@quickchatai/quickreview 0.0.0-stage → 1.2.0

package/dist/src/archive/fsutil.js

@@ -0,0 +1,330 @@
+// The archiver's file primitives (docs/archiving.md §6, §9.3, §9.5):
+// every one async — file I/O and fsync through `fs.promises` (the libuv
+// threadpool), gzip on node:zlib's async streams (also the threadpool), a
+// token-bucket rate cap, and the atomic tmp + fsync + rename +
+// directory-fsync write the manifests use. Hashing runs on the event loop's
+// thread, one stream chunk at a time.
+//
+// A temporary name always ends in `.partial` (never `.jsonl`), so crash
+// recovery can delete strays by suffix and neither the receipt scan nor
+// authwatch ever reads a half-written file.
+import { createHash } from "node:crypto";
+import { constants, createReadStream, createWriteStream } from "node:fs";
+import { copyFile, link, lstat, open, rename, unlink, utimes } from "node:fs/promises";
+import { basename, dirname, join, resolve } from "node:path";
+import { Transform, Writable } from "node:stream";
+import { pipeline } from "node:stream/promises";
+import { createGunzip, createGzip } from "node:zlib";
+/** The suffix every in-progress archive file carries. */
+export const PARTIAL_SUFFIX = ".partial";
+/** Read chunks of 1 MiB (§7.3). */
+export const CHUNK_BYTES = 1024 * 1024;
+/** fsync one file (its data and metadata) on the threadpool. */
+export async function fsyncFile(path) {
+    const fh = await open(path, "r");
+    try {
+        await fh.sync();
+    }
+    finally {
+        await fh.close();
+    }
+}
+/** fsync a directory, so a rename or a new entry in it is durable. */
+export async function fsyncDir(dir) {
+    const fh = await open(dir, "r");
+    try {
+        await fh.sync();
+    }
+    finally {
+        await fh.close();
+    }
+}
+/** Unlink `path`; a missing file is not an error. */
+export async function unlinkIfPresent(path) {
+    try {
+        await unlink(path);
+        return true;
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return false;
+        throw err;
+    }
+}
+/**
+ * Write JSON atomically: `<path>.partial`, fsync, rename over `<path>`, fsync
+ * the directory. A crash leaves either the old file or the new one, never a
+ * torn one (and at worst a stray `.partial` that recovery deletes).
+ */
+export async function writeJsonAtomic(path, value) {
+    await writeTextAtomic(path, `${JSON.stringify(value, null, 1)}\n`);
+}
+/** The same for text already serialised (a caller that measures its own
+ * synchronous stringify). */
+export async function writeTextAtomic(path, text) {
+    const tmp = `${path}${PARTIAL_SUFFIX}`;
+    const fh = await open(tmp, "w");
+    try {
+        await fh.writeFile(text, "utf8");
+        await fh.sync();
+    }
+    finally {
+        await fh.close();
+    }
+    await rename(tmp, path);
+    await fsyncDir(dirname(path));
+}
+/** `query` of the nearest existing ancestor of `path` (itself first): a
+ * directory not created yet will be created on that one's filesystem. Any
+ * failure but a missing path is thrown, and so is a missing root. */
+export async function atNearestExisting(path, query) {
+    let p = resolve(path);
+    for (;;) {
+        try {
+            return await query(p);
+        }
+        catch (err) {
+            if (err.code !== "ENOENT")
+                throw err;
+            const up = dirname(p);
+            if (up === p)
+                throw err;
+            p = up;
+        }
+    }
+}
+/** The name a link-less placement stages its copy under: never the final name,
+ * so a crash mid-copy cannot leave a torn file there. */
+export const PLACE_STAGING_SUFFIX = ".place-partial";
+export const placeStagingOf = (to) => `${to}${PLACE_STAGING_SUFFIX}`;
+/** Codes for a filesystem that cannot make a hard link. */
+const NO_LINK = new Set(["EPERM", "ENOTSUP", "EOPNOTSUPP", "ENOSYS"]);
+/**
+ * Move `from` to `to` WITHOUT replacing anything already at `to`: a hard link
+ * (which fails on EEXIST), then the old name unlinked. Returns "exists" — with
+ * `from` left in place — when `to` is taken. On a filesystem without hard
+ * links it copies the verified source to a staging name, syncs it, renames
+ * it into place if the destination is still absent, then removes the old name;
+ * an existing destination is never replaced. A crash between the link and the unlink
+ * leaves both names on one inode, which recovery's stray-partial sweep tidies.
+ */
+export async function renameNoReplace(from, to) {
+    try {
+        await link(from, to);
+    }
+    catch (err) {
+        const code = err.code ?? "";
+        if (code === "EEXIST")
+            return "exists";
+        if (!NO_LINK.has(code))
+            throw err;
+        const source = await lstat(from);
+        const staging = placeStagingOf(to);
+        try {
+            await unlinkIfPresent(staging);
+            await copyFile(from, staging, constants.COPYFILE_EXCL);
+            await utimes(staging, source.atime, source.mtime);
+            await fsyncFile(staging);
+            if (await lstat(to).then(() => true, (e) => {
+                if (e.code === "ENOENT")
+                    return false;
+                throw e;
+            })) {
+                await unlinkIfPresent(staging);
+                return "exists";
+            }
+            await rename(staging, to);
+        }
+        catch (e) {
+            await unlinkIfPresent(staging).catch(() => undefined);
+            throw e;
+        }
+        await unlink(from);
+        return "placed";
+    }
+    await unlink(from);
+    return "placed";
+}
+/** `lstat` as an identity; null when the path is not a regular file. */
+export async function identityOf(path) {
+    const st = await lstat(path);
+    if (!st.isFile())
+        return null;
+    return { dev: st.dev, ino: st.ino, size: st.size, mtimeMs: st.mtimeMs };
+}
+export const sameIdentity = (a, b) => a !== null &&
+    b !== null &&
+    a.dev === b.dev &&
+    a.ino === b.ino &&
+    a.size === b.size &&
+    a.mtimeMs === b.mtimeMs;
+/** Does a recorded identity (a manifest entry's fields) name exactly this
+ * live file? An unrecorded dev or ino never matches. */
+export const sameRecordedIdentity = (rec, id) => rec !== undefined &&
+    id !== null &&
+    rec.dev === id.dev &&
+    rec.ino === id.ino &&
+    rec.bytes === id.size &&
+    rec.mtime_ms === id.mtimeMs;
+/** A pass-through that hashes and counts what flows by. */
+export class HashTap extends Transform {
+    hash = createHash("sha256");
+    bytes = 0;
+    digestHex = null;
+    _transform(chunk, _enc, cb) {
+        this.hash.update(chunk);
+        this.bytes += chunk.length;
+        cb(null, chunk);
+    }
+    /** The sha256 of everything that passed (valid once the stream ended). */
+    digest() {
+        this.digestHex ??= this.hash.digest("hex");
+        return this.digestHex;
+    }
+}
+/**
+ * A token-bucket rate cap on a stream's throughput: a chunk is passed on no
+ * earlier than its share of `bytesPerS` allows. The wait is a timer, so the
+ * loop runs other work meanwhile; an abort ends the wait at once.
+ */
+export class RateLimit extends Transform {
+    bytesPerS;
+    signal;
+    clock;
+    sent = 0;
+    started;
+    constructor(bytesPerS, signal, clock = () => Date.now()) {
+        super();
+        this.bytesPerS = bytesPerS;
+        this.signal = signal;
+        this.clock = clock;
+        this.started = clock();
+    }
+    _transform(chunk, _enc, cb) {
+        this.sent += chunk.length;
+        const due = this.started + (this.sent / this.bytesPerS) * 1000;
+        const wait = due - this.clock();
+        if (!(wait > 0) || !Number.isFinite(this.bytesPerS) || this.bytesPerS <= 0) {
+            cb(null, chunk);
+            return;
+        }
+        if (this.signal?.aborted) {
+            cb(this.signal.reason instanceof Error ? this.signal.reason : new Error("aborted"));
+            return;
+        }
+        const t = setTimeout(() => {
+            this.signal?.removeEventListener("abort", onAbort);
+            cb(null, chunk);
+        }, wait);
+        const onAbort = () => {
+            clearTimeout(t);
+            cb(this.signal.reason instanceof Error ? this.signal.reason : new Error("aborted"));
+        };
+        this.signal?.addEventListener("abort", onAbort, { once: true });
+    }
+}
+/** A pass-through that hashes the first `limit` bytes it sees. */
+class PrefixTap extends Transform {
+    limit;
+    hash = createHash("sha256");
+    seen = 0;
+    constructor(limit) {
+        super();
+        this.limit = limit;
+    }
+    _transform(chunk, _enc, cb) {
+        if (this.seen < this.limit) {
+            const take = Math.min(chunk.length, this.limit - this.seen);
+            this.hash.update(take === chunk.length ? chunk : chunk.subarray(0, take));
+            this.seen += take;
+        }
+        cb(null, chunk);
+    }
+    /** The prefix's sha256, or null when fewer than `limit` bytes passed. */
+    digest() {
+        return this.seen === this.limit ? this.hash.digest("hex") : null;
+    }
+}
+/** A sink that drops what it is handed (the verify read needs only the tap). */
+const discard = () => new Writable({
+    write(_chunk, _enc, cb) {
+        cb();
+    },
+});
+/**
+ * Stream `src` through the rate cap, a sha256 tap (and, with `prefixBytes`, a
+ * sha256 of its first bytes) and gzip into `dest`, then fsync `dest`. Every
+ * byte is read and compressed on the threadpool in 1 MiB chunks; the signal
+ * destroys the streams (the partial is the caller's to remove).
+ */
+export async function gzipFile(src, dest, opts) {
+    const tap = new HashTap();
+    const prefix = opts.prefixBytes !== undefined ? new PrefixTap(opts.prefixBytes) : null;
+    const stages = [new RateLimit(opts.bytesPerS, opts.signal), tap];
+    if (prefix)
+        stages.push(prefix);
+    await pipeline(createReadStream(src, { highWaterMark: CHUNK_BYTES }), ...stages, createGzip({ level: opts.level }), createWriteStream(dest), { signal: opts.signal });
+    await fsyncFile(dest);
+    const gz = await identityOf(dest);
+    return {
+        bytes: tap.bytes,
+        sha256: tap.digest(),
+        prefixSha256: prefix?.digest() ?? null,
+        gzBytes: gz?.size ?? 0,
+    };
+}
+/** Stream a file — decompressed first with `gz` — through the rate cap and
+ * report the length and sha256 of its bytes, and (with `prefixBytes`) the
+ * sha256 of their first `prefixBytes`. */
+export async function fileDigestWithPrefix(path, opts) {
+    const tap = new HashTap();
+    const prefix = opts.prefixBytes !== undefined ? new PrefixTap(opts.prefixBytes) : null;
+    const stages = [new RateLimit(opts.bytesPerS, opts.signal)];
+    if (opts.gz)
+        stages.push(createGunzip());
+    stages.push(tap);
+    if (prefix)
+        stages.push(prefix);
+    await pipeline(createReadStream(path, { highWaterMark: CHUNK_BYTES }), ...stages, discard(), { signal: opts.signal });
+    return { bytes: tap.bytes, sha256: tap.digest(), prefixSha256: prefix?.digest() ?? null };
+}
+/** Stream-decompress `gz` and report the length and sha256 of what came out. */
+export async function gunzipDigest(gz, opts) {
+    const { bytes, sha256 } = await fileDigestWithPrefix(gz, { ...opts, gz: true });
+    return { bytes, sha256 };
+}
+/** Stream a plain file's length and sha256. */
+export async function fileDigest(path, opts) {
+    const { bytes, sha256 } = await fileDigestWithPrefix(path, opts);
+    return { bytes, sha256 };
+}
+/** Is `err` zlib refusing the stream (a `Z_*` code: bad header, bad data, a
+ * truncated end) — as opposed to the file not being readable? */
+export function isZlibError(err) {
+    const code = err?.code;
+    return typeof code === "string" && code.startsWith("Z_");
+}
+/** `<dir>/<name>` → `<dir>/<name>.partial`. */
+export const partialOf = (path) => join(dirname(path), `${basename(path)}${PARTIAL_SUFFIX}`);
+/** One round-trip policy for ordinary files and sealed databases. */
+export async function verifyGzip(path, expected, opts) {
+    let actual;
+    try {
+        actual = await gunzipDigest(path, opts);
+    }
+    catch (error) {
+        if (opts.signal?.aborted)
+            throw error;
+        return { kind: "error", error: error instanceof Error ? error : new Error(String(error)) };
+    }
+    return actual.bytes === expected.bytes && actual.sha256 === expected.sha256
+        ? { kind: "verified" }
+        : { kind: "mismatch", actual };
+}
+/** Stream the same bounded, rate-limited decompression for restore/extract. */
+export async function gunzipToFile(gz, output, opts) {
+    const tap = new HashTap();
+    await pipeline(createReadStream(gz, { highWaterMark: CHUNK_BYTES }), new RateLimit(opts.bytesPerS, opts.signal), createGunzip(), tap, createWriteStream(output, { flags: opts.exclusive ? "wx" : "w" }), { signal: opts.signal });
+    return { bytes: tap.bytes, sha256: tap.digest() };
+}
+//# sourceMappingURL=fsutil.js.map

package/dist/src/archive/fsutil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fsutil.js","sourceRoot":"","sources":["../../../src/archive/fsutil.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,wEAAwE;AACxE,0EAA0E;AAC1E,+DAA+D;AAC/D,4EAA4E;AAC5E,sCAAsC;AACtC,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,4CAA4C;AAC5C,OAAO,EAAE,UAAU,EAAa,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,QAAQ,EAA0B,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAErD,yDAAyD;AACzD,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;AAEzC,mCAAmC;AACnC,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvC,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY;IAC1C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAW;IACxC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACnE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,KAAc;IAChE,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAED;6BAC6B;AAC7B,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY;IAC9D,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED;;qEAEqE;AACrE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,KAAgC;IAEhC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAChE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,EAAE,KAAK,CAAC;gBAAE,MAAM,GAAG,CAAC;YACxB,CAAC,GAAG,EAAE,CAAC;QACT,CAAC;IACH,CAAC;AACH,CAAC;AAED;yDACyD;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AACrD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,GAAG,EAAE,GAAG,oBAAoB,EAAE,CAAC;AAErF,2DAA2D;AAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEtE;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,EAAU;IAC5D,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,IAAI,EAAE,CAAC;QACvD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,GAAG,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;YAC/B,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;YACvD,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;YACzB,IACE,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAClB,GAAG,EAAE,CAAC,IAAI,EACV,CAAC,CAAwB,EAAE,EAAE;gBAC3B,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBACtC,MAAM,CAAC,CAAC;YACV,CAAC,CACF,EACD,CAAC;gBACD,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;gBAC/B,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,CAAC,CAAC;QACV,CAAC;QACD,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IACnB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAWD,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAsB,EAAE,CAAsB,EAAW,EAAE,CACtF,CAAC,KAAK,IAAI;IACV,CAAC,KAAK,IAAI;IACV,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG;IACf,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG;IACf,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;IACjB,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC;AAE1B;wDACwD;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,GAA4F,EAC5F,EAAuB,EACd,EAAE,CACX,GAAG,KAAK,SAAS;IACjB,EAAE,KAAK,IAAI;IACX,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG;IAClB,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG;IAClB,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,IAAI;IACrB,GAAG,CAAC,QAAQ,KAAK,EAAE,CAAC,OAAO,CAAC;AAE9B,2DAA2D;AAC3D,MAAM,OAAO,OAAQ,SAAQ,SAAS;IACnB,IAAI,GAAS,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnD,KAAK,GAAG,CAAC,CAAC;IACF,SAAS,GAAkB,IAAI,CAAC;IAE/B,UAAU,CAAC,KAAa,EAAE,IAAoB,EAAE,EAAqB;QAC5E,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QAC3B,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClB,CAAC;IAED,0EAA0E;IAC1E,MAAM;QACJ,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,SAAU,SAAQ,SAAS;IAKnB;IACA;IACA;IANX,IAAI,GAAG,CAAC,CAAC;IACA,OAAO,CAAS;IAEjC,YACmB,SAAiB,EACjB,MAAoB,EACpB,QAAsB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;QAEvD,KAAK,EAAE,CAAC;QAJS,cAAS,GAAT,SAAS,CAAQ;QACjB,WAAM,GAAN,MAAM,CAAc;QACpB,UAAK,GAAL,KAAK,CAAiC;QAGvD,IAAI,CAAC,OAAO,GAAG,KAAK,EAAE,CAAC;IACzB,CAAC;IAEQ,UAAU,CAAC,KAAa,EAAE,IAAoB,EAAE,EAAqB;QAC5E,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;QAC/D,MAAM,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;YAC3E,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACzB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YACpF,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE;YACxB,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAClB,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,CAAC,CAAC,CAAC;YAChB,EAAE,CAAC,IAAI,CAAC,MAAO,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACxF,CAAC,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;CACF;AAED,kEAAkE;AAClE,MAAM,SAAU,SAAQ,SAAS;IAGF;IAFZ,IAAI,GAAS,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,GAAG,CAAC,CAAC;IACjB,YAA6B,KAAa;QACxC,KAAK,EAAE,CAAC;QADmB,UAAK,GAAL,KAAK,CAAQ;IAE1C,CAAC;IACQ,UAAU,CAAC,KAAa,EAAE,IAAoB,EAAE,EAAqB;QAC5E,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QACpB,CAAC;QACD,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClB,CAAC;IACD,yEAAyE;IACzE,MAAM;QACJ,OAAO,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,OAAO,GAAG,GAAa,EAAE,CAC7B,IAAI,QAAQ,CAAC;IACX,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;QACpB,EAAE,EAAE,CAAC;IACP,CAAC;CACF,CAAC,CAAC;AAaL;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAW,EACX,IAAY,EACZ,IAAsF;IAEtF,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,MAAM,MAAM,GAAgB,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9E,IAAI,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,QAAQ,CACZ,gBAAgB,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,EACrD,GAAI,MAAsC,EAC1C,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EACjC,iBAAiB,CAAC,IAAI,CAAC,EACvB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CACxB,CAAC;IACF,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;QACpB,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI;QACtC,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC;KACvB,CAAC;AACJ,CAAC;AAED;;0CAE0C;AAC1C,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAY,EACZ,IAAqF;IAErF,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,MAAM,MAAM,GAAgB,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACzC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,IAAI,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,QAAQ,CACZ,gBAAgB,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,EACtD,GAAI,MAAsC,EAC1C,OAAO,EAAE,EACT,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CACxB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;AAC5F,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAU,EACV,IAAiD;IAEjD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,IAAiD;IAEjD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED;iEACiE;AACjE,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAC;IACtD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE,CAChD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,EAAE,CAAC,CAAC;AAO5D,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,QAA2C,EAC3C,IAAiD;IAEjD,IAAI,MAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,KAAK,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IAC7F,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACzE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE;QACtB,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAU,EACV,MAAc,EACd,IAAsE;IAEtE,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;IAC1B,MAAM,QAAQ,CACZ,gBAAgB,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,EACpD,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAC1C,YAAY,EAAE,EACd,GAAG,EACH,iBAAiB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EACjE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CACxB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;AACpD,CAAC"}

package/dist/src/archive/gzfile.js

@@ -0,0 +1,277 @@
+// The PER-FILE PROTOCOL (docs/archiving.md §7.3) — how one live file
+// becomes a verified gzip in the archive, and how one gzip goes back (§8.2).
+//
+// Archiving, in order — every step async, streamed in 1 MiB chunks through
+// the token-bucket rate cap, compression on node:zlib's threadpool:
+//
+//   1. the caller `lstat`s the source and hands its identity in;
+//   2. stream it through sha256 (and, when asked, a sha256 of its first N
+//      bytes — the legacy-copy prefix check, §7.5) and gzip into
+//      `<dest>.partial`, then fsync;
+//   3. stream `<dest>.partial` back through gunzip and sha256: the length and
+//      hash must equal step 2's, or the partial is deleted, the source kept,
+//      and the caller counts a verify failure;
+//   4. `lstat` the source again: a changed identity discards the partial
+//      (the caller aborts the PR for this pass; the next archives the new
+//      bytes under a new entry);
+//   5. `utimes` the partial to the source's mtime, rename it to `<dest>`
+//      (same directory), fsync the directory.
+//
+// The caller appends the manifest entry (step 6). A crash leaves at worst a
+// `.partial` (deleted at the next start) or a placed `.gz` with no entry
+// (re-verified against its source and adopted; kept under its own entry when
+// it decompresses to an earlier version; redone only when it does not
+// decompress at all — `adoptOrphan`).
+// No temporary name ends in `.jsonl`, so neither the receipt scan nor
+// authwatch ever reads a half-written file.
+import { createHash } from "node:crypto";
+import { lstat, mkdir, readdir, rename, unlink, utimes, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { PARTIAL_SUFFIX, fileDigestWithPrefix, fsyncDir, fsyncFile, gunzipDigest, gunzipToFile, verifyGzip, gzipFile, identityOf, isZlibError, partialOf, placeStagingOf, renameNoReplace, sameIdentity, sameRecordedIdentity, unlinkIfPresent, } from "./fsutil.js";
+export { fileDigestWithPrefix };
+/** The suffix a file being RESTORED carries in its live directory. It does
+ * not end in `.jsonl`, so the receipt scan and authwatch never read it. It
+ * sits only in LIVE directories, which the archive-dir stray sweep never
+ * walks; crash recovery removes it by name (`removeRestorePartial`). */
+export const RESTORE_PARTIAL_SUFFIX = ".restore-partial";
+export const restorePartialOf = (path) => `${path}${RESTORE_PARTIAL_SUFFIX}`;
+/** Archive `src` as the gzip `dest` (steps 2–5 above). */
+export async function archiveFile(src, dest, opts) {
+    const partial = partialOf(dest);
+    await mkdir(dirname(dest), { recursive: true });
+    const { bytes, sha256, prefixSha256 } = await gzipFile(src, partial, {
+        level: opts.level,
+        bytesPerS: opts.bytesPerS,
+        ...(opts.signal ? { signal: opts.signal } : {}),
+        ...(opts.prefixBytes !== undefined ? { prefixBytes: opts.prefixBytes } : {}),
+    });
+    await opts.step?.("partial_written", { src, dest, partial });
+    // Step 3: the partial decompresses to exactly what was read. A gzip that
+    // does not even decompress (a corrupt byte trips its CRC) is the same
+    // verdict, never an I/O failure.
+    const back = await verifyGzip(partial, { bytes, sha256 }, { bytesPerS: opts.bytesPerS, signal: opts.signal });
+    if (back.kind !== "verified") {
+        await unlinkIfPresent(partial);
+        return {
+            kind: "verify_failed",
+            detail: back.kind === "error"
+                ? `${partial} does not decompress (${back.error.message})`
+                : `${partial} decompressed to ${back.actual.bytes} bytes / ${back.actual.sha256.slice(0, 12)}…, the source read ${bytes} / ${sha256.slice(0, 12)}…`,
+        };
+    }
+    // Step 4: the source is still the file that was hashed.
+    const now = await identityOrNull(src);
+    if (!sameIdentity(opts.identity, now) || bytes !== opts.identity.size) {
+        await unlinkIfPresent(partial);
+        return {
+            kind: "changed",
+            detail: `${src} changed while it was archived (${describe(opts.identity)} → ${describe(now)}, ${bytes} bytes read)`,
+        };
+    }
+    // Step 5: the original mtime, then into place, durably.
+    const mtime = opts.identity.mtimeMs / 1000;
+    await utimes(partial, mtime, mtime);
+    await rename(partial, dest);
+    await fsyncDir(dirname(dest));
+    await opts.step?.("renamed", { src, dest });
+    const gz = await lstat(dest);
+    return {
+        kind: "ok",
+        bytes,
+        sha256,
+        gzBytes: gz.size,
+        prefixSha256,
+        identity: opts.identity,
+    };
+}
+const describe = (id) => id ? `dev ${id.dev} ino ${id.ino} ${id.size} B mtime ${id.mtimeMs}` : "gone";
+/** `identityOf`, with a missing file as null. */
+export async function identityOrNull(path) {
+    try {
+        return await identityOf(path);
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return null;
+        throw err;
+    }
+}
+/**
+ * A placed `.gz` with no manifest entry — a crash between the rename and the
+ * entry (§7.6). Re-verified against its source: when the gzip decompresses to
+ * exactly the source's bytes and the source did not change meanwhile, it is
+ * adopted (the caller writes the entry, nothing is recompressed). A gzip that
+ * decompresses cleanly to OTHER bytes is never deleted here: it was verified
+ * against its source before its rename, so it holds an earlier version of
+ * that source that may exist nowhere else (`stale`). Only one zlib refuses
+ * is removed, for the caller to redo; one that cannot be READ (a permission
+ * or I/O error) is left as found and the error thrown.
+ */
+export async function adoptOrphan(src, gz, opts) {
+    const [live, packed] = await Promise.all([
+        fileDigestWithPrefix(src, {
+            bytesPerS: opts.bytesPerS,
+            ...(opts.signal ? { signal: opts.signal } : {}),
+            ...(opts.prefixBytes !== undefined ? { prefixBytes: opts.prefixBytes } : {}),
+        }),
+        gunzipDigest(gz, { bytesPerS: opts.bytesPerS, signal: opts.signal }).catch((err) => {
+            if (opts.signal?.aborted)
+                throw err;
+            // Only zlib saying the bytes do not decompress proves corruption; a
+            // read that failed (EACCES, EIO) proves nothing, and the gzip may hold
+            // the only copy of an earlier version: it stays, the pass fails.
+            if (!isZlibError(err))
+                throw err;
+            return err;
+        }),
+    ]);
+    if (packed instanceof Error) {
+        await unlinkIfPresent(gz);
+        await fsyncDir(dirname(gz));
+        return { kind: "corrupt", detail: `${gz} does not decompress (${packed.message})` };
+    }
+    const now = await identityOrNull(src);
+    if (!sameIdentity(opts.identity, now) || live.bytes !== opts.identity.size)
+        return {
+            kind: "changed",
+            detail: `${src} changed while its orphan gzip was checked (${describe(opts.identity)} → ${describe(now)})`,
+        };
+    const st = await lstat(gz);
+    if (packed.bytes === live.bytes && packed.sha256 === live.sha256)
+        return {
+            kind: "ok",
+            bytes: live.bytes,
+            sha256: live.sha256,
+            gzBytes: st.size,
+            prefixSha256: live.prefixSha256,
+            identity: opts.identity,
+        };
+    return {
+        kind: "stale",
+        bytes: packed.bytes,
+        sha256: packed.sha256,
+        gzBytes: st.size,
+        mtimeMs: st.mtimeMs,
+    };
+}
+/** Run `fn`; if it throws, remove `partial` first (a failed restore leaves no
+ * `.restore-partial` behind in a LIVE directory), then rethrow. */
+async function cleaningPartial(partial, fn) {
+    try {
+        return await fn();
+    }
+    catch (err) {
+        await unlinkIfPresent(partial).catch(() => false);
+        throw err;
+    }
+}
+/**
+ * Put `bytes`/`sha256` back at `target` from the gzip `gz` (§8.2):
+ * `<target>.restore-partial`, sha verified, fsync, `utimes` to the original
+ * mtime, renamed into place WITHOUT replacing anything that appeared there,
+ * the directory fsynced. The caller decided `target` was absent. A failure
+ * removes the partial before it is reported; only a crash (or `step`) can
+ * leave one, and crash recovery sweeps those.
+ */
+export async function restoreFromGzip(gz, target, expect, opts) {
+    const partial = restorePartialOf(target);
+    await mkdir(dirname(target), { recursive: true });
+    let got;
+    await cleaningPartial(partial, async () => {
+        got = await gunzipToFile(gz, partial, opts);
+    });
+    // Outside the clean-up: a test's crash here leaves the partial, as a real
+    // crash would.
+    await opts.step?.("restore_partial_written", { target, partial });
+    return placeRestored(partial, target, got, expect);
+}
+/** The same, from bytes already read out of a bundle (and verified there). */
+export async function restoreFromBytes(data, target, expect, opts = {}) {
+    const partial = restorePartialOf(target);
+    await mkdir(dirname(target), { recursive: true });
+    await cleaningPartial(partial, () => writeFile(partial, data));
+    const sha256 = createHash("sha256").update(data).digest("hex");
+    await opts.step?.("restore_partial_written", { target, partial });
+    return placeRestored(partial, target, { bytes: data.length, sha256 }, expect);
+}
+function placeRestored(partial, target, got, expect) {
+    return cleaningPartial(partial, async () => {
+        if (got.bytes !== expect.bytes || got.sha256 !== expect.sha256) {
+            await unlinkIfPresent(partial);
+            return {
+                kind: "mismatch",
+                detail: `${target}: the archive gave ${got.bytes} bytes / ${got.sha256.slice(0, 12)}…, the manifest records ${expect.bytes} / ${expect.sha256.slice(0, 12)}…`,
+            };
+        }
+        await fsyncFile(partial);
+        const mtime = expect.mtime_ms / 1000;
+        await utimes(partial, mtime, mtime);
+        if ((await renameNoReplace(partial, target)) === "exists") {
+            await unlinkIfPresent(partial);
+            return { kind: "exists" };
+        }
+        await fsyncDir(dirname(target));
+        const identity = await identityOf(target);
+        if (!identity)
+            throw new Error(`${target} is not a regular file after its restore`);
+        return { kind: "restored", identity };
+    });
+}
+/** Remove a stray `.restore-partial` (a crash mid-restore). */
+export async function removeRestorePartial(target) {
+    const staged = await unlinkIfPresent(placeStagingOf(target));
+    return (await unlinkIfPresent(restorePartialOf(target))) || staged;
+}
+/** Unlink `path` only if it still has `identity` (the re-`lstat` before every
+ * unlink, §7.3). Returns what happened. */
+export async function unlinkIfIdentity(path, identity) {
+    let now;
+    try {
+        now = await identityOf(path);
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return "gone";
+        throw err;
+    }
+    // Something else at the path (a directory, a link) is a change, never
+    // "gone": the path still exists and was not removed.
+    if (!sameRecordedIdentity(identity, now))
+        return "changed";
+    try {
+        await unlink(path);
+        return "removed";
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return "gone";
+        throw err;
+    }
+}
+/** Delete every stray `*.partial` under an ARCHIVE dir (recursive; a missing
+ * dir is nothing to do). Only archive dirs hold them, and only the archiver,
+ * under its strict mutex, writes there — so one found outside a step in
+ * flight is a leftover (§7.6). */
+export async function sweepPartials(dir) {
+    let n = 0;
+    let entries;
+    try {
+        entries = await readdir(dir, { withFileTypes: true });
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return 0;
+        throw err;
+    }
+    for (const e of entries) {
+        const p = join(dir, e.name);
+        if (e.isDirectory())
+            n += await sweepPartials(p);
+        else if (e.isFile() && e.name.endsWith(PARTIAL_SUFFIX)) {
+            if (await unlinkIfPresent(p))
+                n += 1;
+        }
+    }
+    return n;
+}
+//# sourceMappingURL=gzfile.js.map

package/dist/src/archive/gzfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gzfile.js","sourceRoot":"","sources":["../../../src/archive/gzfile.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,6EAA6E;AAC7E,EAAE;AACF,2EAA2E;AAC3E,oEAAoE;AACpE,EAAE;AACF,iEAAiE;AACjE,0EAA0E;AAC1E,iEAAiE;AACjE,qCAAqC;AACrC,8EAA8E;AAC9E,6EAA6E;AAC7E,+CAA+C;AAC/C,yEAAyE;AACzE,0EAA0E;AAC1E,iCAAiC;AACjC,yEAAyE;AACzE,8CAA8C;AAC9C,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,sEAAsE;AACtE,sCAAsC;AACtC,sEAAsE;AACtE,4CAA4C;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,UAAU,EACV,WAAW,EACX,SAAS,EACT,cAAc,EACd,eAAe,EACf,YAAY,EACZ,oBAAoB,EACpB,eAAe,GAEhB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,oBAAoB,EAAE,CAAC;AAEhC;;;wEAGwE;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AACzD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,GAAG,IAAI,GAAG,sBAAsB,EAAE,CAAC;AA8B7F,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,IAAY,EACZ,IAAqB;IAErB,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE;QACnE,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,iBAAiB,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7D,yEAAyE;IACzE,sEAAsE;IACtE,iCAAiC;IACjC,MAAM,IAAI,GAAG,MAAM,UAAU,CAC3B,OAAO,EACP,EAAE,KAAK,EAAE,MAAM,EAAE,EACjB,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CACnD,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7B,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,MAAM,EACJ,IAAI,CAAC,IAAI,KAAK,OAAO;gBACnB,CAAC,CAAC,GAAG,OAAO,yBAAyB,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG;gBAC1D,CAAC,CAAC,GAAG,OAAO,oBAAoB,IAAI,CAAC,MAAM,CAAC,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,KAAK,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG;SACxJ,CAAC;IACJ,CAAC;IACD,wDAAwD;IACxD,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtE,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,GAAG,GAAG,mCAAmC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,KAAK,cAAc;SACpH,CAAC;IACJ,CAAC;IACD,wDAAwD;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;IAC3C,MAAM,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5B,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO;QACL,IAAI,EAAE,IAAI;QACV,KAAK;QACL,MAAM;QACN,OAAO,EAAE,EAAE,CAAC,IAAI;QAChB,YAAY;QACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,EAAuB,EAAU,EAAE,CACnD,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAE/E,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAeD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,EAAU,EACV,IAA+F;IAE/F,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACvC,oBAAoB,CAAC,GAAG,EAAE;YACxB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E,CAAC;QACF,YAAY,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;YACxF,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,GAAG,CAAC;YACpC,oEAAoE;YACpE,uEAAuE;YACvE,iEAAiE;YACjE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YACjC,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;KACH,CAAC,CAAC;IACH,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC;QAC5B,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC;QAC1B,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,yBAAyB,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;IACtF,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI;QACxE,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,GAAG,GAAG,+CAA+C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG;SAC3G,CAAC;IACJ,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAC9D,OAAO;YACL,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,EAAE,CAAC,IAAI;YAChB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC;IACJ,OAAO;QACL,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,EAAE,CAAC,IAAI;QAChB,OAAO,EAAE,EAAE,CAAC,OAAO;KACpB,CAAC;AACJ,CAAC;AAOD;mEACmE;AACnE,KAAK,UAAU,eAAe,CAAI,OAAe,EAAE,EAAoB;IACrE,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAU,EACV,MAAc,EACd,MAA2D,EAC3D,IAAgE;IAEhE,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,GAAuC,CAAC;IAC5C,MAAM,eAAe,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACxC,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IACH,0EAA0E;IAC1E,eAAe;IACf,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAClE,OAAO,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,MAAc,EACd,MAA2D,EAC3D,OAA0B,EAAE;IAE5B,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAClE,OAAO,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,aAAa,CACpB,OAAe,EACf,MAAc,EACd,GAAsC,EACtC,MAA2D;IAE3D,OAAO,eAAe,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACzC,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC/D,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,GAAG,MAAM,sBAAsB,GAAG,CAAC,KAAK,YAAY,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG;aAC9J,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrC,MAAM,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1D,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,0CAA0C,CAAC,CAAC;QACpF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAc;IACvD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,MAAM,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;AACrE,CAAC;AAED;2CAC2C;AAC3C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,QAAqF;IAErF,IAAI,GAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;QACpE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,sEAAsE;IACtE,qDAAqD;IACrD,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;QACpE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;kCAGkC;AAClC,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QAC/D,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,CAAC,IAAI,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC;aAC5C,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACvD,IAAI,MAAM,eAAe,CAAC,CAAC,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/src/archive/kinds.js

@@ -0,0 +1,22 @@
+// The event kinds the archiver may move out of the live `events` table
+// (docs/archiving.md §9.1): a closed set of the eight reader-less,
+// high-volume kinds. Every other kind stays live — the fact kinds the outcome
+// capture, the learner and the per-PR gates re-read (`pr_closed`,
+// `verdict_applied`, `head_push`, `anomaly`, …), the register kinds whose
+// newest row is read, and `comment_sweep`.
+//
+// The plan counts these rows for the backlog; in mode `on` the DB mover
+// (dbmove.ts) moves them into the month's archive database. The fence
+// `tests/fences-archive-events.test.ts` holds this set against every events
+// read site in src/ — a kind some code reads must never be in it.
+export const ARCHIVE_EVENT_KINDS = new Set([
+    "pingpong_decision_failed",
+    "webhook_event",
+    "recheck_noop",
+    "ci_completed",
+    "wakes_stranded",
+    "reconcile_pass",
+    "base_advanced",
+    "exec_policy_violation",
+]);
+//# sourceMappingURL=kinds.js.map