@with-logic/elwood 0.2.1 → 0.2.2

package/dist/state/preparation/created-directories.js

@@ -0,0 +1,45 @@
+/** Record successful state-directory creations for bounded rollback (PRD §8.1, C-STATE-14). */
+import { lstatSync, rmdirSync } from "node:fs";
+import { errnoCode } from "../../core/errors.js";
+import { trustedRollbackParent } from "./rollback-parent.js";
+export class CreatedStateDirectories {
+    directories = new Map();
+    /** Called only after a single mkdir succeeded, never for an existing directory. */
+    record = (path) => {
+        const entry = lstatSync(path, { bigint: true });
+        if (!entry.isDirectory() || entry.uid !== BigInt(process.getuid()))
+            return;
+        // A recreated key belongs at its latest successful creation position.
+        this.directories.delete(path);
+        this.directories.set(path, { dev: entry.dev, ino: entry.ino, uid: entry.uid });
+    };
+    /**
+     * Remove only empty, still-matching owned entries. Retained shared default roots and
+     * sessions may already support another setup. Keep the first cleanup code without replacing
+     * the setup failure that caused rollback.
+     */
+    remove(retainedDirectories = new Set()) {
+        let failed;
+        // Parents are created first even when native aliases spell them differently.
+        const deepestFirst = [...this.directories].reverse();
+        for (const [path, made] of deepestFirst) {
+            if (retainedDirectories.has(path))
+                continue;
+            try {
+                if (!trustedRollbackParent(path))
+                    continue;
+                const current = lstatSync(path, { bigint: true });
+                if (current.dev !== made.dev || current.ino !== made.ino || current.uid !== made.uid)
+                    continue;
+                rmdirSync(path);
+            }
+            catch (error) {
+                const code = errnoCode(error);
+                if (code !== "ENOENT" && code !== "ENOTEMPTY")
+                    failed ??= code;
+            }
+        }
+        return failed;
+    }
+}
+//# sourceMappingURL=created-directories.js.map

package/dist/state/preparation/created-directories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"created-directories.js","sourceRoot":"","sources":["../../../src/state/preparation/created-directories.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAK7D,MAAM,OAAO,uBAAuB;IACjB,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEnE,mFAAmF;IAC1E,MAAM,GAAmC,CAAC,IAAI,EAAE,EAAE;QACzD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,OAAO,CAAC,MAAO,EAAE,CAAC;YAAE,OAAO;QAC5E,sEAAsE;QACtE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC;IAEF;;;;OAIG;IACH,MAAM,CAAC,sBAA2C,IAAI,GAAG,EAAE;QACzD,IAAI,MAA0B,CAAC;QAC/B,6EAA6E;QAC7E,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,YAAY,EAAE,CAAC;YACxC,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC5C,IAAI,CAAC;gBACH,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC3C,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;oBAClF,SAAS;gBACX,SAAS,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;gBAC9B,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,WAAW;oBAAE,MAAM,KAAK,IAAI,CAAC;YACjE,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/state/preparation/ignore-sync.d.ts

@@ -0,0 +1,9 @@
+/** Avoid repeated successful ignore-directory syncs within bounded observations (PRD §8.1). */
+import { type Stats } from "node:fs";
+/**
+ * Call only after validating the ignore afresh. This remembers durability work,
+ * never safety checks. Aliases have separate entries; changes restored between
+ * observations cannot be detected, so this is not an atomic filesystem guarantee.
+ */
+export declare function syncIgnoreDirectory(path: string, info: Stats): void;
+//# sourceMappingURL=ignore-sync.d.ts.map

package/dist/state/preparation/ignore-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ignore-sync.d.ts","sourceRoot":"","sources":["../../../src/state/preparation/ignore-sync.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,OAAO,EAAE,KAAK,KAAK,EAAY,MAAM,SAAS,CAAC;AAsB/C;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,IAAI,CAmBnE"}

package/dist/state/preparation/ignore-sync.js

@@ -0,0 +1,47 @@
+/** Avoid repeated successful ignore-directory syncs within bounded observations (PRD §8.1). */
+import { statSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fsyncDir } from "../files.js";
+const MAX_SYNCED_IGNORES = 32;
+const synced = new Map();
+function observation(info) {
+    return [
+        info.dev,
+        info.ino,
+        info.mode,
+        info.nlink,
+        info.uid,
+        info.gid,
+        info.size,
+        info.mtimeMs,
+        info.ctimeMs,
+        info.birthtimeMs,
+    ].join(":");
+}
+/**
+ * Call only after validating the ignore afresh. This remembers durability work,
+ * never safety checks. Aliases have separate entries; changes restored between
+ * observations cannot be detected, so this is not an atomic filesystem guarantee.
+ */
+export function syncIgnoreDirectory(path, info) {
+    const key = resolve(path);
+    const previous = synced.get(key);
+    synced.delete(key);
+    const parent = dirname(key);
+    const before = observation(statSync(parent));
+    const current = `${observation(info)}|${before}`;
+    if (previous !== current) {
+        fsyncDir(parent);
+        // A directory changed during the sync has not earned a reusable observation.
+        if (observation(statSync(parent)) !== before)
+            return;
+    }
+    synced.set(key, current);
+    if (synced.size > MAX_SYNCED_IGNORES) {
+        for (const oldest of synced.keys()) {
+            synced.delete(oldest);
+            break;
+        }
+    }
+}
+//# sourceMappingURL=ignore-sync.js.map

package/dist/state/preparation/ignore-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ignore-sync.js","sourceRoot":"","sources":["../../../src/state/preparation/ignore-sync.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,OAAO,EAAc,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEzC,SAAS,WAAW,CAAC,IAAW;IAC9B,OAAO;QACL,IAAI,CAAC,GAAG;QACR,IAAI,CAAC,GAAG;QACR,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,KAAK;QACV,IAAI,CAAC,GAAG;QACR,IAAI,CAAC,GAAG;QACR,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,OAAO;QACZ,IAAI,CAAC,OAAO;QACZ,IAAI,CAAC,WAAW;KACjB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAW;IAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;IACjD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjB,6EAA6E;QAC7E,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO;IACvD,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACzB,IAAI,MAAM,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC;QACrC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtB,MAAM;QACR,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/state/preparation/index.d.ts

@@ -0,0 +1,25 @@
+/** State scaffolding for a checked launch, with ownership-aware undo (PRD §8.1, C-STATE-14). */
+/** How a launch's state directory is set up. */
+export type StateDirSetup = {
+    /**
+     * The caller omitted `stateDir`, so this is Elwood's default `<cwd>/.elwood`: readable by
+     * local tooling, and given a `.gitignore` of `*` when it has none (an existing one is kept as
+     * it is). An explicit `stateDir`, even one naming that same directory, is not.
+     */
+    readonly isImplicitDefaultStateDir?: boolean;
+    /** The session's working directory, which must exist and is never made (C-STATE-14). */
+    readonly cwd: string;
+    /**
+     * The session whose directory is made with the rest, so that another start's undo, which
+     * removes only empty directories, leaves this start's tree (C-STATE-14).
+     */
+    readonly elwoodSessionId?: string;
+};
+/**
+ * Makes the state directory, its `sessions` directory, and the session's own directory when
+ * one is named, only while the session's `cwd` exists. A root at or under `cwd` is made only
+ * below it; a root elsewhere gets its missing parents. Nothing below the root is ever made with
+ * parents.
+ */
+export declare function prepareStateDir(stateDir: string, setup: StateDirSetup): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/state/preparation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/state/preparation/index.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAQhG,gDAAgD;AAChD,MAAM,MAAM,aAAa,GAAG;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IAC7C,wFAAwF;IACxF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAyB5E"}

package/dist/state/preparation/index.js

@@ -0,0 +1,31 @@
+/** State scaffolding for a checked launch, with ownership-aware undo (PRD §8.1, C-STATE-14). */
+import { join, resolve } from "node:path";
+import { assertStatePath, PRIVATE_STATE_MODE, SHARED_STATE_MODE } from "../directories.js";
+import { safeSessionDir, secureMkdir } from "../files.js";
+import { makeStateRoot, makeStateTree } from "../root.js";
+import { installDefaultIgnore } from "./install-ignore.js";
+/**
+ * Makes the state directory, its `sessions` directory, and the session's own directory when
+ * one is named, only while the session's `cwd` exists. A root at or under `cwd` is made only
+ * below it; a root elsewhere gets its missing parents. Nothing below the root is ever made with
+ * parents.
+ */
+export function prepareStateDir(stateDir, setup) {
+    const root = resolve(stateDir);
+    assertStatePath(root);
+    assertStatePath(join(root, "sessions"));
+    const isDefault = setup.isImplicitDefaultStateDir === true;
+    const sessions = join(root, "sessions");
+    const id = setup.elwoodSessionId;
+    const session = id === undefined ? undefined : safeSessionDir(root, id);
+    makeStateTree(setup.cwd, (onDirectoryCreated) => {
+        makeStateRoot(root, isDefault ? SHARED_STATE_MODE : PRIVATE_STATE_MODE, setup.cwd, undefined, onDirectoryCreated);
+        // Publish named-session presence before accepting shared configuration.
+        secureMkdir(sessions, onDirectoryCreated);
+        if (session !== undefined)
+            secureMkdir(session, onDirectoryCreated);
+        if (isDefault)
+            installDefaultIgnore(join(root, ".gitignore"));
+    }, isDefault ? new Set([root, sessions]) : undefined);
+}
+//# sourceMappingURL=index.js.map

package/dist/state/preparation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/state/preparation/index.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAEhG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAmB3D;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAoB;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,KAAK,CAAC,yBAAyB,KAAK,IAAI,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,KAAK,CAAC,eAAe,CAAC;IACjC,MAAM,OAAO,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACxE,aAAa,CACX,KAAK,CAAC,GAAG,EACT,CAAC,kBAAkB,EAAE,EAAE;QACrB,aAAa,CACX,IAAI,EACJ,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,EAClD,KAAK,CAAC,GAAG,EACT,SAAS,EACT,kBAAkB,CACnB,CAAC;QACF,wEAAwE;QACxE,WAAW,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC1C,IAAI,OAAO,KAAK,SAAS;YAAE,WAAW,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACpE,IAAI,SAAS;YAAE,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IAChE,CAAC,EACD,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAClD,CAAC;AACJ,CAAC"}

package/dist/state/preparation/install-ignore.d.ts

@@ -0,0 +1,6 @@
+import { type Stats } from "node:fs";
+/** Remove only the path still naming the inode this operation opened. */
+export declare function unlinkOwnedIgnore(path: string, owned: Stats): void;
+/** Publish complete contents; a published ignore may already belong to another start. */
+export declare function installDefaultIgnore(gitignorePath: string): Stats | undefined;
+//# sourceMappingURL=install-ignore.d.ts.map

package/dist/state/preparation/install-ignore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-ignore.d.ts","sourceRoot":"","sources":["../../../src/state/preparation/install-ignore.ts"],"names":[],"mappings":"AAEA,OAAO,EASL,KAAK,KAAK,EAGX,MAAM,SAAS,CAAC;AAQjB,yEAAyE;AACzE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,CAOlE;AAgBD,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CA2C7E"}

package/dist/state/preparation/install-ignore.js

@@ -0,0 +1,87 @@
+/** Publish a fully written ignore file without overwriting another writer (PRD §8.1, C-STATE-11). */
+import { randomUUID } from "node:crypto";
+import { closeSync, constants, fchmodSync, fstatSync, fsyncSync, linkSync, lstatSync, openSync, unlinkSync, writeFileSync, } from "node:fs";
+import { dirname } from "node:path";
+import { elwoodError, errnoCode, toError } from "../../core/errors.js";
+import { fsyncDir } from "../files.js";
+import { stateCleanupFailure } from "../setup-failure.js";
+import { syncIgnoreDirectory } from "./ignore-sync.js";
+import { assertTrustedIgnoreParent } from "./root-trust.js";
+/** Remove only the path still naming the inode this operation opened. */
+export function unlinkOwnedIgnore(path, owned) {
+    try {
+        const current = lstatSync(path);
+        if (current.dev === owned.dev && current.ino === owned.ino)
+            unlinkSync(path);
+    }
+    catch (error) {
+        if (errnoCode(error) !== "ENOENT")
+            throw error;
+    }
+}
+/** Validate and durably accept an existing ignore without changing its contents. */
+function existingIgnore(path) {
+    try {
+        const info = lstatSync(path);
+        if (!info.isFile())
+            throw elwoodError("state_corrupt", `Default ignore must be a regular file: ${path}`);
+        syncIgnoreDirectory(path, info);
+        return true;
+    }
+    catch (error) {
+        if (errnoCode(error) !== "ENOENT")
+            throw error;
+        return false;
+    }
+}
+/** Publish complete contents; a published ignore may already belong to another start. */
+export function installDefaultIgnore(gitignorePath) {
+    assertTrustedIgnoreParent(dirname(gitignorePath));
+    if (existingIgnore(gitignorePath))
+        return undefined;
+    const staging = `${gitignorePath}.${randomUUID()}.pending`;
+    const fd = openSync(staging, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o644);
+    let installed;
+    let failure;
+    try {
+        const owned = fstatSync(fd);
+        fchmodSync(fd, 0o644);
+        writeFileSync(fd, "*\n");
+        fsyncSync(fd);
+        try {
+            linkSync(staging, gitignorePath);
+            installed = owned;
+        }
+        catch (error) {
+            if (errnoCode(error) !== "EEXIST" || !existingIgnore(gitignorePath))
+                throw error;
+        }
+        unlinkOwnedIgnore(staging, owned);
+        if (installed !== undefined)
+            fsyncDir(dirname(gitignorePath));
+    }
+    catch (error) {
+        failure = toError(error);
+        try {
+            unlinkOwnedIgnore(staging, fstatSync(fd));
+        }
+        catch (cleanupError) {
+            failure = toError(stateCleanupFailure(failure, errnoCode(cleanupError)));
+        }
+    }
+    finally {
+        try {
+            closeSync(fd);
+        }
+        catch (closeError) {
+            failure =
+                failure === undefined
+                    ? toError(closeError)
+                    : toError(stateCleanupFailure(failure, errnoCode(closeError)));
+        }
+    }
+    if (failure !== undefined)
+        throw failure;
+    return installed;
+}
+//# sourceMappingURL=install-ignore.js.map

package/dist/state/preparation/install-ignore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-ignore.js","sourceRoot":"","sources":["../../../src/state/preparation/install-ignore.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,SAAS,EACT,QAAQ,EAER,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,yEAAyE;AACzE,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,KAAY;IAC1D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACjD,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAChB,MAAM,WAAW,CAAC,eAAe,EAAE,0CAA0C,IAAI,EAAE,CAAC,CAAC;QACvF,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,oBAAoB,CAAC,aAAqB;IACxD,yBAAyB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IAClD,IAAI,cAAc,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,OAAO,GAAG,GAAG,aAAa,IAAI,UAAU,EAAE,UAAU,CAAC;IAC3D,MAAM,EAAE,GAAG,QAAQ,CACjB,OAAO,EACP,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAChF,KAAK,CACN,CAAC;IACF,IAAI,SAA4B,CAAC;IACjC,IAAI,OAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACtB,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACzB,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,IAAI,CAAC;YACH,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACjC,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;gBAAE,MAAM,KAAK,CAAC;QACnF,CAAC;QACD,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,SAAS,KAAK,SAAS;YAAE,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,KAAK,SAAS;oBACnB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;oBACrB,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,OAAO,CAAC;IACzC,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/state/preparation/rollback-parent.d.ts

@@ -0,0 +1,3 @@
+/** Preserve entries when another account can redirect lookup, or the parent is missing. */
+export declare function trustedRollbackParent(path: string): boolean;
+//# sourceMappingURL=rollback-parent.d.ts.map

package/dist/state/preparation/rollback-parent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollback-parent.d.ts","sourceRoot":"","sources":["../../../src/state/preparation/rollback-parent.ts"],"names":[],"mappings":"AAKA,2FAA2F;AAC3F,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAY3D"}

package/dist/state/preparation/rollback-parent.js

@@ -0,0 +1,18 @@
+/** Trust rollback lookup parents using the existing mode/owner policy (PRD §8.1, C-STATE-14). */
+import { dirname } from "node:path";
+import { ElwoodError, errnoCode } from "../../core/errors.js";
+import { assertTrustedIgnoreParent } from "./root-trust.js";
+/** Preserve entries when another account can redirect lookup, or the parent is missing. */
+export function trustedRollbackParent(path) {
+    try {
+        assertTrustedIgnoreParent(dirname(path));
+        return true;
+    }
+    catch (error) {
+        if (errnoCode(error) === "ENOENT" ||
+            (error instanceof ElwoodError && error.code === "state_corrupt"))
+            return false;
+        throw error;
+    }
+}
+//# sourceMappingURL=rollback-parent.js.map

package/dist/state/preparation/rollback-parent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollback-parent.js","sourceRoot":"","sources":["../../../src/state/preparation/rollback-parent.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,2FAA2F;AAC3F,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,IAAI,CAAC;QACH,yBAAyB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAC7B,CAAC,KAAK,YAAY,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC;YAEhE,OAAO,KAAK,CAAC;QACf,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/state/preparation/root-trust.d.ts

@@ -0,0 +1,3 @@
+/** `path` is the existing parent directory, e.g. dirname(gitignorePath); no trust is cached. */
+export declare function assertTrustedIgnoreParent(path: string): void;
+//# sourceMappingURL=root-trust.d.ts.map

package/dist/state/preparation/root-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-trust.d.ts","sourceRoot":"","sources":["../../../src/state/preparation/root-trust.ts"],"names":[],"mappings":"AAcA,gGAAgG;AAChG,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAoC5D"}

package/dist/state/preparation/root-trust.js

@@ -0,0 +1,70 @@
+/**
+ * Checks the lexical and physical lookup namespaces of an existing ignore parent before
+ * staging/linking (PRD §8.1, C-STATE-11). Root/current-user entries and the CLI's mode-bit,
+ * private-group and sticky rules prevent other users redirecting those lookups. This
+ * is not same-user/root isolation, an ACL audit, or executable-selection authorization.
+ */
+import { isUtf8 } from "node:buffer";
+import { lstatSync, readlinkSync } from "node:fs";
+import { dirname, isAbsolute, join } from "node:path";
+import { elwoodError } from "../../core/errors.js";
+import { lookupFault, ownerFault } from "../../core/path-trust.js";
+const MAX_LINKS = 40;
+/** `path` is the existing parent directory, e.g. dirname(gitignorePath); no trust is cached. */
+export function assertTrustedIgnoreParent(path) {
+    const uid = process.getuid?.();
+    const gid = process.getgid?.();
+    if (uid === undefined || gid === undefined)
+        corrupt("POSIX path ownership could not be determined.");
+    // Do not resolve/normalize first: even a component followed by '..' must be trusted.
+    const absolute = isAbsolute(path) ? path : `${process.cwd()}/${path}`;
+    const user = { uid, gid };
+    let current = "/";
+    const pending = namesOf(absolute);
+    let links = 0;
+    assertDirectory(lstatSync(current), user, current);
+    for (let name = pending.pop(); name !== undefined; name = pending.pop()) {
+        if (name === "..") {
+            current = dirname(current);
+            continue;
+        }
+        const next = join(current, name);
+        const info = lstatSync(next);
+        if (info.isSymbolicLink()) {
+            const fault = ownerFault(info, user, next, "link");
+            if (fault !== undefined)
+                corrupt(fault);
+            if (++links > MAX_LINKS)
+                corrupt(`Too many symbolic links while inspecting '${next}'.`);
+            const target = readlinkSync(next, { encoding: "buffer" });
+            if (!isUtf8(target))
+                corrupt(`Symbolic link '${next}' has a non-UTF-8 target.`);
+            const text = target.toString("utf8");
+            pending.push(...namesOf(text));
+            if (isAbsolute(text)) {
+                current = "/";
+                assertDirectory(lstatSync(current), user, current);
+            }
+            continue;
+        }
+        assertDirectory(info, user, next);
+        current = next;
+    }
+}
+function assertDirectory(info, user, path) {
+    if (!info.isDirectory())
+        corrupt(`Ignore parent component is not a directory: ${path}`);
+    const fault = lookupFault(info, user, path);
+    if (fault !== undefined)
+        corrupt(fault);
+}
+function corrupt(reason) {
+    throw elwoodError("state_corrupt", `Cannot trust default ignore parent: ${reason}`);
+}
+function namesOf(path) {
+    return path
+        .split("/")
+        .filter((name) => name !== "" && name !== ".")
+        .reverse();
+}
+//# sourceMappingURL=root-trust.js.map

package/dist/state/preparation/root-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-trust.js","sourceRoot":"","sources":["../../../src/state/preparation/root-trust.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAc,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAiB,MAAM,0BAA0B,CAAC;AAElF,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,gGAAgG;AAChG,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAC/B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;QACxC,OAAO,CAAC,+CAA+C,CAAC,CAAC;IAC3D,qFAAqF;IACrF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;IACtE,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IAC1B,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACnD,KAAK,IAAI,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,KAAK,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QACxE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACnD,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,EAAE,KAAK,GAAG,SAAS;gBAAE,OAAO,CAAC,6CAA6C,IAAI,IAAI,CAAC,CAAC;YACxF,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,CAAC,kBAAkB,IAAI,2BAA2B,CAAC,CAAC;YAChF,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,OAAO,GAAG,GAAG,CAAC;gBACd,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YACrD,CAAC;YACD,SAAS;QACX,CAAC;QACD,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAClC,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAW,EAAE,IAAc,EAAE,IAAY;IAChE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO,CAAC,+CAA+C,IAAI,EAAE,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,OAAO,CAAC,MAAc;IAC7B,MAAM,WAAW,CAAC,eAAe,EAAE,uCAAuC,MAAM,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI;SACR,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC;SAC7C,OAAO,EAAE,CAAC;AACf,CAAC"}

package/dist/state/private-session.d.ts

@@ -5,8 +5,11 @@
 import type { FileOwner } from "./private-read.ts";
 import { type SessionRecord } from "./store.ts";
 export type SessionOwner = FileOwner;
-/** Create or validate the CLI state root without following a planted root symlink. */
-export declare function ensurePrivateStateRoot(stateDir: string, owner?: SessionOwner): void;
+/**
+ * Create or validate the CLI state root for a session in `cwd` without following a planted
+ * root symlink. The root is made only while `cwd` exists, and never makes it (C-STATE-14).
+ */
+export declare function ensurePrivateStateRoot(stateDir: string, cwd: string, owner?: SessionOwner): void;
 /**
  * Read one CLI-owned record without following links or trusting shared metadata: every
  * directory on the path must be a private directory owned by `owner`, and the record

package/dist/state/private-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"private-session.d.ts","sourceRoot":"","sources":["../../src/state/private-session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgBH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD,OAAO,EAAyC,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEvF,MAAM,MAAM,YAAY,GAAG,SAAS,CAAC;AAErC,sFAAsF;AACtF,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,KAAK,GAAE,YAAyC,GAC/C,IAAI,CAIN;AAiBD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,EACV,KAAK,GAAE,YAAyC,GAC/C,aAAa,CAsBf;AAED,+FAA+F;AAC/F,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,QAAQ,GAAG,OAAO,GAC1B,IAAI,CAON"}
+{"version":3,"file":"private-session.d.ts","sourceRoot":"","sources":["../../src/state/private-session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAGnD,OAAO,EAAyC,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEvF,MAAM,MAAM,YAAY,GAAG,SAAS,CAAC;AAErC;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,KAAK,GAAE,YAAyC,GAC/C,IAAI,CAaN;AAmBD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,EACV,KAAK,GAAE,YAAyC,GAC/C,aAAa,CAsBf;AAED,+FAA+F;AAC/F,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,QAAQ,GAAG,OAAO,GAC1B,IAAI,CAON"}

package/dist/state/private-session.js

@@ -2,30 +2,42 @@
  * Private, symlink-safe CLI session-record reads and identity cleanup.
  * Implements PRD §12A.2/§12A.5 and C-CLI-08/C-CLI-15/C-CLI-16.
  */
-import { closeSync, constants, fstatSync, lstatSync, mkdirSync, openSync, } from "node:fs";
+import { closeSync, constants, fstatSync, lstatSync, openSync } from "node:fs";
 import { join, resolve } from "node:path";
 import { ElwoodError, elwoodError, errnoCode } from "../core/errors.js";
-import { assertStatePath } from "./directories.js";
+import { assertStatePath, makeStateDirectory, PRIVATE_STATE_MODE } from "./directories.js";
 import { assertSessionId, safeSessionDir } from "./files.js";
 import { hasLaunchOwner } from "./launch-ownership.js";
+import { makeStateRoot, makeStateTree } from "./root.js";
 import { sessionSocketHome } from "./socket-home.js";
 import { readSessionRecord, removeSessionFiles } from "./store.js";
-/** Create or validate the CLI state root without following a planted root symlink. */
-export function ensurePrivateStateRoot(stateDir, owner = { uid: process.getuid() }) {
+/**
+ * Create or validate the CLI state root for a session in `cwd` without following a planted
+ * root symlink. The root is made only while `cwd` exists, and never makes it (C-STATE-14).
+ */
+export function ensurePrivateStateRoot(stateDir, cwd, owner = { uid: process.getuid() }) {
     const root = resolve(stateDir);
-    ensurePrivateDirectory(root, owner);
-    ensurePrivateDirectory(join(root, "sessions"), owner);
+    const sessions = join(root, "sessions");
+    makeStateTree(cwd, (onDirectoryCreated) => {
+        // Made without `prepareStateDirectory`'s chmod: an existing root keeps its mode, so a
+        // shared one is rejected below instead of being made private (C-CLI-15).
+        const makeRoot = () => makeStateRoot(root, PRIVATE_STATE_MODE, cwd, makeStateDirectory, onDirectoryCreated);
+        ensurePrivateDirectory(root, owner, makeRoot);
+        ensurePrivateDirectory(sessions, owner, () => makeStateDirectory(sessions, PRIVATE_STATE_MODE, "inside-parent", onDirectoryCreated));
+    });
 }
-function ensurePrivateDirectory(path, owner) {
+/** Makes `path` with `make`, then requires a private directory `owner` owns. */
+function ensurePrivateDirectory(path, owner, make) {
     let fd;
     try {
         assertStatePath(path);
-        mkdirSync(path, { recursive: true, mode: 0o700 });
+        make();
         fd = openSync(path, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
         assertPrivateDirectory(fstatSync(fd), owner);
     }
     catch (error) {
-        if (error instanceof ElwoodError)
+        // ENOENT is a directory removed meanwhile, which `makeStateTree` retries or reports as such.
+        if (error instanceof ElwoodError || errnoCode(error) === "ENOENT")
             throw error;
         throw corrupt("root");
     }

package/dist/state/private-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"private-session.js","sourceRoot":"","sources":["../../src/state/private-session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,GAET,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAsB,MAAM,YAAY,CAAC;AAIvF,sFAAsF;AACtF,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,QAAsB,EAAE,GAAG,EAAE,OAAO,CAAC,MAAO,EAAE,EAAE;IAEhD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,KAAmB;IAC/D,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACvF,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,KAAK,CAAC;QAC9C,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,EAAU,EACV,QAAsB,EAAE,GAAG,EAAE,OAAO,CAAC,MAAO,EAAE,EAAE;IAEhD,eAAe,CAAC,EAAE,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/C,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACjE,sBAAsB,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAC/B,MAAM,WAAW,CAAC,iBAAiB,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC;QAC5E,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,KAAK,CAAC;QAC9C,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,oFAAoF;QACpF,wDAAwD;QACxD,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,iBAAiB;YAAE,MAAM,KAAK,CAAC;QACxD,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,EAAU,EACV,OAA2B;IAE3B,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,+BAA+B,CAAC,IAAI,CAAC,CAAC;IACtC,+BAA+B,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACxD,IAAI,cAAc,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAAE,OAAO;IACrD,MAAM,UAAU,GAAG,iBAAiB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACvF,kBAAkB,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,+BAA+B,CAAC,IAAY;IACnD,IAAI,CAAC;QACH,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,MAAO,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO;QAC1C,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,KAAK,CAAC;QAC9C,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAW,EAAE,KAAmB;IAC9D,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjD,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,IAAW,EAAE,KAAmB;IACrD,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,OAAO,CAAC,EAAU;IACzB,OAAO,WAAW,CAAC,eAAe,EAAE,6CAA6C,EAAE,EAAE,CAAC,CAAC;AACzF,CAAC"}
+{"version":3,"file":"private-session.js","sourceRoot":"","sources":["../../src/state/private-session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAc,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAsB,MAAM,YAAY,CAAC;AAIvF;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,GAAW,EACX,QAAsB,EAAE,GAAG,EAAE,OAAO,CAAC,MAAO,EAAE,EAAE;IAEhD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxC,aAAa,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,EAAE;QACxC,sFAAsF;QACtF,yEAAyE;QACzE,MAAM,QAAQ,GAAG,GAAG,EAAE,CACpB,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;QACvF,sBAAsB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC9C,sBAAsB,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAC3C,kBAAkB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,eAAe,EAAE,kBAAkB,CAAC,CACtF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,SAAS,sBAAsB,CAAC,IAAY,EAAE,KAAmB,EAAE,IAAgB;IACjF,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,EAAE,CAAC;QACP,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACvF,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,6FAA6F;QAC7F,IAAI,KAAK,YAAY,WAAW,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QAC/E,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,EAAU,EACV,QAAsB,EAAE,GAAG,EAAE,OAAO,CAAC,MAAO,EAAE,EAAE;IAEhD,eAAe,CAAC,EAAE,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/C,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACjE,sBAAsB,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAC/B,MAAM,WAAW,CAAC,iBAAiB,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC;QAC5E,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,KAAK,CAAC;QAC9C,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,oFAAoF;QACpF,wDAAwD;QACxD,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,iBAAiB;YAAE,MAAM,KAAK,CAAC;QACxD,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,EAAU,EACV,OAA2B;IAE3B,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,+BAA+B,CAAC,IAAI,CAAC,CAAC;IACtC,+BAA+B,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACxD,IAAI,cAAc,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAAE,OAAO;IACrD,MAAM,UAAU,GAAG,iBAAiB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACvF,kBAAkB,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,+BAA+B,CAAC,IAAY;IACnD,IAAI,CAAC;QACH,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,MAAO,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO;QAC1C,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,KAAK,CAAC;QAC9C,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAW,EAAE,KAAmB;IAC9D,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjD,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,IAAW,EAAE,KAAmB;IACrD,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,OAAO,CAAC,EAAU;IACzB,OAAO,WAAW,CAAC,eAAe,EAAE,6CAA6C,EAAE,EAAE,CAAC,CAAC;AACzF,CAAC"}

package/dist/state/root.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Makes a state root without ever making the session's working directory. The root is made only
+ * while `cwd` exists; one at or under `cwd` is made only below it, one directory at a time, and
+ * a root elsewhere gets its missing parents, which are taken back if `cwd` is gone once they are
+ * made. Implements PRD §8.1 and C-STATE-14.
+ */
+import { type StateDirectoryMode, type StateDirectoryPolicy } from "./directories.ts";
+import { type StateDirectoryCreationObserver } from "./preparation/created-directories.ts";
+/** What makes the root itself once its parents are in place. */
+export type MakeRootDirectory = (path: string, mode: StateDirectoryMode, policy: StateDirectoryPolicy, onDirectoryCreated?: StateDirectoryCreationObserver) => void;
+/**
+ * Makes the state root `root` with `mode` for a session in `cwd`, the root itself through
+ * `make`, which by default also checks it and gives it `mode`.
+ */
+export declare function makeStateRoot(root: string, mode: StateDirectoryMode, cwd: string, make?: MakeRootDirectory, onDirectoryCreated?: StateDirectoryCreationObserver): void;
+/**
+ * Runs `makeTree`, recording its successful directory creations for a session in `cwd`,
+ * then requires `cwd` to exist still. A `cwd` removed meanwhile fails with ENOENT, and the
+ * rollback removes only still-matching, owned, empty directories, deepest first (C-STATE-14).
+ * Replaced or unverifiable entries are preserved. Nonempty directories, including those
+ * another start has populated, stay in place; entries already gone need no cleanup.
+ * Explicitly retained shared directories can already support another setup.
+ */
+export declare function makeStateTree(cwd: string, makeTree: (onDirectoryCreated: StateDirectoryCreationObserver) => void, retainedDirectories?: ReadonlySet<string>): void;
+//# sourceMappingURL=root.d.ts.map

package/dist/state/root.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"root.d.ts","sourceRoot":"","sources":["../../src/state/root.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,EAKL,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,sCAAsC,CAAC;AAG9C,gEAAgE;AAChE,MAAM,MAAM,iBAAiB,GAAG,CAC9B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,oBAAoB,EAC5B,kBAAkB,CAAC,EAAE,8BAA8B,KAChD,IAAI,CAAC;AAEV;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,kBAAkB,EACxB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,iBAAyC,EAC/C,kBAAkB,CAAC,EAAE,8BAA8B,GAClD,IAAI,CAsBN;AAgBD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,CAAC,kBAAkB,EAAE,8BAA8B,KAAK,IAAI,EACtE,mBAAmB,GAAE,WAAW,CAAC,MAAM,CAAa,GACnD,IAAI,CAiBN"}

package/dist/state/root.js

@@ -0,0 +1,84 @@
+/**
+ * Makes a state root without ever making the session's working directory. The root is made only
+ * while `cwd` exists; one at or under `cwd` is made only below it, one directory at a time, and
+ * a root elsewhere gets its missing parents, which are taken back if `cwd` is gone once they are
+ * made. Implements PRD §8.1 and C-STATE-14.
+ */
+import { existsSync, realpathSync } from "node:fs";
+import { isAbsolute, join, relative, sep } from "node:path";
+import { errnoCode } from "../core/errors.js";
+import { withRealAncestor } from "./canonical-path.js";
+import { assertStatePath, makeStateDirectoryBelow, PRIVATE_STATE_MODE, prepareStateDirectory, } from "./directories.js";
+import { CreatedStateDirectories, } from "./preparation/created-directories.js";
+import { stateCleanupFailure } from "./setup-failure.js";
+/**
+ * Makes the state root `root` with `mode` for a session in `cwd`, the root itself through
+ * `make`, which by default also checks it and gives it `mode`.
+ */
+export function makeStateRoot(root, mode, cwd, make = prepareStateDirectory, onDirectoryCreated) {
+    // The root first: while `cwd` exists, its real path, spelled as on disk, leads the root's too,
+    // so the two compare exactly however the caller spelled them.
+    const target = withRealAncestor(root, realpathSync.native);
+    // A missing `cwd` fails here with ENOENT, before anything is made, wherever the root is.
+    const project = realpathSync.native(cwd);
+    const names = namesBelow(project, target);
+    if (names === undefined) {
+        make(root, mode, "with-parents", onDirectoryCreated);
+        return;
+    }
+    // Each directory is made inside its parent, so a `cwd` removed meanwhile fails the next one
+    // with ENOENT instead of coming back. Their path is checked for symlinks once, then each one
+    // only itself: checking every ancestor again at each level made a deep root quadratic.
+    let current = project;
+    const parents = names.slice(0, -1);
+    assertStatePath(join(project, ...parents));
+    for (const name of parents) {
+        current = join(current, name);
+        makeStateDirectoryBelow(current, PRIVATE_STATE_MODE, onDirectoryCreated);
+    }
+    make(root, mode, names.length === 0 ? "must-exist" : "inside-parent", onDirectoryCreated);
+}
+/** The names leading from `project` down to `path`, or `undefined` when it is not under it. */
+function namesBelow(project, path) {
+    const below = relative(project, path);
+    if (below === "")
+        return [];
+    if (below === ".." || below.startsWith(`..${sep}`) || isAbsolute(below))
+        return undefined;
+    return below.split(sep);
+}
+/**
+ * How many times `makeTree` runs while `cwd` stays: another start's undo can remove a directory
+ * this one found already made, so making the next one inside it fails with ENOENT.
+ */
+const maxStateTreeAttempts = 3;
+/**
+ * Runs `makeTree`, recording its successful directory creations for a session in `cwd`,
+ * then requires `cwd` to exist still. A `cwd` removed meanwhile fails with ENOENT, and the
+ * rollback removes only still-matching, owned, empty directories, deepest first (C-STATE-14).
+ * Replaced or unverifiable entries are preserved. Nonempty directories, including those
+ * another start has populated, stay in place; entries already gone need no cleanup.
+ * Explicitly retained shared directories can already support another setup.
+ */
+export function makeStateTree(cwd, makeTree, retainedDirectories = new Set()) {
+    const made = new CreatedStateDirectories();
+    try {
+        for (let attempt = 1;; attempt += 1) {
+            try {
+                makeTree(made.record);
+                break;
+            }
+            catch (error) {
+                const retry = errnoCode(error) === "ENOENT" && existsSync(cwd);
+                if (!retry || attempt === maxStateTreeAttempts)
+                    throw error;
+            }
+        }
+        realpathSync.native(cwd);
+    }
+    catch (error) {
+        const cleanupErrorCode = made.remove(retainedDirectories);
+        throw stateCleanupFailure(error, cleanupErrorCode);
+    }
+}
+//# sourceMappingURL=root.js.map