@zhin.js/workroom 0.0.0 → 0.0.1

package/lib/workroom/file-accepted-source-memory-repository.js

@@ -0,0 +1,136 @@
+import { createHash } from 'node:crypto';
+import { readFile, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { ProjectMemoryStateRevisionConflictError, assertProjectMemoryApplicationEvent, createProjectMemoryApplicationEvent, findExactProjectMemoryApplicationReplay, replayProjectMemoryApplication, } from './accepted-source-memory-application.js';
+import { canonicalWorkroomJson, deepFreezeWorkroomValue as deepFreeze, digestCanonicalWorkroomValue as digest, } from './canonical-value.js';
+import { DurableFileStore, isDurableFileStagingName } from './durable-file-store.js';
+/**
+ * Crash-durable accepted-source journal. Each State Revision is published by a
+ * create-only hard link; its immutable segment contains Task Memory, State
+ * Patch and the context-release eligibility in one atomic fact.
+ */
+export class FileProjectMemoryApplicationRepository {
+    directory;
+    #store;
+    constructor(directory) {
+        this.directory = directory;
+        this.#store = new DurableFileStore(directory);
+    }
+    async read(projectId) {
+        const id = canonicalId(projectId);
+        const prefix = projectPrefix(id);
+        let names;
+        try {
+            names = await readdir(this.directory);
+        }
+        catch (error) {
+            if (hasCode(error, 'ENOENT'))
+                return Object.freeze([]);
+            throw error;
+        }
+        const pattern = segmentPattern(prefix);
+        // Ignore only unpublished staging files; malformed segment names remain errors.
+        const candidates = names.filter(name => name.startsWith(prefix)
+            && !isDurableFileStagingName(name, pattern));
+        if (candidates.some(name => !pattern.test(name))) {
+            throw new Error('Invalid Project Memory Journal segment name');
+        }
+        const events = await Promise.all(candidates.sort().map(async (name) => (await parseSegment(await readFile(join(this.directory, name), 'utf8'), id, Number(name.slice(prefix.length, prefix.length + 16)))).event));
+        replayProjectMemoryApplication(id, events);
+        if (events.length > 0)
+            await this.#store.syncLeaf();
+        return deepFreeze(events);
+    }
+    async append(projectId, expectedStateRevision, projection) {
+        const id = canonicalId(projectId);
+        assertRevision(expectedStateRevision);
+        const current = await this.read(id);
+        const replay = findExactProjectMemoryApplicationReplay(current, projection);
+        if (replay)
+            return replay;
+        const actual = current.at(-1)?.stateRevision ?? 0;
+        if (actual !== expectedStateRevision) {
+            throw new ProjectMemoryStateRevisionConflictError(id, expectedStateRevision, actual);
+        }
+        const event = createProjectMemoryApplicationEvent(id, expectedStateRevision + 1, projection);
+        replayProjectMemoryApplication(id, Object.freeze([...current, event]));
+        const payload = deepFreeze({
+            version: 1,
+            projectId: id,
+            expectedStateRevision,
+            event,
+        });
+        const segment = deepFreeze({
+            ...payload,
+            payloadDigest: digest(payload),
+        });
+        await this.#store.ensureDurableLeaf('Project Memory Journal');
+        const target = join(this.directory, segmentName(id, event.stateRevision));
+        const published = await this.#store.publishCreateOnly({
+            target,
+            content: canonicalWorkroomJson(segment),
+            createdValue: event,
+            onConflict: async () => {
+                const winner = await this.read(id);
+                const exact = findExactProjectMemoryApplicationReplay(winner, projection);
+                if (exact)
+                    return exact;
+                throw new ProjectMemoryStateRevisionConflictError(id, expectedStateRevision, winner.at(-1)?.stateRevision ?? 0);
+            },
+        });
+        return published.value;
+    }
+}
+async function parseSegment(serialized, projectId, stateRevision) {
+    let parsed;
+    try {
+        parsed = JSON.parse(serialized);
+    }
+    catch (error) {
+        throw new Error('Project Memory Journal segment is not valid JSON', { cause: error });
+    }
+    if (!isRecord(parsed) || parsed.version !== 1 || parsed.projectId !== projectId
+        || parsed.expectedStateRevision !== stateRevision - 1 || !isRecord(parsed.event)
+        || typeof parsed.payloadDigest !== 'string') {
+        throw new Error('Invalid Project Memory Journal segment');
+    }
+    const segment = parsed;
+    const payload = {
+        version: segment.version,
+        projectId: segment.projectId,
+        expectedStateRevision: segment.expectedStateRevision,
+        event: segment.event,
+    };
+    if (segment.payloadDigest !== digest(payload)) {
+        throw new Error('Project Memory Journal segment digest mismatch');
+    }
+    assertProjectMemoryApplicationEvent(segment.event, projectId, stateRevision);
+    return deepFreeze(segment);
+}
+function projectPrefix(projectId) {
+    return createHash('sha256').update(projectId).digest('hex') + '.';
+}
+function segmentName(projectId, revision) {
+    return projectPrefix(projectId) + String(revision).padStart(16, '0') + '.json';
+}
+function segmentPattern(prefix) {
+    return new RegExp(`^${prefix}[0-9]{16}\\.json$`, 'u');
+}
+function canonicalId(value) {
+    if (typeof value !== 'string' || value.trim().length === 0 || value !== value.trim()) {
+        throw new Error('projectId must be a non-empty canonical string');
+    }
+    return value;
+}
+function assertRevision(value) {
+    if (!Number.isSafeInteger(value) || value < 0)
+        throw new Error('Invalid Project State revision');
+}
+function isRecord(value) {
+    return Boolean(value && typeof value === 'object' && !Array.isArray(value));
+}
+function hasCode(error, code) {
+    return Boolean(error && typeof error === 'object' && 'code' in error
+        && error.code === code);
+}
+//# sourceMappingURL=file-accepted-source-memory-repository.js.map

package/lib/workroom/file-accepted-source-memory-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-accepted-source-memory-repository.js","sourceRoot":"","sources":["../../src/workroom/file-accepted-source-memory-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,uCAAuC,EACvC,mCAAmC,EACnC,mCAAmC,EACnC,uCAAuC,EACvC,8BAA8B,GAG/B,MAAM,yCAAyC,CAAC;AAEjD,OAAO,EACL,qBAAqB,EACrB,uBAAuB,IAAI,UAAU,EACrC,4BAA4B,IAAI,MAAM,GACvC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAarF;;;;GAIG;AACH,MAAM,OAAO,sCAAsC;IAG5B;IAFZ,MAAM,CAAmB;IAElC,YAAqB,SAAiB;QAAjB,cAAS,GAAT,SAAS,CAAQ;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,KAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACvC,gFAAgF;QAChF,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;eAC1D,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE,CAClE,CAAC,MAAM,YAAY,CACjB,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,EAClD,EAAE,EACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CACtD,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACb,8BAA8B,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,MAAM,CACV,SAAiB,EACjB,qBAA6B,EAC7B,UAA4C;QAE5C,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QAClC,cAAc,CAAC,qBAAqB,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,uCAAuC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC5E,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,IAAI,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;YACrC,MAAM,IAAI,uCAAuC,CAAC,EAAE,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,KAAK,GAAG,mCAAmC,CAAC,EAAE,EAAE,qBAAqB,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;QAC7F,8BAA8B,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,UAAU,CAA8B;YACtD,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,EAAE;YACb,qBAAqB;YACrB,KAAK;SACN,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAuB;YAC/C,GAAG,OAAO;YACV,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC;SAC/B,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;YACpD,MAAM;YACN,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC;YACvC,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,KAAK,IAAI,EAAE;gBACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACnC,MAAM,KAAK,GAAG,uCAAuC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBAC1E,IAAI,KAAK;oBAAE,OAAO,KAAK,CAAC;gBACxB,MAAM,IAAI,uCAAuC,CAC/C,EAAE,EACF,qBAAqB,EACrB,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,IAAI,CAAC,CAClC,CAAC;YACJ,CAAC;SACF,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,KAAK,CAAC;IACzB,CAAC;CACF;AAED,KAAK,UAAU,YAAY,CACzB,UAAkB,EAClB,SAAiB,EACjB,aAAqB;IAErB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,kDAAkD,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;WAC1E,MAAM,CAAC,qBAAqB,KAAK,aAAa,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;WAC7E,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,MAAyC,CAAC;IAC1D,MAAM,OAAO,GAAgC;QAC3C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;QACpD,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC;IACF,IAAI,OAAO,CAAC,aAAa,KAAK,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,mCAAmC,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IAC7E,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;AACpE,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB,EAAE,QAAgB;IACtD,OAAO,aAAa,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC;AACjF,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,IAAI,MAAM,CAAC,IAAI,MAAM,mBAAmB,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,IAAY;IAC3C,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK;WAC9D,KAA4B,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACpD,CAAC"}

package/lib/workroom/file-coding-execution-store.d.ts

@@ -0,0 +1,25 @@
+import { type AssignmentExecutionEnvelope } from './assignment-executor.js';
+import type { CodingReportPort } from './coding-assignment-executor.js';
+import { type DurableFileSystem } from './durable-file-store.js';
+type StoredReport = {
+    ref: string;
+    digest: string;
+    report: Readonly<Record<string, unknown>>;
+};
+/**
+ * Immutable dispatch/production facts only. This store grants no lease or permission:
+ * SnapshotPort.assertCurrent must still consult the existing Assignment authority.
+ * A claim without a report is query/manual-reconciliation only and is never redispatched.
+ */
+export declare class FileCodingExecutionStore implements CodingReportPort {
+    #private;
+    constructor(directory: string, fileSystem?: DurableFileSystem);
+    claimExecution(envelope: AssignmentExecutionEnvelope, signal: AbortSignal): Promise<void>;
+    find(envelopeDigest: string, signal: AbortSignal): Promise<StoredReport | undefined>;
+    save(input: Readonly<Record<string, unknown>>, signal: AbortSignal): Promise<{
+        ref: string;
+        digest: string;
+    }>;
+}
+export {};
+//# sourceMappingURL=file-coding-execution-store.d.ts.map

package/lib/workroom/file-coding-execution-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-coding-execution-store.d.ts","sourceRoot":"","sources":["../../src/workroom/file-coding-execution-store.ts"],"names":[],"mappings":"AAEA,OAAO,EAAqC,KAAK,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAE/G,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEnF,KAAK,YAAY,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAAE,CAAC;AAG/F;;;;GAIG;AACH,qBAAa,wBAAyB,YAAW,gBAAgB;;gBAEnD,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,iBAAiB;IAIvD,cAAc,CAAC,QAAQ,EAAE,2BAA2B,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBzF,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAapF,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CA0DpH"}

package/lib/workroom/file-coding-execution-store.js

@@ -0,0 +1,122 @@
+import { lstat, readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { assertAssignmentExecutionEnvelope } from './assignment-executor.js';
+import { deepFreezeWorkroomValue as freeze, digestCanonicalWorkroomValue as digest } from './canonical-value.js';
+import { DurableFileStore } from './durable-file-store.js';
+/**
+ * Immutable dispatch/production facts only. This store grants no lease or permission:
+ * SnapshotPort.assertCurrent must still consult the existing Assignment authority.
+ * A claim without a report is query/manual-reconciliation only and is never redispatched.
+ */
+export class FileCodingExecutionStore {
+    #store;
+    constructor(directory, fileSystem) {
+        this.#store = new DurableFileStore(directory, fileSystem);
+    }
+    async claimExecution(envelope, signal) {
+        assertAssignmentExecutionEnvelope(envelope);
+        signal.throwIfAborted();
+        await this.#store.ensureDurableLeaf('Coding execution facts');
+        const record = { version: 1, kind: 'coding_dispatch', envelope };
+        const content = JSON.stringify(record);
+        signal.throwIfAborted();
+        await this.#store.publishCreateOnly({
+            target: this.#path('claim', envelope.digest), content, createdValue: undefined,
+            onConflict: async () => {
+                const existing = await this.#claim(envelope.digest);
+                if (!existing || digest(existing) !== digest(record))
+                    throw new Error('Coding dispatch claim collision or incomplete record');
+                throw new Error('Coding execution already dispatched; recover report or reconcile manually');
+            },
+        });
+        // A cancellation after durable publication retains the fact and prevents unsafe retries.
+        signal.throwIfAborted();
+    }
+    async find(envelopeDigest, signal) {
+        signal.throwIfAborted();
+        const claim = await this.#claim(envelopeDigest);
+        const value = await this.#read(this.#path('report', envelopeDigest));
+        if (value === undefined)
+            return undefined;
+        if (!claim)
+            throw new Error('Coding report has no dispatch claim');
+        const stored = this.#validateStored(value, envelopeDigest, claim);
+        // Complete a previous publication whose response/directory sync may have been lost.
+        await this.#store.syncLeaf();
+        signal.throwIfAborted();
+        return stored;
+    }
+    async save(input, signal) {
+        signal.throwIfAborted();
+        const report = JSON.parse(JSON.stringify(input));
+        const envelopeDigest = report.envelopeDigest;
+        if (typeof envelopeDigest !== 'string')
+            throw new Error('Coding report requires envelope digest');
+        const claim = await this.#claim(envelopeDigest);
+        if (!claim)
+            throw new Error('Coding report requires a durable dispatch claim');
+        const stored = this.#validateStored({ ref: `coding-report:${envelopeDigest}`, digest: digest(report), report }, envelopeDigest, claim);
+        const content = JSON.stringify(stored);
+        if (Buffer.byteLength(content) > 1024 * 1024)
+            throw new Error('Coding report exceeds storage budget');
+        signal.throwIfAborted();
+        await this.#store.publishCreateOnly({
+            target: this.#path('report', envelopeDigest), content, createdValue: stored,
+            onConflict: async () => {
+                const existing = await this.find(envelopeDigest, signal);
+                if (!existing || existing.digest !== stored.digest)
+                    throw new Error('Coding immutable report collision');
+                return existing;
+            },
+        });
+        signal.throwIfAborted();
+        return { ref: stored.ref, digest: stored.digest };
+    }
+    #path(kind, envelopeDigest) {
+        if (!/^sha256:[a-f0-9]{64}$/u.test(envelopeDigest))
+            throw new Error('Coding storage requires exact envelope digest');
+        return join(this.#store.directory, `${kind}-${envelopeDigest.slice(7)}.json`);
+    }
+    async #read(file) {
+        try {
+            const stat = await lstat(file);
+            if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 1024 * 1024)
+                throw new Error('Invalid coding immutable fact file');
+            return JSON.parse(await readFile(file, 'utf8'));
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return undefined;
+            throw new Error('Coding immutable fact is corrupt or incomplete', { cause: error });
+        }
+    }
+    async #claim(envelopeDigest) {
+        const value = await this.#read(this.#path('claim', envelopeDigest));
+        if (value === undefined)
+            return undefined;
+        if (!value || typeof value !== 'object')
+            throw new Error('Invalid coding dispatch claim');
+        const claim = value;
+        if (Object.keys(claim).sort().join() !== 'envelope,kind,version' || claim.version !== 1 || claim.kind !== 'coding_dispatch')
+            throw new Error('Invalid coding dispatch claim');
+        assertAssignmentExecutionEnvelope(freeze(claim.envelope));
+        if (claim.envelope.digest !== envelopeDigest)
+            throw new Error('Coding claim envelope digest mismatch');
+        return claim;
+    }
+    #validateStored(value, envelopeDigest, claim) {
+        if (!value || typeof value !== 'object')
+            throw new Error('Invalid coding stored report');
+        const stored = value;
+        if (Object.keys(stored).sort().join() !== 'digest,ref,report' || !stored.report || typeof stored.report !== 'object'
+            || stored.ref !== `coding-report:${envelopeDigest}` || stored.digest !== digest(stored.report))
+            throw new Error('Coding stored report digest mismatch');
+        const report = stored.report;
+        if (report.version !== 1 || report.envelopeDigest !== envelopeDigest
+            || report.baseCommit !== claim.envelope.workspace.baseRevision.replace(/^git:/u, '')
+            || typeof report.commit !== 'string' || !/^[a-f0-9]{40}$/u.test(report.commit))
+            throw new Error('Coding report candidate authority mismatch');
+        return freeze(stored);
+    }
+}
+//# sourceMappingURL=file-coding-execution-store.js.map

package/lib/workroom/file-coding-execution-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-coding-execution-store.js","sourceRoot":"","sources":["../../src/workroom/file-coding-execution-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iCAAiC,EAAoC,MAAM,0BAA0B,CAAC;AAC/G,OAAO,EAAE,uBAAuB,IAAI,MAAM,EAAE,4BAA4B,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEjH,OAAO,EAAE,gBAAgB,EAA0B,MAAM,yBAAyB,CAAC;AAKnF;;;;GAIG;AACH,MAAM,OAAO,wBAAwB;IAC1B,MAAM,CAAmB;IAClC,YAAY,SAAiB,EAAE,UAA8B;QAC3D,IAAI,CAAC,MAAM,GAAG,IAAI,gBAAgB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAqC,EAAE,MAAmB;QAC7E,iCAAiC,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAU,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS;YAC9E,UAAU,EAAE,KAAK,IAAI,EAAE;gBACrB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACpD,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;gBAC9H,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;YAC/F,CAAC;SACF,CAAC,CAAC;QACH,yFAAyF;QACzF,MAAM,CAAC,cAAc,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,cAAsB,EAAE,MAAmB;QACpD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;QACrE,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;QAClE,oFAAoF;QACpF,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAwC,EAAE,MAAmB;QACtE,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAsC,CAAC;QACtF,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QAC7C,IAAI,OAAO,cAAc,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAClG,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,iBAAiB,cAAc,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;QACvI,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACtG,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM;YAC3E,UAAU,EAAE,KAAK,IAAI,EAAE;gBACrB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;gBACzD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACzG,OAAO,QAAQ,CAAC;YAClB,CAAC;SACF,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,IAAwB,EAAE,cAAsB;QACpD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACrH,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,IAAI,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAChF,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,IAAY;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAC9H,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,gDAAgD,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC1F,MAAM,KAAK,GAAG,KAAc,CAAC;QAC7B,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,uBAAuB,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC9K,iCAAiC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1D,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACvG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,eAAe,CAAC,KAAc,EAAE,cAAsB,EAAE,KAAY;QAClE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,KAAqB,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,mBAAmB,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;eAC/G,MAAM,CAAC,GAAG,KAAK,iBAAiB,cAAc,EAAE,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1J,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,KAAK,cAAc;eAC/D,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;eACjF,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChJ,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;CACF"}

package/lib/workroom/file-effect-ledger.d.ts

@@ -0,0 +1,10 @@
+import { type WorkroomEffectEvent, type WorkroomEffectEventDraft, type WorkroomEffectJournal } from './effect-ledger.js';
+/** Crash-durable append-only Effect Ledger; one create-only slot owns each sequence. */
+export declare class FileWorkroomEffectJournal implements WorkroomEffectJournal {
+    #private;
+    readonly directory: string;
+    constructor(directory: string);
+    read(projectId: string): Promise<readonly WorkroomEffectEvent[]>;
+    append(projectId: string, expectedSequence: number, drafts: readonly WorkroomEffectEventDraft[]): Promise<readonly WorkroomEffectEvent[]>;
+}
+//# sourceMappingURL=file-effect-ledger.d.ts.map

package/lib/workroom/file-effect-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-effect-ledger.d.ts","sourceRoot":"","sources":["../../src/workroom/file-effect-ledger.ts"],"names":[],"mappings":"AAGA,OAAO,EAKL,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC3B,MAAM,oBAAoB,CAAC;AAgB5B,wFAAwF;AACxF,qBAAa,yBAA0B,YAAW,qBAAqB;;IAGzD,QAAQ,CAAC,SAAS,EAAE,MAAM;gBAAjB,SAAS,EAAE,MAAM;IAIhC,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC;IAwBhE,MAAM,CACV,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,MAAM,EAAE,SAAS,wBAAwB,EAAE,GAC1C,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC;CA6C3C"}

package/lib/workroom/file-effect-ledger.js

@@ -0,0 +1,121 @@
+import { createHash } from 'node:crypto';
+import { readFile, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { WorkroomEffectSequenceConflictError, assertWorkroomEffectEvent, createWorkroomEffectEvent, replayWorkroomEffectLedger, } from './effect-ledger.js';
+import { canonicalWorkroomJson, deepFreezeWorkroomValue as deepFreeze, digestCanonicalWorkroomValue as digest, } from './canonical-value.js';
+import { DurableFileStore, isDurableFileStagingName } from './durable-file-store.js';
+/** Crash-durable append-only Effect Ledger; one create-only slot owns each sequence. */
+export class FileWorkroomEffectJournal {
+    directory;
+    #store;
+    constructor(directory) {
+        this.directory = directory;
+        this.#store = new DurableFileStore(directory);
+    }
+    async read(projectId) {
+        const id = required(projectId, 'projectId');
+        const prefix = segmentPrefix(id);
+        let names;
+        try {
+            names = await readdir(this.directory);
+        }
+        catch (error) {
+            if (hasCode(error, 'ENOENT'))
+                return Object.freeze([]);
+            throw error;
+        }
+        const pattern = segmentPattern(prefix);
+        // Ignore only unpublished staging files; malformed segment names remain errors.
+        const candidates = names.filter(name => name.startsWith(prefix)
+            && !isDurableFileStagingName(name, pattern)).sort();
+        if (candidates.some(name => !pattern.test(name))) {
+            throw new Error('Invalid Workroom Effect Journal segment name');
+        }
+        const events = await Promise.all(candidates.map(async (name, index) => parseSegment(await readFile(join(this.directory, name), 'utf8'), id, index).event));
+        replayWorkroomEffectLedger(id, events);
+        if (events.length > 0)
+            await this.#store.syncLeaf();
+        return deepFreeze(events);
+    }
+    async append(projectId, expectedSequence, drafts) {
+        const id = required(projectId, 'projectId');
+        if (!Number.isSafeInteger(expectedSequence) || expectedSequence < -1) {
+            throw new Error('Workroom Effect expectedSequence is invalid');
+        }
+        if (!Array.isArray(drafts) || drafts.length === 0) {
+            throw new Error('Workroom Effect append requires events');
+        }
+        if (drafts.length !== 1) {
+            throw new Error('File Workroom Effect Journal requires one atomic event per append');
+        }
+        const current = await this.read(id);
+        const actual = current.length - 1;
+        if (actual !== expectedSequence)
+            throw new WorkroomEffectSequenceConflictError(expectedSequence, actual);
+        const appended = drafts.map((draft, index) => createWorkroomEffectEvent(id, expectedSequence + index + 1, draft));
+        replayWorkroomEffectLedger(id, Object.freeze([...current, ...appended]));
+        await this.#store.ensureDurableLeaf('Workroom Effect Journal');
+        for (const event of appended) {
+            const body = deepFreeze({
+                version: 1,
+                projectId: id,
+                expectedSequence: event.sequence - 1,
+                event,
+            });
+            const segment = deepFreeze({ ...body, payloadDigest: digest(body) });
+            const target = join(this.directory, segmentName(id, event.sequence));
+            await this.#store.publishCreateOnly({
+                target,
+                content: canonicalWorkroomJson(segment),
+                createdValue: segment,
+                onConflict: async () => {
+                    const existing = parseSegment(await readFile(target, 'utf8'), id, event.sequence);
+                    if (canonicalWorkroomJson(existing) !== canonicalWorkroomJson(segment)) {
+                        throw new WorkroomEffectSequenceConflictError(event.sequence - 1, event.sequence);
+                    }
+                    return existing;
+                },
+            });
+        }
+        return deepFreeze(appended);
+    }
+}
+function parseSegment(serialized, projectId, sequence) {
+    const value = JSON.parse(serialized);
+    if (value.version !== 1 || value.projectId !== projectId
+        || value.expectedSequence !== sequence - 1 || value.event?.sequence !== sequence) {
+        throw new Error('Invalid Workroom Effect Journal segment binding');
+    }
+    assertWorkroomEffectEvent(value.event, projectId, sequence);
+    const body = deepFreeze({
+        version: 1,
+        projectId,
+        expectedSequence: sequence - 1,
+        event: value.event,
+    });
+    const canonical = deepFreeze({ ...body, payloadDigest: digest(body) });
+    if (value.payloadDigest !== canonical.payloadDigest
+        || canonicalWorkroomJson(value) !== canonicalWorkroomJson(canonical)) {
+        throw new Error('Invalid Workroom Effect Journal segment digest');
+    }
+    return canonical;
+}
+function segmentPrefix(projectId) {
+    return `effect-${createHash('sha256').update(projectId).digest('hex')}-`;
+}
+function segmentName(projectId, sequence) {
+    return `${segmentPrefix(projectId)}${String(sequence).padStart(16, '0')}.json`;
+}
+function segmentPattern(prefix) {
+    return new RegExp(`^${prefix}[0-9]{16}\\.json$`, 'u');
+}
+function required(value, label) {
+    if (typeof value !== 'string' || !value.trim() || value !== value.trim())
+        throw new Error(`${label} is invalid`);
+    return value;
+}
+function hasCode(error, code) {
+    return Boolean(error && typeof error === 'object' && 'code' in error
+        && error.code === code);
+}
+//# sourceMappingURL=file-effect-ledger.js.map

package/lib/workroom/file-effect-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-effect-ledger.js","sourceRoot":"","sources":["../../src/workroom/file-effect-ledger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,mCAAmC,EACnC,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,GAI3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,uBAAuB,IAAI,UAAU,EACrC,4BAA4B,IAAI,MAAM,GACvC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAUrF,wFAAwF;AACxF,MAAM,OAAO,yBAAyB;IAGf;IAFZ,MAAM,CAAmB;IAElC,YAAqB,SAAiB;QAAjB,cAAS,GAAT,SAAS,CAAQ;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,KAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACvC,gFAAgF;QAChF,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;eAC1D,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CACpE,YAAY,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACtF,0BAA0B,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,MAAM,CACV,SAAiB,EACjB,gBAAwB,EACxB,MAA2C;QAE3C,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,gBAAgB;YAAE,MAAM,IAAI,mCAAmC,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACzG,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,yBAAyB,CACrE,EAAE,EACF,gBAAgB,GAAG,KAAK,GAAG,CAAC,EAC5B,KAAK,CACN,CAAC,CAAC;QACH,0BAA0B,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzE,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;QAC/D,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,UAAU,CAAC;gBACtB,OAAO,EAAE,CAAU;gBACnB,SAAS,EAAE,EAAE;gBACb,gBAAgB,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC;gBACpC,KAAK;aACN,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAgB,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YACrE,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;gBAClC,MAAM;gBACN,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC;gBACvC,YAAY,EAAE,OAAO;gBACrB,UAAU,EAAE,KAAK,IAAI,EAAE;oBACrB,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;oBAClF,IAAI,qBAAqB,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;wBACvE,MAAM,IAAI,mCAAmC,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;oBACpF,CAAC;oBACD,OAAO,QAAQ,CAAC;gBAClB,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;CACF;AAED,SAAS,YAAY,CAAC,UAAkB,EAAE,SAAiB,EAAE,QAAgB;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAkB,CAAC;IACtD,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;WACnD,KAAK,CAAC,gBAAgB,KAAK,QAAQ,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,yBAAyB,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,OAAO,EAAE,CAAU;QACnB,SAAS;QACT,gBAAgB,EAAE,QAAQ,GAAG,CAAC;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,aAAa;WAC9C,qBAAqB,CAAC,KAAK,CAAC,KAAK,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;AAC3E,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB,EAAE,QAAgB;IACtD,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC;AACjF,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,IAAI,MAAM,CAAC,IAAI,MAAM,mBAAmB,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACjH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,IAAY;IAC3C,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK;WAC9D,KAA4B,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACpD,CAAC"}

package/lib/workroom/file-human-ingress-application.d.ts

@@ -0,0 +1,10 @@
+import { type HumanIngressApplicationEvent, type HumanIngressApplicationEventDraft, type HumanIngressApplicationRepository } from './human-ingress-application.js';
+/** Crash-durable lifecycle journal for the Orchestrator Inbox consumer. */
+export declare class FileHumanIngressApplicationRepository implements HumanIngressApplicationRepository {
+    #private;
+    readonly directory: string;
+    constructor(directory: string);
+    read(projectId: string): Promise<readonly HumanIngressApplicationEvent[]>;
+    append(projectId: string, expectedSequence: number, drafts: readonly HumanIngressApplicationEventDraft[]): Promise<readonly HumanIngressApplicationEvent[]>;
+}
+//# sourceMappingURL=file-human-ingress-application.d.ts.map

package/lib/workroom/file-human-ingress-application.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-human-ingress-application.d.ts","sourceRoot":"","sources":["../../src/workroom/file-human-ingress-application.ts"],"names":[],"mappings":"AAQA,OAAO,EAGL,KAAK,4BAA4B,EACjC,KAAK,iCAAiC,EACtC,KAAK,iCAAiC,EACvC,MAAM,gCAAgC,CAAC;AAgBxC,2EAA2E;AAC3E,qBAAa,qCACb,YAAW,iCAAiC;;IAG9B,QAAQ,CAAC,SAAS,EAAE,MAAM;gBAAjB,SAAS,EAAE,MAAM;IAIhC,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,4BAA4B,EAAE,CAAC;IAOzE,MAAM,CACV,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,MAAM,EAAE,SAAS,iCAAiC,EAAE,GACnD,OAAO,CAAC,SAAS,4BAA4B,EAAE,CAAC;CAiEpD"}

package/lib/workroom/file-human-ingress-application.js

@@ -0,0 +1,177 @@
+import { createHash } from 'node:crypto';
+import { readFile, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { canonicalWorkroomJson, deepFreezeWorkroomValue as deepFreeze, digestCanonicalWorkroomValue, } from './canonical-value.js';
+import { HumanIngressApplicationSequenceConflictError, MemoryHumanIngressApplicationRepository, } from './human-ingress-application.js';
+import { DurableFileStore } from './durable-file-store.js';
+/** Crash-durable lifecycle journal for the Orchestrator Inbox consumer. */
+export class FileHumanIngressApplicationRepository {
+    directory;
+    #durable;
+    constructor(directory) {
+        this.directory = directory;
+        this.#durable = new DurableFileStore(directory);
+    }
+    async read(projectId) {
+        const id = text(projectId, 'projectId');
+        const events = await this.#readEvents(id);
+        if (events.length > 0)
+            await this.#durable.syncLeaf();
+        return events;
+    }
+    async append(projectId, expectedSequence, drafts) {
+        const id = text(projectId, 'projectId');
+        const snapshots = deepFreeze(structuredClone(drafts));
+        const current = await this.#readEvents(id);
+        const events = await materialize(id, current, expectedSequence, snapshots);
+        const actualSequence = current.at(-1)?.sequence ?? -1;
+        if (events.every(event => event.sequence <= actualSequence)) {
+            if (current.length > 0)
+                await this.#durable.syncLeaf();
+            return events;
+        }
+        const firstSequence = events[0].sequence;
+        const payload = deepFreeze({
+            version: 1,
+            projectId: id,
+            expectedSequence,
+            firstSequence,
+            lastSequence: events.at(-1).sequence,
+            events,
+        });
+        const segment = deepFreeze({
+            ...payload,
+            payloadDigest: digestCanonicalWorkroomValue(payload),
+        });
+        await this.#durable.ensureDurableLeaf('Human ingress application repository');
+        const published = await this.#durable.publishCreateOnly({
+            target: join(this.directory, segmentName(id, firstSequence)),
+            content: JSON.stringify(segment),
+            createdValue: events,
+            onConflict: async () => {
+                const winner = await this.#readEvents(id);
+                const actual = winner.at(-1)?.sequence ?? -1;
+                if (expectedSequence + snapshots.length > actual) {
+                    throw new HumanIngressApplicationSequenceConflictError(id, expectedSequence, actual);
+                }
+                return await materialize(id, winner, expectedSequence, snapshots);
+            },
+        });
+        return published.value;
+    }
+    async #readEvents(projectId) {
+        let names;
+        try {
+            names = await readdir(this.directory);
+        }
+        catch (error) {
+            if (hasCode(error, 'ENOENT'))
+                return deepFreeze([]);
+            throw error;
+        }
+        const segments = (await Promise.all(names
+            .filter(name => name.endsWith('.json'))
+            .map(async (name) => parseSegment(name, await readFile(join(this.directory, name), 'utf8')))))
+            .filter(segment => segment.projectId === projectId)
+            .sort((left, right) => left.firstSequence - right.firstSequence);
+        const events = [];
+        let expectedSequence = -1;
+        for (const segment of segments) {
+            if (segment.expectedSequence !== expectedSequence
+                || segment.firstSequence !== expectedSequence + 1) {
+                throw new Error('Human ingress application segment sequence gap');
+            }
+            events.push(...segment.events);
+            expectedSequence = segment.lastSequence;
+        }
+        return await validateHistory(projectId, events);
+    }
+}
+async function materialize(projectId, current, expectedSequence, drafts) {
+    const repository = new MemoryHumanIngressApplicationRepository();
+    if (current.length > 0)
+        await repository.append(projectId, -1, current.map(toDraft));
+    return await repository.append(projectId, expectedSequence, drafts);
+}
+async function validateHistory(projectId, events) {
+    if (events.length === 0)
+        return deepFreeze([]);
+    const repository = new MemoryHumanIngressApplicationRepository();
+    const canonical = await repository.append(projectId, -1, events.map(toDraft));
+    if (canonicalWorkroomJson(canonical) !== canonicalWorkroomJson(events)) {
+        throw new Error('Human ingress application event digest or payload is corrupt');
+    }
+    return canonical;
+}
+function toDraft(event) {
+    const { version: _version, projectId: _projectId, sequence: _sequence, digest: _digest, ...draft } = event;
+    return draft;
+}
+function parseSegment(name, encoded) {
+    const match = /^([a-f0-9]{64})\.(\d{16})\.json$/u.exec(name);
+    if (!match)
+        throw new Error('Invalid Human ingress application segment name');
+    let value;
+    try {
+        value = JSON.parse(encoded);
+    }
+    catch (error) {
+        throw new Error('Invalid Human ingress application segment JSON', { cause: error });
+    }
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error('Invalid Human ingress application segment');
+    }
+    const segment = value;
+    if (segment.version !== 1
+        || typeof segment.projectId !== 'string'
+        || !Number.isSafeInteger(segment.expectedSequence)
+        || !Number.isSafeInteger(segment.firstSequence)
+        || !Number.isSafeInteger(segment.lastSequence)
+        || !Array.isArray(segment.events)
+        || typeof segment.payloadDigest !== 'string') {
+        throw new Error('Invalid Human ingress application segment');
+    }
+    const projectId = text(segment.projectId, 'projectId');
+    const expectedSequence = segment.expectedSequence;
+    const firstSequence = segment.firstSequence;
+    const lastSequence = segment.lastSequence;
+    if (match[1] !== projectHash(projectId) || Number(match[2]) !== firstSequence) {
+        throw new Error('Human ingress application segment name binding mismatch');
+    }
+    const events = deepFreeze(structuredClone(segment.events));
+    if (events.length === 0
+        || firstSequence !== expectedSequence + 1
+        || events[0]?.sequence !== firstSequence
+        || events.at(-1)?.sequence !== lastSequence) {
+        throw new Error('Invalid Human ingress application segment position');
+    }
+    const payload = deepFreeze({
+        version: 1,
+        projectId,
+        expectedSequence,
+        firstSequence,
+        lastSequence,
+        events,
+    });
+    if (segment.payloadDigest !== digestCanonicalWorkroomValue(payload)) {
+        throw new Error('Human ingress application segment payload digest mismatch');
+    }
+    return deepFreeze({ ...payload, payloadDigest: segment.payloadDigest });
+}
+function segmentName(projectId, firstSequence) {
+    return `${projectHash(projectId)}.${String(firstSequence).padStart(16, '0')}.json`;
+}
+function projectHash(projectId) {
+    return createHash('sha256').update(projectId).digest('hex');
+}
+function text(value, field) {
+    if (typeof value !== 'string' || !value.trim() || value !== value.trim()) {
+        throw new Error(`Human ingress application ${field} must be canonical text`);
+    }
+    return value;
+}
+function hasCode(error, code) {
+    return Boolean(error && typeof error === 'object' && 'code' in error
+        && error.code === code);
+}
+//# sourceMappingURL=file-human-ingress-application.js.map