n  return path.join(paths().root, `${key}.json`);\n}\nexport async function readAgentCandidate(key: string): Promise<unknown> {\n  return readPrivate(candidatePath(key));\n}\nexport async function saveAgentCandidate(key: string, candidate: unknown) {\n  await checkDirectory();\n  const target = candidatePath(key);\n  const existing = await readPrivate(target);\n  if (existing !== undefined) {\n    if (JSON.stringify(existing) !== JSON.stringify(candidate))\n      throw new Error(\"Agent candidate changed before save; existing evidence retained.\");\n    return;\n  }\n  await writeJson(target, candidate, { maxBytes: AGENT_OUTPUT_BYTES * 2 });\n}\n\n/** Caller holds the resolver claim and operation lock and has validated both candidates. */\nexport async function replaceRefusedAgentCandidate(\n  key: string,\n  previous: AgentCandidate,\n  candidate: AgentCandidate,\n  validate: () => Promise<void>,\n) {\n  const original = JSON.stringify(previous);\n  if (!previous.results.some((row) => \"refuse\" in row) || candidate.results.some((row) => \"refuse\" in row))\n    throw new Error(\"Only a validated refusal can be replaced by a complete retry result.\");\n  const target = candidatePath(key);\n  const assertPrevious = async () => {\n    if (JSON.stringify(await readPrivate(target)) !== original)\n      throw new Error(\"Cached refusal changed during review; previous evidence retained.\");\n    await validate();\n  };\n  await assertPrevious();\n  const digest = createHash(\"sha256\").update(original).digest(\"hex\");\n  const archive = path.join(paths().root, `${key}.refusal-${digest}.json`);\n  const retained = await readPrivate(archive);\n  await validate();\n  if (retained !== undefined && JSON.stringify(retained) !== original)\n    throw new Error(\"Retained refusal changed; evidence retained.\");\n  if (retained === undefined) await writeJson(archive, previous, { maxBytes: AGENT_OUTPUT_BYTES * 2 });\n  await assertPrevious();\n  // Archive first: even a durability error after replacement retains the original refusal.\n  // Once rename commits, later cancellation cannot undo the valid new candidate.\n  await writeJson(target, candidate, { maxBytes: AGENT_OUTPUT_BYTES * 2 });\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,YAAY,kBAAkB;AACvC,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,OAAO,cAAc;AAerB,SAAS,QAAQ;AACf,QAAM,OAAO,KAAK,KAAK,SAAS,GAAG,gBAAgB;AACnD,SAAO,EAAE,MAAM,OAAO,KAAK,KAAK,MAAM,YAAY,EAAE;AACtD;AACA,eAAe,YAAY;AACzB,QAAM,EAAE,KAAK,IAAI,MAAM;AACvB,QAAM,GAAG,MAAM,MAAM,EAAE,MAAM,IAAM,CAAC;AACtC;AACA,eAAe,iBAAiB;AAC9B,QAAM,OAAO,MAAM,GAAG,MAAM,MAAM,EAAE,IAAI;AACxC,MAAI,CAAC,KAAK,YAAY,KAAK,KAAK,eAAe,KAAM,QAAQ,aAAa,WAAW,KAAK,OAAO;AAC/F,UAAM,IAAI,MAAM,qDAAqD;AACzE;AACA,eAAe,YAAY,MAAgC;AACzD,MAAI;AACF,UAAM,eAAe;AACrB,UAAM,OAAO,MAAM,GAAG,MAAM,IAAI;AAChC,QACE,CAAC,KAAK,OAAO,KACb,KAAK,eAAe,KACpB,KAAK,UAAU,KACf,KAAK,OAAO,qBAAqB,KAChC,QAAQ,aAAa,WAAW,KAAK,OAAO;AAE7C,YAAM,IAAI,MAAM,kDAAkD;AACpE,WAAO,KAAK,MAAM,MAAM,GAAG,SAAS,MAAM,MAAM,CAAC;AAAA,EACnD,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO;AAC/D,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AACF;AACA,eAAe,YAAwC;AACrD,QAAM,QAAQ,MAAM,YAAY,MAAM,EAAE,KAAK;AAC7C,MAAI,UAAU,OAAW;AACzB,QAAM,QAAQ;AACd,MACE,OAAO,YAAY,KACnB,OAAO,MAAM,OAAO,YACpB,CAAC,kEAAkE,KAAK,MAAM,EAAE,KAChF,OAAO,KAAK,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,oBACxC,CAAC,OAAO,cAAc,MAAM,GAAG,KAC/B,MAAM,MAAM,KACZ,MAAM,MAAM;AAEZ,UAAM,IAAI,MAAM,kDAAkD;AACpE,SAAO;AACT;AACA,SAAS,MAAM,KAAa;AAC1B,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,WAAQ,MAAgC,SAAS;AAAA,EACnD;AACF;AAGA,eAAsB,eAAkB,IAAkE;AACxG,QAAM,QAAe,EAAE,SAAS,GAAG,IAAI,WAAW,GAAG,KAAK,QAAQ,IAAI;AACtE,MAAI,QAAQ;AACZ,QAAM,cAAc,YAAY;AAC9B,UAAM,UAAU,MAAM,UAAU;AAChC,QAAI,SAAS,OAAO,MAAM,MAAM,QAAQ,QAAQ,QAAQ;AACtD,YAAM,IAAI,MAAM,0DAA0D;AAAA,EAC9E;AACA,MAAI;AACF,UAAM,SAAS,eAAe,YAAY;AACxC,UAAI;AACF,cAAM,UAAU;AAAA,MAClB,SAAS,OAAO;AACd,YAAK,MAAgC,SAAS,SAAU,OAAM;AAAA,MAChE;AACA,YAAM,eAAe;AACrB,YAAM,eAAe,YAAY;AAC/B,cAAM,WAAW,MAAM,UAAU;AACjC,YAAI,YAAY,MAAM,SAAS,GAAG;AAChC,gBAAM,IAAI,gBAAgB,cAAc,yDAAyD;AAEnG,gBAAQ;AACR,cAAM,UAAU,MAAM,EAAE,OAAO,KAAK;AAAA,MACtC,CAAC;AAAA,IACH,CAAC;AACD,WAAO,MAAM,GAAG,WAAW;AAAA,EAC7B,UAAE;AACA,QAAI,MAAO,OAAM,aAAa,KAAK;AAAA,EACrC;AACF;AACA,eAAe,aAAa,OAAc;AAGxC,QAAM,eAAe,YAAY;AAC/B,UAAM,UAAU,MAAM,UAAU;AAChC,QAAI,SAAS,OAAO,MAAM,MAAM,QAAQ,QAAQ,MAAM,IAAK,OAAM,GAAG,GAAG,MAAM,EAAE,KAAK;AAAA,EACtF,CAAC;AACH;AACA,eAAe,eAAkB,KAAmC;AAClE,QAAM,eAAe;AACrB,MAAI;AACJ,QAAM,UAAU,MAAM,SAAS,KAAK,MAAM,EAAE,OAAO;AAAA,IACjD,IAAI;AAAA,IACJ,UAAU;AAAA,IACV,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,EAAE,SAAS,KAAK,QAAQ,KAAK,YAAY,IAAI,YAAY,IAAI;AAAA,IACtE,eAAe,CAAC,UAAU;AACxB,yBAAmB;AAAA,IACrB;AAAA,EACF,CAAC;AACD,MAAI;AACF,UAAM,SAAS,MAAM,IAAI;AACzB,QAAI,iBAAkB,OAAM;AAC5B,WAAO;AAAA,EACT,UAAE;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;AACA,SAAS,cAAc,KAAa;AAClC,MAAI,CAAC,kBAAkB,KAAK,GAAG,EAAG,OAAM,IAAI,MAAM,8BAA8B;AAChF,SAAO,KAAK,KAAK,MAAM,EAAE,MAAM,GAAG,GAAG,OAAO;AAC9C;AACA,eAAsB,mBAAmB,KAA+B;AACtE,SAAO,YAAY,cAAc,GAAG,CAAC;AACvC;AACA,eAAsB,mBAAmB,KAAa,WAAoB;AACxE,QAAM,eAAe;AACrB,QAAM,SAAS,cAAc,GAAG;AAChC,QAAM,WAAW,MAAM,YAAY,MAAM;AACzC,MAAI,aAAa,QAAW;AAC1B,QAAI,KAAK,UAAU,QAAQ,MAAM,KAAK,UAAU,SAAS;AACvD,YAAM,IAAI,MAAM,kEAAkE;AACpF;AAAA,EACF;AACA,QAAM,UAAU,QAAQ,WAAW,EAAE,UAAU,qBAAqB,EAAE,CAAC;AACzE;AAGA,eAAsB,6BACpB,KACA,UACA,WACA,UACA;AACA,QAAM,WAAW,KAAK,UAAU,QAAQ;AACxC,MAAI,CAAC,SAAS,QAAQ,KAAK,CAAC,QAAQ,YAAY,GAAG,KAAK,UAAU,QAAQ,KAAK,CAAC,QAAQ,YAAY,GAAG;AACrG,UAAM,IAAI,MAAM,sEAAsE;AACxF,QAAM,SAAS,cAAc,GAAG;AAChC,QAAM,iBAAiB,YAAY;AACjC,QAAI,KAAK,UAAU,MAAM,YAAY,MAAM,CAAC,MAAM;AAChD,YAAM,IAAI,MAAM,mEAAmE;AACrF,UAAM,SAAS;AAAA,EACjB;AACA,QAAM,eAAe;AACrB,QAAM,SAAS,WAAW,QAAQ,EAAE,OAAO,QAAQ,EAAE,OAAO,KAAK;AACjE,QAAM,UAAU,KAAK,KAAK,MAAM,EAAE,MAAM,GAAG,GAAG,YAAY,MAAM,OAAO;AACvE,QAAM,WAAW,MAAM,YAAY,OAAO;AAC1C,QAAM,SAAS;AACf,MAAI,aAAa,UAAa,KAAK,UAAU,QAAQ,MAAM;AACzD,UAAM,IAAI,MAAM,8CAA8C;AAChE,MAAI,aAAa,OAAW,OAAM,UAAU,SAAS,UAAU,EAAE,UAAU,qBAAqB,EAAE,CAAC;AACnG,QAAM,eAAe;AAGrB,QAAM,UAAU,QAAQ,WAAW,EAAE,UAAU,qBAAqB,EAAE,CAAC;AACzE;",
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,YAAY,kBAAkB;AACvC,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,OAAO,cAAc;AAerB,SAAS,QAAQ;AACf,QAAM,OAAO,KAAK,KAAK,SAAS,GAAG,gBAAgB;AACnD,SAAO,EAAE,MAAM,OAAO,KAAK,KAAK,MAAM,YAAY,EAAE;AACtD;AACA,eAAe,YAAY;AACzB,QAAM,EAAE,KAAK,IAAI,MAAM;AACvB,QAAM,GAAG,MAAM,MAAM,EAAE,MAAM,IAAM,CAAC;AACtC;AACA,eAAe,iBAAiB;AAC9B,QAAM,OAAO,MAAM,GAAG,MAAM,MAAM,EAAE,IAAI;AACxC,MAAI,CAAC,KAAK,YAAY,KAAK,KAAK,eAAe,KAAM,QAAQ,aAAa,WAAW,KAAK,OAAO;AAC/F,UAAM,IAAI,MAAM,qDAAqD;AACzE;AACA,eAAe,YAAY,MAAgC;AACzD,MAAI;AACF,UAAM,eAAe;AACrB,UAAM,OAAO,MAAM,GAAG,MAAM,IAAI;AAChC,QACE,CAAC,KAAK,OAAO,KACb,KAAK,eAAe,KACpB,KAAK,UAAU,KACf,KAAK,OAAO,qBAAqB,KAChC,QAAQ,aAAa,WAAW,KAAK,OAAO;AAE7C,YAAM,IAAI,MAAM,kDAAkD;AACpE,WAAO,KAAK,MAAM,MAAM,GAAG,SAAS,MAAM,MAAM,CAAC;AAAA,EACnD,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO;AAC/D,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AACF;AACA,eAAe,YAAwC;AACrD,QAAM,QAAQ,MAAM,YAAY,MAAM,EAAE,KAAK;AAC7C,MAAI,UAAU,OAAW;AACzB,QAAM,QAAQ;AACd,MACE,OAAO,YAAY,KACnB,OAAO,MAAM,OAAO,YACpB,CAAC,kEAAkE,KAAK,MAAM,EAAE,KAChF,OAAO,KAAK,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,oBACxC,CAAC,OAAO,cAAc,MAAM,GAAG,KAC/B,MAAM,MAAM,KACZ,MAAM,MAAM;AAEZ,UAAM,IAAI,MAAM,kDAAkD;AACpE,SAAO;AACT;AACA,SAAS,MAAM,KAAa;AAC1B,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,WAAQ,MAAgC,SAAS;AAAA,EACnD;AACF;AAGA,eAAsB,eAAkB,IAAkE;AACxG,QAAM,QAAe,EAAE,SAAS,GAAG,IAAI,WAAW,GAAG,KAAK,QAAQ,IAAI;AACtE,MAAI,QAAQ;AACZ,QAAM,cAAc,YAAY;AAC9B,UAAM,UAAU,MAAM,UAAU;AAChC,QAAI,SAAS,OAAO,MAAM,MAAM,QAAQ,QAAQ,QAAQ;AACtD,YAAM,IAAI,MAAM,0DAA0D;AAAA,EAC9E;AACA,MAAI;AACF,UAAM,SAAS,eAAe,YAAY;AACxC,UAAI;AACF,cAAM,UAAU;AAAA,MAClB,SAAS,OAAO;AACd,YAAK,MAAgC,SAAS,SAAU,OAAM;AAAA,MAChE;AACA,YAAM,eAAe;AACrB,YAAM,eAAe,YAAY;AAC/B,cAAM,WAAW,MAAM,UAAU;AACjC,YAAI,YAAY,MAAM,SAAS,GAAG;AAChC,gBAAM,IAAI,gBAAgB,cAAc,yDAAyD;AAEnG,gBAAQ;AACR,cAAM,UAAU,MAAM,EAAE,OAAO,KAAK;AAAA,MACtC,CAAC;AAAA,IACH,CAAC;AACD,WAAO,MAAM,GAAG,WAAW;AAAA,EAC7B,UAAE;AACA,QAAI,MAAO,OAAM,aAAa,KAAK;AAAA,EACrC;AACF;AACA,eAAe,aAAa,OAAc;AAGxC,QAAM,eAAe,YAAY;AAC/B,UAAM,UAAU,MAAM,UAAU;AAChC,QAAI,SAAS,OAAO,MAAM,MAAM,QAAQ,QAAQ,MAAM,IAAK,OAAM,GAAG,GAAG,MAAM,EAAE,KAAK;AAAA,EACtF,CAAC;AACH;AACA,eAAe,eAAkB,KAAmC;AAClE,QAAM,eAAe;AACrB,MAAI;AACJ,QAAM,UAAU,MAAM,SAAS,KAAK,MAAM,EAAE,OAAO;AAAA,IACjD,IAAI;AAAA,IACJ,UAAU;AAAA,IACV,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,EAAE,SAAS,KAAK,QAAQ,KAAK,YAAY,IAAI,YAAY,IAAI;AAAA,IACtE,eAAe,CAAC,UAAU;AACxB,yBAAmB;AAAA,IACrB;AAAA,EACF,CAAC;AACD,MAAI;AACF,UAAM,SAAS,MAAM,IAAI;AACzB,QAAI,iBAAkB,OAAM;AAC5B,WAAO;AAAA,EACT,UAAE;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;AACA,SAAS,cAAc,KAAa;AAClC,MAAI,CAAC,kBAAkB,KAAK,GAAG,EAAG,OAAM,IAAI,MAAM,8BAA8B;AAChF,SAAO,KAAK,KAAK,MAAM,EAAE,MAAM,GAAG,GAAG,OAAO;AAC9C;AACA,eAAsB,mBAAmB,KAA+B;AACtE,SAAO,YAAY,cAAc,GAAG,CAAC;AACvC;AACA,eAAsB,mBAAmB,KAAa,WAAoB;AACxE,QAAM,eAAe;AACrB,QAAM,SAAS,cAAc,GAAG;AAChC,QAAM,WAAW,MAAM,YAAY,MAAM;AACzC,MAAI,aAAa,QAAW;AAC1B,QAAI,KAAK,UAAU,QAAQ,MAAM,KAAK,UAAU,SAAS;AACvD,YAAM,IAAI,MAAM,kEAAkE;AACpF;AAAA,EACF;AACA,QAAM,UAAU,QAAQ,WAAW,EAAE,UAAU,qBAAqB,EAAE,CAAC;AACzE;AAGA,eAAsB,6BACpB,KACA,UACA,WACA,UACA;AACA,QAAM,WAAW,KAAK,UAAU,QAAQ;AACxC,MAAI,CAAC,SAAS,QAAQ,KAAK,CAAC,QAAQ,YAAY,GAAG,KAAK,UAAU,QAAQ,KAAK,CAAC,QAAQ,YAAY,GAAG;AACrG,UAAM,IAAI,MAAM,sEAAsE;AACxF,QAAM,SAAS,cAAc,GAAG;AAChC,QAAM,iBAAiB,YAAY;AACjC,QAAI,KAAK,UAAU,MAAM,YAAY,MAAM,CAAC,MAAM;AAChD,YAAM,IAAI,MAAM,mEAAmE;AACrF,UAAM,SAAS;AAAA,EACjB;AACA,QAAM,eAAe;AACrB,QAAM,SAAS,WAAW,QAAQ,EAAE,OAAO,QAAQ,EAAE,OAAO,KAAK;AACjE,QAAM,UAAU,KAAK,KAAK,MAAM,EAAE,MAAM,GAAG,GAAG,YAAY,MAAM,OAAO;AACvE,QAAM,WAAW,MAAM,YAAY,OAAO;AAC1C,QAAM,SAAS;AACf,MAAI,aAAa,UAAa,KAAK,UAAU,QAAQ,MAAM;AACzD,UAAM,IAAI,MAAM,8CAA8C;AAChE,MAAI,aAAa,OAAW,OAAM,UAAU,SAAS,UAAU,EAAE,UAAU,qBAAqB,EAAE,CAAC;AACnG,QAAM,eAAe;AAGrB,QAAM,UAAU,QAAQ,WAAW,EAAE,UAAU,qBAAqB,EAAE,CAAC;AACzE;",
   "names": []
 }

package/dist/chunks/agent-sync-EUK2CPSS.ts

@@ -0,0 +1,22 @@
+// @generated by scripts/build-runtime.mjs; do not edit.
+// @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
+import {
+  withAgentSyncLock
+} from "./chunk-F7E3VFXU.ts";
+import "./chunk-3ST7RSYN.ts";
+import "./chunk-K3RIEL6J.ts";
+import "./chunk-6O3EDBRL.ts";
+import "./chunk-PWMWOJP4.ts";
+import "./chunk-DN4IA7MR.ts";
+import "./chunk-AR2DGDUI.ts";
+import "./chunk-SWRVXVFD.ts";
+import "./chunk-2JZFHNLM.ts";
+import "./chunk-T2SJD3N7.ts";
+import "./chunk-FHE2DCA2.ts";
+import "./chunk-DT7M4VQS.ts";
+import "./chunk-YDVQYUHE.ts";
+import "./chunk-PRUEIIK7.ts";
+export {
+  withAgentSyncLock
+};
+//# sourceMappingURL=agent-sync-EUK2CPSS.ts.map

package/dist/chunks/{chunk-U3XRI2HF.ts → chunk-3IYAPMST.ts}

@@ -1,15 +1,18 @@
 // @generated by scripts/build-runtime.mjs; do not edit.
 // @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
+import {
+  automaticSyncSummary
+} from "./chunk-ECYCNZOE.ts";
 import {
   addStorageConnection,
   addSyncSetup,
   saveNewV3Settings,
   updateStorageConnection,
   updateSyncSetup
-} from "./chunk-B4QZBDBT.ts";
+} from "./chunk-45COPAK7.ts";
 import {
-  automaticSyncSummary
-} from "./chunk-ECYCNZOE.ts";
+  syncErrorGuidance
+} from "./chunk-G4RUXRWZ.ts";
 import {
   AUTOMATIC_SYNC_DESCRIPTION,
   setSyncSetupCompletions
@@ -17,9 +20,6 @@ import {
 import {
   safeTerminalText
 } from "./chunk-AMJRUXFT.ts";
-import {
-  syncErrorGuidance
-} from "./chunk-G4RUXRWZ.ts";
 import {
   errorMessage
 } from "./chunk-7D5SF7P3.ts";
@@ -33,13 +33,10 @@ import {
   readLocalConfigObject,
   requiredString,
   validateConfigName
-} from "./chunk-QO333NM4.ts";
+} from "./chunk-OVBAW7KV.ts";
 import {
   throwIfAborted
 } from "./chunk-PWMWOJP4.ts";
-import {
-  DEFAULT_SYNC_INCLUDE
-} from "./chunk-QOFMXPM5.ts";
 import {
   normalizeWebDavPath,
   normalizeWebDavUrl,
@@ -50,6 +47,9 @@ import {
   normalizeGitDirectory,
   normalizeGitRemote
 } from "./chunk-T2SJD3N7.ts";
+import {
+  DEFAULT_SYNC_INCLUDE
+} from "./chunk-KYTT7KV4.ts";
 
 // src/commands/setup-completions.ts
 async function refreshTargetCompletions() {
@@ -1031,4 +1031,4 @@ export {
   showAddWebDavStorageProfile,
   showEditWebDavStorageProfile
 };
-//# sourceMappingURL=chunk-U3XRI2HF.ts.map
+//# sourceMappingURL=chunk-3IYAPMST.ts.map

package/dist/chunks/{chunk-B4QZBDBT.ts → chunk-45COPAK7.ts}

@@ -1,15 +1,17 @@
 // @generated by scripts/build-runtime.mjs; do not edit.
 // @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
 import {
+  configFromSettings,
   effectiveSyncSetupRemoteIdentity,
   localConfigPath,
+  syncCheckConfigFingerprint,
   syncSetupStorageReview,
   updateLocalConfig,
   validateConfigName
-} from "./chunk-QO333NM4.ts";
+} from "./chunk-OVBAW7KV.ts";
 import {
   normalizeSyncInclude
-} from "./chunk-QOFMXPM5.ts";
+} from "./chunk-KYTT7KV4.ts";
 
 // src/settings/settings-management.ts
 import { isDeepStrictEqual } from "node:util";
@@ -98,6 +100,11 @@ async function updateSyncSetup(name, update, options = {}) {
   await updateSettings((settings) => {
     const setup = settings.syncSetups[name];
     if (!setup) throw new Error(`Sync setup not found: ${name}`);
+    if (options.expectedConfigFingerprint !== void 0 && syncCheckConfigFingerprint(configFromSettings(settings, name)) !== options.expectedConfigFingerprint) {
+      throw new SyncSetupReviewChangedError(
+        `Sync setup \u201C${name}\u201D changed while it was open; reopen it and review the current configuration.`
+      );
+    }
     if (options.expectedInclude && !sameNames(normalizeSyncInclude(setup.sync.include), options.expectedInclude)) {
       throw new SyncSetupReviewChangedError(
         `Sync setup \u201C${name}\u201D included content changed while it was open; reopen it and review the current selection.`
@@ -195,4 +202,4 @@ export {
   removeSyncSetup,
   removeStorageConnection
 };
-//# sourceMappingURL=chunk-B4QZBDBT.ts.map
+//# sourceMappingURL=chunk-45COPAK7.ts.map

package/dist/chunks/chunk-45COPAK7.ts.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/settings/settings-management.ts"],
+  "sourcesContent": ["import { isDeepStrictEqual } from \"node:util\";\nimport { normalizeSyncInclude } from \"../sync/sync-policy.js\";\nimport {\n  configFromSettings,\n  type SyncSetupStorageReview,\n  syncCheckConfigFingerprint,\n  syncSetupStorageReview,\n} from \"./config.js\";\nimport { localConfigPath } from \"./config-file.js\";\nimport { updateLocalConfig } from \"./settings-store.js\";\nimport type { PiSyncSettingsV3, StorageConnectionSettings, SyncSetupSettings } from \"./settings-types.js\";\nimport { effectiveSyncSetupRemoteIdentity, validateConfigName } from \"./settings-validation.js\";\n\nexport class SyncSetupReviewChangedError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"SyncSetupReviewChangedError\";\n  }\n}\n\nexport async function saveNewV3Settings(\n  input: {\n    setupName: string;\n    connectionName: string;\n    connection: StorageConnectionSettings;\n    setup: SyncSetupSettings;\n  },\n  signal?: AbortSignal,\n) {\n  validateConfigName(input.setupName, \"sync setup\");\n  validateConfigName(input.connectionName, \"storage connection\");\n  const settings: PiSyncSettingsV3 = {\n    version: 3,\n    activeSyncSetup: input.setupName,\n    onSwitch: \"ask-before-pull\",\n    skipSecretScan: false,\n    storageConnections: { [input.connectionName]: structuredClone(input.connection) },\n    syncSetups: {\n      [input.setupName]: {\n        ...structuredClone(input.setup),\n        storage: { ...input.setup.storage, connection: input.connectionName },\n      },\n    },\n  };\n  return updateLocalConfig((current) => {\n    if (Object.keys(current.storageConnections).length || Object.keys(current.syncSetups).length) {\n      throw new Error(`Settings already exist: ${localConfigPath()}`);\n    }\n    return { ...current, ...settings };\n  }, signal);\n}\n\nexport async function addStorageConnection(name: string, connection: StorageConnectionSettings, signal?: AbortSignal) {\n  validateConfigName(name, \"storage connection\");\n  await updateSettings((settings) => {\n    if (Object.hasOwn(settings.storageConnections, name)) {\n      throw new Error(`Storage connection already exists: ${name}`);\n    }\n    return {\n      ...settings,\n      storageConnections: {\n        ...settings.storageConnections,\n        [name]: structuredClone(connection),\n      },\n    };\n  }, signal);\n}\n\nexport async function updateStorageConnection(\n  name: string,\n  update: (connection: StorageConnectionSettings) => StorageConnectionSettings,\n  expectedSetups?: readonly string[],\n  signal?: AbortSignal,\n) {\n  validateConfigName(name, \"storage connection\");\n  await updateSettings((settings) => {\n    const connection = settings.storageConnections[name];\n    if (!connection) throw new Error(`Storage connection not found: ${name}`);\n    const currentSetups = referencingSetupNames(settings.syncSetups, name);\n    if (expectedSetups && !sameNames(currentSetups, expectedSetups)) {\n      throw new Error(\n        `Storage connection \u201C${name}\u201D usage changed while it was open; reopen it and review the affected sync setups.`,\n      );\n    }\n    const nextConnection = update(structuredClone(connection));\n    const nextConnections = { ...settings.storageConnections, [name]: nextConnection };\n    assertUniqueLocations(settings.syncSetups, nextConnections);\n    return { ...settings, storageConnections: nextConnections };\n  }, signal);\n}\n\nexport async function addSyncSetup(\n  name: string,\n  setup: SyncSetupSettings,\n  signal?: AbortSignal,\n  expectedConnection?: StorageConnectionSettings,\n) {\n  validateConfigName(name, \"sync setup\");\n  await updateSettings((settings) => {\n    if (Object.hasOwn(settings.syncSetups, name)) throw new Error(`Sync setup already exists: ${name}`);\n    if (!Object.hasOwn(settings.storageConnections, setup.storage.connection)) {\n      throw new Error(`Storage connection not found: ${setup.storage.connection}`);\n    }\n    if (\n      expectedConnection &&\n      !isDeepStrictEqual(settings.storageConnections[setup.storage.connection], expectedConnection)\n    ) {\n      throw new SyncSetupReviewChangedError(\"Storage connection changed while the setup review was open; reopen it.\");\n    }\n    const nextSetups = { ...settings.syncSetups, [name]: structuredClone(setup) };\n    assertUniqueLocations(nextSetups, settings.storageConnections);\n    return {\n      ...settings,\n      syncSetups: nextSetups,\n      ...(settings.activeSyncSetup ? {} : { activeSyncSetup: name }),\n    };\n  }, signal);\n}\n\nexport async function updateSyncSetup(\n  name: string,\n  update: (setup: SyncSetupSettings) => SyncSetupSettings,\n  options: {\n    expectedStorage?: SyncSetupStorageReview;\n    expectedInclude?: readonly string[];\n    expectedConnection?: StorageConnectionSettings;\n    expectedConfigFingerprint?: string;\n    signal?: AbortSignal;\n  } = {},\n) {\n  validateConfigName(name, \"sync setup\");\n  await updateSettings((settings) => {\n    const setup = settings.syncSetups[name];\n    if (!setup) throw new Error(`Sync setup not found: ${name}`);\n    if (\n      options.expectedConfigFingerprint !== undefined &&\n      syncCheckConfigFingerprint(configFromSettings(settings, name)) !== options.expectedConfigFingerprint\n    ) {\n      throw new SyncSetupReviewChangedError(\n        `Sync setup \u201C${name}\u201D changed while it was open; reopen it and review the current configuration.`,\n      );\n    }\n    if (options.expectedInclude && !sameNames(normalizeSyncInclude(setup.sync.include), options.expectedInclude)) {\n      throw new SyncSetupReviewChangedError(\n        `Sync setup \u201C${name}\u201D included content changed while it was open; reopen it and review the current selection.`,\n      );\n    }\n    if (options.expectedStorage) {\n      const connectionName = setup.storage.connection;\n      const connection = settings.storageConnections[connectionName];\n      if (\n        !connection ||\n        !sameStorageReview(syncSetupStorageReview(name, setup, connectionName, connection), options.expectedStorage)\n      ) {\n        throw new SyncSetupReviewChangedError(\n          `Sync setup \u201C${name}\u201D storage changed while it was open; reopen it and review the current storage location.`,\n        );\n      }\n    }\n    if (\n      options.expectedConnection &&\n      !isDeepStrictEqual(settings.storageConnections[setup.storage.connection], options.expectedConnection)\n    ) {\n      throw new SyncSetupReviewChangedError(\"Storage connection changed while the setup review was open; reopen it.\");\n    }\n    const nextSetup = update(structuredClone(setup));\n    if (!Object.hasOwn(settings.storageConnections, nextSetup.storage.connection)) {\n      throw new Error(`Storage connection not found: ${nextSetup.storage.connection}`);\n    }\n    const nextSetups = { ...settings.syncSetups, [name]: nextSetup };\n    assertUniqueLocations(nextSetups, settings.storageConnections);\n    return { ...settings, syncSetups: nextSetups };\n  }, options.signal);\n}\n\nexport async function removeSyncSetup(name: string, signal?: AbortSignal) {\n  validateConfigName(name, \"sync setup\");\n  await updateSettings((settings) => {\n    if (!Object.hasOwn(settings.syncSetups, name)) throw new Error(`Sync setup not found: ${name}`);\n    const isCurrent = settings.activeSyncSetup === name;\n    if (isCurrent && Object.keys(settings.syncSetups).length > 1) {\n      throw new Error(\"Switch to another sync setup before removing the current setup.\");\n    }\n    const syncSetups = { ...settings.syncSetups };\n    delete syncSetups[name];\n    const next = { ...settings, syncSetups };\n    if (isCurrent) delete next.activeSyncSetup;\n    return next;\n  }, signal);\n}\n\nexport async function removeStorageConnection(name: string, signal?: AbortSignal) {\n  validateConfigName(name, \"storage connection\");\n  await updateSettings((settings) => {\n    const referenced = referencingSetupNames(settings.syncSetups, name)[0];\n    if (referenced) {\n      throw new Error(`Storage connection \u201C${name}\u201D is used by sync setup \u201C${referenced}\u201D.`);\n    }\n    if (!Object.hasOwn(settings.storageConnections, name)) {\n      throw new Error(`Storage connection not found: ${name}`);\n    }\n    const storageConnections = { ...settings.storageConnections };\n    delete storageConnections[name];\n    return { ...settings, storageConnections };\n  }, signal);\n}\n\nasync function updateSettings(update: (settings: PiSyncSettingsV3) => PiSyncSettingsV3, signal?: AbortSignal) {\n  return updateLocalConfig((settings) => {\n    if (settings.version !== 3 && settings.version !== 4 && settings.version !== 5) {\n      throw new Error(\"Storage connections and sync setups require version 3 or 4 or 5 pi-sync settings.\");\n    }\n    return update(settings);\n  }, signal);\n}\n\nfunction referencingSetupNames(setups: Record<string, SyncSetupSettings>, connection: string) {\n  return Object.entries(setups)\n    .filter(([, setup]) => setup.storage.connection === connection)\n    .map(([name]) => name)\n    .sort((left, right) => left.localeCompare(right));\n}\n\nfunction assertUniqueLocations(\n  setups: Record<string, SyncSetupSettings>,\n  connections: Record<string, StorageConnectionSettings>,\n) {\n  const identities = new Map<string, string>();\n  for (const [name, setup] of Object.entries(setups)) {\n    const connection = connections[setup.storage.connection];\n    if (!connection) throw new Error(`Storage connection not found: ${setup.storage.connection}`);\n    const identity = effectiveSyncSetupRemoteIdentity(setup, connection);\n    const previous = identities.get(identity);\n    if (previous) {\n      throw new Error(`Sync setup \u201C${name}\u201D duplicates the storage location of \u201C${previous}\u201D.`);\n    }\n    identities.set(identity, name);\n  }\n}\n\nfunction sameNames(left: readonly string[], right: readonly string[]) {\n  return left.length === right.length && left.every((name, index) => name === right[index]);\n}\n\nfunction sameStorageReview(left: SyncSetupStorageReview, right: SyncSetupStorageReview) {\n  return (\n    left.connectionName === right.connectionName &&\n    left.storageKind === right.storageKind &&\n    left.storagePath === right.storagePath &&\n    left.bucket === right.bucket &&\n    left.branch === right.branch\n  );\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;AAAA,SAAS,yBAAyB;AAa3B,IAAM,8BAAN,cAA0C,MAAM;AAAA,EACrD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEA,eAAsB,kBACpB,OAMA,QACA;AACA,qBAAmB,MAAM,WAAW,YAAY;AAChD,qBAAmB,MAAM,gBAAgB,oBAAoB;AAC7D,QAAM,WAA6B;AAAA,IACjC,SAAS;AAAA,IACT,iBAAiB,MAAM;AAAA,IACvB,UAAU;AAAA,IACV,gBAAgB;AAAA,IAChB,oBAAoB,EAAE,CAAC,MAAM,cAAc,GAAG,gBAAgB,MAAM,UAAU,EAAE;AAAA,IAChF,YAAY;AAAA,MACV,CAAC,MAAM,SAAS,GAAG;AAAA,QACjB,GAAG,gBAAgB,MAAM,KAAK;AAAA,QAC9B,SAAS,EAAE,GAAG,MAAM,MAAM,SAAS,YAAY,MAAM,eAAe;AAAA,MACtE;AAAA,IACF;AAAA,EACF;AACA,SAAO,kBAAkB,CAAC,YAAY;AACpC,QAAI,OAAO,KAAK,QAAQ,kBAAkB,EAAE,UAAU,OAAO,KAAK,QAAQ,UAAU,EAAE,QAAQ;AAC5F,YAAM,IAAI,MAAM,2BAA2B,gBAAgB,CAAC,EAAE;AAAA,IAChE;AACA,WAAO,EAAE,GAAG,SAAS,GAAG,SAAS;AAAA,EACnC,GAAG,MAAM;AACX;AAEA,eAAsB,qBAAqB,MAAc,YAAuC,QAAsB;AACpH,qBAAmB,MAAM,oBAAoB;AAC7C,QAAM,eAAe,CAAC,aAAa;AACjC,QAAI,OAAO,OAAO,SAAS,oBAAoB,IAAI,GAAG;AACpD,YAAM,IAAI,MAAM,sCAAsC,IAAI,EAAE;AAAA,IAC9D;AACA,WAAO;AAAA,MACL,GAAG;AAAA,MACH,oBAAoB;AAAA,QAClB,GAAG,SAAS;AAAA,QACZ,CAAC,IAAI,GAAG,gBAAgB,UAAU;AAAA,MACpC;AAAA,IACF;AAAA,EACF,GAAG,MAAM;AACX;AAEA,eAAsB,wBACpB,MACA,QACA,gBACA,QACA;AACA,qBAAmB,MAAM,oBAAoB;AAC7C,QAAM,eAAe,CAAC,aAAa;AACjC,UAAM,aAAa,SAAS,mBAAmB,IAAI;AACnD,QAAI,CAAC,WAAY,OAAM,IAAI,MAAM,iCAAiC,IAAI,EAAE;AACxE,UAAM,gBAAgB,sBAAsB,SAAS,YAAY,IAAI;AACrE,QAAI,kBAAkB,CAAC,UAAU,eAAe,cAAc,GAAG;AAC/D,YAAM,IAAI;AAAA,QACR,4BAAuB,IAAI;AAAA,MAC7B;AAAA,IACF;AACA,UAAM,iBAAiB,OAAO,gBAAgB,UAAU,CAAC;AACzD,UAAM,kBAAkB,EAAE,GAAG,SAAS,oBAAoB,CAAC,IAAI,GAAG,eAAe;AACjF,0BAAsB,SAAS,YAAY,eAAe;AAC1D,WAAO,EAAE,GAAG,UAAU,oBAAoB,gBAAgB;AAAA,EAC5D,GAAG,MAAM;AACX;AAEA,eAAsB,aACpB,MACA,OACA,QACA,oBACA;AACA,qBAAmB,MAAM,YAAY;AACrC,QAAM,eAAe,CAAC,aAAa;AACjC,QAAI,OAAO,OAAO,SAAS,YAAY,IAAI,EAAG,OAAM,IAAI,MAAM,8BAA8B,IAAI,EAAE;AAClG,QAAI,CAAC,OAAO,OAAO,SAAS,oBAAoB,MAAM,QAAQ,UAAU,GAAG;AACzE,YAAM,IAAI,MAAM,iCAAiC,MAAM,QAAQ,UAAU,EAAE;AAAA,IAC7E;AACA,QACE,sBACA,CAAC,kBAAkB,SAAS,mBAAmB,MAAM,QAAQ,UAAU,GAAG,kBAAkB,GAC5F;AACA,YAAM,IAAI,4BAA4B,wEAAwE;AAAA,IAChH;AACA,UAAM,aAAa,EAAE,GAAG,SAAS,YAAY,CAAC,IAAI,GAAG,gBAAgB,KAAK,EAAE;AAC5E,0BAAsB,YAAY,SAAS,kBAAkB;AAC7D,WAAO;AAAA,MACL,GAAG;AAAA,MACH,YAAY;AAAA,MACZ,GAAI,SAAS,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,KAAK;AAAA,IAC9D;AAAA,EACF,GAAG,MAAM;AACX;AAEA,eAAsB,gBACpB,MACA,QACA,UAMI,CAAC,GACL;AACA,qBAAmB,MAAM,YAAY;AACrC,QAAM,eAAe,CAAC,aAAa;AACjC,UAAM,QAAQ,SAAS,WAAW,IAAI;AACtC,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,yBAAyB,IAAI,EAAE;AAC3D,QACE,QAAQ,8BAA8B,UACtC,2BAA2B,mBAAmB,UAAU,IAAI,CAAC,MAAM,QAAQ,2BAC3E;AACA,YAAM,IAAI;AAAA,QACR,oBAAe,IAAI;AAAA,MACrB;AAAA,IACF;AACA,QAAI,QAAQ,mBAAmB,CAAC,UAAU,qBAAqB,MAAM,KAAK,OAAO,GAAG,QAAQ,eAAe,GAAG;AAC5G,YAAM,IAAI;AAAA,QACR,oBAAe,IAAI;AAAA,MACrB;AAAA,IACF;AACA,QAAI,QAAQ,iBAAiB;AAC3B,YAAM,iBAAiB,MAAM,QAAQ;AACrC,YAAM,aAAa,SAAS,mBAAmB,cAAc;AAC7D,UACE,CAAC,cACD,CAAC,kBAAkB,uBAAuB,MAAM,OAAO,gBAAgB,UAAU,GAAG,QAAQ,eAAe,GAC3G;AACA,cAAM,IAAI;AAAA,UACR,oBAAe,IAAI;AAAA,QACrB;AAAA,MACF;AAAA,IACF;AACA,QACE,QAAQ,sBACR,CAAC,kBAAkB,SAAS,mBAAmB,MAAM,QAAQ,UAAU,GAAG,QAAQ,kBAAkB,GACpG;AACA,YAAM,IAAI,4BAA4B,wEAAwE;AAAA,IAChH;AACA,UAAM,YAAY,OAAO,gBAAgB,KAAK,CAAC;AAC/C,QAAI,CAAC,OAAO,OAAO,SAAS,oBAAoB,UAAU,QAAQ,UAAU,GAAG;AAC7E,YAAM,IAAI,MAAM,iCAAiC,UAAU,QAAQ,UAAU,EAAE;AAAA,IACjF;AACA,UAAM,aAAa,EAAE,GAAG,SAAS,YAAY,CAAC,IAAI,GAAG,UAAU;AAC/D,0BAAsB,YAAY,SAAS,kBAAkB;AAC7D,WAAO,EAAE,GAAG,UAAU,YAAY,WAAW;AAAA,EAC/C,GAAG,QAAQ,MAAM;AACnB;AAEA,eAAsB,gBAAgB,MAAc,QAAsB;AACxE,qBAAmB,MAAM,YAAY;AACrC,QAAM,eAAe,CAAC,aAAa;AACjC,QAAI,CAAC,OAAO,OAAO,SAAS,YAAY,IAAI,EAAG,OAAM,IAAI,MAAM,yBAAyB,IAAI,EAAE;AAC9F,UAAM,YAAY,SAAS,oBAAoB;AAC/C,QAAI,aAAa,OAAO,KAAK,SAAS,UAAU,EAAE,SAAS,GAAG;AAC5D,YAAM,IAAI,MAAM,iEAAiE;AAAA,IACnF;AACA,UAAM,aAAa,EAAE,GAAG,SAAS,WAAW;AAC5C,WAAO,WAAW,IAAI;AACtB,UAAM,OAAO,EAAE,GAAG,UAAU,WAAW;AACvC,QAAI,UAAW,QAAO,KAAK;AAC3B,WAAO;AAAA,EACT,GAAG,MAAM;AACX;AAEA,eAAsB,wBAAwB,MAAc,QAAsB;AAChF,qBAAmB,MAAM,oBAAoB;AAC7C,QAAM,eAAe,CAAC,aAAa;AACjC,UAAM,aAAa,sBAAsB,SAAS,YAAY,IAAI,EAAE,CAAC;AACrE,QAAI,YAAY;AACd,YAAM,IAAI,MAAM,4BAAuB,IAAI,sCAA4B,UAAU,SAAI;AAAA,IACvF;AACA,QAAI,CAAC,OAAO,OAAO,SAAS,oBAAoB,IAAI,GAAG;AACrD,YAAM,IAAI,MAAM,iCAAiC,IAAI,EAAE;AAAA,IACzD;AACA,UAAM,qBAAqB,EAAE,GAAG,SAAS,mBAAmB;AAC5D,WAAO,mBAAmB,IAAI;AAC9B,WAAO,EAAE,GAAG,UAAU,mBAAmB;AAAA,EAC3C,GAAG,MAAM;AACX;AAEA,eAAe,eAAe,QAA0D,QAAsB;AAC5G,SAAO,kBAAkB,CAAC,aAAa;AACrC,QAAI,SAAS,YAAY,KAAK,SAAS,YAAY,KAAK,SAAS,YAAY,GAAG;AAC9E,YAAM,IAAI,MAAM,mFAAmF;AAAA,IACrG;AACA,WAAO,OAAO,QAAQ;AAAA,EACxB,GAAG,MAAM;AACX;AAEA,SAAS,sBAAsB,QAA2C,YAAoB;AAC5F,SAAO,OAAO,QAAQ,MAAM,EACzB,OAAO,CAAC,CAAC,EAAE,KAAK,MAAM,MAAM,QAAQ,eAAe,UAAU,EAC7D,IAAI,CAAC,CAAC,IAAI,MAAM,IAAI,EACpB,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AACpD;AAEA,SAAS,sBACP,QACA,aACA;AACA,QAAM,aAAa,oBAAI,IAAoB;AAC3C,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AAClD,UAAM,aAAa,YAAY,MAAM,QAAQ,UAAU;AACvD,QAAI,CAAC,WAAY,OAAM,IAAI,MAAM,iCAAiC,MAAM,QAAQ,UAAU,EAAE;AAC5F,UAAM,WAAW,iCAAiC,OAAO,UAAU;AACnE,UAAM,WAAW,WAAW,IAAI,QAAQ;AACxC,QAAI,UAAU;AACZ,YAAM,IAAI,MAAM,oBAAe,IAAI,mDAAyC,QAAQ,SAAI;AAAA,IAC1F;AACA,eAAW,IAAI,UAAU,IAAI;AAAA,EAC/B;AACF;AAEA,SAAS,UAAU,MAAyB,OAA0B;AACpE,SAAO,KAAK,WAAW,MAAM,UAAU,KAAK,MAAM,CAAC,MAAM,UAAU,SAAS,MAAM,KAAK,CAAC;AAC1F;AAEA,SAAS,kBAAkB,MAA8B,OAA+B;AACtF,SACE,KAAK,mBAAmB,MAAM,kBAC9B,KAAK,gBAAgB,MAAM,eAC3B,KAAK,gBAAgB,MAAM,eAC3B,KAAK,WAAW,MAAM,UACtB,KAAK,WAAW,MAAM;AAE1B;",
+  "names": []
+}

package/dist/chunks/chunk-5SFMBY5P.ts

@@ -0,0 +1,26 @@
+// @generated by scripts/build-runtime.mjs; do not edit.
+// @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
+import {
+  stateDir
+} from "./chunk-SWRVXVFD.ts";
+
+// src/snapshot/snapshot-transaction-directory.ts
+import fs from "node:fs/promises";
+import path from "node:path";
+function transactionRoot() {
+  return path.join(stateDir(), "transactions");
+}
+async function pendingTransactionEntries() {
+  try {
+    return await fs.readdir(transactionRoot(), { withFileTypes: true });
+  } catch (error) {
+    if (error.code === "ENOENT") return [];
+    throw error;
+  }
+}
+
+export {
+  transactionRoot,
+  pendingTransactionEntries
+};
+//# sourceMappingURL=chunk-5SFMBY5P.ts.map

package/dist/chunks/chunk-5SFMBY5P.ts.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/snapshot/snapshot-transaction-directory.ts"],
+  "sourcesContent": ["import fs from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { stateDir } from \"../state/state-directory.js\";\n\nexport function transactionRoot() {\n  return path.join(stateDir(), \"transactions\");\n}\n\nexport async function pendingTransactionEntries() {\n  try {\n    return await fs.readdir(transactionRoot(), { withFileTypes: true });\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return [];\n    throw error;\n  }\n}\n"],
+  "mappings": ";;;;;;;AAAA,OAAO,QAAQ;AACf,OAAO,UAAU;AAGV,SAAS,kBAAkB;AAChC,SAAO,KAAK,KAAK,SAAS,GAAG,cAAc;AAC7C;AAEA,eAAsB,4BAA4B;AAChD,MAAI;AACF,WAAO,MAAM,GAAG,QAAQ,gBAAgB,GAAG,EAAE,eAAe,KAAK,CAAC;AAAA,EACpE,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO,CAAC;AAChE,UAAM;AAAA,EACR;AACF;",
+  "names": []
+}

package/dist/chunks/{chunk-ED3TYIVW.ts → chunk-5TSCBBPP.ts}

@@ -2,19 +2,19 @@
 // @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
 import {
   mergeJournalIdentity
-} from "./chunk-GNH73BJ5.ts";
+} from "./chunk-BEST45H2.ts";
 import {
   mergePathIdentity,
   planFileMerge
-} from "./chunk-76NB4R7U.ts";
+} from "./chunk-XJHQPB3E.ts";
 import {
   statePathForConfig,
   syncStateFingerprint
-} from "./chunk-UPNVIUBN.ts";
+} from "./chunk-DN4IA7MR.ts";
 import {
   syncDirectory,
   writeJson
-} from "./chunk-HUZ5CR4W.ts";
+} from "./chunk-AR2DGDUI.ts";
 
 // src/sync/conflict-artifacts.ts
 import { createHash, randomUUID } from "node:crypto";
@@ -226,4 +226,4 @@ export {
   saveConflictArtifact,
   readConflictArtifact
 };
-//# sourceMappingURL=chunk-ED3TYIVW.ts.map
+//# sourceMappingURL=chunk-5TSCBBPP.ts.map

package/dist/chunks/{chunk-5QAE3G3K.ts → chunk-67INJPKR.ts}

@@ -4,20 +4,20 @@ import {
   COUPLED_FIELDS,
   mergeSettingsJson,
   snapshotFile
-} from "./chunk-S7QS4AWK.ts";
-import {
-  scanSnapshot
-} from "./chunk-QOFMXPM5.ts";
+} from "./chunk-AKMV47YC.ts";
 import {
   edits,
   isMergeTextPath,
   lines,
   text
-} from "./chunk-IWZH5KYS.ts";
+} from "./chunk-6LD5KX55.ts";
 import {
   parseJsonObjectDocument,
   parseSettingsDocument
 } from "./chunk-ZW5ZLGBI.ts";
+import {
+  scanSnapshot
+} from "./chunk-ESKOPQVB.ts";
 import {
   AGENT_INPUT_BYTES,
   AGENT_MAX_UNITS,
@@ -217,4 +217,4 @@ export {
   parseAgentCandidate,
   applyAgentCandidate
 };
-//# sourceMappingURL=chunk-5QAE3G3K.ts.map
+//# sourceMappingURL=chunk-67INJPKR.ts.map