@paths.design/caws-cli 11.1.5 → 11.1.7

package/dist/store/git-sparse-checkout.js

@@ -0,0 +1,101 @@
+"use strict";
+// Sparse-checkout helper for CAWS-created worktrees
+// (WORKTREE-SPEC-AUTHORITY-CONTROL-PLANE-001 A1).
+//
+// CAWS state is control-plane. The .caws/specs/ directory exists exactly
+// once for the project, owned by the main checkout. When `caws worktree
+// create` adds a linked worktree, git's default full checkout would
+// materialize .caws/specs/<id>.yaml into the worktree filesystem,
+// producing the v10.2 split-brain authority class: an editable spec
+// copy inside the worktree, divergent from control-plane bytes,
+// silently consulted by anything that walks cwd upward.
+//
+// This helper configures non-cone sparse-checkout on a freshly-added
+// worktree so the .caws/specs/ tree is excluded from checkout. The
+// rest of the worktree is a normal full checkout — the historic
+// objection to sparse-checkout (broken cross-module imports caused by
+// nearly-empty worktrees) is preserved by including everything OTHER
+// than the authority files.
+//
+// Sparse-checkout vs the worktree-guard.sh hook policy: the hook
+// (`.claude/hooks/worktree-guard.sh:52-56`) blocks agent-issued
+// `git sparse-checkout` commands because sparse-checkout can be
+// misused to hide source files and break work. This helper's use is
+// different: it excludes ONLY the .caws/specs/ authority files, never
+// source code, and runs from the CLI writer (via child_process.spawn)
+// which does not go through the Bash tool hook surface. The hook's
+// purpose is preserved.
+//
+// Pattern: `/*` includes everything; `!/.caws/specs/` excludes the
+// authority directory. Non-cone mode is required because cone mode
+// would force enumeration of all top-level directories. Non-cone
+// sparse-checkout requires git 2.27+, which is documented in the
+// spec's non_functional.reliability clause.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.configureWorktreeSparseCheckout = configureWorktreeSparseCheckout;
+const child_process_1 = require("child_process");
+/**
+ * Configure non-cone sparse-checkout on `wtPath` so that `.caws/specs/`
+ * is excluded from checkout, then run `git checkout` to materialize the
+ * remaining tree.
+ *
+ * Returns Result-shape `{ ok: true }` on success or `{ ok: false,
+ * reason }` on the first failing git invocation. The caller is
+ * responsible for compensating side effects (typically by running
+ * `git worktree remove --force <wtPath>` on the partially-created
+ * worktree).
+ *
+ * IMPORTANT: this function does NOT call `git worktree add`. The caller
+ * must have already added the worktree with `--no-checkout` so that no
+ * files have been materialized yet. Calling this on a worktree that
+ * was added with a normal full checkout would not retroactively remove
+ * already-checked-out `.caws/specs/` files.
+ */
+function configureWorktreeSparseCheckout(wtPath) {
+    // 1) Initialize sparse-checkout in non-cone mode.
+    const initResult = runGit(wtPath, ['sparse-checkout', 'init', '--no-cone']);
+    if (!initResult.ok)
+        return { ok: false, reason: initResult.reason, step: 'init' };
+    // 2) Set the pattern: include everything, exclude .caws/specs/.
+    //    Non-cone mode interprets these as gitignore-style patterns
+    //    relative to the worktree root. The leading slash in '/.caws/specs/'
+    //    anchors the exclusion to the worktree root (not subdirectories
+    //    named .caws/specs/ further down — there are none in this
+    //    project, but the anchor is correct discipline).
+    const setResult = runGit(wtPath, [
+        'sparse-checkout',
+        'set',
+        '--no-cone',
+        '/*',
+        '!/.caws/specs/',
+    ]);
+    if (!setResult.ok)
+        return { ok: false, reason: setResult.reason, step: 'set' };
+    // 3) Materialize the included files. `git worktree add --no-checkout`
+    //    leaves the worktree empty; this populates everything sparse-
+    //    checkout admits.
+    const checkoutResult = runGit(wtPath, ['checkout']);
+    if (!checkoutResult.ok)
+        return { ok: false, reason: checkoutResult.reason, step: 'checkout' };
+    return { ok: true };
+}
+function runGit(cwd, args) {
+    try {
+        const stdout = (0, child_process_1.execFileSync)('git', [...args], {
+            cwd,
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        return { ok: true, stdout: stdout.toString() };
+    }
+    catch (e) {
+        const cause = e;
+        const stderr = cause.stderr instanceof Buffer
+            ? cause.stderr.toString()
+            : typeof cause.stderr === 'string'
+                ? cause.stderr
+                : (cause.message ?? 'unknown git error');
+        return { ok: false, reason: stderr.trim() };
+    }
+}
+//# sourceMappingURL=git-sparse-checkout.js.map

package/dist/store/git-sparse-checkout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-sparse-checkout.js","sourceRoot":"","sources":["../../src/store/git-sparse-checkout.ts"],"names":[],"mappings":";AAAA,oDAAoD;AACpD,kDAAkD;AAClD,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,oEAAoE;AACpE,kEAAkE;AAClE,oEAAoE;AACpE,gEAAgE;AAChE,wDAAwD;AACxD,EAAE;AACF,qEAAqE;AACrE,mEAAmE;AACnE,gEAAgE;AAChE,sEAAsE;AACtE,qEAAqE;AACrE,4BAA4B;AAC5B,EAAE;AACF,iEAAiE;AACjE,gEAAgE;AAChE,gEAAgE;AAChE,oEAAoE;AACpE,sEAAsE;AACtE,sEAAsE;AACtE,mEAAmE;AACnE,wBAAwB;AACxB,EAAE;AACF,mEAAmE;AACnE,mEAAmE;AACnE,iEAAiE;AACjE,iEAAiE;AACjE,4CAA4C;;AAqB5C,0EA8BC;AAjDD,iDAA6C;AAE7C;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,+BAA+B,CAC7C,MAAc;IAEd,kDAAkD;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAElF,gEAAgE;IAChE,gEAAgE;IAChE,yEAAyE;IACzE,oEAAoE;IACpE,8DAA8D;IAC9D,qDAAqD;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE;QAC/B,iBAAiB;QACjB,KAAK;QACL,WAAW;QACX,IAAI;QACJ,gBAAgB;KACjB,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAE/E,sEAAsE;IACtE,kEAAkE;IAClE,sBAAsB;IACtB,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,cAAc,CAAC,EAAE;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAExE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,MAAM,CAAC,GAAW,EAAE,IAAuB;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,4BAAY,EAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;YAC5C,GAAG;YACH,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IACjD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,CAAmD,CAAC;QAClE,MAAM,MAAM,GACV,KAAK,CAAC,MAAM,YAAY,MAAM;YAC5B,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;YACzB,CAAC,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;gBAChC,CAAC,CAAC,KAAK,CAAC,MAAM;gBACd,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,mBAAmB,CAAC,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IAC9C,CAAC;AACH,CAAC"}

package/dist/store/index.d.ts

@@ -12,6 +12,8 @@ export { loadWorktrees } from './worktrees-store';
 export { loadAgents } from './agents-store';
 export { appendEvent, loadEvents } from './events-store';
 export { applyRegistryPatch } from './apply-patch';
+export { safeLeaseFilename, loadLeases, applyLeasePatch, applyLeasePatches, pruneLeasesByStatus, } from './leases-store';
+export type { LoadLeasesResult, PruneOptions, PruneResult, } from './leases-store';
 export { loadWaivers, writeWaiver, markRevoked } from './waivers-store';
 export type { WaiversLoadResult } from './waivers-store';
 export { initProject, DEFAULT_POLICY_YAML } from './init-store';

package/dist/store/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/store/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAC3D,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEzC,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,aAAa,GACd,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE/E,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE5D,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACxE,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAChE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,GACf,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/store/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAC3D,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEzC,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,aAAa,GACd,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE/E,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE5D,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAKnD,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACxE,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAChE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,GACf,MAAM,mBAAmB,CAAC"}

package/dist/store/index.js

@@ -5,7 +5,7 @@
 // It is consumed programmatically; no public CLI commands are registered
 // here. CLI command surface lands in Slice 5c.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.composeStoreSnapshot = exports.composeDoctorSnapshot = exports.DEFAULT_POLICY_YAML = exports.initProject = exports.markRevoked = exports.writeWaiver = exports.loadWaivers = exports.applyRegistryPatch = exports.loadEvents = exports.appendEvent = exports.loadAgents = exports.loadWorktrees = exports.loadPolicy = exports.loadSpecs = exports.readYamlSource = exports.readYamlFile = exports.readJsonFile = exports.writeFileAtomic = exports.fsyncDir = exports.storeDiagnostic = exports.resolveRepoRoot = exports.defaultGitRunner = exports.STORE_RULE_PREFIXES = exports.STORE_RULES = void 0;
+exports.composeStoreSnapshot = exports.composeDoctorSnapshot = exports.DEFAULT_POLICY_YAML = exports.initProject = exports.markRevoked = exports.writeWaiver = exports.loadWaivers = exports.pruneLeasesByStatus = exports.applyLeasePatches = exports.applyLeasePatch = exports.loadLeases = exports.safeLeaseFilename = exports.applyRegistryPatch = exports.loadEvents = exports.appendEvent = exports.loadAgents = exports.loadWorktrees = exports.loadPolicy = exports.loadSpecs = exports.readYamlSource = exports.readYamlFile = exports.readJsonFile = exports.writeFileAtomic = exports.fsyncDir = exports.storeDiagnostic = exports.resolveRepoRoot = exports.defaultGitRunner = exports.STORE_RULE_PREFIXES = exports.STORE_RULES = void 0;
 var rules_1 = require("./rules");
 Object.defineProperty(exports, "STORE_RULES", { enumerable: true, get: function () { return rules_1.STORE_RULES; } });
 Object.defineProperty(exports, "STORE_RULE_PREFIXES", { enumerable: true, get: function () { return rules_1.STORE_RULE_PREFIXES; } });
@@ -34,6 +34,15 @@ Object.defineProperty(exports, "appendEvent", { enumerable: true, get: function
 Object.defineProperty(exports, "loadEvents", { enumerable: true, get: function () { return events_store_1.loadEvents; } });
 var apply_patch_1 = require("./apply-patch");
 Object.defineProperty(exports, "applyRegistryPatch", { enumerable: true, get: function () { return apply_patch_1.applyRegistryPatch; } });
+// ─── leases (MULTI-AGENT-ACTIVITY-REGISTRY-001) ──────────────────────────
+// Lease I/O surface — separate from applyRegistryPatch. LeasePatch is
+// applied ONLY through applyLeasePatch / applyLeasePatches.
+var leases_store_1 = require("./leases-store");
+Object.defineProperty(exports, "safeLeaseFilename", { enumerable: true, get: function () { return leases_store_1.safeLeaseFilename; } });
+Object.defineProperty(exports, "loadLeases", { enumerable: true, get: function () { return leases_store_1.loadLeases; } });
+Object.defineProperty(exports, "applyLeasePatch", { enumerable: true, get: function () { return leases_store_1.applyLeasePatch; } });
+Object.defineProperty(exports, "applyLeasePatches", { enumerable: true, get: function () { return leases_store_1.applyLeasePatches; } });
+Object.defineProperty(exports, "pruneLeasesByStatus", { enumerable: true, get: function () { return leases_store_1.pruneLeasesByStatus; } });
 var waivers_store_1 = require("./waivers-store");
 Object.defineProperty(exports, "loadWaivers", { enumerable: true, get: function () { return waivers_store_1.loadWaivers; } });
 Object.defineProperty(exports, "writeWaiver", { enumerable: true, get: function () { return waivers_store_1.writeWaiver; } });

package/dist/store/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/store/index.ts"],"names":[],"mappings":";AAAA,gDAAgD;AAChD,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,+CAA+C;;;AAE/C,iCAA2D;AAAlD,oGAAA,WAAW,OAAA;AAAE,4GAAA,mBAAmB,OAAA;AAUzC,yCAIqB;AAHnB,6GAAA,gBAAgB,OAAA;AAChB,4GAAA,eAAe,OAAA;AACf,4GAAA,eAAe,OAAA;AAIjB,+CAA2D;AAAlD,wGAAA,QAAQ,OAAA;AAAE,+GAAA,eAAe,OAAA;AAClC,2CAA4C;AAAnC,0GAAA,YAAY,OAAA;AACrB,2CAA4D;AAAnD,0GAAA,YAAY,OAAA;AAAE,4GAAA,cAAc,OAAA;AAErC,6CAA0C;AAAjC,wGAAA,SAAS,OAAA;AAClB,+CAA4C;AAAnC,0GAAA,UAAU,OAAA;AACnB,qDAAkD;AAAzC,gHAAA,aAAa,OAAA;AACtB,+CAA4C;AAAnC,0GAAA,UAAU,OAAA;AACnB,+CAAyD;AAAhD,2GAAA,WAAW,OAAA;AAAE,0GAAA,UAAU,OAAA;AAEhC,6CAAmD;AAA1C,iHAAA,kBAAkB,OAAA;AAE3B,iDAAwE;AAA/D,4GAAA,WAAW,OAAA;AAAE,4GAAA,WAAW,OAAA;AAAE,4GAAA,WAAW,OAAA;AAG9C,2CAAgE;AAAvD,yGAAA,WAAW,OAAA;AAAE,iHAAA,mBAAmB,OAAA;AAGzC,qDAG2B;AAFzB,wHAAA,qBAAqB,OAAA;AACrB,uHAAA,oBAAoB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/store/index.ts"],"names":[],"mappings":";AAAA,gDAAgD;AAChD,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,+CAA+C;;;AAE/C,iCAA2D;AAAlD,oGAAA,WAAW,OAAA;AAAE,4GAAA,mBAAmB,OAAA;AAUzC,yCAIqB;AAHnB,6GAAA,gBAAgB,OAAA;AAChB,4GAAA,eAAe,OAAA;AACf,4GAAA,eAAe,OAAA;AAIjB,+CAA2D;AAAlD,wGAAA,QAAQ,OAAA;AAAE,+GAAA,eAAe,OAAA;AAClC,2CAA4C;AAAnC,0GAAA,YAAY,OAAA;AACrB,2CAA4D;AAAnD,0GAAA,YAAY,OAAA;AAAE,4GAAA,cAAc,OAAA;AAErC,6CAA0C;AAAjC,wGAAA,SAAS,OAAA;AAClB,+CAA4C;AAAnC,0GAAA,UAAU,OAAA;AACnB,qDAAkD;AAAzC,gHAAA,aAAa,OAAA;AACtB,+CAA4C;AAAnC,0GAAA,UAAU,OAAA;AACnB,+CAAyD;AAAhD,2GAAA,WAAW,OAAA;AAAE,0GAAA,UAAU,OAAA;AAEhC,6CAAmD;AAA1C,iHAAA,kBAAkB,OAAA;AAE3B,4EAA4E;AAC5E,sEAAsE;AACtE,4DAA4D;AAC5D,+CAMwB;AALtB,iHAAA,iBAAiB,OAAA;AACjB,0GAAA,UAAU,OAAA;AACV,+GAAA,eAAe,OAAA;AACf,iHAAA,iBAAiB,OAAA;AACjB,mHAAA,mBAAmB,OAAA;AAQrB,iDAAwE;AAA/D,4GAAA,WAAW,OAAA;AAAE,4GAAA,WAAW,OAAA;AAAE,4GAAA,WAAW,OAAA;AAG9C,2CAAgE;AAAvD,yGAAA,WAAW,OAAA;AAAE,iHAAA,mBAAmB,OAAA;AAGzC,qDAG2B;AAFzB,wHAAA,qBAAqB,OAAA;AACrB,uHAAA,oBAAoB,OAAA"}

package/dist/store/leases-store.d.ts

@@ -0,0 +1,89 @@
+import { type Diagnostic, type LeasePatch, type LeaseRegistry, type Result } from '@paths.design/caws-kernel';
+export interface LoadLeasesResult {
+    readonly leases: LeaseRegistry;
+    readonly diagnostics: ReadonlyArray<Diagnostic>;
+}
+/**
+ * Validate a session_id for filesystem safety, returning the filename
+ * to use (with .json suffix) on success.
+ */
+export declare function safeLeaseFilename(sessionId: unknown): Result<string>;
+/**
+ * Load all lease files under .caws/leases/.
+ *
+ * LENIENT per file: a malformed individual lease produces a diagnostic
+ * in the returned diagnostics array and is excluded from the registry;
+ * the call returns ok with the parseable subset.
+ *
+ * STRICT on directory: an unreadable .caws/leases/ directory returns
+ * err with LEASE_DIR_UNREADABLE. A missing directory returns
+ * ok({ leases: {}, diagnostics: [] }) — leases are operational cache;
+ * absence is normal.
+ *
+ * Per-file failure classes (each emits one diagnostic, excludes the file):
+ *   - filename does not match the lease pattern (skipped silently —
+ *     these are not lease files, just other content in the dir)
+ *   - JSON parse failure → LEASE_FILE_MALFORMED
+ *   - JSON parses but is not an object → LEASE_FILE_MALFORMED
+ *   - session_id mismatch between filename and content → LEASE_FILE_MALFORMED
+ */
+export declare function loadLeases(cawsDir: string): Result<LoadLeasesResult>;
+/**
+ * Apply a single LeasePatch via atomic per-file write.
+ *
+ * Creates the leases directory if missing. No lock acquired (per spec
+ * invariant 11). No event emitted (per spec invariant 10 and doctrine
+ * §6 invariant 10).
+ *
+ * Patch semantics:
+ *   - write_lease: serialize patch.lease as JSON, atomic-write to
+ *     <cawsDir>/leases/<safe-session-id>.json.
+ *   - mark_stopped: read existing lease file; if absent, return ok with
+ *     a warning diagnostic (NOT a fabricated record); if present,
+ *     update status='stopped', stopped_at=patch.transitioned_at,
+ *     last_seen_reason='session_stop'; atomic-write back.
+ *   - delete_lease: fs.unlinkSync the lease file; idempotent on absence.
+ */
+export declare function applyLeasePatch(cawsDir: string, patch: LeasePatch): Result<{
+    readonly wrote: boolean;
+    readonly diagnostics: ReadonlyArray<Diagnostic>;
+}>;
+/**
+ * Apply a batch of lease patches. Per-patch failures do NOT abort the
+ * batch — each patch's diagnostics are aggregated into the return.
+ *
+ * Use for operator commands like prune that emit multiple delete_lease
+ * patches. Single-session register/heartbeat/stop go through
+ * applyLeasePatch directly.
+ */
+export declare function applyLeasePatches(cawsDir: string, patches: ReadonlyArray<LeasePatch>): Result<{
+    readonly applied: number;
+    readonly diagnostics: ReadonlyArray<Diagnostic>;
+}>;
+/**
+ * Operator-invoked prune: delete lease files matching a status + age
+ * threshold.
+ *
+ * Selection: status === target AND (now - reference) > retentionMs, where
+ * reference is `stopped_at` for status='stopped' and `last_active` for
+ * status='active' (with TTL-based read-side 'stale' bucketing).
+ *
+ * Default `dryRun: true` (caller must explicitly pass false to delete).
+ * Returns count of files that would be / were deleted plus any
+ * diagnostics from the delete operations.
+ */
+export interface PruneOptions {
+    readonly status: 'stopped' | 'stale';
+    /** Active records whose age exceeds this are bucketed as stale for the prune decision. */
+    readonly staleTtlMs?: number;
+    readonly retentionMs: number;
+    readonly now: Date;
+    readonly dryRun?: boolean;
+}
+export interface PruneResult {
+    readonly candidates: ReadonlyArray<string>;
+    readonly deleted: ReadonlyArray<string>;
+    readonly diagnostics: ReadonlyArray<Diagnostic>;
+}
+export declare function pruneLeasesByStatus(cawsDir: string, opts: PruneOptions): Result<PruneResult>;
+//# sourceMappingURL=leases-store.d.ts.map

package/dist/store/leases-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"leases-store.d.ts","sourceRoot":"","sources":["../../src/store/leases-store.ts"],"names":[],"mappings":"AAoCA,OAAO,EAKL,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,MAAM,EACZ,MAAM,2BAA2B,CAAC;AA+BnC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;CACjD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAuCpE;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,gBAAgB,CAAC,CA6FpE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,UAAU,GAChB,MAAM,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;CAAE,CAAC,CAmGtF;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,aAAa,CAAC,UAAU,CAAC,GACjC,MAAM,CAAC;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;CAAE,CAAC,CAevF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;IACrC,0FAA0F;IAC1F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;IACnB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;CACjD;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY,GACjB,MAAM,CAAC,WAAW,CAAC,CAyDrB"}

package/dist/store/leases-store.js

@@ -0,0 +1,369 @@
+"use strict";
+// Agent-lease store — the SOLE I/O surface for .caws/leases/.
+//
+// MULTI-AGENT-ACTIVITY-REGISTRY-001 acceptance A5–A8, A12.
+//
+// Architectural separation (load-bearing — see spec invariant 2):
+//
+//   - This module owns ALL lease I/O. apply-patch.ts is NOT extended to
+//     handle LeasePatch. Lease writes never flow through applyRegistryPatch.
+//     Routing lease writes through the governance apply path would re-merge
+//     the operational-cache / governance-state boundary this slice exists
+//     to preserve.
+//
+//   - Lease writes are NEVER inside lifecycle-transaction. They never block
+//     work, never corrupt governance state, and a write failure is warn-
+//     and-continue (per doctrine §6 invariant 11).
+//
+//   - Lease writes NEVER append events.jsonl (per doctrine §6 invariant 10).
+//     Events are durable governance facts; leases are operational cache.
+//
+//   - loadLeases is LENIENT per file. A single malformed lease file
+//     produces a diagnostic and is excluded from the returned registry;
+//     the call still returns ok. Only an unreadable lease directory
+//     causes the call to fail.
+//
+//   - safeLeaseFilename enforces a strict character allowlist
+//     (^[A-Za-z0-9._:-]+$) at the I/O boundary. The kernel constructs
+//     records; the store decides what is filesystem-safe. The literal
+//     'unknown' is REFUSED (would collide across all anonymous sessions).
+//
+//   - mark_stopped against a missing lease is a warn no-op, NOT a
+//     fabricated record. Stopping a session we never registered is
+//     evidence of a lifecycle mismatch, not a write opportunity.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.safeLeaseFilename = safeLeaseFilename;
+exports.loadLeases = loadLeases;
+exports.applyLeasePatch = applyLeasePatch;
+exports.applyLeasePatches = applyLeasePatches;
+exports.pruneLeasesByStatus = pruneLeasesByStatus;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const caws_kernel_1 = require("@paths.design/caws-kernel");
+const atomic_write_1 = require("./atomic-write");
+const repo_root_1 = require("./repo-root");
+const rules_1 = require("./rules");
+const LEASES_DIRNAME = 'leases';
+/**
+ * Strict-allowlist regex for lease filenames.
+ *
+ * Allowed characters: ASCII letters, digits, dot, underscore, colon,
+ * hyphen. This intentionally rejects:
+ *   - empty string
+ *   - 'unknown' (parse-input.sh's fallback when hook payload has no
+ *     session_id; writing 'unknown.json' would collide across every
+ *     anonymous session)
+ *   - whitespace
+ *   - path separators ('/', '\')
+ *   - parent-directory references ('..')
+ *   - shell-meta characters
+ *
+ * UUIDs (8-4-4-4-12 with hyphens) and `caws-<hex>` (resolveSession's mint
+ * format) both pass. The regex is the single source of truth; both the
+ * kernel and shell layers MUST route filename derivation through
+ * safeLeaseFilename, never direct path joins on raw session_id.
+ */
+const LEASE_FILENAME_RE = /^[A-Za-z0-9._:-]+$/;
+/**
+ * Validate a session_id for filesystem safety, returning the filename
+ * to use (with .json suffix) on success.
+ */
+function safeLeaseFilename(sessionId) {
+    if (typeof sessionId !== 'string') {
+        return (0, caws_kernel_1.err)((0, repo_root_1.storeDiagnostic)(rules_1.STORE_RULES.LEASE_SESSION_ID_INVALID, 'Lease session_id must be a string.', { data: { actual_type: typeof sessionId } }));
+    }
+    if (sessionId.length === 0) {
+        return (0, caws_kernel_1.err)((0, repo_root_1.storeDiagnostic)(rules_1.STORE_RULES.LEASE_SESSION_ID_INVALID, 'Lease session_id must be a non-empty string.'));
+    }
+    if (sessionId === 'unknown') {
+        return (0, caws_kernel_1.err)((0, repo_root_1.storeDiagnostic)(rules_1.STORE_RULES.LEASE_SESSION_ID_INVALID, "Lease session_id 'unknown' is refused — it would collide across anonymous sessions. " +
+            'Hook scripts MUST guard [ -z "$HOOK_SESSION_ID" ] || [ "$HOOK_SESSION_ID" = "unknown" ] before invoking the CLI.', { data: { session_id: sessionId } }));
+    }
+    if (!LEASE_FILENAME_RE.test(sessionId)) {
+        return (0, caws_kernel_1.err)((0, repo_root_1.storeDiagnostic)(rules_1.STORE_RULES.LEASE_SESSION_ID_UNSAFE, `Lease session_id "${sessionId}" contains characters outside the strict allowlist ` +
+            '^[A-Za-z0-9._:-]+$. Path separators, whitespace, and shell metacharacters are forbidden.', { data: { session_id: sessionId } }));
+    }
+    return (0, caws_kernel_1.ok)(`${sessionId}.json`);
+}
+/**
+ * Load all lease files under .caws/leases/.
+ *
+ * LENIENT per file: a malformed individual lease produces a diagnostic
+ * in the returned diagnostics array and is excluded from the registry;
+ * the call returns ok with the parseable subset.
+ *
+ * STRICT on directory: an unreadable .caws/leases/ directory returns
+ * err with LEASE_DIR_UNREADABLE. A missing directory returns
+ * ok({ leases: {}, diagnostics: [] }) — leases are operational cache;
+ * absence is normal.
+ *
+ * Per-file failure classes (each emits one diagnostic, excludes the file):
+ *   - filename does not match the lease pattern (skipped silently —
+ *     these are not lease files, just other content in the dir)
+ *   - JSON parse failure → LEASE_FILE_MALFORMED
+ *   - JSON parses but is not an object → LEASE_FILE_MALFORMED
+ *   - session_id mismatch between filename and content → LEASE_FILE_MALFORMED
+ */
+function loadLeases(cawsDir) {
+    const leasesDir = path.join(cawsDir, LEASES_DIRNAME);
+    if (!fs.existsSync(leasesDir)) {
+        return (0, caws_kernel_1.ok)({ leases: {}, diagnostics: [] });
+    }
+    let entries;
+    try {
+        entries = fs.readdirSync(leasesDir);
+    }
+    catch (e) {
+        return (0, caws_kernel_1.err)((0, repo_root_1.storeDiagnostic)(rules_1.STORE_RULES.LEASE_DIR_UNREADABLE, `Lease directory unreadable: ${e.message}`, { subject: leasesDir }));
+    }
+    const leases = {};
+    const diagnostics = [];
+    for (const entry of entries) {
+        if (!entry.endsWith('.json'))
+            continue;
+        const sessionId = entry.slice(0, -'.json'.length);
+        if (!LEASE_FILENAME_RE.test(sessionId)) {
+            // Not a lease file by our naming convention; ignore silently
+            // rather than fabricate a malformed diagnostic for unrelated
+            // files an operator may have dropped here.
+            continue;
+        }
+        const filePath = path.join(leasesDir, entry);
+        let raw;
+        try {
+            raw = fs.readFileSync(filePath, 'utf8');
+        }
+        catch (e) {
+            diagnostics.push((0, repo_root_1.storeDiagnostic)(rules_1.STORE_RULES.LEASE_FILE_MALFORMED, `Lease file unreadable: ${e.message}`, { subject: filePath, data: { session_id: sessionId } }));
+            continue;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (e) {
+            diagnostics.push((0, repo_root_1.storeDiagnostic)(rules_1.STORE_RULES.LEASE_FILE_MALFORMED, `Lease file is not valid JSON: ${e.message}`, { subject: filePath, data: { session_id: sessionId } }));
+            continue;
+        }
+        if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+            diagnostics.push((0, repo_root_1.storeDiagnostic)(rules_1.STORE_RULES.LEASE_FILE_MALFORMED, 'Lease file root is not a JSON object.', { subject: filePath, data: { session_id: sessionId } }));
+            continue;
+        }
+        const obj = parsed;
+        if (typeof obj['session_id'] !== 'string' || obj['session_id'] !== sessionId) {
+            diagnostics.push((0, repo_root_1.storeDiagnostic)(rules_1.STORE_RULES.LEASE_FILE_MALFORMED, `Lease file session_id "${obj['session_id']}" does not match filename "${sessionId}".`, { subject: filePath, data: { filename_session_id: sessionId, payload_session_id: obj['session_id'] } }));
+            continue;
+        }
+        // Treat the parsed object as an AgentLease. Field-level shape
+        // validation is deferred to a future kernel-side validateAgentLease
+        // function; for now, the kernel's TypeScript shape is the structural
+        // contract, and ill-typed-but-parseable files load successfully.
+        leases[sessionId] = obj;
+    }
+    return (0, caws_kernel_1.ok)({ leases, diagnostics });
+}
+/**
+ * Apply a single LeasePatch via atomic per-file write.
+ *
+ * Creates the leases directory if missing. No lock acquired (per spec
+ * invariant 11). No event emitted (per spec invariant 10 and doctrine
+ * §6 invariant 10).
+ *
+ * Patch semantics:
+ *   - write_lease: serialize patch.lease as JSON, atomic-write to
+ *     <cawsDir>/leases/<safe-session-id>.json.
+ *   - mark_stopped: read existing lease file; if absent, return ok with
+ *     a warning diagnostic (NOT a fabricated record); if present,
+ *     update status='stopped', stopped_at=patch.transitioned_at,
+ *     last_seen_reason='session_stop'; atomic-write back.
+ *   - delete_lease: fs.unlinkSync the lease file; idempotent on absence.
+ */
+function applyLeasePatch(cawsDir, patch) {
+    const filenameRes = safeLeaseFilename(patch.session_id);
+    if (filenameRes.ok === false)
+        return filenameRes;
+    const filename = filenameRes.value;
+    const leasesDir = path.join(cawsDir, LEASES_DIRNAME);
+    const filePath = path.join(leasesDir, filename);
+    try {
+        fs.mkdirSync(leasesDir, { recursive: true });
+    }
+    catch (e) {
+        return (0, caws_kernel_1.err)((0, repo_root_1.storeDiagnostic)(rules_1.STORE_RULES.LEASE_WRITE_FAILED, `Failed to create lease directory: ${e.message}`, { subject: leasesDir }));
+    }
+    if (patch.kind === 'write_lease') {
+        const contents = JSON.stringify(patch.lease, null, 2) + '\n';
+        const w = (0, atomic_write_1.writeFileAtomic)(filePath, contents);
+        if (w.ok === false)
+            return (0, caws_kernel_1.err)(w.errors);
+        return (0, caws_kernel_1.ok)({ wrote: true, diagnostics: [] });
+    }
+    if (patch.kind === 'mark_stopped') {
+        if (!fs.existsSync(filePath)) {
+            // Stopping a session we never registered is a lifecycle mismatch,
+            // not a write opportunity. Surface as a warning diagnostic; do
+            // NOT fabricate a historical record.
+            const warn = (0, caws_kernel_1.diagnostic)({
+                rule: rules_1.STORE_RULES.LEASE_STOP_NO_PRIOR_LEASE,
+                authority: 'kernel/diagnostics',
+                severity: 'warning',
+                message: `mark_stopped: no existing lease for session "${patch.session_id}" — nothing to update.`,
+                subject: filePath,
+                data: { session_id: patch.session_id },
+            });
+            return (0, caws_kernel_1.ok)({ wrote: false, diagnostics: [warn] });
+        }
+        let raw;
+        try {
+            raw = fs.readFileSync(filePath, 'utf8');
+        }
+        catch (e) {
+            return (0, caws_kernel_1.err)((0, repo_root_1.storeDiagnostic)(rules_1.STORE_RULES.LEASE_WRITE_FAILED, `Failed to read existing lease for mark_stopped: ${e.message}`, { subject: filePath }));
+        }
+        let prior;
+        try {
+            prior = JSON.parse(raw);
+        }
+        catch (e) {
+            return (0, caws_kernel_1.err)((0, repo_root_1.storeDiagnostic)(rules_1.STORE_RULES.LEASE_FILE_MALFORMED, `Existing lease file is not valid JSON: ${e.message}`, { subject: filePath }));
+        }
+        const updated = {
+            ...prior,
+            status: 'stopped',
+            stopped_at: patch.transitioned_at,
+            last_seen_reason: 'session_stop',
+        };
+        const contents = JSON.stringify(updated, null, 2) + '\n';
+        const w = (0, atomic_write_1.writeFileAtomic)(filePath, contents);
+        if (w.ok === false)
+            return (0, caws_kernel_1.err)(w.errors);
+        return (0, caws_kernel_1.ok)({ wrote: true, diagnostics: [] });
+    }
+    // delete_lease
+    if (!fs.existsSync(filePath)) {
+        // Idempotent: deleting an absent lease is a no-op success.
+        return (0, caws_kernel_1.ok)({ wrote: false, diagnostics: [] });
+    }
+    try {
+        fs.unlinkSync(filePath);
+    }
+    catch (e) {
+        return (0, caws_kernel_1.err)((0, repo_root_1.storeDiagnostic)(rules_1.STORE_RULES.LEASE_WRITE_FAILED, `Failed to delete lease file: ${e.message}`, { subject: filePath }));
+    }
+    return (0, caws_kernel_1.ok)({ wrote: true, diagnostics: [] });
+}
+/**
+ * Apply a batch of lease patches. Per-patch failures do NOT abort the
+ * batch — each patch's diagnostics are aggregated into the return.
+ *
+ * Use for operator commands like prune that emit multiple delete_lease
+ * patches. Single-session register/heartbeat/stop go through
+ * applyLeasePatch directly.
+ */
+function applyLeasePatches(cawsDir, patches) {
+    let applied = 0;
+    const diagnostics = [];
+    for (const patch of patches) {
+        const r = applyLeasePatch(cawsDir, patch);
+        if (r.ok === false) {
+            diagnostics.push(...r.errors);
+            continue;
+        }
+        if (r.value.wrote)
+            applied++;
+        diagnostics.push(...r.value.diagnostics);
+    }
+    return (0, caws_kernel_1.ok)({ applied, diagnostics });
+}
+function pruneLeasesByStatus(cawsDir, opts) {
+    const dryRun = opts.dryRun ?? true;
+    const staleTtlMs = opts.staleTtlMs ?? 30 * 60 * 1000; // 30m default
+    const loadRes = loadLeases(cawsDir);
+    if (loadRes.ok === false)
+        return (0, caws_kernel_1.err)(loadRes.errors);
+    const { leases, diagnostics: loadDiags } = loadRes.value;
+    const nowMs = opts.now.getTime();
+    const candidates = [];
+    // Object.values widens index-signature types to unknown[] under
+    // strict TS; coerce back to the kernel-declared element type so the
+    // loop body can read fields without per-line casts.
+    for (const lease of Object.values(leases)) {
+        if (opts.status === 'stopped') {
+            if (lease.status !== 'stopped')
+                continue;
+            const stoppedAtMs = lease.stopped_at ? Date.parse(lease.stopped_at) : NaN;
+            const reference = Number.isFinite(stoppedAtMs)
+                ? stoppedAtMs
+                : Date.parse(lease.last_active);
+            if (!Number.isFinite(reference))
+                continue;
+            if (nowMs - reference > opts.retentionMs)
+                candidates.push(lease.session_id);
+        }
+        else {
+            // status === 'stale'
+            if (lease.status !== 'active' && lease.status !== 'stopping')
+                continue;
+            const lastActiveMs = Date.parse(lease.last_active);
+            if (!Number.isFinite(lastActiveMs)) {
+                // Unparseable → treat as stale for prune purposes.
+                candidates.push(lease.session_id);
+                continue;
+            }
+            const age = nowMs - lastActiveMs;
+            // Must be stale (age > staleTtl) AND have been stale long enough
+            // (age > staleTtl + retention).
+            if (age > staleTtlMs && age - staleTtlMs > opts.retentionMs) {
+                candidates.push(lease.session_id);
+            }
+        }
+    }
+    const diagnostics = [...loadDiags];
+    const deleted = [];
+    if (!dryRun) {
+        for (const sessionId of candidates) {
+            const r = applyLeasePatch(cawsDir, { kind: 'delete_lease', session_id: sessionId });
+            if (r.ok === false) {
+                diagnostics.push(...r.errors);
+                continue;
+            }
+            deleted.push(sessionId);
+            diagnostics.push(...r.value.diagnostics);
+        }
+    }
+    return (0, caws_kernel_1.ok)({ candidates, deleted, diagnostics });
+}
+//# sourceMappingURL=leases-store.js.map

package/dist/store/leases-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leases-store.js","sourceRoot":"","sources":["../../src/store/leases-store.ts"],"names":[],"mappings":";AAAA,8DAA8D;AAC9D,EAAE;AACF,2DAA2D;AAC3D,EAAE;AACF,kEAAkE;AAClE,EAAE;AACF,wEAAwE;AACxE,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,mBAAmB;AACnB,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,mDAAmD;AACnD,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,EAAE;AACF,oEAAoE;AACpE,wEAAwE;AACxE,oEAAoE;AACpE,+BAA+B;AAC/B,EAAE;AACF,8DAA8D;AAC9D,sEAAsE;AACtE,sEAAsE;AACtE,0EAA0E;AAC1E,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,iEAAiE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsDjE,8CAuCC;AAqBD,gCA6FC;AAkBD,0CAsGC;AAUD,8CAkBC;AA6BD,kDA4DC;AA1bD,4CAA8B;AAC9B,gDAAkC;AAElC,2DASmC;AAEnC,iDAAiD;AACjD,2CAA8C;AAC9C,mCAAsC;AAEtC,MAAM,cAAc,GAAG,QAAQ,CAAC;AAEhC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAS/C;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,SAAkB;IAClD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,IAAA,iBAAG,EACR,IAAA,2BAAe,EACb,mBAAW,CAAC,wBAAwB,EACpC,oCAAoC,EACpC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,SAAS,EAAE,EAAE,CAC5C,CACF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAA,iBAAG,EACR,IAAA,2BAAe,EACb,mBAAW,CAAC,wBAAwB,EACpC,8CAA8C,CAC/C,CACF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,IAAA,iBAAG,EACR,IAAA,2BAAe,EACb,mBAAW,CAAC,wBAAwB,EACpC,sFAAsF;YACpF,kHAAkH,EACpH,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CACpC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,OAAO,IAAA,iBAAG,EACR,IAAA,2BAAe,EACb,mBAAW,CAAC,uBAAuB,EACnC,qBAAqB,SAAS,qDAAqD;YACjF,0FAA0F,EAC5F,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CACpC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,gBAAE,EAAC,GAAG,SAAS,OAAO,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,UAAU,CAAC,OAAe;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAErD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAA,gBAAE,EAAC,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAA,iBAAG,EACR,IAAA,2BAAe,EACb,mBAAW,CAAC,oBAAoB,EAChC,+BAAgC,CAAW,CAAC,OAAO,EAAE,EACrD,EAAE,OAAO,EAAE,SAAS,EAAE,CACvB,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAiB,EAAE,CAAC;IAErC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACvC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,6DAA6D;YAC7D,6DAA6D;YAC7D,2CAA2C;YAC3C,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,WAAW,CAAC,IAAI,CACd,IAAA,2BAAe,EACb,mBAAW,CAAC,oBAAoB,EAChC,0BAA2B,CAAW,CAAC,OAAO,EAAE,EAChD,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CACvD,CACF,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,WAAW,CAAC,IAAI,CACd,IAAA,2BAAe,EACb,mBAAW,CAAC,oBAAoB,EAChC,iCAAkC,CAAW,CAAC,OAAO,EAAE,EACvD,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CACvD,CACF,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,WAAW,CAAC,IAAI,CACd,IAAA,2BAAe,EACb,mBAAW,CAAC,oBAAoB,EAChC,uCAAuC,EACvC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CACvD,CACF,CAAC;YACF,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,MAAiC,CAAC;QAC9C,IAAI,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;YAC7E,WAAW,CAAC,IAAI,CACd,IAAA,2BAAe,EACb,mBAAW,CAAC,oBAAoB,EAChC,0BAA0B,GAAG,CAAC,YAAY,CAAW,8BAA8B,SAAS,IAAI,EAChG,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE,kBAAkB,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,CACvG,CACF,CAAC;YACF,SAAS;QACX,CAAC;QAED,8DAA8D;QAC9D,oEAAoE;QACpE,qEAAqE;QACrE,iEAAiE;QACjE,MAAM,CAAC,SAAS,CAAC,GAAG,GAA4B,CAAC;IACnD,CAAC;IAED,OAAO,IAAA,gBAAE,EAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,eAAe,CAC7B,OAAe,EACf,KAAiB;IAEjB,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,WAAW,CAAC,EAAE,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC;IACjD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC;IAEnC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEhD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAA,iBAAG,EACR,IAAA,2BAAe,EACb,mBAAW,CAAC,kBAAkB,EAC9B,qCAAsC,CAAW,CAAC,OAAO,EAAE,EAC3D,EAAE,OAAO,EAAE,SAAS,EAAE,CACvB,CACF,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAC7D,MAAM,CAAC,GAAG,IAAA,8BAAe,EAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK;YAAE,OAAO,IAAA,iBAAG,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO,IAAA,gBAAE,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAClC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,kEAAkE;YAClE,+DAA+D;YAC/D,qCAAqC;YACrC,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC;gBACtB,IAAI,EAAE,mBAAW,CAAC,yBAAyB;gBAC3C,SAAS,EAAE,oBAAoB;gBAC/B,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,gDAAgD,KAAK,CAAC,UAAU,wBAAwB;gBACjG,OAAO,EAAE,QAAQ;gBACjB,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE;aACvC,CAAC,CAAC;YACH,OAAO,IAAA,gBAAE,EAAC,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,IAAA,iBAAG,EACR,IAAA,2BAAe,EACb,mBAAW,CAAC,kBAAkB,EAC9B,mDAAoD,CAAW,CAAC,OAAO,EAAE,EACzE,EAAE,OAAO,EAAE,QAAQ,EAAE,CACtB,CACF,CAAC;QACJ,CAAC;QAED,IAAI,KAAiB,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;QACxC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,IAAA,iBAAG,EACR,IAAA,2BAAe,EACb,mBAAW,CAAC,oBAAoB,EAChC,0CAA2C,CAAW,CAAC,OAAO,EAAE,EAChE,EAAE,OAAO,EAAE,QAAQ,EAAE,CACtB,CACF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAe;YAC1B,GAAG,KAAK;YACR,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,KAAK,CAAC,eAAe;YACjC,gBAAgB,EAAE,cAAc;SACjC,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QACzD,MAAM,CAAC,GAAG,IAAA,8BAAe,EAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK;YAAE,OAAO,IAAA,iBAAG,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO,IAAA,gBAAE,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,eAAe;IACf,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,2DAA2D;QAC3D,OAAO,IAAA,gBAAE,EAAC,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAA,iBAAG,EACR,IAAA,2BAAe,EACb,mBAAW,CAAC,kBAAkB,EAC9B,gCAAiC,CAAW,CAAC,OAAO,EAAE,EACtD,EAAE,OAAO,EAAE,QAAQ,EAAE,CACtB,CACF,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,gBAAE,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,iBAAiB,CAC/B,OAAe,EACf,OAAkC;IAElC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,WAAW,GAAiB,EAAE,CAAC;IAErC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;YACnB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QAC7B,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,IAAA,gBAAE,EAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;AACtC,CAAC;AA6BD,SAAgB,mBAAmB,CACjC,OAAe,EACf,IAAkB;IAElB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,cAAc;IAEpE,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,EAAE,KAAK,KAAK;QAAE,OAAO,IAAA,iBAAG,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IAEzD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACjC,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,gEAAgE;IAChE,oEAAoE;IACpE,oDAAoD;IACpD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAiB,EAAE,CAAC;QAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS;YACzC,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAC1E,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAC5C,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC1C,IAAI,KAAK,GAAG,SAAS,GAAG,IAAI,CAAC,WAAW;gBAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,qBAAqB;YACrB,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;gBAAE,SAAS;YACvE,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBACnC,mDAAmD;gBACnD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAClC,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,GAAG,YAAY,CAAC;YACjC,iEAAiE;YACjE,gCAAgC;YAChC,IAAI,GAAG,GAAG,UAAU,IAAI,GAAG,GAAG,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC5D,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAiB,CAAC,GAAG,SAAS,CAAC,CAAC;IACjD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,eAAe,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;gBACnB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC9B,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,IAAA,gBAAE,EAAC,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;AAClD,CAAC"}