@sentropic/h2a-cli 0.75.0 → 0.78.0

package/dist/runtime/local-files/lease.d.ts

@@ -1,62 +0,0 @@
-/**
- * Cross-host lease lock for the local-files store (DEC-065).
- *
- * The advisory lock in `locks.ts` (DEC-036) recovers stale locks via
- * `process.kill(pid, 0)` — which only works **same-machine**. A store shared
- * across Pods on a ReadWriteMany volume (Scenario B of DEC-056) has holders on
- * different nodes that cannot probe each other's PIDs, so the PID model is
- * unsafe there.
- *
- * This module replaces PID-liveness with a **time-based lease**:
- *
- * - The lock file carries `{ holder, nonce, acquiredAt, renewedAt, leaseMs,
- *   fencingToken }`.
- * - A lease is *expired* when `now - renewedAt > leaseMs`. Any contender may
- *   then steal it. Staleness is decided purely by wall-clock time, so it works
- *   regardless of which host or Pod held it.
- * - The atomic gate is `openSync(path, "wx")` (`O_CREAT | O_EXCL`): only one
- *   contender wins the create, even across hosts on a POSIX-compliant shared
- *   filesystem.
- * - `nonce` is a random per-acquisition id; release only unlinks the file if
- *   the on-disk nonce still matches ours (so a holder that overran its lease
- *   and was stolen from does not delete the new holder's lease).
- * - `fencingToken` is incremented on every steal (best-effort monotonic) and
- *   returned to the caller for observability / downstream fencing.
- *
- * Clock-skew caveat: `leaseMs` must comfortably exceed (a) the longest
- * critical section plus (b) the maximum clock skew between hosts. The store's
- * read-then-write sections are sub-second, so the default 30s lease leaves a
- * wide margin. This is documented in DEC-065.
- */
-import { type WithLockOptions } from "./locks.js";
-export interface LeaseRecord {
-    readonly holder: string;
-    readonly nonce: string;
-    readonly acquiredAt: string;
-    readonly renewedAt: string;
-    readonly leaseMs: number;
-    readonly fencingToken: number;
-}
-export interface WithLeaseOptions extends WithLockOptions {
-    /** Lease duration in ms. A lease older than this is stealable. Default 30000. */
-    readonly leaseMs?: number;
-    /** Holder label (host + pid by default). Informational. */
-    readonly holder?: string;
-}
-export interface LeaseHandle {
-    readonly nonce: string;
-    readonly fencingToken: number;
-}
-/**
- * Synchronous lease-locked critical section. Mirrors `withLockSync` but uses
- * the time-based lease above, so it is safe for cross-host (cross-Pod) shared
- * stores. Returns `fn()`'s result. Throws `LockTimeoutError` if the lease
- * cannot be acquired within `timeoutMs`.
- *
- * The handle (nonce + fencingToken) is exposed to `fn` so callers that need
- * to fence a downstream side-effect can read the token.
- */
-export declare function withLeaseSync<T>(lockPath: string, fn: (handle: LeaseHandle) => T, options?: WithLeaseOptions): T;
-/** Async variant of {@link withLeaseSync}. */
-export declare function withLease<T>(lockPath: string, fn: (handle: LeaseHandle) => T | Promise<T>, options?: WithLeaseOptions): Promise<T>;
-//# sourceMappingURL=lease.d.ts.map

package/dist/runtime/local-files/lease.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"lease.d.ts","sourceRoot":"","sources":["../../../src/runtime/local-files/lease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAYH,OAAO,EAAoB,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAEpE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAiB,SAAQ,eAAe;IACvD,iFAAiF;IACjF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AA2JD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAC7B,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,CAAC,EAC9B,OAAO,GAAE,gBAAqB,GAC7B,CAAC,CAqCH;AAED,8CAA8C;AAC9C,wBAAsB,SAAS,CAAC,CAAC,EAC/B,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAC3C,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,CAAC,CAAC,CAiCZ"}

package/dist/runtime/local-files/lease.js

@@ -1,249 +0,0 @@
-/**
- * Cross-host lease lock for the local-files store (DEC-065).
- *
- * The advisory lock in `locks.ts` (DEC-036) recovers stale locks via
- * `process.kill(pid, 0)` — which only works **same-machine**. A store shared
- * across Pods on a ReadWriteMany volume (Scenario B of DEC-056) has holders on
- * different nodes that cannot probe each other's PIDs, so the PID model is
- * unsafe there.
- *
- * This module replaces PID-liveness with a **time-based lease**:
- *
- * - The lock file carries `{ holder, nonce, acquiredAt, renewedAt, leaseMs,
- *   fencingToken }`.
- * - A lease is *expired* when `now - renewedAt > leaseMs`. Any contender may
- *   then steal it. Staleness is decided purely by wall-clock time, so it works
- *   regardless of which host or Pod held it.
- * - The atomic gate is `openSync(path, "wx")` (`O_CREAT | O_EXCL`): only one
- *   contender wins the create, even across hosts on a POSIX-compliant shared
- *   filesystem.
- * - `nonce` is a random per-acquisition id; release only unlinks the file if
- *   the on-disk nonce still matches ours (so a holder that overran its lease
- *   and was stolen from does not delete the new holder's lease).
- * - `fencingToken` is incremented on every steal (best-effort monotonic) and
- *   returned to the caller for observability / downstream fencing.
- *
- * Clock-skew caveat: `leaseMs` must comfortably exceed (a) the longest
- * critical section plus (b) the maximum clock skew between hosts. The store's
- * read-then-write sections are sub-second, so the default 30s lease leaves a
- * wide margin. This is documented in DEC-065.
- */
-import { closeSync, openSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
-import { hostname } from "node:os";
-import { randomBytes } from "node:crypto";
-import { LockTimeoutError } from "./locks.js";
-const DEFAULT_LEASE_MS = 30000;
-const DEFAULT_TIMEOUT_MS = 5000;
-const DEFAULT_POLL_MS = 50;
-function nowMs() {
-    return Date.now();
-}
-function parseLease(raw) {
-    try {
-        const p = JSON.parse(raw);
-        if (p &&
-            typeof p.holder === "string" &&
-            typeof p.nonce === "string" &&
-            typeof p.renewedAt === "string" &&
-            typeof p.leaseMs === "number" &&
-            typeof p.fencingToken === "number") {
-            return {
-                holder: p.holder,
-                nonce: p.nonce,
-                acquiredAt: typeof p.acquiredAt === "string" ? p.acquiredAt : p.renewedAt,
-                renewedAt: p.renewedAt,
-                leaseMs: p.leaseMs,
-                fencingToken: p.fencingToken
-            };
-        }
-    }
-    catch {
-        /* malformed — treat as absent */
-    }
-    return undefined;
-}
-function isExpired(lease, at) {
-    const renewed = Date.parse(lease.renewedAt);
-    if (Number.isNaN(renewed))
-        return true;
-    return at - renewed > lease.leaseMs;
-}
-function writeLease(lockPath, record) {
-    const fd = openSync(lockPath, "wx");
-    try {
-        writeFileSync(fd, JSON.stringify(record));
-    }
-    finally {
-        closeSync(fd);
-    }
-}
-function attemptAcquire(lockPath, holder, leaseMs) {
-    const at = nowMs();
-    const iso = new Date(at).toISOString();
-    const nonce = randomBytes(8).toString("hex");
-    // Fresh create path — token starts at 1.
-    const fresh = {
-        holder,
-        nonce,
-        acquiredAt: iso,
-        renewedAt: iso,
-        leaseMs,
-        fencingToken: 1
-    };
-    try {
-        writeLease(lockPath, fresh);
-        return { ok: true, handle: { nonce, fencingToken: 1 } };
-    }
-    catch (err) {
-        if (err.code !== "EEXIST")
-            throw err;
-    }
-    // Lock exists — read and decide.
-    let raw;
-    try {
-        raw = readFileSync(lockPath, "utf8");
-    }
-    catch {
-        // Released between EEXIST and read — caller retries.
-        return { ok: false };
-    }
-    const existing = parseLease(raw);
-    if (existing && !isExpired(existing, at)) {
-        return { ok: false, lastSeen: existing };
-    }
-    // Expired (or malformed) — steal it. Unlink then re-create via O_EXCL so the
-    // create remains the atomic gate; the create-winner writes oldToken+1.
-    const nextToken = (existing?.fencingToken ?? 0) + 1;
-    try {
-        unlinkSync(lockPath);
-    }
-    catch {
-        /* someone else reclaimed first — fall through to retry */
-    }
-    const stolen = {
-        holder,
-        nonce,
-        acquiredAt: iso,
-        renewedAt: iso,
-        leaseMs,
-        fencingToken: nextToken
-    };
-    try {
-        writeLease(lockPath, stolen);
-        return { ok: true, handle: { nonce, fencingToken: nextToken } };
-    }
-    catch (err) {
-        if (err.code === "EEXIST") {
-            // Another contender won the steal — retry from the top next loop.
-            return { ok: false, lastSeen: existing };
-        }
-        throw err;
-    }
-}
-function releaseLease(lockPath, handle) {
-    let raw;
-    try {
-        raw = readFileSync(lockPath, "utf8");
-    }
-    catch {
-        return; // already gone
-    }
-    const current = parseLease(raw);
-    // Only unlink if WE still hold it (nonce match). If a contender stole the
-    // lease after we overran it, leave their lease intact.
-    if (current && current.nonce === handle.nonce) {
-        try {
-            unlinkSync(lockPath);
-        }
-        catch {
-            /* concurrent release — fine */
-        }
-    }
-}
-function busyWaitSync(ms) {
-    const end = Date.now() + ms;
-    const sab = new SharedArrayBuffer(4);
-    const view = new Int32Array(sab);
-    while (Date.now() < end) {
-        const remaining = end - Date.now();
-        if (remaining <= 0)
-            break;
-        Atomics.wait(view, 0, 0, Math.min(remaining, 25));
-    }
-}
-function defaultHolder() {
-    return `${hostname()}:${process.pid}`;
-}
-/**
- * Synchronous lease-locked critical section. Mirrors `withLockSync` but uses
- * the time-based lease above, so it is safe for cross-host (cross-Pod) shared
- * stores. Returns `fn()`'s result. Throws `LockTimeoutError` if the lease
- * cannot be acquired within `timeoutMs`.
- *
- * The handle (nonce + fencingToken) is exposed to `fn` so callers that need
- * to fence a downstream side-effect can read the token.
- */
-export function withLeaseSync(lockPath, fn, options = {}) {
-    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    const pollMs = options.pollMs ?? DEFAULT_POLL_MS;
-    const leaseMs = options.leaseMs ?? DEFAULT_LEASE_MS;
-    const holder = options.holder ?? defaultHolder();
-    const deadline = Date.now() + timeoutMs;
-    let lastSeen;
-    let handle;
-    while (true) {
-        const attempt = attemptAcquire(lockPath, holder, leaseMs);
-        if (attempt.ok) {
-            handle = attempt.handle;
-            break;
-        }
-        lastSeen = attempt.lastSeen ?? lastSeen;
-        if (Date.now() >= deadline) {
-            throw new LockTimeoutError(lockPath, lastSeen
-                ? {
-                    pid: 0,
-                    hostname: lastSeen.holder,
-                    startedAt: lastSeen.acquiredAt
-                }
-                : undefined, timeoutMs);
-        }
-        busyWaitSync(pollMs);
-    }
-    try {
-        return fn(handle);
-    }
-    finally {
-        releaseLease(lockPath, handle);
-    }
-}
-/** Async variant of {@link withLeaseSync}. */
-export async function withLease(lockPath, fn, options = {}) {
-    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    const pollMs = options.pollMs ?? DEFAULT_POLL_MS;
-    const leaseMs = options.leaseMs ?? DEFAULT_LEASE_MS;
-    const holder = options.holder ?? defaultHolder();
-    const deadline = Date.now() + timeoutMs;
-    let lastSeen;
-    let handle;
-    while (true) {
-        const attempt = attemptAcquire(lockPath, holder, leaseMs);
-        if (attempt.ok) {
-            handle = attempt.handle;
-            break;
-        }
-        lastSeen = attempt.lastSeen ?? lastSeen;
-        if (Date.now() >= deadline) {
-            throw new LockTimeoutError(lockPath, lastSeen
-                ? { pid: 0, hostname: lastSeen.holder, startedAt: lastSeen.acquiredAt }
-                : undefined, timeoutMs);
-        }
-        await new Promise((r) => setTimeout(r, pollMs));
-    }
-    try {
-        return await fn(handle);
-    }
-    finally {
-        releaseLease(lockPath, handle);
-    }
-}
-//# sourceMappingURL=lease.js.map

package/dist/runtime/local-files/lease.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"lease.js","sourceRoot":"","sources":["../../../src/runtime/local-files/lease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EACL,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,aAAa,EACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,gBAAgB,EAAwB,MAAM,YAAY,CAAC;AAuBpE,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,SAAS,KAAK;IACZ,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QAClD,IACE,CAAC;YACD,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;YAC5B,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAC3B,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;YAC/B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAC7B,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,EAClC,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,UAAU,EAAE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;gBACzE,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,YAAY,EAAE,CAAC,CAAC,YAAY;aAC7B,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,KAAkB,EAAE,EAAU;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,EAAE,GAAG,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,MAAmB;IACvD,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAMD,SAAS,cAAc,CACrB,QAAgB,EAChB,MAAc,EACd,OAAe;IAEf,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE7C,yCAAyC;IACzC,MAAM,KAAK,GAAgB;QACzB,MAAM;QACN,KAAK;QACL,UAAU,EAAE,GAAG;QACf,SAAS,EAAE,GAAG;QACd,OAAO;QACP,YAAY,EAAE,CAAC;KAChB,CAAC;IACF,IAAI,CAAC;QACH,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;IAClE,CAAC;IAED,iCAAiC;IACjC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;QACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAC3C,CAAC;IAED,6EAA6E;IAC7E,uEAAuE;IACvE,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;IACD,MAAM,MAAM,GAAgB;QAC1B,MAAM;QACN,KAAK;QACL,UAAU,EAAE,GAAG;QACf,SAAS,EAAE,GAAG;QACd,OAAO;QACP,YAAY,EAAE,SAAS;KACxB,CAAC;IACF,IAAI,CAAC;QACH,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,kEAAkE;YAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAC3C,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,MAAmB;IACzD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,eAAe;IACzB,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,0EAA0E;IAC1E,uDAAuD;IACvD,IAAI,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM;QAC1B,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,GAAG,QAAQ,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAgB,EAChB,EAA8B,EAC9B,UAA4B,EAAE;IAE9B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;IAEjD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,IAAI,QAAiC,CAAC;IACtC,IAAI,MAA+B,CAAC;IACpC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACxB,MAAM;QACR,CAAC;QACD,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;QACxC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,gBAAgB,CACxB,QAAQ,EACR,QAAQ;gBACN,CAAC,CAAC;oBACE,GAAG,EAAE,CAAC;oBACN,QAAQ,EAAE,QAAQ,CAAC,MAAM;oBACzB,SAAS,EAAE,QAAQ,CAAC,UAAU;iBAC/B;gBACH,CAAC,CAAC,SAAS,EACb,SAAS,CACV,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAgB,EAChB,EAA2C,EAC3C,UAA4B,EAAE;IAE9B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;IAEjD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,IAAI,QAAiC,CAAC;IACtC,IAAI,MAA+B,CAAC;IACpC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACxB,MAAM;QACR,CAAC;QACD,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;QACxC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,gBAAgB,CACxB,QAAQ,EACR,QAAQ;gBACN,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,UAAU,EAAE;gBACvE,CAAC,CAAC,SAAS,EACb,SAAS,CACV,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;AACH,CAAC"}

package/dist/runtime/local-files/locks.d.ts

@@ -1,43 +0,0 @@
-/**
- * Advisory file locking for the local-files store (DEC-036).
- *
- * The store layout (DEC-031) was originally written under the assumption that
- * a single CLI/MCP process owned the `<root>/.h2a/` tree at any given time.
- * In practice, multiple `h2a` invocations and an `h2a mcp-serve` process can
- * race on the same root. Append-only JSONL files (`registry/instances.jsonl`,
- * `negotiations/<id>/journal.jsonl`) survive this via the `PIPE_BUF`
- * atomicity of `appendFileSync` for sub-4KB lines, but every read-then-write
- * critical section (dup detection on `registerInstance`, hash-chain link on
- * `appendNegotiationEvent`, the whole `stabilizeNegotiation` transaction)
- * remains a race.
- *
- * This module implements **advisory** file locking via exclusive-create
- * sentinel files (`O_CREAT | O_EXCL` semantics through `openSync(path, "wx")`).
- * It is intentionally limited to **same-machine** coordination: a lock file
- * holding a foreign-host PID would be treated as live (we cannot
- * `process.kill(pid, 0)` across hosts). Cross-machine sharing of a store
- * remains out of scope (V2).
- *
- * Stale-lock recovery: if the lock file already exists, we parse its JSON
- * payload `{pid, hostname, startedAt}`. If `hostname` matches and the PID is
- * gone (`process.kill(pid, 0)` throws `ESRCH`), we reclaim the lock by
- * unlinking and retrying. Otherwise we poll up to `timeoutMs` and throw
- * `LockTimeoutError`.
- */
-export interface LockOwner {
-    readonly pid: number;
-    readonly hostname: string;
-    readonly startedAt: string;
-}
-export interface WithLockOptions {
-    readonly timeoutMs?: number;
-    readonly pollMs?: number;
-}
-export declare class LockTimeoutError extends Error {
-    readonly lockPath: string;
-    readonly lastSeenOwner?: LockOwner;
-    constructor(lockPath: string, lastSeenOwner: LockOwner | undefined, timeoutMs: number);
-}
-export declare function withLock<T>(lockPath: string, fn: () => T | Promise<T>, options?: WithLockOptions): Promise<T>;
-export declare function withLockSync<T>(lockPath: string, fn: () => T, options?: WithLockOptions): T;
-//# sourceMappingURL=locks.d.ts.map

package/dist/runtime/local-files/locks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"locks.d.ts","sourceRoot":"","sources":["../../../src/runtime/local-files/locks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAKH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,CAAC;gBAEvB,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM;CAWtF;AAqGD,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EACxB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,CAAC,CAAC,CA0BZ;AAED,wBAAgB,YAAY,CAAC,CAAC,EAC5B,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,CAAC,EACX,OAAO,GAAE,eAAoB,GAC5B,CAAC,CA0BH"}

package/dist/runtime/local-files/locks.js

@@ -1,197 +0,0 @@
-/**
- * Advisory file locking for the local-files store (DEC-036).
- *
- * The store layout (DEC-031) was originally written under the assumption that
- * a single CLI/MCP process owned the `<root>/.h2a/` tree at any given time.
- * In practice, multiple `h2a` invocations and an `h2a mcp-serve` process can
- * race on the same root. Append-only JSONL files (`registry/instances.jsonl`,
- * `negotiations/<id>/journal.jsonl`) survive this via the `PIPE_BUF`
- * atomicity of `appendFileSync` for sub-4KB lines, but every read-then-write
- * critical section (dup detection on `registerInstance`, hash-chain link on
- * `appendNegotiationEvent`, the whole `stabilizeNegotiation` transaction)
- * remains a race.
- *
- * This module implements **advisory** file locking via exclusive-create
- * sentinel files (`O_CREAT | O_EXCL` semantics through `openSync(path, "wx")`).
- * It is intentionally limited to **same-machine** coordination: a lock file
- * holding a foreign-host PID would be treated as live (we cannot
- * `process.kill(pid, 0)` across hosts). Cross-machine sharing of a store
- * remains out of scope (V2).
- *
- * Stale-lock recovery: if the lock file already exists, we parse its JSON
- * payload `{pid, hostname, startedAt}`. If `hostname` matches and the PID is
- * gone (`process.kill(pid, 0)` throws `ESRCH`), we reclaim the lock by
- * unlinking and retrying. Otherwise we poll up to `timeoutMs` and throw
- * `LockTimeoutError`.
- */
-import { closeSync, openSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
-import { hostname } from "node:os";
-export class LockTimeoutError extends Error {
-    lockPath;
-    lastSeenOwner;
-    constructor(lockPath, lastSeenOwner, timeoutMs) {
-        const ownerSuffix = lastSeenOwner
-            ? ` held by ${JSON.stringify(lastSeenOwner)}`
-            : "";
-        super(`LockTimeoutError: could not acquire ${lockPath} within ${timeoutMs}ms${ownerSuffix}`);
-        this.name = "LockTimeoutError";
-        this.lockPath = lockPath;
-        this.lastSeenOwner = lastSeenOwner;
-    }
-}
-const DEFAULT_TIMEOUT_MS = 5000;
-const DEFAULT_POLL_MS = 50;
-function tryParseOwner(raw) {
-    try {
-        const parsed = JSON.parse(raw);
-        if (parsed &&
-            typeof parsed.pid === "number" &&
-            typeof parsed.hostname === "string" &&
-            typeof parsed.startedAt === "string") {
-            return { pid: parsed.pid, hostname: parsed.hostname, startedAt: parsed.startedAt };
-        }
-    }
-    catch {
-        /* malformed — fall through */
-    }
-    return undefined;
-}
-function pidIsAliveOnSameHost(owner, selfHostname) {
-    if (owner.hostname !== selfHostname) {
-        // Cross-host owner: we cannot probe its liveness. Treat as live to err on
-        // the side of safety (the caller will then time out, which is the
-        // expected behaviour — cross-machine store sharing is out of scope V1).
-        return true;
-    }
-    try {
-        process.kill(owner.pid, 0);
-        return true;
-    }
-    catch (err) {
-        const code = err.code;
-        if (code === "ESRCH")
-            return false;
-        // EPERM means the process exists but is owned by another user — still
-        // live for our purposes.
-        return true;
-    }
-}
-function acquire(lockPath, selfHostname) {
-    const ownerPayload = {
-        pid: process.pid,
-        hostname: selfHostname,
-        startedAt: new Date().toISOString()
-    };
-    try {
-        const fd = openSync(lockPath, "wx");
-        try {
-            writeFileSync(fd, JSON.stringify(ownerPayload));
-        }
-        finally {
-            closeSync(fd);
-        }
-        return { ok: true };
-    }
-    catch (err) {
-        const code = err.code;
-        if (code !== "EEXIST")
-            throw err;
-    }
-    // Lock exists — inspect the owner record for staleness.
-    let raw;
-    try {
-        raw = readFileSync(lockPath, "utf8");
-    }
-    catch {
-        // The lock was released between EEXIST and our read. Caller should retry.
-        return { ok: false };
-    }
-    const owner = tryParseOwner(raw);
-    if (owner && !pidIsAliveOnSameHost(owner, selfHostname)) {
-        // Stale: reclaim by unlinking. The next loop iteration retries the create.
-        try {
-            unlinkSync(lockPath);
-        }
-        catch {
-            /* concurrent reclaim — fine */
-        }
-        return { ok: false };
-    }
-    return { ok: false, lastSeen: owner };
-}
-function delay(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
-}
-function busyWaitSync(ms) {
-    // Synchronous wait without blocking event-loop indefinitely. Used by
-    // `withLockSync` only — most store methods are sync today and we don't
-    // want to ripple `async` through them just for locking (DEC-036).
-    const end = Date.now() + ms;
-    // `Atomics.wait` on a private SharedArrayBuffer is the standard
-    // "sleep without spinning" primitive in modern Node.
-    const sab = new SharedArrayBuffer(4);
-    const view = new Int32Array(sab);
-    while (Date.now() < end) {
-        const remaining = end - Date.now();
-        if (remaining <= 0)
-            break;
-        Atomics.wait(view, 0, 0, Math.min(remaining, 25));
-    }
-}
-export async function withLock(lockPath, fn, options = {}) {
-    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    const pollMs = options.pollMs ?? DEFAULT_POLL_MS;
-    const selfHostname = hostname();
-    const deadline = Date.now() + timeoutMs;
-    let lastSeen;
-    while (true) {
-        const attempt = acquire(lockPath, selfHostname);
-        if (attempt.ok)
-            break;
-        lastSeen = attempt.lastSeen ?? lastSeen;
-        if (Date.now() >= deadline) {
-            throw new LockTimeoutError(lockPath, lastSeen, timeoutMs);
-        }
-        await delay(pollMs);
-    }
-    try {
-        return await fn();
-    }
-    finally {
-        try {
-            unlinkSync(lockPath);
-        }
-        catch {
-            /* lock file already gone — fine */
-        }
-    }
-}
-export function withLockSync(lockPath, fn, options = {}) {
-    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    const pollMs = options.pollMs ?? DEFAULT_POLL_MS;
-    const selfHostname = hostname();
-    const deadline = Date.now() + timeoutMs;
-    let lastSeen;
-    while (true) {
-        const attempt = acquire(lockPath, selfHostname);
-        if (attempt.ok)
-            break;
-        lastSeen = attempt.lastSeen ?? lastSeen;
-        if (Date.now() >= deadline) {
-            throw new LockTimeoutError(lockPath, lastSeen, timeoutMs);
-        }
-        busyWaitSync(pollMs);
-    }
-    try {
-        return fn();
-    }
-    finally {
-        try {
-            unlinkSync(lockPath);
-        }
-        catch {
-            /* lock file already gone — fine */
-        }
-    }
-}
-//# sourceMappingURL=locks.js.map

package/dist/runtime/local-files/locks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"locks.js","sourceRoot":"","sources":["../../../src/runtime/local-files/locks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAanC,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,QAAQ,CAAS;IACjB,aAAa,CAAa;IAEnC,YAAY,QAAgB,EAAE,aAAoC,EAAE,SAAiB;QACnF,MAAM,WAAW,GAAG,aAAa;YAC/B,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;QACP,KAAK,CACH,uCAAuC,QAAQ,WAAW,SAAS,KAAK,WAAW,EAAE,CACtF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;CACF;AAED,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QACrD,IACE,MAAM;YACN,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAC9B,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACnC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACpC,CAAC;YACD,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QACrF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAgB,EAAE,YAAoB;IAClE,IAAI,KAAK,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QACpC,0EAA0E;QAC1E,kEAAkE;QAClE,wEAAwE;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACnC,sEAAsE;QACtE,yBAAyB;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB,EAAE,YAAoB;IACrD,MAAM,YAAY,GAAc;QAC9B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,YAAY;QACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;QAClD,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;IACnC,CAAC;IAED,wDAAwD;IACxD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;QACxD,2EAA2E;QAC3E,IAAI,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,qEAAqE;IACrE,uEAAuE;IACvE,kEAAkE;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;IAC5B,gEAAgE;IAChE,qDAAqD;IACrD,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM;QAC1B,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,QAAgB,EAChB,EAAwB,EACxB,UAA2B,EAAE;IAE7B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC;IACjD,MAAM,YAAY,GAAG,QAAQ,EAAE,CAAC;IAEhC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,IAAI,QAA+B,CAAC;IACpC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAChD,IAAI,OAAO,CAAC,EAAE;YAAE,MAAM;QACtB,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;QACxC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,QAAgB,EAChB,EAAW,EACX,UAA2B,EAAE;IAE7B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC;IACjD,MAAM,YAAY,GAAG,QAAQ,EAAE,CAAC;IAEhC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,IAAI,QAA+B,CAAC;IACpC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAChD,IAAI,OAAO,CAAC,EAAE;YAAE,MAAM;QACtB,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;QACxC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC5D,CAAC;QACD,YAAY,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/runtime/local-files/migrate.d.ts

@@ -1,31 +0,0 @@
-export interface SanitizeRenameEntry {
-    readonly from: string;
-    readonly to: string;
-    readonly status: "renamed" | "would-rename" | "conflict" | "skipped";
-}
-export interface SanitizePathsResult {
-    readonly ok: boolean;
-    readonly root: string;
-    readonly dryRun: boolean;
-    readonly renamed: readonly SanitizeRenameEntry[];
-    readonly conflicts: readonly SanitizeRenameEntry[];
-}
-/**
- * DEC-064: rename pre-DEC-062 store entries whose names contain `:` (or other
- * Windows-forbidden characters) to their `safePathSegment` form. This makes a
- * store created by `@sentropic/h2a-cli@<=0.1.23` usable on Windows and
- * consistent with the current layout on every OS.
- *
- * The pass is conservative:
- * - It only renames entries whose sanitized name differs from the original.
- * - If the sanitized target already exists, it records a `conflict` and does
- *   NOT overwrite (the caller decides what to do).
- * - With `dryRun`, nothing is written; entries are reported as `would-rename`.
- *
- * Pure-ish: only filesystem renames, no schema sentinel change (the layout
- * version stays "1"; this is a within-version cleanup, not a schema bump).
- */
-export declare function sanitizeStorePaths(root: string, options?: {
-    dryRun?: boolean;
-}): SanitizePathsResult;
-//# sourceMappingURL=migrate.d.ts.map

package/dist/runtime/local-files/migrate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../src/runtime/local-files/migrate.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,cAAc,GAAG,UAAU,GAAG,SAAS,CAAC;CACtE;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACpD;AA4BD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,mBAAmB,CAyDrB"}