@software-dlc/cli 0.157.2

package/dist/local/workspace-evidence.d.ts

@@ -0,0 +1,145 @@
+import type { C4EvidenceReferenceSetV1, C4EvidenceReferenceV1, PortableGraph } from '@software-dlc/graph/types';
+import { type ClaimStatusGit } from './workspace-claim-status.js';
+import { type EvidenceEntityKind } from './workspace-evidence-status.js';
+/**
+ * Signing evidence off against the claim it supports, locally
+ * (docs/specs/evidence-claim-freshness.md, ecp-local-sign): the one reference
+ * rule set the landing check and sign share, sign itself, and the sign-field
+ * rule a merge applies. Graph and Git only: the runtime owns the projection
+ * files and the task scope.
+ */
+export declare const SOURCE_CODE_PROVIDER = "sdlc.source_code";
+export type SourceReferenceSpec = {
+    path: string;
+    symbol?: string | null;
+    lines?: [number, number] | null;
+    relation?: string;
+};
+export declare const SOURCE_RELATIONS: readonly ["defines", "references", "calls", "imports", "configures", "tests", "migrates", "renders", "persists", "infers"];
+/**
+ * What is wrong with one reference at `commit`, worded as the landing check
+ * words it, or null when it holds. `lines_at` reads a file's lines at a
+ * commit, null when the file is not there.
+ */
+export declare function sourceReferenceProblem(lines_at: (commit: string, path: string) => Promise<string[] | null>, commit: string, spec: SourceReferenceSpec): Promise<string | null>;
+/**
+ * The `nodes` of a sources file (`.agent-tasks/sources.json`), checked as the
+ * landing reads it. `name` is what messages call the file.
+ */
+export declare function parseSourcesFile(value: unknown, name: string): Record<string, SourceReferenceSpec[]>;
+/** A reference of a sources file that does not hold: its node, its place in the node's list, and why. */
+export type SourceReferenceFailure = {
+    node: string;
+    index: number;
+    path: string;
+    problem: string;
+};
+/**
+ * `sdlc workspace evidence verify`: each reference of a sources file that
+ * does not hold at `commit`, so a caller can keep the ones that do.
+ */
+export declare function sourceReferenceFailures(input: {
+    git: Pick<ClaimStatusGit, 'lines'>;
+    commit: string;
+    nodes: Record<string, SourceReferenceSpec[]>;
+}): Promise<SourceReferenceFailure[]>;
+/** Each problem with a sources file's references at `commit`, worded as the landing check words it. */
+export declare function verifySourceReferences(input: {
+    git: Pick<ClaimStatusGit, 'lines'>;
+    commit: string;
+    nodes: Record<string, SourceReferenceSpec[]>;
+}): Promise<string[]>;
+/** The rule-set view of a stored code reference, or null when it is not one. */
+export declare function sourceReferenceSpec(reference: C4EvidenceReferenceV1): SourceReferenceSpec | null;
+export type EvidenceSignSkip = {
+    kind: EvidenceEntityKind;
+    id: string;
+    reference_id: string;
+    /** The repository the reference cites. */
+    cites: string;
+    /** The repository whose code was read. */
+    read: string;
+};
+export type EvidenceSignFailure = {
+    kind: EvidenceEntityKind;
+    id: string;
+    reference_id: string;
+    problem: string;
+};
+export type EvidenceSignChange = {
+    kind: EvidenceEntityKind;
+    id: string;
+    object_hash: string;
+    signed: string[];
+    converted_legacy: boolean;
+    evidence: C4EvidenceReferenceSetV1;
+};
+export type EvidenceSignPlan = {
+    status: 'signed' | 'unchanged';
+    commit: string;
+    changes: EvidenceSignChange[];
+    /**
+     * Selected entities with nothing signed: no evidence, every reference
+     * already current, or only references `skipped` names.
+     */
+    unchanged: Array<{
+        kind: EvidenceEntityKind;
+        id: string;
+    }>;
+    /**
+     * Code references of selected entities left as they were because they
+     * cite another repository than the one read (`repository_names`): sign
+     * them against a checkout of the repository they cite. Empty otherwise.
+     */
+    skipped: EvidenceSignSkip[];
+} | {
+    status: 'refused';
+    commit: string;
+    failures: EvidenceSignFailure[];
+};
+export type EvidenceSignResult = EvidenceSignPlan & {
+    version: 1;
+    workspace_id: string;
+    /** Signed entities the plan's task scope did not cover; their meta now is. */
+    widened_scope?: Array<{
+        kind: EvidenceEntityKind;
+        id: string;
+    }>;
+};
+/**
+ * What signing the selected entities would write, verifying every code
+ * reference it signs at `commit` first. A code reference is signed whenever
+ * its entity is selected; any other only when its id is in `references`
+ * (reviewing a ticket or a design against the changed claim is a judgment).
+ * Nothing is planned when any reference does not hold. A reference already
+ * pinned to its entity's hash is left as it is, so signing a current entity
+ * changes nothing.
+ */
+export declare function planEvidenceSign(input: {
+    graph: PortableGraph;
+    git: Pick<ClaimStatusGit, 'lines'>;
+    /** A full commit, resolved by the caller. */
+    commit: string;
+    /** observed_at, as YYYY-MM-DDTHH:MM:SSZ. */
+    now: string;
+    nodes?: string[];
+    edges?: string[];
+    references?: string[];
+    /**
+     * Every `owner/name` the repository `git` reads goes by at the signed
+     * commit (repositoryNames), the one its references record first: a fork and
+     * its upstream are one repository. A code reference citing another repository is left as it is
+     * when its entity is selected, and refused when it is named: its code is
+     * not in this repository. Compared case-insensitively, as GitHub names are.
+     * Empty or omitted when no remote names one: every code reference is then
+     * checked here, since a clone may name its remote otherwise (decided
+     * 2026-10-21).
+     */
+    repository_names?: readonly string[] | null;
+}): Promise<EvidenceSignPlan>;
+/**
+ * The meta of an entity file after a sign: current-form evidence, and no
+ * legacy `source_evidence`, which the signed set replaces.
+ */
+export declare function signedMeta(meta: unknown, evidence: C4EvidenceReferenceSetV1): Record<string, unknown>;
+//# sourceMappingURL=workspace-evidence.d.ts.map

package/dist/local/workspace-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-evidence.d.ts","sourceRoot":"","sources":["../../src/local/workspace-evidence.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,EACd,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAChF,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,gCAAgC,CAAC;AAExC;;;;;;GAMG;AAEH,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AAcvD,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,eAAO,MAAM,gBAAgB,4HAWnB,CAAC;AAEX;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EACpE,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqBxB;AAID;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,GACX,MAAM,CAAC,MAAM,EAAE,mBAAmB,EAAE,CAAC,CA8FvC;AAED,yGAAyG;AACzG,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;GAGG;AACH,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;CAC9C,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAoBpC;AAED,uGAAuG;AACvG,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;CAC9C,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAIpB;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,qBAAqB,GAC/B,mBAAmB,GAAG,IAAI,CAqB5B;AAWD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,kBAAkB,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,kBAAkB,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,QAAQ,EAAE,wBAAwB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GACxB;IACE,MAAM,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B;;;OAGG;IACH,SAAS,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,kBAAkB,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D;;;;OAIG;IACH,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B,GACD;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,mBAAmB,EAAE,CAAA;CAAE,CAAC;AAE3E,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,GAAG;IAClD,OAAO,EAAE,CAAC,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,kBAAkB,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjE,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE;IAC5C,KAAK,EAAE,aAAa,CAAC;IACrB,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACnC,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;CAC7C,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuK5B;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,IAAI,EAAE,OAAO,EACb,QAAQ,EAAE,wBAAwB,GACjC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGzB"}

package/dist/local/workspace-evidence.js

@@ -0,0 +1,347 @@
+import { c4_evidence_reference_set_schema } from '@software-dlc/graph/schema';
+import { symbolStatus } from './workspace-claim-status.js';
+import { entityEvidence, entityObjectHash } from './workspace-evidence-status.js';
+/**
+ * Signing evidence off against the claim it supports, locally
+ * (docs/specs/evidence-claim-freshness.md, ecp-local-sign): the one reference
+ * rule set the landing check and sign share, sign itself, and the sign-field
+ * rule a merge applies. Graph and Git only: the runtime owns the projection
+ * files and the task scope.
+ */
+export const SOURCE_CODE_PROVIDER = 'sdlc.source_code';
+function record(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : {};
+}
+export const SOURCE_RELATIONS = [
+    'defines',
+    'references',
+    'calls',
+    'imports',
+    'configures',
+    'tests',
+    'migrates',
+    'renders',
+    'persists',
+    'infers'
+];
+/**
+ * What is wrong with one reference at `commit`, worded as the landing check
+ * words it, or null when it holds. `lines_at` reads a file's lines at a
+ * commit, null when the file is not there.
+ */
+export async function sourceReferenceProblem(lines_at, commit, spec) {
+    const at = `at ${commit.slice(0, 12)}`;
+    const { path } = spec;
+    const lines = await lines_at(commit, path);
+    if (lines === null)
+        return `${path} does not exist ${at}`;
+    const span = spec.lines;
+    if (span && span[1] > lines.length)
+        return `${path} has ${lines.length} lines, so L${span[0]}-L${span[1]} is past its end ${at}`;
+    if (!spec.symbol)
+        return null;
+    const defines = (spec.relation ?? 'defines') === 'defines';
+    const state = symbolStatus(spec.symbol, lines, null, defines, path);
+    if (state === 'symbol_missing')
+        return `${spec.symbol} is not in ${path} ${at}`;
+    if (state === 'symbol_undefined')
+        return (`${path} mentions ${spec.symbol} ${at}, but no declaration of it was found there ` +
+            '(declarations are matched by pattern): if the file only uses it, give the ' +
+            'reference another relation, such as references or calls; if the file does ' +
+            'declare it, give its lines without the symbol');
+    return null;
+}
+const SOURCES_SHAPE = '{"nodes": {"<node id>": [{"path": "..."}, ...]}}';
+/**
+ * The `nodes` of a sources file (`.agent-tasks/sources.json`), checked as the
+ * landing reads it. `name` is what messages call the file.
+ */
+export function parseSourcesFile(value, name) {
+    const data = record(value);
+    // As sources.py load() reads it: an absent or null nodes with a none map is
+    // a file that only says which nodes have no code to cite.
+    let nodes = data.nodes;
+    if ((nodes === undefined || nodes === null) && 'none' in data)
+        nodes = {};
+    if (nodes === null ||
+        typeof nodes !== 'object' ||
+        Array.isArray(nodes) ||
+        !Object.values(nodes).every((specs) => Array.isArray(specs) && specs.length > 0))
+        throw new Error(`${name} must be ${SOURCES_SHAPE}`);
+    const none = Object.hasOwn(data, 'none') ? data.none : {};
+    if (none === null ||
+        typeof none !== 'object' ||
+        Array.isArray(none) ||
+        !Object.values(none).every((reason) => typeof reason === 'string' && reason.trim()))
+        throw new Error(`${name}: "none" must be {"<node id>": "<why it has no code to cite>"}`);
+    const both = Object.keys(none)
+        .filter((node_id) => Object.hasOwn(nodes, node_id))
+        .sort();
+    if (both.length)
+        throw new Error(`${name}: node ${both[0]} is listed with references and under none; give one`);
+    const out = {};
+    for (const [node_id, specs] of Object.entries(nodes)) {
+        const seen = new Set();
+        out[node_id] = specs.map((value) => {
+            const spec = record(value);
+            if (typeof spec.path !== 'string' || !spec.path.trim())
+                throw new Error(`${name}: node ${node_id} has a reference without a path`);
+            // As the landing reads it: a missing relation is defines, a null one is refused.
+            const relation = Object.hasOwn(spec, 'relation')
+                ? spec.relation
+                : 'defines';
+            if (!SOURCE_RELATIONS.includes(relation))
+                throw new Error(`${name}: relation must be one of ${SOURCE_RELATIONS.join(', ')}`);
+            const lines = spec.lines;
+            if (lines !== undefined &&
+                lines !== null &&
+                !(Array.isArray(lines) &&
+                    lines.length === 2 &&
+                    lines.every((n) => Number.isInteger(n) && n >= 1) &&
+                    lines[0] <= lines[1]))
+                throw new Error(`${name}: node ${node_id} ${spec.path}: lines must be [start, end], 1-based`);
+            // A non-empty string or nothing, as sources.py load() reads it.
+            if (spec.symbol !== undefined &&
+                spec.symbol !== null &&
+                !(typeof spec.symbol === 'string' && spec.symbol))
+                throw new Error(`${name}: node ${node_id} ${spec.path}: symbol must be a non-empty string`);
+            const symbol = typeof spec.symbol === 'string' ? spec.symbol : null;
+            const anchor = symbol ?? (Array.isArray(lines) ? `L${lines[0]}-L${lines[1]}` : '');
+            const key = `${spec.path}\u0000${symbol ? 'symbol' : Array.isArray(lines) ? 'lines' : ''}\u0000${anchor}`;
+            if (seen.has(key))
+                throw new Error(`${name}: node ${node_id} lists ${spec.path} ${anchor || '(whole file)'} twice; one reference per file and anchor`);
+            seen.add(key);
+            return {
+                path: spec.path,
+                symbol,
+                lines: Array.isArray(lines) ? [lines[0], lines[1]] : null,
+                relation: relation
+            };
+        });
+    }
+    return out;
+}
+/**
+ * `sdlc workspace evidence verify`: each reference of a sources file that
+ * does not hold at `commit`, so a caller can keep the ones that do.
+ */
+export async function sourceReferenceFailures(input) {
+    const cache = new Map();
+    const lines_at = (commit, path) => {
+        const key = `${commit}\u0000${path}`;
+        if (!cache.has(key))
+            cache.set(key, input.git.lines(commit, path));
+        return cache.get(key);
+    };
+    const failures = [];
+    for (const [node_id, specs] of Object.entries(input.nodes)) {
+        for (const [index, spec] of specs.entries()) {
+            const problem = await sourceReferenceProblem(lines_at, input.commit, spec);
+            if (problem)
+                failures.push({ node: node_id, index, path: spec.path, problem });
+        }
+    }
+    return failures;
+}
+/** Each problem with a sources file's references at `commit`, worded as the landing check words it. */
+export async function verifySourceReferences(input) {
+    return (await sourceReferenceFailures(input)).map((failure) => `node ${failure.node}: ${failure.problem}`);
+}
+/** The rule-set view of a stored code reference, or null when it is not one. */
+export function sourceReferenceSpec(reference) {
+    if (reference.provider_key !== SOURCE_CODE_PROVIDER ||
+        reference.resource.type !== 'file')
+        return null;
+    const anchor = reference.anchor;
+    const symbol = anchor?.type === 'symbol' ? anchor.id : null;
+    const span = /^L(\d+)-L(\d+)$/.exec(String((symbol ? anchor?.selector : anchor?.id) ?? ''));
+    const lines = span && 1 <= Number(span[1]) && Number(span[1]) <= Number(span[2])
+        ? [Number(span[1]), Number(span[2])]
+        : null;
+    return {
+        path: reference.resource.id,
+        symbol,
+        lines,
+        relation: reference.relations.includes('defines') ? 'defines' : 'references'
+    };
+}
+/** The `owner/name` a current-form reference cites (its repository_name ancestor), or null. */
+function citedRepository(reference) {
+    if (reference.origin === 'legacy_v1')
+        return null;
+    const ancestor = (reference.ancestors ?? []).find((candidate) => candidate.type === 'repository_name');
+    return ancestor?.id ?? null;
+}
+/**
+ * What signing the selected entities would write, verifying every code
+ * reference it signs at `commit` first. A code reference is signed whenever
+ * its entity is selected; any other only when its id is in `references`
+ * (reviewing a ticket or a design against the changed claim is a judgment).
+ * Nothing is planned when any reference does not hold. A reference already
+ * pinned to its entity's hash is left as it is, so signing a current entity
+ * changes nothing.
+ */
+export async function planEvidenceSign(input) {
+    const by_kind = {
+        node: new Map(input.graph.nodes.map((node) => [node.id, node])),
+        edge: new Map(input.graph.edges.map((edge) => [edge.id, edge]))
+    };
+    const named = new Set(input.references ?? []);
+    const selected = new Map();
+    const select = (kind, id) => {
+        if (!by_kind[kind].has(id))
+            throw new Error(`${kind === 'node' ? 'Node' : 'Edge'} ${id} is not in the workspace projection.`);
+        selected.set(`${kind}\u0000${id}`, { kind, id });
+    };
+    for (const id of input.nodes ?? [])
+        select('node', id);
+    for (const id of input.edges ?? [])
+        select('edge', id);
+    // A reference named on its own selects the entity holding it, for that reference only.
+    const found = new Set();
+    const only = new Set();
+    for (const kind of ['node', 'edge']) {
+        for (const [id, entity] of by_kind[kind]) {
+            for (const reference of entityEvidence(entity)?.references ?? []) {
+                if (!named.has(reference.reference_id))
+                    continue;
+                found.add(reference.reference_id);
+                const key = `${kind}\u0000${id}`;
+                if (!selected.has(key)) {
+                    selected.set(key, { kind, id });
+                    only.add(key);
+                }
+            }
+        }
+    }
+    const missing = [...named].filter((id) => !found.has(id)).sort();
+    if (missing.length)
+        throw new Error(`No node or edge holds reference ${missing.join(', ')}.`);
+    const cache = new Map();
+    const lines_at = (commit, path) => {
+        const key = `${commit}\u0000${path}`;
+        if (!cache.has(key))
+            cache.set(key, input.git.lines(commit, path));
+        return cache.get(key);
+    };
+    const failures = [];
+    const skipped = [];
+    const changes = [];
+    const unchanged = [];
+    for (const [key, { kind, id }] of [...selected].sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)) {
+        const entity = by_kind[kind].get(id);
+        const evidence = entityEvidence(entity);
+        const object_hash = entityObjectHash(kind, entity);
+        const signed = [];
+        let converted_legacy = false;
+        const references = [];
+        // Legacy evidence converts as a whole: once the node is written as
+        // current-form evidence, readers take every reference as current-form, so a
+        // reference named alone on a node read as legacy signs all of its references.
+        const stored_legacy = (evidence?.references ?? []).some((reference) => reference.origin === 'legacy_v1');
+        for (const reference of evidence?.references ?? []) {
+            const spec = sourceReferenceSpec(reference);
+            const chosen = only.has(key) && !stored_legacy
+                ? named.has(reference.reference_id)
+                : spec !== null || named.has(reference.reference_id);
+            if (!chosen) {
+                references.push(reference);
+                continue;
+            }
+            const cited = spec ? citedRepository(reference) : null;
+            const read = input.repository_names?.[0];
+            if (cited &&
+                read &&
+                !input.repository_names.some((name) => name.toLowerCase() === cited.toLowerCase())) {
+                if (named.has(reference.reference_id))
+                    failures.push({
+                        kind,
+                        id,
+                        reference_id: reference.reference_id,
+                        problem: `cites ${cited}, not ${read}, whose code was read; sign it against a checkout of ${cited}`
+                    });
+                else {
+                    references.push(reference);
+                    skipped.push({
+                        kind,
+                        id,
+                        reference_id: reference.reference_id,
+                        cites: cited,
+                        read
+                    });
+                }
+                continue;
+            }
+            if (spec) {
+                const problem = await sourceReferenceProblem(lines_at, input.commit, spec);
+                if (problem) {
+                    failures.push({
+                        kind,
+                        id,
+                        reference_id: reference.reference_id,
+                        problem
+                    });
+                    continue;
+                }
+            }
+            const legacy = reference.origin === 'legacy_v1';
+            if (!legacy && reference.claim_object_hash === object_hash) {
+                references.push(reference);
+                continue;
+            }
+            // A file digest describes the file at the old revision, so re-pointing a
+            // code reference at the verified commit drops it.
+            const { origin: _origin, content_digest, ...rest } = reference;
+            references.push({
+                ...rest,
+                ...(spec || content_digest === undefined ? {} : { content_digest }),
+                ...(spec
+                    ? {
+                        revision: { kind: 'commit', value: input.commit },
+                        observed_at: input.now
+                    }
+                    : legacy
+                        ? { observed_at: input.now }
+                        : {}),
+                claim_object_hash: object_hash
+            });
+            signed.push(reference.reference_id);
+            converted_legacy ||= legacy;
+        }
+        if (!signed.length) {
+            unchanged.push({ kind, id });
+            continue;
+        }
+        changes.push({
+            kind,
+            id,
+            object_hash,
+            signed,
+            converted_legacy,
+            evidence: c4_evidence_reference_set_schema.parse({
+                ...evidence,
+                references
+            })
+        });
+    }
+    if (failures.length)
+        return { status: 'refused', commit: input.commit, failures };
+    return {
+        status: changes.length ? 'signed' : 'unchanged',
+        commit: input.commit,
+        changes,
+        unchanged,
+        skipped
+    };
+}
+/**
+ * The meta of an entity file after a sign: current-form evidence, and no
+ * legacy `source_evidence`, which the signed set replaces.
+ */
+export function signedMeta(meta, evidence) {
+    const { source_evidence: _legacy, ...rest } = record(meta);
+    return { ...rest, evidence };
+}
+//# sourceMappingURL=workspace-evidence.js.map

package/dist/local/workspace-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-evidence.js","sourceRoot":"","sources":["../../src/local/workspace-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAO9E,OAAO,EAAE,YAAY,EAAuB,MAAM,6BAA6B,CAAC;AAChF,OAAO,EACL,cAAc,EACd,gBAAgB,EAGjB,MAAM,gCAAgC,CAAC;AAExC;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AAEvD,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAeD,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,SAAS;IACT,YAAY;IACZ,OAAO;IACP,SAAS;IACT,YAAY;IACZ,OAAO;IACP,UAAU;IACV,SAAS;IACT,UAAU;IACV,QAAQ;CACA,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAoE,EACpE,MAAc,EACd,IAAyB;IAEzB,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACvC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,GAAG,IAAI,mBAAmB,EAAE,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;IACxB,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM;QAChC,OAAO,GAAG,IAAI,QAAQ,KAAK,CAAC,MAAM,eAAe,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,EAAE,CAAC;IAC/F,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,KAAK,SAAS,CAAC;IAC3D,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACpE,IAAI,KAAK,KAAK,gBAAgB;QAC5B,OAAO,GAAG,IAAI,CAAC,MAAM,cAAc,IAAI,IAAI,EAAE,EAAE,CAAC;IAClD,IAAI,KAAK,KAAK,kBAAkB;QAC9B,OAAO,CACL,GAAG,IAAI,aAAa,IAAI,CAAC,MAAM,IAAI,EAAE,6CAA6C;YAClF,4EAA4E;YAC5E,4EAA4E;YAC5E,+CAA+C,CAChD,CAAC;IACJ,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,aAAa,GAAG,kDAAkD,CAAC;AAEzE;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAc,EACd,IAAY;IAEZ,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,4EAA4E;IAC5E,0DAA0D;IAC1D,IAAI,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC;IAChC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI,MAAM,IAAI,IAAI;QAAE,KAAK,GAAG,EAAE,CAAC;IAC1E,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CACzB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CACpD;QAED,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,YAAY,aAAa,EAAE,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,IACE,IAAI,KAAK,IAAI;QACb,OAAO,IAAI,KAAK,QAAQ;QACxB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CACxB,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CACxD;QAED,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,gEAAgE,CACxE,CAAC;IACJ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;SAC3B,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAe,EAAE,OAAO,CAAC,CAAC;SAC5D,IAAI,EAAE,CAAC;IACV,IAAI,IAAI,CAAC,MAAM;QACb,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,UAAU,IAAI,CAAC,CAAC,CAAC,qDAAqD,CAC9E,CAAC;IACJ,MAAM,GAAG,GAA0C,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAC3C,KAAkC,CACnC,EAAE,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBACpD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,UAAU,OAAO,iCAAiC,CAC1D,CAAC;YACJ,iFAAiF;YACjF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC;gBAC9C,CAAC,CAAC,IAAI,CAAC,QAAQ;gBACf,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,CAAE,gBAAuC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC9D,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,6BAA6B,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClE,CAAC;YACJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACzB,IACE,KAAK,KAAK,SAAS;gBACnB,KAAK,KAAK,IAAI;gBACd,CAAC,CACC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBACpB,KAAK,CAAC,MAAM,KAAK,CAAC;oBAClB,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACjD,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CACrB;gBAED,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,UAAU,OAAO,IAAI,IAAI,CAAC,IAAI,uCAAuC,CAC7E,CAAC;YACJ,gEAAgE;YAChE,IACE,IAAI,CAAC,MAAM,KAAK,SAAS;gBACzB,IAAI,CAAC,MAAM,KAAK,IAAI;gBACpB,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC;gBAEjD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,UAAU,OAAO,IAAI,IAAI,CAAC,IAAI,qCAAqC,CAC3E,CAAC;YACJ,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACpE,MAAM,MAAM,GACV,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACtE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,SAAS,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;YAC1G,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,UAAU,OAAO,UAAU,IAAI,CAAC,IAAI,IAAI,MAAM,IAAI,cAAc,2CAA2C,CACnH,CAAC;YACJ,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM;gBACN,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;gBACzD,QAAQ,EAAE,QAAkB;aAC7B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAUD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAI7C;IACC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC1D,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE;QAChD,MAAM,GAAG,GAAG,GAAG,MAAM,SAAS,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QACnE,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;IACzB,CAAC,CAAC;IACF,MAAM,QAAQ,GAA6B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAC1C,QAAQ,EACR,KAAK,CAAC,MAAM,EACZ,IAAI,CACL,CAAC;YACF,IAAI,OAAO;gBACT,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAI5C;IACC,OAAO,CAAC,MAAM,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAC/C,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CACxD,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CACjC,SAAgC;IAEhC,IACE,SAAS,CAAC,YAAY,KAAK,oBAAoB;QAC/C,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM;QAElC,OAAO,IAAI,CAAC;IACd,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CACjC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CACvD,CAAC;IACF,MAAM,KAAK,GACT,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,IAAI,CAAC;IACX,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE;QAC3B,MAAM;QACN,KAAK;QACL,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;KAC7E,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,SAAS,eAAe,CAAC,SAAgC;IACvD,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,QAAQ,GAAG,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAC/C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,iBAAiB,CACpD,CAAC;IACF,OAAO,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC;AAC9B,CAAC;AAsDD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAqBtC;IACC,MAAM,OAAO,GAAG;QACd,IAAI,EAAE,IAAI,GAAG,CACX,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAsB,CAAC,CAAC,CACnE;QACD,IAAI,EAAE,IAAI,GAAG,CACX,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAsB,CAAC,CAAC,CACnE;KACF,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoD,CAAC;IAC7E,MAAM,MAAM,GAAG,CAAC,IAAwB,EAAE,EAAU,EAAE,EAAE;QACtD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,sCAAsC,CACjF,CAAC;QACJ,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE;QAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvD,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE;QAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvD,uFAAuF;IACvF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,CAAU,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,KAAK,MAAM,SAAS,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;gBACjE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC;oBAAE,SAAS;gBACjD,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBAClC,MAAM,GAAG,GAAG,GAAG,IAAI,SAAS,EAAE,EAAE,CAAC;gBACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;oBAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjE,IAAI,OAAO,CAAC,MAAM;QAChB,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC1D,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE;QAChD,MAAM,GAAG,GAAG,GAAG,MAAM,SAAS,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QACnE,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;IACzB,CAAC,CAAC;IACF,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,MAAM,SAAS,GAAoD,EAAE,CAAC;IACtE,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAChE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3B,EAAE,CAAC;QACF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAC7B,MAAM,UAAU,GAA4B,EAAE,CAAC;QAC/C,mEAAmE;QACnE,4EAA4E;QAC5E,8EAA8E;QAC9E,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CACrD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,WAAW,CAChD,CAAC;QACF,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,MAAM,GACV,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa;gBAC7B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC;gBACnC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACzD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3B,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACvD,MAAM,IAAI,GAAG,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC;YACzC,IACE,KAAK;gBACL,IAAI;gBACJ,CAAC,KAAK,CAAC,gBAAiB,CAAC,IAAI,CAC3B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CACrD,EACD,CAAC;gBACD,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC;oBACnC,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI;wBACJ,EAAE;wBACF,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,OAAO,EAAE,SAAS,KAAK,SAAS,IAAI,wDAAwD,KAAK,EAAE;qBACpG,CAAC,CAAC;qBACA,CAAC;oBACJ,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC3B,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI;wBACJ,EAAE;wBACF,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,KAAK,EAAE,KAAK;wBACZ,IAAI;qBACL,CAAC,CAAC;gBACL,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAC1C,QAAQ,EACR,KAAK,CAAC,MAAM,EACZ,IAAI,CACL,CAAC;gBACF,IAAI,OAAO,EAAE,CAAC;oBACZ,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI;wBACJ,EAAE;wBACF,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,OAAO;qBACR,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,KAAK,WAAW,CAAC;YAChD,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,iBAAiB,KAAK,WAAW,EAAE,CAAC;gBAC3D,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3B,SAAS;YACX,CAAC;YACD,yEAAyE;YACzE,kDAAkD;YAClD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC;YAC/D,UAAU,CAAC,IAAI,CAAC;gBACd,GAAG,IAAI;gBACP,GAAG,CAAC,IAAI,IAAI,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;gBACnE,GAAG,CAAC,IAAI;oBACN,CAAC,CAAC;wBACE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;wBAC1D,WAAW,EAAE,KAAK,CAAC,GAAG;qBACvB;oBACH,CAAC,CAAC,MAAM;wBACN,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,GAAG,EAAE;wBAC5B,CAAC,CAAC,EAAE,CAAC;gBACT,iBAAiB,EAAE,WAAiC;aACrD,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACpC,gBAAgB,KAAK,MAAM,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,EAAE;YACF,WAAW;YACX,MAAM;YACN,gBAAgB;YAChB,QAAQ,EAAE,gCAAgC,CAAC,KAAK,CAAC;gBAC/C,GAAG,QAAQ;gBACX,UAAU;aACX,CAA6B;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM;QACjB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC/D,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW;QAC/C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO;QACP,SAAS;QACT,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CACxB,IAAa,EACb,QAAkC;IAElC,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC"}

package/dist/local/workspace-graph-store.d.ts

@@ -0,0 +1,32 @@
+import type { PortableGraph } from '@software-dlc/graph/types';
+export declare function resolveLocalRepositoryStateDirectory(input: {
+    git_common_dir: string;
+    override?: string;
+}): string;
+export declare function localGraphRootHash(graph: PortableGraph): string;
+export type LocalWorkspaceGraphObject = {
+    root_hash: string;
+    object_path: string;
+    size_bytes: number;
+    modified_at_ms: number;
+};
+export type LocalWorkspaceGraphObjectPruneResult = 'removed' | 'absent' | 'changed' | 'retained';
+export declare class LocalWorkspaceGraphStore {
+    readonly state_dir: string;
+    constructor(state_dir: string);
+    writeGraph(graph: PortableGraph): Promise<string>;
+    private withGraphObjectLock;
+    withObjectStoreLock<T>(operation: string, run: () => Promise<T>): Promise<T>;
+    listGraphObjects(): Promise<LocalWorkspaceGraphObject[]>;
+    pruneGraphObject(input: {
+        root_hash: string;
+        expected_size_bytes: number;
+        expected_modified_at: string;
+        is_retained: () => boolean;
+    }): Promise<LocalWorkspaceGraphObjectPruneResult>;
+    private inspectGraphObject;
+    private removeTemporaryGraphObject;
+    private writeGraphUnlocked;
+    readGraph(root_hash: string): Promise<PortableGraph>;
+}
+//# sourceMappingURL=workspace-graph-store.d.ts.map

package/dist/local/workspace-graph-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-graph-store.d.ts","sourceRoot":"","sources":["../../src/local/workspace-graph-store.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAa/D,wBAAgB,oCAAoC,CAAC,KAAK,EAAE;IAC1D,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,CAOT;AAYD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAE/D;AASD,MAAM,MAAM,yBAAyB,GAAG;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,oCAAoC,GAC5C,SAAS,GACT,QAAQ,GACR,SAAS,GACT,UAAU,CAAC;AAEf,qBAAa,wBAAwB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,EAAE,MAAM;IAOvB,UAAU,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;YAUzC,mBAAmB;IAoB3B,mBAAmB,CAAC,CAAC,EACzB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACpB,OAAO,CAAC,CAAC,CAAC;IAQP,gBAAgB,IAAI,OAAO,CAAC,yBAAyB,EAAE,CAAC;IA0DxD,gBAAgB,CAAC,KAAK,EAAE;QAC5B,SAAS,EAAE,MAAM,CAAC;QAClB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,WAAW,EAAE,MAAM,OAAO,CAAC;KAC5B,GAAG,OAAO,CAAC,oCAAoC,CAAC;YA+BnC,kBAAkB;YA0BlB,0BAA0B;YA6B1B,kBAAkB;IA6C1B,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CA2B3D"}