@unbrained/pm-cli 2026.5.18 → 2026.5.27

package/dist/core/fs/path-utils.d.ts

@@ -0,0 +1 @@
+export declare function isPathWithinDirectory(directory: string, targetPath: string): boolean;

package/dist/core/fs/path-utils.js

@@ -0,0 +1,12 @@
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e8f4f66b-8f68-5a07-8905-ff2602564716")}catch(e){}}();
+import path from "path";
+export function isPathWithinDirectory(directory, targetPath) {
+    const relative = path.relative(directory, targetPath);
+    if (relative.length === 0) {
+        return true;
+    }
+    return !relative.startsWith("..") && !path.isAbsolute(relative);
+}
+//# sourceMappingURL=path-utils.js.map
+//# debugId=e8f4f66b-8f68-5a07-8905-ff2602564716

package/dist/core/fs/path-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-utils.js","sources":["core/fs/path-utils.ts"],"sourceRoot":"/","sourcesContent":["import path from \"path\";\n\nexport function isPathWithinDirectory(directory: string, targetPath: string): boolean {\n  const relative = path.relative(directory, targetPath);\n  if (relative.length === 0) {\n    return true;\n  }\n  return !relative.startsWith(\"..\") && !path.isAbsolute(relative);\n}\n"],"names":[],"mappings":";;AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,MAAM,UAAU,qBAAqB,CAAC,SAAiB,EAAE,UAAkB;IACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AAClE,CAAC","debugId":"e8f4f66b-8f68-5a07-8905-ff2602564716"}

package/dist/core/history/drift-scan.d.ts

@@ -0,0 +1,22 @@
+import type { ItemMetadata } from "../../types/index.js";
+export interface DriftScanResult {
+    missingStreams: string[];
+    unreadableStreams: string[];
+    hashMismatches: string[];
+    chainMismatches: string[];
+    driftedItems: string[];
+}
+/**
+ * Scan every item's history stream for drift (missing/unreadable streams, broken
+ * hash chains, and item/history hash mismatches).
+ *
+ * Full chain re-verification of a 17MB+ history tree is the dominant cost of
+ * `pm health`. We cache the per-stream verification keyed by the history file's
+ * mtime/size: an unchanged file has an identical chain and latest stored hash, so
+ * we skip re-reading and re-hashing it. Item-side changes are still caught every
+ * run because the current document hash is recomputed and compared to the cached
+ * `latest_after_hash`.
+ */
+export declare function scanHistoryDrift(pmRoot: string, items: Array<ItemMetadata & {
+    body: string;
+}>): Promise<DriftScanResult>;

package/dist/core/history/drift-scan.js

@@ -0,0 +1,149 @@
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e8559b46-0199-506f-bf98-8f92a4474215")}catch(e){}}();
+import fs from "fs/promises";
+import path from "node:path";
+import { getHistoryPath } from "../store/paths.js";
+import { writeFileAtomic } from "../fs/fs-utils.js";
+import { hashDocument } from "./history.js";
+import { verifyHistoryChain } from "./replay.js";
+const DRIFT_CACHE_VERSION = 1;
+const DRIFT_CACHE_FILENAME = "history-drift-cache.json";
+function getDriftCachePath(pmRoot) {
+    return path.join(pmRoot, "runtime", DRIFT_CACHE_FILENAME);
+}
+async function loadDriftCache(pmRoot) {
+    try {
+        const raw = await fs.readFile(getDriftCachePath(pmRoot), "utf8");
+        const parsed = JSON.parse(raw);
+        if (parsed.version !== DRIFT_CACHE_VERSION || typeof parsed.entries !== "object" || parsed.entries === null) {
+            return null;
+        }
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+function isErrno(error, code) {
+    return typeof error === "object" && error !== null && "code" in error && error.code === code;
+}
+/**
+ * Read and fully verify one history stream's hash chain. Returns null for an
+ * empty/missing stream (caller records it as a missing stream).
+ */
+async function verifyHistoryStream(historyPath) {
+    const raw = await fs.readFile(historyPath, "utf8");
+    if (raw.trim().length === 0) {
+        return null;
+    }
+    const entries = [];
+    let latestAfterHash = null;
+    for (const line of raw.split(/\r?\n/)) {
+        const trimmed = line.trim();
+        if (trimmed.length === 0) {
+            continue;
+        }
+        const parsed = JSON.parse(trimmed);
+        if (typeof parsed.after_hash !== "string" || parsed.after_hash.trim().length === 0) {
+            throw new Error("missing after_hash");
+        }
+        entries.push(parsed);
+        latestAfterHash = parsed.after_hash;
+    }
+    /* c8 ignore start -- defensive guard for future history schema changes. */
+    if (!latestAfterHash) {
+        return null;
+    }
+    /* c8 ignore stop */
+    return { latestAfterHash, chainOk: verifyHistoryChain(entries).ok };
+}
+/**
+ * Scan every item's history stream for drift (missing/unreadable streams, broken
+ * hash chains, and item/history hash mismatches).
+ *
+ * Full chain re-verification of a 17MB+ history tree is the dominant cost of
+ * `pm health`. We cache the per-stream verification keyed by the history file's
+ * mtime/size: an unchanged file has an identical chain and latest stored hash, so
+ * we skip re-reading and re-hashing it. Item-side changes are still caught every
+ * run because the current document hash is recomputed and compared to the cached
+ * `latest_after_hash`.
+ */
+export async function scanHistoryDrift(pmRoot, items) {
+    const missingStreams = [];
+    const unreadableStreams = [];
+    const hashMismatches = [];
+    const chainMismatches = [];
+    const cache = await loadDriftCache(pmRoot);
+    const previousEntries = cache?.entries ?? {};
+    const nextEntries = {};
+    let cacheDirty = false;
+    for (const item of items) {
+        const historyPath = getHistoryPath(pmRoot, item.id);
+        let stat;
+        try {
+            stat = await fs.stat(historyPath);
+        }
+        catch (error) {
+            if (isErrno(error, "ENOENT")) {
+                missingStreams.push(item.id);
+            }
+            else {
+                unreadableStreams.push(item.id);
+            }
+            continue;
+        }
+        const cached = previousEntries[item.id];
+        let verification;
+        if (cached && cached.mtime_ms === stat.mtimeMs && cached.ctime_ms === stat.ctimeMs && cached.size === stat.size) {
+            verification = { latestAfterHash: cached.latest_after_hash, chainOk: cached.chain_ok };
+        }
+        else {
+            cacheDirty = true;
+            let result;
+            try {
+                result = await verifyHistoryStream(historyPath);
+            }
+            catch {
+                unreadableStreams.push(item.id);
+                continue;
+            }
+            if (!result) {
+                missingStreams.push(item.id);
+                continue;
+            }
+            verification = result;
+        }
+        if (!verification.chainOk) {
+            chainMismatches.push(item.id);
+        }
+        nextEntries[item.id] = {
+            mtime_ms: stat.mtimeMs,
+            ctime_ms: stat.ctimeMs,
+            size: stat.size,
+            latest_after_hash: verification.latestAfterHash,
+            chain_ok: verification.chainOk,
+        };
+        const { body, ...frontMatter } = item;
+        const currentHash = hashDocument({
+            metadata: frontMatter,
+            body,
+        });
+        if (currentHash !== verification.latestAfterHash) {
+            hashMismatches.push(item.id);
+        }
+    }
+    if (cacheDirty || Object.keys(previousEntries).length !== Object.keys(nextEntries).length) {
+        const cachePath = getDriftCachePath(pmRoot);
+        try {
+            await fs.mkdir(path.dirname(cachePath), { recursive: true });
+            await writeFileAtomic(cachePath, JSON.stringify({ version: DRIFT_CACHE_VERSION, entries: nextEntries }));
+        }
+        catch {
+            // Best-effort cache write: a failed persist must never fail a health scan.
+        }
+    }
+    const driftedItems = [...new Set([...missingStreams, ...unreadableStreams, ...hashMismatches, ...chainMismatches])].sort((a, b) => a.localeCompare(b));
+    return { missingStreams, unreadableStreams, hashMismatches, chainMismatches, driftedItems };
+}
+//# sourceMappingURL=drift-scan.js.map
+//# debugId=e8559b46-0199-506f-bf98-8f92a4474215

package/dist/core/history/drift-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drift-scan.js","sources":["core/history/drift-scan.ts"],"sourceRoot":"/","sourcesContent":["import fs from \"fs/promises\";\nimport path from \"node:path\";\nimport { getHistoryPath } from \"../store/paths.js\";\nimport { writeFileAtomic } from \"../fs/fs-utils.js\";\nimport { hashDocument } from \"./history.js\";\nimport { verifyHistoryChain } from \"./replay.js\";\nimport type { HistoryEntry, ItemMetadata } from \"../../types/index.js\";\n\nexport interface DriftScanResult {\n  missingStreams: string[];\n  unreadableStreams: string[];\n  hashMismatches: string[];\n  chainMismatches: string[];\n  driftedItems: string[];\n}\n\nconst DRIFT_CACHE_VERSION = 1;\nconst DRIFT_CACHE_FILENAME = \"history-drift-cache.json\";\n\ninterface DriftCacheEntry {\n  mtime_ms: number;\n  ctime_ms: number;\n  size: number;\n  latest_after_hash: string;\n  chain_ok: boolean;\n}\n\ninterface DriftCacheEnvelope {\n  version: number;\n  entries: Record<string, DriftCacheEntry>;\n}\n\nfunction getDriftCachePath(pmRoot: string): string {\n  return path.join(pmRoot, \"runtime\", DRIFT_CACHE_FILENAME);\n}\n\nasync function loadDriftCache(pmRoot: string): Promise<DriftCacheEnvelope | null> {\n  try {\n    const raw = await fs.readFile(getDriftCachePath(pmRoot), \"utf8\");\n    const parsed = JSON.parse(raw) as DriftCacheEnvelope;\n    if (parsed.version !== DRIFT_CACHE_VERSION || typeof parsed.entries !== \"object\" || parsed.entries === null) {\n      return null;\n    }\n    return parsed;\n  } catch {\n    return null;\n  }\n}\n\nfunction isErrno(error: unknown, code: string): boolean {\n  return typeof error === \"object\" && error !== null && \"code\" in error && (error as { code?: string }).code === code;\n}\n\ninterface StreamVerification {\n  latestAfterHash: string;\n  chainOk: boolean;\n}\n\n/**\n * Read and fully verify one history stream's hash chain. Returns null for an\n * empty/missing stream (caller records it as a missing stream).\n */\nasync function verifyHistoryStream(historyPath: string): Promise<StreamVerification | null> {\n  const raw = await fs.readFile(historyPath, \"utf8\");\n  if (raw.trim().length === 0) {\n    return null;\n  }\n  const entries: HistoryEntry[] = [];\n  let latestAfterHash: string | null = null;\n  for (const line of raw.split(/\\r?\\n/)) {\n    const trimmed = line.trim();\n    if (trimmed.length === 0) {\n      continue;\n    }\n    const parsed = JSON.parse(trimmed) as HistoryEntry;\n    if (typeof parsed.after_hash !== \"string\" || parsed.after_hash.trim().length === 0) {\n      throw new Error(\"missing after_hash\");\n    }\n    entries.push(parsed);\n    latestAfterHash = parsed.after_hash;\n  }\n  /* c8 ignore start -- defensive guard for future history schema changes. */\n  if (!latestAfterHash) {\n    return null;\n  }\n  /* c8 ignore stop */\n  return { latestAfterHash, chainOk: verifyHistoryChain(entries).ok };\n}\n\n/**\n * Scan every item's history stream for drift (missing/unreadable streams, broken\n * hash chains, and item/history hash mismatches).\n *\n * Full chain re-verification of a 17MB+ history tree is the dominant cost of\n * `pm health`. We cache the per-stream verification keyed by the history file's\n * mtime/size: an unchanged file has an identical chain and latest stored hash, so\n * we skip re-reading and re-hashing it. Item-side changes are still caught every\n * run because the current document hash is recomputed and compared to the cached\n * `latest_after_hash`.\n */\nexport async function scanHistoryDrift(\n  pmRoot: string,\n  items: Array<ItemMetadata & { body: string }>,\n): Promise<DriftScanResult> {\n  const missingStreams: string[] = [];\n  const unreadableStreams: string[] = [];\n  const hashMismatches: string[] = [];\n  const chainMismatches: string[] = [];\n\n  const cache = await loadDriftCache(pmRoot);\n  const previousEntries: Record<string, DriftCacheEntry> = cache?.entries ?? {};\n  const nextEntries: Record<string, DriftCacheEntry> = {};\n  let cacheDirty = false;\n\n  for (const item of items) {\n    const historyPath = getHistoryPath(pmRoot, item.id);\n\n    let stat: Awaited<ReturnType<typeof fs.stat>>;\n    try {\n      stat = await fs.stat(historyPath);\n    } catch (error: unknown) {\n      if (isErrno(error, \"ENOENT\")) {\n        missingStreams.push(item.id);\n      } else {\n        unreadableStreams.push(item.id);\n      }\n      continue;\n    }\n\n    const cached = previousEntries[item.id];\n    let verification: StreamVerification;\n    if (cached && cached.mtime_ms === stat.mtimeMs && cached.ctime_ms === stat.ctimeMs && cached.size === stat.size) {\n      verification = { latestAfterHash: cached.latest_after_hash, chainOk: cached.chain_ok };\n    } else {\n      cacheDirty = true;\n      let result: StreamVerification | null;\n      try {\n        result = await verifyHistoryStream(historyPath);\n      } catch {\n        unreadableStreams.push(item.id);\n        continue;\n      }\n      if (!result) {\n        missingStreams.push(item.id);\n        continue;\n      }\n      verification = result;\n    }\n\n    if (!verification.chainOk) {\n      chainMismatches.push(item.id);\n    }\n    nextEntries[item.id] = {\n      mtime_ms: stat.mtimeMs,\n      ctime_ms: stat.ctimeMs,\n      size: stat.size,\n      latest_after_hash: verification.latestAfterHash,\n      chain_ok: verification.chainOk,\n    };\n\n    const { body, ...frontMatter } = item;\n    const currentHash = hashDocument({\n      metadata: frontMatter as ItemMetadata,\n      body,\n    });\n    if (currentHash !== verification.latestAfterHash) {\n      hashMismatches.push(item.id);\n    }\n  }\n\n  if (cacheDirty || Object.keys(previousEntries).length !== Object.keys(nextEntries).length) {\n    const cachePath = getDriftCachePath(pmRoot);\n    try {\n      await fs.mkdir(path.dirname(cachePath), { recursive: true });\n      await writeFileAtomic(cachePath, JSON.stringify({ version: DRIFT_CACHE_VERSION, entries: nextEntries }));\n    } catch {\n      // Best-effort cache write: a failed persist must never fail a health scan.\n    }\n  }\n\n  const driftedItems = [...new Set([...missingStreams, ...unreadableStreams, ...hashMismatches, ...chainMismatches])].sort((a, b) =>\n    a.localeCompare(b),\n  );\n  return { missingStreams, unreadableStreams, hashMismatches, chainMismatches, driftedItems };\n}\n"],"names":[],"mappings":";;AAAA,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAWjD,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAexD,SAAS,iBAAiB,CAAC,MAAc;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,MAAc;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QACrD,IAAI,MAAM,CAAC,OAAO,KAAK,mBAAmB,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC5G,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,IAAY;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAK,KAA2B,CAAC,IAAI,KAAK,IAAI,CAAC;AACtH,CAAC;AAOD;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IACpD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAiB,CAAC;QACnD,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC;IACtC,CAAC;IACD,2EAA2E;IAC3E,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,oBAAoB;IACpB,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC;AACtE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,KAA6C;IAE7C,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,eAAe,GAAoC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;IAC9E,MAAM,WAAW,GAAoC,EAAE,CAAC;IACxD,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAEpD,IAAI,IAAyC,CAAC;QAC9C,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC7B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/B,CAAC;iBAAM,CAAC;gBACN,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClC,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,YAAgC,CAAC;QACrC,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAChH,YAAY,GAAG,EAAE,eAAe,EAAE,MAAM,CAAC,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzF,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,IAAI,CAAC;YAClB,IAAI,MAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAChC,SAAS;YACX,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,YAAY,GAAG,MAAM,CAAC;QACxB,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG;YACrB,QAAQ,EAAE,IAAI,CAAC,OAAO;YACtB,QAAQ,EAAE,IAAI,CAAC,OAAO;YACtB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,iBAAiB,EAAE,YAAY,CAAC,eAAe;YAC/C,QAAQ,EAAE,YAAY,CAAC,OAAO;SAC/B,CAAC;QAEF,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC;QACtC,MAAM,WAAW,GAAG,YAAY,CAAC;YAC/B,QAAQ,EAAE,WAA2B;YACrC,IAAI;SACL,CAAC,CAAC;QACH,IAAI,WAAW,KAAK,YAAY,CAAC,eAAe,EAAE,CAAC;YACjD,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,IAAI,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1F,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,MAAM,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAC3G,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;QAC7E,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,cAAc,EAAE,GAAG,iBAAiB,EAAE,GAAG,cAAc,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAChI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACnB,CAAC;IACF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC;AAC9F,CAAC","debugId":"e8559b46-0199-506f-bf98-8f92a4474215"}

package/dist/core/history/history-rewrite.d.ts

@@ -0,0 +1,43 @@
+import type { ItemTypeRegistry } from "../item/type-registry.js";
+import { locateItem, readLocatedItem } from "../store/item-store.js";
+import type { ItemDocument, PmSettings } from "../../types/index.js";
+type LoadedItem = Awaited<ReturnType<typeof readLocatedItem>>;
+export interface HistoryRewriteSubject {
+    id: string;
+    historyPath: string;
+}
+export interface HistoryRewriteOwnershipParams {
+    itemDocument: ItemDocument | null;
+    subjectId: string;
+    author: string;
+    force: boolean | undefined;
+    settings: PmSettings;
+}
+/**
+ * Apply ownership_enforcement governance to a history-rewriting operation.
+ * Returns the warning(s) the caller should append (empty when no conflict or strict-throws).
+ * Throws PmCliError(CONFLICT) in strict mode when the assignee conflicts and --force is not set.
+ */
+export declare function checkHistoryRewriteOwnership(params: HistoryRewriteOwnershipParams): string[];
+export interface VerifyHistoryRewriteDriftParams {
+    pmRoot: string;
+    subject: HistoryRewriteSubject;
+    settings: PmSettings;
+    typeRegistry: ItemTypeRegistry;
+    historyRawBeforeLock: string | null;
+    currentItemRawBeforeLock: string | null;
+    /** Short operation name used in the conflict message (e.g. "history-redact"). */
+    operation: string;
+}
+export interface VerifiedHistoryRewriteState {
+    historyRawUnderLock: string | null;
+    locatedUnderLock: Awaited<ReturnType<typeof locateItem>>;
+    loadedItemUnderLock: LoadedItem | null;
+}
+/**
+ * Re-read the history stream and the located item document under the acquired lock and
+ * compare both with the pre-lock raw snapshots. Throws PmCliError(CONFLICT) if either
+ * diverged while waiting for the lock so the caller surfaces an actionable retry.
+ */
+export declare function verifyHistoryRewriteNoDrift(params: VerifyHistoryRewriteDriftParams): Promise<VerifiedHistoryRewriteState>;
+export {};

package/dist/core/history/history-rewrite.js

@@ -0,0 +1,48 @@
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6929fbcd-89b7-580d-93fc-f647b086b95f")}catch(e){}}();
+import { readFileIfExists } from "../fs/fs-utils.js";
+import { EXIT_CODE } from "../shared/constants.js";
+import { PmCliError } from "../shared/errors.js";
+import { locateItem, readLocatedItem } from "../store/item-store.js";
+import { resolveGovernanceKnobs } from "../store/settings.js";
+/**
+ * Apply ownership_enforcement governance to a history-rewriting operation.
+ * Returns the warning(s) the caller should append (empty when no conflict or strict-throws).
+ * Throws PmCliError(CONFLICT) in strict mode when the assignee conflicts and --force is not set.
+ */
+export function checkHistoryRewriteOwnership(params) {
+    if (!params.itemDocument)
+        return [];
+    const assigned = params.itemDocument.metadata?.assignee?.trim();
+    if (!assigned || assigned === params.author || params.force)
+        return [];
+    const governance = resolveGovernanceKnobs(params.settings);
+    if (governance.ownership_enforcement === "strict") {
+        throw new PmCliError(`Item ${params.subjectId} is assigned to ${assigned}. Use --force to override.`, EXIT_CODE.CONFLICT);
+    }
+    if (governance.ownership_enforcement === "warn") {
+        return [`ownership_warning:assignee_conflict:${params.subjectId}:${assigned}`];
+    }
+    return [];
+}
+/**
+ * Re-read the history stream and the located item document under the acquired lock and
+ * compare both with the pre-lock raw snapshots. Throws PmCliError(CONFLICT) if either
+ * diverged while waiting for the lock so the caller surfaces an actionable retry.
+ */
+export async function verifyHistoryRewriteNoDrift(params) {
+    const historyRawUnderLock = await readFileIfExists(params.subject.historyPath);
+    if (historyRawUnderLock !== params.historyRawBeforeLock) {
+        throw new PmCliError(`History for ${params.subject.id} changed while waiting for lock; retry ${params.operation}.`, EXIT_CODE.CONFLICT);
+    }
+    const locatedUnderLock = await locateItem(params.pmRoot, params.subject.id, params.settings.id_prefix, params.settings.item_format, params.typeRegistry.type_to_folder);
+    const loadedItemUnderLock = locatedUnderLock
+        ? await readLocatedItem(locatedUnderLock, { schema: params.settings.schema })
+        : null;
+    if ((loadedItemUnderLock?.raw ?? null) !== (params.currentItemRawBeforeLock ?? null)) {
+        throw new PmCliError(`Item ${params.subject.id} changed while waiting for lock; retry ${params.operation}.`, EXIT_CODE.CONFLICT);
+    }
+    return { historyRawUnderLock, locatedUnderLock, loadedItemUnderLock };
+}
+//# sourceMappingURL=history-rewrite.js.map
+//# debugId=6929fbcd-89b7-580d-93fc-f647b086b95f

package/dist/core/history/history-rewrite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"history-rewrite.js","sources":["core/history/history-rewrite.ts"],"sourceRoot":"/","sourcesContent":["import { readFileIfExists } from \"../fs/fs-utils.js\";\nimport type { ItemTypeRegistry } from \"../item/type-registry.js\";\nimport { EXIT_CODE } from \"../shared/constants.js\";\nimport { PmCliError } from \"../shared/errors.js\";\nimport { locateItem, readLocatedItem } from \"../store/item-store.js\";\nimport { resolveGovernanceKnobs } from \"../store/settings.js\";\nimport type { ItemDocument, PmSettings } from \"../../types/index.js\";\n\ntype LoadedItem = Awaited<ReturnType<typeof readLocatedItem>>;\n\nexport interface HistoryRewriteSubject {\n  id: string;\n  historyPath: string;\n}\n\nexport interface HistoryRewriteOwnershipParams {\n  itemDocument: ItemDocument | null;\n  subjectId: string;\n  author: string;\n  force: boolean | undefined;\n  settings: PmSettings;\n}\n\n/**\n * Apply ownership_enforcement governance to a history-rewriting operation.\n * Returns the warning(s) the caller should append (empty when no conflict or strict-throws).\n * Throws PmCliError(CONFLICT) in strict mode when the assignee conflicts and --force is not set.\n */\nexport function checkHistoryRewriteOwnership(params: HistoryRewriteOwnershipParams): string[] {\n  if (!params.itemDocument) return [];\n  const assigned = params.itemDocument.metadata?.assignee?.trim();\n  if (!assigned || assigned === params.author || params.force) return [];\n\n  const governance = resolveGovernanceKnobs(params.settings);\n  if (governance.ownership_enforcement === \"strict\") {\n    throw new PmCliError(\n      `Item ${params.subjectId} is assigned to ${assigned}. Use --force to override.`,\n      EXIT_CODE.CONFLICT,\n    );\n  }\n  if (governance.ownership_enforcement === \"warn\") {\n    return [`ownership_warning:assignee_conflict:${params.subjectId}:${assigned}`];\n  }\n  return [];\n}\n\nexport interface VerifyHistoryRewriteDriftParams {\n  pmRoot: string;\n  subject: HistoryRewriteSubject;\n  settings: PmSettings;\n  typeRegistry: ItemTypeRegistry;\n  historyRawBeforeLock: string | null;\n  currentItemRawBeforeLock: string | null;\n  /** Short operation name used in the conflict message (e.g. \"history-redact\"). */\n  operation: string;\n}\n\nexport interface VerifiedHistoryRewriteState {\n  historyRawUnderLock: string | null;\n  locatedUnderLock: Awaited<ReturnType<typeof locateItem>>;\n  loadedItemUnderLock: LoadedItem | null;\n}\n\n/**\n * Re-read the history stream and the located item document under the acquired lock and\n * compare both with the pre-lock raw snapshots. Throws PmCliError(CONFLICT) if either\n * diverged while waiting for the lock so the caller surfaces an actionable retry.\n */\nexport async function verifyHistoryRewriteNoDrift(\n  params: VerifyHistoryRewriteDriftParams,\n): Promise<VerifiedHistoryRewriteState> {\n  const historyRawUnderLock = await readFileIfExists(params.subject.historyPath);\n  if (historyRawUnderLock !== params.historyRawBeforeLock) {\n    throw new PmCliError(\n      `History for ${params.subject.id} changed while waiting for lock; retry ${params.operation}.`,\n      EXIT_CODE.CONFLICT,\n    );\n  }\n  const locatedUnderLock = await locateItem(\n    params.pmRoot,\n    params.subject.id,\n    params.settings.id_prefix,\n    params.settings.item_format,\n    params.typeRegistry.type_to_folder,\n  );\n  const loadedItemUnderLock = locatedUnderLock\n    ? await readLocatedItem(locatedUnderLock, { schema: params.settings.schema })\n    : null;\n  if ((loadedItemUnderLock?.raw ?? null) !== (params.currentItemRawBeforeLock ?? null)) {\n    throw new PmCliError(\n      `Item ${params.subject.id} changed while waiting for lock; retry ${params.operation}.`,\n      EXIT_CODE.CONFLICT,\n    );\n  }\n  return { historyRawUnderLock, locatedUnderLock, loadedItemUnderLock };\n}\n"],"names":[],"mappings":";;AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAkB9D;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAqC;IAChF,IAAI,CAAC,MAAM,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAChE,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAEvE,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3D,IAAI,UAAU,CAAC,qBAAqB,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,UAAU,CAClB,QAAQ,MAAM,CAAC,SAAS,mBAAmB,QAAQ,4BAA4B,EAC/E,SAAS,CAAC,QAAQ,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,qBAAqB,KAAK,MAAM,EAAE,CAAC;QAChD,OAAO,CAAC,uCAAuC,MAAM,CAAC,SAAS,IAAI,QAAQ,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAmBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAuC;IAEvC,MAAM,mBAAmB,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/E,IAAI,mBAAmB,KAAK,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACxD,MAAM,IAAI,UAAU,CAClB,eAAe,MAAM,CAAC,OAAO,CAAC,EAAE,0CAA0C,MAAM,CAAC,SAAS,GAAG,EAC7F,SAAS,CAAC,QAAQ,CACnB,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,UAAU,CACvC,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,CAAC,EAAE,EACjB,MAAM,CAAC,QAAQ,CAAC,SAAS,EACzB,MAAM,CAAC,QAAQ,CAAC,WAAW,EAC3B,MAAM,CAAC,YAAY,CAAC,cAAc,CACnC,CAAC;IACF,MAAM,mBAAmB,GAAG,gBAAgB;QAC1C,CAAC,CAAC,MAAM,eAAe,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC7E,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,CAAC,mBAAmB,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,wBAAwB,IAAI,IAAI,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,UAAU,CAClB,QAAQ,MAAM,CAAC,OAAO,CAAC,EAAE,0CAA0C,MAAM,CAAC,SAAS,GAAG,EACtF,SAAS,CAAC,QAAQ,CACnB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,CAAC;AACxE,CAAC","debugId":"6929fbcd-89b7-580d-93fc-f647b086b95f"}

package/dist/core/history/history.js

@@ -1,10 +1,11 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="bd15b5bc-70d0-57d2-a06d-27b9d518656f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="9a356560-3dec-5529-a2b5-1b4224116c14")}catch(e){}}();
 import jsonPatch from "fast-json-patch";
 import { FRONT_MATTER_KEY_ORDER } from "../shared/constants.js";
 import { runActiveServiceOverride } from "../extensions/index.js";
 import { appendLineAtomic } from "../fs/fs-utils.js";
 import { canonicalDocument } from "../item/item-format.js";
+import { toItemRecord } from "../item/item-record.js";
 import { orderObject, sha256Hex, stableStringify } from "../shared/serialization.js";
 const EMPTY_LEGACY_HASH_DOCUMENT = {
     front_matter: {},
@@ -79,7 +80,7 @@ function canonicalHashDocument(document) {
         };
     }
     const canonical = canonicalDocument(document);
-    const orderedFrontMatter = orderObject(canonical.metadata, FRONT_MATTER_KEY_ORDER);
+    const orderedFrontMatter = orderObject(toItemRecord(canonical.metadata), FRONT_MATTER_KEY_ORDER);
     return {
         front_matter: orderedFrontMatter,
         body: canonical.body,
@@ -94,7 +95,7 @@ function canonicalPatchDocument(document) {
         };
     }
     const canonical = canonicalDocument(document);
-    const orderedMetadata = orderObject(canonical.metadata, FRONT_MATTER_KEY_ORDER);
+    const orderedMetadata = orderObject(toItemRecord(canonical.metadata), FRONT_MATTER_KEY_ORDER);
     return {
         metadata: orderedMetadata,
         body: canonical.body,
@@ -154,4 +155,4 @@ export async function appendHistoryEntry(historyPath, entry) {
     await appendLineAtomic(historyPath, JSON.stringify(entry));
 }
 //# sourceMappingURL=history.js.map
-//# debugId=bd15b5bc-70d0-57d2-a06d-27b9d518656f
+//# debugId=9a356560-3dec-5529-a2b5-1b4224116c14

package/dist/core/history/history.js.map

@@ -1 +1 @@
-{"version":3,"file":"history.js","sources":["core/history/history.ts"],"sourceRoot":"/","sourcesContent":["import jsonPatch from \"fast-json-patch\";\nimport { FRONT_MATTER_KEY_ORDER } from \"../shared/constants.js\";\nimport { runActiveServiceOverride } from \"../extensions/index.js\";\nimport { appendLineAtomic } from \"../fs/fs-utils.js\";\nimport { canonicalDocument } from \"../item/item-format.js\";\nimport { orderObject, sha256Hex, stableStringify } from \"../shared/serialization.js\";\nimport type { HistoryEntry, HistoryPatchOp, ItemDocument } from \"../../types/index.js\";\n\nconst EMPTY_LEGACY_HASH_DOCUMENT = {\n  front_matter: {},\n  body: \"\",\n};\n\nfunction decodeJsonPointer(path: string): string[] {\n  if (!path || path === \"/\") {\n    return [];\n  }\n  if (!path.startsWith(\"/\")) {\n    return [];\n  }\n  return path\n    .slice(1)\n    .split(\"/\")\n    .map((segment) => segment.replaceAll(\"~1\", \"/\").replaceAll(\"~0\", \"~\"));\n}\n\nfunction isDefinedPointerPath(document: unknown, path: string): boolean {\n  const segments = decodeJsonPointer(path);\n  if (segments.length === 0) {\n    return true;\n  }\n  let cursor: unknown = document;\n  for (const segment of segments) {\n    if (Array.isArray(cursor)) {\n      if (segment === \"-\" || !/^(0|[1-9]\\d*)$/.test(segment)) {\n        return false;\n      }\n      const index = Number(segment);\n      if (!Number.isInteger(index) || index < 0 || index >= cursor.length) {\n        return false;\n      }\n      const next = cursor[index];\n      if (next === undefined) {\n        return false;\n      }\n      cursor = next;\n      continue;\n    }\n    if (typeof cursor !== \"object\" || cursor === null) {\n      return false;\n    }\n    if (!Object.prototype.hasOwnProperty.call(cursor, segment)) {\n      return false;\n    }\n    const next = (cursor as Record<string, unknown>)[segment];\n    if (next === undefined) {\n      return false;\n    }\n    cursor = next;\n  }\n  return true;\n}\n\nfunction normalizeHistoryPatchOps(\n  beforeDocument: { metadata: Record<string, unknown>; body: string },\n  patch: HistoryPatchOp[],\n): HistoryPatchOp[] {\n  const normalized: HistoryPatchOp[] = [];\n  let replayCursor: unknown = structuredClone(beforeDocument);\n  for (const operation of patch) {\n    const normalizedOperation =\n      operation.op === \"replace\" && !isDefinedPointerPath(replayCursor, operation.path)\n        ? ({ ...operation, op: \"add\" } as HistoryPatchOp)\n        : operation;\n    normalized.push(normalizedOperation);\n    replayCursor = jsonPatch.applyPatch(\n      replayCursor,\n      [normalizedOperation as jsonPatch.Operation],\n      true,\n      true,\n    ).newDocument as unknown;\n  }\n  return normalized;\n}\n\nfunction canonicalHashDocument(document: ItemDocument): { front_matter: Record<string, unknown>; body: string } {\n  const hasMetadata = document.metadata && Object.keys(document.metadata).length > 0;\n  if (!hasMetadata) {\n    return {\n      front_matter: {},\n      body: document.body ?? \"\",\n    };\n  }\n  const canonical = canonicalDocument(document);\n  const orderedFrontMatter = orderObject(canonical.metadata as unknown as Record<string, unknown>, FRONT_MATTER_KEY_ORDER);\n  return {\n    front_matter: orderedFrontMatter,\n    body: canonical.body,\n  };\n}\n\nfunction canonicalPatchDocument(document: ItemDocument): { metadata: Record<string, unknown>; body: string } {\n  const hasMetadata = document.metadata && Object.keys(document.metadata).length > 0;\n  if (!hasMetadata) {\n    return {\n      metadata: {},\n      body: document.body ?? \"\",\n    };\n  }\n  const canonical = canonicalDocument(document);\n  const orderedMetadata = orderObject(canonical.metadata as unknown as Record<string, unknown>, FRONT_MATTER_KEY_ORDER);\n  return {\n    metadata: orderedMetadata,\n    body: canonical.body,\n  };\n}\n\nexport function hashDocument(document: ItemDocument): string {\n  return sha256Hex(stableStringify(canonicalHashDocument(document)));\n}\n\nexport function hashEmptyDocument(): string {\n  return sha256Hex(stableStringify(EMPTY_LEGACY_HASH_DOCUMENT));\n}\n\nexport function createHistoryEntry(params: {\n  nowIso: string;\n  author: string;\n  op: string;\n  before: ItemDocument;\n  after: ItemDocument;\n  message?: string;\n}): HistoryEntry {\n  const beforeHashCanonical = canonicalHashDocument(params.before);\n  const afterHashCanonical = canonicalHashDocument(params.after);\n  const beforePatchCanonical = canonicalPatchDocument(params.before);\n  const afterPatchCanonical = canonicalPatchDocument(params.after);\n  const rawPatch = jsonPatch.compare(beforePatchCanonical, afterPatchCanonical) as HistoryPatchOp[];\n  const patch = normalizeHistoryPatchOps(beforePatchCanonical, rawPatch);\n\n  return {\n    ts: params.nowIso,\n    author: params.author,\n    op: params.op,\n    patch,\n    before_hash: sha256Hex(stableStringify(beforeHashCanonical)),\n    after_hash: sha256Hex(stableStringify(afterHashCanonical)),\n    message: params.message === undefined ? undefined : params.message,\n  };\n}\n\nexport async function appendHistoryEntry(historyPath: string, entry: HistoryEntry): Promise<void> {\n  const override = await runActiveServiceOverride(\"history_append\", {\n    history_path: historyPath,\n    entry,\n  });\n  if (override.handled) {\n    if (override.result === false) {\n      return;\n    }\n    if (typeof override.result === \"string\") {\n      await appendLineAtomic(historyPath, override.result);\n      return;\n    }\n    if (typeof override.result === \"object\" && override.result !== null) {\n      const record = override.result as {\n        history_path?: unknown;\n        entry?: unknown;\n        line?: unknown;\n        skip?: unknown;\n      };\n      if (record.skip === true) {\n        return;\n      }\n      const nextHistoryPath = typeof record.history_path === \"string\" ? record.history_path : historyPath;\n      if (typeof record.line === \"string\") {\n        await appendLineAtomic(nextHistoryPath, record.line);\n        return;\n      }\n      const nextEntry = (record.entry ?? entry) as HistoryEntry;\n      await appendLineAtomic(nextHistoryPath, JSON.stringify(nextEntry));\n      return;\n    }\n  }\n  await appendLineAtomic(historyPath, JSON.stringify(entry));\n}\n"],"names":[],"mappings":";;AAAA,OAAO,SAAS,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAGrF,MAAM,0BAA0B,GAAG;IACjC,YAAY,EAAE,EAAE;IAChB,IAAI,EAAE,EAAE;CACT,CAAC;AAEF,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAI;SACR,KAAK,CAAC,CAAC,CAAC;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAiB,EAAE,IAAY;IAC3D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,GAAY,QAAQ,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,IAAI,OAAO,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACpE,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,GAAI,MAAkC,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,wBAAwB,CAC/B,cAAmE,EACnE,KAAuB;IAEvB,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,IAAI,YAAY,GAAY,eAAe,CAAC,cAAc,CAAC,CAAC;IAC5D,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,mBAAmB,GACvB,SAAS,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC;YAC/E,CAAC,CAAE,EAAE,GAAG,SAAS,EAAE,EAAE,EAAE,KAAK,EAAqB;YACjD,CAAC,CAAC,SAAS,CAAC;QAChB,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACrC,YAAY,GAAG,SAAS,CAAC,UAAU,CACjC,YAAY,EACZ,CAAC,mBAA0C,CAAC,EAC5C,IAAI,EACJ,IAAI,CACL,CAAC,WAAsB,CAAC;IAC3B,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAsB;IACnD,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACnF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,YAAY,EAAE,EAAE;YAChB,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE;SAC1B,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,WAAW,CAAC,SAAS,CAAC,QAA8C,EAAE,sBAAsB,CAAC,CAAC;IACzH,OAAO;QACL,YAAY,EAAE,kBAAkB;QAChC,IAAI,EAAE,SAAS,CAAC,IAAI;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAsB;IACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACnF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE;SAC1B,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,eAAe,GAAG,WAAW,CAAC,SAAS,CAAC,QAA8C,EAAE,sBAAsB,CAAC,CAAC;IACtH,OAAO;QACL,QAAQ,EAAE,eAAe;QACzB,IAAI,EAAE,SAAS,CAAC,IAAI;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAsB;IACjD,OAAO,SAAS,CAAC,eAAe,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,SAAS,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAOlC;IACC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,oBAAoB,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,oBAAoB,EAAE,mBAAmB,CAAqB,CAAC;IAClG,MAAM,KAAK,GAAG,wBAAwB,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;IAEvE,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,MAAM;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,KAAK;QACL,WAAW,EAAE,SAAS,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;QAC5D,UAAU,EAAE,SAAS,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC;QAC1D,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO;KACnE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAmB,EAAE,KAAmB;IAC/E,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,gBAAgB,EAAE;QAChE,YAAY,EAAE,WAAW;QACzB,KAAK;KACN,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAKvB,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,MAAM,eAAe,GAAG,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;YACpG,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,gBAAgB,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,CAAiB,CAAC;YAC1D,MAAM,gBAAgB,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;IACH,CAAC;IACD,MAAM,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7D,CAAC","debugId":"bd15b5bc-70d0-57d2-a06d-27b9d518656f"}
+{"version":3,"file":"history.js","sources":["core/history/history.ts"],"sourceRoot":"/","sourcesContent":["import jsonPatch from \"fast-json-patch\";\nimport { FRONT_MATTER_KEY_ORDER } from \"../shared/constants.js\";\nimport { runActiveServiceOverride } from \"../extensions/index.js\";\nimport { appendLineAtomic } from \"../fs/fs-utils.js\";\nimport { canonicalDocument } from \"../item/item-format.js\";\nimport { toItemRecord } from \"../item/item-record.js\";\nimport { orderObject, sha256Hex, stableStringify } from \"../shared/serialization.js\";\nimport type { HistoryEntry, HistoryPatchOp, ItemDocument } from \"../../types/index.js\";\n\nconst EMPTY_LEGACY_HASH_DOCUMENT = {\n  front_matter: {},\n  body: \"\",\n};\n\nfunction decodeJsonPointer(path: string): string[] {\n  if (!path || path === \"/\") {\n    return [];\n  }\n  if (!path.startsWith(\"/\")) {\n    return [];\n  }\n  return path\n    .slice(1)\n    .split(\"/\")\n    .map((segment) => segment.replaceAll(\"~1\", \"/\").replaceAll(\"~0\", \"~\"));\n}\n\nfunction isDefinedPointerPath(document: unknown, path: string): boolean {\n  const segments = decodeJsonPointer(path);\n  if (segments.length === 0) {\n    return true;\n  }\n  let cursor: unknown = document;\n  for (const segment of segments) {\n    if (Array.isArray(cursor)) {\n      if (segment === \"-\" || !/^(0|[1-9]\\d*)$/.test(segment)) {\n        return false;\n      }\n      const index = Number(segment);\n      if (!Number.isInteger(index) || index < 0 || index >= cursor.length) {\n        return false;\n      }\n      const next = cursor[index];\n      if (next === undefined) {\n        return false;\n      }\n      cursor = next;\n      continue;\n    }\n    if (typeof cursor !== \"object\" || cursor === null) {\n      return false;\n    }\n    if (!Object.prototype.hasOwnProperty.call(cursor, segment)) {\n      return false;\n    }\n    const next = (cursor as Record<string, unknown>)[segment];\n    if (next === undefined) {\n      return false;\n    }\n    cursor = next;\n  }\n  return true;\n}\n\nfunction normalizeHistoryPatchOps(\n  beforeDocument: { metadata: Record<string, unknown>; body: string },\n  patch: HistoryPatchOp[],\n): HistoryPatchOp[] {\n  const normalized: HistoryPatchOp[] = [];\n  let replayCursor: unknown = structuredClone(beforeDocument);\n  for (const operation of patch) {\n    const normalizedOperation =\n      operation.op === \"replace\" && !isDefinedPointerPath(replayCursor, operation.path)\n        ? ({ ...operation, op: \"add\" } as HistoryPatchOp)\n        : operation;\n    normalized.push(normalizedOperation);\n    replayCursor = jsonPatch.applyPatch(\n      replayCursor,\n      [normalizedOperation as jsonPatch.Operation],\n      true,\n      true,\n    ).newDocument as unknown;\n  }\n  return normalized;\n}\n\nfunction canonicalHashDocument(document: ItemDocument): { front_matter: Record<string, unknown>; body: string } {\n  const hasMetadata = document.metadata && Object.keys(document.metadata).length > 0;\n  if (!hasMetadata) {\n    return {\n      front_matter: {},\n      body: document.body ?? \"\",\n    };\n  }\n  const canonical = canonicalDocument(document);\n  const orderedFrontMatter = orderObject(toItemRecord(canonical.metadata), FRONT_MATTER_KEY_ORDER);\n  return {\n    front_matter: orderedFrontMatter,\n    body: canonical.body,\n  };\n}\n\nfunction canonicalPatchDocument(document: ItemDocument): { metadata: Record<string, unknown>; body: string } {\n  const hasMetadata = document.metadata && Object.keys(document.metadata).length > 0;\n  if (!hasMetadata) {\n    return {\n      metadata: {},\n      body: document.body ?? \"\",\n    };\n  }\n  const canonical = canonicalDocument(document);\n  const orderedMetadata = orderObject(toItemRecord(canonical.metadata), FRONT_MATTER_KEY_ORDER);\n  return {\n    metadata: orderedMetadata,\n    body: canonical.body,\n  };\n}\n\nexport function hashDocument(document: ItemDocument): string {\n  return sha256Hex(stableStringify(canonicalHashDocument(document)));\n}\n\nexport function hashEmptyDocument(): string {\n  return sha256Hex(stableStringify(EMPTY_LEGACY_HASH_DOCUMENT));\n}\n\nexport function createHistoryEntry(params: {\n  nowIso: string;\n  author: string;\n  op: string;\n  before: ItemDocument;\n  after: ItemDocument;\n  message?: string;\n}): HistoryEntry {\n  const beforeHashCanonical = canonicalHashDocument(params.before);\n  const afterHashCanonical = canonicalHashDocument(params.after);\n  const beforePatchCanonical = canonicalPatchDocument(params.before);\n  const afterPatchCanonical = canonicalPatchDocument(params.after);\n  const rawPatch = jsonPatch.compare(beforePatchCanonical, afterPatchCanonical) as HistoryPatchOp[];\n  const patch = normalizeHistoryPatchOps(beforePatchCanonical, rawPatch);\n\n  return {\n    ts: params.nowIso,\n    author: params.author,\n    op: params.op,\n    patch,\n    before_hash: sha256Hex(stableStringify(beforeHashCanonical)),\n    after_hash: sha256Hex(stableStringify(afterHashCanonical)),\n    message: params.message === undefined ? undefined : params.message,\n  };\n}\n\nexport async function appendHistoryEntry(historyPath: string, entry: HistoryEntry): Promise<void> {\n  const override = await runActiveServiceOverride(\"history_append\", {\n    history_path: historyPath,\n    entry,\n  });\n  if (override.handled) {\n    if (override.result === false) {\n      return;\n    }\n    if (typeof override.result === \"string\") {\n      await appendLineAtomic(historyPath, override.result);\n      return;\n    }\n    if (typeof override.result === \"object\" && override.result !== null) {\n      const record = override.result as {\n        history_path?: unknown;\n        entry?: unknown;\n        line?: unknown;\n        skip?: unknown;\n      };\n      if (record.skip === true) {\n        return;\n      }\n      const nextHistoryPath = typeof record.history_path === \"string\" ? record.history_path : historyPath;\n      if (typeof record.line === \"string\") {\n        await appendLineAtomic(nextHistoryPath, record.line);\n        return;\n      }\n      const nextEntry = (record.entry ?? entry) as HistoryEntry;\n      await appendLineAtomic(nextHistoryPath, JSON.stringify(nextEntry));\n      return;\n    }\n  }\n  await appendLineAtomic(historyPath, JSON.stringify(entry));\n}\n"],"names":[],"mappings":";;AAAA,OAAO,SAAS,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAGrF,MAAM,0BAA0B,GAAG;IACjC,YAAY,EAAE,EAAE;IAChB,IAAI,EAAE,EAAE;CACT,CAAC;AAEF,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAI;SACR,KAAK,CAAC,CAAC,CAAC;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAiB,EAAE,IAAY;IAC3D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,GAAY,QAAQ,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,IAAI,OAAO,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACpE,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,GAAI,MAAkC,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,wBAAwB,CAC/B,cAAmE,EACnE,KAAuB;IAEvB,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,IAAI,YAAY,GAAY,eAAe,CAAC,cAAc,CAAC,CAAC;IAC5D,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,mBAAmB,GACvB,SAAS,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC;YAC/E,CAAC,CAAE,EAAE,GAAG,SAAS,EAAE,EAAE,EAAE,KAAK,EAAqB;YACjD,CAAC,CAAC,SAAS,CAAC;QAChB,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACrC,YAAY,GAAG,SAAS,CAAC,UAAU,CACjC,YAAY,EACZ,CAAC,mBAA0C,CAAC,EAC5C,IAAI,EACJ,IAAI,CACL,CAAC,WAAsB,CAAC;IAC3B,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAsB;IACnD,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACnF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,YAAY,EAAE,EAAE;YAChB,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE;SAC1B,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACjG,OAAO;QACL,YAAY,EAAE,kBAAkB;QAChC,IAAI,EAAE,SAAS,CAAC,IAAI;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAsB;IACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACnF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE;SAC1B,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,eAAe,GAAG,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAC9F,OAAO;QACL,QAAQ,EAAE,eAAe;QACzB,IAAI,EAAE,SAAS,CAAC,IAAI;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAsB;IACjD,OAAO,SAAS,CAAC,eAAe,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,SAAS,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAOlC;IACC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,oBAAoB,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,oBAAoB,EAAE,mBAAmB,CAAqB,CAAC;IAClG,MAAM,KAAK,GAAG,wBAAwB,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;IAEvE,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,MAAM;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,KAAK;QACL,WAAW,EAAE,SAAS,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;QAC5D,UAAU,EAAE,SAAS,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC;QAC1D,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO;KACnE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAmB,EAAE,KAAmB;IAC/E,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,gBAAgB,EAAE;QAChE,YAAY,EAAE,WAAW;QACzB,KAAK;KACN,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAKvB,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,MAAM,eAAe,GAAG,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;YACpG,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,gBAAgB,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,CAAiB,CAAC;YAC1D,MAAM,gBAAgB,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;IACH,CAAC;IACD,MAAM,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7D,CAAC","debugId":"9a356560-3dec-5529-a2b5-1b4224116c14"}

package/dist/core/history/replay.d.ts

@@ -0,0 +1,82 @@
+import type { HistoryEntry, HistoryPatchOp, ItemDocument } from "../../types/index.js";
+/**
+ * Shared history replay/patch mechanics single-sourced for the history, restore,
+ * history-redact, and history-repair commands plus the health/validate drift checks.
+ *
+ * Each command keeps its own thin error-formatting wrapper so the exact CLI error
+ * contracts (restore's rich patch-failure context, redact's op tag, history's
+ * generic message) are preserved; only the underlying replay/patch logic is shared.
+ */
+export interface ReplayDocument {
+    metadata: Record<string, unknown>;
+    body: string;
+}
+export declare const EMPTY_REPLAY_DOCUMENT: ReplayDocument;
+export declare function cloneEmptyReplayDocument(): ReplayDocument;
+export declare function replayHash(document: ReplayDocument): string;
+export declare function replayToItemDocument(document: ReplayDocument): ItemDocument;
+/**
+ * Canonicalize an item document into the ordered replay form used when comparing
+ * a replayed chain against the on-disk item (restore + history-repair reconciliation).
+ */
+export declare function toReplayDocument(document: ItemDocument): ReplayDocument;
+export declare function normalizeReplayPatchPath(path: string): string;
+export declare function normalizeReplayPatchOps(patch: HistoryPatchOp[]): HistoryPatchOp[];
+export type ReplayApplyResult = {
+    ok: true;
+    document: ReplayDocument;
+} | {
+    ok: false;
+    error: unknown;
+};
+/**
+ * Strictly apply a history patch (front_matter->metadata normalized) to a replay
+ * document. Returns a result envelope rather than throwing so each caller can
+ * format its own error contract.
+ */
+export declare function tryApplyReplayPatch(current: ReplayDocument, patch: HistoryPatchOp[]): ReplayApplyResult;
+/**
+ * Deterministically verify a history chain: each entry's before_hash must equal
+ * the prior replayed after_hash, the patch must strictly apply, and the recorded
+ * after_hash must equal the replayed result.
+ */
+export declare function verifyHistoryChain(entries: HistoryEntry[]): {
+    ok: boolean;
+    errors: string[];
+};
+export interface LenientApplyResult {
+    document: ReplayDocument;
+    convertedReplaceToAdd: number;
+    skippedOps: number;
+}
+/**
+ * Apply a legacy patch op-by-op, recovering from drift that strict replay rejects:
+ * a `replace` whose path no longer exists is retried as `add`, and any op that
+ * still cannot apply against the current replay state is skipped. The resulting
+ * document is what the repaired entry's recomputed patch should target.
+ */
+export declare function lenientApplyReplayPatch(current: ReplayDocument, patch: HistoryPatchOp[]): LenientApplyResult;
+export interface ReanchorEntryDetail {
+    index: number;
+    rehashed: boolean;
+    patch_repaired: boolean;
+    converted_replace_to_add: number;
+    skipped_ops: number;
+}
+export interface ReanchorResult {
+    entries: HistoryEntry[];
+    finalDocument: ReplayDocument;
+    entriesRehashed: number;
+    entriesPatchRepaired: number;
+    convertedReplaceToAdd: number;
+    skippedOps: number;
+    details: ReanchorEntryDetail[];
+}
+/**
+ * Re-anchor a drifted history chain: replay every entry from empty, recompute the
+ * before/after hashes, and only rewrite a patch when the original op set no longer
+ * strictly applies (legacy drift). Clean entries keep their patch verbatim so the
+ * on-disk diff stays minimal. The returned chain verifies via verifyHistoryChain.
+ */
+export declare function reanchorHistoryEntries(entries: HistoryEntry[]): ReanchorResult;
+export declare function historyEntriesToRaw(entries: HistoryEntry[]): string;