canopycms 0.0.55 → 0.0.57

package/dist/branch-metadata.d.ts

@@ -7,12 +7,40 @@ export interface BranchMetadataFile {
     branch: BranchMetadata;
 }
 export declare class BranchMetadataConflictError extends Error {
-    constructor();
+    constructor(message?: string);
 }
+/**
+ * Manages branch.json — branch status and access ACLs, both security-adjacent
+ * state — under `.canopy-meta/` in a branch workspace.
+ *
+ * save() is protected by three layers, outermost to innermost (identical
+ * structure to {@link CommentStore}'s withMutation, see comment-store.ts):
+ *
+ * 1. {@link withLock} - an in-process FIFO mutex keyed by the resolved file
+ *    path. Serializes concurrent mutators on the SAME process/host
+ *    deterministically.
+ * 2. {@link withOccFileLock} - a server-enforced, cross-process/cross-host
+ *    lock (proper-lockfile, mkdir-based). This is the actual fix for lost
+ *    branch-status/ACL updates across two warm Lambda containers (or a
+ *    Lambda + the EC2 worker) on EFS: rename-based OCC verification alone
+ *    relies on a read-back that can be served from the writer's own local
+ *    NFS dentry/attribute cache, so a foreign writer's rename can stay
+ *    invisible for that cache's window (commonly 3-60s) and both writers
+ *    conclude they won. A settle delay does not help — the cache window
+ *    dwarfs any sleep worth paying — only server-enforced mutual exclusion
+ *    does. Given branch.json carries status + ACLs, silently losing an
+ *    update here is a correctness/security issue, not just a UX glitch.
+ * 3. {@link withOccRetry} around {@link writeOccJsonFile} - version/writeId
+ *    based optimistic concurrency control. With layers 1-2 in place this is
+ *    now a defense-in-depth backstop only, not the primary safety mechanism.
+ *
+ * See `utils/occ-json-write.ts` for full guarantee documentation of layers 2-3.
+ */
 export declare class BranchMetadataFileManager {
     private readonly branchRoot;
     private readonly filePath;
     private readonly baseRoot;
+    private readonly settleMs;
     private constructor();
     /**
      * Load branch metadata without requiring baseRoot.
@@ -23,14 +51,49 @@ export declare class BranchMetadataFileManager {
      * Get a BranchMetadataFileManager instance configured for registry invalidation.
      * Use this in API handlers to ensure registry cache is invalidated on updates.
      */
-    static get(branchRoot: string, baseRoot: string): BranchMetadataFileManager;
+    static get(branchRoot: string, baseRoot: string, options?: {
+        settleMs?: number;
+    }): BranchMetadataFileManager;
     private load;
     /**
-     * Atomic write using temp-file + rename + post-write verification.
-     * Follows the same pattern as CommentStore for EFS/NFS safety.
+     * Write branch.json via the shared OCC helper, with the schemaVersion
+     * default applied here (payload shaping stays branch-metadata's concern).
+     *
+     * Throws the helper's raw {@link OccWriteConflictError} so the surrounding
+     * {@link withOccRetry} in save() recognizes and retries it; translation to
+     * the public `BranchMetadataConflictError` contract happens at the save()
+     * boundary, after retries are exhausted (translating earlier would make
+     * withOccRetry's default predicate miss it, since it only recognizes the
+     * raw error type).
+     *
+     * branch-metadata historically writes WITH a trailing newline, unlike
+     * comment-store; `trailingNewline: true` preserves that.
      */
     private write;
-    private withRetry;
+    /**
+     * Run a save cycle under the full lock + OCC-retry stack described in the
+     * class doc comment. A conflict that survives every retry surfaces as the
+     * public `BranchMetadataConflictError`.
+     *
+     * Guards against a phantom-resurrection race with branch deletion: a
+     * caller's branchContext can be resolved BEFORE a concurrent
+     * deleteBranchHandler removes the branch directory, but this save() call
+     * only reaches here (and its own mkdir({recursive:true}) inside write())
+     * AFTER the removal. Without this check, that mkdir would silently
+     * recreate `.canopy-meta/` (and this save would recreate branch.json from
+     * defaults) inside a directory tree that no longer exists anywhere else --
+     * a registry entry with no clone behind it. Checking BEFORE the lock stack
+     * (rather than after) fails fast without paying for a lock acquisition on
+     * a doomed save.
+     *
+     * Residual window (accepted): a save that passes this check can still
+     * race a `rm` that starts moments later and is still mid-flight when this
+     * save's write lands, resurrecting the tree. Closing that fully would
+     * need a tombstone OUTSIDE the tree being removed -- the lockfile
+     * (`withOccFileLock`) this save takes next lives INSIDE `branchRoot`, so
+     * it cannot itself provide a wider guarantee than "the directory existed
+     * a moment ago."
+     */
     save(incoming: BranchMetadataUpdate): Promise<BranchMetadataFile>;
     /**
      * Invalidates the registry cache so next list() call regenerates from branch.json files.
@@ -49,7 +112,9 @@ export interface BranchMetadataUpdate {
  * Get a BranchMetadataFileManager instance configured for registry invalidation.
  * Use this in API handlers to ensure registry cache is invalidated on updates.
  */
-export declare const getBranchMetadataFileManager: (branchRoot: string, baseRoot: string) => BranchMetadataFileManager;
+export declare const getBranchMetadataFileManager: (branchRoot: string, baseRoot: string, options?: {
+    settleMs?: number;
+}) => BranchMetadataFileManager;
 /**
  * Load branch context from metadata file (source of truth).
  * Returns null if the branch doesn't exist.

package/dist/branch-metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"branch-metadata.d.ts","sourceRoot":"","sources":["../src/branch-metadata.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAgB,MAAM,SAAS,CAAA;AAG1E,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAOrD,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,cAAc,CAAA;CACvB;AAID,qBAAa,2BAA4B,SAAQ,KAAK;;CAKrD;AAED,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IAEjC,OAAO;IAMP;;;OAGG;WACU,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAa7E;;;OAGG;IACH,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,yBAAyB;YAI7D,IAAI;IAclB;;;OAGG;YACW,KAAK;YA8EL,SAAS;IAiBjB,IAAI,CAAC,QAAQ,EAAE,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA2CvE;;OAEG;YACW,kBAAkB;CAIjC;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,WAAW,CAAC,CAAC,CAAA;CAClE;AAED;;;GAGG;AACH,eAAO,MAAM,4BAA4B,GACvC,YAAY,MAAM,EAClB,UAAU,MAAM,KACf,yBAEF,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,GAAU,SAAS;IAC/C,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,aAAa,CAAA;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B,KAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAiB/B,CAAA"}
+{"version":3,"file":"branch-metadata.d.ts","sourceRoot":"","sources":["../src/branch-metadata.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAgB,MAAM,SAAS,CAAA;AAG1E,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAarD,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,cAAc,CAAA;CACvB;AAID,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,OAAO,SAAwD;CAI5E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoB;IAE7C,OAAO;IAOP;;;OAGG;WACU,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAa7E;;;OAGG;IACH,MAAM,CAAC,GAAG,CACR,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9B,yBAAyB;YAId,IAAI;IAclB;;;;;;;;;;;;;OAaG;YACW,KAAK;IAenB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,IAAI,CAAC,QAAQ,EAAE,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAoEvE;;OAEG;YACW,kBAAkB;CAIjC;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,WAAW,CAAC,CAAC,CAAA;CAClE;AAED;;;GAGG;AACH,eAAO,MAAM,4BAA4B,GACvC,YAAY,MAAM,EAClB,UAAU,MAAM,EAChB,UAAU;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,KAC9B,yBAEF,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,GAAU,SAAS;IAC/C,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,aAAa,CAAA;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B,KAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAiB/B,CAAA"}

package/dist/branch-metadata.js

@@ -1,24 +1,52 @@
-import { randomUUID } from 'node:crypto';
 import fs from 'node:fs/promises';
 import path from 'node:path';
 import { BranchRegistry } from './branch-registry.js';
 import { resolveBranchPath } from './paths/index.js';
-import { isFileExistsError, isNotFoundError } from './utils/error.js';
+import { isNotFoundError } from './utils/error.js';
 import { withLock } from './utils/async-mutex.js';
+import { writeOccJsonFile, withOccRetry, withOccFileLock, OccWriteConflictError, } from './utils/occ-json-write.js';
 const BRANCH_META_DIR = '.canopy-meta';
 const BRANCH_META_FILE = 'branch.json';
 const CURRENT_SCHEMA_VERSION = 1;
 export class BranchMetadataConflictError extends Error {
-    constructor() {
-        super('Concurrent modification detected in branch metadata');
+    constructor(message = 'Concurrent modification detected in branch metadata') {
+        super(message);
         this.name = 'BranchMetadataConflictError';
     }
 }
+/**
+ * Manages branch.json — branch status and access ACLs, both security-adjacent
+ * state — under `.canopy-meta/` in a branch workspace.
+ *
+ * save() is protected by three layers, outermost to innermost (identical
+ * structure to {@link CommentStore}'s withMutation, see comment-store.ts):
+ *
+ * 1. {@link withLock} - an in-process FIFO mutex keyed by the resolved file
+ *    path. Serializes concurrent mutators on the SAME process/host
+ *    deterministically.
+ * 2. {@link withOccFileLock} - a server-enforced, cross-process/cross-host
+ *    lock (proper-lockfile, mkdir-based). This is the actual fix for lost
+ *    branch-status/ACL updates across two warm Lambda containers (or a
+ *    Lambda + the EC2 worker) on EFS: rename-based OCC verification alone
+ *    relies on a read-back that can be served from the writer's own local
+ *    NFS dentry/attribute cache, so a foreign writer's rename can stay
+ *    invisible for that cache's window (commonly 3-60s) and both writers
+ *    conclude they won. A settle delay does not help — the cache window
+ *    dwarfs any sleep worth paying — only server-enforced mutual exclusion
+ *    does. Given branch.json carries status + ACLs, silently losing an
+ *    update here is a correctness/security issue, not just a UX glitch.
+ * 3. {@link withOccRetry} around {@link writeOccJsonFile} - version/writeId
+ *    based optimistic concurrency control. With layers 1-2 in place this is
+ *    now a defense-in-depth backstop only, not the primary safety mechanism.
+ *
+ * See `utils/occ-json-write.ts` for full guarantee documentation of layers 2-3.
+ */
 export class BranchMetadataFileManager {
-    constructor(branchRoot, baseRoot) {
+    constructor(branchRoot, baseRoot, options) {
         this.branchRoot = path.resolve(branchRoot);
         this.filePath = path.join(this.branchRoot, BRANCH_META_DIR, BRANCH_META_FILE);
         this.baseRoot = baseRoot;
+        this.settleMs = options?.settleMs;
     }
     /**
      * Load branch metadata without requiring baseRoot.
@@ -41,8 +69,8 @@ export class BranchMetadataFileManager {
      * Get a BranchMetadataFileManager instance configured for registry invalidation.
      * Use this in API handlers to ensure registry cache is invalidated on updates.
      */
-    static get(branchRoot, baseRoot) {
-        return new BranchMetadataFileManager(branchRoot, baseRoot);
+    static get(branchRoot, baseRoot, options) {
+        return new BranchMetadataFileManager(branchRoot, baseRoot, options);
     }
     async load() {
         try {
@@ -59,126 +87,114 @@ export class BranchMetadataFileManager {
         }
     }
     /**
-     * Atomic write using temp-file + rename + post-write verification.
-     * Follows the same pattern as CommentStore for EFS/NFS safety.
+     * Write branch.json via the shared OCC helper, with the schemaVersion
+     * default applied here (payload shaping stays branch-metadata's concern).
+     *
+     * Throws the helper's raw {@link OccWriteConflictError} so the surrounding
+     * {@link withOccRetry} in save() recognizes and retries it; translation to
+     * the public `BranchMetadataConflictError` contract happens at the save()
+     * boundary, after retries are exhausted (translating earlier would make
+     * withOccRetry's default predicate miss it, since it only recognizes the
+     * raw error type).
+     *
+     * branch-metadata historically writes WITH a trailing newline, unlike
+     * comment-store; `trailingNewline: true` preserves that.
      */
     async write(meta, expectedVersion) {
-        const newVersion = expectedVersion === null ? 1 : expectedVersion + 1;
-        const writeId = randomUUID();
         const payload = {
             ...meta,
             schemaVersion: meta.schemaVersion ?? CURRENT_SCHEMA_VERSION,
-            version: newVersion,
-            writeId,
         };
-        await fs.mkdir(path.dirname(this.filePath), { recursive: true });
-        const content = JSON.stringify(payload, null, 2) + '\n';
-        if (expectedVersion === null) {
-            // New file: use temp-file + rename for atomicity, then link(target) to detect EEXIST races.
-            // Plain writeFile({flag:'wx'}) is not atomic — a crash mid-write leaves a partial file
-            // that makes JSON.parse fail on next startup, permanently breaking the branch.
-            const tempPath = `${this.filePath}.${Date.now()}.${Math.random().toString(36).slice(2)}.tmp`;
-            await fs.writeFile(tempPath, content, 'utf-8');
-            try {
-                // link() is atomic and fails with EEXIST if the target already exists,
-                // giving us the same exclusive-create semantics as wx without the atomicity risk.
-                await fs.link(tempPath, this.filePath);
-            }
-            catch (err) {
-                await fs.unlink(tempPath).catch(() => { });
-                if (isFileExistsError(err)) {
-                    throw new BranchMetadataConflictError();
-                }
-                throw err;
-            }
-            await fs.unlink(tempPath).catch(() => { });
-            return { version: newVersion, writeId };
-        }
-        // Existing file: temp write + atomic rename + verification
-        const tempPath = `${this.filePath}.${Date.now()}.${Math.random().toString(36).slice(2)}.tmp`;
-        await fs.writeFile(tempPath, content, 'utf-8');
+        return writeOccJsonFile(this.filePath, payload, {
+            expectedVersion,
+            settleMs: this.settleMs,
+            trailingNewline: true,
+        });
+    }
+    /**
+     * Run a save cycle under the full lock + OCC-retry stack described in the
+     * class doc comment. A conflict that survives every retry surfaces as the
+     * public `BranchMetadataConflictError`.
+     *
+     * Guards against a phantom-resurrection race with branch deletion: a
+     * caller's branchContext can be resolved BEFORE a concurrent
+     * deleteBranchHandler removes the branch directory, but this save() call
+     * only reaches here (and its own mkdir({recursive:true}) inside write())
+     * AFTER the removal. Without this check, that mkdir would silently
+     * recreate `.canopy-meta/` (and this save would recreate branch.json from
+     * defaults) inside a directory tree that no longer exists anywhere else --
+     * a registry entry with no clone behind it. Checking BEFORE the lock stack
+     * (rather than after) fails fast without paying for a lock acquisition on
+     * a doomed save.
+     *
+     * Residual window (accepted): a save that passes this check can still
+     * race a `rm` that starts moments later and is still mid-flight when this
+     * save's write lands, resurrecting the tree. Closing that fully would
+     * need a tombstone OUTSIDE the tree being removed -- the lockfile
+     * (`withOccFileLock`) this save takes next lives INSIDE `branchRoot`, so
+     * it cannot itself provide a wider guarantee than "the directory existed
+     * a moment ago."
+     */
+    async save(incoming) {
         try {
-            // Fast-fail optimization: check version before rename to avoid unnecessary
-            // rename + verify cycle. Not a correctness guarantee — the post-write
-            // writeId verification below is what actually detects cross-process races.
-            let currentVersion = null;
-            try {
-                const current = JSON.parse(await fs.readFile(this.filePath, 'utf-8'));
-                currentVersion = current.version ?? 0;
-            }
-            catch {
-                currentVersion = null;
-            }
-            if (currentVersion !== expectedVersion) {
-                throw new BranchMetadataConflictError();
-            }
-            // Atomic rename
-            await fs.rename(tempPath, this.filePath);
-            // Post-write verification: confirm our write landed (catches cross-process races)
-            const afterWrite = JSON.parse(await fs.readFile(this.filePath, 'utf-8'));
-            if (afterWrite.writeId !== writeId) {
-                throw new BranchMetadataConflictError();
-            }
+            await fs.stat(this.branchRoot);
         }
         catch (err) {
-            await fs.unlink(tempPath).catch(() => { });
+            if (isNotFoundError(err)) {
+                throw new BranchMetadataConflictError('Branch no longer exists');
+            }
             throw err;
         }
-        return { version: newVersion, writeId };
-    }
-    async withRetry(operation, maxAttempts = 5) {
-        for (let attempt = 1; attempt <= maxAttempts; attempt++) {
-            try {
-                return await operation();
-            }
-            catch (err) {
-                if (err instanceof BranchMetadataConflictError && attempt < maxAttempts) {
-                    const baseDelay = Math.min(10 * Math.pow(2, attempt - 1), 100);
-                    const jitter = Math.random() * baseDelay;
-                    await new Promise((resolve) => setTimeout(resolve, baseDelay + jitter));
-                    continue;
-                }
-                throw err;
+        let saved;
+        try {
+            saved = await withLock(this.filePath, () => withOccFileLock(this.filePath, () => withOccRetry(async () => {
+                const { meta: existing, version } = await this.load();
+                const now = new Date().toISOString();
+                const defaults = {
+                    name: 'unknown',
+                    status: 'editing',
+                    access: {},
+                    createdBy: 'unknown',
+                    createdAt: now,
+                    updatedAt: now,
+                };
+                const merged = {
+                    schemaVersion: CURRENT_SCHEMA_VERSION,
+                    version: version ?? 0,
+                    branch: {
+                        ...defaults,
+                        ...existing?.branch,
+                        ...incoming.branch,
+                        access: {
+                            ...existing?.branch?.access,
+                            ...incoming.branch?.access,
+                        },
+                        // Immutable after creation
+                        createdBy: existing?.branch.createdBy ?? incoming.branch?.createdBy ?? defaults.createdBy,
+                        createdAt: existing?.branch.createdAt ?? defaults.createdAt,
+                        // Fork point is recorded once at creation; later saves must not move it
+                        baseBranch: existing?.branch.baseBranch ?? incoming.branch?.baseBranch,
+                    },
+                };
+                const written = await this.write(merged, version);
+                merged.version = written.version;
+                merged.writeId = written.writeId;
+                return merged;
+            })));
+        }
+        catch (err) {
+            if (err instanceof OccWriteConflictError) {
+                throw new BranchMetadataConflictError();
             }
+            throw err;
         }
-        throw new Error('Unreachable');
-    }
-    async save(incoming) {
-        return withLock(this.filePath, () => this.withRetry(async () => {
-            const { meta: existing, version } = await this.load();
-            const now = new Date().toISOString();
-            const defaults = {
-                name: 'unknown',
-                status: 'editing',
-                access: {},
-                createdBy: 'unknown',
-                createdAt: now,
-                updatedAt: now,
-            };
-            const merged = {
-                schemaVersion: CURRENT_SCHEMA_VERSION,
-                version: version ?? 0,
-                branch: {
-                    ...defaults,
-                    ...existing?.branch,
-                    ...incoming.branch,
-                    access: {
-                        ...existing?.branch?.access,
-                        ...incoming.branch?.access,
-                    },
-                    // Immutable after creation
-                    createdBy: existing?.branch.createdBy ?? incoming.branch?.createdBy ?? defaults.createdBy,
-                    createdAt: existing?.branch.createdAt ?? defaults.createdAt,
-                    // Fork point is recorded once at creation; later saves must not move it
-                    baseBranch: existing?.branch.baseBranch ?? incoming.branch?.baseBranch,
-                },
-            };
-            const written = await this.write(merged, version);
-            merged.version = written.version;
-            merged.writeId = written.writeId;
-            await this.invalidateRegistry();
-            return merged;
-        }));
+        // Registry invalidation AFTER releasing the lockfile: the protocol only
+        // requires the bump to land strictly after the branch.json write (it
+        // does), and the registry's eager regeneration is O(branch count) fs
+        // reads on EFS — holding the server-enforced lock through it would
+        // extend every save's critical section for no correctness gain.
+        await this.invalidateRegistry();
+        return saved;
     }
     /**
      * Invalidates the registry cache so next list() call regenerates from branch.json files.
@@ -192,8 +208,8 @@ export class BranchMetadataFileManager {
  * Get a BranchMetadataFileManager instance configured for registry invalidation.
  * Use this in API handlers to ensure registry cache is invalidated on updates.
  */
-export const getBranchMetadataFileManager = (branchRoot, baseRoot) => {
-    return BranchMetadataFileManager.get(branchRoot, baseRoot);
+export const getBranchMetadataFileManager = (branchRoot, baseRoot, options) => {
+    return BranchMetadataFileManager.get(branchRoot, baseRoot, options);
 };
 /**
  * Load branch context from metadata file (source of truth).

package/dist/branch-metadata.js.map

@@ -1 +1 @@
-{"version":3,"file":"branch-metadata.js","sourceRoot":"","sources":["../src/branch-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACjC,OAAO,IAAI,MAAM,WAAW,CAAA;AAG5B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAE3C,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAE9C,MAAM,eAAe,GAAG,cAAc,CAAA;AACtC,MAAM,gBAAgB,GAAG,aAAa,CAAA;AAStC,MAAM,sBAAsB,GAAG,CAAC,CAAA;AAEhC,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD;QACE,KAAK,CAAC,qDAAqD,CAAC,CAAA;QAC5D,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAA;IAC3C,CAAC;CACF;AAED,MAAM,OAAO,yBAAyB;IAKpC,YAAoB,UAAkB,EAAE,QAAgB;QACtD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAA;QAC7E,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAC1B,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAkB;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAA;QACvF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAA;QAC9C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,GAAG,CAAC,UAAkB,EAAE,QAAgB;QAC7C,OAAO,IAAI,yBAAyB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IAC5D,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAA;YACpD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAA;YACnC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QAClC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;YACtC,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,KAAK,CACjB,IAAwB,EACxB,eAA8B;QAE9B,MAAM,UAAU,GAAG,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,GAAG,CAAC,CAAA;QACrE,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;QAC5B,MAAM,OAAO,GAAG;YACd,GAAG,IAAI;YACP,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,sBAAsB;YAC3D,OAAO,EAAE,UAAU;YACnB,OAAO;SACR,CAAA;QAED,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAEhE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAA;QAEvD,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC7B,4FAA4F;YAC5F,uFAAuF;YACvF,+EAA+E;YAC/E,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;YAC5F,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;YAC9C,IAAI,CAAC;gBACH,uEAAuE;gBACvE,kFAAkF;gBAClF,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;YACxC,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBACzC,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3B,MAAM,IAAI,2BAA2B,EAAE,CAAA;gBACzC,CAAC;gBACD,MAAM,GAAG,CAAA;YACX,CAAC;YACD,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACzC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;QACzC,CAAC;QAED,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;QAC5F,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QAE9C,IAAI,CAAC;YACH,2EAA2E;YAC3E,sEAAsE;YACtE,2EAA2E;YAC3E,IAAI,cAAc,GAAkB,IAAI,CAAA;YACxC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAEnE,CAAA;gBACD,cAAc,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAA;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,GAAG,IAAI,CAAA;YACvB,CAAC;YAED,IAAI,cAAc,KAAK,eAAe,EAAE,CAAC;gBACvC,MAAM,IAAI,2BAA2B,EAAE,CAAA;YACzC,CAAC;YAED,gBAAgB;YAChB,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;YAExC,kFAAkF;YAClF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAEtE,CAAA;YACD,IAAI,UAAU,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBACnC,MAAM,IAAI,2BAA2B,EAAE,CAAA;YACzC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACzC,MAAM,GAAG,CAAA;QACX,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;IACzC,CAAC;IAEO,KAAK,CAAC,SAAS,CAAI,SAA2B,EAAE,WAAW,GAAG,CAAC;QACrE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACxD,IAAI,CAAC;gBACH,OAAO,MAAM,SAAS,EAAE,CAAA;YAC1B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,2BAA2B,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;oBACxE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;oBAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,CAAA;oBACxC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAAC,CAAC,CAAA;oBACvE,SAAQ;gBACV,CAAC;gBACD,MAAM,GAAG,CAAA;YACX,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAA8B;QACvC,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAClC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YACxB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;YACrD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YAEpC,MAAM,QAAQ,GAAmB;gBAC/B,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,SAAyB;gBACjC,MAAM,EAAE,EAAE;gBACV,SAAS,EAAE,SAAS;gBACpB,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAA;YAED,MAAM,MAAM,GAAuB;gBACjC,aAAa,EAAE,sBAAsB;gBACrC,OAAO,EAAE,OAAO,IAAI,CAAC;gBACrB,MAAM,EAAE;oBACN,GAAG,QAAQ;oBACX,GAAG,QAAQ,EAAE,MAAM;oBACnB,GAAG,QAAQ,CAAC,MAAM;oBAClB,MAAM,EAAE;wBACN,GAAG,QAAQ,EAAE,MAAM,EAAE,MAAM;wBAC3B,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM;qBAC3B;oBACD,2BAA2B;oBAC3B,SAAS,EACP,QAAQ,EAAE,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,MAAM,EAAE,SAAS,IAAI,QAAQ,CAAC,SAAS;oBAChF,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;oBAC3D,wEAAwE;oBACxE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM,EAAE,UAAU;iBACvE;aACF,CAAA;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YACjD,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;YAChC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;YAChC,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAA;YAC/B,OAAO,MAAM,CAAA;QACf,CAAC,CAAC,CACH,CAAA;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB;QAC9B,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAClD,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAA;IAC7B,CAAC;CACF;AAWD;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,UAAkB,EAClB,QAAgB,EACW,EAAE;IAC7B,OAAO,yBAAyB,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;AAC5D,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EAAE,OAIvC,EAAiC,EAAE;IAClC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAC;QACjD,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;KAC3C,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IACjE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU;QACV,QAAQ;KACT,CAAA;AACH,CAAC,CAAA"}
+{"version":3,"file":"branch-metadata.js","sourceRoot":"","sources":["../src/branch-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACjC,OAAO,IAAI,MAAM,WAAW,CAAA;AAG5B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAC9C,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,eAAe,EACf,qBAAqB,GACtB,MAAM,wBAAwB,CAAA;AAE/B,MAAM,eAAe,GAAG,cAAc,CAAA;AACtC,MAAM,gBAAgB,GAAG,aAAa,CAAA;AAStC,MAAM,sBAAsB,GAAG,CAAC,CAAA;AAEhC,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,OAAO,GAAG,qDAAqD;QACzE,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAA;IAC3C,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,OAAO,yBAAyB;IAMpC,YAAoB,UAAkB,EAAE,QAAgB,EAAE,OAA+B;QACvF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAA;QAC7E,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,CAAA;IACnC,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAkB;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAA;QACvF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAA;QAC9C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,GAAG,CACR,UAAkB,EAClB,QAAgB,EAChB,OAA+B;QAE/B,OAAO,IAAI,yBAAyB,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IACrE,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAA;YACpD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAA;YACnC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QAClC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;YACtC,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,KAAK,CAAC,KAAK,CACjB,IAAwB,EACxB,eAA8B;QAE9B,MAAM,OAAO,GAAG;YACd,GAAG,IAAI;YACP,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,sBAAsB;SAC5D,CAAA;QACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE;YAC9C,eAAe;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,eAAe,EAAE,IAAI;SACtB,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,KAAK,CAAC,IAAI,CAAC,QAA8B;QACvC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAChC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,2BAA2B,CAAC,yBAAyB,CAAC,CAAA;YAClE,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;QAED,IAAI,KAAyB,CAAA;QAC7B,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CACzC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAClC,YAAY,CAAC,KAAK,IAAI,EAAE;gBACtB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;gBACrD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;gBAEpC,MAAM,QAAQ,GAAmB;oBAC/B,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE,SAAyB;oBACjC,MAAM,EAAE,EAAE;oBACV,SAAS,EAAE,SAAS;oBACpB,SAAS,EAAE,GAAG;oBACd,SAAS,EAAE,GAAG;iBACf,CAAA;gBAED,MAAM,MAAM,GAAuB;oBACjC,aAAa,EAAE,sBAAsB;oBACrC,OAAO,EAAE,OAAO,IAAI,CAAC;oBACrB,MAAM,EAAE;wBACN,GAAG,QAAQ;wBACX,GAAG,QAAQ,EAAE,MAAM;wBACnB,GAAG,QAAQ,CAAC,MAAM;wBAClB,MAAM,EAAE;4BACN,GAAG,QAAQ,EAAE,MAAM,EAAE,MAAM;4BAC3B,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM;yBAC3B;wBACD,2BAA2B;wBAC3B,SAAS,EACP,QAAQ,EAAE,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,MAAM,EAAE,SAAS,IAAI,QAAQ,CAAC,SAAS;wBAChF,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;wBAC3D,wEAAwE;wBACxE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM,EAAE,UAAU;qBACvE;iBACF,CAAA;gBACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;gBACjD,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;gBAChC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;gBAChC,OAAO,MAAM,CAAA;YACf,CAAC,CAAC,CACH,CACF,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;gBACzC,MAAM,IAAI,2BAA2B,EAAE,CAAA;YACzC,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;QACD,wEAAwE;QACxE,qEAAqE;QACrE,qEAAqE;QACrE,mEAAmE;QACnE,gEAAgE;QAChE,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAA;QAC/B,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB;QAC9B,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAClD,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAA;IAC7B,CAAC;CACF;AAWD;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,UAAkB,EAClB,QAAgB,EAChB,OAA+B,EACJ,EAAE;IAC7B,OAAO,yBAAyB,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;AACrE,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EAAE,OAIvC,EAAiC,EAAE;IAClC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAC;QACjD,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;KAC3C,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IACjE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU;QACV,QAAQ;KACT,CAAA;AACH,CAAC,CAAA"}

package/dist/branch-registry.d.ts

@@ -2,43 +2,112 @@ import type { BranchContext } from './types';
 export interface BranchRegistrySnapshot {
     version: number;
     branches: BranchContext[];
+    /**
+     * The resource-generation.ts marker token this snapshot was built against, or
+     * null if it was built before any bump ever occurred on this root. Compared
+     * against the live marker (via isGenerationCurrent) to decide freshness.
+     */
+    generation: string | null;
 }
 /**
  * BranchRegistry is a read-only cache for fast branch listing.
  * Individual branch.json files are the source of truth.
  *
+ * ## Cross-process freshness (resource-generation.ts marker protocol)
+ *
+ * Several warm Lambda containers plus the EC2 worker can share one branch-clone
+ * root over EFS, each with its own in-process cache of `branches.json`. There is
+ * no shared memory and no cross-host file watching, so freshness is coordinated
+ * via the generic on-disk generation marker in resource-generation.ts: every
+ * snapshot embeds the marker token it was built against, and every read
+ * cheaply re-checks the live marker before trusting the cached snapshot. See
+ * that module's doc comment for the full protocol and residual staleness
+ * windows (A/B/C/E).
+ *
+ * BranchRegistry is exactly the "durable snapshot consumer" case called out
+ * there: a regeneration whose scan is served from stale NFS dentry/attribute
+ * caches can record a FRESH token over STALE data (window E), and because the
+ * result is written to `branches.json`, that staleness becomes durable and
+ * shared with every other host that reads the marker - not just one process's
+ * memory. Two mitigations close the practical gap:
+ *
+ * - invalidate() eager-regenerates immediately after its own bump. The
+ *   mutating host's own scan is necessarily coherent with the mutation it just
+ *   made (no NFS round trip was needed to observe its own write), so this
+ *   closes window (E) for the common case without waiting for some other host
+ *   to lazily pull the change.
+ * - get() implements a suspicious-miss backstop: a branch that "should" exist
+ *   but is absent from the cached snapshot forces one fresh regeneration
+ *   (throttled), bounding how long a bad snapshot can hide a real branch.
+ *
+ * regenerate() also skips persisting a snapshot when the marker read itself
+ * fails (`{ ok: false }`, e.g. unreadable for a non-ENOENT reason): a snapshot
+ * embedding a token we cannot attribute to "matches this scan" would be
+ * indistinguishable from a correctly-attributed one to every future reader, so
+ * the safer behavior is to serve the fresh scan without writing it durably and
+ * let the next read retry the marker.
+ *
  * Design:
- * - list() returns cached data if fresh, regenerates from branch.json files if stale
- * - invalidate() marks cache as stale (called when branch state changes)
- * - Concurrent regeneration is safe (all processes produce identical output)
+ * - list() returns the cached snapshot if its embedded generation token still
+ *   matches the live marker, regenerates from branch.json files otherwise
+ * - invalidate() bumps the marker (durable, cross-process) and eager-regenerates
+ * - Concurrent regeneration within one process is deduped to a single scan
+ *   (regenInFlight); across processes, regeneration is still safe since all
+ *   processes produce identical output from the same branch.json files
  */
 export declare class BranchRegistry {
     private readonly root;
     private readonly registryPath;
     private readonly stalePath;
     private readonly tempPath;
+    /** Shared in-flight scan so concurrent list()/get() callers on one instance await a single regeneration. */
+    private regenInFlight;
+    /** Throttle clock for the get() suspicious-miss backstop. */
+    private lastForcedRefreshMs;
     constructor(root: string);
     /**
-     * Returns all branches. Uses cache if fresh, regenerates if stale.
+     * Returns all branches. Uses the cached snapshot if its embedded generation
+     * token matches the live marker, regenerates otherwise.
      */
     list(): Promise<BranchContext[]>;
     /**
      * Returns a single branch by name. Uses cache if available.
+     *
+     * Suspicious-miss backstop: if `name` isn't in the (possibly cached) list,
+     * that's a signal the snapshot may be stale in the specific direction where
+     * a branch that now exists is missing from it - force one fresh
+     * regeneration and re-search before giving up, throttled per instance so a
+     * genuinely-absent branch costs at most one extra scan per throttle window.
+     * This bounds durable window-E staleness for the "branch exists but
+     * snapshot predates it" direction; see the class doc comment.
      */
     get(name: string): Promise<BranchContext | undefined>;
+    private shouldForceRefresh;
     /**
-     * Marks the cache as stale. Next list() call will regenerate.
-     * Uses atomic rename for safety.
+     * Marks the cache as stale for every process sharing this root by bumping
+     * the cross-process generation marker, then eager-regenerates on this host
+     * (see class doc comment for why). The bump must succeed: a swallowed
+     * failure here would leave the registry stale indefinitely with no
+     * bounding backstop, unlike a failed eager regen below, which only forgoes
+     * closing window (E) early - the bump alone already restored correctness
+     * for every future reader. A failed eager regen therefore must not fail the
+     * caller's save/delete.
      */
     invalidate(): Promise<void>;
     /**
-     * Scans branch directories and rebuilds the cache.
-     * Concurrent calls are safe - all produce identical content.
+     * Scans branch directories and rebuilds the cache, deduping concurrent
+     * callers on this instance to a single underlying scan. Never loops waiting
+     * for the snapshot's embedded token to match the marker - under a bump
+     * storm that could livelock; a caller that wants the very latest state
+     * after a concurrent bump should call list() again after this resolves.
      */
     private regenerate;
+    private performRegenerate;
     /**
      * Scans the root directory for branch subdirectories with valid branch.json files.
+     * Protected (rather than exported as a test hook) so tests can subclass and
+     * override to simulate cross-process interleavings.
      */
-    private scanBranchDirectories;
+    protected scanBranchDirectories(): Promise<BranchContext[]>;
 }
 //# sourceMappingURL=branch-registry.d.ts.map

package/dist/branch-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"branch-registry.d.ts","sourceRoot":"","sources":["../src/branch-registry.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAU5C,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,aAAa,EAAE,CAAA;CAC1B;AAED;;;;;;;;GAQG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAQ;IAC7B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;gBAErB,IAAI,EAAE,MAAM;IAOxB;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAkBtC;;OAEG;IACG,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAK3D;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAWjC;;;OAGG;YACW,UAAU;IA2BxB;;OAEG;YACW,qBAAqB;CAiCpC"}
+{"version":3,"file":"branch-registry.d.ts","sourceRoot":"","sources":["../src/branch-registry.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AA4B5C,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,aAAa,EAAE,CAAA;IACzB;;;;OAIG;IACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAQ;IAC7B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IAEjC,4GAA4G;IAC5G,OAAO,CAAC,aAAa,CAAwC;IAE7D,6DAA6D;IAC7D,OAAO,CAAC,mBAAmB,CAAI;gBAEnB,IAAI,EAAE,MAAM;IAOxB;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IA2BtC;;;;;;;;;;OAUG;IACG,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAW3D,OAAO,CAAC,kBAAkB;IAO1B;;;;;;;;;OASG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAkBjC;;;;;;OAMG;YACW,UAAU;YAYV,iBAAiB;IA4C/B;;;;OAIG;cACa,qBAAqB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;CAiClE"}