borgmcp 1.1.15 → 2.0.1

package/dist/seats.js

@@ -0,0 +1,551 @@
+/**
+ * The unified 0600 seat store (Queen rescope, scope A) — `seats.json`.
+ *
+ * Collapses the per-seat drone-session CREDENTIAL and its worktree BINDING into
+ * ONE atomically-written record, keyed by the deterministic seat ref
+ * (origin+trust+cube+role+operation). Because a record's `state` and its
+ * `worktree` binding are written together in a single `withStore` commit, the
+ * invariant "an ACTIVE credential without a binding" is UNREACHABLE BY
+ * CONSTRUCTION: PREPARE mints `{credential, state:'pending'}` with NO worktree;
+ * FINALIZE sets `state:'active' + server metadata + worktree + display` in one
+ * commit; a reset deletes the whole record so credential+binding vanish together
+ * (there is no cross-store 'partial').
+ *
+ * The single store flock (seat-store.withStore) serializes every read-compare-
+ * write; there is no second lock and no composite. The raw bearer rests ONLY in
+ * the 0600 file and is never returned past this module except by the sole
+ * hydration reader; every other observation is digest-only.
+ */
+import os from 'os';
+import path from 'path';
+import { createHash } from 'node:crypto';
+import { readStoreFile, withStore } from './seat-store.js';
+export const SEATS_FILE = path.join(os.homedir(), '.config', 'borgmcp', 'seats.json');
+const SEATS_VERSION = 1;
+const REF_RE = /^borg-server-session:[a-f0-9]{64}$/;
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/** The deterministic per-seat ref (identical algorithm to the retired keychain account). */
+export function seatRef(input) {
+    const binding = createHash('sha256')
+        .update(input.origin)
+        .update('\0')
+        .update(input.trustIdentity)
+        .update('\0')
+        .update(input.cubeId)
+        .update('\0')
+        .update(input.roleId)
+        .update('\0')
+        .update(input.operation.projectRoot)
+        .update('\0')
+        .update(input.operation.kind)
+        .update('\0')
+        .update(input.operation.operationKey)
+        .digest('hex');
+    return `borg-server-session:${binding}`;
+}
+function digestOf(bearer) {
+    return createHash('sha256').update(bearer).digest('hex');
+}
+function emptyStore() {
+    return { version: SEATS_VERSION, seats: {} };
+}
+const ROLE_CLASSES = new Set(['queen', 'worker']);
+const OPERATION_KINDS = new Set(['seat', 'sibling']);
+function isNonEmptyString(value) {
+    return typeof value === 'string' && value.length > 0;
+}
+function isValidOperation(value) {
+    if (value === null || typeof value !== 'object')
+        return false;
+    const op = value;
+    return (isNonEmptyString(op.projectRoot) &&
+        typeof op.kind === 'string' &&
+        OPERATION_KINDS.has(op.kind) &&
+        isNonEmptyString(op.operationKey));
+}
+/**
+ * CR#2: FULL per-entry validation. Every key/value/invariant of a seat record is
+ * checked — the ref is well-formed and self-consistent (the map key equals the
+ * record's derived ref), state ∈ {pending,active}, the credential is a non-empty
+ * string, the operation is well-shaped, an ACTIVE record carries ALL its required
+ * server + binding fields, and a PENDING record carries NO active-only fields
+ * (session id / expiry). A single invalid entry ⇒ the whole store is rejected
+ * (fail closed at the caller, bytes preserved) — never a silent cast.
+ */
+function isValidSeatRecord(ref, value) {
+    if (!REF_RE.test(ref))
+        return false;
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const r = value;
+    // Identity + credential + operation.
+    if (!isNonEmptyString(r.origin) ||
+        !isNonEmptyString(r.trustIdentity) ||
+        !isNonEmptyString(r.cubeId) ||
+        !isNonEmptyString(r.roleId) ||
+        !isValidOperation(r.operation) ||
+        !isNonEmptyString(r.credential)) {
+        return false;
+    }
+    if (r.state !== 'pending' && r.state !== 'active')
+        return false;
+    // Optional display/typed fields, validated when present.
+    if (r.name !== undefined && typeof r.name !== 'string')
+        return false;
+    if (r.droneLabel !== undefined && typeof r.droneLabel !== 'string')
+        return false;
+    if (r.roleName !== undefined && typeof r.roleName !== 'string')
+        return false;
+    if (r.roleClass !== undefined && (typeof r.roleClass !== 'string' || !ROLE_CLASSES.has(r.roleClass)))
+        return false;
+    if (r.isHumanSeat !== undefined && typeof r.isHumanSeat !== 'boolean')
+        return false;
+    if (r.worktree !== undefined && typeof r.worktree !== 'string')
+        return false;
+    if (r.droneId !== undefined && (typeof r.droneId !== 'string' || !UUID_RE.test(r.droneId)))
+        return false;
+    if (r.sessionId !== undefined && (typeof r.sessionId !== 'string' || !UUID_RE.test(r.sessionId)))
+        return false;
+    if (r.expiresAt !== undefined &&
+        (typeof r.expiresAt !== 'string' || !Number.isFinite(Date.parse(r.expiresAt)))) {
+        return false;
+    }
+    // State-consistency invariants (no inconsistent active|pending).
+    if (r.state === 'active') {
+        // An ACTIVE record MUST carry its full server session + worktree binding.
+        if (typeof r.droneId !== 'string' ||
+            typeof r.sessionId !== 'string' ||
+            typeof r.expiresAt !== 'string' ||
+            typeof r.worktree !== 'string' ||
+            typeof r.name !== 'string' ||
+            typeof r.droneLabel !== 'string') {
+            return false;
+        }
+    }
+    else {
+        // A PENDING record must NOT carry active-only server session fields.
+        if (r.sessionId !== undefined || r.expiresAt !== undefined)
+            return false;
+    }
+    // The map key must equal the record's derived ref (no cross-key aliasing).
+    return seatRef(value) === ref;
+}
+/**
+ * CR4 + CR#2: parse + FULL version/schema/per-entry validation. Returns null (→ fail
+ * closed at the caller, bytes preserved) for any malformed JSON, wrong version, or
+ * ANY invalid entry; never throws and never coerces an invalid file into a
+ * valid-looking or empty store.
+ */
+function parseStore(raw) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+        const candidate = parsed;
+        if (candidate.version === SEATS_VERSION &&
+            candidate.seats &&
+            typeof candidate.seats === 'object' &&
+            !Array.isArray(candidate.seats)) {
+            const seats = candidate.seats;
+            for (const [ref, record] of Object.entries(seats)) {
+                if (!isValidSeatRecord(ref, record))
+                    return null;
+            }
+            return { version: SEATS_VERSION, seats: seats };
+        }
+    }
+    return null;
+}
+async function readStore() {
+    const raw = await readStoreFile(SEATS_FILE);
+    // CR4 fail-closed: ENOENT alone initializes empty. A present-but-malformed /
+    // wrong-version / schema-invalid store MUST NOT read as empty (a following commit
+    // would erase every seat); throw so the on-disk bytes are preserved.
+    if (raw === null)
+        return emptyStore();
+    const parsed = parseStore(raw);
+    if (parsed === null) {
+        throw new Error('Borg seat store is malformed or has an unsupported version; refusing to read it');
+    }
+    return parsed;
+}
+/** True iff `record` is a well-formed seat for `ref` + `binding` (origin/trust/cube). */
+function recordMatches(record, ref, binding) {
+    return (record !== undefined &&
+        record.origin === binding.origin &&
+        record.trustIdentity === binding.trustIdentity &&
+        record.cubeId === binding.cubeId &&
+        (record.state === 'pending' || record.state === 'active') &&
+        typeof record.credential === 'string' &&
+        seatRef(record) === ref);
+}
+/**
+ * TYPED, token-safe observation of the record at `ref` (CR#3). Lock-free read
+ * (atomic rename → complete file); the authoritative delete/activate re-reads
+ * under the flock. Returns only a digest + drone id, never the raw bearer.
+ */
+export async function observeSeat(ref, binding) {
+    if (!REF_RE.test(ref))
+        return { state: 'absent' };
+    const store = await readStore();
+    const record = store.seats[ref];
+    if (!recordMatches(record, ref, binding))
+        return { state: 'absent' };
+    const digest = digestOf(record.credential);
+    if (record.state === 'active') {
+        return { state: 'active', digest, droneId: typeof record.droneId === 'string' ? record.droneId : '' };
+    }
+    return { state: 'pending', digest };
+}
+/**
+ * The SOLE raw-bearer reader (SR-seven #5). Returns the ACTIVE bearer for `ref`
+ * iff the record is active AND the binding matches — used only to hydrate the
+ * live seat for authenticated requests. Every other caller observes digest-only.
+ */
+export async function getActiveSeatCredential(ref, binding) {
+    if (!REF_RE.test(ref))
+        return null;
+    const store = await readStore();
+    const record = store.seats[ref];
+    if (!recordMatches(record, ref, binding) || record.state !== 'active')
+        return null;
+    return record.credential;
+}
+// ─── PREPARE / mint (no worktree yet) ────────────────────────────────────────
+/**
+ * Mint the client bearer for one seat, or return the existing record (pending or
+ * active) so a lost-response retry re-sends the identical bearer. The minted
+ * record has NO worktree binding — FINALIZE adds it atomically with activation,
+ * so a pending record is never a live binding.
+ */
+export async function mintPendingSeat(input) {
+    const ref = seatRef(input);
+    return withStore(SEATS_FILE, emptyStore, parseStore, async (txn) => {
+        const existing = txn.data.seats[ref];
+        if (recordMatches(existing, ref, { origin: input.origin, trustIdentity: input.trustIdentity, cubeId: input.cubeId })) {
+            return existing;
+        }
+        const record = {
+            origin: input.origin,
+            trustIdentity: input.trustIdentity,
+            cubeId: input.cubeId,
+            roleId: input.roleId,
+            operation: input.operation,
+            credential: input.credential,
+            state: 'pending',
+        };
+        txn.data.seats[ref] = record;
+        await txn.commit();
+        return record;
+    });
+}
+/**
+ * CR#1 PREPARE-time abort in the single-store model. Under ONE store flock:
+ * REVALIDATE the typed expectation against the record currently at the seat ref
+ * (EXACT: the exact prior ACTIVE record must still hold — ref, optional drone id,
+ * optional live-bearer digest; ABSENT: no ACTIVE record may hold this seat), then
+ * — only if it holds — MINT the pending record in the SAME lock hold. A pre-existing
+ * valid record (pending from a lost-response retry, or the active record being
+ * reattached) is REUSED so the identical bearer is re-sent. `scrubBeforeMint`
+ * discards a known-invalid saved record (eviction remint) before minting, still
+ * under the one flock. On a mismatch NOTHING is minted or scrubbed (abort).
+ */
+export async function prepareSeat(input) {
+    const { expected, revalidate = true, scrubBeforeMint = false, seed } = input;
+    const ref = seatRef(seed);
+    const binding = { origin: seed.origin, trustIdentity: seed.trustIdentity, cubeId: seed.cubeId };
+    return withStore(SEATS_FILE, emptyStore, parseStore, async (txn) => {
+        if (revalidate) {
+            const prior = txn.data.seats[ref];
+            let mismatch;
+            if (expected.kind === 'exact') {
+                const holds = recordMatches(prior, ref, binding) &&
+                    prior.state === 'active' &&
+                    ref === expected.credentialRef &&
+                    (expected.droneId === undefined || prior.droneId === expected.droneId) &&
+                    (expected.sessionDigest === undefined || digestOf(prior.credential) === expected.sessionDigest);
+                mismatch = !holds;
+            }
+            else {
+                // ABSENT: an ACTIVE record holding this seat is a mismatch. A PENDING record
+                // (a lost-response retry / crash-in-gap) is NOT a live binding and is reused
+                // below so the identical bearer is re-sent.
+                mismatch = recordMatches(prior, ref, binding) && prior.state === 'active';
+            }
+            if (mismatch)
+                return { ok: false, reason: 'expectation-mismatch' };
+        }
+        if (scrubBeforeMint) {
+            delete txn.data.seats[ref];
+        }
+        const existing = txn.data.seats[ref];
+        if (recordMatches(existing, ref, binding)) {
+            // Idempotent reuse: re-send the exact bearer the server already digest-bound
+            // (a lost-response retry, a crash-in-gap pending, or an active reattach).
+            return { ok: true, record: existing };
+        }
+        const record = {
+            origin: seed.origin,
+            trustIdentity: seed.trustIdentity,
+            cubeId: seed.cubeId,
+            roleId: seed.roleId,
+            operation: seed.operation,
+            credential: seed.credential,
+            state: 'pending',
+        };
+        txn.data.seats[ref] = record;
+        await txn.commit();
+        return { ok: true, record };
+    });
+}
+/**
+ * ATOMIC compare-and-activate + bind (CR#2 + the scope-A collapse). Under ONE
+ * flock: the exact pending/active record whose bearer digest matches
+ * `expectedPendingDigest` is stamped ACTIVE with the server metadata AND the
+ * worktree binding + display, in a single commit. A same-ref replacement or a
+ * missing record fails closed (`replaced`/`missing`) — server metadata for bearer
+ * A is never bound onto bearer B, and the digest guard holds even on the
+ * no-expectation-digest paths (the SENT bearer's digest is always pinned).
+ * Because `state:'active'` and `worktree` land together, ACTIVE-without-binding
+ * is unreachable by construction.
+ */
+export async function activateAndBindSeat(input) {
+    if (!UUID_RE.test(input.droneId) || !UUID_RE.test(input.sessionId)) {
+        throw new Error('invalid Borg server session identity');
+    }
+    if (typeof input.expiresAt !== 'string' || !Number.isFinite(Date.parse(input.expiresAt))) {
+        throw new Error('invalid Borg server session expiry');
+    }
+    const ref = seatRef(input);
+    const binding = { origin: input.origin, trustIdentity: input.trustIdentity, cubeId: input.cubeId };
+    return withStore(SEATS_FILE, emptyStore, parseStore, async (txn) => {
+        const record = txn.data.seats[ref];
+        if (!recordMatches(record, ref, binding))
+            return 'missing';
+        if (digestOf(record.credential) !== input.expectedPendingDigest)
+            return 'replaced';
+        txn.data.seats[ref] = {
+            ...record,
+            state: 'active',
+            droneId: input.droneId,
+            sessionId: input.sessionId,
+            expiresAt: input.expiresAt,
+            worktree: input.worktree,
+            name: input.name,
+            droneLabel: input.droneLabel,
+            ...(input.roleName !== undefined ? { roleName: input.roleName } : {}),
+            ...(input.roleClass !== undefined ? { roleClass: input.roleClass } : {}),
+            ...(input.isHumanSeat !== undefined ? { isHumanSeat: input.isHumanSeat } : {}),
+        };
+        await txn.commit();
+        return 'activated';
+    });
+}
+/**
+ * CR#2: bind an existing PENDING record to a worktree WITHOUT activating it. On a
+ * SIBLING attach whose atomic activate+bind failed, the spawned worktree is
+ * preserved for an operator-driven rerun (CR#5). This stamps the worktree locator +
+ * display (and, if known, the drone id) onto the EXACT digest-matched PENDING record
+ * so the rerun FROM that worktree can DISCOVER and RESUME it — re-sending the
+ * identical bearer the server already digest-bound, converging on the SAME seat (no
+ * ghost). The record STAYS `state:'pending'`: it is non-hydratable as a live seat
+ * (getActiveSeatForWorktree still requires state==='active'), so this introduces no
+ * ACTIVE-without-activation state. Under ONE store flock (CR#3), fail-closed (CR#4):
+ * a missing / already-ACTIVE / same-ref-replaced record is a typed no-op — never
+ * binds a worktree onto a different bearer, never mutates an ACTIVE record.
+ */
+export async function bindPendingSeatToWorktree(input) {
+    if (input.droneId !== undefined && !UUID_RE.test(input.droneId)) {
+        throw new Error('invalid Borg server session identity');
+    }
+    const ref = seatRef(input);
+    const binding = { origin: input.origin, trustIdentity: input.trustIdentity, cubeId: input.cubeId };
+    return withStore(SEATS_FILE, emptyStore, parseStore, async (txn) => {
+        const record = txn.data.seats[ref];
+        if (!recordMatches(record, ref, binding))
+            return 'missing';
+        // Never touch an ACTIVE record, and never bind a worktree onto a same-ref
+        // replacement — the record's live digest must still equal the sent bearer's.
+        if (record.state !== 'pending' || digestOf(record.credential) !== input.expectedPendingDigest) {
+            return 'replaced';
+        }
+        txn.data.seats[ref] = {
+            ...record,
+            // state STAYS 'pending' — NOT activated. Only the worktree locator + display
+            // (+ drone id) land, so the preserved worktree owns a discoverable, resumable
+            // pending record without becoming a live/hydratable binding.
+            worktree: input.worktree,
+            name: input.name,
+            droneLabel: input.droneLabel,
+            ...(input.droneId !== undefined ? { droneId: input.droneId } : {}),
+            ...(input.roleName !== undefined ? { roleName: input.roleName } : {}),
+            ...(input.roleClass !== undefined ? { roleClass: input.roleClass } : {}),
+            ...(input.isHumanSeat !== undefined ? { isHumanSeat: input.isHumanSeat } : {}),
+        };
+        await txn.commit();
+        return 'bound';
+    });
+}
+// ─── Hydration / enumeration (scan by worktree) ──────────────────────────────
+/** The exact ACTIVE seat bound to `worktree`, or null. A pending record (no
+ *  worktree, or non-active) is NEVER surfaced as a live binding. */
+export async function getActiveSeatForWorktree(worktree) {
+    const store = await readStore();
+    for (const [ref, record] of Object.entries(store.seats)) {
+        if (record.state === 'active' && record.worktree === worktree && seatRef(record) === ref) {
+            return record;
+        }
+    }
+    return null;
+}
+/**
+ * CR#2: the seat bound to `worktree` regardless of state — an ACTIVE seat OR a
+ * bound-PENDING record (a sibling whose activation failed, bound to its preserved
+ * worktree by `bindPendingSeatToWorktree`). Used ONLY by the resume path to recover
+ * a bound-pending record's stored `operation` + `state` so the rerun can re-derive
+ * the EXACT seat ref and re-send the identical bearer. A bound-pending record is
+ * still NON-hydratable as a live seat — `getActiveSeatForWorktree` (and hence
+ * `getActiveCube`) still require state==='active', so this reader does NOT weaken
+ * the no-ACTIVE-without-binding / non-hydratable-pending invariants.
+ */
+export async function getSeatForWorktree(worktree) {
+    const store = await readStore();
+    for (const [ref, record] of Object.entries(store.seats)) {
+        if (record.worktree === worktree && seatRef(record) === ref) {
+            return record;
+        }
+    }
+    return null;
+}
+/**
+ * CR#3: find an in-flight IMPLICIT-sibling attempt for `binding` — a PENDING,
+ * kind==='sibling' record whose operation.projectRoot is the source repo and which
+ * has NO worktree binding yet (unbound). Such a record is the persisted, collision-
+ * safe attempt identity left when a crash struck AFTER the server accepted the attach
+ * but BEFORE the worktree bind: its per-invocation-unique operationKey would otherwise
+ * be undiscoverable, so a rerun would mint a NEW bearer and the server (digest-
+ * correlating) would create a GHOST seat. Recovering it lets the rerun re-derive the
+ * EXACT ref and re-send the identical bearer (the server reuses its seat). A BOUND
+ * pending sibling (already discoverable by its worktree) and an ACTIVE record are NOT
+ * returned — so a COMPLETED sibling frees the source-repo key and the next distinct
+ * sibling mints a fresh identity. Deterministic first match.
+ */
+export async function findIncompleteSiblingAttempt(binding) {
+    const store = await readStore();
+    for (const [ref, record] of Object.entries(store.seats)) {
+        if (record.state === 'pending' &&
+            record.worktree === undefined &&
+            record.operation.kind === 'sibling' &&
+            record.origin === binding.origin &&
+            record.trustIdentity === binding.trustIdentity &&
+            record.cubeId === binding.cubeId &&
+            record.operation.projectRoot === binding.projectRoot &&
+            seatRef(record) === ref) {
+            return record;
+        }
+    }
+    return null;
+}
+/** True iff this worktree has ANY persisted seat record (active OR a bound
+ *  pending), so a crash-in-gap PENDING seat is discoverable (not mislabeled). */
+export async function hasSeatForWorktree(worktree) {
+    const store = await readStore();
+    return Object.values(store.seats).some((r) => r.worktree === worktree);
+}
+/** All ACTIVE bound seats — {worktree, record}. */
+export async function readAllActiveSeats() {
+    const store = await readStore();
+    const out = [];
+    for (const [ref, record] of Object.entries(store.seats)) {
+        if (record.state === 'active' && typeof record.worktree === 'string' && seatRef(record) === ref) {
+            out.push({ worktree: record.worktree, record });
+        }
+    }
+    return out;
+}
+/**
+ * Reset the seat bound to `worktree`: under ONE flock, re-check the exact FULL
+ * binding (ref + drone id) and the token-safe observation, then DELETE the whole
+ * record — credential AND binding vanish together in one commit (no 'partial',
+ * no cross-store skew). Any drift (missing / different ref or drone / same-ref
+ * digest replacement) is an honest no-op.
+ */
+export async function resetSeatForWorktree(expected) {
+    return withStore(SEATS_FILE, emptyStore, parseStore, async (txn) => {
+        const record = txn.data.seats[expected.ref];
+        if (record === undefined ||
+            record.worktree !== expected.worktree ||
+            record.droneId !== expected.droneId ||
+            seatRef(record) !== expected.ref) {
+            // Look for whether ANY record still binds this worktree — if not, no-op.
+            const anyBound = Object.values(txn.data.seats).some((r) => r.worktree === expected.worktree);
+            return anyBound ? { outcome: 'changed' } : { outcome: 'no-binding' };
+        }
+        // Same-ref replacement guard: the live digest must still match the snapshot.
+        const expDigest = expected.observation.state === 'absent' ? null : expected.observation.digest;
+        if (expDigest !== null && digestOf(record.credential) !== expDigest) {
+            return { outcome: 'changed' };
+        }
+        delete txn.data.seats[expected.ref];
+        await txn.commit();
+        return { outcome: 'reset', ref: expected.ref };
+    });
+}
+/** Abort-scrub of the caller's OWN pending record only (CR#2 finalize abort):
+ *  delete iff still pending AND digest matches — never an active record, never a
+ *  same-ref replacement. */
+export async function scrubPendingSeat(ref, binding, expectedPendingDigest) {
+    if (!REF_RE.test(ref))
+        return false;
+    return withStore(SEATS_FILE, emptyStore, parseStore, async (txn) => {
+        const record = txn.data.seats[ref];
+        if (!recordMatches(record, ref, binding) || record.state !== 'pending')
+            return false;
+        if (digestOf(record.credential) !== expectedPendingDigest)
+            return false;
+        delete txn.data.seats[ref];
+        await txn.commit();
+        return true;
+    });
+}
+/** Discard any record for one seat ref (eviction remint before a fresh mint). */
+export async function clearSeat(ref) {
+    if (!REF_RE.test(ref))
+        throw new Error('invalid Borg server session credential reference');
+    await withStore(SEATS_FILE, emptyStore, parseStore, async (txn) => {
+        if (txn.data.seats[ref] !== undefined) {
+            delete txn.data.seats[ref];
+            await txn.commit();
+        }
+    });
+}
+/** Metadata-only refresh of one exact ACTIVE seat. The expected tuple prevents
+ * a delayed response from updating a replacement seat that reused the worktree. */
+export async function refreshSeatMetadata(worktree, expected, display) {
+    if (!REF_RE.test(expected.credentialRef))
+        return false;
+    return withStore(SEATS_FILE, emptyStore, parseStore, async (txn) => {
+        const record = txn.data.seats[expected.credentialRef];
+        if (record?.state !== 'active' || record.worktree !== worktree ||
+            record.cubeId !== expected.cubeId || record.droneId !== expected.droneId ||
+            seatRef(record) !== expected.credentialRef)
+            return false;
+        txn.data.seats[expected.credentialRef] = {
+            ...record,
+            name: display.name,
+            droneLabel: display.droneLabel,
+            ...(display.roleName !== undefined ? { roleName: display.roleName } : {}),
+            ...(display.roleClass !== undefined ? { roleClass: display.roleClass } : {}),
+            ...(display.isHumanSeat !== undefined ? { isHumanSeat: display.isHumanSeat } : {}),
+        };
+        await txn.commit();
+        return true;
+    });
+}
+/** @internal Test-only: point the store at a fixture path is done via HOME; this
+ *  clears the module cache (there is none — every op reads fresh under the lock). */
+//# sourceMappingURL=seats.js.map

package/dist/seats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seats.js","sourceRoot":"","sources":["../src/seats.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE3D,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AACtF,MAAM,aAAa,GAAG,CAAU,CAAC;AACjC,MAAM,MAAM,GAAG,oCAAoC,CAAC;AACpD,MAAM,OAAO,GAAG,iEAAiE,CAAC;AAqClF,4FAA4F;AAC5F,MAAM,UAAU,OAAO,CAAC,KAMvB;IACC,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC;SACjC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;SACpB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC;SAC3B,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;SACpB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;SACpB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC;SACnC,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;SAC5B,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC;SACpC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,uBAAuB,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAClD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAErD,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,EAAE,GAAG,KAAgC,CAAC;IAC5C,OAAO,CACL,gBAAgB,CAAC,EAAE,CAAC,WAAW,CAAC;QAChC,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ;QAC3B,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;QAC5B,gBAAgB,CAAC,EAAE,CAAC,YAAY,CAAC,CAClC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,GAAW,EAAE,KAAc;IACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,qCAAqC;IACrC,IACE,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3B,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC;QAClC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3B,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3B,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9B,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,EAC/B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChE,yDAAyD;IACzD,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjF,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnH,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpF,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACzG,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/G,IACE,CAAC,CAAC,SAAS,KAAK,SAAS;QACzB,CAAC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAC9E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,iEAAiE;IACjE,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACzB,0EAA0E;QAC1E,IACE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAC7B,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;YAC/B,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;YAC/B,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAC9B,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YAC1B,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,EAChC,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;SAAM,CAAC;QACN,qEAAqE;QACrE,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;IAC3E,CAAC;IACD,2EAA2E;IAC3E,OAAO,OAAO,CAAC,KAAmB,CAAC,KAAK,GAAG,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,SAAS,GAAG,MAAgD,CAAC;QACnE,IACE,SAAS,CAAC,OAAO,KAAK,aAAa;YACnC,SAAS,CAAC,KAAK;YACf,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;YACnC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAC/B,CAAC;YACD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAgC,CAAC;YACzD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClD,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC;oBAAE,OAAO,IAAI,CAAC;YACnD,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,KAAmC,EAAE,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;IAC5C,6EAA6E;IAC7E,kFAAkF;IAClF,qEAAqE;IACrE,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,UAAU,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,yFAAyF;AACzF,SAAS,aAAa,CACpB,MAA8B,EAC9B,GAAW,EACX,OAAkE;IAElE,OAAO,CACL,MAAM,KAAK,SAAS;QACpB,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAChC,MAAM,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;QAC9C,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAChC,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC;QACzD,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CACxB,CAAC;AACJ,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,OAAkE;IAElE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACrE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACxG,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAW,EACX,OAAkE;IAElE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnF,OAAO,MAAM,CAAC,UAAU,CAAC;AAC3B,CAAC;AAED,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAOrC;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,SAAS,CAAwB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACxF,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YACrH,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAe;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,KAAK,EAAE,SAAS;SACjB,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QAC7B,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAmBD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAgBjC;IACC,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,IAAI,EAAE,eAAe,GAAG,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAC7E,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAChG,OAAO,SAAS,CAAgC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAChG,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,QAAiB,CAAC;YACtB,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,KAAK,GACT,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC;oBAClC,KAAK,CAAC,KAAK,KAAK,QAAQ;oBACxB,GAAG,KAAK,QAAQ,CAAC,aAAa;oBAC9B,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC;oBACtE,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,aAAa,CAAC,CAAC;gBAClG,QAAQ,GAAG,CAAC,KAAK,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,6EAA6E;gBAC7E,6EAA6E;gBAC7E,4CAA4C;gBAC5C,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;YAC5E,CAAC;YACD,IAAI,QAAQ;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,MAAM,EAAE,sBAA+B,EAAE,CAAC;QACvF,CAAC;QACD,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAC1C,6EAA6E;YAC7E,0EAA0E;YAC1E,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACjD,CAAC;QACD,MAAM,MAAM,GAAe;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,KAAK,EAAE,SAAS;SACjB,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QAC7B,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAiBD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAgBzC;IACC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACnG,OAAO,SAAS,CAAiC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACjG,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3D,IAAI,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,qBAAqB;YAAE,OAAO,UAAU,CAAC;QACnF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG;YACpB,GAAG,MAAM;YACT,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E,CAAC;QACF,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,WAAW,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC;AAMD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAc/C;IACC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACnG,OAAO,SAAS,CAAoC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACpG,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3D,0EAA0E;QAC1E,6EAA6E;QAC7E,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,qBAAqB,EAAE,CAAC;YAC9F,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG;YACpB,GAAG,MAAM;YACT,6EAA6E;YAC7E,8EAA8E;YAC9E,6DAA6D;YAC7D,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E,CAAC;QACF,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAEhF;oEACoE;AACpE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,QAAgB;IAC7D,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;YACzF,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IACvD,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5D,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,OAKlD;IACC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,IACE,MAAM,CAAC,KAAK,KAAK,SAAS;YAC1B,MAAM,CAAC,QAAQ,KAAK,SAAS;YAC7B,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;YACnC,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YAChC,MAAM,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;YAC9C,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YAChC,MAAM,CAAC,SAAS,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;YACpD,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,EACvB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;iFACiF;AACjF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IACvD,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;AACzE,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,GAAG,GAAoD,EAAE,CAAC;IAChE,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;YAChG,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAO1C;IACC,OAAO,SAAS,CAA8B,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC9F,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5C,IACE,MAAM,KAAK,SAAS;YACpB,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;YACrC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;YACnC,OAAO,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,GAAG,EAChC,CAAC;YACD,yEAAyE;YACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC7F,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAqB,EAAE,CAAC;QACzF,CAAC;QACD,6EAA6E;QAC7E,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC;QAC/F,IAAI,SAAS,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;YACpE,OAAO,EAAE,OAAO,EAAE,SAAkB,EAAE,CAAC;QACzC,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,OAAO,EAAE,OAAgB,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;4BAE4B;AAC5B,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAW,EACX,OAAkE,EAClE,qBAA6B;IAE7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,SAAS,CAAqB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACrF,IAAI,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,qBAAqB;YAAE,OAAO,KAAK,CAAC;QACxE,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW;IACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC3F,MAAM,SAAS,CAAkB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACjF,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;mFACmF;AACnF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,QAAoE,EACpE,OAAuH;IAEvH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,OAAO,SAAS,CAAqB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACtD,IAAI,MAAM,EAAE,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAC1D,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;YACxE,OAAO,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG;YACvC,GAAG,MAAM;YACT,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF,CAAC;QACF,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED;qFACqF"}

package/dist/self-path.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Resolve absolute paths to sibling bin executables from the running entrypoint.
+ *
+ * When borg-mcp is installed globally or repo-locally, MCP config registrations
+ * and orientation commands must use the exact binary from THIS installation, not
+ * a bare name resolved via PATH (which may point to a different version).
+ *
+ * `fileURLToPath(import.meta.url)` gives the realpath of the compiled JS file
+ * under `dist/`. All bin targets are siblings in the same `dist/` directory.
+ */
+/**
+ * Absolute path to a sibling bin file in dist/.
+ * Returns the path even if the file does not yet exist (caller decides whether
+ * to fail) so callers that write config can store the path before build.
+ */
+export declare function resolveSelfBinPath(binName: string): string;
+/** Absolute path to the borg-mcp stdio server entrypoint (dist/index.js). */
+export declare function resolveMcpBinaryPath(): string;
+/** Absolute path to borg-regen (dist/regen.js). */
+export declare function resolveRegenPath(): string;
+/** Absolute path to borg-inbox-monitor (dist/inbox-monitor.js). */
+export declare function resolveInboxMonitorPath(): string;
+/** Absolute path to borg-clear-rewake (dist/clear-rewake.js). */
+export declare function resolveClearRewakePath(): string;
+/** Absolute path to borg-log-audit (dist/log-audit.js). */
+export declare function resolveLogAuditPath(): string;
+//# sourceMappingURL=self-path.d.ts.map

package/dist/self-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-path.d.ts","sourceRoot":"","sources":["../src/self-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,mDAAmD;AACnD,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,mEAAmE;AACnE,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD;AAED,iEAAiE;AACjE,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAED,2DAA2D;AAC3D,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C"}

package/dist/self-path.js

@@ -0,0 +1,43 @@
+/**
+ * Resolve absolute paths to sibling bin executables from the running entrypoint.
+ *
+ * When borg-mcp is installed globally or repo-locally, MCP config registrations
+ * and orientation commands must use the exact binary from THIS installation, not
+ * a bare name resolved via PATH (which may point to a different version).
+ *
+ * `fileURLToPath(import.meta.url)` gives the realpath of the compiled JS file
+ * under `dist/`. All bin targets are siblings in the same `dist/` directory.
+ */
+import path from 'path';
+import { fileURLToPath } from 'url';
+const DIST_DIR = path.dirname(fileURLToPath(import.meta.url));
+/**
+ * Absolute path to a sibling bin file in dist/.
+ * Returns the path even if the file does not yet exist (caller decides whether
+ * to fail) so callers that write config can store the path before build.
+ */
+export function resolveSelfBinPath(binName) {
+    const binPath = path.join(DIST_DIR, binName);
+    return binPath;
+}
+/** Absolute path to the borg-mcp stdio server entrypoint (dist/index.js). */
+export function resolveMcpBinaryPath() {
+    return resolveSelfBinPath('index.js');
+}
+/** Absolute path to borg-regen (dist/regen.js). */
+export function resolveRegenPath() {
+    return resolveSelfBinPath('regen.js');
+}
+/** Absolute path to borg-inbox-monitor (dist/inbox-monitor.js). */
+export function resolveInboxMonitorPath() {
+    return resolveSelfBinPath('inbox-monitor.js');
+}
+/** Absolute path to borg-clear-rewake (dist/clear-rewake.js). */
+export function resolveClearRewakePath() {
+    return resolveSelfBinPath('clear-rewake.js');
+}
+/** Absolute path to borg-log-audit (dist/log-audit.js). */
+export function resolveLogAuditPath() {
+    return resolveSelfBinPath('log-audit.js');
+}
+//# sourceMappingURL=self-path.js.map

package/dist/self-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-path.js","sourceRoot":"","sources":["../src/self-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE9D;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB;IAClC,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAC;AACxC,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAC;AACxC,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,uBAAuB;IACrC,OAAO,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;AAChD,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,sBAAsB;IACpC,OAAO,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;AAC/C,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,mBAAmB;IACjC,OAAO,kBAAkB,CAAC,cAAc,CAAC,CAAC;AAC5C,CAAC"}