@scotthuang/agent-knock-knock 0.15.0 → 0.16.0

package/dist/src/native-store-authority-cli-adapter.js

@@ -0,0 +1,105 @@
+import { writeCliStdout } from "./cli-runtime-context.js";
+import { assertNativeStoreAuthorityCurrent, canonicalAuthorityStore, inspectNativeStoreAuthority } from "./native-store-authority.js";
+import { completedNativeStoreAuthorityReceipt, recoverNativeStoreAuthorityWhileLocked, transferNativeStoreAuthorityWhileLocked } from "./native-store-authority-transfer.js";
+import { sameTerminalControlIncarnation } from "./terminal-control-ref.js";
+import { nonBlankString, recordValue } from "./value-guards.js";
+function assertLiveNativeIdentity(identity, inspected) {
+    const binding = inspected.session?.binding;
+    if (!nonBlankString(identity?.sessionId) || !nonBlankString(identity?.processUuid) ||
+        identity.sessionId !== binding?.native_thread_id ||
+        identity.processUuid !== binding?.native_process.process_uuid) {
+        throw new Error("native thread process incarnation cannot be verified; transfer refused; no input sent");
+    }
+}
+async function proveLiveTransferTerminal(options, current, inspected, bridge, ports) {
+    if (current.agent !== inspected.session?.agent || current.pid !== inspected.session.binding?.native_process.pid) {
+        throw new Error("native thread process incarnation changed; transfer refused; no input sent");
+    }
+    const request = { options, agent: current.agent, pid: current.pid, cwd: current.terminalControl.currentPath };
+    assertLiveNativeIdentity(await ports.identity(request), inspected);
+    const status = await bridge.status(current.agent, current.terminalControl, { runtime: { pid: current.pid } });
+    if (!status.reachable || status.activity_state !== "idle" ||
+        !status.approval_state.scanned || status.approval_state.blocked) {
+        throw new Error("terminal must be reachable, idle and without a pending approval before authority transfer; no input sent");
+    }
+    // A human can change native context while the read-only screen capture awaits.
+    assertLiveNativeIdentity(await ports.identity(request), inspected);
+}
+async function observeLiveStoreAuthority(input, initial, ports) {
+    if (!initial.session?.binding) {
+        throw new Error(`Store authority cannot be verified: ${initial.reason ?? initial.state}; no input sent`);
+    }
+    const options = input.options ?? {};
+    const bridge = ports.createBridge(options);
+    const current = await bridge.resolveStoredTerminal(initial.session.agent, initial.session.binding.native_process.pid, input.terminalControl);
+    if (current.agent !== initial.session.agent || current.pid !== initial.session.binding.native_process.pid ||
+        !sameTerminalControlIncarnation(current.terminalControl, input.terminalControl)) {
+        throw new Error("terminal incarnation changed before Store authority verification; no input sent");
+    }
+    const identity = await ports.identity({ options, agent: current.agent, pid: current.pid,
+        cwd: current.terminalControl.currentPath });
+    if (!nonBlankString(identity?.sessionId) || !nonBlankString(identity?.processUuid)) {
+        throw new Error("native thread process incarnation cannot be verified; no input sent");
+    }
+    const freshInput = { ...input, nativeThreadId: identity.sessionId, ledger: ports.repository.load(input.terminalControl) };
+    return { bridge, current, freshInput };
+}
+/** The caller holds the physical terminal lock; stale action tokens cannot bypass Store ownership. */
+export async function recoverNativeStoreAuthorityForCli(input, ports) {
+    const initial = inspectNativeStoreAuthority({ ...input, ledger: ports.repository.load(input.terminalControl) });
+    if (initial.state === "none" || initial.state === "current")
+        return;
+    const { bridge, current, freshInput } = await observeLiveStoreAuthority(input, initial, ports);
+    const inspected = inspectNativeStoreAuthority(freshInput);
+    if (inspected.state === "none" || inspected.state === "current")
+        return;
+    const journal = recordValue(freshInput.ledger?.store_authority_transfer);
+    const pendingAutomatic = journal?.automatic === true && journal.phase !== "committed" &&
+        journal.target_store_dir === canonicalAuthorityStore(input.storeDir);
+    if (!inspected.automaticEligible && !pendingAutomatic)
+        assertNativeStoreAuthorityCurrent(freshInput);
+    if (!inspected.transferEligible) {
+        throw new Error(`automatic Store authority recovery refused: ${inspected.reason ?? inspected.state}; no input sent`);
+    }
+    await proveLiveTransferTerminal(input.options ?? {}, current, inspected, bridge, ports);
+    recoverNativeStoreAuthorityWhileLocked(input, ports.repository);
+    assertNativeStoreAuthorityCurrent({ ...freshInput, ledger: ports.repository.load(input.terminalControl) });
+}
+export async function runNativeStoreAuthorityTransferCli(options, ports) {
+    const terminalId = nonBlankString(options.terminal ?? options.conversation);
+    const token = nonBlankString(options.expectedAuthorityToken);
+    if (!terminalId || !token)
+        throw new Error("transfer-store-authority requires --terminal and the fresh displayed --expected-authority-token");
+    const bridge = ports.createBridge(options);
+    const initial = await bridge.resolveConversationId(terminalId);
+    if (!initial || initial.conversationId !== terminalId)
+        throw new Error("use the exact terminal_id from AKK list");
+    const storeDir = ports.storeDir(options);
+    const release = ports.repository.acquire(storeDir, initial.terminalControl);
+    try {
+        const current = await bridge.resolveConversationId(terminalId);
+        if (!current || current.pid !== initial.pid ||
+            !sameTerminalControlIncarnation(current.terminalControl, initial.terminalControl)) {
+            throw new Error("terminal incarnation changed; refresh AKK list");
+        }
+        const request = { storeDir, terminalControl: current.terminalControl,
+            expectedAuthorityToken: token, maintenanceAcknowledgement: options.maintenanceAcknowledgement === true };
+        const ledger = ports.repository.load(current.terminalControl);
+        if (ledger && !ports.repository.matchesControl(ledger, current.terminalControl)) {
+            throw new Error("Store authority terminal incarnation changed; refresh AKK list; no input sent");
+        }
+        const completed = completedNativeStoreAuthorityReceipt(request, ledger);
+        if (completed) {
+            writeCliStdout(JSON.stringify({ ...completed, terminal_id: terminalId, terminal_input_sent: false }, null, 2) + "\n");
+            return;
+        }
+        const inspected = inspectNativeStoreAuthority({ ...request, ledger });
+        await proveLiveTransferTerminal(options, current, inspected, bridge, ports);
+        const result = transferNativeStoreAuthorityWhileLocked(request, ports.repository);
+        writeCliStdout(JSON.stringify({ ...result, terminal_id: terminalId, terminal_input_sent: false }, null, 2) + "\n");
+    }
+    finally {
+        release();
+    }
+}
+//# sourceMappingURL=native-store-authority-cli-adapter.js.map

package/dist/src/native-store-authority-cli-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-store-authority-cli-adapter.js","sourceRoot":"","sources":["../../src/native-store-authority-cli-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAI1D,OAAO,EAAE,iCAAiC,EAAE,uBAAuB,EAAE,2BAA2B,EAAuC,MAAM,6BAA6B,CAAC;AAC3K,OAAO,EAAE,oCAAoC,EAAE,sCAAsC,EAAE,uCAAuC,EAAE,MAAM,sCAAsC,CAAC;AAC7K,OAAO,EAAE,8BAA8B,EAA2B,MAAM,2BAA2B,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAchE,SAAS,wBAAwB,CAAC,QAA4C,EAC5E,SAAyC;IACzC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC;IAC3C,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC;QAChF,QAAS,CAAC,SAAS,KAAK,OAAO,EAAE,gBAAgB;QACjD,QAAS,CAAC,WAAW,KAAK,OAAO,EAAE,cAAc,CAAC,YAAY,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;IAC3G,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,OAA4B,EAAE,OAAqC,EAC1G,SAAyC,EAAE,MAA2B,EAAE,KAAmC;IAC3G,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,OAAO,EAAE,KAAK,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC;QAChH,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;IAC9G,wBAAwB,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9G,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,MAAM;QACvD,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,IAAI,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,0GAA0G,CAAC,CAAC;IAC9H,CAAC;IACD,+EAA+E;IAC/E,wBAAwB,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,KAAqC,EAC5E,OAAuC,EAAE,KAAmC;IAC5E,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,iBAAiB,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EACtE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG;QACvG,CAAC,8BAA8B,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG;QACrF,GAAG,EAAE,OAAO,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,UAAU,GAAG,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,QAAS,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;IAC3H,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACzC,CAAC;AAED,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAAqC,EAC3F,KAAmC;IACnC,MAAM,OAAO,GAAG,2BAA2B,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAChH,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO;IACpE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,SAAS,CAAC,KAAK,KAAK,MAAM,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO;IACxE,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IACzE,MAAM,gBAAgB,GAAG,OAAO,EAAE,SAAS,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW;QACnF,OAAO,CAAC,gBAAgB,KAAK,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvE,IAAI,CAAC,SAAS,CAAC,iBAAiB,IAAI,CAAC,gBAAgB;QAAE,iCAAiC,CAAC,UAAU,CAAC,CAAC;IACrG,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,+CAA+C,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,KAAK,iBAAiB,CAAC,CAAC;IACvH,CAAC;IACD,MAAM,yBAAyB,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACxF,sCAAsC,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAChE,iCAAiC,CAAC,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;AAC7G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,OAA4B,EAAE,KAEtF;IACC,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC7D,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAC;IAC9I,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,cAAc,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAClH,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;YACzC,CAAC,8BAA8B,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe;YAClE,sBAAsB,EAAE,KAAK,EAAE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B,KAAK,IAAI,EAAE,CAAC;QAC3G,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC9D,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,SAAS,GAAG,oCAAoC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxE,IAAI,SAAS,EAAE,CAAC;YACd,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACtH,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,2BAA2B,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,uCAAuC,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAClF,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrH,CAAC;YAAS,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAC1B,CAAC"}

package/dist/src/native-store-authority-ledger.d.ts

@@ -0,0 +1,3 @@
+import type { TerminalDispatchLedgerDocument as Ledger } from "./terminal-dispatch-ledger-codec.js";
+/** Repository-level fence also catches delayed writers that passed preflight earlier. */
+export declare function stampNativeStoreAuthority(previous: Ledger | undefined, incoming: Ledger, transferWrite: boolean): Ledger;

package/dist/src/native-store-authority-ledger.js

@@ -0,0 +1,46 @@
+import { cliEnv } from "./cli-runtime-context.js";
+import { canonicalAuthorityStore, nativeAuthorityStore, nativeAuthorityThreadIds } from "./native-store-authority.js";
+import { captureStoreOwnerIdentity, isStoreOwnerIdentity } from "./store-owner-identity.js";
+import { registerStoreOwnerIdentity } from "./store-owner-registry.js";
+import { recordValue } from "./value-guards.js";
+/** Repository-level fence also catches delayed writers that passed preflight earlier. */
+export function stampNativeStoreAuthority(previous, incoming, transferWrite) {
+    const priorTransfer = recordValue(previous?.store_authority_transfer);
+    const store = nativeAuthorityStore(incoming);
+    const previousStore = previous && nativeAuthorityStore(previous);
+    const ids = nativeAuthorityThreadIds(incoming);
+    const priorIds = previous ? nativeAuthorityThreadIds(previous) : [];
+    const sameThread = ids.some(id => priorIds.includes(id));
+    if (!transferWrite)
+        assertAuthorityWriteAllowed({ priorTransfer, previousStore, store, sameThread, hasIds: ids.length > 0 });
+    if (!store || !ids.length)
+        return incoming;
+    const priorAuthority = recordValue(previous?.store_authority);
+    const sameStore = previousStore === canonicalAuthorityStore(store);
+    // A transfer journal retains the source owner until the destination commit.
+    if (transferWrite)
+        return incoming;
+    const owner = captureStoreOwnerIdentity(store, cliEnv());
+    registerStoreOwnerIdentity(owner);
+    return { ...incoming,
+        store_authority: sameStore && sameThread && isStoreOwnerIdentity(priorAuthority?.owner)
+            ? priorAuthority
+            : { version: 1, generation: Number(priorAuthority?.generation ?? 0) + 1,
+                store_dir: store, owner,
+                ...(sameStore && sameThread ? { legacy_owner_coverage: true } : {}) },
+        ...(sameStore && sameThread && priorTransfer ? { store_authority_transfer: priorTransfer } : {})
+    };
+}
+function assertAuthorityWriteAllowed(facts) {
+    const { priorTransfer, previousStore, store, sameThread, hasIds } = facts;
+    if (priorTransfer && priorTransfer.phase !== "committed") {
+        throw new Error("Store authority transfer is incomplete; refresh AKK list and resume transfer_store_authority; no terminal input is permitted");
+    }
+    if (previousStore && store !== previousStore && sameThread) {
+        throw new Error("native thread Store authority changed; refusing a stale writer; refresh AKK list");
+    }
+    if (priorTransfer && (!store || !hasIds)) {
+        throw new Error("a Store authority transfer cannot be erased by a stale ledger write");
+    }
+}
+//# sourceMappingURL=native-store-authority-ledger.js.map

package/dist/src/native-store-authority-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-store-authority-ledger.js","sourceRoot":"","sources":["../../src/native-store-authority-ledger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACtH,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAEvE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,yFAAyF;AACzF,MAAM,UAAU,yBAAyB,CAAC,QAA4B,EAAE,QAAgB,EACtF,aAAsB;IACtB,MAAM,aAAa,GAAG,WAAW,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,QAAQ,IAAI,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,aAAa;QAAE,2BAA2B,CAAC,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7H,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC3C,MAAM,cAAc,GAAG,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,aAAa,KAAK,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACnE,4EAA4E;IAC5E,IAAI,aAAa;QAAE,OAAO,QAAQ,CAAC;IACnC,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACzD,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,EAAE,GAAG,QAAQ;QAClB,eAAe,EAAE,SAAS,IAAI,UAAU,IAAI,oBAAoB,CAAC,cAAc,EAAE,KAAK,CAAC;YACrF,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,cAAc,EAAE,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC;gBACnE,SAAS,EAAE,KAAK,EAAE,KAAK;gBACvB,GAAG,CAAC,SAAS,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAC3E,GAAG,CAAC,SAAS,IAAI,UAAU,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjG,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAGpC;IACC,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAC1E,IAAI,aAAa,IAAI,aAAa,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,8HAA8H,CAAC,CAAC;IAClJ,CAAC;IACD,IAAI,aAAa,IAAI,KAAK,KAAK,aAAa,IAAI,UAAU,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,aAAa,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC"}

package/dist/src/native-store-authority-projection.d.ts

@@ -0,0 +1,6 @@
+type Row = Record<string, unknown>;
+/** Apply a verified Store conflict after ordinary action selection, including physical Send overrides. */
+export declare function withNativeStoreAuthorityConflict(row: Row, authorityValue: unknown, recoveryActions?: Row): Row;
+/** Keep authority fingerprints private while publishing the independently authorized transfer offer. */
+export declare function projectNativeStoreAuthority(terminal: Row, observationValue: unknown, mutationsAllowed: boolean): Row;
+export {};

package/dist/src/native-store-authority-projection.js

@@ -0,0 +1,68 @@
+import { nonBlankString, recordValue } from "./value-guards.js";
+const readActions = new Set(["status", "watch", "list_resumable_threads"]);
+const readCapabilities = new Set(["status", "watch", "list_resumable_threads", "interaction_notify"]);
+function readOnlyActions(value) {
+    return Object.fromEntries(Object.entries(recordValue(value) ?? {}).filter(([name]) => readActions.has(name)));
+}
+function readOnlyManagedRecord(value) {
+    const record = recordValue(value);
+    if (!record)
+        return value;
+    return { ...record, ...(record.actionable !== undefined ? { actionable: false } : {}), ...(record.available_actions ? {
+            available_actions: readOnlyActions(record.available_actions)
+        } : {}) };
+}
+function readOnlyManagement(value) {
+    const managed = recordValue(value);
+    if (!managed)
+        return undefined;
+    return { ...managed,
+        ...(managed.current_turn ? { current_turn: readOnlyManagedRecord(managed.current_turn) } : {}),
+        ...(managed.recent_turn ? { recent_turn: readOnlyManagedRecord(managed.recent_turn) } : {}),
+        ...(Array.isArray(managed.history) ? { history: managed.history.map(readOnlyManagedRecord) } : {}) };
+}
+/** Apply a verified Store conflict after ordinary action selection, including physical Send overrides. */
+export function withNativeStoreAuthorityConflict(row, authorityValue, recoveryActions = {}) {
+    const authority = recordValue(authorityValue);
+    if (!authority || !["conflict", "transferring"].includes(String(authority.state)))
+        return row;
+    const send = authority.send_after_transfer === true ? recordValue(recordValue(row.available_actions)?.send) : undefined;
+    const capabilities = Object.fromEntries(Object.entries(recordValue(row.capabilities) ?? {})
+        .map(([key, value]) => [key, readCapabilities.has(key) ? value : false]));
+    const { handoff_decision: _handoff, send_blocked_reason: _sendBlocked, ...safe } = row;
+    const managed = readOnlyManagement(row.managed);
+    return { ...safe, management_state: "conflict", native_store_authority: authority,
+        management_conflict: { code: "native_thread_store_authority", ...authority },
+        next_action: recoveryActions.transfer_store_authority ? "transfer_store_authority" : send ? "send" : "inspect_store_authority",
+        ...(recordValue(row.interaction_hint) ? { interaction_hint: { ...recordValue(row.interaction_hint), actionable: false } } : {}),
+        ...(row.interaction_state ? { interaction_state: Array.isArray(row.interaction_state)
+                ? row.interaction_state.map(readOnlyManagedRecord) : readOnlyManagedRecord(row.interaction_state) } : {}),
+        ...(!send ? { send_blocked_reason: authority.reason ?? "native_thread_store_authority" } : {}),
+        capabilities: { ...capabilities, send: Boolean(send), transfer_store_authority: Boolean(recoveryActions.transfer_store_authority) },
+        available_actions: { ...readOnlyActions(row.available_actions), ...(send ? { send } : {}), ...recoveryActions },
+        ...(managed ? { managed } : {}) };
+}
+/** Keep authority fingerprints private while publishing the independently authorized transfer offer. */
+export function projectNativeStoreAuthority(terminal, observationValue, mutationsAllowed) {
+    const observation = recordValue(observationValue);
+    if (!observation || !["conflict", "transferring"].includes(String(observation.state)))
+        return terminal;
+    const authority = { state: observation.state, reason: observation.reason,
+        source_store_dir: observation.sourceStoreDir, session_id: observation.sessionId,
+        generation: observation.generation, owner_status: observation.ownerStatus,
+        transfer_eligible: observation.transferEligible === true,
+        automatic_eligible: observation.automaticEligible === true,
+        send_after_transfer: observation.automaticEligible === true && mutationsAllowed &&
+            !terminal.management_conflict && !terminal.management_unavailable &&
+            !["conflict", "unavailable"].includes(String(terminal.management_state)) &&
+            Boolean(recordValue(recordValue(terminal.available_actions)?.send)) };
+    const fingerprint = nonBlankString(observation.fingerprint);
+    const id = nonBlankString(terminal.id ?? terminal.conversation_id);
+    const recovery = mutationsAllowed && observation.transferEligible === true && fingerprint && id
+        ? { transfer_store_authority: { tool: "agent_knock_knock_reconcile_binding", requires_user_intent: true,
+                ...(observation.ownerStatus === "legacy" ? { missing_required: ["maintenance_acknowledgement"] } : {}),
+                arguments: { operation: "transfer_store_authority", terminal_id: id, expected_authority_token: fingerprint } } }
+        : {};
+    return withNativeStoreAuthorityConflict(terminal, authority, recovery);
+}
+//# sourceMappingURL=native-store-authority-projection.js.map

package/dist/src/native-store-authority-projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-store-authority-projection.js","sourceRoot":"","sources":["../../src/native-store-authority-projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC;AAC3E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAEtG,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CACnF,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACpH,iBAAiB,EAAE,eAAe,CAAC,MAAM,CAAC,iBAAiB,CAAC;SAC7D,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,EAAE,GAAG,OAAO;QACjB,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,qBAAqB,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACzG,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,gCAAgC,CAAC,GAAQ,EAAE,cAAuB,EAAE,eAAe,GAAQ,EAAE;IAC3G,MAAM,SAAS,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;IAC9C,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IAC9F,MAAM,IAAI,GAAG,SAAS,CAAC,mBAAmB,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxH,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;SACxF,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;IACvF,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,EAAE,GAAG,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,sBAAsB,EAAE,SAAS;QAC/E,mBAAmB,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,GAAG,SAAS,EAAE;QAC5E,WAAW,EAAE,eAAe,CAAC,wBAAwB,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,yBAAyB;QAC9H,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/H,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBACnF,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3G,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,MAAM,IAAI,+BAA+B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,YAAY,EAAE,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,wBAAwB,EAAE,OAAO,CAAC,eAAe,CAAC,wBAAwB,CAAC,EAAE;QACnI,iBAAiB,EAAE,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,eAAe,EAAE;QAC/G,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,2BAA2B,CAAC,QAAa,EAAE,gBAAyB,EAAE,gBAAyB;IAC7G,MAAM,WAAW,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAClD,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvG,MAAM,SAAS,GAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM;QAC3E,gBAAgB,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,EAAE,WAAW,CAAC,SAAS;QAC/E,UAAU,EAAE,WAAW,CAAC,UAAU,EAAE,YAAY,EAAE,WAAW,CAAC,WAAW;QACzE,iBAAiB,EAAE,WAAW,CAAC,gBAAgB,KAAK,IAAI;QACxD,kBAAkB,EAAE,WAAW,CAAC,iBAAiB,KAAK,IAAI;QAC1D,mBAAmB,EAAE,WAAW,CAAC,iBAAiB,KAAK,IAAI,IAAI,gBAAgB;YAC7E,CAAC,QAAQ,CAAC,mBAAmB,IAAI,CAAC,QAAQ,CAAC,sBAAsB;YACjE,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YACxE,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,EAAE,GAAG,cAAc,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,eAAe,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,gBAAgB,IAAI,WAAW,CAAC,gBAAgB,KAAK,IAAI,IAAI,WAAW,IAAI,EAAE;QAC7F,CAAC,CAAC,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,qCAAqC,EAAE,oBAAoB,EAAE,IAAI;gBACnG,GAAG,CAAC,WAAW,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtG,SAAS,EAAE,EAAE,SAAS,EAAE,0BAA0B,EAAE,WAAW,EAAE,EAAE,EAAE,wBAAwB,EAAE,WAAW,EAAE,EAAE,EAAE;QACpH,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,gCAAgC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACzE,CAAC"}

package/dist/src/native-store-authority-runtime.d.ts

@@ -0,0 +1,9 @@
+interface RuntimeAuthorityRequest {
+    nativeThreadId: string;
+    storeDir: string;
+    runtimeDir: string;
+}
+/** Native backend access must not bypass an existing managed terminal authority. */
+export declare function assertNativeRuntimeStoreAuthority(input: RuntimeAuthorityRequest): void;
+export declare function withNativeRuntimeStoreAuthority<T>(input: RuntimeAuthorityRequest, action: () => Promise<T>): Promise<T>;
+export {};

package/dist/src/native-store-authority-runtime.js

@@ -0,0 +1,77 @@
+import fs from "node:fs";
+import path from "node:path";
+import { readJsonFileNoFollow } from "./durable-json-file.js";
+import { nativeAuthorityStore, nativeAuthorityThreadIds, canonicalAuthorityStore } from "./native-store-authority.js";
+import { associateTerminalEndpointEvidence } from "./terminal-control-ref.js";
+import { createTerminalDispatchRepositoryCliAdapter } from "./terminal-dispatch-repository-cli-adapter.js";
+import { captureStoreOwnerIdentity } from "./store-owner-identity.js";
+import { registerStoreOwnerIdentity } from "./store-owner-registry.js";
+import { withStoreWriterLease } from "./store.js";
+import { cliEnv } from "./cli-runtime-context.js";
+import { recordValue } from "./value-guards.js";
+function matchingLedgers(input) {
+    const directory = path.join(input.runtimeDir, "terminal-dispatch");
+    let names;
+    try {
+        names = fs.readdirSync(directory);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return [];
+        throw error;
+    }
+    return names.filter(name => /^terminal-dispatch-[0-9a-f]+\.json$/u.test(name)).flatMap(name => {
+        const ledger = recordValue(readJsonFileNoFollow(path.join(directory, name), "terminal authority ledger"));
+        if (!ledger)
+            throw new Error("terminal authority ledger is unreadable; refusing native mutation");
+        return nativeAuthorityThreadIds(ledger).includes(input.nativeThreadId.toLowerCase()) ? [ledger] : [];
+    });
+}
+/** Native backend access must not bypass an existing managed terminal authority. */
+export function assertNativeRuntimeStoreAuthority(input) {
+    for (const ledger of matchingLedgers(input)) {
+        const transfer = recordValue(ledger.store_authority_transfer);
+        if (nativeAuthorityStore(ledger) !== canonicalAuthorityStore(input.storeDir) || transfer && transfer.phase !== "committed") {
+            throw new Error("native thread has conflicting or transferring Store authority; refresh AKK list and use " +
+                "transfer_store_authority (agent_knock_knock_reconcile_binding operation=transfer_store_authority); no native input sent");
+        }
+    }
+}
+function ledgerControl(ledger) {
+    const value = recordValue(ledger.terminal_control);
+    if (!value || !["herdr", "tmux"].includes(String(value.kind)))
+        throw new Error("unverified authority terminal control");
+    const common = { target: String(value.target), session: String(value.session ?? ""),
+        socketPath: typeof value.socket_path === "string" ? value.socket_path : undefined,
+        panePid: Number(value.pane_pid), capabilities: [] };
+    const control = value.kind === "herdr" ? { ...common, kind: "herdr",
+        workspaceId: String(value.workspace_id), tabId: String(value.tab_id), paneId: String(value.pane_id),
+        terminalId: String(value.terminal_id), sessionDir: typeof value.session_dir === "string" ? value.session_dir : undefined }
+        : { ...common, kind: "tmux", window: 0, pane: 0 };
+    return ledger.terminal_endpoint ? associateTerminalEndpointEvidence(control, ledger.terminal_endpoint) : control;
+}
+export async function withNativeRuntimeStoreAuthority(input, action) {
+    const repository = createTerminalDispatchRepositoryCliAdapter();
+    if (path.resolve(input.runtimeDir) !== path.resolve(repository.runtimeDir()))
+        throw new Error("native authority runtime namespace changed");
+    const controls = [...new Map(matchingLedgers(input).map(ledger => {
+            const control = ledgerControl(ledger);
+            return [repository.runtimeKey(control), control];
+        })).entries()].sort(([a], [b]) => a.localeCompare(b)).map(([, control]) => control);
+    const releases = [];
+    try {
+        for (const control of controls)
+            releases.push(repository.acquire(input.storeDir, control));
+        assertNativeRuntimeStoreAuthority(input);
+        if (controls.length)
+            withStoreWriterLease(input.storeDir, () => {
+                registerStoreOwnerIdentity(captureStoreOwnerIdentity(input.storeDir, cliEnv()));
+            });
+        return await action();
+    }
+    finally {
+        for (const release of releases.reverse())
+            release();
+    }
+}
+//# sourceMappingURL=native-store-authority-runtime.js.map

package/dist/src/native-store-authority-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-store-authority-runtime.js","sourceRoot":"","sources":["../../src/native-store-authority-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtH,OAAO,EAAE,iCAAiC,EAA2B,MAAM,2BAA2B,CAAC;AACvG,OAAO,EAAE,0CAA0C,EAAE,MAAM,+CAA+C,CAAC;AAC3G,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD,SAAS,eAAe,CAAC,KAA8B;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACnE,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QAAC,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAC1C,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACjG,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAC5F,MAAM,MAAM,GAAG,WAAW,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,2BAA2B,CAAC,CAAC,CAAC;QAC1G,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QAClG,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iCAAiC,CAAC,KAA8B;IAC9E,KAAK,MAAM,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAC9D,IAAI,oBAAoB,CAAC,MAAM,CAAC,KAAK,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC3H,MAAM,IAAI,KAAK,CAAC,0FAA0F;gBACxG,yHAAyH,CAAC,CAAC;QAC/H,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAA+B;IACpD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACxH,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QACjF,UAAU,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QACjF,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACtD,MAAM,OAAO,GAAuB,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,OAAO;QACrF,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QACnG,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE;QAC1H,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACpD,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,iCAAiC,CAAC,OAAO,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACnH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAI,KAA8B,EACrF,MAAwB;IACxB,MAAM,UAAU,GAAG,0CAA0C,EAAE,CAAC;IAChE,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC5I,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;YAC/D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACtC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,CAAU,CAAC;QAC5D,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3F,iCAAiC,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,QAAQ,CAAC,MAAM;YAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAC7D,0BAA0B,CAAC,yBAAyB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YAClF,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,MAAM,EAAE,CAAC;IACxB,CAAC;YAAS,CAAC;QAAC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE;YAAE,OAAO,EAAE,CAAC;IAAC,CAAC;AACpE,CAAC"}

package/dist/src/native-store-authority-transfer.d.ts

@@ -0,0 +1,31 @@
+import type { TerminalControlRef } from "./terminal-control-ref.js";
+import type { TerminalDispatchLedgerDocument as Ledger } from "./terminal-dispatch-ledger-codec.js";
+import type { TerminalDispatchRepositoryCliAdapter } from "./terminal-dispatch-repository-cli-adapter.js";
+export interface NativeStoreAuthorityTransferRequest {
+    storeDir: string;
+    terminalControl: TerminalControlRef;
+    expectedAuthorityToken?: string;
+    maintenanceAcknowledgement?: boolean;
+    automatic?: boolean;
+}
+export declare function completedNativeStoreAuthorityReceipt(input: NativeStoreAuthorityTransferRequest, ledger?: Ledger): {
+    transferred: true;
+    transfer_id: string;
+    session_id: string;
+    store_dir: string;
+} | undefined;
+/** Caller holds the shared terminal lock. Store leases are deliberately sequential. */
+export declare function transferNativeStoreAuthorityWhileLocked(input: NativeStoreAuthorityTransferRequest, repository: TerminalDispatchRepositoryCliAdapter): {
+    transferred: true;
+    transfer_id: string;
+    session_id: string;
+    store_dir: string;
+};
+export declare function transferNativeStoreAuthority(input: NativeStoreAuthorityTransferRequest, repository: TerminalDispatchRepositoryCliAdapter): {
+    transferred: true;
+    transfer_id: string;
+    session_id: string;
+    store_dir: string;
+};
+/** Called after the terminal lock and before the destination Store lease. */
+export declare function recoverNativeStoreAuthorityWhileLocked(input: Omit<NativeStoreAuthorityTransferRequest, "automatic">, repository: TerminalDispatchRepositoryCliAdapter): void;

package/dist/src/native-store-authority-transfer.js

@@ -0,0 +1,172 @@
+import { randomUUID } from "node:crypto";
+import { cliEnv } from "./cli-runtime-context.js";
+import { canonicalJson } from "./canonical-json.js";
+import { loadManagedSession, saveManagedSession, listManagedSessions, tryLoadManagedSession } from "./session-store.js";
+import { withStoreWriterLease } from "./store.js";
+import { captureStoreOwnerIdentity } from "./store-owner-identity.js";
+import { readStoreOwnerInventory, registerStoreOwnerIdentity, probeStoreOwnerInventory } from "./store-owner-registry.js";
+import { canonicalAuthorityStore, inspectNativeStoreAuthority, nativeAuthorityWorkSettled } from "./native-store-authority.js";
+import { recordValue } from "./value-guards.js";
+function readJournal(ledger) {
+    const journal = recordValue(ledger.store_authority_transfer);
+    if (!journal || journal.phase === "committed")
+        return undefined;
+    if (journal.version !== 1 || !journal.source_session || !journal.target_session ||
+        typeof journal.source_store_dir !== "string" || typeof journal.target_store_dir !== "string" ||
+        typeof journal.transfer_id !== "string" || !["prepared", "source_retired", "target_created"].includes(String(journal.phase))) {
+        throw new Error("Store authority transfer journal is invalid; preserve evidence and repair it before retrying");
+    }
+    return journal;
+}
+function verifySourceOwner(journal) {
+    const inventory = readStoreOwnerInventory(journal.source_store_dir);
+    if (inventory.fingerprint !== journal.source_inventory)
+        throw new Error("source Store owner registrations changed during transfer; no input sent");
+    if (journal.legacy_acknowledged && inventory.reason === "owner_inventory_absent")
+        return;
+    if (probeStoreOwnerInventory(inventory).state !== "dead")
+        throw new Error("source Store has an active or unverifiable owner; transfer refused; no input sent");
+}
+function prepareJournal(input, ledger) {
+    const inspection = inspectNativeStoreAuthority({ ...input, ledger });
+    if (!inspection.transferEligible || !inspection.session || !inspection.sourceStoreDir) {
+        throw new Error(`Store authority transfer refused: ${inspection.reason ?? inspection.state}; no input sent`);
+    }
+    if (input.automatic ? !inspection.automaticEligible : inspection.fingerprint !== input.expectedAuthorityToken) {
+        throw new Error("Store authority changed or is not automatically reclaimable; refresh AKK list; no input sent");
+    }
+    if (inspection.ownerStatus === "legacy" && input.maintenanceAcknowledgement !== true) {
+        throw new Error("legacy Store owner is unknown; stop all associated Hosts/writers, then explicitly supply maintenance_acknowledgement=true");
+    }
+    const source = inspection.session;
+    const now = new Date().toISOString();
+    const id = randomUUID();
+    const target = { ...source, revision: undefined, status: "bound",
+        binding: { ...source.binding, binding_id: randomUUID(), generation: source.binding.generation + 1,
+            bound_at: now, last_verified_at: now },
+        updated_at: now, detached_at: undefined, quarantine_reason: undefined,
+        authority_transfer: undefined,
+        authority_received: { transfer_id: id, source_store_dir: inspection.sourceStoreDir, received_at: now } };
+    return { version: 1, transfer_id: id, phase: "prepared", source_store_dir: inspection.sourceStoreDir,
+        target_store_dir: canonicalAuthorityStore(input.storeDir),
+        source_inventory: readStoreOwnerInventory(inspection.sourceStoreDir).fingerprint,
+        source_session: source, target_session: JSON.parse(JSON.stringify(target)),
+        generation: (inspection.generation ?? 1) + 1,
+        automatic: input.automatic === true, legacy_acknowledged: inspection.ownerStatus === "legacy",
+        started_at: now, initial_authority_token: input.expectedAuthorityToken };
+}
+export function completedNativeStoreAuthorityReceipt(input, ledger) {
+    const journal = recordValue(ledger?.store_authority_transfer);
+    if (!journal || journal.phase !== "committed" || journal.target_store_dir !== canonicalAuthorityStore(input.storeDir) ||
+        (input.automatic ? journal.automatic !== true : !input.expectedAuthorityToken || input.expectedAuthorityToken !== journal.initial_authority_token))
+        return undefined;
+    return { transferred: true, transfer_id: String(journal.transfer_id),
+        session_id: String(recordValue(journal.target_session)?.session_id), store_dir: String(journal.target_store_dir) };
+}
+function targetAvailable(journal) {
+    const existing = listManagedSessions(journal.target_store_dir);
+    for (const session of existing) {
+        if ((session.session_id === journal.target_session.session_id ||
+            session.binding?.native_thread_id === journal.target_session.binding?.native_thread_id) &&
+            session.authority_received?.transfer_id !== journal.transfer_id) {
+            throw new Error("destination Store already has a competing Session; transfer refused");
+        }
+    }
+}
+/** Caller holds the shared terminal lock. Store leases are deliberately sequential. */
+export function transferNativeStoreAuthorityWhileLocked(input, repository) {
+    let ledger = repository.load(input.terminalControl);
+    if (!ledger || !repository.matchesControl(ledger, input.terminalControl)) {
+        throw new Error("Store authority terminal incarnation changed; refresh AKK list; no input sent");
+    }
+    const completed = completedNativeStoreAuthorityReceipt(input, ledger);
+    if (completed)
+        return completed;
+    let journal = readJournal(ledger);
+    if (journal) {
+        const inspection = inspectNativeStoreAuthority({ ...input, ledger });
+        if (canonicalAuthorityStore(input.storeDir) !== journal.target_store_dir ||
+            (input.automatic ? !journal.automatic : inspection.fingerprint !== input.expectedAuthorityToken)) {
+            throw new Error("unfinished Store authority transfer belongs to another destination or snapshot");
+        }
+    }
+    else
+        journal = prepareJournal(input, ledger);
+    const transaction = journal;
+    const persist = (phase) => {
+        transaction.phase = phase;
+        ledger = { ...ledger, store_authority_transfer: { ...transaction } };
+        repository.save(input.terminalControl, ledger, { authorityTransfer: true });
+    };
+    // Upgrade/check destination before installing a durable fence. Once prepared,
+    // every crash point is resumed by this journal, without any terminal input.
+    withStoreWriterLease(transaction.target_store_dir, () => {
+        targetAvailable(transaction);
+        const owner = captureStoreOwnerIdentity(transaction.target_store_dir, cliEnv());
+        registerStoreOwnerIdentity(owner);
+        if (!readStoreOwnerInventory(transaction.target_store_dir).complete)
+            throw new Error("destination owner inventory is incomplete; source authority unchanged");
+        transaction.target_owner ??= owner;
+    });
+    withStoreWriterLease(transaction.source_store_dir, () => {
+        verifySourceOwner(transaction);
+        const source = loadManagedSession(transaction.source_store_dir, transaction.source_session.session_id);
+        if (source.authority_transfer?.transfer_id === transaction.transfer_id)
+            return;
+        if (canonicalJson(source) !== canonicalJson(transaction.source_session) ||
+            !nativeAuthorityWorkSettled(transaction.source_store_dir, source)) {
+            throw new Error("source Session/work changed during authority transfer; no input sent");
+        }
+        persist("prepared");
+        saveManagedSession(transaction.source_store_dir, { ...source, status: "quarantined",
+            quarantine_reason: "native Store authority transferred", updated_at: transaction.started_at,
+            authority_transfer: { transfer_id: transaction.transfer_id, target_store_dir: transaction.target_store_dir,
+                transferred_at: transaction.started_at } }, { expectedRevision: source.revision });
+        persist("source_retired");
+    });
+    withStoreWriterLease(transaction.target_store_dir, () => {
+        verifySourceOwner(transaction);
+        targetAvailable(transaction);
+        const present = tryLoadManagedSession(transaction.target_store_dir, transaction.target_session.session_id);
+        const { revision: _revision, ...presentBody } = present ?? {};
+        if (present && canonicalJson(presentBody) !== canonicalJson(transaction.target_session)) {
+            throw new Error("destination Session changed before authority transfer commit; preserve the journal and inspect the destination");
+        }
+        if (!present)
+            saveManagedSession(transaction.target_store_dir, transaction.target_session, { expectedRevision: null });
+        persist("target_created");
+        const owner = captureStoreOwnerIdentity(transaction.target_store_dir, cliEnv());
+        registerStoreOwnerIdentity(owner);
+        const session = loadManagedSession(transaction.target_store_dir, transaction.target_session.session_id);
+        // No old Turn is adopted or replayed. Its callback/history stay in source.
+        ledger = { status: "resolved", store_dir: transaction.target_store_dir,
+            native_thread_id: session.binding.native_thread_id, session_id: session.session_id,
+            binding: session.binding, resolved_at: new Date().toISOString(),
+            reason: "native Store authority transferred without terminal input",
+            store_authority: { version: 1, generation: transaction.generation,
+                store_dir: transaction.target_store_dir, owner },
+            store_authority_transfer: { ...transaction, phase: "committed" } };
+        repository.save(input.terminalControl, ledger, { authorityTransfer: true });
+    });
+    return { transferred: true, transfer_id: transaction.transfer_id,
+        session_id: transaction.target_session.session_id, store_dir: transaction.target_store_dir };
+}
+export function transferNativeStoreAuthority(input, repository) {
+    const release = repository.acquire(input.storeDir, input.terminalControl);
+    try {
+        return transferNativeStoreAuthorityWhileLocked(input, repository);
+    }
+    finally {
+        release();
+    }
+}
+/** Called after the terminal lock and before the destination Store lease. */
+export function recoverNativeStoreAuthorityWhileLocked(input, repository) {
+    const ledger = repository.load(input.terminalControl);
+    const inspection = inspectNativeStoreAuthority({ ...input, ledger });
+    const journal = ledger && readJournal(ledger);
+    if (inspection.automaticEligible || journal?.automatic && journal.target_store_dir === canonicalAuthorityStore(input.storeDir)) {
+        transferNativeStoreAuthorityWhileLocked({ ...input, automatic: true }, repository);
+    }
+}
+//# sourceMappingURL=native-store-authority-transfer.js.map

package/dist/src/native-store-authority-transfer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-store-authority-transfer.js","sourceRoot":"","sources":["../../src/native-store-authority-transfer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACxH,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAA2B,MAAM,2BAA2B,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAC1H,OAAO,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAI/H,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA2BhD,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC7D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IAChE,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,cAAc;QAC7E,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ;QAC5F,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC/H,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,OAAqC,CAAC;AAC/C,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAwB;IACjD,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACpE,IAAI,SAAS,CAAC,WAAW,KAAK,OAAO,CAAC,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IACnJ,IAAI,OAAO,CAAC,mBAAmB,IAAI,SAAS,CAAC,MAAM,KAAK,wBAAwB;QAAE,OAAO;IACzF,IAAI,wBAAwB,CAAC,SAAS,CAAC,CAAC,KAAK,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;AACjK,CAAC;AAED,SAAS,cAAc,CAAC,KAA0C,EAAE,MAAc;IAChF,MAAM,UAAU,GAAG,2BAA2B,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,UAAU,CAAC,gBAAgB,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,KAAK,iBAAiB,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,KAAK,KAAK,CAAC,sBAAsB,EAAE,CAAC;QAC9G,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,UAAU,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,0BAA0B,KAAK,IAAI,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,2HAA2H,CAAC,CAAC;IAC/I,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,MAAM,GAAwB,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO;QACnF,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,OAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,OAAQ,CAAC,UAAU,GAAG,CAAC;YACjG,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE;QACxC,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS;QACrE,kBAAkB,EAAE,SAAS;QAC7B,kBAAkB,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,gBAAgB,EAAE,UAAU,CAAC,cAAc,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC;IAC3G,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,CAAC,cAAc;QAClG,gBAAgB,EAAE,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC;QACzD,gBAAgB,EAAE,uBAAuB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,WAAW;QAChF,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAwB;QACjG,UAAU,EAAE,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC;QAC5C,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,mBAAmB,EAAE,UAAU,CAAC,WAAW,KAAK,QAAQ;QAC7F,UAAU,EAAE,GAAG,EAAE,uBAAuB,EAAE,KAAK,CAAC,sBAAsB,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,KAA0C,EAAE,MAAe;IAC9G,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAC9D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,IAAI,OAAO,CAAC,gBAAgB,KAAK,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC;QACnH,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,IAAI,KAAK,CAAC,sBAAsB,KAAK,OAAO,CAAC,uBAAuB,CAAC;QAAE,OAAO,SAAS,CAAC;IACvK,OAAO,EAAE,WAAW,EAAE,IAAa,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QAC3E,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;AACvH,CAAC;AAED,SAAS,eAAe,CAAC,OAAwB;IAC/C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,cAAc,CAAC,UAAU;YAC3D,OAAO,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,gBAAgB,CAAC;YACvF,OAAO,CAAC,kBAAkB,EAAE,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,uCAAuC,CACrD,KAA0C,EAAE,UAAgD;IAE5F,IAAI,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,SAAS,GAAG,oCAAoC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACtE,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,UAAU,GAAG,2BAA2B,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,IAAI,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,gBAAgB;YACtE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,KAAK,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACnG,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;;QAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,OAAO,CAAC;IAC5B,MAAM,OAAO,GAAG,CAAC,KAA+B,EAAE,EAAE;QAClD,WAAW,CAAC,KAAK,GAAG,KAAK,CAAC;QAC1B,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,wBAAwB,EAAE,EAAE,GAAG,WAAW,EAAE,EAAE,CAAC;QACrE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC;IACF,8EAA8E;IAC9E,4EAA4E;IAC5E,oBAAoB,CAAC,WAAW,CAAC,gBAAgB,EAAE,GAAG,EAAE;QACtD,eAAe,CAAC,WAAW,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,yBAAyB,CAAC,WAAW,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC;QAChF,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC9J,WAAW,CAAC,YAAY,KAAK,KAAK,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,oBAAoB,CAAC,WAAW,CAAC,gBAAgB,EAAE,GAAG,EAAE;QACtD,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,gBAAgB,EAAE,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACvG,IAAI,MAAM,CAAC,kBAAkB,EAAE,WAAW,KAAK,WAAW,CAAC,WAAW;YAAE,OAAO;QAC/E,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC,WAAW,CAAC,cAAc,CAAC;YACrE,CAAC,0BAA0B,CAAC,WAAW,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,CAAC,UAAU,CAAC,CAAC;QACpB,kBAAkB,CAAC,WAAW,CAAC,gBAAgB,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,aAAa;YACjF,iBAAiB,EAAE,oCAAoC,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU;YAC3F,kBAAkB,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;gBACxG,cAAc,EAAE,WAAW,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,QAAS,EAAE,CAAC,CAAC;QACxF,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,oBAAoB,CAAC,WAAW,CAAC,gBAAgB,EAAE,GAAG,EAAE;QACtD,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC/B,eAAe,CAAC,WAAW,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,qBAAqB,CAAC,WAAW,CAAC,gBAAgB,EAAE,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC3G,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;QAC9D,IAAI,OAAO,IAAI,aAAa,CAAC,WAAW,CAAC,KAAK,aAAa,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC,CAAC;QACpI,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,kBAAkB,CAAC,WAAW,CAAC,gBAAgB,EAAE,WAAW,CAAC,cAAc,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QACvH,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,yBAAyB,CAAC,WAAW,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC;QAChF,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,gBAAgB,EAAE,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACxG,2EAA2E;QAC3E,MAAM,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,gBAAgB;YACpE,gBAAgB,EAAE,OAAO,CAAC,OAAQ,CAAC,gBAAgB,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU;YACnF,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC/D,MAAM,EAAE,2DAA2D;YACnE,eAAe,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU;gBAC/D,SAAS,EAAE,WAAW,CAAC,gBAAgB,EAAE,KAAK,EAAE;YAClD,wBAAwB,EAAE,EAAE,GAAG,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;QACrE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW;QAC9D,UAAU,EAAE,WAAW,CAAC,cAAc,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,gBAAgB,EAAE,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAA0C,EACrF,UAAgD;IAChD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC1E,IAAI,CAAC;QAAC,OAAO,uCAAuC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAAC,CAAC;YAClE,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,sCAAsC,CAAC,KAA6D,EAClH,UAAgD;IAChD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,2BAA2B,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,iBAAiB,IAAI,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC,gBAAgB,KAAK,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/H,uCAAuC,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;IACrF,CAAC;AACH,CAAC"}

package/dist/src/native-store-authority-watch.d.ts

@@ -0,0 +1,9 @@
+import { type TerminalControlRef } from "./terminal-control-ref.js";
+/** Register the creating Host atomically with the Watch's durable authority. */
+export declare function withNativeAuthorityWatchOwner<T>(storeDir: string, create: () => T): T;
+/** Read only: a transfer must retain outstanding Watch observation/callback ownership. */
+export declare function hasOutstandingNativeAuthorityWatch(input: {
+    storeDir: string;
+    terminalControl: TerminalControlRef;
+    nativeThreadId?: string;
+}): boolean;