@neottia/repository-store 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Dragos Cirjan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,76 @@
+# @neottia/repository-store
+
+Hardened, domain-neutral persistence for canonical files and disposable SQLite caches inside a repository.
+
+```sh
+pnpm add @neottia/repository-store
+```
+
+Read the [complete Repository Store reference](https://github.com/dragoscirjan/neottia/blob/main/docs/repository-store.md).
+
+The package owns byte-safe paths, SHA-256 revisions, one cross-process authority lease, durable rollback journals, atomic publication, and Node/Bun SQLite adapters. It deliberately does **not** define YAML or Markdown codecs, record schemas, search text, SQLite DDL, or query languages. Domain packages validate their complete proposed state while holding the lease, then publish exact bytes.
+
+## Requirements
+
+- Node.js 22.16 or newer, using `node:sqlite`.
+- Bun 1.3.13 or newer, using `bun:sqlite`.
+- Linux x64 or arm64 with libc/kernel support for `renameat2(..., RENAME_NOREPLACE)`.
+- A C++17 compiler, Python, Make, and Linux development headers so the Node-API addon can be built during installation.
+- A recognized local ext4, XFS, Btrfs, tmpfs, or overlay filesystem with same-volume regular-file hard links.
+
+The addon is built from architecture-neutral source and is loaded lazily by both Node and Bun. Repository authority acquisition preflights the addon and authority filesystem before creating claim or lease artifacts. macOS, Windows, missing or unloadable addon builds, kernels/libcs without `renameat2`, unrecognized filesystems, and shared/network filesystems return `UNSUPPORTED_RUNTIME`; leased canonical and cache operations, including read-only operations, are unavailable there.
+
+## Canonical files
+
+```ts
+import {
+  DEFAULT_STORE_LIMITS,
+  applyCanonicalBatch,
+  readManagedFile,
+  resolveManagedPath,
+  resolveManagedRoot,
+  withRepositoryLease,
+} from "@neottia/repository-store";
+
+const root = await resolveManagedRoot({
+  authorityRoot: process.cwd(),
+  managedPath: ".neottia/example",
+  limits: DEFAULT_STORE_LIMITS,
+});
+const document = resolveManagedPath(root, "records/example.json");
+
+await withRepositoryLease(root, async (lease) => {
+  await applyCanonicalBatch(root, lease, [
+    {
+      kind: "write",
+      path: document,
+      bytes: new TextEncoder().encode('{"value":1}\n'),
+      expected: "absent",
+    },
+  ]);
+  const current = await readManagedFile(root, lease, document);
+  console.log(current.revision);
+});
+```
+
+Every write, remove, and move has an exact expected revision. Paths reject traversal, ambiguous separators, control characters, Windows-invalid characters and device names, components ending in a period or space, portable case/NFKC collisions, symbolic links, special files, and multiply linked files. Reads compare descriptor and path identity plus size, modification time, and change time around bounded reads.
+
+## Lease and recovery
+
+One lease lives at `<authority>/.neottia/repository-store/authority.lease`. Native no-replace cleanup capability is required before its claim or lease is created. It covers canonical reads, validation, mutation, recovery, and cache work. True nested same-authority acquisition in one active async call chain is rejected; independent same-process callers are queued FIFO with the same abort, deadline, and acquisition-timeout budget used for cross-process contention. Owner and host metadata are read through fixed 4 KiB, no-follow descriptors with path and ancestor identity checks. Leases include a random owner token and local host/process evidence and reclaim only stale owners whose same-host death is conclusive.
+
+Before publication, bounded before-images, staged bytes, and a digested manifest are synchronized beneath `transactions/<managed-root-id>/`. Segregating journals prevents one domain subtree from interpreting another subtree's relative paths while all domains still share the authority lease. An `.active` journal is rollback-required; `.committed` marks the commit point, and `.cleanup` is restart-idempotent cleanup-only state. Recovery runs automatically after acquiring the lease. Ambiguous operator changes fail closed and preserve evidence.
+
+## Disposable SQLite caches
+
+`openDisposableSqliteCache`, `rebuildDisposableSqliteCache`, and `removeDisposableSqliteCache` manage exact DB/WAL/SHM artifacts. Cache replacement tokens and allowed revisions are synchronized beneath `cache-publications/<managed-root-id>/`, so the next cache operation restores an evacuated active database after a crash before rebuilding. Runtime selection is lazy and loads only `node:sqlite` or `bun:sqlite`. Every connection enforces root SQL-byte, aggregate statement-parameter-byte, query-row, and query-result ceilings; `get()` is bounded automatically, `all()` cannot raise the root limits, aggregate schema SQL is bounded, and both active and candidate DB/WAL/SHM bytes share `maxTemporaryBytes`. Drivers must expose cursor iteration because eager unbounded `all()` fallback is rejected. Canonical files always win; a cache failure never rolls them back.
+
+## Durability and threat model
+
+Publication synchronizes a private same-directory temporary file, evacuates an expected destination with native `RENAME_NOREPLACE`, validates its exact identity and revision, and creates the new name exclusively with regular-file hard-link semantics. A raced evacuation or replacement is never overwritten: it is restored exclusively or retained as actionable recovery evidence. There is no check-then-rename fallback. File and directory synchronization failures are `DurabilityError`s with `operation`, `path`, and the original `cause`.
+
+Package-owned files use mode `0600` and directories use `0700` where supported. Near-match and malformed unowned artifacts are preserved rather than recursively deleted.
+
+## License
+
+MIT

package/binding.gyp

@@ -0,0 +1,9 @@
+{
+  "targets": [
+    {
+      "target_name": "repository_store_native",
+      "sources": ["native/rename_noreplace.cc"],
+      "cflags_cc": ["-std=c++17"]
+    }
+  ]
+}

package/dist/errors.d.ts

@@ -0,0 +1,43 @@
+export type RepositoryStoreErrorCategory = 'config' | 'path_safety' | 'resource_limit' | 'stale_revision' | 'contention' | 'durability' | 'recovery' | 'cache_sync';
+export type RepositoryStoreErrorCode = 'AUTHORITY_MISMATCH' | 'PATH_INVALID' | 'PATH_COLLISION' | 'UNSAFE_LINK' | 'UNSAFE_HARD_LINK' | 'IDENTITY_CHANGED' | 'LIMIT_EXCEEDED' | 'REVISION_MISMATCH' | 'LEASE_BUSY' | 'LEASE_REENTRANT' | 'LEASE_OWNER_UNKNOWN' | 'ABORTED' | 'DEADLINE_EXCEEDED' | 'FSYNC_FAILED' | 'RECOVERY_MALFORMED' | 'RECOVERY_AMBIGUOUS' | 'CACHE_BUSY' | 'CACHE_UNSAFE' | 'CACHE_SYNC_FAILED' | 'UNSUPPORTED_RUNTIME';
+export declare class RepositoryStoreError extends Error {
+    readonly category: RepositoryStoreErrorCategory;
+    readonly code: RepositoryStoreErrorCode;
+    readonly retryable: boolean;
+    readonly evidence?: Readonly<Record<string, unknown>> | undefined;
+    constructor(message: string, category: RepositoryStoreErrorCategory, code: RepositoryStoreErrorCode, retryable: boolean, evidence?: Readonly<Record<string, unknown>> | undefined, options?: ErrorOptions);
+}
+export declare class RepositoryStoreConfigError extends RepositoryStoreError {
+    constructor(message: string, code?: RepositoryStoreErrorCode);
+}
+export declare class PathSafetyError extends RepositoryStoreError {
+    constructor(message: string, code?: RepositoryStoreErrorCode, evidence?: Readonly<Record<string, unknown>>);
+}
+export declare class ResourceLimitError extends RepositoryStoreError {
+    constructor(message: string, evidence?: Readonly<Record<string, unknown>>);
+}
+export declare class StaleRevisionError extends RepositoryStoreError {
+    constructor(message: string, evidence?: Readonly<Record<string, unknown>>);
+}
+export declare class LeaseContentionError extends RepositoryStoreError {
+    constructor(message: string, code?: RepositoryStoreErrorCode);
+}
+export interface DurabilityEvidence extends Readonly<Record<string, unknown>> {
+    readonly operation: 'file-fsync' | 'directory-fsync';
+    readonly path: string;
+}
+export declare class DurabilityError extends RepositoryStoreError {
+    constructor(message: string, options?: ErrorOptions & {
+        readonly evidence?: DurabilityEvidence;
+    });
+}
+export declare class RecoveryError extends RepositoryStoreError {
+    constructor(message: string, code: 'RECOVERY_MALFORMED' | 'RECOVERY_AMBIGUOUS', evidence?: Readonly<Record<string, unknown>>, options?: ErrorOptions);
+}
+export declare class CacheSyncError extends RepositoryStoreError {
+    constructor(message: string, code?: RepositoryStoreErrorCode, options?: ErrorOptions);
+}
+export declare class UnsupportedRuntimeError extends RepositoryStoreError {
+    constructor(message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AACA,MAAM,MAAM,4BAA4B,GACpC,QAAQ,GACR,aAAa,GACb,gBAAgB,GAChB,gBAAgB,GAChB,YAAY,GACZ,YAAY,GACZ,UAAU,GACV,YAAY,CAAC;AAGjB,MAAM,MAAM,wBAAwB,GAChC,oBAAoB,GACpB,cAAc,GACd,gBAAgB,GAChB,aAAa,GACb,kBAAkB,GAClB,kBAAkB,GAClB,gBAAgB,GAChB,mBAAmB,GACnB,YAAY,GACZ,iBAAiB,GACjB,qBAAqB,GACrB,SAAS,GACT,mBAAmB,GACnB,cAAc,GACd,oBAAoB,GACpB,oBAAoB,GACpB,YAAY,GACZ,cAAc,GACd,mBAAmB,GACnB,qBAAqB,CAAC;AAG1B,qBAAa,oBAAqB,SAAQ,KAAK;aAG3B,QAAQ,EAAE,4BAA4B;aACtC,IAAI,EAAE,wBAAwB;aAC9B,SAAS,EAAE,OAAO;aAClB,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAJ5D,OAAO,EAAE,MAAM,EACC,QAAQ,EAAE,4BAA4B,EACtC,IAAI,EAAE,wBAAwB,EAC9B,SAAS,EAAE,OAAO,EAClB,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,YAAA,EAC5D,OAAO,CAAC,EAAE,YAAY;CAKzB;AAGD,qBAAa,0BAA2B,SAAQ,oBAAoB;gBAC/C,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,wBAAyC;CAIpF;AAGD,qBAAa,eAAgB,SAAQ,oBAAoB;gBAErD,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,wBAAyC,EAC/C,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAK/C;AAGD,qBAAa,kBAAmB,SAAQ,oBAAoB;gBACvC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAIjF;AAGD,qBAAa,kBAAmB,SAAQ,oBAAoB;gBACvC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAIjF;AAGD,qBAAa,oBAAqB,SAAQ,oBAAoB;gBACzC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,wBAAuC;CAIlF;AAGD,MAAM,WAAW,kBAAmB,SAAQ,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3E,QAAQ,CAAC,SAAS,EAAE,YAAY,GAAG,iBAAiB,CAAC;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAGD,qBAAa,eAAgB,SAAQ,oBAAoB;gBACpC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAA;KAAE;CAIxG;AAGD,qBAAa,aAAc,SAAQ,oBAAoB;gBAEnD,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,oBAAoB,GAAG,oBAAoB,EACjD,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC5C,OAAO,CAAC,EAAE,YAAY;CAKzB;AAGD,qBAAa,cAAe,SAAQ,oBAAoB;gBACnC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,wBAA8C,EAAE,OAAO,CAAC,EAAE,YAAY;CAIjH;AAGD,qBAAa,uBAAwB,SAAQ,oBAAoB;gBAC5C,OAAO,EAAE,MAAM;CAInC"}

package/dist/errors.js

@@ -0,0 +1,69 @@
+export class RepositoryStoreError extends Error {
+    category;
+    code;
+    retryable;
+    evidence;
+    constructor(message, category, code, retryable, evidence, options) {
+        super(message, options);
+        this.category = category;
+        this.code = code;
+        this.retryable = retryable;
+        this.evidence = evidence;
+        this.name = 'RepositoryStoreError';
+    }
+}
+export class RepositoryStoreConfigError extends RepositoryStoreError {
+    constructor(message, code = 'PATH_INVALID') {
+        super(message, 'config', code, false);
+        this.name = 'RepositoryStoreConfigError';
+    }
+}
+export class PathSafetyError extends RepositoryStoreError {
+    constructor(message, code = 'PATH_INVALID', evidence) {
+        super(message, 'path_safety', code, false, evidence);
+        this.name = 'PathSafetyError';
+    }
+}
+export class ResourceLimitError extends RepositoryStoreError {
+    constructor(message, evidence) {
+        super(message, 'resource_limit', 'LIMIT_EXCEEDED', false, evidence);
+        this.name = 'ResourceLimitError';
+    }
+}
+export class StaleRevisionError extends RepositoryStoreError {
+    constructor(message, evidence) {
+        super(message, 'stale_revision', 'REVISION_MISMATCH', true, evidence);
+        this.name = 'StaleRevisionError';
+    }
+}
+export class LeaseContentionError extends RepositoryStoreError {
+    constructor(message, code = 'LEASE_BUSY') {
+        super(message, 'contention', code, true);
+        this.name = 'LeaseContentionError';
+    }
+}
+export class DurabilityError extends RepositoryStoreError {
+    constructor(message, options) {
+        super(message, 'durability', 'FSYNC_FAILED', false, options?.evidence, options);
+        this.name = 'DurabilityError';
+    }
+}
+export class RecoveryError extends RepositoryStoreError {
+    constructor(message, code, evidence, options) {
+        super(message, 'recovery', code, false, evidence, options);
+        this.name = 'RecoveryError';
+    }
+}
+export class CacheSyncError extends RepositoryStoreError {
+    constructor(message, code = 'CACHE_SYNC_FAILED', options) {
+        super(message, 'cache_sync', code, code === 'CACHE_BUSY', undefined, options);
+        this.name = 'CacheSyncError';
+    }
+}
+export class UnsupportedRuntimeError extends RepositoryStoreError {
+    constructor(message) {
+        super(message, 'config', 'UNSUPPORTED_RUNTIME', false);
+        this.name = 'UnsupportedRuntimeError';
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAmCA,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAG3B;IACA;IACA;IACA;IALlB,YACE,OAAe,EACC,QAAsC,EACtC,IAA8B,EAC9B,SAAkB,EAClB,QAA4C,EAC5D,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QANR,aAAQ,GAAR,QAAQ,CAA8B;QACtC,SAAI,GAAJ,IAAI,CAA0B;QAC9B,cAAS,GAAT,SAAS,CAAS;QAClB,aAAQ,GAAR,QAAQ,CAAoC;QAI5D,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAGD,MAAM,OAAO,0BAA2B,SAAQ,oBAAoB;IAClE,YAAmB,OAAe,EAAE,OAAiC,cAAc;QACjF,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAGD,MAAM,OAAO,eAAgB,SAAQ,oBAAoB;IACvD,YACE,OAAe,EACf,OAAiC,cAAc,EAC/C,QAA4C;QAE5C,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAGD,MAAM,OAAO,kBAAmB,SAAQ,oBAAoB;IAC1D,YAAmB,OAAe,EAAE,QAA4C;QAC9E,KAAK,CAAC,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAGD,MAAM,OAAO,kBAAmB,SAAQ,oBAAoB;IAC1D,YAAmB,OAAe,EAAE,QAA4C;QAC9E,KAAK,CAAC,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAGD,MAAM,OAAO,oBAAqB,SAAQ,oBAAoB;IAC5D,YAAmB,OAAe,EAAE,OAAiC,YAAY;QAC/E,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AASD,MAAM,OAAO,eAAgB,SAAQ,oBAAoB;IACvD,YAAmB,OAAe,EAAE,OAAmE;QACrG,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAGD,MAAM,OAAO,aAAc,SAAQ,oBAAoB;IACrD,YACE,OAAe,EACf,IAAiD,EACjD,QAA4C,EAC5C,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAGD,MAAM,OAAO,cAAe,SAAQ,oBAAoB;IACtD,YAAmB,OAAe,EAAE,OAAiC,mBAAmB,EAAE,OAAsB;QAC9G,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,KAAK,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC9E,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAGD,MAAM,OAAO,uBAAwB,SAAQ,oBAAoB;IAC/D,YAAmB,OAAe;QAChC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF"}

package/dist/files.d.ts

@@ -0,0 +1,19 @@
+import { type ManagedPath, type ManagedRoot, type RepositoryLease } from './internal/model.js';
+import { type OperationControl } from './lease.js';
+import { type ByteRevision } from './revision.js';
+export interface ManagedFile {
+    readonly path: ManagedPath;
+    readonly bytes: Uint8Array;
+    readonly revision: ByteRevision;
+    readonly size: number;
+    readonly mtimeMs: number;
+}
+export interface ScanManagedFilesOptions extends OperationControl {
+    readonly under: readonly ManagedPath[];
+    readonly accept?: (relativePath: string) => boolean;
+}
+export declare function scanManagedFiles(root: ManagedRoot, lease: RepositoryLease, options: ScanManagedFilesOptions): Promise<readonly ManagedFile[]>;
+export declare function readManagedFile(root: ManagedRoot, lease: RepositoryLease, path: ManagedPath, options?: OperationControl): Promise<ManagedFile>;
+export declare function readManagedFileIfExists(root: ManagedRoot, lease: RepositoryLease, path: ManagedPath, options?: OperationControl): Promise<ManagedFile | undefined>;
+export declare function assertPathAuthority(root: ManagedRoot, path: ManagedPath): void;
+//# sourceMappingURL=files.d.ts.map

package/dist/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../src/files.ts"],"names":[],"mappings":"AAUA,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,eAAe,EACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAiC,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAElF,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAGvE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAGD,MAAM,WAAW,uBAAwB,SAAQ,gBAAgB;IAC/D,QAAQ,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;CACrD;AAGD,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,eAAe,EACtB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CAgCjC;AAGD,wBAAsB,eAAe,CACnC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,eAAe,EACtB,IAAI,EAAE,WAAW,EACjB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,WAAW,CAAC,CActB;AAGD,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,eAAe,EACtB,IAAI,EAAE,WAAW,EACjB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAOlC;AAGD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAG9E"}

package/dist/files.js

@@ -0,0 +1,113 @@
+import { lstatSync, readdirSync } from 'node:fs';
+import { join, relative } from 'node:path';
+import { PathSafetyError, ResourceLimitError } from './errors.js';
+import { assertSafeRegular, captureDirectories, hasCode, readRegularFile, revalidateDirectories, } from './internal/filesystem.js';
+import { getPathState, getRootState, managedPathBelongsToRoot, } from './internal/model.js';
+import { assertLiveLease, checkControl } from './lease.js';
+import { portablePathKey, resolveManagedPath } from './paths.js';
+import { computeByteRevision } from './revision.js';
+export async function scanManagedFiles(root, lease, options) {
+    assertLiveLease(root, lease);
+    checkControl(options);
+    const rootState = getRootState(root);
+    if (rootState === undefined)
+        throw new PathSafetyError('Managed root is not a repository-store handle.');
+    const discovered = [];
+    for (const start of options.under) {
+        assertPathAuthority(root, start);
+        const startState = getPathState(start);
+        if (startState === undefined)
+            throw new PathSafetyError('Managed path is not a repository-store handle.');
+        walk(root, startState.absolutePath, discovered, options.accept, options, rootState.limits.maxFiles);
+    }
+    const keyed = new Map();
+    for (const path of discovered) {
+        const key = portablePathKey(path.relativePath);
+        const previous = keyed.get(key);
+        if (previous !== undefined && previous !== path.relativePath)
+            throw new PathSafetyError(`Portable path collision: ${previous} and ${path.relativePath}`, 'PATH_COLLISION');
+        keyed.set(key, path.relativePath);
+    }
+    if (discovered.length > rootState.limits.maxFiles)
+        throw new ResourceLimitError('Managed file count limit exceeded.');
+    const results = [];
+    let totalBytes = 0;
+    for (const path of discovered.sort((left, right) => left.relativePath.localeCompare(right.relativePath))) {
+        checkControl(options);
+        const file = await readManagedFile(root, lease, path, options);
+        totalBytes += file.size;
+        if (totalBytes > rootState.limits.maxTotalBytes)
+            throw new ResourceLimitError('Managed aggregate byte limit exceeded.');
+        results.push(file);
+    }
+    return results;
+}
+export async function readManagedFile(root, lease, path, options = {}) {
+    assertLiveLease(root, lease);
+    assertPathAuthority(root, path);
+    checkControl(options);
+    const rootState = getRootState(root);
+    const pathState = getPathState(path);
+    if (rootState === undefined || pathState === undefined)
+        throw new PathSafetyError('Managed root or path is not a repository-store handle.');
+    const absolutePath = pathState.absolutePath;
+    const bytes = readRegularFile(absolutePath, rootState.limits.maxFileBytes);
+    const stat = lstatSync(absolutePath);
+    assertSafeRegular(stat, absolutePath);
+    checkControl(options);
+    return { path, bytes, revision: computeByteRevision(bytes), size: bytes.byteLength, mtimeMs: stat.mtimeMs };
+}
+export async function readManagedFileIfExists(root, lease, path, options = {}) {
+    try {
+        return await readManagedFile(root, lease, path, options);
+    }
+    catch (error) {
+        if (hasCode(error, 'ENOENT'))
+            return undefined;
+        throw error;
+    }
+}
+export function assertPathAuthority(root, path) {
+    if (!managedPathBelongsToRoot(root, path))
+        throw new PathSafetyError('Managed path belongs to a different managed root.', 'PATH_INVALID');
+}
+function walk(root, absolute, output, accept, control, maxFiles) {
+    checkControl(control);
+    const rootState = getRootState(root);
+    if (rootState === undefined)
+        throw new PathSafetyError('Managed root is not a repository-store handle.');
+    let stat;
+    try {
+        stat = lstatSync(absolute);
+    }
+    catch (error) {
+        if (hasCode(error, 'ENOENT'))
+            return;
+        throw error;
+    }
+    if (stat.isSymbolicLink())
+        throw new PathSafetyError(`Symbolic link is not allowed: ${absolute}`, 'UNSAFE_LINK');
+    if (stat.isFile()) {
+        assertSafeRegular(stat, absolute);
+        const path = relative(rootState.managedRoot, absolute).split('\\').join('/');
+        if (accept?.(path) !== false) {
+            output.push(resolveManagedPath(root, path));
+            if (output.length > maxFiles)
+                throw new ResourceLimitError('Managed file count limit exceeded.');
+        }
+        return;
+    }
+    if (!stat.isDirectory())
+        throw new PathSafetyError(`Special managed path is not allowed: ${absolute}`, 'UNSAFE_LINK');
+    const identities = captureDirectories(absolute);
+    const entries = readdirSync(absolute, { withFileTypes: true });
+    revalidateDirectories(identities);
+    for (const entry of entries.sort((left, right) => left.name.localeCompare(right.name))) {
+        checkControl(control);
+        if (entry.isSymbolicLink())
+            throw new PathSafetyError(`Symbolic link is not allowed: ${join(absolute, entry.name)}`, 'UNSAFE_LINK');
+        walk(root, join(absolute, entry.name), output, accept, control, maxFiles);
+    }
+    revalidateDirectories(identities);
+}
+//# sourceMappingURL=files.js.map

package/dist/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../src/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,OAAO,EACP,eAAe,EACf,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,wBAAwB,GAIzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,YAAY,EAAyB,MAAM,YAAY,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAqB,MAAM,eAAe,CAAC;AAkBvE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAiB,EACjB,KAAsB,EACtB,OAAgC;IAEhC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7B,YAAY,CAAC,OAAO,CAAC,CAAC;IACtB,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,eAAe,CAAC,gDAAgD,CAAC,CAAC;IACzG,MAAM,UAAU,GAAkB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,UAAU,KAAK,SAAS;YAAE,MAAM,IAAI,eAAe,CAAC,gDAAgD,CAAC,CAAC;QAC1G,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,CAAC,YAAY;YAC1D,MAAM,IAAI,eAAe,CAAC,4BAA4B,QAAQ,QAAQ,IAAI,CAAC,YAAY,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAC/G,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ;QAAE,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,CAAC,CAAC;IACtH,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACzG,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/D,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC;QACxB,IAAI,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,aAAa;YAC7C,MAAM,IAAI,kBAAkB,CAAC,wCAAwC,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAiB,EACjB,KAAsB,EACtB,IAAiB,EACjB,UAA4B,EAAE;IAE9B,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7B,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,YAAY,CAAC,OAAO,CAAC,CAAC;IACtB,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;QACpD,MAAM,IAAI,eAAe,CAAC,wDAAwD,CAAC,CAAC;IACtF,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;IAC5C,MAAM,KAAK,GAAG,eAAe,CAAC,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACrC,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACtC,YAAY,CAAC,OAAO,CAAC,CAAC;IACtB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AAC9G,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAiB,EACjB,KAAsB,EACtB,IAAiB,EACjB,UAA4B,EAAE;IAE9B,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAGD,MAAM,UAAU,mBAAmB,CAAC,IAAiB,EAAE,IAAiB;IACtE,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC;QACvC,MAAM,IAAI,eAAe,CAAC,mDAAmD,EAAE,cAAc,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,IAAI,CACX,IAAiB,EACjB,QAAgB,EAChB,MAAqB,EACrB,MAAuD,EACvD,OAAyB,EACzB,QAAgB;IAEhB,YAAY,CAAC,OAAO,CAAC,CAAC;IACtB,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,eAAe,CAAC,gDAAgD,CAAC,CAAC;IACzG,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO;QACrC,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,iCAAiC,QAAQ,EAAE,EAAE,aAAa,CAAC,CAAC;IACjH,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAClB,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7E,IAAI,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAC5C,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ;gBAAE,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,CAAC,CAAC;QACnG,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,wCAAwC,QAAQ,EAAE,EAAE,aAAa,CAAC,CAAC;IACtH,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACvF,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,IAAI,KAAK,CAAC,cAAc,EAAE;YACxB,MAAM,IAAI,eAAe,CAAC,iCAAiC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;QAC1G,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC5E,CAAC;IACD,qBAAqB,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+export { CacheSyncError, DurabilityError, LeaseContentionError, PathSafetyError, RecoveryError, RepositoryStoreConfigError, RepositoryStoreError, ResourceLimitError, StaleRevisionError, UnsupportedRuntimeError, type RepositoryStoreErrorCategory, type RepositoryStoreErrorCode, } from './errors.js';
+export { readManagedFile, scanManagedFiles, type ManagedFile, type ScanManagedFilesOptions } from './files.js';
+export { withRepositoryLease, type OperationControl, type RepositoryLease, type RepositoryLeaseOptions, } from './lease.js';
+export { DEFAULT_STORE_LIMITS, type StoreLimits } from './limits.js';
+export { PORTABLE_RELATIVE_PATH_PATTERN, resolveManagedPath, resolveManagedRoot, validateRelativePath, type ManagedPath, type ManagedRoot, type ManagedRootOptions, } from './paths.js';
+export { computeByteRevision, type ByteRevision } from './revision.js';
+export { openDisposableSqliteCache, rebuildDisposableSqliteCache, removeDisposableSqliteCache, } from './sqlite/cache.js';
+export type { CacheOpenResult, CacheRebuildReason, DisposableCacheSpecification, DisposableSqliteCache, } from './sqlite/cache.js';
+export { selectSqliteAdapter } from './sqlite/runtime.js';
+export type { SqliteAdapter, SqliteConnection, SqliteConnectionBounds, SqliteParameters, SqliteRunResult, SqliteStatement, SqliteValue, } from './sqlite/adapter.js';
+export { applyCanonicalBatch } from './transaction/apply.js';
+export { recoverCanonicalTransactions } from './transaction/recovery.js';
+export type { ApplyCanonicalBatchOptions, CanonicalOperation, RecoveryReport } from './transaction/types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,0BAA0B,EAC1B,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,4BAA4B,EACjC,KAAK,wBAAwB,GAC9B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,KAAK,WAAW,EAAE,KAAK,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAC/G,OAAO,EACL,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,sBAAsB,GAC5B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,kBAAkB,GACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EACL,yBAAyB,EACzB,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,4BAA4B,EAC5B,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,YAAY,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/index.js

@@ -0,0 +1,11 @@
+export { CacheSyncError, DurabilityError, LeaseContentionError, PathSafetyError, RecoveryError, RepositoryStoreConfigError, RepositoryStoreError, ResourceLimitError, StaleRevisionError, UnsupportedRuntimeError, } from './errors.js';
+export { readManagedFile, scanManagedFiles } from './files.js';
+export { withRepositoryLease, } from './lease.js';
+export { DEFAULT_STORE_LIMITS } from './limits.js';
+export { PORTABLE_RELATIVE_PATH_PATTERN, resolveManagedPath, resolveManagedRoot, validateRelativePath, } from './paths.js';
+export { computeByteRevision } from './revision.js';
+export { openDisposableSqliteCache, rebuildDisposableSqliteCache, removeDisposableSqliteCache, } from './sqlite/cache.js';
+export { selectSqliteAdapter } from './sqlite/runtime.js';
+export { applyCanonicalBatch } from './transaction/apply.js';
+export { recoverCanonicalTransactions } from './transaction/recovery.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,0BAA0B,EAC1B,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,GAGxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAkD,MAAM,YAAY,CAAC;AAC/G,OAAO,EACL,mBAAmB,GAIpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAoB,MAAM,aAAa,CAAC;AACrE,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,GAIrB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAqB,MAAM,eAAe,CAAC;AACvE,OAAO,EACL,yBAAyB,EACzB,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAO3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAU1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/internal/fault-injection.d.ts

@@ -0,0 +1,13 @@
+export declare const TRANSACTION_FAULT_EVENTS: readonly ["prepare-directory-created", "before-image-written", "staged-artifact-written", "manifest-written", "prepare-directory-synced", "active-state-renamed", "active-state-synced", "canonical-path-published", "committed-state-renamed", "committed-state-synced", "cleanup-state-renamed", "cleanup-state-synced", "cleanup-artifact-removed", "cleanup-manifest-removed", "cleanup-directory-removed", "cleanup-root-synced"];
+export type TransactionFaultEvent = (typeof TRANSACTION_FAULT_EVENTS)[number];
+export declare const LEASE_FAULT_EVENTS: readonly ["claim-published", "claim-finalized", "lease-directory-created", "lease-owner-written", "lease-claim-removed"];
+export type LeaseFaultEvent = (typeof LEASE_FAULT_EVENTS)[number];
+export declare const FILESYSTEM_FAULT_EVENTS: readonly ["bounded-read-opened", "before-exact-publication", "before-exact-removal", "before-exact-evacuation", "destination-evacuated", "exclusive-destination-published", "before-lease-artifact-quarantine", "after-stale-claim-owner-verified", "file-fsync", "directory-fsync"];
+export type FilesystemFaultEvent = (typeof FILESYSTEM_FAULT_EVENTS)[number];
+export declare function setTransactionFaultInjectorForTests(injector: ((event: TransactionFaultEvent, occurrence: number) => void) | undefined): void;
+export declare function emitTransactionFault(event: TransactionFaultEvent): void;
+export declare function setLeaseFaultInjectorForTests(injector: ((event: LeaseFaultEvent) => void) | undefined): void;
+export declare function emitLeaseFault(event: LeaseFaultEvent): void;
+export declare function setFilesystemFaultInjectorForTests(injector: ((event: FilesystemFaultEvent, path: string, occurrence: number) => void) | undefined): void;
+export declare function emitFilesystemFault(event: FilesystemFaultEvent, path: string): void;
+//# sourceMappingURL=fault-injection.d.ts.map

package/dist/internal/fault-injection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fault-injection.d.ts","sourceRoot":"","sources":["../../src/internal/fault-injection.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,wBAAwB,waAiB3B,CAAC;AAGX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAG9E,eAAO,MAAM,kBAAkB,0HAMrB,CAAC;AAGX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAGlE,eAAO,MAAM,uBAAuB,sRAW1B,CAAC;AAGX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAS5E,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,GACjF,IAAI,CAGN;AAGD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI,CAIvE;AAGD,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC,GAAG,SAAS,GAAG,IAAI,CAE5G;AAGD,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAE3D;AAGD,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,GAC9F,IAAI,CAGN;AAGD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAKnF"}

package/dist/internal/fault-injection.js

@@ -0,0 +1,68 @@
+export const TRANSACTION_FAULT_EVENTS = [
+    'prepare-directory-created',
+    'before-image-written',
+    'staged-artifact-written',
+    'manifest-written',
+    'prepare-directory-synced',
+    'active-state-renamed',
+    'active-state-synced',
+    'canonical-path-published',
+    'committed-state-renamed',
+    'committed-state-synced',
+    'cleanup-state-renamed',
+    'cleanup-state-synced',
+    'cleanup-artifact-removed',
+    'cleanup-manifest-removed',
+    'cleanup-directory-removed',
+    'cleanup-root-synced',
+];
+export const LEASE_FAULT_EVENTS = [
+    'claim-published',
+    'claim-finalized',
+    'lease-directory-created',
+    'lease-owner-written',
+    'lease-claim-removed',
+];
+export const FILESYSTEM_FAULT_EVENTS = [
+    'bounded-read-opened',
+    'before-exact-publication',
+    'before-exact-removal',
+    'before-exact-evacuation',
+    'destination-evacuated',
+    'exclusive-destination-published',
+    'before-lease-artifact-quarantine',
+    'after-stale-claim-owner-verified',
+    'file-fsync',
+    'directory-fsync',
+];
+let transactionFaultInjector;
+let leaseFaultInjector;
+let filesystemFaultInjector;
+const transactionOccurrences = new Map();
+const filesystemOccurrences = new Map();
+export function setTransactionFaultInjectorForTests(injector) {
+    transactionOccurrences.clear();
+    transactionFaultInjector = injector;
+}
+export function emitTransactionFault(event) {
+    const occurrence = (transactionOccurrences.get(event) ?? 0) + 1;
+    transactionOccurrences.set(event, occurrence);
+    transactionFaultInjector?.(event, occurrence);
+}
+export function setLeaseFaultInjectorForTests(injector) {
+    leaseFaultInjector = injector;
+}
+export function emitLeaseFault(event) {
+    leaseFaultInjector?.(event);
+}
+export function setFilesystemFaultInjectorForTests(injector) {
+    filesystemOccurrences.clear();
+    filesystemFaultInjector = injector;
+}
+export function emitFilesystemFault(event, path) {
+    const key = `${event}\0${path}`;
+    const occurrence = (filesystemOccurrences.get(key) ?? 0) + 1;
+    filesystemOccurrences.set(key, occurrence);
+    filesystemFaultInjector?.(event, path, occurrence);
+}
+//# sourceMappingURL=fault-injection.js.map

package/dist/internal/fault-injection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fault-injection.js","sourceRoot":"","sources":["../../src/internal/fault-injection.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,2BAA2B;IAC3B,sBAAsB;IACtB,yBAAyB;IACzB,kBAAkB;IAClB,0BAA0B;IAC1B,sBAAsB;IACtB,qBAAqB;IACrB,0BAA0B;IAC1B,yBAAyB;IACzB,wBAAwB;IACxB,uBAAuB;IACvB,sBAAsB;IACtB,0BAA0B;IAC1B,0BAA0B;IAC1B,2BAA2B;IAC3B,qBAAqB;CACb,CAAC;AAMX,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,iBAAiB;IACjB,iBAAiB;IACjB,yBAAyB;IACzB,qBAAqB;IACrB,qBAAqB;CACb,CAAC;AAMX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,qBAAqB;IACrB,0BAA0B;IAC1B,sBAAsB;IACtB,yBAAyB;IACzB,uBAAuB;IACvB,iCAAiC;IACjC,kCAAkC;IAClC,kCAAkC;IAClC,YAAY;IACZ,iBAAiB;CACT,CAAC;AAKX,IAAI,wBAAkG,CAAC;AACvG,IAAI,kBAAkE,CAAC;AACvE,IAAI,uBAA8G,CAAC;AACnH,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAiC,CAAC;AACxE,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAGxD,MAAM,UAAU,mCAAmC,CACjD,QAAkF;IAElF,sBAAsB,CAAC,KAAK,EAAE,CAAC;IAC/B,wBAAwB,GAAG,QAAQ,CAAC;AACtC,CAAC;AAGD,MAAM,UAAU,oBAAoB,CAAC,KAA4B;IAC/D,MAAM,UAAU,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAChE,sBAAsB,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC9C,wBAAwB,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;AAChD,CAAC;AAGD,MAAM,UAAU,6BAA6B,CAAC,QAAwD;IACpG,kBAAkB,GAAG,QAAQ,CAAC;AAChC,CAAC;AAGD,MAAM,UAAU,cAAc,CAAC,KAAsB;IACnD,kBAAkB,EAAE,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAGD,MAAM,UAAU,kCAAkC,CAChD,QAA+F;IAE/F,qBAAqB,CAAC,KAAK,EAAE,CAAC;IAC9B,uBAAuB,GAAG,QAAQ,CAAC;AACrC,CAAC;AAGD,MAAM,UAAU,mBAAmB,CAAC,KAA2B,EAAE,IAAY;IAC3E,MAAM,GAAG,GAAG,GAAG,KAAK,KAAK,IAAI,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7D,qBAAqB,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC3C,uBAAuB,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AACrD,CAAC"}

package/dist/internal/filesystem.d.ts

@@ -0,0 +1,25 @@
+import { type Stats } from 'node:fs';
+export interface DirectoryIdentity {
+    readonly path: string;
+    readonly stat: Stats;
+}
+export declare function noFollowFlag(): number;
+export declare function hasCode(error: unknown, code: string): boolean;
+export declare function sameIdentity(left: Stats, right: Stats): boolean;
+export declare function ensurePrivateDirectory(target: string): void;
+export declare function captureDirectories(directory: string): DirectoryIdentity[];
+export declare function revalidateDirectories(identities: readonly DirectoryIdentity[]): void;
+export declare function readRegularFile(path: string, maxBytes: number, options?: {
+    readonly allowedLinkCounts?: readonly number[];
+}): Uint8Array;
+export declare function readRegularFileWithIdentity(path: string, maxBytes: number, options?: {
+    readonly allowedLinkCounts?: readonly number[];
+}): {
+    readonly bytes: Uint8Array;
+    readonly identity: Stats;
+};
+export declare function assertSafeRegular(stat: Stats, path: string): void;
+export declare function syncFileDescriptor(descriptor: number, path: string): void;
+export declare function syncRegularFile(path: string): void;
+export declare function syncDirectory(path: string): void;
+//# sourceMappingURL=filesystem.d.ts.map

package/dist/internal/filesystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.d.ts","sourceRoot":"","sources":["../../src/internal/filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,EASL,KAAK,KAAK,EACX,MAAM,SAAS,CAAC;AAMjB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;CACtB;AAGD,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAGD,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7D;AAGD,wBAAgB,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAE/D;AAGD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CA0B3D;AAGD,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,EAAE,CASzE;AAQD,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,GAAG,IAAI,CAWpF;AAGD,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GAC/D,UAAU,CAEZ;AAGD,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GAC/D;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAA;CAAE,CA6C1D;AAGD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAEjE;AAUD,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAUzE;AAGD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAalD;AAGD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAmBhD"}