@software-dlc/cli 0.157.2

package/dist/local/ownership-reader.js

@@ -0,0 +1,93 @@
+import { fork } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { currentOperation, operationSignal } from './operation.js';
+import { OWNERSHIP_READ_LIMITS, ownership_registry_schema, ownership_selection_schema, ownership_read_result_schema, ownershipUnavailable } from './ownership-reader-schema.js';
+/** Local library boundary only. No helper invocation, discovery, migration or adapter. */
+export async function readLocalOwnership(input) {
+    const started = performance.now();
+    const registry = ownership_registry_schema.safeParse(input.trusted_registry);
+    const selection = ownership_selection_schema.safeParse(input.selection);
+    const budget = input.timeout_ms ?? OWNERSHIP_READ_LIMITS.timeout_ms;
+    if (!registry.success ||
+        !selection.success ||
+        !Number.isInteger(budget) ||
+        budget < 1 ||
+        budget > 30_000)
+        return ownershipUnavailable('invalid_request');
+    if (registry.data.registry_id !== selection.data.registry_id)
+        return ownershipUnavailable('registry_mismatch');
+    const signal = operationSignal(input.signal);
+    const deadline = Math.min(started + budget, currentOperation()?.deadline ?? Infinity);
+    if (signal?.aborted)
+        return ownershipUnavailable('cancelled');
+    if (performance.now() >= deadline)
+        return ownershipUnavailable('deadline_exceeded');
+    return new Promise((resolve) => {
+        let answer;
+        let cancelled;
+        // A separate process also prevents diagnostic descriptor closes from disturbing
+        // another SQLite connection's process-scoped POSIX locks in the caller.
+        let child;
+        try {
+            child = fork(fileURLToPath(new URL('./ownership-reader-worker.js', import.meta.url)), [], {
+                execArgv: ['--max-old-space-size=64'],
+                env: { NODE_ENV: 'production' },
+                stdio: ['ignore', 'ignore', 'ignore', 'ipc'],
+                serialization: 'json'
+            });
+        }
+        catch {
+            resolve(ownershipUnavailable('reader_unavailable'));
+            return;
+        }
+        const stop = (reason) => {
+            cancelled ??= reason;
+            child.kill('SIGKILL');
+        };
+        const on_abort = () => stop('cancelled');
+        const timer = setTimeout(() => stop('deadline_exceeded'), Math.max(1, deadline - performance.now()));
+        signal?.addEventListener('abort', on_abort, { once: true });
+        child.on('message', (message) => {
+            const parsed = ownership_read_result_schema.safeParse(message);
+            answer = parsed.success
+                ? parsed.data
+                : ownershipUnavailable('reader_unavailable');
+        });
+        child.on('error', () => {
+            answer = ownershipUnavailable('reader_unavailable');
+        });
+        child.once('close', (code) => {
+            clearTimeout(timer);
+            signal?.removeEventListener('abort', on_abort);
+            if (cancelled)
+                return resolve(ownershipUnavailable(cancelled));
+            if (performance.now() >= deadline)
+                return resolve(ownershipUnavailable('deadline_exceeded'));
+            if (code !== 0 || !answer)
+                return resolve(ownershipUnavailable('reader_unavailable'));
+            // Re-evaluate temporal ownership at delivery, not just the database snapshot.
+            if (answer.status !== 'unavailable') {
+                answer.completed_at = Date.now() / 1000;
+                if (answer.completed_at < answer.observed_at)
+                    return resolve(ownershipUnavailable('changed_during_read'));
+                if (answer.status === 'observed' && answer.owner) {
+                    if (answer.owner.expires_at <= answer.completed_at)
+                        answer.ownership = 'expired';
+                    else if (answer.owner.execution_status === 'complete' ||
+                        answer.owner.heartbeat_at + 1800 <= answer.completed_at)
+                        answer.ownership = 'inactive';
+                }
+            }
+            const checked = ownership_read_result_schema.safeParse(answer);
+            resolve(checked.success ? checked.data : ownershipUnavailable('invalid_state'));
+        });
+        if (signal?.aborted)
+            on_abort();
+        else
+            child.send({ trusted_registry: registry.data, selection: selection.data }, (error) => {
+                if (error)
+                    stop('reader_unavailable');
+            });
+    });
+}
+//# sourceMappingURL=ownership-reader.js.map

package/dist/local/ownership-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership-reader.js","sourceRoot":"","sources":["../../src/local/ownership-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAqB,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,0BAA0B,EAC1B,4BAA4B,EAC5B,oBAAoB,EAKrB,MAAM,8BAA8B,CAAC;AAEtC,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAMxC;IACC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,IAAI,qBAAqB,CAAC,UAAU,CAAC;IACpE,IACE,CAAC,QAAQ,CAAC,OAAO;QACjB,CAAC,SAAS,CAAC,OAAO;QAClB,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;QACzB,MAAM,GAAG,CAAC;QACV,MAAM,GAAG,MAAM;QAEf,OAAO,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,WAAW;QAC1D,OAAO,oBAAoB,CAAC,mBAAmB,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACvB,OAAO,GAAG,MAAM,EAChB,gBAAgB,EAAE,EAAE,QAAQ,IAAI,QAAQ,CACzC,CAAC;IACF,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC9D,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;QAC/B,OAAO,oBAAoB,CAAC,mBAAmB,CAAC,CAAC;IAEnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAuC,CAAC;QAC5C,IAAI,SAA0C,CAAC;QAC/C,gFAAgF;QAChF,wEAAwE;QACxE,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CACV,aAAa,CAAC,IAAI,GAAG,CAAC,8BAA8B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACvE,EAAE,EACF;gBACE,QAAQ,EAAE,CAAC,yBAAyB,CAAC;gBACrC,GAAG,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE;gBAC/B,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC;gBAC5C,aAAa,EAAE,MAAM;aACtB,CACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAA2B,EAAE,EAAE;YAC3C,SAAS,KAAK,MAAM,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAC/B,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAC1C,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAgB,EAAE,EAAE;YACvC,MAAM,MAAM,GAAG,4BAA4B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC/D,MAAM,GAAG,MAAM,CAAC,OAAO;gBACrB,CAAC,CAAC,MAAM,CAAC,IAAI;gBACb,CAAC,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,MAAM,GAAG,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAC3B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC/C,IAAI,SAAS;gBAAE,OAAO,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;YAC/D,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAC/B,OAAO,OAAO,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,CAAC,CAAC;YAC5D,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM;gBACvB,OAAO,OAAO,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAC7D,8EAA8E;YAC9E,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;gBACpC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;gBACxC,IAAI,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW;oBAC1C,OAAO,OAAO,CAAC,oBAAoB,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBAC9D,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBACjD,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,YAAY;wBAChD,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;yBAC1B,IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,KAAK,UAAU;wBAC5C,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,IAAI,MAAM,CAAC,YAAY;wBAEvD,MAAM,CAAC,SAAS,GAAG,UAAU,CAAC;gBAClC,CAAC;YACH,CAAC;YACD,MAAM,OAAO,GAAG,4BAA4B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC/D,OAAO,CACL,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,eAAe,CAAC,CACvE,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,EAAE,OAAO;YAAE,QAAQ,EAAE,CAAC;;YAE9B,KAAK,CAAC,IAAI,CACR,EAAE,gBAAgB,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAC9D,CAAC,KAAK,EAAE,EAAE;gBACR,IAAI,KAAK;oBAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACxC,CAAC,CACF,CAAC;IACN,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/local/package-uses-check.d.ts

@@ -0,0 +1,33 @@
+import { type ContentTypeRegistry, type PackageSource, type PackageUseRecord } from '@software-dlc/graph/packages';
+import type { PortableGraph } from '@software-dlc/graph/types';
+import { type FloorPolicyFor } from '../packages-uses.js';
+/** The uses a commit adds or changes: those it must resolve before it records them. */
+export declare function changedPackageUses(input: {
+    base_graph: PortableGraph | null;
+    graph: PortableGraph;
+}): PackageUseRecord[];
+/**
+ * Why a commit cannot record its package uses (graph-packages.md, Local resolution): each use it
+ * adds or changes is resolved against what is held here, and any blocking finding refuses it, so
+ * a use is committed only where its document is held. A use that resolves runs the floor check
+ * (graph-packages.md, Floors), so a fork or extension that drops what a floor requires is refused
+ * too. A use the commit leaves alone is not resolved again: reads report an unresolved use without
+ * failing the graph.
+ */
+export declare function packageUseCommitIssues(input: {
+    base_graph: PortableGraph | null;
+    graph: PortableGraph;
+    /** Built only when a use changed, so a commit without one reads no package. */
+    source: () => HeldPackages;
+    registry?: ContentTypeRegistry;
+    /** The org policy each floor check runs with; none until the local governance graph holds one. */
+    floorPolicy?: FloorPolicyFor;
+}): string[];
+/** What a commit resolves against, and the coordinate of each package some version of which is held. */
+export type HeldPackages = {
+    source: PackageSource;
+    coordinateOf: (package_id: string) => string | null;
+};
+/** The packages a workspace commit resolves against: the bundled snapshot and the download cache. */
+export declare function heldPackages(env?: NodeJS.ProcessEnv): HeldPackages;
+//# sourceMappingURL=package-uses-check.d.ts.map

package/dist/local/package-uses-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-uses-check.d.ts","sourceRoot":"","sources":["../../src/local/package-uses-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAQ/D,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,qBAAqB,CAAC;AAO7B,uFAAuF;AACvF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,UAAU,EAAE,aAAa,GAAG,IAAI,CAAC;IACjC,KAAK,EAAE,aAAa,CAAC;CACtB,GAAG,gBAAgB,EAAE,CAUrB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,UAAU,EAAE,aAAa,GAAG,IAAI,CAAC;IACjC,KAAK,EAAE,aAAa,CAAC;IACrB,+EAA+E;IAC/E,MAAM,EAAE,MAAM,YAAY,CAAC;IAC3B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,kGAAkG;IAClG,WAAW,CAAC,EAAE,cAAc,CAAC;CAC9B,GAAG,MAAM,EAAE,CAwBX;AAED,wGAAwG;AACxG,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACrD,CAAC;AAEF,qGAAqG;AACrG,wBAAgB,YAAY,CAC1B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,YAAY,CAWd"}

package/dist/local/package-uses-check.js

@@ -0,0 +1,62 @@
+import { graphPackageContentTypes, resolvePackageUse } from '@software-dlc/graph/packages';
+import { defaultGraphPackagesCacheDir } from '../graph-packages-lock.js';
+import { defaultGraphPackagesSnapshotDir, localPackageSource, readLocalPackages } from '../packages-browse.js';
+import { describeFloor, describeUseFinding, useFloors } from '../packages-uses.js';
+import { stringifyCanonicalJson } from './canonical.js';
+function useKey(use) {
+    return `${use.package_id}\u0000${use.project_id ?? ''}`;
+}
+/** The uses a commit adds or changes: those it must resolve before it records them. */
+export function changedPackageUses(input) {
+    const before = new Map((input.base_graph?.package_uses ?? []).map((use) => [
+        useKey(use),
+        stringifyCanonicalJson(use)
+    ]));
+    return (input.graph.package_uses ?? []).filter((use) => before.get(useKey(use)) !== stringifyCanonicalJson(use));
+}
+/**
+ * Why a commit cannot record its package uses (graph-packages.md, Local resolution): each use it
+ * adds or changes is resolved against what is held here, and any blocking finding refuses it, so
+ * a use is committed only where its document is held. A use that resolves runs the floor check
+ * (graph-packages.md, Floors), so a fork or extension that drops what a floor requires is refused
+ * too. A use the commit leaves alone is not resolved again: reads report an unresolved use without
+ * failing the graph.
+ */
+export function packageUseCommitIssues(input) {
+    const changed = changedPackageUses(input);
+    if (changed.length === 0)
+        return [];
+    const { source, coordinateOf } = input.source();
+    const registry = input.registry ?? graphPackageContentTypes;
+    return changed.flatMap((use) => {
+        const coordinate = coordinateOf(use.package_id);
+        const label = `${coordinate ?? use.package_id}@${use.version} (${use.mode})`;
+        const resolved = resolvePackageUse({
+            use,
+            graph: 'project',
+            source,
+            registry
+        });
+        if (resolved.findings.length > 0)
+            return resolved.findings.map((finding) => `${label}: ${describeUseFinding(finding, use, coordinate)}`);
+        const floors = useFloors(resolved, input.floorPolicy);
+        if (!floors.blocking)
+            return [];
+        return floors.findings
+            .filter((finding) => finding.severity === 'floor')
+            .map((finding) => `${label}: ${describeFloor(finding)}`);
+    });
+}
+/** The packages a workspace commit resolves against: the bundled snapshot and the download cache. */
+export function heldPackages(env = process.env) {
+    const local = readLocalPackages({
+        snapshotDir: defaultGraphPackagesSnapshotDir(),
+        cacheDir: defaultGraphPackagesCacheDir(env)
+    });
+    return {
+        source: localPackageSource(local),
+        coordinateOf: (package_id) => local.packages.find((entry) => entry.id === package_id)?.coordinate ??
+            null
+    };
+}
+//# sourceMappingURL=package-uses-check.js.map

package/dist/local/package-uses-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-uses-check.js","sourceRoot":"","sources":["../../src/local/package-uses-check.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EAIlB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EACL,+BAA+B,EAC/B,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,SAAS,EAEV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAExD,SAAS,MAAM,CAAC,GAAqB;IACnC,OAAO,GAAG,GAAG,CAAC,UAAU,SAAS,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,kBAAkB,CAAC,KAGlC;IACC,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QAClD,MAAM,CAAC,GAAG,CAAC;QACX,sBAAsB,CAAC,GAAG,CAAC;KAC5B,CAAC,CACH,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAC5C,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,sBAAsB,CAAC,GAAG,CAAC,CACjE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAQtC;IACC,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,wBAAwB,CAAC;IAC5D,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7B,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,GAAG,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC;QAC7E,MAAM,QAAQ,GAAG,iBAAiB,CAAC;YACjC,GAAG;YACH,KAAK,EAAE,SAAS;YAChB,MAAM;YACN,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC9B,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAC1B,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,kBAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,CACzE,CAAC;QACJ,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,QAAQ;aACnB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;aACjD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAQD,qGAAqG;AACrG,MAAM,UAAU,YAAY,CAC1B,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,iBAAiB,CAAC;QAC9B,WAAW,EAAE,+BAA+B,EAAE;QAC9C,QAAQ,EAAE,4BAA4B,CAAC,GAAG,CAAC;KAC5C,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC;QACjC,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE,CAC3B,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE,UAAU;YACnE,IAAI;KACP,CAAC;AACJ,CAAC"}

package/dist/local/pending-recovery.d.ts

@@ -0,0 +1,22 @@
+import { type GraphClientOptions, type GraphClientRequestOptions } from '@software-dlc/graph/client';
+import { LocalSdlcStore } from './store.js';
+import { type ManagedProjectionStatus } from './worktree-projection.js';
+export type StalePendingRecoveryResult = {
+    recovered: true;
+    superseded_change_ids: string[];
+    remote_revision: number;
+    remote_sync_revision: number;
+    remote_sync_root_hash: string;
+    status: ManagedProjectionStatus;
+};
+export declare function recoverManagedProjectionFromStalePending(input: {
+    store: LocalSdlcStore;
+    client: GraphClientOptions;
+    worktree_id: string;
+    expected_remote_revision: number;
+    expected_remote_sync_revision: number;
+    expected_remote_sync_root_hash: string;
+    allow_unapplied_remote_state?: boolean;
+    request_options?: GraphClientRequestOptions;
+}): Promise<StalePendingRecoveryResult>;
+//# sourceMappingURL=pending-recovery.d.ts.map

package/dist/local/pending-recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-recovery.d.ts","sourceRoot":"","sources":["../../src/local/pending-recovery.ts"],"names":[],"mappings":"AAOA,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC/B,MAAM,4BAA4B,CAAC;AAcpC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,0BAA0B,GAAG;IACvC,SAAS,EAAE,IAAI,CAAC;IAChB,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,MAAM,EAAE,uBAAuB,CAAC;CACjC,CAAC;AAEF,wBAAsB,wCAAwC,CAAC,KAAK,EAAE;IACpE,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB,EAAE,MAAM,CAAC;IACjC,6BAA6B,EAAE,MAAM,CAAC;IACtC,8BAA8B,EAAE,MAAM,CAAC;IACvC,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,eAAe,CAAC,EAAE,yBAAyB,CAAC;CAC7C,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAuLtC"}

package/dist/local/pending-recovery.js

@@ -0,0 +1,171 @@
+import { GRAPH_SEMANTIC_ANNOTATION_SCHEMA_VERSIONS, GRAPH_VARIANT_SET_SCHEMA_VERSIONS, graph_sync_hash_schema, portable_graph_schema, worktree_sync_response_schema } from '@software-dlc/graph/schema';
+import { getWorktreeChangeStatus, getWorktreeGraph, negotiateWorktreeSync } from '@software-dlc/graph/client';
+import { stringifyCanonicalGraph } from './canonical.js';
+import { reconstructNegotiatedWorktreeGraph } from './graph-sync.js';
+import { OperationRefusalError } from './operation.js';
+import { composeGraphProjection, diffProjectionGraphs, materializeGraphProjection, restoreMissingProjectionEntities, validateProjectionGraph } from './projection.js';
+import { getManagedProjectionStatus } from './worktree-projection.js';
+export async function recoverManagedProjectionFromStalePending(input) {
+    const session = input.store.getActiveSession(input.worktree_id);
+    if (!session) {
+        throw new OperationRefusalError('Stale-pending recovery requires an active local session.');
+    }
+    // A graph-file save needs no managed projection, so its pending request is
+    // recovered without one: there is no local proposal to validate or rebase.
+    const projection_state = input.store.getProjectionState(input.worktree_id);
+    const pending_changes = input.store.listPendingChanges(session.id);
+    if (pending_changes.length === 0) {
+        throw new OperationRefusalError('No pending worktree changes require recovery.');
+    }
+    const receipt_statuses = await Promise.all(pending_changes.map((change) => getWorktreeChangeStatus(input.client, input.worktree_id, change.idempotency_key, input.request_options)));
+    if (receipt_statuses.some((status) => status.found)) {
+        throw new OperationRefusalError('A pending worktree change has a server receipt. Run sdlc sync instead of recovery.');
+    }
+    const response = await getWorktreeGraph(input.client, input.worktree_id, input.request_options);
+    if (response.resource.type !== 'worktree' ||
+        response.resource.id !== input.worktree_id) {
+        throw new OperationRefusalError('Remote graph response does not match the bound worktree.');
+    }
+    const remote_revision = response.resource.revision;
+    const remote_sync_revision = response.resource.sync_revision;
+    const parsed_remote_root = graph_sync_hash_schema.safeParse(response.resource.sync_root_hash);
+    if (!Number.isSafeInteger(remote_revision) ||
+        (remote_revision ?? -1) < 0 ||
+        !Number.isSafeInteger(remote_sync_revision) ||
+        (remote_sync_revision ?? -1) < 0 ||
+        !parsed_remote_root.success) {
+        throw new OperationRefusalError('Remote worktree did not expose a valid revision/root tuple.');
+    }
+    const remote_sync_root_hash = parsed_remote_root.data;
+    if (remote_revision !== input.expected_remote_revision ||
+        remote_sync_revision !== input.expected_remote_sync_revision ||
+        remote_sync_root_hash !== input.expected_remote_sync_root_hash) {
+        throw new OperationRefusalError('Remote worktree state does not match the explicitly expected recovery tuple.');
+    }
+    // A session that was never checked out has acknowledged a revision only.
+    const session_has_sync_base = session.last_acknowledged_sync_revision !== null &&
+        session.last_acknowledged_sync_root_hash !== null;
+    const remote_state_unchanged = remote_revision === session.last_acknowledged_revision &&
+        (!session_has_sync_base ||
+            (remote_sync_revision === session.last_acknowledged_sync_revision &&
+                remote_sync_root_hash === session.last_acknowledged_sync_root_hash));
+    if (remote_state_unchanged && !input.allow_unapplied_remote_state) {
+        throw new OperationRefusalError('Remote worktree state has not advanced beyond the acknowledged local base; run sdlc sync or explicitly discard confirmed-unapplied pending requests.');
+    }
+    if (!remote_state_unchanged &&
+        pending_changes.some((change) => change.expected_revision >= remote_revision)) {
+        throw new OperationRefusalError('Recovery requires the remote worktree revision to be newer than every pending request base.');
+    }
+    const remote_compatibility_graph = portable_graph_schema.parse(response.graph);
+    const sync_response = worktree_sync_response_schema.parse(await negotiateWorktreeSync(input.client, input.worktree_id, {
+        supported_manifest_versions: [1],
+        supported_semantic_annotation_schema_versions: [
+            ...GRAPH_SEMANTIC_ANNOTATION_SCHEMA_VERSIONS
+        ],
+        supported_graph_variant_set_schema_versions: [
+            ...GRAPH_VARIANT_SET_SCHEMA_VERSIONS
+        ]
+    }, input.request_options));
+    if (sync_response.worktree_id !== input.worktree_id ||
+        sync_response.revision !== remote_revision ||
+        sync_response.sync_revision !== remote_sync_revision ||
+        sync_response.sync_root_hash !== remote_sync_root_hash) {
+        throw new OperationRefusalError('Remote worktree graph and sync manifest do not expose the same recovery tuple.');
+    }
+    if (sync_response.mode !== 'manifest') {
+        throw new OperationRefusalError('Stale-pending recovery requires a complete remote sync manifest.');
+    }
+    const reconstructed = await reconstructNegotiatedWorktreeGraph({
+        store: input.store,
+        base_graph: remote_compatibility_graph,
+        base_manifest: null,
+        response: sync_response
+    });
+    const remote_graph = reconstructed.graph;
+    if (projection_state) {
+        await rebaseProjectionOntoRemote({
+            store: input.store,
+            worktree_id: input.worktree_id,
+            projection_dir: projection_state.projection_dir,
+            remote_graph
+        });
+    }
+    const checkpoint = await input.store.checkpoint({
+        session_id: session.id,
+        revision: remote_revision,
+        graph_json: stringifyCanonicalGraph(remote_graph)
+    });
+    const superseded_change_ids = input.store.supersedePendingChangesAndAdoptCheckpoint({
+        session_id: session.id,
+        expected_pending_change_ids: pending_changes.map((change) => change.id),
+        checkpoint_id: checkpoint.checkpoint_id,
+        revision: remote_revision,
+        graph_hash: checkpoint.graph_hash,
+        sync_revision: remote_sync_revision,
+        sync_root_hash: remote_sync_root_hash,
+        reason: remote_state_unchanged
+            ? 'remote_state_unchanged_without_receipt'
+            : 'remote_state_advanced_without_receipt'
+    });
+    if (projection_state) {
+        input.store.setProjectionState({
+            worktree_id: input.worktree_id,
+            projection_dir: projection_state.projection_dir,
+            base_revision: remote_revision,
+            base_graph_hash: checkpoint.graph_hash
+        });
+    }
+    return {
+        recovered: true,
+        superseded_change_ids,
+        remote_revision,
+        remote_sync_revision,
+        remote_sync_root_hash,
+        status: await getManagedProjectionStatus({
+            store: input.store,
+            worktree_id: input.worktree_id
+        })
+    };
+}
+/**
+ * Validates the preserved local projection against the newer remote graph and
+ * restores remote entities it lacks, without overwriting a local entity.
+ */
+async function rebaseProjectionOntoRemote(input) {
+    const { remote_graph } = input;
+    const composed = await composeGraphProjection(input.projection_dir);
+    const validation = validateProjectionGraph(composed.graph);
+    if (!validation.is_valid) {
+        throw new OperationRefusalError('Managed projection validation failed; recovery left local state unchanged.');
+    }
+    let recovered_graph = composed.graph;
+    let rebased_diff = diffProjectionGraphs({
+        base_graph: remote_graph,
+        current_graph: recovered_graph,
+        deletion_intents: input.store.listProjectionDeletions(input.worktree_id)
+    });
+    if (rebased_diff.missing_unrecorded.length > 0) {
+        recovered_graph = restoreMissingProjectionEntities({
+            current_graph: recovered_graph,
+            source_graph: remote_graph,
+            entries: rebased_diff.missing_unrecorded
+        });
+        const recovered_validation = validateProjectionGraph(recovered_graph);
+        if (!recovered_validation.is_valid) {
+            throw new OperationRefusalError('Restoring newer remote entities would make the preserved local projection invalid; recovery left local files unchanged.');
+        }
+        rebased_diff = diffProjectionGraphs({
+            base_graph: remote_graph,
+            current_graph: recovered_graph,
+            deletion_intents: input.store.listProjectionDeletions(input.worktree_id)
+        });
+        if (rebased_diff.missing_unrecorded.length > 0) {
+            throw new OperationRefusalError('Rebased projection still has unrecorded deletions after restoring newer remote entities.');
+        }
+        await materializeGraphProjection({
+            projection_dir: input.projection_dir,
+            graph: recovered_graph
+        });
+    }
+}
+//# sourceMappingURL=pending-recovery.js.map

package/dist/local/pending-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-recovery.js","sourceRoot":"","sources":["../../src/local/pending-recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yCAAyC,EACzC,iCAAiC,EACjC,sBAAsB,EACtB,qBAAqB,EACrB,6BAA6B,EAC9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EAGtB,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,kCAAkC,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,0BAA0B,EAC1B,gCAAgC,EAChC,uBAAuB,EACxB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,0BAA0B,EAE3B,MAAM,0BAA0B,CAAC;AAWlC,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAAC,KAS9D;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,qBAAqB,CAC7B,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,gBAAgB,GAAG,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnE,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,qBAAqB,CAC7B,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,GAAG,CACxC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC7B,uBAAuB,CACrB,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,WAAW,EACjB,MAAM,CAAC,eAAe,EACtB,KAAK,CAAC,eAAe,CACtB,CACF,CACF,CAAC;IACF,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,qBAAqB,CAC7B,oFAAoF,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,eAAe,CACtB,CAAC;IACF,IACE,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU;QACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,WAAW,EAC1C,CAAC;QACD,MAAM,IAAI,qBAAqB,CAC7B,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACnD,MAAM,oBAAoB,GAAG,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC;IAC7D,MAAM,kBAAkB,GAAG,sBAAsB,CAAC,SAAS,CACzD,QAAQ,CAAC,QAAQ,CAAC,cAAc,CACjC,CAAC;IACF,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC;QACtC,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3B,CAAC,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC;QAC3C,CAAC,oBAAoB,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAChC,CAAC,kBAAkB,CAAC,OAAO,EAC3B,CAAC;QACD,MAAM,IAAI,qBAAqB,CAC7B,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,MAAM,qBAAqB,GAAG,kBAAkB,CAAC,IAAI,CAAC;IACtD,IACE,eAAe,KAAK,KAAK,CAAC,wBAAwB;QAClD,oBAAoB,KAAK,KAAK,CAAC,6BAA6B;QAC5D,qBAAqB,KAAK,KAAK,CAAC,8BAA8B,EAC9D,CAAC;QACD,MAAM,IAAI,qBAAqB,CAC7B,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,yEAAyE;IACzE,MAAM,qBAAqB,GACzB,OAAO,CAAC,+BAA+B,KAAK,IAAI;QAChD,OAAO,CAAC,gCAAgC,KAAK,IAAI,CAAC;IACpD,MAAM,sBAAsB,GAC1B,eAAe,KAAK,OAAO,CAAC,0BAA0B;QACtD,CAAC,CAAC,qBAAqB;YACrB,CAAC,oBAAoB,KAAK,OAAO,CAAC,+BAA+B;gBAC/D,qBAAqB,KAAK,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAC3E,IAAI,sBAAsB,IAAI,CAAC,KAAK,CAAC,4BAA4B,EAAE,CAAC;QAClE,MAAM,IAAI,qBAAqB,CAC7B,sJAAsJ,CACvJ,CAAC;IACJ,CAAC;IACD,IACE,CAAC,sBAAsB;QACvB,eAAe,CAAC,IAAI,CAClB,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,iBAAiB,IAAI,eAAe,CACxD,EACD,CAAC;QACD,MAAM,IAAI,qBAAqB,CAC7B,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,0BAA0B,GAAG,qBAAqB,CAAC,KAAK,CAC5D,QAAQ,CAAC,KAAK,CACf,CAAC;IACF,MAAM,aAAa,GAAG,6BAA6B,CAAC,KAAK,CACvD,MAAM,qBAAqB,CACzB,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,WAAW,EACjB;QACE,2BAA2B,EAAE,CAAC,CAAC,CAAC;QAChC,6CAA6C,EAAE;YAC7C,GAAG,yCAAyC;SAC7C;QACD,2CAA2C,EAAE;YAC3C,GAAG,iCAAiC;SACrC;KACF,EACD,KAAK,CAAC,eAAe,CACtB,CACF,CAAC;IACF,IACE,aAAa,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QAC/C,aAAa,CAAC,QAAQ,KAAK,eAAe;QAC1C,aAAa,CAAC,aAAa,KAAK,oBAAoB;QACpD,aAAa,CAAC,cAAc,KAAK,qBAAqB,EACtD,CAAC;QACD,MAAM,IAAI,qBAAqB,CAC7B,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACtC,MAAM,IAAI,qBAAqB,CAC7B,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,kCAAkC,CAAC;QAC7D,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,0BAA0B;QACtC,aAAa,EAAE,IAAI;QACnB,QAAQ,EAAE,aAAa;KACxB,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC;IACzC,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,0BAA0B,CAAC;YAC/B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,cAAc,EAAE,gBAAgB,CAAC,cAAc;YAC/C,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;QAC9C,UAAU,EAAE,OAAO,CAAC,EAAE;QACtB,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,uBAAuB,CAAC,YAAY,CAAC;KAClD,CAAC,CAAC;IACH,MAAM,qBAAqB,GACzB,KAAK,CAAC,KAAK,CAAC,yCAAyC,CAAC;QACpD,UAAU,EAAE,OAAO,CAAC,EAAE;QACtB,2BAA2B,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QACvE,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,aAAa,EAAE,oBAAoB;QACnC,cAAc,EAAE,qBAAqB;QACrC,MAAM,EAAE,sBAAsB;YAC5B,CAAC,CAAC,wCAAwC;YAC1C,CAAC,CAAC,uCAAuC;KAC5C,CAAC,CAAC;IACL,IAAI,gBAAgB,EAAE,CAAC;QACrB,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC;YAC7B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,cAAc,EAAE,gBAAgB,CAAC,cAAc;YAC/C,aAAa,EAAE,eAAe;YAC9B,eAAe,EAAE,UAAU,CAAC,UAAU;SACvC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,SAAS,EAAE,IAAI;QACf,qBAAqB;QACrB,eAAe;QACf,oBAAoB;QACpB,qBAAqB;QACrB,MAAM,EAAE,MAAM,0BAA0B,CAAC;YACvC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,0BAA0B,CAAC,KAKzC;IACC,MAAM,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IAC/B,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,uBAAuB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,qBAAqB,CAC7B,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC;IACrC,IAAI,YAAY,GAAG,oBAAoB,CAAC;QACtC,UAAU,EAAE,YAAY;QACxB,aAAa,EAAE,eAAe;QAC9B,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,KAAK,CAAC,WAAW,CAAC;KACzE,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,eAAe,GAAG,gCAAgC,CAAC;YACjD,aAAa,EAAE,eAAe;YAC9B,YAAY,EAAE,YAAY;YAC1B,OAAO,EAAE,YAAY,CAAC,kBAAkB;SACzC,CAAC,CAAC;QACH,MAAM,oBAAoB,GAAG,uBAAuB,CAAC,eAAe,CAAC,CAAC;QACtE,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,qBAAqB,CAC7B,yHAAyH,CAC1H,CAAC;QACJ,CAAC;QACD,YAAY,GAAG,oBAAoB,CAAC;YAClC,UAAU,EAAE,YAAY;YACxB,aAAa,EAAE,eAAe;YAC9B,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,KAAK,CAAC,WAAW,CAAC;SACzE,CAAC,CAAC;QACH,IAAI,YAAY,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,qBAAqB,CAC7B,0FAA0F,CAC3F,CAAC;QACJ,CAAC;QACD,MAAM,0BAA0B,CAAC;YAC/B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,KAAK,EAAE,eAAe;SACvB,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/local/portable-commit-store.d.ts

@@ -0,0 +1,28 @@
+import { type LocalCommitPortableAttestation, type LocalHistoryPortableConversion, type PortableCommit, type PortableIdentityClaim } from './portable-commit.js';
+import type { LocalWorkspaceHistoryStore } from './workspace-history-store.js';
+import type { LocalWorkspaceStoreDatabase } from './workspace-store-database.js';
+export declare class LocalPortableCommitStore {
+    private readonly database;
+    private readonly history;
+    constructor(database: LocalWorkspaceStoreDatabase, history: LocalWorkspaceHistoryStore);
+    private assertIntegrity;
+    getCommit(commit_id: string): PortableCommit | null;
+    getLocalMapping(local_commit_id: string): string | null;
+    getLocalAttestation(local_commit_id: string): LocalCommitPortableAttestation | null;
+    planLocalHistory(head_commit_id: string): {
+        version: 1;
+        head_local_commit_id: string;
+        head_portable_commit_id: string | null;
+        unmapped_local_commit_ids: string[];
+        required_author_workspace_ids: string[];
+        external_parent_ids: string[];
+    };
+    migrateLocalHistory(input: {
+        head_commit_ids: string[];
+        author_claims: Record<string, PortableIdentityClaim>;
+        committer: PortableIdentityClaim;
+        external_parent_ids?: Record<string, string>;
+        reuse_existing_mappings?: boolean;
+    }): LocalHistoryPortableConversion;
+}
+//# sourceMappingURL=portable-commit-store.d.ts.map

package/dist/local/portable-commit-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portable-commit-store.d.ts","sourceRoot":"","sources":["../../src/local/portable-commit-store.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,8BAA8B,EACnC,KAAK,8BAA8B,EACnC,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAEjF,qBAAa,wBAAwB;IAEjC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,QAAQ,EAAE,2BAA2B,EACrC,OAAO,EAAE,0BAA0B;IAKtD,OAAO,CAAC,eAAe;IAyCvB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IASnD,eAAe,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IASvD,mBAAmB,CACjB,eAAe,EAAE,MAAM,GACtB,8BAA8B,GAAG,IAAI;IAaxC,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG;QACxC,OAAO,EAAE,CAAC,CAAC;QACX,oBAAoB,EAAE,MAAM,CAAC;QAC7B,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;QACvC,yBAAyB,EAAE,MAAM,EAAE,CAAC;QACpC,6BAA6B,EAAE,MAAM,EAAE,CAAC;QACxC,mBAAmB,EAAE,MAAM,EAAE,CAAC;KAC/B;IAuCD,mBAAmB,CAAC,KAAK,EAAE;QACzB,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;QACrD,SAAS,EAAE,qBAAqB,CAAC;QACjC,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7C,uBAAuB,CAAC,EAAE,OAAO,CAAC;KACnC,GAAG,8BAA8B;CAoHnC"}

package/dist/local/portable-commit-store.js

@@ -0,0 +1,187 @@
+import { stringifyCanonicalJson } from './canonical.js';
+import { convertLocalWorkspaceHistory, local_commit_portable_attestation_schema, parsePortableCommit } from './portable-commit.js';
+export class LocalPortableCommitStore {
+    database;
+    history;
+    constructor(database, history) {
+        this.database = database;
+        this.history = history;
+        this.assertIntegrity();
+    }
+    assertIntegrity() {
+        const commits = this.database
+            .prepare('select id, commit_json from portable_commit order by id')
+            .all();
+        for (const row of commits) {
+            const commit = parsePortableCommit(JSON.parse(row.commit_json));
+            if (commit.id !== row.id) {
+                throw new Error(`Portable commit row ${row.id} has mismatched content.`);
+            }
+        }
+        const mappings = this.database
+            .prepare(`
+          select local_commit_id, portable_commit_id, attestation_json
+          from local_commit_portable_mapping order by local_commit_id
+        `)
+            .all();
+        for (const row of mappings) {
+            const attestation = local_commit_portable_attestation_schema.parse(JSON.parse(row.attestation_json));
+            if (attestation.local_commit_id !== row.local_commit_id ||
+                attestation.portable_commit_id !== row.portable_commit_id) {
+                throw new Error(`Local commit ${row.local_commit_id} has a corrupt portable mapping.`);
+            }
+        }
+    }
+    getCommit(commit_id) {
+        const row = this.database
+            .prepare('select commit_json from portable_commit where id = ?')
+            .get(commit_id);
+        return row
+            ? parsePortableCommit(JSON.parse(row.commit_json))
+            : null;
+    }
+    getLocalMapping(local_commit_id) {
+        const row = this.database
+            .prepare('select portable_commit_id from local_commit_portable_mapping where local_commit_id = ?')
+            .get(local_commit_id);
+        return row?.portable_commit_id ?? null;
+    }
+    getLocalAttestation(local_commit_id) {
+        const row = this.database
+            .prepare('select attestation_json from local_commit_portable_mapping where local_commit_id = ?')
+            .get(local_commit_id);
+        return row
+            ? local_commit_portable_attestation_schema.parse(JSON.parse(row.attestation_json))
+            : null;
+    }
+    planLocalHistory(head_commit_id) {
+        const unmapped_local_commit_ids = new Set();
+        const required_author_workspace_ids = new Set();
+        const external_parent_ids = new Set();
+        const visiting = new Set();
+        const collect = (commit_id) => {
+            if (this.getLocalMapping(commit_id))
+                return;
+            if (this.getCommit(commit_id))
+                return;
+            const commit = this.history.getCommit(commit_id);
+            if (!commit) {
+                external_parent_ids.add(commit_id);
+                return;
+            }
+            if (visiting.has(commit_id)) {
+                throw new Error('Local commit history contains a cycle.');
+            }
+            if (unmapped_local_commit_ids.has(commit_id))
+                return;
+            if (commit.validation_status !== 'passed') {
+                throw new Error(`Local commit ${commit.id} did not pass validation.`);
+            }
+            visiting.add(commit_id);
+            commit.parent_ids.forEach(collect);
+            visiting.delete(commit_id);
+            unmapped_local_commit_ids.add(commit.id);
+            required_author_workspace_ids.add(commit.author_workspace_id);
+        };
+        collect(head_commit_id);
+        return {
+            version: 1,
+            head_local_commit_id: head_commit_id,
+            head_portable_commit_id: this.getLocalMapping(head_commit_id),
+            unmapped_local_commit_ids: [...unmapped_local_commit_ids].sort(),
+            required_author_workspace_ids: [...required_author_workspace_ids].sort(),
+            external_parent_ids: [...external_parent_ids].sort()
+        };
+    }
+    migrateLocalHistory(input) {
+        const local_commits = new Map();
+        const visiting = new Set();
+        const resolved_external_parent_ids = { ...input.external_parent_ids };
+        const collect = (commit_id) => {
+            if (local_commits.has(commit_id))
+                return;
+            const existing_mapping = input.reuse_existing_mappings
+                ? this.getLocalMapping(commit_id)
+                : null;
+            if (existing_mapping) {
+                const requested_mapping = resolved_external_parent_ids[commit_id];
+                if (requested_mapping && requested_mapping !== existing_mapping) {
+                    throw new Error(`Local commit ${commit_id} already has a different portable mapping.`);
+                }
+                resolved_external_parent_ids[commit_id] = existing_mapping;
+                return;
+            }
+            const portable_commit = this.getCommit(commit_id);
+            if (portable_commit) {
+                const requested_mapping = resolved_external_parent_ids[commit_id];
+                if (requested_mapping && requested_mapping !== commit_id) {
+                    throw new Error(`Portable commit ${commit_id} cannot be remapped to another parent.`);
+                }
+                resolved_external_parent_ids[commit_id] = commit_id;
+                return;
+            }
+            const commit = this.history.getCommit(commit_id);
+            if (!commit) {
+                if (resolved_external_parent_ids[commit_id])
+                    return;
+                throw new Error(`Local commit parent ${commit_id} requires an explicit portable mapping.`);
+            }
+            if (visiting.has(commit_id)) {
+                throw new Error('Local commit history contains a cycle.');
+            }
+            visiting.add(commit_id);
+            commit.parent_ids.forEach(collect);
+            visiting.delete(commit_id);
+            local_commits.set(commit_id, commit);
+        };
+        [...new Set(input.head_commit_ids)].sort().forEach(collect);
+        const conversion = convertLocalWorkspaceHistory({
+            ...input,
+            external_parent_ids: resolved_external_parent_ids,
+            commits: [...local_commits.values()]
+        });
+        this.database.exec('begin immediate');
+        try {
+            for (const commit of conversion.commits) {
+                const commit_json = stringifyCanonicalJson(commit);
+                this.database
+                    .prepare('insert into portable_commit (id, commit_json) values (?, ?) on conflict(id) do nothing')
+                    .run(commit.id, commit_json);
+                const persisted = this.database
+                    .prepare('select commit_json from portable_commit where id = ?')
+                    .get(commit.id);
+                if (persisted.commit_json !== commit_json) {
+                    throw new Error(`Portable commit ${commit.id} conflicts with stored bytes.`);
+                }
+            }
+            for (const attestation of conversion.attestations) {
+                const attestation_json = stringifyCanonicalJson(attestation);
+                this.database
+                    .prepare(`
+              insert into local_commit_portable_mapping (
+                local_commit_id, portable_commit_id, attestation_json
+              ) values (?, ?, ?)
+              on conflict(local_commit_id) do nothing
+            `)
+                    .run(attestation.local_commit_id, attestation.portable_commit_id, attestation_json);
+                const persisted = this.database
+                    .prepare(`
+              select portable_commit_id, attestation_json
+              from local_commit_portable_mapping where local_commit_id = ?
+            `)
+                    .get(attestation.local_commit_id);
+                if (persisted.portable_commit_id !== attestation.portable_commit_id ||
+                    persisted.attestation_json !== attestation_json) {
+                    throw new Error(`Local commit ${attestation.local_commit_id} already has a different portable mapping.`);
+                }
+            }
+            this.database.exec('commit');
+            return conversion;
+        }
+        catch (error) {
+            this.database.exec('rollback');
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=portable-commit-store.js.map