@xioflow/kernel 0.3.0 → 0.5.0

package/dist/workspace/read-tracking.js

@@ -0,0 +1,66 @@
+import fs from 'node:fs';
+import path from 'node:path';
+const SKIP = new Set(['.git']);
+const ATIME_MARGIN_S = 2;
+function resetAccessTime(abs, st) {
+    const mtime = st.mtimeMs / 1000;
+    fs.utimesSync(abs, mtime - ATIME_MARGIN_S, mtime);
+}
+function walk(dir, visit, rel = '') {
+    const st = fs.lstatSync(dir);
+    visit(dir, rel, st);
+    for (const name of fs.readdirSync(dir)) {
+        if (!rel && SKIP.has(name))
+            continue;
+        const abs = path.join(dir, name);
+        const childRel = rel ? `${rel}/${name}` : name;
+        const childStat = fs.lstatSync(abs);
+        if (childStat.isDirectory())
+            walk(abs, visit, childRel);
+        else
+            visit(abs, childRel, childStat);
+    }
+}
+/** 把 root 下每个条目（跳过顶层 .git）的 atime 设到其 mtime 之前。目录在列举之后再归一。 */
+export function normalizeAccessTimes(root) {
+    const dirs = [];
+    walk(root, (abs, _rel, st) => {
+        if (st.isSymbolicLink())
+            return; // utimes 会跟随链接，改到链接目标上
+        if (st.isDirectory())
+            dirs.push([abs, st]);
+        else
+            resetAccessTime(abs, st);
+    });
+    // 深的目录先归一：父目录的 mtime 不受子目录 atime 变化影响
+    for (const [abs, st] of dirs.reverse())
+        resetAccessTime(abs, st);
+}
+/**
+ * 读过的条目（相对 root，目录以 `/` 结尾，root 本身为 `./`）：atime 严格晚于 mtime。
+ */
+export function collectReadSet(root) {
+    const reads = [];
+    walk(root, (_abs, rel, st) => {
+        if (st.isSymbolicLink())
+            return;
+        if (st.atimeMs > st.mtimeMs)
+            reads.push(st.isDirectory() ? `${rel || '.'}/` : rel);
+    });
+    return reads.sort();
+}
+/** 在 dir 所在文件系统上实测一次「读取会推进 atime」。探针文件放在 dir 下并立即删除。 */
+export function probeReadTracking(dir) {
+    const probe = path.join(dir, `.xioflow-atime-probe-${process.pid}-${Date.now()}`);
+    try {
+        fs.writeFileSync(probe, 'probe');
+        resetAccessTime(probe, fs.statSync(probe));
+        fs.readFileSync(probe);
+        const st = fs.statSync(probe);
+        return st.atimeMs > st.mtimeMs ? 'atime' : 'unobserved';
+    }
+    finally {
+        fs.rmSync(probe, { force: true });
+    }
+}
+//# sourceMappingURL=read-tracking.js.map

package/dist/workspace/read-tracking.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-tracking.js","sourceRoot":"","sources":["../../src/workspace/read-tracking.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAiB7B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/B,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,SAAS,eAAe,CAAC,GAAW,EAAE,EAAY;IAChD,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,GAAG,IAAI,CAAC;IAChC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,GAAG,cAAc,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,IAAI,CAAC,GAAW,EAAE,KAAuD,EAAE,GAAG,GAAG,EAAE;IAC1F,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/C,MAAM,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,CAAC,WAAW,EAAE;YAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;;YACnD,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,IAAI,GAA8B,EAAE,CAAC;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;QAC3B,IAAI,EAAE,CAAC,cAAc,EAAE;YAAE,OAAO,CAAC,uBAAuB;QACxD,IAAI,EAAE,CAAC,WAAW,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;;YACtC,eAAe,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,sCAAsC;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE;QAAE,eAAe,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE;QAC3B,IAAI,EAAE,CAAC,cAAc,EAAE;YAAE,OAAO;QAChC,IAAI,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,wBAAwB,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACjC,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACvB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;IAC1D,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;AACH,CAAC"}

package/dist/workspace/transactions.d.ts

@@ -0,0 +1,89 @@
+import { ExecutionDomain } from '../domain.js';
+import { SnapshotRef } from '../types.js';
+import { GitShadowSnapshotDriver } from '../snapshot/git-shadow.js';
+import { ReadTracking } from './read-tracking.js';
+/**
+ * 工作区事务：并行 agent 的乐观并发控制（ARCHITECTURE §3.9）。
+ *
+ * begin：对主工作区拍基线快照，materialize 出独立 fork，归一 atime 以观测读集。
+ * agent 在 fork 里执行任意操作（cwd = forkRoot）。
+ * commit：读集（atime）+ 写集（基线树 → fork 当前树的逐文件差异），对「本事务开始之后
+ * 已提交的事务」与「绕过事务直接写主工作区的改动」做后向校验；无冲突才把写集应用到主工作区。
+ * 应用前先写 TX_COMMITTING（带写集）：崩溃后再次 commit 只重放应用，fork 即重做日志。
+ */
+export interface WriteEntry {
+    status: 'A' | 'D' | 'M' | 'T';
+    /** 相对事务根目录 */
+    path: string;
+}
+export interface TransactionConflict {
+    path: string;
+    kind: 'write_write' | 'read_write' | 'external_write';
+    /** 与之冲突的已提交事务；external_write 为空（改动不经事务直接写入了主工作区）。 */
+    otherTxId?: string;
+}
+export interface WorkspaceTransaction {
+    txId: string;
+    runId: string;
+    /** 主工作区中的事务根目录 */
+    root: string;
+    /** agent 应在其中工作的目录（fork 内与 root 对应的位置） */
+    forkRoot: string;
+    baseSnapshotId: string;
+    /** TX_BEGUN 的 journal seq：校验只看它之后提交的事务 */
+    beginSeq: number;
+    readTracking: ReadTracking;
+    status: 'open' | 'committing' | 'committed' | 'conflicted' | 'aborted';
+}
+export interface TransactionEffects {
+    readTracking: ReadTracking;
+    /** readTracking 为 'unobserved' 时为 null：不知道就不假装知道 */
+    readSet: string[] | null;
+    writeSet: WriteEntry[];
+}
+export type CommitResult = ({
+    status: 'committed';
+    txId: string;
+} & TransactionEffects) | ({
+    status: 'conflict';
+    txId: string;
+    conflicts: TransactionConflict[];
+} & TransactionEffects);
+export interface TransactionHost {
+    domain: ExecutionDomain;
+    snapshotDriver: GitShadowSnapshotDriver;
+    captureSnapshot(runId: string, opId: string, root: string): Promise<SnapshotRef>;
+    materialize(snapshotId: string, forkPath: string): Promise<void>;
+    dematerialize(forkPath: string): Promise<void>;
+}
+export declare class WorkspaceTransactions {
+    private readonly host;
+    private readonly open;
+    private commitQueue;
+    constructor(host: TransactionHost);
+    begin(options: {
+        txId: string;
+        runId: string;
+        root: string;
+        forkPath: string;
+    }): Promise<WorkspaceTransaction>;
+    /** 当前读集与写集（不提交）。读集证据在计算写集前取出并落 journal，随后重新归一 atime。 */
+    inspect(txId: string): Promise<TransactionEffects>;
+    commit(txId: string): Promise<CommitResult>;
+    abort(txId: string, reason?: string): Promise<void>;
+    /** 本进程内打开过的事务（崩溃后重建的事务在首次 inspect / commit / abort 时载入）。 */
+    get(txId: string): WorkspaceTransaction | undefined;
+    private commitSerialized;
+    private effects;
+    /** 后向校验：本事务开始后提交的事务，以及绕过事务直接写入主工作区的改动。 */
+    private validate;
+    private mainChangesSinceBase;
+    /** 把 fork 中的写集原样落到主工作区；可重复执行（崩溃后重放）。 */
+    private apply;
+    private record;
+    private journal;
+    /** 内存里没有时从 journal 重建（例如 TX_COMMITTING 之后监督进程崩溃重启），已结束的事务不可再用。 */
+    private require;
+    private view;
+}
+//# sourceMappingURL=transactions.d.ts.map

package/dist/workspace/transactions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transactions.d.ts","sourceRoot":"","sources":["../../src/workspace/transactions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAgB,WAAW,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,OAAO,EAA2D,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE3G;;;;;;;;GAQG;AAEH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAC9B,cAAc;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,GAAG,YAAY,GAAG,gBAAgB,CAAC;IACtD,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,YAAY,CAAC;IAC3B,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,CAAC;CACxE;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,YAAY,CAAC;IAC3B,oDAAoD;IACpD,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,UAAU,EAAE,CAAC;CACxB;AAED,MAAM,MAAM,YAAY,GACpB,CAAC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,kBAAkB,CAAC,GAC5D,CAAC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,mBAAmB,EAAE,CAAA;CAAE,GAAG,kBAAkB,CAAC,CAAC;AAElG,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,CAAC;IACxB,cAAc,EAAE,uBAAuB,CAAC;IACxC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACjF,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAID,qBAAa,qBAAqB;IAIpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsC;IAC3D,OAAO,CAAC,WAAW,CAAuC;IAE1D,YAA6B,IAAI,EAAE,eAAe,EAAI;IAEzC,KAAK,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAyC1H;IAED,wDAAwD;IAC3C,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAE9D;IAEM,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAKjD;IAEY,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,SAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ1E;IAED,4DAA4D;IACrD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAGzD;YAEa,gBAAgB;YAmChB,OAAO;IAwBrB,0CAA0C;YAC5B,QAAQ;YAmBR,oBAAoB;IAWlC,wCAAwC;IACxC,OAAO,CAAC,KAAK;IAwBb,OAAO,CAAC,MAAM;IAWd,OAAO,CAAC,OAAO;IAQf,kEAAkE;YACpD,OAAO;IAiCrB,OAAO,CAAC,IAAI;CAIb"}

package/dist/workspace/transactions.js

@@ -0,0 +1,277 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { isPathContained } from '../capability/index.js';
+import { collectReadSet, normalizeAccessTimes, probeReadTracking } from './read-tracking.js';
+export class WorkspaceTransactions {
+    host;
+    open = new Map();
+    commitQueue = Promise.resolve();
+    constructor(host) {
+        this.host = host;
+    }
+    async begin(options) {
+        const { snapshotDriver } = this.host;
+        // txId 会成为快照 id 与 git ref 名的一部分
+        if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(options.txId)) {
+            throw new Error(`Invalid workspace transaction id "${options.txId}": use letters, digits, ".", "_" or "-"`);
+        }
+        if (this.open.has(options.txId) || this.journal(options.txId).length > 0) {
+            throw new Error(`Workspace transaction "${options.txId}" already exists`);
+        }
+        const root = fs.realpathSync(options.root);
+        const { repoRoot } = await snapshotDriver.assertGitRepo(root);
+        const base = await this.host.captureSnapshot(options.runId, `${options.txId}-base`, root);
+        const forkPath = path.resolve(options.forkPath);
+        await this.host.materialize(base.id, forkPath);
+        const forkRoot = path.join(fs.realpathSync(forkPath), path.relative(repoRoot, root));
+        const readTracking = probeReadTracking(path.dirname(forkPath));
+        if (readTracking === 'atime')
+            normalizeAccessTimes(forkRoot);
+        const beginSeq = this.record(options.runId, 'TX_BEGUN', {
+            txId: options.txId,
+            root,
+            forkPath,
+            forkRoot,
+            baseSnapshotId: base.id,
+            readTracking,
+        });
+        const tx = {
+            txId: options.txId,
+            runId: options.runId,
+            root,
+            forkRoot,
+            forkPath,
+            repoRoot,
+            baseSnapshotId: base.id,
+            beginSeq,
+            readTracking,
+            status: 'open',
+        };
+        this.open.set(tx.txId, tx);
+        return this.view(tx);
+    }
+    /** 当前读集与写集（不提交）。读集证据在计算写集前取出并落 journal，随后重新归一 atime。 */
+    async inspect(txId) {
+        return this.effects(await this.require(txId));
+    }
+    commit(txId) {
+        // 同一域只有一个 owner：进程内串行化即可保证「校验 + 应用」相对其他提交是原子的
+        const run = this.commitQueue.then(() => this.commitSerialized(txId));
+        this.commitQueue = run.catch(() => { });
+        return run;
+    }
+    async abort(txId, reason = 'aborted by host') {
+        const tx = await this.require(txId);
+        if (tx.status === 'committing') {
+            throw new Error(`Workspace transaction "${txId}" is committing; call commit() again to finish applying it`);
+        }
+        await this.host.dematerialize(tx.forkPath);
+        this.record(tx.runId, 'TX_ABORTED', { txId, reason });
+        this.open.delete(txId);
+    }
+    /** 本进程内打开过的事务（崩溃后重建的事务在首次 inspect / commit / abort 时载入）。 */
+    get(txId) {
+        const tx = this.open.get(txId);
+        return tx ? this.view(tx) : undefined;
+    }
+    async commitSerialized(txId) {
+        const tx = await this.require(txId);
+        if (tx.status === 'conflicted') {
+            throw new Error(`Workspace transaction "${txId}" has conflicts; abort it and start again from the current workspace`);
+        }
+        const committing = this.journal(txId).find((e) => e.type === 'TX_COMMITTING');
+        const effects = committing ? committing.payload.effects : await this.effects(tx);
+        if (!committing) {
+            const conflicts = await this.validate(tx, effects);
+            if (conflicts.length > 0) {
+                tx.status = 'conflicted';
+                this.record(tx.runId, 'TX_CONFLICTED', { txId, conflicts });
+                return { status: 'conflict', txId, conflicts, ...effects };
+            }
+        }
+        const leaseOwner = `${txId}:apply`;
+        this.host.domain.allocateResources(leaseOwner, [`workspace:write:${tx.root}`]);
+        try {
+            if (!committing) {
+                tx.status = 'committing';
+                this.record(tx.runId, 'TX_COMMITTING', { txId, effects });
+            }
+            this.apply(tx, effects.writeSet);
+            this.record(tx.runId, 'TX_COMMITTED', { txId, root: tx.root, writeSet: effects.writeSet, readSet: effects.readSet });
+        }
+        finally {
+            this.host.domain.internalReleaseResources(leaseOwner);
+        }
+        tx.status = 'committed';
+        await this.host.dematerialize(tx.forkPath);
+        this.open.delete(txId);
+        return { status: 'committed', txId, ...effects };
+    }
+    async effects(tx) {
+        let readSet = null;
+        if (tx.readTracking === 'atime') {
+            // 必须在任何 git 读取之前取证；之前 inspect 落盘的读集一并计入
+            const earlier = this.journal(tx.txId)
+                .filter((e) => e.type === 'TX_READS')
+                .flatMap((e) => e.payload.readSet);
+            readSet = [...new Set([...earlier, ...collectReadSet(tx.forkRoot)])].sort();
+            this.record(tx.runId, 'TX_READS', { txId: tx.txId, readSet });
+        }
+        const { snapshotDriver } = this.host;
+        const base = this.host.domain.getStore().getSnapshot(tx.baseSnapshotId);
+        if (!base)
+            throw new Error(`Base snapshot ${tx.baseSnapshotId} of transaction "${tx.txId}" is missing`);
+        const current = await snapshotDriver.fingerprint([tx.forkRoot], { against: base });
+        const forkRepo = (await snapshotDriver.assertGitRepo(tx.forkRoot)).repoRoot;
+        const prefix = path.relative(forkRepo, tx.forkRoot);
+        const writeSet = (await snapshotDriver.diffTrees(forkRepo, base.treeFingerprint, current, [prefix || '.'])).map((c) => ({ status: c.status, path: prefix ? path.relative(prefix, c.path) : c.path }));
+        if (tx.readTracking === 'atime')
+            normalizeAccessTimes(tx.forkRoot); // git 读过所有文件，重新归零证据
+        return { readTracking: tx.readTracking, readSet, writeSet };
+    }
+    /** 后向校验：本事务开始后提交的事务，以及绕过事务直接写入主工作区的改动。 */
+    async validate(tx, effects) {
+        const conflicts = [];
+        const committedAfter = this.host.domain
+            .getStore()
+            .getJournalEvents(this.host.domain.domainId, tx.beginSeq)
+            .filter((e) => e.type === 'TX_COMMITTED' && e.payload.root === tx.root && e.payload.txId !== tx.txId);
+        const explained = new Set();
+        for (const other of committedAfter) {
+            const otherWrites = other.payload.writeSet;
+            for (const w of otherWrites)
+                explained.add(w.path);
+            conflicts.push(...intersect(effects, otherWrites, 'write_write', 'read_write', other.payload.txId));
+        }
+        const external = (await this.mainChangesSinceBase(tx)).filter((w) => !explained.has(w.path));
+        conflicts.push(...intersect(effects, external, 'external_write', 'external_write'));
+        return conflicts;
+    }
+    async mainChangesSinceBase(tx) {
+        const { snapshotDriver } = this.host;
+        const base = this.host.domain.getStore().getSnapshot(tx.baseSnapshotId);
+        const current = await snapshotDriver.fingerprint([tx.root], { against: base });
+        const prefix = path.relative(tx.repoRoot, tx.root);
+        return (await snapshotDriver.diffTrees(tx.repoRoot, base.treeFingerprint, current, [prefix || '.'])).map((c) => ({
+            status: c.status,
+            path: prefix ? path.relative(prefix, c.path) : c.path,
+        }));
+    }
+    /** 把 fork 中的写集原样落到主工作区；可重复执行（崩溃后重放）。 */
+    apply(tx, writeSet) {
+        for (const entry of writeSet) {
+            const dst = path.resolve(tx.root, entry.path);
+            const src = path.resolve(tx.forkRoot, entry.path);
+            if (!isPathContained(tx.root, dst) || !isPathContained(tx.forkRoot, src)) {
+                throw new Error(`Refusing to apply ${entry.path}: it resolves outside the transaction root`);
+            }
+            assertNoSymlinkedParent(tx.root, dst);
+            if (entry.status === 'D') {
+                fs.rmSync(dst, { force: true });
+                continue;
+            }
+            fs.mkdirSync(path.dirname(dst), { recursive: true });
+            const st = fs.lstatSync(src);
+            fs.rmSync(dst, { force: true });
+            if (st.isSymbolicLink()) {
+                fs.symlinkSync(fs.readlinkSync(src), dst);
+            }
+            else {
+                fs.copyFileSync(src, dst);
+                fs.chmodSync(dst, st.mode & 0o777);
+            }
+        }
+    }
+    record(runId, type, payload) {
+        const { domain } = this.host;
+        return domain.getStore().recordJournalEvent({
+            domainId: domain.domainId,
+            runId,
+            type,
+            payload,
+            timestamp: new Date().toISOString(),
+        });
+    }
+    journal(txId) {
+        const { domain } = this.host;
+        return domain
+            .getStore()
+            .getJournalEvents(domain.domainId)
+            .filter((e) => e.type.startsWith('TX_') && e.payload.txId === txId);
+    }
+    /** 内存里没有时从 journal 重建（例如 TX_COMMITTING 之后监督进程崩溃重启），已结束的事务不可再用。 */
+    async require(txId) {
+        const cached = this.open.get(txId);
+        if (cached)
+            return cached;
+        const events = this.journal(txId);
+        const begun = events.find((e) => e.type === 'TX_BEGUN');
+        if (!begun)
+            throw new Error(`Workspace transaction "${txId}" does not exist`);
+        const closed = events.find((e) => e.type === 'TX_COMMITTED' || e.type === 'TX_ABORTED');
+        if (closed)
+            throw new Error(`Workspace transaction "${txId}" is already closed (${closed.type})`);
+        const p = begun.payload;
+        if (!fs.existsSync(p.forkRoot)) {
+            throw new Error(`Workspace transaction "${txId}" cannot resume: its fork ${p.forkRoot} is gone`);
+        }
+        const status = events.some((e) => e.type === 'TX_COMMITTING')
+            ? 'committing'
+            : events.some((e) => e.type === 'TX_CONFLICTED')
+                ? 'conflicted'
+                : 'open';
+        const tx = {
+            txId,
+            runId: begun.runId ?? '',
+            root: p.root,
+            forkRoot: p.forkRoot,
+            forkPath: p.forkPath,
+            repoRoot: (await this.host.snapshotDriver.assertGitRepo(p.root)).repoRoot,
+            baseSnapshotId: p.baseSnapshotId,
+            beginSeq: begun.seq,
+            readTracking: p.readTracking,
+            status,
+        };
+        this.open.set(txId, tx);
+        return tx;
+    }
+    view(tx) {
+        const { txId, runId, root, forkRoot, baseSnapshotId, beginSeq, readTracking, status } = tx;
+        return { txId, runId, root, forkRoot, baseSnapshotId, beginSeq, readTracking, status };
+    }
+}
+/**
+ * 与 others 的交集。读集里的目录（`dir/`）只和「在该目录下直接新增或删除条目」冲突：
+ * 列目录看到的是条目集合，内容修改不改变它。
+ */
+function intersect(mine, others, writeKind, readKind, otherTxId) {
+    const conflicts = [];
+    const myWrites = new Set(mine.writeSet.map((w) => w.path));
+    const myReads = new Set(mine.readSet ?? []);
+    for (const other of others) {
+        if (myWrites.has(other.path)) {
+            conflicts.push({ path: other.path, kind: writeKind, otherTxId });
+        }
+        else if (myReads.has(other.path)) {
+            conflicts.push({ path: other.path, kind: readKind, otherTxId });
+        }
+        else if (other.status === 'A' || other.status === 'D') {
+            const parent = path.posix.dirname(other.path);
+            const dirKey = `${parent}/`;
+            if (myReads.has(dirKey))
+                conflicts.push({ path: dirKey, kind: readKind, otherTxId });
+        }
+    }
+    return conflicts;
+}
+/** 目标路径上的每一级父目录都必须是真实目录：主工作区里的符号链接不能把写入带出事务根。 */
+function assertNoSymlinkedParent(root, target) {
+    let dir = path.dirname(target);
+    while (dir !== root && isPathContained(root, dir)) {
+        if (fs.existsSync(dir) && fs.lstatSync(dir).isSymbolicLink()) {
+            throw new Error(`Refusing to apply into ${target}: ${dir} is a symbolic link`);
+        }
+        dir = path.dirname(dir);
+    }
+}
+//# sourceMappingURL=transactions.js.map

package/dist/workspace/transactions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transactions.js","sourceRoot":"","sources":["../../src/workspace/transactions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,iBAAiB,EAAgB,MAAM,oBAAoB,CAAC;AA4D3G,MAAM,OAAO,qBAAqB;IAIH,IAAI;IAHhB,IAAI,GAAG,IAAI,GAAG,EAA2B,CAAC;IACnD,WAAW,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAE1D,YAA6B,IAAqB;oBAArB,IAAI;IAAoB,CAAC;IAE/C,KAAK,CAAC,KAAK,CAAC,OAAwE;QACzF,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QACrC,gCAAgC;QAChC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,CAAC,IAAI,yCAAyC,CAAC,CAAC;QAC9G,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,CAAC,IAAI,kBAAkB,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAErF,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/D,IAAI,YAAY,KAAK,OAAO;YAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAE7D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE;YACtD,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI;YACJ,QAAQ;YACR,QAAQ;YACR,cAAc,EAAE,IAAI,CAAC,EAAE;YACvB,YAAY;SACb,CAAC,CAAC;QACH,MAAM,EAAE,GAAoB;YAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI;YACJ,QAAQ;YACR,QAAQ;YACR,QAAQ;YACR,cAAc,EAAE,IAAI,CAAC,EAAE;YACvB,QAAQ;YACR,YAAY;YACZ,MAAM,EAAE,MAAM;SACf,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IAED,wDAAwD;IACjD,KAAK,CAAC,OAAO,CAAC,IAAY;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC;IAEM,MAAM,CAAC,IAAY;QACxB,8CAA8C;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvC,OAAO,GAAG,CAAC;IACb,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,MAAM,GAAG,iBAAiB;QACzD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,EAAE,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,4DAA4D,CAAC,CAAC;QAC9G,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,4DAA4D;IACrD,GAAG,CAAC,IAAY;QACrB,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,IAAY;QACzC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,EAAE,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,sEAAsE,CAAC,CAAC;QACxH,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAE,UAAU,CAAC,OAAO,CAAC,OAA8B,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAEzG,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACnD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,EAAE,CAAC,MAAM,GAAG,YAAY,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC5D,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,CAAC;YAC7D,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,IAAI,QAAQ,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,EAAE,CAAC,mBAAmB,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,EAAE,CAAC,MAAM,GAAG,YAAY,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACvH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QACxD,CAAC;QACD,EAAE,CAAC,MAAM,GAAG,WAAW,CAAC;QACxB,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,EAAmB;QACvC,IAAI,OAAO,GAAoB,IAAI,CAAC;QACpC,IAAI,EAAE,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;YAChC,wCAAwC;YACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC;iBAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;iBACpC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAmB,CAAC,CAAC;YACjD,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,cAAc,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5E,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC,cAAc,oBAAoB,EAAE,CAAC,IAAI,cAAc,CAAC,CAAC;QACxG,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,CAAC,MAAM,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,CAAC,MAAM,cAAc,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAC7G,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CACrF,CAAC;QACF,IAAI,EAAE,CAAC,YAAY,KAAK,OAAO;YAAE,oBAAoB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,oBAAoB;QACxF,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC9D,CAAC;IAED,0CAA0C;IAClC,KAAK,CAAC,QAAQ,CAAC,EAAmB,EAAE,OAA2B;QACrE,MAAM,SAAS,GAA0B,EAAE,CAAC;QAC5C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM;aACpC,QAAQ,EAAE;aACV,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC;aACxD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;QAExG,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,QAAwB,CAAC;YAC3D,KAAK,MAAM,CAAC,IAAI,WAAW;gBAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnD,SAAS,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,IAAc,CAAC,CAAC,CAAC;QAChH,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7F,SAAS,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACpF,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,EAAmB;QACpD,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAE,CAAC;QACzE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACnD,OAAO,CAAC,MAAM,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/G,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;SACtD,CAAC,CAAC,CAAC;IACN,CAAC;IAED,wCAAwC;IAChC,KAAK,CAAC,EAAwB,EAAE,QAAsB;QAC5D,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,CAAC,IAAI,4CAA4C,CAAC,CAAC;YAC/F,CAAC;YACD,uBAAuB,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACzB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChC,SAAS;YACX,CAAC;YACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC7B,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChC,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;gBACxB,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC1B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,KAAa,EAAE,IAAY,EAAE,OAAgC;QAC1E,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QAC7B,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,kBAAkB,CAAC;YAC1C,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK;YACL,IAAI;YACJ,OAAO;YACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,IAAY;QAC1B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QAC7B,OAAO,MAAM;aACV,QAAQ,EAAE;aACV,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC;aACjC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACxE,CAAC;IAED,kEAAkE;IAC1D,KAAK,CAAC,OAAO,CAAC,IAAY;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,kBAAkB,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;QACxF,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,wBAAwB,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;QAClG,MAAM,CAAC,GAAG,KAAK,CAAC,OAAiC,CAAC;QAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,6BAA6B,CAAC,CAAC,QAAQ,UAAU,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC;YAC3D,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC;gBAC9C,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,MAAM,CAAC;QACb,MAAM,EAAE,GAAoB;YAC1B,IAAI;YACJ,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;YACxB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;YACzE,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,QAAQ,EAAE,KAAK,CAAC,GAAG;YACnB,YAAY,EAAE,CAAC,CAAC,YAA4B;YAC5C,MAAM;SACP,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,IAAI,CAAC,EAAwB;QACnC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC3F,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IACzF,CAAC;CACF;AAED;;;GAGG;AACH,SAAS,SAAS,CAChB,IAAwB,EACxB,MAAoB,EACpB,SAAsC,EACtC,QAAqC,EACrC,SAAkB;IAElB,MAAM,SAAS,GAA0B,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACnE,CAAC;aAAM,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QAClE,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC;YAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iDAAiD;AACjD,SAAS,uBAAuB,CAAC,IAAY,EAAE,MAAc;IAC3D,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,GAAG,KAAK,IAAI,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAClD,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,KAAK,GAAG,qBAAqB,CAAC,CAAC;QACjF,CAAC;QACD,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xioflow/kernel",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "Supervised execution kernel for AI agents: intent-first spawn, confirmed stop pipeline, honest crash recovery",
   "license": "MIT",
   "type": "module",
@@ -9,6 +9,9 @@
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
+  "bin": {
+    "xioflow": "./dist/cli.js"
+  },
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
@@ -47,12 +50,15 @@
   ],
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
+    "build:native": "node scripts/build-native.mjs",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
+    "check:tla": "node scripts/check-tla.mjs",
     "verify:package": "node scripts/verify-package.mjs",
-    "prepack": "npm run build"
+    "prepack": "npm run build && npm run build:native"
   },
   "devDependencies": {
+    "@modelcontextprotocol/sdk": "1.30.1",
     "@types/node": "^26.6.1",
     "typescript": "^7.0.2",
     "vitest": "^5.0.1"