@omnitype-code/journal 2.0.0

package/dist/materializer/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/materializer/db.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAGV,SAAS,EACT,YAAY,EACZ,MAAM,EACN,IAAI,EACJ,IAAI,EACL,MAAM,qBAAqB,CAAC;AA0F7B,qBAAa,YAAY;IACvB,OAAO,CAAC,EAAE,CAAe;gBAEb,MAAM,EAAE,MAAM;IAK1B,IAAI,cAAc,IAAI,MAAM,CAI3B;IAED,KAAK,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI;IAqBhC,OAAO,CAAC,UAAU;IAmFlB,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,WAAW;IAoEnB,OAAO,CAAC,iBAAiB;IAqEzB,OAAO,CAAC,WAAW;IAyDnB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,GAAG,IAAI,EAAE;IAuB9C,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAI5C,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAW3D;;;;;OAKG;IACH,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;QAC9C,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;KAC1G,CAAC;IA0BF;;;OAGG;IACH,uBAAuB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;QAC5C,IAAI,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;KACnF,CAAC;IAeF,KAAK,IAAI,IAAI;CAGd"}

package/dist/materializer/db.js

@@ -0,0 +1,385 @@
+/**
+ * SQLite WAL materializer (using node:sqlite — built into Node 22.5+).
+ *
+ * The spans table is the derived view of who wrote which bytes.
+ * Reconstructible by replaying the journal from scratch.
+ */
+import { DatabaseSync } from 'node:sqlite';
+const SCHEMA = `
+PRAGMA journal_mode=WAL;
+PRAGMA synchronous=NORMAL;
+PRAGMA foreign_keys=ON;
+
+CREATE TABLE IF NOT EXISTS meta (
+  key   TEXT PRIMARY KEY,
+  value TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS files (
+  path            TEXT PRIMARY KEY,
+  hash            TEXT NOT NULL,
+  byte_count      INTEGER NOT NULL DEFAULT 0,
+  last_seq        INTEGER NOT NULL DEFAULT 0,
+  tracking_status TEXT NOT NULL DEFAULT 'unknown'
+);
+
+CREATE TABLE IF NOT EXISTS spans (
+  id               INTEGER PRIMARY KEY AUTOINCREMENT,
+  path             TEXT NOT NULL,
+  byte_start       INTEGER NOT NULL,
+  byte_end         INTEGER NOT NULL,
+  origin           TEXT NOT NULL,
+  actor_json       TEXT NOT NULL,
+  seq_introduced   INTEGER NOT NULL,
+  seq_last_touched INTEGER NOT NULL,
+  txn_id           TEXT,
+  tier             TEXT NOT NULL DEFAULT 'T3',
+  confidence       REAL NOT NULL DEFAULT 0.5,
+  formatted        INTEGER NOT NULL DEFAULT 0,
+  UNIQUE(path, byte_start)
+);
+
+CREATE INDEX IF NOT EXISTS spans_path ON spans(path, byte_start, byte_end);
+
+-- Day 18 (§3.4): All attestations per byte range — highest-tier wins at query time.
+-- Avoids "last writer wins" which lets a community T0 overwrite a verified T1.
+CREATE TABLE IF NOT EXISTS attestations (
+  id             INTEGER PRIMARY KEY AUTOINCREMENT,
+  path           TEXT NOT NULL,
+  byte_start     INTEGER NOT NULL,
+  byte_end       INTEGER NOT NULL,
+  origin         TEXT NOT NULL,
+  actor_json     TEXT NOT NULL,
+  seq            INTEGER NOT NULL,
+  tier           TEXT NOT NULL,
+  confidence     REAL NOT NULL DEFAULT 0.5,
+  adapter_id     TEXT NOT NULL,
+  basis          TEXT NOT NULL DEFAULT ''
+);
+
+CREATE INDEX IF NOT EXISTS attestations_path ON attestations(path, byte_start, byte_end);
+CREATE INDEX IF NOT EXISTS attestations_seq  ON attestations(seq);
+
+CREATE TABLE IF NOT EXISTS sessions (
+  session_id     TEXT PRIMARY KEY,
+  tool           TEXT NOT NULL,
+  model          TEXT NOT NULL,
+  started_at     INTEGER NOT NULL,
+  ended_at       INTEGER,
+  end_reason     TEXT,
+  prompt_hash    TEXT,
+  prompt_bytes   INTEGER DEFAULT 0,
+  prompt_deferred INTEGER NOT NULL DEFAULT 0
+);
+
+CREATE TABLE IF NOT EXISTS txns (
+  txn_id         TEXT PRIMARY KEY,
+  session_id     TEXT NOT NULL,
+  began_at_seq   INTEGER NOT NULL,
+  committed_at   INTEGER,
+  aborted_at     INTEGER,
+  abort_reason   TEXT,
+  expected_files TEXT NOT NULL DEFAULT '[]'
+);
+
+-- Day 15 (§4.1): Tracks pre_hash mismatches for retry-hint on optimistic concurrency.
+CREATE TABLE IF NOT EXISTS concurrency_conflicts (
+  id             INTEGER PRIMARY KEY AUTOINCREMENT,
+  path           TEXT NOT NULL,
+  conflicting_seq INTEGER NOT NULL,
+  expected_hash  TEXT NOT NULL,
+  actual_hash    TEXT NOT NULL,
+  detected_at    INTEGER NOT NULL
+);
+`;
+export class Materializer {
+    db;
+    constructor(dbPath) {
+        this.db = new DatabaseSync(dbPath);
+        this.db.exec(SCHEMA);
+    }
+    get lastAppliedSeq() {
+        const stmt = this.db.prepare('SELECT value FROM meta WHERE key = ?');
+        const row = stmt.get('last_applied_seq');
+        return row ? parseInt(row.value, 10) : -1;
+    }
+    apply(event) {
+        // Day 5 fix (§2.5): wrap applyEvent + meta update in a single SQLite transaction.
+        // If the daemon crashes between the two, replay will re-apply from last_applied_seq+1
+        // rather than re-applying a partially-committed event.
+        // Idempotency guard: skip events already applied (handles crash-replay double-apply).
+        const lastApplied = this.lastAppliedSeq;
+        if (event.seq <= lastApplied)
+            return; // already applied — idempotent
+        this.db.exec('BEGIN IMMEDIATE');
+        try {
+            this.applyEvent(event);
+            this.db
+                .prepare('INSERT OR REPLACE INTO meta(key,value) VALUES(?,?)')
+                .run('last_applied_seq', String(event.seq));
+            this.db.exec('COMMIT');
+        }
+        catch (err) {
+            try {
+                this.db.exec('ROLLBACK');
+            }
+            catch { /* ignore rollback error */ }
+            throw err;
+        }
+    }
+    applyEvent(event) {
+        switch (event.type) {
+            case 'FileOpened':
+                return this.applyFileOpened(event);
+            case 'EditOp':
+                return this.applyEditOp(event);
+            case 'UnattributedDelta':
+                return this.applyUnattributed(event);
+            case 'SessionStarted':
+                this.db
+                    .prepare('INSERT OR REPLACE INTO sessions(session_id,tool,model,started_at,prompt_hash,prompt_bytes) VALUES(?,?,?,?,?,?)')
+                    .run(event.session_id, event.tool, event.model, event.ts, event.prompt_hash, event.prompt_bytes);
+                break;
+            case 'SessionEnded':
+                this.db
+                    .prepare('UPDATE sessions SET ended_at=?, end_reason=? WHERE session_id=?')
+                    .run(event.ts, event.reason, event.session_id);
+                break;
+            case 'TxnBegin':
+                this.db
+                    .prepare('INSERT OR REPLACE INTO txns(txn_id,session_id,began_at_seq,expected_files) VALUES(?,?,?,?)')
+                    .run(event.txn_id, event.session_id, event.seq, JSON.stringify(event.expected_files));
+                break;
+            case 'TxnCommit':
+                this.db
+                    .prepare('UPDATE txns SET committed_at=? WHERE txn_id=?')
+                    .run(event.seq, event.txn_id);
+                break;
+            case 'TxnAbort':
+                this.db
+                    .prepare('UPDATE txns SET aborted_at=?, abort_reason=? WHERE txn_id=?')
+                    .run(event.seq, event.reason, event.txn_id);
+                break;
+            case 'IntentOverride':
+                // Day 12 (§9.2): reclassify spans for the original seq from quarantine/unknown
+                // to formatter-touched, preserving prior attribution but marking the format intent.
+                this.db
+                    .prepare('UPDATE spans SET formatted=1 WHERE path=? AND seq_introduced=?')
+                    .run(event.path, event.original_seq);
+                // Clear quarantine if it was set by the formatter write
+                this.db
+                    .prepare('UPDATE files SET tracking_status="tracked" WHERE path=? AND tracking_status="quarantined"')
+                    .run(event.path);
+                break;
+            case 'TierShift':
+                // Record tier shifts for dashboard observability (§3.3, §8.2)
+                // Spans already written at the old tier are not retroactively changed —
+                // the shift only affects future events from this adapter.
+                break;
+            case 'AttestationClaim':
+                // Day 18: explicit attestation from an adapter — record for arbitration
+                this.db
+                    .prepare(`INSERT INTO attestations(path,byte_start,byte_end,origin,actor_json,seq,tier,confidence,adapter_id,basis)
+             VALUES(?,?,?,?,?,?,?,?,?,?)`)
+                    .run(event.path, event.byte_start, event.byte_end, event.origin, JSON.stringify(event.actor ?? {}), event.seq, event.tier, event.confidence, event.adapter_id, event.basis);
+                break;
+            default:
+                break;
+        }
+    }
+    applyFileOpened(event) {
+        this.db
+            .prepare('INSERT OR REPLACE INTO files(path,hash,byte_count,last_seq,tracking_status) VALUES(?,?,?,?,?)')
+            .run(event.path, event.blob_sha256, event.byte_count, event.seq, 'tracked');
+    }
+    applyEditOp(event) {
+        const stmt = this.db.prepare('SELECT hash, byte_count, tracking_status FROM files WHERE path=?');
+        const file = stmt.get(event.path);
+        if (file && file.hash !== event.pre_hash) {
+            // Day 15 fix (§4.1): record conflict for retry-hint instead of silently losing.
+            this.db
+                .prepare('INSERT INTO concurrency_conflicts(path,conflicting_seq,expected_hash,actual_hash,detected_at) VALUES(?,?,?,?,?)')
+                .run(event.path, event.seq, event.pre_hash, file.hash, Date.now());
+            this.db
+                .prepare('UPDATE files SET tracking_status=? WHERE path=?')
+                .run('quarantined', event.path);
+            return;
+        }
+        // Day 18 (§3.4): record attestation for each splice — all adapters' claims stored.
+        const adapterId = event.adapter_id ?? 'unknown';
+        // Track byte_count delta across this EditOp's splices.
+        let byteDelta = 0;
+        for (const splice of event.ops) {
+            byteDelta += splice.insert_text.length - splice.delete_len;
+            this.applySplice(event.path, splice.offset, splice.delete_len, splice.insert_text.length, event.origin, event.actor, event.seq, event.tier, 1.0, false);
+            // Record attestation for highest-tier arbitration
+            if (splice.insert_text.length > 0) {
+                this.db
+                    .prepare(`INSERT INTO attestations(path,byte_start,byte_end,origin,actor_json,seq,tier,confidence,adapter_id,basis)
+             VALUES(?,?,?,?,?,?,?,?,?,?)`)
+                    .run(event.path, splice.offset, splice.offset + splice.insert_text.length, event.origin, JSON.stringify(event.actor), event.seq, event.tier, 1.0, adapterId, `EditOp@seq:${event.seq}`);
+            }
+        }
+        const priorBytes = file?.byte_count ?? 0;
+        const newByteCount = Math.max(0, priorBytes + byteDelta);
+        this.db
+            .prepare('INSERT OR REPLACE INTO files(path,hash,byte_count,last_seq,tracking_status) VALUES(?,?,?,?,?)')
+            .run(event.path, event.post_hash, newByteCount, event.seq, 'tracked');
+    }
+    applyUnattributed(event) {
+        const best = (event.candidates ?? [])[0];
+        const actor = best?.actor ?? event.actor;
+        const ops = event.ops ?? [];
+        if (ops.length > 0) {
+            // We have positional info — splice spans precisely.
+            for (const splice of ops) {
+                this.applySplice(event.path, splice.offset, splice.delete_len, splice.insert_text.length, 'unknown', // never default to 'ai' for unattributed
+                actor, event.seq, 'T3', event.confidence, false);
+            }
+        }
+        else {
+            // No ops — we don't know WHICH bytes changed.
+            // Recording a synthetic [0, delta_bytes] span here would silently shift
+            // every existing span on every save and grow the spans table unboundedly.
+            // Instead, mark the file as 'reconciling' and emit a single attestation
+            // record so the conflict is visible without corrupting span layout.
+            this.db
+                .prepare('UPDATE files SET tracking_status=? WHERE path=?')
+                .run('reconciling', event.path);
+            const adapterId = event.adapter_id ?? 'unknown';
+            const fileRow = this.db
+                .prepare('SELECT byte_count FROM files WHERE path=?')
+                .get(event.path);
+            const end = fileRow?.byte_count ?? Math.max(0, event.delta_bytes ?? 0);
+            this.db
+                .prepare(`INSERT INTO attestations(path,byte_start,byte_end,origin,actor_json,seq,tier,confidence,adapter_id,basis)
+           VALUES(?,?,?,?,?,?,?,?,?,?)`)
+                .run(event.path, 0, end, 'unknown', JSON.stringify(actor), event.seq, 'T3', event.confidence, adapterId, 'UnattributedDelta:no-ops');
+        }
+        // Compute new byte_count from delta if available, otherwise leave untouched.
+        if (ops.length > 0) {
+            let delta = 0;
+            for (const s of ops)
+                delta += s.insert_text.length - s.delete_len;
+            this.db
+                .prepare('UPDATE files SET hash=?, last_seq=?, byte_count=MAX(0, byte_count+?), tracking_status=COALESCE(tracking_status,?) WHERE path=?')
+                .run(event.post_hash, event.seq, delta, 'tracked', event.path);
+        }
+        else {
+            this.db
+                .prepare('UPDATE files SET hash=?, last_seq=? WHERE path=?')
+                .run(event.post_hash, event.seq, event.path);
+        }
+    }
+    applySplice(path, offset, deleteLen, insertLen, origin, actor, seq, tier, confidence, formatted) {
+        if (deleteLen > 0) {
+            this.db
+                .prepare('DELETE FROM spans WHERE path=? AND byte_start >= ? AND byte_end <= ?')
+                .run(path, offset, offset + deleteLen);
+            this.db
+                .prepare('UPDATE spans SET byte_end = ? WHERE path=? AND byte_start < ? AND byte_end > ?')
+                .run(offset, path, offset, offset);
+            this.db
+                .prepare('UPDATE spans SET byte_start = byte_start - ?, byte_end = byte_end - ? WHERE path=? AND byte_start >= ?')
+                .run(deleteLen, deleteLen, path, offset + deleteLen);
+        }
+        if (insertLen > 0) {
+            this.db
+                .prepare('UPDATE spans SET byte_start = byte_start + ?, byte_end = byte_end + ? WHERE path=? AND byte_start >= ?')
+                .run(insertLen, insertLen, path, offset);
+            this.db
+                .prepare(`INSERT OR REPLACE INTO spans(path,byte_start,byte_end,origin,actor_json,seq_introduced,seq_last_touched,tier,confidence,formatted)
+           VALUES(?,?,?,?,?,?,?,?,?,?)`)
+                .run(path, offset, offset + insertLen, origin, JSON.stringify(actor), seq, seq, tier, confidence, formatted ? 1 : 0);
+        }
+    }
+    // ─── Queries ───────────────────────────────────────────────────────────────
+    getSpans(path, minTier) {
+        const tierOrder = { T0: 0, T1: 1, T2: 2, T3: 3 };
+        const rows = this.db
+            .prepare('SELECT * FROM spans WHERE path=? ORDER BY byte_start')
+            .all(path);
+        return rows
+            .map((r) => ({
+            path: r['path'],
+            byte_start: r['byte_start'],
+            byte_end: r['byte_end'],
+            origin: r['origin'],
+            actor: JSON.parse(r['actor_json']),
+            seq_introduced: r['seq_introduced'],
+            seq_last_touched: r['seq_last_touched'],
+            txn_id: r['txn_id'],
+            tier: r['tier'],
+            confidence: r['confidence'],
+            formatted: r['formatted'] === 1,
+        }))
+            .filter((s) => !minTier || tierOrder[s.tier] <= tierOrder[minTier]);
+    }
+    getFile(path) {
+        return this.db.prepare('SELECT * FROM files WHERE path=?').get(path);
+    }
+    getAttributionSummary(path) {
+        const rows = this.db
+            .prepare('SELECT origin, SUM(byte_end - byte_start) as bytes FROM spans WHERE path=? GROUP BY origin')
+            .all(path);
+        const summary = {};
+        for (const r of rows)
+            summary[r.origin] = r.bytes;
+        return summary;
+    }
+    /**
+     * Day 18 (§3.4): Get highest-tier attribution for a byte range.
+     * Competes_with arbitration: when multiple adapters attest to the same bytes,
+     * the attestation with the lowest tier number (T0 < T1 < T2 < T3) wins.
+     * Ties are broken by highest confidence, then earliest seq.
+     */
+    getHighestTierAttestations(path) {
+        const tierOrder = { T0: 0, T1: 1, T2: 2, T3: 3 };
+        const rows = this.db
+            .prepare('SELECT * FROM attestations WHERE path=? ORDER BY byte_start, tier, confidence DESC, seq')
+            .all(path);
+        const best = new Map();
+        for (const row of rows) {
+            const key = `${row['byte_start']}-${row['byte_end']}`;
+            const existing = best.get(key);
+            if (!existing) {
+                best.set(key, row);
+                continue;
+            }
+            const existingOrder = tierOrder[existing['tier']] ?? 3;
+            const rowOrder = tierOrder[row['tier']] ?? 3;
+            if (rowOrder < existingOrder)
+                best.set(key, row);
+        }
+        return [...best.values()].map((r) => ({
+            byte_start: r['byte_start'],
+            byte_end: r['byte_end'],
+            origin: r['origin'],
+            tier: r['tier'],
+            confidence: r['confidence'],
+            adapter_id: r['adapter_id'],
+        }));
+    }
+    /**
+     * Day 15 (§4.1): Get pending concurrency conflicts — files that need retry.
+     * Returns the current hash the retrying tool should use as pre_hash.
+     */
+    getConcurrencyConflicts(path) {
+        const query = path
+            ? 'SELECT * FROM concurrency_conflicts WHERE path=? ORDER BY detected_at DESC'
+            : 'SELECT * FROM concurrency_conflicts ORDER BY detected_at DESC';
+        const rows = path
+            ? this.db.prepare(query).all(path)
+            : this.db.prepare(query).all();
+        return rows.map((r) => ({
+            path: r['path'],
+            conflicting_seq: r['conflicting_seq'],
+            expected_hash: r['expected_hash'],
+            actual_hash: r['actual_hash'],
+        }));
+    }
+    close() {
+        this.db.close();
+    }
+}
+//# sourceMappingURL=db.js.map

package/dist/materializer/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/materializer/db.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAW3C,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsFd,CAAC;AAEF,MAAM,OAAO,YAAY;IACf,EAAE,CAAe;IAEzB,YAAY,MAAc;QACxB,IAAI,CAAC,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,cAAc;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAkC,CAAC;QAC1E,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,KAAmB;QACvB,kFAAkF;QAClF,sFAAsF;QACtF,uDAAuD;QACvD,sFAAsF;QACtF,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC;QACxC,IAAI,KAAK,CAAC,GAAG,IAAI,WAAW;YAAE,OAAO,CAAC,+BAA+B;QAErE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACvB,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,oDAAoD,CAAC;iBAC7D,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9C,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;YACvE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,KAAmB;QACpC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACrC,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACjC,KAAK,mBAAmB;gBACtB,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACvC,KAAK,gBAAgB;gBACnB,IAAI,CAAC,EAAE;qBACJ,OAAO,CACN,gHAAgH,CACjH;qBACA,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;gBACnG,MAAM;YACR,KAAK,cAAc;gBACjB,IAAI,CAAC,EAAE;qBACJ,OAAO,CAAC,iEAAiE,CAAC;qBAC1E,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;gBACjD,MAAM;YACR,KAAK,UAAU;gBACb,IAAI,CAAC,EAAE;qBACJ,OAAO,CACN,4FAA4F,CAC7F;qBACA,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;gBACxF,MAAM;YACR,KAAK,WAAW;gBACd,IAAI,CAAC,EAAE;qBACJ,OAAO,CAAC,+CAA+C,CAAC;qBACxD,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAChC,MAAM;YACR,KAAK,UAAU;gBACb,IAAI,CAAC,EAAE;qBACJ,OAAO,CAAC,6DAA6D,CAAC;qBACtE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC9C,MAAM;YACR,KAAK,gBAAgB;gBACnB,+EAA+E;gBAC/E,oFAAoF;gBACpF,IAAI,CAAC,EAAE;qBACJ,OAAO,CAAC,gEAAgE,CAAC;qBACzE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;gBACvC,wDAAwD;gBACxD,IAAI,CAAC,EAAE;qBACJ,OAAO,CACN,2FAA2F,CAC5F;qBACA,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACnB,MAAM;YAER,KAAK,WAAW;gBACd,8DAA8D;gBAC9D,wEAAwE;gBACxE,0DAA0D;gBAC1D,MAAM;YAER,KAAK,kBAAkB;gBACrB,wEAAwE;gBACxE,IAAI,CAAC,EAAE;qBACJ,OAAO,CACN;yCAC6B,CAC9B;qBACA,GAAG,CACF,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,MAAM,EACZ,IAAI,CAAC,SAAS,CAAE,KAAuC,CAAC,KAAK,IAAI,EAAE,CAAC,EACpE,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,KAAK,CACZ,CAAC;gBACJ,MAAM;YAER;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,KAA2D;QACjF,IAAI,CAAC,EAAE;aACJ,OAAO,CACN,+FAA+F,CAChG;aACA,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAChF,CAAC;IAEO,WAAW,CAAC,KAAwH;QAC1I,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC;QACjG,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAA8E,CAAC;QAE/G,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;YACzC,gFAAgF;YAChF,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN,iHAAiH,CAClH;iBACA,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,iDAAiD,CAAC;iBAC1D,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QAED,mFAAmF;QACnF,MAAM,SAAS,GAAI,KAAiC,CAAC,UAAU,IAAI,SAAS,CAAC;QAE7E,uDAAuD;QACvD,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YAC/B,SAAS,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;YAC3D,IAAI,CAAC,WAAW,CACd,KAAK,CAAC,IAAI,EACV,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,WAAW,CAAC,MAAM,EACzB,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,IAAI,EACV,GAAG,EACH,KAAK,CACN,CAAC;YAEF,kDAAkD;YAClD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,IAAI,CAAC,EAAE;qBACJ,OAAO,CACN;yCAC6B,CAC9B;qBACA,GAAG,CACF,KAAK,CAAC,IAAI,EACV,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,EACzC,KAAK,CAAC,MAAM,EACZ,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EAC3B,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,IAAI,EACV,GAAG,EACH,SAAS,EACT,cAAc,KAAK,CAAC,GAAG,EAAE,CAC1B,CAAC;YACN,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC,CAAC;QAEzD,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,+FAA+F,CAAC;aACxG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC1E,CAAC;IAEO,iBAAiB,CAAC,KAA4I;QACpK,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;QAEzC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnB,oDAAoD;YACpD,KAAK,MAAM,MAAM,IAAI,GAAG,EAAE,CAAC;gBACzB,IAAI,CAAC,WAAW,CACd,KAAK,CAAC,IAAI,EACV,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,WAAW,CAAC,MAAM,EACzB,SAAS,EAAE,yCAAyC;gBACpD,KAAK,EACL,KAAK,CAAC,GAAG,EACT,IAAI,EACJ,KAAK,CAAC,UAAU,EAChB,KAAK,CACN,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,8CAA8C;YAC9C,wEAAwE;YACxE,0EAA0E;YAC1E,wEAAwE;YACxE,oEAAoE;YACpE,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,iDAAiD,CAAC;iBAC1D,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,MAAM,SAAS,GAAI,KAAiC,CAAC,UAAU,IAAI,SAAS,CAAC;YAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE;iBACpB,OAAO,CAAC,2CAA2C,CAAC;iBACpD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAuC,CAAC;YACzD,MAAM,GAAG,GAAG,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN;uCAC6B,CAC9B;iBACA,GAAG,CACF,KAAK,CAAC,IAAI,EACV,CAAC,EACD,GAAG,EACH,SAAS,EACT,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EACrB,KAAK,CAAC,GAAG,EACT,IAAI,EACJ,KAAK,CAAC,UAAU,EAChB,SAAS,EACT,0BAA0B,CAC3B,CAAC;QACN,CAAC;QAED,6EAA6E;QAC7E,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnB,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,CAAC,IAAI,GAAG;gBAAE,KAAK,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC;YAClE,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,gIAAgI,CAAC;iBACzI,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,kDAAkD,CAAC;iBAC3D,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAEO,WAAW,CACjB,IAAY,EACZ,MAAc,EACd,SAAiB,EACjB,SAAiB,EACjB,MAAc,EACd,KAA0C,EAC1C,GAAW,EACX,IAAU,EACV,UAAkB,EAClB,SAAkB;QAElB,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,sEAAsE,CAAC;iBAC/E,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;YAEzC,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,gFAAgF,CAAC;iBACzF,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAErC,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN,wGAAwG,CACzG;iBACA,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN,wGAAwG,CACzG;iBACA,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAE3C,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN;uCAC6B,CAC9B;iBACA,GAAG,CACF,IAAI,EACJ,MAAM,EACN,MAAM,GAAG,SAAS,EAClB,MAAM,EACN,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EACrB,GAAG,EACH,GAAG,EACH,IAAI,EACJ,UAAU,EACV,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAClB,CAAC;QACN,CAAC;IACH,CAAC;IAED,8EAA8E;IAE9E,QAAQ,CAAC,IAAY,EAAE,OAAc;QACnC,MAAM,SAAS,GAAyB,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,sDAAsD,CAAC;aAC/D,GAAG,CAAC,IAAI,CAAmC,CAAC;QAE/C,OAAO,IAAI;aACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,CAAW;YACzB,UAAU,EAAE,CAAC,CAAC,YAAY,CAAW;YACrC,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAW;YACjC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAW;YAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAW,CAAwC;YACnF,cAAc,EAAE,CAAC,CAAC,gBAAgB,CAAW;YAC7C,gBAAgB,EAAE,CAAC,CAAC,kBAAkB,CAAW;YACjD,MAAM,EAAG,CAAC,CAAC,QAAQ,CAAmB;YACtC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAS;YACvB,UAAU,EAAE,CAAC,CAAC,YAAY,CAAW;YACrC,SAAS,EAAG,CAAC,CAAC,WAAW,CAAY,KAAK,CAAC;SAC5C,CAAC,CAAC;aACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,IAAI,CAA0B,CAAC;IAChG,CAAC;IAED,qBAAqB,CAAC,IAAY;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN,4FAA4F,CAC7F;aACA,GAAG,CAAC,IAAI,CAA6C,CAAC;QACzD,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QAClD,OAAO,OAAiC,CAAC;IAC3C,CAAC;IAED;;;;;OAKG;IACH,0BAA0B,CAAC,IAAY;QAGrC,MAAM,SAAS,GAA2B,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,yFAAyF,CAAC;aAClG,GAAG,CAAC,IAAI,CAAmC,CAAC;QAE/C,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4B,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YAChD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAW,CAAC,IAAI,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAW,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,QAAQ,GAAG,aAAa;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpC,UAAU,EAAE,CAAC,CAAC,YAAY,CAAW;YACrC,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAW;YACjC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAW;YAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAS;YACvB,UAAU,EAAE,CAAC,CAAC,YAAY,CAAW;YACrC,UAAU,EAAE,CAAC,CAAC,YAAY,CAAW;SACtC,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;OAGG;IACH,uBAAuB,CAAC,IAAa;QAGnC,MAAM,KAAK,GAAG,IAAI;YAChB,CAAC,CAAC,4EAA4E;YAC9E,CAAC,CAAC,+DAA+D,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI;YACf,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YAClC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC;QACjC,OAAQ,IAAuC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1D,IAAI,EAAE,CAAC,CAAC,MAAM,CAAW;YACzB,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAW;YAC/C,aAAa,EAAE,CAAC,CAAC,eAAe,CAAW;YAC3C,WAAW,EAAE,CAAC,CAAC,aAAa,CAAW;SACxC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;CACF"}

package/dist/notes/git-notes.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Git notes v2 writer with separate Ed25519 signing key. (Day 13: §7.3)
+ *
+ * Uses refs/notes/ai-v2 (separate from any v1 notes ref).
+ * Signed with the notes Ed25519 key — NOT the HMAC install key.
+ * This separation means a compromise of the install key does not allow
+ * forging historical git notes.
+ *
+ * Note format (JSON):
+ *   { v:2, install_id, head_seq, head_hash, head_ts, tier_summary, sig_b64 }
+ *
+ * sig_b64 is Ed25519 over SHA256(canonical JSON without sig_b64).
+ * The public key is stored in .omnitype/journal/keys/notes.pub.pem so
+ * verifiers can check without any network call.
+ *
+ * Post-commit hook: omnitype-daemon note-commit <commit-sha>
+ */
+export declare const NOTES_REF = "refs/notes/ai-v2";
+export interface NotePayload {
+    v: 2;
+    install_id: string;
+    head_seq: number;
+    head_hash: string;
+    head_ts: number;
+    tier_summary: Record<string, number>;
+    pub_key_pem: string;
+    sig_b64: string;
+}
+export declare class GitNotesWriter {
+    private noteKey;
+    private keysDir;
+    private installId;
+    constructor(keysDir: string, installId: string);
+    /**
+     * Write a signed note onto the given commit SHA.
+     * Must be called from inside the git repository (cwd = workspace).
+     */
+    writeNoteForCommit(commitSha: string, headSeq: number, headHash: string, headTs: number, tierSummary: Record<string, number>, cwd: string): void;
+    /** Return the public key PEM for this installation (used by verifiers). */
+    get publicKeyPem(): string;
+    private isInsideGitRepo;
+}
+/**
+ * Verify a note retrieved from refs/notes/ai-v2.
+ * Returns true if the Ed25519 signature matches the embedded public key.
+ * Note: this does NOT verify that the public key is trusted — callers must
+ * cross-check pub_key_pem against the install's notes.pub.pem file.
+ */
+export declare function verifyNote(noteText: string): boolean;
+//# sourceMappingURL=git-notes.d.ts.map

package/dist/notes/git-notes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-notes.d.ts","sourceRoot":"","sources":["../../src/notes/git-notes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAOH,eAAO,MAAM,SAAS,qBAAqB,CAAC;AAE5C,MAAM,WAAW,WAAW;IAC1B,CAAC,EAAE,CAAC,CAAC;IACL,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAgD;IAC/D,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAS;gBAEd,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAM9C;;;OAGG;IACH,kBAAkB,CAChB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,GAAG,EAAE,MAAM,GACV,IAAI;IAkCP,2EAA2E;IAC3E,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,OAAO,CAAC,eAAe;CAQxB;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAgBpD"}

package/dist/notes/git-notes.js

@@ -0,0 +1,94 @@
+/**
+ * Git notes v2 writer with separate Ed25519 signing key. (Day 13: §7.3)
+ *
+ * Uses refs/notes/ai-v2 (separate from any v1 notes ref).
+ * Signed with the notes Ed25519 key — NOT the HMAC install key.
+ * This separation means a compromise of the install key does not allow
+ * forging historical git notes.
+ *
+ * Note format (JSON):
+ *   { v:2, install_id, head_seq, head_hash, head_ts, tier_summary, sig_b64 }
+ *
+ * sig_b64 is Ed25519 over SHA256(canonical JSON without sig_b64).
+ * The public key is stored in .omnitype/journal/keys/notes.pub.pem so
+ * verifiers can check without any network call.
+ *
+ * Post-commit hook: omnitype-daemon note-commit <commit-sha>
+ */
+import { execFileSync, spawnSync } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { loadOrCreateNoteSigningKey, signNote } from '../crypto/chain.js';
+export const NOTES_REF = 'refs/notes/ai-v2';
+export class GitNotesWriter {
+    noteKey;
+    keysDir;
+    installId;
+    constructor(keysDir, installId) {
+        this.keysDir = keysDir;
+        this.installId = installId;
+        this.noteKey = loadOrCreateNoteSigningKey(keysDir);
+    }
+    /**
+     * Write a signed note onto the given commit SHA.
+     * Must be called from inside the git repository (cwd = workspace).
+     */
+    writeNoteForCommit(commitSha, headSeq, headHash, headTs, tierSummary, cwd) {
+        if (!this.isInsideGitRepo(cwd))
+            return;
+        // Build payload without sig first
+        const partial = {
+            v: 2,
+            install_id: this.installId,
+            head_seq: headSeq,
+            head_hash: headHash,
+            head_ts: headTs,
+            tier_summary: tierSummary,
+            pub_key_pem: this.noteKey.publicKeyPem,
+        };
+        const canonical = Buffer.from(JSON.stringify(Object.fromEntries(Object.entries(partial).sort(([a], [b]) => a.localeCompare(b)))), 'utf-8');
+        const digestBuf = createHash('sha256').update(canonical).digest();
+        const sigBuf = signNote(this.noteKey, digestBuf);
+        const payload = { ...partial, sig_b64: sigBuf.toString('base64') };
+        const noteText = JSON.stringify(payload, null, 2);
+        try {
+            // git notes --ref=refs/notes/ai-v2 add -f -m <note> <commit>
+            spawnSync('git', ['notes', `--ref=${NOTES_REF}`, 'add', '-f', '-m', noteText, commitSha], { cwd, stdio: 'pipe' });
+        }
+        catch { /* ignore — best effort */ }
+    }
+    /** Return the public key PEM for this installation (used by verifiers). */
+    get publicKeyPem() {
+        return this.noteKey.publicKeyPem;
+    }
+    isInsideGitRepo(cwd) {
+        try {
+            execFileSync('git', ['rev-parse', '--git-dir'], { cwd, stdio: 'pipe' });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+/**
+ * Verify a note retrieved from refs/notes/ai-v2.
+ * Returns true if the Ed25519 signature matches the embedded public key.
+ * Note: this does NOT verify that the public key is trusted — callers must
+ * cross-check pub_key_pem against the install's notes.pub.pem file.
+ */
+export function verifyNote(noteText) {
+    try {
+        const payload = JSON.parse(noteText);
+        const { sig_b64, ...rest } = payload;
+        const canonical = Buffer.from(JSON.stringify(Object.fromEntries(Object.entries(rest).sort(([a], [b]) => a.localeCompare(b)))), 'utf-8');
+        const digest = createHash('sha256').update(canonical).digest();
+        const { createVerify } = require('node:crypto');
+        const verifier = createVerify('SHA256');
+        verifier.update(digest);
+        return verifier.verify(payload.pub_key_pem, Buffer.from(sig_b64, 'base64'));
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=git-notes.js.map

package/dist/notes/git-notes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-notes.js","sourceRoot":"","sources":["../../src/notes/git-notes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE1E,MAAM,CAAC,MAAM,SAAS,GAAG,kBAAkB,CAAC;AAa5C,MAAM,OAAO,cAAc;IACjB,OAAO,CAAgD;IACvD,OAAO,CAAS;IAChB,SAAS,CAAS;IAE1B,YAAY,OAAe,EAAE,SAAiB;QAC5C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IAED;;;OAGG;IACH,kBAAkB,CAChB,SAAiB,EACjB,OAAe,EACf,QAAgB,EAChB,MAAc,EACd,WAAmC,EACnC,GAAW;QAEX,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YAAE,OAAO;QAEvC,kCAAkC;QAClC,MAAM,OAAO,GAAG;YACd,CAAC,EAAE,CAAU;YACb,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,MAAM;YACf,YAAY,EAAE,WAAW;YACzB,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;SACvC,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAC3B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAClG,OAAO,CACR,CAAC;QACF,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;QAClE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAEjD,MAAM,OAAO,GAAgB,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAElD,IAAI,CAAC;YACH,6DAA6D;YAC7D,SAAS,CACP,KAAK,EACL,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,EACvE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CACvB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACxC,CAAC;IAED,2EAA2E;IAC3E,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IACnC,CAAC;IAEO,eAAe,CAAC,GAAW;QACjC,IAAI,CAAC;YACH,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAgB,CAAC;QACpD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;QACrC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAC3B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC/F,OAAO,CACR,CAAC;QACF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/D,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACxC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxB,OAAO,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}