@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/core/project-manager.js

@@ -0,0 +1,339 @@
+import { randomUUID } from "crypto";
+import * as fs from "fs";
+import { AppError } from "../middleware/error-handler.js";
+// Plan D'' Sub-iterate 3: bridge/config-reader is deleted. `mode` is no
+// longer server-derived; the client treats `undefined` as "standalone"
+// (the old default when no run_config was present).
+function getProjectMode(_projectPath) {
+    return undefined;
+}
+import { loadProfile, getProfilesDir } from "./profile-loader.js";
+import { checkContractVersion, RUN_CONFIG_CONTRACT_VERSION, } from "./contract-version.js";
+// F07 (D08) — corrupt-file-tolerant load + atomic write, split out because
+// this file is at its bloat ceiling. See project-registry-io.ts.
+import { loadProjectRegistry, atomicWriteRegistry } from "./project-registry-io.js";
+/**
+ * Section 02 (iterate 3) — reserved projectId for the synthesized
+ * "Unassigned" pseudo-project bucket (ADR-037). Kept in sync with
+ * client/src/lib/projectIds.ts and server/src/core/sdk-sessions-store.ts
+ * (intentional duplication per conventions.md — the client, the store,
+ * and the project-manager don't import each other's copies).
+ */
+export const UNASSIGNED_PROJECT_ID = "unassigned";
+export class ProjectManager {
+    registryPath;
+    deps;
+    projects = new Map();
+    previewCapCache = new Map();
+    constructor(registryPath, deps) {
+        this.registryPath = registryPath;
+        this.deps = deps;
+    }
+    async load() {
+        // F07 (D08) — corrupt-file-tolerant read (project-registry-io.ts): a
+        // truncated/empty projects.json (force-kill mid fire-and-forget persist)
+        // is quarantined aside + loads empty instead of exiting FATAL on boot.
+        this.projects = await loadProjectRegistry(this.deps, this.registryPath);
+    }
+    create(data) {
+        if (!this.deps.existsSync(data.path)) {
+            throw new AppError("Project path does not exist", 400);
+        }
+        const now = new Date().toISOString();
+        const project = {
+            ...data,
+            id: randomUUID(),
+            createdAt: now,
+            lastActive: now,
+        };
+        this.projects.set(project.id, project);
+        this.persist();
+        return this.withMode(project);
+    }
+    /**
+     * Iterate 14.0 — projects are serialized with a derived `mode` field
+     * read from shipwright_run_config.json on each call. Kept here (not in
+     * route handlers) so every consumer — REST, SSE broadcasts, etc. —
+     * sees consistent mode values without each one re-deriving.
+     *
+     * Iterate 14.1 — also injects `hasPreview` derived from the profile's
+     * dev_server.command entry. Same pattern as mode: server-derived so
+     * clients never re-derive it.
+     */
+    withMode(project) {
+        return {
+            ...project,
+            mode: getProjectMode(project.path),
+            hasPreview: this.hasPreviewCapability(project.path),
+            adopted: this.isAdopted(project.path),
+        };
+    }
+    /**
+     * 2026-04-23 — true iff `<projectPath>/shipwright_run_config.json`
+     * exists. Drives the WebUI's visibility gate for the one-shot `adopt`
+     * phase (NewIssueModal filters that option when adopted=true). Cheap
+     * `existsSync` probe; no file read, no cache needed.
+     */
+    isAdopted(projectPath) {
+        if (!projectPath)
+            return false;
+        return this.deps.existsSync(`${projectPath}/shipwright_run_config.json`);
+    }
+    /**
+     * Iterate 14.1 — true when the project's profile (as written into
+     * shipwright_run_config.json by shipwright-run) declares a dev_server.
+     *
+     * Chain:
+     *   projectPath → shipwright_run_config.json.profile →
+     *   shared/profiles/{profile}.json.dev_server.command exists?
+     *
+     * Any missing link → false (no preview button). The cache key is
+     * projectPath, invalidated on run_config mtime change. profile-loader
+     * has its own separate mtime cache so the profile JSON is only re-read
+     * when the profile file itself changes.
+     *
+     * Public for direct use by the preview-route authorization check.
+     */
+    hasPreviewCapability(projectPath) {
+        const runCfgPath = `${projectPath}/shipwright_run_config.json`;
+        if (!this.deps.existsSync(runCfgPath))
+            return false;
+        // Try to stat for mtime-based cache. If the injected stat helper is
+        // absent (unit tests) or stat fails, we fall through to an uncached
+        // read each call — correctness over performance in that degraded path.
+        let mtimeMs = null;
+        try {
+            const stat = (this.deps.statSync ?? fs.statSync)(runCfgPath);
+            mtimeMs = stat.mtimeMs;
+            const cached = this.previewCapCache.get(projectPath);
+            if (cached && cached.mtimeMs === mtimeMs)
+                return cached.hasPreview;
+        }
+        catch {
+            // fall through — uncached read
+        }
+        let profileName = "";
+        try {
+            const readFileSync = this.deps.readFileSync ?? fs.readFileSync;
+            const content = readFileSync(runCfgPath, "utf-8");
+            const config = JSON.parse(content);
+            checkContractVersion({
+                artefact: "shipwright_run_config.json",
+                path: runCfgPath,
+                declared: config.contractVersion,
+                knownMax: RUN_CONFIG_CONTRACT_VERSION,
+            });
+            if (typeof config.profile === "string")
+                profileName = config.profile;
+        }
+        catch {
+            return false;
+        }
+        if (!profileName) {
+            if (mtimeMs !== null) {
+                this.previewCapCache.set(projectPath, { hasPreview: false, mtimeMs });
+            }
+            return false;
+        }
+        const loader = this.deps.loadProfile ?? ((n) => loadProfile(n, getProfilesDir()));
+        const profile = loader(profileName);
+        const hasPreview = Boolean(profile?.dev_server?.command);
+        if (mtimeMs !== null) {
+            this.previewCapCache.set(projectPath, { hasPreview, mtimeMs });
+        }
+        return hasPreview;
+    }
+    getAll() {
+        const real = Array.from(this.projects.values())
+            .sort((a, b) => new Date(b.lastActive).getTime() - new Date(a.lastActive).getTime())
+            .map((p) => this.withMode(p));
+        // Section 02 (iterate 3) — synthesize the Unassigned pseudo-project
+        // iff any task references it or an unknown id (ADR-037). Never
+        // persisted to projects.json — persist() filters !synthesized.
+        const taskProjectIds = this.deps.getTaskProjectIds?.();
+        if (taskProjectIds && taskProjectIds.size > 0) {
+            const realIds = new Set(real.map((p) => p.id));
+            let needsSynthesized = false;
+            for (const id of taskProjectIds) {
+                if (id === UNASSIGNED_PROJECT_ID || !realIds.has(id)) {
+                    needsSynthesized = true;
+                    break;
+                }
+            }
+            if (needsSynthesized) {
+                real.push(this.buildSynthesizedUnassigned());
+            }
+        }
+        return real;
+    }
+    buildSynthesizedUnassigned() {
+        // The synthesized row carries the `synthesized` flag so the client
+        // can render it muted and suppress edit / delete affordances. color
+        // uses a muted-token marker so the sidebar dot styles consistently
+        // without leaking a hard-coded hex into the project row.
+        return {
+            id: UNASSIGNED_PROJECT_ID,
+            name: "Unassigned",
+            path: "",
+            profile: "",
+            status: "active",
+            createdAt: "",
+            lastActive: "",
+            settings: { color: "var(--color-muted)" },
+            synthesized: true,
+        };
+    }
+    getById(id) {
+        const project = this.projects.get(id);
+        return project ? this.withMode(project) : undefined;
+    }
+    update(id, patch) {
+        const existing = this.projects.get(id);
+        if (!existing)
+            throw new AppError("Project not found", 404);
+        // Iterate 3.7e-b3 (2026-04-22) — deep-merge `settings` so partial
+        // patches like `{ settings: { color } }` don't clobber other keys
+        // (phaseToStatusMapping, autonomy, envVars, claudePluginDirs).
+        // Previously `{ ...existing, ...patch }` replaced `settings` whole,
+        // which silently nuked unrelated config. ProjectSettingsDialog +
+        // useSavePhaseMapping + useUpdateAutonomy all rely on this merge.
+        const mergedSettings = patch.settings !== undefined
+            ? { ...(existing.settings ?? {}), ...patch.settings }
+            : existing.settings;
+        const updated = {
+            ...existing,
+            ...patch,
+            settings: mergedSettings,
+            id: existing.id,
+            lastActive: new Date().toISOString(),
+        };
+        this.projects.set(id, updated);
+        this.persist();
+        return this.withMode(updated);
+    }
+    /**
+     * Iterate 10 — write the per-project autonomy setting into BOTH
+     * projects.json (in-memory + webui registry) AND the project's own
+     * `shipwright_run_config.json` so the Shipwright plugin chain
+     * (shipwright-project, shipwright-build, etc.) actually reads the
+     * same value. Prior to this, autonomy set via the webui Settings page
+     * was a silent placebo because the plugins load run_config.json
+     * directly, not projects.json.
+     *
+     * The run_config write merges with existing content so we don't
+     * clobber other fields. A missing file is created fresh with just
+     * the autonomy field. Write failures are logged but non-fatal —
+     * the in-memory update always succeeds so the UI stays responsive.
+     */
+    async updateAutonomy(id, autonomy) {
+        const existing = this.projects.get(id);
+        if (!existing)
+            throw new AppError("Project not found", 404);
+        // 1. Update in-memory + projects.json
+        const updated = this.update(id, {
+            settings: { ...existing.settings, autonomy },
+        });
+        // 2. Merge into <project>/shipwright_run_config.json (non-fatal).
+        const runConfigPath = `${existing.path}/shipwright_run_config.json`;
+        try {
+            let runConfig = {};
+            if (this.deps.existsSync(runConfigPath)) {
+                const content = await this.deps.readFile(runConfigPath, "utf-8");
+                try {
+                    runConfig = JSON.parse(content);
+                }
+                catch {
+                    // Malformed — fall back to fresh object so we don't lose the write.
+                    runConfig = {};
+                }
+            }
+            runConfig.autonomy = autonomy;
+            await this.deps.writeFile(runConfigPath, JSON.stringify(runConfig, null, 2));
+        }
+        catch (err) {
+            console.error(JSON.stringify({
+                level: "warn",
+                message: "Autonomy sync to shipwright_run_config.json failed",
+                projectId: id,
+                error: String(err),
+            }));
+        }
+        return updated;
+    }
+    delete(id) {
+        if (!this.projects.has(id))
+            throw new AppError("Project not found", 404);
+        this.projects.delete(id);
+        this.persist();
+    }
+    touchLastActive(id) {
+        const existing = this.projects.get(id);
+        if (existing) {
+            existing.lastActive = new Date().toISOString();
+            this.persist();
+        }
+    }
+    discover(directory) {
+        const entries = this.deps.readdirSync(directory, { withFileTypes: true });
+        const found = [];
+        for (const entry of entries) {
+            if (!entry.isDirectory())
+                continue;
+            const fullPath = `${directory}/${entry.name}`;
+            const hasRunConfig = this.deps.existsSync(`${fullPath}/shipwright_run_config.json`);
+            const hasProjectConfig = this.deps.existsSync(`${fullPath}/shipwright_project_config.json`);
+            if (hasRunConfig || hasProjectConfig) {
+                const now = new Date().toISOString();
+                found.push({
+                    id: randomUUID(),
+                    name: entry.name,
+                    path: fullPath,
+                    profile: "default",
+                    status: "active",
+                    createdAt: now,
+                    lastActive: now,
+                });
+            }
+        }
+        return found;
+    }
+    persist() {
+        // Section 02 — defense-in-depth. The in-memory `projects` Map never
+        // holds the synthesized row (buildSynthesizedUnassigned only runs
+        // inside getAll()), so this filter is a no-op today. Kept as a guard
+        // against a future caller that does `projects.set("unassigned", ...)`
+        // without realising it's supposed to stay off disk.
+        const arr = Array.from(this.projects.values()).filter((p) => !p.synthesized);
+        const data = JSON.stringify(arr, null, 2);
+        // Fire-and-forget: keeps create/update/delete/touchLastActive sync so
+        // route handlers don't need to await file I/O. proper-lockfile
+        // serializes concurrent writers in-process, so the JSON stays
+        // consistent even under bursty updates (e.g. multiple HTTP requests
+        // + touchLastActive from heartbeat). Errors are logged, not thrown,
+        // because the in-memory Map is still authoritative until next load.
+        void this.persistLocked(data).catch((err) => console.error(JSON.stringify({
+            level: "error",
+            message: "projects.json persist failed",
+            error: String(err),
+        })));
+    }
+    async persistLocked(data) {
+        if (this.deps.ensureFile)
+            this.deps.ensureFile(this.registryPath);
+        // F07 (D08) — atomic tmp+rename write (project-registry-io.ts) shrinks the
+        // corruption window at the source. No lock ⇒ still write (atomic when a
+        // rename dep is present, else plain in-place — the prior behaviour).
+        if (!this.deps.lock) {
+            await atomicWriteRegistry(this.deps, this.registryPath, data);
+            return;
+        }
+        const release = await this.deps.lock(this.registryPath);
+        try {
+            await atomicWriteRegistry(this.deps, this.registryPath, data);
+        }
+        finally {
+            await release();
+        }
+    }
+}
+//# sourceMappingURL=project-manager.js.map

package/server/dist/core/project-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-manager.js","sourceRoot":"","sources":["../../src/core/project-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,wEAAwE;AACxE,uEAAuE;AACvE,oDAAoD;AACpD,SAAS,cAAc,CAAC,YAAoB;IAC1C,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAsB,MAAM,qBAAqB,CAAC;AACtF,OAAO,EACL,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,2EAA2E;AAC3E,iEAAiE;AACjE,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAwDlD,MAAM,OAAO,cAAc;IAKf;IACA;IALF,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,eAAe,GAAG,IAAI,GAAG,EAA2B,CAAC;IAE7D,YACU,YAAoB,EACpB,IAAwB;QADxB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,SAAI,GAAJ,IAAI,CAAoB;IAC/B,CAAC;IAEJ,KAAK,CAAC,IAAI;QACR,qEAAqE;QACrE,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,CAAC,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,CAAC,IAAsD;QAC3D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,QAAQ,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,OAAO,GAAY;YACvB,GAAG,IAAI;YACP,EAAE,EAAE,UAAU,EAAE;YAChB,SAAS,EAAE,GAAG;YACd,UAAU,EAAE,GAAG;SAChB,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED;;;;;;;;;OASG;IACK,QAAQ,CAAC,OAAgB;QAC/B,OAAO;YACL,GAAG,OAAO;YACV,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC;YAClC,UAAU,EAAE,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC;YACnD,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;SACtC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,WAAmB;QAC3B,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,WAAW,6BAA6B,CAAC,CAAC;IAC3E,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,oBAAoB,CAAC,WAAmB;QACtC,MAAM,UAAU,GAAG,GAAG,WAAW,6BAA6B,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QAEpD,oEAAoE;QACpE,oEAAoE;QACpE,uEAAuE;QACvE,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,CAAC;YAC7D,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrD,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;gBAAE,OAAO,MAAM,CAAC,UAAU,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;QAED,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,YAAY,CAAC;YAC/D,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAW,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAGhC,CAAC;YACF,oBAAoB,CAAC;gBACnB,QAAQ,EAAE,4BAA4B;gBACtC,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,MAAM,CAAC,eAAe;gBAChC,QAAQ,EAAE,2BAA2B;aACtC,CAAC,CAAC;YACH,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;gBAAE,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QAC1F,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAEzD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM;QACJ,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;aAC5C,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAC9E;aACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAEhC,oEAAoE;QACpE,+DAA+D;QAC/D,+DAA+D;QAC/D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QACvD,IAAI,cAAc,IAAI,cAAc,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/C,IAAI,gBAAgB,GAAG,KAAK,CAAC;YAC7B,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;gBAChC,IAAI,EAAE,KAAK,qBAAqB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBACrD,gBAAgB,GAAG,IAAI,CAAC;oBACxB,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,0BAA0B;QAChC,mEAAmE;QACnE,oEAAoE;QACpE,mEAAmE;QACnE,yDAAyD;QACzD,OAAO;YACL,EAAE,EAAE,qBAAqB;YACzB,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,EAAE;YACR,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE;YACzC,WAAW,EAAE,IAAI;SAClB,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtD,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,KAAuB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAC5D,kEAAkE;QAClE,kEAAkE;QAClE,+DAA+D;QAC/D,oEAAoE;QACpE,iEAAiE;QACjE,kEAAkE;QAClE,MAAM,cAAc,GAClB,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC1B,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE;YACrD,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxB,MAAM,OAAO,GAAY;YACvB,GAAG,QAAQ;YACX,GAAG,KAAK;YACR,QAAQ,EAAE,cAAc;YACxB,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,cAAc,CAAC,EAAU,EAAE,QAAiC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAE5D,sCAAsC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;YAC9B,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE;SAC7C,CAAC,CAAC;QAEH,kEAAkE;QAClE,MAAM,aAAa,GAAG,GAAG,QAAQ,CAAC,IAAI,6BAA6B,CAAC;QACpE,IAAI,CAAC;YACH,IAAI,SAAS,GAA4B,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;gBACjE,IAAI,CAAC;oBACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;gBAC7D,CAAC;gBAAC,MAAM,CAAC;oBACP,oEAAoE;oBACpE,SAAS,GAAG,EAAE,CAAC;gBACjB,CAAC;YACH,CAAC;YACD,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC9B,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC3B,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,oDAAoD;gBAC7D,SAAS,EAAE,EAAE;gBACb,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;aACnB,CAAC,CAAC,CAAC;QACN,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,EAAU;QACf,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QACzE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,eAAe,CAAC,EAAU;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,SAAiB;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAc,EAAE,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAAE,SAAS;YACnC,MAAM,QAAQ,GAAG,GAAG,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,QAAQ,6BAA6B,CAAC,CAAC;YACpF,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,QAAQ,iCAAiC,CAAC,CAAC;YAC5F,IAAI,YAAY,IAAI,gBAAgB,EAAE,CAAC;gBACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrC,KAAK,CAAC,IAAI,CAAC;oBACT,EAAE,EAAE,UAAU,EAAE;oBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,SAAS;oBAClB,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,GAAG;oBACd,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,OAAO;QACb,oEAAoE;QACpE,kEAAkE;QAClE,qEAAqE;QACrE,sEAAsE;QACtE,oDAAoD;QACpD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACnD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAE,CAA+B,CAAC,WAAW,CACrD,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1C,sEAAsE;QACtE,+DAA+D;QAC/D,8DAA8D;QAC9D,oEAAoE;QACpE,oEAAoE;QACpE,oEAAoE;QACpE,KAAK,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC1C,OAAO,CAAC,KAAK,CACX,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,8BAA8B;YACvC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;SACnB,CAAC,CACH,CACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAAY;QACtC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAClE,2EAA2E;QAC3E,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAChE,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;CACF"}

package/server/dist/core/project-registry-io.d.ts

@@ -0,0 +1,64 @@
+import type { Project } from "../types/project.js";
+/** The narrow fs surface these helpers need — structurally satisfied by ProjectManagerDeps. */
+export interface RegistryIoDeps {
+    readFile: (path: string, encoding: string) => Promise<string>;
+    writeFile: (path: string, data: string) => Promise<void>;
+    existsSync: (path: string) => boolean;
+    mkdirSync: (path: string, opts?: {
+        recursive: boolean;
+    }) => void;
+    /**
+     * Optional atomic rename (`fs.promises.rename` in production). When absent
+     * (unit doubles that write to an in-memory store) atomicity is impossible,
+     * so the write falls back to a plain in-place write and the quarantine
+     * copies the bytes aside via writeFile instead of renaming.
+     */
+    rename?: (from: string, to: string) => Promise<void>;
+}
+export type RegistryParse = {
+    kind: "empty";
+} | {
+    kind: "corrupt";
+} | {
+    kind: "projects";
+    projects: Project[];
+};
+/**
+ * Read + parse projects.json into an id→Project map, tolerating corruption.
+ * Ensures the parent dir exists; a missing registry is created empty (`[]`);
+ * empty/whitespace content yields an empty map; a corrupt file is quarantined
+ * aside (see quarantineCorruptRegistry) and yields an empty map — so a
+ * truncated projects.json can never make the server exit FATAL on boot (F07).
+ */
+export declare function loadProjectRegistry(deps: RegistryIoDeps, registryPath: string): Promise<Map<string, Project>>;
+/**
+ * Classify raw projects.json bytes without throwing. Empty / whitespace-only
+ * is a legitimately-empty registry; unparseable JSON or a non-array root is
+ * corrupt (a `for..of` over a non-array would throw). A well-formed array
+ * returns its rows for the caller to index.
+ */
+export declare function parseProjectRegistry(content: string): RegistryParse;
+/**
+ * Move a corrupt/unparseable projects.json out of the way so a fresh empty
+ * registry can take its place, and log which file was at fault plus where the
+ * preserved copy lives. Best-effort: a quarantine failure is swallowed so it
+ * can never re-brick the boot it is meant to rescue. With a `rename` dep
+ * (production) the file is renamed aside — cleaner, because the original path
+ * is then absent and the next persist writes a fresh file; with no rename dep
+ * (unit doubles) the bytes are copied aside via writeFile so the content is
+ * still preserved for manual recovery.
+ */
+export declare function quarantineCorruptRegistry(deps: RegistryIoDeps, registryPath: string, content: string): Promise<void>;
+/**
+ * Write the registry atomically: stage to a throwaway `<path>.tmp-<uuid>` then
+ * rename it into place. `fs.rename` is atomic and replaces the destination on
+ * both POSIX and Windows, so a force-kill mid-write lands on the tmp file and
+ * never truncates the live registry.
+ *
+ * With no `rename` dep (unit doubles) atomicity is impossible, so fall back to
+ * a plain in-place write — the exact prior behaviour. A transient rename
+ * failure is self-healing: the caller's persist() is fire-and-forget with an
+ * in-memory Map that stays authoritative, and the next mutation re-persists.
+ */
+export declare function atomicWriteRegistry(deps: RegistryIoDeps, registryPath: string, data: string): Promise<void>;
+//# sourceMappingURL=project-registry-io.d.ts.map

package/server/dist/core/project-registry-io.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-registry-io.d.ts","sourceRoot":"","sources":["../../src/core/project-registry-io.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAyBnD,+FAA+F;AAC/F,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IACjE;;;;;OAKG;IACH,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;CAAE,CAAC;AAE9C;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,cAAc,EACpB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA2C/B;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAUnE;AAED;;;;;;;;;GASG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,cAAc,EACpB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,cAAc,EACpB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAoBf"}

package/server/dist/core/project-registry-io.js

@@ -0,0 +1,194 @@
+/*
+ * project-registry-io.ts — F07 (D08): corrupt-file tolerance + atomic write
+ * for the projects.json registry read/write path.
+ *
+ * ProjectManager.load() previously ran a bare JSON.parse with zero corrupt-file
+ * tolerance, while its writers are non-atomic fire-and-forget persists. A
+ * force-kill (the documented `taskkill` dev workflow), a power loss, or a
+ * tsx-watch restart landing mid-persist truncates projects.json — which then
+ * made the server exit FATAL on EVERY subsequent boot with an unattributed
+ * parse error.
+ *
+ * These helpers are factored out of project-manager.ts (which sits at its bloat
+ * ceiling) and mirror the sdk-sessions-store recovery pattern:
+ *   • empty / whitespace-only  → treat as an empty registry (nothing to save).
+ *   • unreadable (transient EBUSY/EPERM/EACCES lock, or a permission error) →
+ *     retry on the rule-6 budget, then degrade to an empty registry — a boot
+ *     load must never throw-and-brick.
+ *   • unparseable / wrong-shape → quarantine the bytes aside
+ *     (`.corrupt-<ts>-<uuid>`) and continue with an empty registry.
+ *   • persist → stage to `<path>.tmp-<uuid>` then rename into place (retried on
+ *     a transient lock; the tmp is unlinked on a hard failure), so a force-kill
+ *     mid-write lands on the throwaway tmp, never truncating the live file
+ *     (shrinking the corruption window at the source).
+ */
+import { randomUUID } from "crypto";
+import { unlink as fsUnlink } from "node:fs/promises";
+/** fs error `code`s that are transient on Windows — retried (CLAUDE.md rule 6). */
+const RETRYABLE_FS_CODES = new Set(["EBUSY", "EPERM", "EACCES"]);
+/**
+ * Retry a transient (EBUSY/EPERM/EACCES) fs op up to 6× with 50→1600 ms backoff
+ * — the torn-read budget from CLAUDE.md rule 6 / `core/session-watcher.ts`,
+ * replicated here (sdk-sessions-merge's copy is module-private). A non-transient
+ * error, or exhaustion after 6 attempts, re-throws for the caller to handle.
+ */
+async function withFsRetry(op) {
+    let delay = 50;
+    for (let attempt = 0;; attempt++) {
+        try {
+            return await op();
+        }
+        catch (err) {
+            const code = err.code;
+            if (attempt >= 5 || !code || !RETRYABLE_FS_CODES.has(code))
+                throw err;
+            await new Promise((r) => setTimeout(r, delay));
+            delay = Math.min(delay * 2, 1600);
+        }
+    }
+}
+/**
+ * Read + parse projects.json into an id→Project map, tolerating corruption.
+ * Ensures the parent dir exists; a missing registry is created empty (`[]`);
+ * empty/whitespace content yields an empty map; a corrupt file is quarantined
+ * aside (see quarantineCorruptRegistry) and yields an empty map — so a
+ * truncated projects.json can never make the server exit FATAL on boot (F07).
+ */
+export async function loadProjectRegistry(deps, registryPath) {
+    const projects = new Map();
+    const dir = registryPath.substring(0, registryPath.lastIndexOf("/"));
+    if (dir && !deps.existsSync(dir))
+        deps.mkdirSync(dir, { recursive: true });
+    if (!deps.existsSync(registryPath)) {
+        await deps.writeFile(registryPath, "[]");
+        return projects;
+    }
+    // A boot-time load must NEVER throw-and-brick. existsSync already passed, so a
+    // transient Windows lock (EBUSY/EPERM/EACCES — the same force-kill class F07
+    // targets) or a permission error here would otherwise be FATAL. Retry the read
+    // on the transient codes (rule 6); a PERSISTENT failure degrades to an empty
+    // registry — the next persist rewrites a fresh file. (Unlike D04's reReadDisk,
+    // which rejects a *persist* on read failure to avoid clobbering a peer; this is
+    // a boot load with nothing to clobber, so degrade-to-empty is correct.)
+    let content;
+    try {
+        content = await withFsRetry(() => deps.readFile(registryPath, "utf-8"));
+    }
+    catch (err) {
+        console.error(JSON.stringify({
+            level: "error",
+            message: "projects.json could not be read — starting with an empty registry",
+            registryPath,
+            error: String(err),
+        }));
+        return projects;
+    }
+    const parsed = parseProjectRegistry(content);
+    if (parsed.kind === "corrupt") {
+        await quarantineCorruptRegistry(deps, registryPath, content);
+        return projects;
+    }
+    if (parsed.kind === "projects") {
+        for (const p of parsed.projects) {
+            if (p && typeof p === "object" && typeof p.id === "string") {
+                projects.set(p.id, p);
+            }
+        }
+    }
+    return projects;
+}
+/**
+ * Classify raw projects.json bytes without throwing. Empty / whitespace-only
+ * is a legitimately-empty registry; unparseable JSON or a non-array root is
+ * corrupt (a `for..of` over a non-array would throw). A well-formed array
+ * returns its rows for the caller to index.
+ */
+export function parseProjectRegistry(content) {
+    if (!content.trim())
+        return { kind: "empty" };
+    let parsed;
+    try {
+        parsed = JSON.parse(content);
+    }
+    catch {
+        return { kind: "corrupt" };
+    }
+    if (!Array.isArray(parsed))
+        return { kind: "corrupt" };
+    return { kind: "projects", projects: parsed };
+}
+/**
+ * Move a corrupt/unparseable projects.json out of the way so a fresh empty
+ * registry can take its place, and log which file was at fault plus where the
+ * preserved copy lives. Best-effort: a quarantine failure is swallowed so it
+ * can never re-brick the boot it is meant to rescue. With a `rename` dep
+ * (production) the file is renamed aside — cleaner, because the original path
+ * is then absent and the next persist writes a fresh file; with no rename dep
+ * (unit doubles) the bytes are copied aside via writeFile so the content is
+ * still preserved for manual recovery.
+ */
+export async function quarantineCorruptRegistry(deps, registryPath, content) {
+    // `-${randomUUID()}` guards against a same-millisecond collision clobbering a
+    // prior aside copy (rapid restart loops / repeated recovery attempts).
+    const asidePath = `${registryPath}.corrupt-${Date.now()}-${randomUUID()}`;
+    const rename = deps.rename;
+    let quarantined = false;
+    try {
+        if (rename) {
+            // Retry a transient lock on the aside rename (rule 6) before giving up.
+            await withFsRetry(() => rename(registryPath, asidePath));
+        }
+        else {
+            await deps.writeFile(asidePath, content);
+        }
+        quarantined = true;
+    }
+    catch {
+        // Best-effort — never let a quarantine failure re-throw on boot.
+    }
+    console.error(JSON.stringify({
+        level: "error",
+        // Only claim an aside path when the copy actually landed (the log's
+        // "where the copy lives" must not point at a file that was never written).
+        message: quarantined
+            ? "projects.json was corrupt or unparseable — quarantined aside; starting with an empty registry"
+            : "projects.json was corrupt or unparseable and could NOT be quarantined — starting with an empty registry",
+        registryPath,
+        quarantinedTo: quarantined ? asidePath : null,
+    }));
+}
+/**
+ * Write the registry atomically: stage to a throwaway `<path>.tmp-<uuid>` then
+ * rename it into place. `fs.rename` is atomic and replaces the destination on
+ * both POSIX and Windows, so a force-kill mid-write lands on the tmp file and
+ * never truncates the live registry.
+ *
+ * With no `rename` dep (unit doubles) atomicity is impossible, so fall back to
+ * a plain in-place write — the exact prior behaviour. A transient rename
+ * failure is self-healing: the caller's persist() is fire-and-forget with an
+ * in-memory Map that stays authoritative, and the next mutation re-persists.
+ */
+export async function atomicWriteRegistry(deps, registryPath, data) {
+    const rename = deps.rename;
+    if (!rename) {
+        await deps.writeFile(registryPath, data);
+        return;
+    }
+    const tmp = `${registryPath}.tmp-${randomUUID()}`;
+    await deps.writeFile(tmp, data);
+    try {
+        // Retry a transient lock on the rename (rule 6); on a hard failure clean up
+        // the staged tmp so it can't orphan on disk, then re-throw for the caller.
+        await withFsRetry(() => rename(tmp, registryPath));
+    }
+    catch (err) {
+        try {
+            await fsUnlink(tmp);
+        }
+        catch {
+            /* best-effort temp cleanup */
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=project-registry-io.js.map

package/server/dist/core/project-registry-io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-registry-io.js","sourceRoot":"","sources":["../../src/core/project-registry-io.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,MAAM,IAAI,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAItD,mFAAmF;AACnF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEjE;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CAAI,EAAoB;IAChD,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,GAAG,CAAC;YACtE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YAC/C,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;AACH,CAAC;AAsBD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAoB,EACpB,YAAoB;IAEpB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACzC,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,+EAA+E;IAC/E,6EAA6E;IAC7E,+EAA+E;IAC/E,6EAA6E;IAC7E,+EAA+E;IAC/E,gFAAgF;IAChF,wEAAwE;IACxE,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,OAAO;YACd,OAAO,EACL,mEAAmE;YACrE,YAAY;YACZ,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;SACnB,CAAC,CACH,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,yBAAyB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QAC7D,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAC3D,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC9C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACvD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAmB,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAoB,EACpB,YAAoB,EACpB,OAAe;IAEf,8EAA8E;IAC9E,uEAAuE;IACvE,MAAM,SAAS,GAAG,GAAG,YAAY,YAAY,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,CAAC;QACH,IAAI,MAAM,EAAE,CAAC;YACX,wEAAwE;YACxE,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;QACD,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;IACD,OAAO,CAAC,KAAK,CACX,IAAI,CAAC,SAAS,CAAC;QACb,KAAK,EAAE,OAAO;QACd,oEAAoE;QACpE,2EAA2E;QAC3E,OAAO,EAAE,WAAW;YAClB,CAAC,CAAC,+FAA+F;YACjG,CAAC,CAAC,yGAAyG;QAC7G,YAAY;QACZ,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KAC9C,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAoB,EACpB,YAAoB,EACpB,IAAY;IAEZ,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,YAAY,QAAQ,UAAU,EAAE,EAAE,CAAC;IAClD,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,4EAA4E;QAC5E,2EAA2E;QAC3E,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}