audit-tools 0.30.6 → 0.30.7

package/dist/remediate/dispatch/amendmentClaim.d.ts

@@ -5,6 +5,13 @@
  * it submits the candidate paths to `routeAmendmentRequest`. Unowned paths are
  * granted unilaterally; owned or contended paths are routed back through the
  * seam detect+resolve protocol.
+ *
+ * Grant-time disjointness (INV-SOO-06 / CE-001): `registry.claimAmendment`
+ * additionally refuses a scope-widening grant onto a file another node holds as a
+ * live in-flight scheduling claim, so the in-flight owned-file union can never
+ * become non-disjoint via a post-admission amendment. Such a path is routed as a
+ * `contended` seam (queued until the holder's file frees), exactly like a
+ * sibling-amendment contention.
  */
 import type { OwnershipRegistry } from "./ownershipRegistry.js";
 /** Discriminated union for the outcome of a single amendment claim attempt. */

package/dist/remediate/dispatch/amendmentClaim.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"amendmentClaim.d.ts","sourceRoot":"","sources":["../../../src/remediate/dispatch/amendmentClaim.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,+EAA+E;AAC/E,MAAM,MAAM,oBAAoB,GAC5B;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpE;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,iBAAiB,EAC3B,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EAAE,GACvB;IACD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAA;KAAE,CAAC,CAAC;CACpE,CAgDA"}
+{"version":3,"file":"amendmentClaim.d.ts","sourceRoot":"","sources":["../../../src/remediate/dispatch/amendmentClaim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,+EAA+E;AAC/E,MAAM,MAAM,oBAAoB,GAC5B;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpE;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,iBAAiB,EAC3B,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EAAE,GACvB;IACD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAA;KAAE,CAAC,CAAC;CACpE,CAgDA"}

package/dist/remediate/dispatch/amendmentClaim.js

@@ -5,6 +5,13 @@
  * it submits the candidate paths to `routeAmendmentRequest`. Unowned paths are
  * granted unilaterally; owned or contended paths are routed back through the
  * seam detect+resolve protocol.
+ *
+ * Grant-time disjointness (INV-SOO-06 / CE-001): `registry.claimAmendment`
+ * additionally refuses a scope-widening grant onto a file another node holds as a
+ * live in-flight scheduling claim, so the in-flight owned-file union can never
+ * become non-disjoint via a post-admission amendment. Such a path is routed as a
+ * `contended` seam (queued until the holder's file frees), exactly like a
+ * sibling-amendment contention.
  */
 /**
  * Route a worker's requested amendment paths into granted vs seam-routed.

package/dist/remediate/dispatch/amendmentClaim.js.map

@@ -1 +1 @@
-{"version":3,"file":"amendmentClaim.js","sourceRoot":"","sources":["../../../src/remediate/dispatch/amendmentClaim.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAA2B,EAC3B,MAAc,EACd,cAAwB;IAKxB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAA0D,EAAE,CAAC;IAE9E,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAEtD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QAED,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxB,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;YAChE,MAAM,KAAK,GAAyB,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YAC9E,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,uBAAuB;gBAC9B,OAAO,EAAE,MAAM;gBACf,IAAI;gBACJ,OAAO,EAAE,OAAO;gBAChB,aAAa;gBACb,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC,GAAG,IAAI,CACV,CAAC;YACF,SAAS;QACX,CAAC;QAED,YAAY;QACZ,MAAM,eAAe,GAAG,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;QACtE,MAAM,KAAK,GAAyB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QACpF,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,uBAAuB;YAC9B,OAAO,EAAE,MAAM;YACf,IAAI;YACJ,OAAO,EAAE,WAAW;YACpB,eAAe;YACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,GAAG,IAAI,CACV,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC"}
+{"version":3,"file":"amendmentClaim.js","sourceRoot":"","sources":["../../../src/remediate/dispatch/amendmentClaim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAUH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAA2B,EAC3B,MAAc,EACd,cAAwB;IAKxB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAA0D,EAAE,CAAC;IAE9E,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAEtD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QAED,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxB,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;YAChE,MAAM,KAAK,GAAyB,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YAC9E,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,uBAAuB;gBAC9B,OAAO,EAAE,MAAM;gBACf,IAAI;gBACJ,OAAO,EAAE,OAAO;gBAChB,aAAa;gBACb,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC,GAAG,IAAI,CACV,CAAC;YACF,SAAS;QACX,CAAC;QAED,YAAY;QACZ,MAAM,eAAe,GAAG,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;QACtE,MAAM,KAAK,GAAyB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QACpF,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,uBAAuB;YAC9B,OAAO,EAAE,MAAM;YACf,IAAI;YACJ,OAAO,EAAE,WAAW;YACpB,eAAe;YACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,GAAG,IAAI,CACV,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC"}

package/dist/remediate/dispatch/ownershipRegistry.d.ts

@@ -10,6 +10,28 @@
  * Stale in-flight claims (node ID not in the current implementation DAG) are
  * purged on load.
  */
+/**
+ * The single-sourced path canonicalization for ownership identity (INV-SOO-09).
+ *
+ * Resolves a path to a stable physical-file key: absolute (against `root` when
+ * supplied, else cwd), `..`/`.`-collapsed (via `resolve`), separators normalized
+ * to `/`, and case-folded on a case-insensitive filesystem. All spellings of one
+ * file therefore collide, closing the rel/abs/case/`..` mismatch (CE-004).
+ *
+ * Symlink identity is a RECORDED RESIDUAL, not silently treated as disjoint
+ * (INV-SOO-09 / fail-3): when `resolveSymlinks` is set and the path exists, the
+ * realpath is folded in so `link.ts → x.ts` collides; when realpath is
+ * unavailable (path absent, or FS symlink resolution out of scope) the lexical
+ * canonical key is used and the unresolved case degrades to the downstream merge
+ * guard rather than being asserted disjoint here.
+ *
+ * This is the ONLY normalization scheme for ownership identity — callers must
+ * not introduce a second one (failure-mode: path-identity mismatch).
+ */
+export declare function canonicalizeFilePath(path: string, opts?: {
+    root?: string;
+    resolveSymlinks?: boolean;
+}): string;
 export interface OwnershipRegistryJson {
     /** nodeId → set of paths from that node's original contract scope */
     contractScopes: Record<string, string[]>;
@@ -36,10 +58,22 @@ export declare class OwnershipRegistry {
      * claimed this path via an amendment.
      */
     private amendmentClaims;
+    /**
+     * canonical path → nodeId: scheduling-time in-flight WRITER claim. Lifted from
+     * the merge-time amendment signal into scheduling-time admission (INV-SOO):
+     * the rolling scheduler holds at most one in-flight writer per canonical path,
+     * so same-file nodes serialize while different-file nodes parallelize. Keyed by
+     * `canonicalizeFilePath` so all spellings of one file collide (INV-SOO-09).
+     */
+    private inFlightClaims;
     /** Optional path for checkpoint persistence. When provided, every mutation
      * atomically writes the registry state to this path. */
     private checkpointPath;
-    constructor(checkpointPath?: string);
+    /** Repo root for canonicalizing relative scope/claim paths to physical identity. */
+    private root;
+    constructor(checkpointPath?: string, root?: string);
+    /** Canonicalize a path to physical-file identity under this registry's root. */
+    private canon;
     /**
      * Initialize the registry from the implementation DAG nodes. Each node's
      * `affected_files` (or `write_paths`) constitutes its contract scope.
@@ -60,6 +94,10 @@ export declare class OwnershipRegistry {
      *  - `'contended'`  — path has been claimed by a live parallel sibling; routes to seam protocol.
      */
     claimAmendment(nodeId: string, path: string): "granted" | "owned" | "contended";
+    /** The node holding an amendment claim whose canonical key matches `canonicalKey`. */
+    private _amendmentClaimantByCanonical;
+    /** Whether a contract-scope set contains a path with the given canonical key. */
+    private _scopeHasCanonical;
     /**
      * Release all amendment claims for `nodeId`. Call when a node finishes
      * (merge or triage). Makes the previously claimed files available again.
@@ -78,9 +116,57 @@ export declare class OwnershipRegistry {
     contractOwner(path: string): string | undefined;
     /**
      * Return the node ID that has an in-flight amendment claim for this path, or
-     * undefined if uncontended.
+     * undefined if uncontended. Canonical identity (INV-SOO-09).
      */
     amendmentClaimant(path: string): string | undefined;
+    /**
+     * Canonical write-scope of a node for scheduling: its contract scope ∪ live
+     * amendment claims, each canonicalized to physical-file identity (INV-SOO-09).
+     */
+    canonicalScope(nodeId: string): Set<string>;
+    /**
+     * The union of canonical file paths owned by currently in-flight nodes (their
+     * scheduling claims). The scheduling-time complement of the merge-time owner
+     * signal — a path in this set has a live writer, so a same-file node must wait
+     * (INV-SOO-01).
+     */
+    filesClaimedByInFlight(): Set<string>;
+    /** The node holding the in-flight scheduling claim on `path`, or undefined. */
+    inFlightOwner(path: string): string | undefined;
+    /**
+     * Whether `nodeId`'s declared write-scope is file-ownership-DISJOINT from the
+     * current in-flight set — i.e. it shares no canonical path with any OTHER
+     * in-flight node, so it can be admitted without two in-flight writers per file
+     * (INV-SOO-01).
+     *
+     * Conservative empty-scope gating (INV-SOO-01 / CE-008): a node whose declared
+     * scope canonicalizes to the EMPTY set (unresolved/undeclared) is treated as
+     * NON-disjoint — it is NOT admitted as vacuously-disjoint, because an
+     * under-declared writer could collide with anything. Such a node admits only
+     * when no other node is in flight (`requireSoloWhenEmpty`).
+     */
+    isFileOwnershipDisjoint(nodeId: string, declaredScope: Iterable<string>): boolean;
+    /**
+     * Record `nodeId`'s scheduling-time in-flight WRITER claim over `paths`
+     * (declared scope, canonicalized). Idempotent for a node re-claiming its own
+     * paths (a rate-limited re-queue). Call BEFORE dispatching the node.
+     */
+    claimInFlight(nodeId: string, paths: Iterable<string>): void;
+    /**
+     * Release `nodeId`'s scheduling-time in-flight claims (and any amendment claims
+     * it holds). Call on a RELEASING disposition (INV-SOO-10):
+     * blocked-final / abandoned / merged / failed-no-retry / no-op-satisfied. A
+     * blocked-PENDING-triage node is still live and must NOT call this — it retains.
+     */
+    releaseInFlight(nodeId: string): void;
+    /**
+     * Atomic triage-retry claim hand-off A→A' (INV-SOO-07): transfer all of the
+     * failed node's in-flight + amendment claims to its successor in one step, so
+     * there is no observable window in which both hold the file, nor one in which a
+     * foreign same-file node is admitted between release and re-claim. A no-op when
+     * `fromNodeId === toNodeId`.
+     */
+    handoffInFlight(fromNodeId: string, toNodeId: string): void;
     /** Serialize to a plain JSON-safe object. */
     serialize(): OwnershipRegistryJson;
     /**

package/dist/remediate/dispatch/ownershipRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ownershipRegistry.d.ts","sourceRoot":"","sources":["../../../src/remediate/dispatch/ownershipRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,MAAM,WAAW,qBAAqB;IACpC,qEAAqE;IACrE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACzC,iFAAiF;IACjF,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC3C;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,iBAAiB;IAC5B,6DAA6D;IAC7D,OAAO,CAAC,cAAc,CAAuC;IAE7D;;;OAGG;IACH,OAAO,CAAC,eAAe,CAAkC;IAEzD;4DACwD;IACxD,OAAO,CAAC,cAAc,CAAqB;gBAE/B,cAAc,CAAC,EAAE,MAAM;IAInC;;;;OAIG;IACH,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,GAAG,IAAI;IAUtG;;;;;;;;OAQG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW;IAoB/E;;;OAGG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAavC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;IAWlC;;;OAGG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAO/C;;;OAGG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAInD,6CAA6C;IAC7C,SAAS,IAAI,qBAAqB;IAkBlC;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CACb,IAAI,EAAE,qBAAqB,EAC3B,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,EACzB,cAAc,CAAC,EAAE,MAAM,GACtB,iBAAiB;IAqBpB,0DAA0D;IAC1D,OAAO,CAAC,QAAQ;IAqBhB,mGAAmG;IACnG,MAAM,CAAC,kBAAkB,CACvB,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,GACxB,iBAAiB,GAAG,SAAS;CAuBjC"}
+{"version":3,"file":"ownershipRegistry.d.ts","sourceRoot":"","sources":["../../../src/remediate/dispatch/ownershipRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAaH;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAO,GACtD,MAAM,CAgBR;AAED,MAAM,WAAW,qBAAqB;IACpC,qEAAqE;IACrE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACzC,iFAAiF;IACjF,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC3C;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,iBAAiB;IAC5B,6DAA6D;IAC7D,OAAO,CAAC,cAAc,CAAuC;IAE7D;;;OAGG;IACH,OAAO,CAAC,eAAe,CAAkC;IAEzD;;;;;;OAMG;IACH,OAAO,CAAC,cAAc,CAAkC;IAExD;4DACwD;IACxD,OAAO,CAAC,cAAc,CAAqB;IAE3C,oFAAoF;IACpF,OAAO,CAAC,IAAI,CAAqB;gBAErB,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;IAKlD,gFAAgF;IAChF,OAAO,CAAC,KAAK;IAIb;;;;OAIG;IACH,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,GAAG,IAAI;IAUtG;;;;;;;;OAQG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW;IA+B/E,sFAAsF;IACtF,OAAO,CAAC,6BAA6B;IAOrC,iFAAiF;IACjF,OAAO,CAAC,kBAAkB;IAO1B;;;OAGG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAavC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;IAWlC;;;OAGG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAQ/C;;;OAGG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAUnD;;;OAGG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAS3C;;;;;OAKG;IACH,sBAAsB,IAAI,GAAG,CAAC,MAAM,CAAC;IAIrC,+EAA+E;IAC/E,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI/C;;;;;;;;;;;OAWG;IACH,uBAAuB,CACrB,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,GAC9B,OAAO;IAiBV;;;;OAIG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI;IAoB5D;;;;;OAKG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAWrC;;;;;;OAMG;IACH,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAkB3D,6CAA6C;IAC7C,SAAS,IAAI,qBAAqB;IAkBlC;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CACb,IAAI,EAAE,qBAAqB,EAC3B,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,EACzB,cAAc,CAAC,EAAE,MAAM,GACtB,iBAAiB;IAqBpB,0DAA0D;IAC1D,OAAO,CAAC,QAAQ;IAqBhB,mGAAmG;IACnG,MAAM,CAAC,kBAAkB,CACvB,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,GACxB,iBAAiB,GAAG,SAAS;CAuBjC"}

package/dist/remediate/dispatch/ownershipRegistry.js

@@ -10,8 +10,51 @@
  * Stale in-flight claims (node ID not in the current implementation DAG) are
  * purged on load.
  */
-import { writeFileSync, readFileSync, mkdirSync } from "node:fs";
-import { dirname } from "node:path";
+import { writeFileSync, readFileSync, mkdirSync, realpathSync } from "node:fs";
+import { dirname, isAbsolute, resolve, sep } from "node:path";
+/**
+ * Whether the host filesystem is case-insensitive for path identity. win32 and
+ * darwin default to case-insensitive volumes; linux is case-sensitive. Used so
+ * `src/A.ts` and `src/a.ts` collide on a Windows/macOS volume (one physical
+ * file) but stay distinct on Linux — INV-SOO-09 canonical physical-file identity.
+ */
+const CASE_INSENSITIVE_FS = process.platform === "win32" || process.platform === "darwin";
+/**
+ * The single-sourced path canonicalization for ownership identity (INV-SOO-09).
+ *
+ * Resolves a path to a stable physical-file key: absolute (against `root` when
+ * supplied, else cwd), `..`/`.`-collapsed (via `resolve`), separators normalized
+ * to `/`, and case-folded on a case-insensitive filesystem. All spellings of one
+ * file therefore collide, closing the rel/abs/case/`..` mismatch (CE-004).
+ *
+ * Symlink identity is a RECORDED RESIDUAL, not silently treated as disjoint
+ * (INV-SOO-09 / fail-3): when `resolveSymlinks` is set and the path exists, the
+ * realpath is folded in so `link.ts → x.ts` collides; when realpath is
+ * unavailable (path absent, or FS symlink resolution out of scope) the lexical
+ * canonical key is used and the unresolved case degrades to the downstream merge
+ * guard rather than being asserted disjoint here.
+ *
+ * This is the ONLY normalization scheme for ownership identity — callers must
+ * not introduce a second one (failure-mode: path-identity mismatch).
+ */
+export function canonicalizeFilePath(path, opts = {}) {
+    const { root, resolveSymlinks = false } = opts;
+    let abs = isAbsolute(path)
+        ? resolve(path)
+        : resolve(root ?? process.cwd(), path);
+    if (resolveSymlinks) {
+        try {
+            abs = realpathSync(abs);
+        }
+        catch {
+            // Symlink/realpath unavailable (path absent or FS resolution out of scope):
+            // keep the lexical key — the unresolved symlink case is a recorded residual
+            // handled by the downstream merge guard, never asserted disjoint here.
+        }
+    }
+    const slashed = abs.split(sep).join("/");
+    return CASE_INSENSITIVE_FS ? slashed.toLowerCase() : slashed;
+}
 /**
  * OwnershipRegistry tracks write-scope ownership per DAG node.
  *
@@ -32,11 +75,26 @@ export class OwnershipRegistry {
      * claimed this path via an amendment.
      */
     amendmentClaims = new Map();
+    /**
+     * canonical path → nodeId: scheduling-time in-flight WRITER claim. Lifted from
+     * the merge-time amendment signal into scheduling-time admission (INV-SOO):
+     * the rolling scheduler holds at most one in-flight writer per canonical path,
+     * so same-file nodes serialize while different-file nodes parallelize. Keyed by
+     * `canonicalizeFilePath` so all spellings of one file collide (INV-SOO-09).
+     */
+    inFlightClaims = new Map();
     /** Optional path for checkpoint persistence. When provided, every mutation
      * atomically writes the registry state to this path. */
     checkpointPath;
-    constructor(checkpointPath) {
+    /** Repo root for canonicalizing relative scope/claim paths to physical identity. */
+    root;
+    constructor(checkpointPath, root) {
         this.checkpointPath = checkpointPath;
+        this.root = root;
+    }
+    /** Canonicalize a path to physical-file identity under this registry's root. */
+    canon(path) {
+        return canonicalizeFilePath(path, { root: this.root });
     }
     /**
      * Initialize the registry from the implementation DAG nodes. Each node's
@@ -62,22 +120,48 @@ export class OwnershipRegistry {
      *  - `'contended'`  — path has been claimed by a live parallel sibling; routes to seam protocol.
      */
     claimAmendment(nodeId, path) {
-        // Check if path is in any OTHER node's contract scope.
+        const key = this.canon(path);
+        // Check if path is in any OTHER node's contract scope (canonical identity).
         for (const [scopeNodeId, scopePaths] of this.contractScopes) {
-            if (scopeNodeId !== nodeId && scopePaths.has(path)) {
+            if (scopeNodeId !== nodeId && this._scopeHasCanonical(scopePaths, key)) {
                 return "owned";
             }
         }
-        // Check if path has already been amendment-claimed by a live parallel sibling.
-        const existingClaimant = this.amendmentClaims.get(path);
+        // Check if path has already been amendment-claimed by a live parallel sibling
+        // (canonical identity, so a differently-spelled same file collides).
+        const existingClaimant = this._amendmentClaimantByCanonical(key);
         if (existingClaimant !== undefined && existingClaimant !== nodeId) {
             return "contended";
         }
-        // Grant: record the claim.
+        // Grant-time disjointness (INV-SOO-06 / CE-001): refuse a scope-widening grant
+        // onto a file another in-flight node is actively writing, so a post-admission
+        // grant can never make the in-flight owned-file union non-disjoint.
+        const inFlightOwner = this.inFlightClaims.get(key);
+        if (inFlightOwner !== undefined && inFlightOwner !== nodeId) {
+            return "contended";
+        }
+        // Grant: record the claim under the ORIGINAL spelling (merge attribution reads
+        // the raw path); canonical identity is applied on comparison, not on storage.
         this.amendmentClaims.set(path, nodeId);
         this._persist();
         return "granted";
     }
+    /** The node holding an amendment claim whose canonical key matches `canonicalKey`. */
+    _amendmentClaimantByCanonical(canonicalKey) {
+        for (const [p, claimant] of this.amendmentClaims) {
+            if (this.canon(p) === canonicalKey)
+                return claimant;
+        }
+        return undefined;
+    }
+    /** Whether a contract-scope set contains a path with the given canonical key. */
+    _scopeHasCanonical(scopePaths, canonicalKey) {
+        for (const p of scopePaths) {
+            if (this.canon(p) === canonicalKey)
+                return true;
+        }
+        return false;
+    }
     /**
      * Release all amendment claims for `nodeId`. Call when a node finishes
      * (merge or triage). Makes the previously claimed files available again.
@@ -114,18 +198,147 @@ export class OwnershipRegistry {
      * the path is unowned.
      */
     contractOwner(path) {
+        const key = this.canon(path);
         for (const [nodeId, scopePaths] of this.contractScopes) {
-            if (scopePaths.has(path))
+            if (this._scopeHasCanonical(scopePaths, key))
                 return nodeId;
         }
         return undefined;
     }
     /**
      * Return the node ID that has an in-flight amendment claim for this path, or
-     * undefined if uncontended.
+     * undefined if uncontended. Canonical identity (INV-SOO-09).
      */
     amendmentClaimant(path) {
-        return this.amendmentClaims.get(path);
+        // Exact-spelling hit first (cheap), else canonical match.
+        return (this.amendmentClaims.get(path) ??
+            this._amendmentClaimantByCanonical(this.canon(path)));
+    }
+    // ── Scheduling-time file-ownership queries (INV-SOO) ───────────────────────
+    /**
+     * Canonical write-scope of a node for scheduling: its contract scope ∪ live
+     * amendment claims, each canonicalized to physical-file identity (INV-SOO-09).
+     */
+    canonicalScope(nodeId) {
+        const out = new Set();
+        for (const p of this.contractScopes.get(nodeId) ?? [])
+            out.add(this.canon(p));
+        for (const [key, claimant] of this.amendmentClaims) {
+            if (claimant === nodeId)
+                out.add(key);
+        }
+        return out;
+    }
+    /**
+     * The union of canonical file paths owned by currently in-flight nodes (their
+     * scheduling claims). The scheduling-time complement of the merge-time owner
+     * signal — a path in this set has a live writer, so a same-file node must wait
+     * (INV-SOO-01).
+     */
+    filesClaimedByInFlight() {
+        return new Set(this.inFlightClaims.keys());
+    }
+    /** The node holding the in-flight scheduling claim on `path`, or undefined. */
+    inFlightOwner(path) {
+        return this.inFlightClaims.get(this.canon(path));
+    }
+    /**
+     * Whether `nodeId`'s declared write-scope is file-ownership-DISJOINT from the
+     * current in-flight set — i.e. it shares no canonical path with any OTHER
+     * in-flight node, so it can be admitted without two in-flight writers per file
+     * (INV-SOO-01).
+     *
+     * Conservative empty-scope gating (INV-SOO-01 / CE-008): a node whose declared
+     * scope canonicalizes to the EMPTY set (unresolved/undeclared) is treated as
+     * NON-disjoint — it is NOT admitted as vacuously-disjoint, because an
+     * under-declared writer could collide with anything. Such a node admits only
+     * when no other node is in flight (`requireSoloWhenEmpty`).
+     */
+    isFileOwnershipDisjoint(nodeId, declaredScope) {
+        const scope = new Set();
+        for (const p of declaredScope)
+            scope.add(this.canon(p));
+        if (scope.size === 0) {
+            // Empty/unresolved scope: disjoint only if nothing else is in flight.
+            for (const owner of this.inFlightClaims.values()) {
+                if (owner !== nodeId)
+                    return false;
+            }
+            return true;
+        }
+        for (const key of scope) {
+            const owner = this.inFlightClaims.get(key);
+            if (owner !== undefined && owner !== nodeId)
+                return false;
+        }
+        return true;
+    }
+    /**
+     * Record `nodeId`'s scheduling-time in-flight WRITER claim over `paths`
+     * (declared scope, canonicalized). Idempotent for a node re-claiming its own
+     * paths (a rate-limited re-queue). Call BEFORE dispatching the node.
+     */
+    claimInFlight(nodeId, paths) {
+        let changed = false;
+        for (const p of paths) {
+            const key = this.canon(p);
+            const existing = this.inFlightClaims.get(key);
+            if (existing === nodeId)
+                continue;
+            // Caller guarantees disjointness via isFileOwnershipDisjoint; a foreign
+            // owner here is a precondition violation, surfaced rather than overwritten.
+            if (existing !== undefined && existing !== nodeId) {
+                throw new Error(`OwnershipRegistry.claimInFlight: ${key} already in-flight by ${existing}, ` +
+                    `cannot claim for ${nodeId} (file-ownership-disjoint precondition violated).`);
+            }
+            this.inFlightClaims.set(key, nodeId);
+            changed = true;
+        }
+        if (changed)
+            this._persist();
+    }
+    /**
+     * Release `nodeId`'s scheduling-time in-flight claims (and any amendment claims
+     * it holds). Call on a RELEASING disposition (INV-SOO-10):
+     * blocked-final / abandoned / merged / failed-no-retry / no-op-satisfied. A
+     * blocked-PENDING-triage node is still live and must NOT call this — it retains.
+     */
+    releaseInFlight(nodeId) {
+        let changed = false;
+        for (const [key, owner] of this.inFlightClaims) {
+            if (owner === nodeId) {
+                this.inFlightClaims.delete(key);
+                changed = true;
+            }
+        }
+        if (changed)
+            this._persist();
+    }
+    /**
+     * Atomic triage-retry claim hand-off A→A' (INV-SOO-07): transfer all of the
+     * failed node's in-flight + amendment claims to its successor in one step, so
+     * there is no observable window in which both hold the file, nor one in which a
+     * foreign same-file node is admitted between release and re-claim. A no-op when
+     * `fromNodeId === toNodeId`.
+     */
+    handoffInFlight(fromNodeId, toNodeId) {
+        if (fromNodeId === toNodeId)
+            return;
+        let changed = false;
+        for (const [key, owner] of this.inFlightClaims) {
+            if (owner === fromNodeId) {
+                this.inFlightClaims.set(key, toNodeId);
+                changed = true;
+            }
+        }
+        for (const [key, owner] of this.amendmentClaims) {
+            if (owner === fromNodeId) {
+                this.amendmentClaims.set(key, toNodeId);
+                changed = true;
+            }
+        }
+        if (changed)
+            this._persist();
     }
     /** Serialize to a plain JSON-safe object. */
     serialize() {

package/dist/remediate/dispatch/ownershipRegistry.js.map

@@ -1 +1 @@
-{"version":3,"file":"ownershipRegistry.js","sourceRoot":"","sources":["../../../src/remediate/dispatch/ownershipRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASpC;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,iBAAiB;IAC5B,6DAA6D;IACrD,cAAc,GAA6B,IAAI,GAAG,EAAE,CAAC;IAE7D;;;OAGG;IACK,eAAe,GAAwB,IAAI,GAAG,EAAE,CAAC;IAEzD;4DACwD;IAChD,cAAc,CAAqB;IAE3C,YAAY,cAAuB;QACjC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,KAAoF;QAC7F,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;YAC5D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED;;;;;;;;OAQG;IACH,cAAc,CAAC,MAAc,EAAE,IAAY;QACzC,uDAAuD;QACvD,KAAK,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5D,IAAI,WAAW,KAAK,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QAED,+EAA+E;QAC/E,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,MAAM,EAAE,CAAC;YAClE,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,MAAc;QAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACpD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAClC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,MAAc;QACrB,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC3E,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACpD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,aAAa,EAAE,GAAG,cAAc,CAAC,CAAC;IAC/C,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,IAAY;QACxB,KAAK,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACvD,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,MAAM,CAAC;QAC1C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,IAAY;QAC5B,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,6CAA6C;IAC7C,SAAS;QACP,MAAM,cAAc,GAA6B,EAAE,CAAC;QACpD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAClD,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,eAAe,GAA6B,EAAE,CAAC;QACrD,sDAAsD;QACtD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YACrC,eAAe,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QAClC,CAAC;QACD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CACb,IAA2B,EAC3B,YAAyB,EACzB,cAAuB;QAEvB,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,cAAc,CAAC,CAAC;QAEvD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAClE,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,CAAC;QAED,6EAA6E;QAC7E,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,8CAA8C;gBAC9C,SAAS;YACX,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,0DAA0D;IAClD,QAAQ;QACd,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAC9D,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2EAA2E;YAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,mCAAmC;gBAC1C,IAAI,EAAE,IAAI,CAAC,cAAc;gBACzB,IAAI,EAAG,GAA6B,CAAC,IAAI,IAAI,IAAI;gBACjD,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC;gBACpB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC,GAAG,IAAI,CACV,CAAC;QACJ,CAAC;IACH,CAAC;IAED,mGAAmG;IACnG,MAAM,CAAC,kBAAkB,CACvB,cAAsB,EACtB,YAAyB;QAEzB,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IACE,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,KAAK,IAAI;YACb,CAAC,CAAC,gBAAgB,IAAI,IAAI,CAAC;YAC3B,CAAC,CAAC,iBAAiB,IAAI,IAAI,CAAC,EAC5B,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,IAA6B,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;IACjG,CAAC;CACF"}
+{"version":3,"file":"ownershipRegistry.js","sourceRoot":"","sources":["../../../src/remediate/dispatch/ownershipRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC/E,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;AAE1F;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,OAAqD,EAAE;IAEvD,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;IAC/C,IAAI,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC;QACxB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACf,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;YAC5E,4EAA4E;YAC5E,uEAAuE;QACzE,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC;AASD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,iBAAiB;IAC5B,6DAA6D;IACrD,cAAc,GAA6B,IAAI,GAAG,EAAE,CAAC;IAE7D;;;OAGG;IACK,eAAe,GAAwB,IAAI,GAAG,EAAE,CAAC;IAEzD;;;;;;OAMG;IACK,cAAc,GAAwB,IAAI,GAAG,EAAE,CAAC;IAExD;4DACwD;IAChD,cAAc,CAAqB;IAE3C,oFAAoF;IAC5E,IAAI,CAAqB;IAEjC,YAAY,cAAuB,EAAE,IAAa;QAChD,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,gFAAgF;IACxE,KAAK,CAAC,IAAY;QACxB,OAAO,oBAAoB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,KAAoF;QAC7F,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;YAC5D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED;;;;;;;;OAQG;IACH,cAAc,CAAC,MAAc,EAAE,IAAY;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,4EAA4E;QAC5E,KAAK,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5D,IAAI,WAAW,KAAK,MAAM,IAAI,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;gBACvE,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QAED,8EAA8E;QAC9E,qEAAqE;QACrE,MAAM,gBAAgB,GAAG,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,MAAM,EAAE,CAAC;YAClE,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,+EAA+E;QAC/E,8EAA8E;QAC9E,oEAAoE;QACpE,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;YAC5D,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,+EAA+E;QAC/E,8EAA8E;QAC9E,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,sFAAsF;IAC9E,6BAA6B,CAAC,YAAoB;QACxD,KAAK,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACjD,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY;gBAAE,OAAO,QAAQ,CAAC;QACtD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,iFAAiF;IACzE,kBAAkB,CAAC,UAAuB,EAAE,YAAoB;QACtE,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY;gBAAE,OAAO,IAAI,CAAC;QAClD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,MAAc;QAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACpD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAClC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,MAAc;QACrB,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC3E,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACpD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,aAAa,EAAE,GAAG,cAAc,CAAC,CAAC;IAC/C,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,IAAY;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACvD,IAAI,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC;QAC9D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,IAAY;QAC5B,0DAA0D;QAC1D,OAAO,CACL,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;YAC9B,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CACrD,CAAC;IACJ,CAAC;IAED,8EAA8E;IAE9E;;;OAGG;IACH,cAAc,CAAC,MAAc;QAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACnD,IAAI,QAAQ,KAAK,MAAM;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;OAKG;IACH,sBAAsB;QACpB,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,+EAA+E;IAC/E,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,uBAAuB,CACrB,MAAc,EACd,aAA+B;QAE/B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,aAAa;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,sEAAsE;YACtE,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;gBACjD,IAAI,KAAK,KAAK,MAAM;oBAAE,OAAO,KAAK,CAAC;YACrC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC;QAC5D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,MAAc,EAAE,KAAuB;QACnD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,QAAQ,KAAK,MAAM;gBAAE,SAAS;YAClC,wEAAwE;YACxE,4EAA4E;YAC5E,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CACb,oCAAoC,GAAG,yBAAyB,QAAQ,IAAI;oBAC1E,oBAAoB,MAAM,mDAAmD,CAChF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACrC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,OAAO;YAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,MAAc;QAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/C,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBACrB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,OAAO;YAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,eAAe,CAAC,UAAkB,EAAE,QAAgB;QAClD,IAAI,UAAU,KAAK,QAAQ;YAAE,OAAO;QACpC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/C,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;gBACzB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACvC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAChD,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;gBACzB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACxC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,OAAO;YAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED,6CAA6C;IAC7C,SAAS;QACP,MAAM,cAAc,GAA6B,EAAE,CAAC;QACpD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAClD,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,eAAe,GAA6B,EAAE,CAAC;QACrD,sDAAsD;QACtD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YACrC,eAAe,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QAClC,CAAC;QACD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CACb,IAA2B,EAC3B,YAAyB,EACzB,cAAuB;QAEvB,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,cAAc,CAAC,CAAC;QAEvD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAClE,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,CAAC;QAED,6EAA6E;QAC7E,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,8CAA8C;gBAC9C,SAAS;YACX,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,0DAA0D;IAClD,QAAQ;QACd,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAC9D,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2EAA2E;YAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,mCAAmC;gBAC1C,IAAI,EAAE,IAAI,CAAC,cAAc;gBACzB,IAAI,EAAG,GAA6B,CAAC,IAAI,IAAI,IAAI;gBACjD,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC;gBACpB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC,GAAG,IAAI,CACV,CAAC;QACJ,CAAC;IACH,CAAC;IAED,mGAAmG;IACnG,MAAM,CAAC,kBAAkB,CACvB,cAAsB,EACtB,YAAyB;QAEzB,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IACE,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,KAAK,IAAI;YACb,CAAC,CAAC,gBAAgB,IAAI,IAAI,CAAC;YAC3B,CAAC,CAAC,iBAAiB,IAAI,IAAI,CAAC,EAC5B,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,IAA6B,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;IACjG,CAAC;CACF"}

package/dist/remediate/dispatch/ownershipScheduler.d.ts

@@ -0,0 +1,48 @@
+/**
+ * File-ownership-disjoint admission scheduling (INV-SOO-01..10).
+ *
+ * The rolling engine dispatches an eligible dependency LEVEL (deps verified-
+ * complete, INV-RS-01). Within a level the previous scheduler ordered nodes only
+ * by `block_id.localeCompare`, which let two same-file nodes run concurrently and
+ * collide at merge (the lost-update-guard-lands-1-rejects-N-1 starved-tail bug).
+ *
+ * This module replaces that numeric ordering with file-ownership-DISJOINT
+ * admission: a level is admitted in SUB-WAVES, each a maximal pairwise-file-
+ * disjoint subset of the still-pending nodes, chosen by a deterministic
+ * block_id tie-break AFTER the disjointness filter (INV-SOO-08). Same-file nodes
+ * therefore land in successive sub-waves (serialize, INV-SOO-01/02) while
+ * different-file nodes share a sub-wave (parallelize up to the quota cap the
+ * dispatcher itself enforces, INV-SOO-03/05). Path identity is the single
+ * canonical key from `canonicalizeFilePath` (INV-SOO-09); an empty/unresolved
+ * scope is conservatively NON-disjoint so it never batches with a peer
+ * (INV-SOO-01 / CE-008).
+ *
+ * Pure and deterministic — no I/O, no Set/Map iteration-order leak — so the
+ * admission order is reproducible and unit-testable against a precomputed level.
+ */
+/** A node as the ownership scheduler sees it: an id + its declared write-scope. */
+export interface OwnershipSchedulerNode {
+    block_id: string;
+    /** Declared write-scope paths (repo-relative or absolute); empty ⇒ unresolved. */
+    write_paths: string[];
+}
+/**
+ * Canonicalize a node's declared write-scope to physical-file identity keys.
+ * Empty input ⇒ empty set (handled conservatively by the disjointness gate).
+ */
+export declare function canonicalScopeKeys(node: OwnershipSchedulerNode, root?: string): Set<string>;
+/**
+ * Partition a single eligible LEVEL into ordered file-ownership-disjoint
+ * SUB-WAVES. Each sub-wave is a maximal set of nodes whose canonical write-scopes
+ * are pairwise disjoint AND disjoint from a node with an empty scope only when it
+ * is alone (conservative empty-scope gating). Nodes are considered in ascending
+ * `block_id` order (the deterministic tie-break, INV-SOO-08), so the admitted
+ * subset of each sub-wave is identical across two runs over identical state.
+ *
+ * A node with an EMPTY canonical scope (unresolved/undeclared) is treated as
+ * conservatively NON-disjoint: it only enters a sub-wave by itself (it blocks and
+ * is blocked-by every peer), so it never batches with another writer
+ * (INV-SOO-01 / CE-008).
+ */
+export declare function ownershipSubWaves(level: OwnershipSchedulerNode[], root?: string): OwnershipSchedulerNode[][];
+//# sourceMappingURL=ownershipScheduler.d.ts.map

package/dist/remediate/dispatch/ownershipScheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownershipScheduler.d.ts","sourceRoot":"","sources":["../../../src/remediate/dispatch/ownershipScheduler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,mFAAmF;AACnF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,sBAAsB,EAC5B,IAAI,CAAC,EAAE,MAAM,GACZ,GAAG,CAAC,MAAM,CAAC,CAIb;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,sBAAsB,EAAE,EAC/B,IAAI,CAAC,EAAE,MAAM,GACZ,sBAAsB,EAAE,EAAE,CAwD5B"}

package/dist/remediate/dispatch/ownershipScheduler.js

@@ -0,0 +1,100 @@
+/**
+ * File-ownership-disjoint admission scheduling (INV-SOO-01..10).
+ *
+ * The rolling engine dispatches an eligible dependency LEVEL (deps verified-
+ * complete, INV-RS-01). Within a level the previous scheduler ordered nodes only
+ * by `block_id.localeCompare`, which let two same-file nodes run concurrently and
+ * collide at merge (the lost-update-guard-lands-1-rejects-N-1 starved-tail bug).
+ *
+ * This module replaces that numeric ordering with file-ownership-DISJOINT
+ * admission: a level is admitted in SUB-WAVES, each a maximal pairwise-file-
+ * disjoint subset of the still-pending nodes, chosen by a deterministic
+ * block_id tie-break AFTER the disjointness filter (INV-SOO-08). Same-file nodes
+ * therefore land in successive sub-waves (serialize, INV-SOO-01/02) while
+ * different-file nodes share a sub-wave (parallelize up to the quota cap the
+ * dispatcher itself enforces, INV-SOO-03/05). Path identity is the single
+ * canonical key from `canonicalizeFilePath` (INV-SOO-09); an empty/unresolved
+ * scope is conservatively NON-disjoint so it never batches with a peer
+ * (INV-SOO-01 / CE-008).
+ *
+ * Pure and deterministic — no I/O, no Set/Map iteration-order leak — so the
+ * admission order is reproducible and unit-testable against a precomputed level.
+ */
+import { canonicalizeFilePath } from "./ownershipRegistry.js";
+/**
+ * Canonicalize a node's declared write-scope to physical-file identity keys.
+ * Empty input ⇒ empty set (handled conservatively by the disjointness gate).
+ */
+export function canonicalScopeKeys(node, root) {
+    const out = new Set();
+    for (const p of node.write_paths)
+        out.add(canonicalizeFilePath(p, { root }));
+    return out;
+}
+/**
+ * Partition a single eligible LEVEL into ordered file-ownership-disjoint
+ * SUB-WAVES. Each sub-wave is a maximal set of nodes whose canonical write-scopes
+ * are pairwise disjoint AND disjoint from a node with an empty scope only when it
+ * is alone (conservative empty-scope gating). Nodes are considered in ascending
+ * `block_id` order (the deterministic tie-break, INV-SOO-08), so the admitted
+ * subset of each sub-wave is identical across two runs over identical state.
+ *
+ * A node with an EMPTY canonical scope (unresolved/undeclared) is treated as
+ * conservatively NON-disjoint: it only enters a sub-wave by itself (it blocks and
+ * is blocked-by every peer), so it never batches with another writer
+ * (INV-SOO-01 / CE-008).
+ */
+export function ownershipSubWaves(level, root) {
+    const ordered = [...level].sort((a, b) => a.block_id.localeCompare(b.block_id));
+    const scopeOf = new Map();
+    for (const n of ordered)
+        scopeOf.set(n.block_id, canonicalScopeKeys(n, root));
+    const remaining = [...ordered];
+    const subWaves = [];
+    while (remaining.length > 0) {
+        const wave = [];
+        const claimed = new Set();
+        let waveHasEmptyScopeNode = false;
+        const leftover = [];
+        for (const node of remaining) {
+            const scope = scopeOf.get(node.block_id);
+            const isEmpty = scope.size === 0;
+            // Empty-scope node admits only into an otherwise-empty sub-wave (solo).
+            if (isEmpty) {
+                if (wave.length === 0) {
+                    wave.push(node);
+                    waveHasEmptyScopeNode = true;
+                }
+                else {
+                    leftover.push(node);
+                }
+                continue;
+            }
+            // A real-scope node cannot share a wave with an empty-scope node, nor with
+            // any node it shares a canonical path with.
+            if (waveHasEmptyScopeNode) {
+                leftover.push(node);
+                continue;
+            }
+            let overlaps = false;
+            for (const key of scope) {
+                if (claimed.has(key)) {
+                    overlaps = true;
+                    break;
+                }
+            }
+            if (overlaps) {
+                leftover.push(node);
+                continue;
+            }
+            for (const key of scope)
+                claimed.add(key);
+            wave.push(node);
+        }
+        subWaves.push(wave);
+        remaining.length = 0;
+        remaining.push(...leftover);
+    }
+    return subWaves;
+}
+//# sourceMappingURL=ownershipScheduler.js.map