ghostrail 0.14.0 → 0.15.0

package/dist/global/registry.d.ts

@@ -10,7 +10,24 @@
 export interface Ghostrail {
     /** Display name, from `[factory].name` or the directory. Never an identity. */
     name: string;
-    /** Absolute path to the repo. This is the identity. */
+    /**
+     * The repo this ghostrail is for, canonical (`host/owner/name`), or
+     * `local:<path>` for a repo with no usable remote. **This is the identity.**
+     *
+     * Optional only for backward compatibility: a registry written before repo
+     * identities existed has none, and an entry without one falls back to being
+     * keyed on its `path`, exactly as it was. This file is advertised as
+     * hand-editable, and refusing to read yesterday's one would be the worst
+     * possible reading of that promise.
+     */
+    repo?: string;
+    /**
+     * Absolute path to the checkout most recently used for this repo.
+     *
+     * A hint, for a human reading the file and for a local-worktree run that
+     * needs somewhere to make worktrees from. Not the identity: two checkouts of
+     * one repo are one ghostrail, which is the whole point of `repo`.
+     */
     path: string;
     /** ISO date the entry was added, for the operator. Nothing reads it. */
     added: string;
@@ -36,9 +53,10 @@ export declare const REGISTRY_FILE = "ghostrails.toml";
  * than fatal, so a registry written by a later ghostrail still reads here.
  * Order is preserved exactly, and the array is fresh on every call.
  *
- * Two entries at the same path are malformed for the same reason: a parsed
- * registry never contains duplicate paths, which is what lets `upsert` and
- * `findByPath` stay as simple as they are.
+ * Two entries for the same ghostrail are malformed for the same reason: a
+ * parsed registry never contains duplicate keys, which is what lets `upsert`
+ * and `findByKey` stay as simple as they are. The key is the repo identity, or
+ * the path for an entry written before identities existed.
  */
 export declare function parseRegistry(toml: string): Ghostrail[] | undefined;
 /**
@@ -51,10 +69,25 @@ export declare function parseRegistry(toml: string): Ghostrail[] | undefined;
  * the header invites them to do.
  */
 export declare function renderRegistry(entries: readonly Ghostrail[]): string;
+/**
+ * What an entry is keyed on: its repo identity, or its path when it has none.
+ *
+ * One function so the parser, `findByKey`, and `upsert` cannot disagree about
+ * what "the same ghostrail" means, which is exactly the kind of drift that let
+ * two checkouts become two ghostrails in the first place.
+ */
+export declare function entryKey(entry: Ghostrail): string;
 /** The entry at `path`, or undefined. Exact string equality; callers resolve first. */
 export declare function findByPath(entries: readonly Ghostrail[], path: string): Ghostrail | undefined;
+/** The entry for a repo identity (or a path, for an entry that has none). */
+export declare function findByKey(entries: readonly Ghostrail[], key: string): Ghostrail | undefined;
 /**
- * Add `entry`, or replace the one at the same path.
+ * Add `entry`, or replace the one with the same identity.
+ *
+ * Keyed on the repo, so `init` in a second checkout of a known repo updates
+ * that ghostrail (adopting the new checkout as its `path`) instead of adding a
+ * second one. An entry with no identity still matches on path, so a
+ * pre-identity registry keeps working.
  *
  * A replacement keeps its position so a diff of the file shows a changed block
  * rather than a move; a new entry appends. Neither argument is mutated.

package/dist/global/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/global/registry.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AAEH,sCAAsC;AACtC,MAAM,WAAW,SAAS;IACxB,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,uCAAuC;AACvC,eAAO,MAAM,aAAa,oBAAoB,CAAC;AAyB/C;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,SAAS,CA2BnE;AAOD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,GAAG,MAAM,CAapE;AAED,uFAAuF;AACvF,wBAAgB,UAAU,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE7F;AAED;;;;;GAKG;AACH,wBAAgB,MAAM,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,GAAG,SAAS,EAAE,CAMnF"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/global/registry.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AAEH,sCAAsC;AACtC,MAAM,WAAW,SAAS;IACxB,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,uCAAuC;AACvC,eAAO,MAAM,aAAa,oBAAoB,CAAC;AA2B/C;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,SAAS,CA4BnE;AAOD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,GAAG,MAAM,CAcpE;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAEjD;AAED,uFAAuF;AACvF,wBAAgB,UAAU,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE7F;AAED,6EAA6E;AAC7E,wBAAgB,SAAS,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE3F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,GAAG,SAAS,EAAE,CAOnF"}

package/dist/global/registry.js

@@ -17,12 +17,15 @@ function isRecord(value) {
 function parseEntry(raw) {
     if (!isRecord(raw))
         return undefined;
-    const { name, path, added, watch } = raw;
+    const { name, repo, path, added, watch } = raw;
     if (typeof name !== "string" || typeof path !== "string")
         return undefined;
     if (typeof added !== "string" || typeof watch !== "boolean")
         return undefined;
-    return { name, path, added, watch };
+    // Absent is legal (a pre-identity registry); present but not a string is not.
+    if (repo !== undefined && typeof repo !== "string")
+        return undefined;
+    return { name, ...(repo === undefined ? {} : { repo }), path, added, watch };
 }
 /**
  * Parse the registry, or undefined when it cannot be trusted.
@@ -38,9 +41,10 @@ function parseEntry(raw) {
  * than fatal, so a registry written by a later ghostrail still reads here.
  * Order is preserved exactly, and the array is fresh on every call.
  *
- * Two entries at the same path are malformed for the same reason: a parsed
- * registry never contains duplicate paths, which is what lets `upsert` and
- * `findByPath` stay as simple as they are.
+ * Two entries for the same ghostrail are malformed for the same reason: a
+ * parsed registry never contains duplicate keys, which is what lets `upsert`
+ * and `findByKey` stay as simple as they are. The key is the repo identity, or
+ * the path for an entry written before identities existed.
  */
 export function parseRegistry(toml) {
     let root;
@@ -58,18 +62,19 @@ export function parseRegistry(toml) {
     if (!Array.isArray(raw))
         return undefined;
     const entries = [];
-    const paths = new Set();
+    const keys = new Set();
     for (const item of raw) {
         const entry = parseEntry(item);
         if (entry === undefined)
             return undefined;
-        // `path` is the identity, so two blocks claiming it is a contradiction
-        // rather than a preference to resolve. Copying a block and forgetting to
-        // change the path is a plausible hand-edit, and honouring either one of
-        // them would silently ignore an edit the operator clearly meant.
-        if (paths.has(entry.path))
+        // Two blocks claiming one ghostrail is a contradiction rather than a
+        // preference to resolve. Copying a block and forgetting to change the repo
+        // is a plausible hand-edit, and honouring either one of them would silently
+        // ignore an edit the operator clearly meant.
+        const key = entryKey(entry);
+        if (keys.has(key))
             return undefined;
-        paths.add(entry.path);
+        keys.add(key);
         entries.push(entry);
     }
     return entries;
@@ -91,6 +96,7 @@ export function renderRegistry(entries) {
     const blocks = entries.map((entry) => [
         "[[ghostrail]]",
         `name  = ${quote(entry.name)}`,
+        ...(entry.repo === undefined ? [] : [`repo  = ${quote(entry.repo)}`]),
         `path  = ${quote(entry.path)}`,
         `added = ${quote(entry.added)}`,
         `watch = ${entry.watch}`,
@@ -99,18 +105,38 @@ export function renderRegistry(entries) {
     // run together the blocks are hard to read and give noisier diffs.
     return `${[HEADER, ...blocks].join("\n\n")}\n`;
 }
+/**
+ * What an entry is keyed on: its repo identity, or its path when it has none.
+ *
+ * One function so the parser, `findByKey`, and `upsert` cannot disagree about
+ * what "the same ghostrail" means, which is exactly the kind of drift that let
+ * two checkouts become two ghostrails in the first place.
+ */
+export function entryKey(entry) {
+    return entry.repo ?? entry.path;
+}
 /** The entry at `path`, or undefined. Exact string equality; callers resolve first. */
 export function findByPath(entries, path) {
     return entries.find((entry) => entry.path === path);
 }
+/** The entry for a repo identity (or a path, for an entry that has none). */
+export function findByKey(entries, key) {
+    return entries.find((entry) => entryKey(entry) === key);
+}
 /**
- * Add `entry`, or replace the one at the same path.
+ * Add `entry`, or replace the one with the same identity.
+ *
+ * Keyed on the repo, so `init` in a second checkout of a known repo updates
+ * that ghostrail (adopting the new checkout as its `path`) instead of adding a
+ * second one. An entry with no identity still matches on path, so a
+ * pre-identity registry keeps working.
  *
  * A replacement keeps its position so a diff of the file shows a changed block
  * rather than a move; a new entry appends. Neither argument is mutated.
  */
 export function upsert(entries, entry) {
-    const index = entries.findIndex((existing) => existing.path === entry.path);
+    const key = entryKey(entry);
+    const index = entries.findIndex((existing) => entryKey(existing) === key);
     if (index === -1)
         return [...entries, entry];
     const next = [...entries];

package/dist/global/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/global/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AA0B/C,uCAAuC;AACvC,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAE/C,MAAM,MAAM,GAAG;;;;;;;oEAOqD,CAAC;AAErE,kEAAkE;AAClE,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,+EAA+E;AAC/E,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IACzC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAEtC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;IAC3B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAE1C,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,uEAAuE;QACvE,yEAAyE;QACzE,wEAAwE;QACxE,iEAAiE;QACjE,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,oFAAoF;AACpF,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,OAA6B;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnC;QACE,eAAe;QACf,WAAW,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;QAC9B,WAAW,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;QAC9B,WAAW,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QAC/B,WAAW,KAAK,CAAC,KAAK,EAAE;KACzB,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,6EAA6E;IAC7E,mEAAmE;IACnE,OAAO,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,UAAU,CAAC,OAA6B,EAAE,IAAY;IACpE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,MAAM,CAAC,OAA6B,EAAE,KAAgB;IACpE,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5E,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IACpB,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/global/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AA2C/C,uCAAuC;AACvC,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAE/C,MAAM,MAAM,GAAG;;;;;;;oEAOqD,CAAC;AAErE,kEAAkE;AAClE,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,+EAA+E;AAC/E,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9E,8EAA8E;IAC9E,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACrE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC/E,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAEtC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;IAC3B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAE1C,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,qEAAqE;QACrE,2EAA2E;QAC3E,4EAA4E;QAC5E,6CAA6C;QAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,oFAAoF;AACpF,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,OAA6B;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnC;QACE,eAAe;QACf,WAAW,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;QAC9B,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrE,WAAW,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;QAC9B,WAAW,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QAC/B,WAAW,KAAK,CAAC,KAAK,EAAE;KACzB,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,6EAA6E;IAC7E,mEAAmE;IACnE,OAAO,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAgB;IACvC,OAAO,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC;AAClC,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,UAAU,CAAC,OAA6B,EAAE,IAAY;IACpE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,SAAS,CAAC,OAA6B,EAAE,GAAW;IAClE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,MAAM,CAAC,OAA6B,EAAE,KAAgB;IACpE,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC;IAC1E,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IACpB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/global/repo-id.d.ts

@@ -0,0 +1,50 @@
+/**
+ * The canonical identity of the repo a git remote points at, as
+ * `host[:port]/path/to/repo`, or undefined when the remote is not one.
+ *
+ * The point is that every spelling of one repo collapses to one string:
+ * scp-like and URL forms, with or without `.git`, with or without a default
+ * port, are the same repo and must key the same ghostrail.
+ *
+ * Strict everywhere except case. Anything unrecognised is undefined rather than
+ * guessed, because the two failure directions are not symmetric: wrongly
+ * merging two repos pools their history and cannot be undone, while wrongly
+ * separating two clones only leaves today's behavior in place. The exception is
+ * lowercasing, which is deliberately lenient: hosts are case-insensitive and so
+ * are repos on the forges people use, so `Owner/Repo` and `owner/repo` are one
+ * repo. On a case-sensitive host that could merge two repos differing only in
+ * case, which is judged far less likely than someone typing a clone URL with
+ * different capitalisation.
+ *
+ * Never throws. A remote that cannot be read is a missing identity, and the
+ * caller falls back to {@link localRepoId}.
+ */
+export declare function canonicalRepoId(remote: string): string | undefined;
+/**
+ * The identity of a repo with no usable remote, from its absolute path.
+ *
+ * The `local:` prefix means it can never collide with a `host/...` identity,
+ * and makes a path-keyed entry visibly path-keyed rather than silently so. The
+ * path is kept verbatim: it is already absolute, and case-folding it would be
+ * wrong on a case-sensitive filesystem.
+ */
+export declare function localRepoId(path: string): string;
+/**
+ * Whether an identity is path-keyed rather than derived from a remote.
+ *
+ * Checks `local:/`, not `local:`. The shorter prefix looks like the marker and
+ * is not one: a host genuinely named `local` on a non-default port produces
+ * `local:22/owner/repo`, which is an ordinary canonical identity.
+ */
+export declare function isLocalRepoId(id: string): boolean;
+/**
+ * A filesystem-safe directory name for an identity.
+ *
+ * The hash is not decoration. Folding characters and truncating both lose
+ * information, so two different identities can reduce to the same readable
+ * stem; the hash of the *full* identity is what keeps the key unique. The stem
+ * is there so a human browsing the state directory can tell what they are
+ * looking at.
+ */
+export declare function repoKey(id: string): string;
+//# sourceMappingURL=repo-id.d.ts.map

package/dist/global/repo-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-id.d.ts","sourceRoot":"","sources":["../../src/global/repo-id.ts"],"names":[],"mappings":"AAmBA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAgBlE;AAqDD;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQhD;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED;;;;;;;;GAQG;AACH,wBAAgB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAU1C"}

package/dist/global/repo-id.js

@@ -0,0 +1,149 @@
+import { createHash } from "node:crypto";
+/**
+ * What identifies a ghostrail: the repo it works on, not the directory it was
+ * set up from. Pure, so the normalization rules that decide whether two clones
+ * are one repo can be checked without a git repository.
+ */
+/** Ports that carry no information, per scheme. */
+const DEFAULT_PORTS = {
+    ssh: "22",
+    git: "9418",
+    http: "80",
+    https: "443",
+};
+/** Longest readable stem in a {@link repoKey}, before the hash is appended. */
+const MAX_STEM = 48;
+/**
+ * The canonical identity of the repo a git remote points at, as
+ * `host[:port]/path/to/repo`, or undefined when the remote is not one.
+ *
+ * The point is that every spelling of one repo collapses to one string:
+ * scp-like and URL forms, with or without `.git`, with or without a default
+ * port, are the same repo and must key the same ghostrail.
+ *
+ * Strict everywhere except case. Anything unrecognised is undefined rather than
+ * guessed, because the two failure directions are not symmetric: wrongly
+ * merging two repos pools their history and cannot be undone, while wrongly
+ * separating two clones only leaves today's behavior in place. The exception is
+ * lowercasing, which is deliberately lenient: hosts are case-insensitive and so
+ * are repos on the forges people use, so `Owner/Repo` and `owner/repo` are one
+ * repo. On a case-sensitive host that could merge two repos differing only in
+ * case, which is judged far less likely than someone typing a clone URL with
+ * different capitalisation.
+ *
+ * Never throws. A remote that cannot be read is a missing identity, and the
+ * caller falls back to {@link localRepoId}.
+ */
+export function canonicalRepoId(remote) {
+    const trimmed = remote.trim();
+    if (trimmed.length === 0)
+        return undefined;
+    const parsed = splitRemote(trimmed);
+    if (parsed === undefined)
+        return undefined;
+    const path = parsed.path
+        .split("/")
+        .filter((segment) => segment.length > 0)
+        .join("/")
+        .replace(/\.git$/i, "");
+    // A bare host names no repo, and neither does a path that was only slashes.
+    if (path.length === 0)
+        return undefined;
+    return `${parsed.host}/${path}`.toLowerCase();
+}
+/** Host (with any non-default port) and raw path, or undefined. */
+function splitRemote(remote) {
+    // A local path is not a remote. Checked first so `/srv/git/repo` and
+    // `C:\repos\thing` never reach the URL branch and acquire a bogus host.
+    if (remote.startsWith("/") || remote.startsWith(".") || /^[a-z]:[\\/]/i.test(remote)) {
+        return undefined;
+    }
+    const url = remote.match(/^([a-z][a-z0-9+.-]*):\/\/([^/\s]+)(\/.*)?$/i);
+    if (url !== null) {
+        const [, scheme = "", authority = "", path = ""] = url;
+        // `file://` addresses a directory, not a remote repo identity.
+        if (scheme.toLowerCase() === "file")
+            return undefined;
+        return { host: stripPort(dropUserinfo(authority), scheme.toLowerCase()), path };
+    }
+    // scp-like: [user@]host:path. The colon must not be followed by `/`, which
+    // would make it a scheme, and the host must carry no slash.
+    const scp = remote.match(/^([^/\s]+):(?!\/)(.+)$/);
+    if (scp !== null) {
+        const [, authority = "", path = ""] = scp;
+        return { host: stripPort(dropUserinfo(authority), "ssh"), path };
+    }
+    return undefined;
+}
+/** Drop `user@` and any password: a credential is not part of an identity. */
+function dropUserinfo(authority) {
+    const at = authority.lastIndexOf("@");
+    return at === -1 ? authority : authority.slice(at + 1);
+}
+/**
+ * Drop the scheme's default port, and any empty one. Keep every other.
+ *
+ * The empty case is not a curiosity. `ssh://local:/owner/repo` left the host as
+ * `local:` and produced `local:/owner/repo`, which is character-for-character a
+ * {@link localRepoId} for `/owner/repo`: a remote repo and a path-keyed one
+ * colliding on a single identity. A trailing colon with no digits is not a
+ * port, and treating it as part of the host was the whole bug.
+ */
+function stripPort(host, scheme) {
+    const empty = host.match(/^(.*):$/);
+    if (empty !== null)
+        return empty[1] ?? host;
+    const match = host.match(/^(.*):(\d+)$/);
+    if (match === null)
+        return host;
+    const [, name = "", port = ""] = match;
+    return port === DEFAULT_PORTS[scheme] ? name : host;
+}
+/**
+ * The identity of a repo with no usable remote, from its absolute path.
+ *
+ * The `local:` prefix means it can never collide with a `host/...` identity,
+ * and makes a path-keyed entry visibly path-keyed rather than silently so. The
+ * path is kept verbatim: it is already absolute, and case-folding it would be
+ * wrong on a case-sensitive filesystem.
+ */
+export function localRepoId(path) {
+    // Always `local:/...`, never bare `local:`. A canonical identity puts a port
+    // after the colon and a path segment after that, so `local:22/a/a` is a real
+    // canonical id for a host named `local`. The two can never be equal, but only
+    // because a local id's colon is always followed by `/` and a canonical one's
+    // never is. Guaranteeing that here, rather than relying on every caller to
+    // pass an absolute path, is what makes {@link isLocalRepoId} safe.
+    return path.startsWith("/") ? `local:${path}` : `local:/${path}`;
+}
+/**
+ * Whether an identity is path-keyed rather than derived from a remote.
+ *
+ * Checks `local:/`, not `local:`. The shorter prefix looks like the marker and
+ * is not one: a host genuinely named `local` on a non-default port produces
+ * `local:22/owner/repo`, which is an ordinary canonical identity.
+ */
+export function isLocalRepoId(id) {
+    return id.startsWith("local:/");
+}
+/**
+ * A filesystem-safe directory name for an identity.
+ *
+ * The hash is not decoration. Folding characters and truncating both lose
+ * information, so two different identities can reduce to the same readable
+ * stem; the hash of the *full* identity is what keeps the key unique. The stem
+ * is there so a human browsing the state directory can tell what they are
+ * looking at.
+ */
+export function repoKey(id) {
+    const hash = createHash("sha256").update(id, "utf8").digest("hex").slice(0, 8);
+    const stem = id
+        .toLowerCase()
+        .replace(/[^a-z0-9._-]+/g, "-")
+        .replace(/-+/g, "-")
+        .replace(/^-+|-+$/g, "")
+        .slice(0, MAX_STEM)
+        .replace(/-+$/, "");
+    return stem.length === 0 ? hash : `${stem}-${hash}`;
+}
+//# sourceMappingURL=repo-id.js.map

package/dist/global/repo-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-id.js","sourceRoot":"","sources":["../../src/global/repo-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;GAIG;AAEH,mDAAmD;AACnD,MAAM,aAAa,GAA2B;IAC5C,GAAG,EAAE,IAAI;IACT,GAAG,EAAE,MAAM;IACX,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,KAAK;CACb,CAAC;AAEF,+EAA+E;AAC/E,MAAM,QAAQ,GAAG,EAAE,CAAC;AAEpB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3C,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAE3C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;SACrB,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;SACvC,IAAI,CAAC,GAAG,CAAC;SACT,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC1B,4EAA4E;IAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAExC,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAChD,CAAC;AAED,mEAAmE;AACnE,SAAS,WAAW,CAAC,MAAc;IACjC,qEAAqE;IACrE,wEAAwE;IACxE,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACxE,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,GAAG,EAAE,EAAE,SAAS,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC;QACvD,+DAA+D;QAC/D,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM;YAAE,OAAO,SAAS,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;IAClF,CAAC;IAED,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACnD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,CAAC,EAAE,SAAS,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACnE,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,SAAS,YAAY,CAAC,SAAiB;IACrC,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACtC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,IAAY,EAAE,MAAc;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;IACvC,OAAO,IAAI,KAAK,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,6EAA6E;IAC7E,2EAA2E;IAC3E,mEAAmE;IACnE,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;AACnE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,EAAU;IACtC,OAAO,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,OAAO,CAAC,EAAU;IAChC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,EAAE;SACZ,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;AACtD,CAAC"}

package/dist/global/state-dir.d.ts

@@ -0,0 +1,32 @@
+import type { GlobalEnv } from "./store.js";
+/**
+ * Where a ghostrail's state lives: its runs, events, artifacts, lock, pause
+ * flag, and respond watermarks.
+ *
+ * Outside the repo, keyed by the repo's identity. Inside the checkout, all of
+ * it was per-directory, so two clones of one repo had two stores and two locks
+ * and therefore raced each other, split their history, and each got a full
+ * `max_cost_usd_per_run` ceiling of their own.
+ */
+/**
+ * The root for ghostrail's state, honouring `$XDG_STATE_HOME`.
+ *
+ * State, not config, so this is the state dir rather than the config dir the
+ * registry and `secrets.env` live in. The XDG spec is explicit that state is
+ * for data that persists between runs but is neither configuration nor a cache,
+ * which is exactly a run history.
+ *
+ * `GHOSTRAIL_HOME` still wins, as it does for the global dir: a caller who has
+ * pinned everything to one directory means it, and splitting their state
+ * somewhere else would be a surprise. Tests rely on this too.
+ */
+export declare function stateHome(env: GlobalEnv, homedir: string): string;
+/**
+ * The state directory for one repo: `<stateHome>/repos/<key>`.
+ *
+ * `repos/` rather than the root so the layout has room for state that belongs
+ * to the account rather than to a repo, without a future addition colliding
+ * with a repo whose key happens to match.
+ */
+export declare function repoStateDir(repoId: string, env: GlobalEnv, homedir: string): string;
+//# sourceMappingURL=state-dir.d.ts.map

package/dist/global/state-dir.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-dir.d.ts","sourceRoot":"","sources":["../../src/global/state-dir.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;;;GAQG;AAEH;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CASjE;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpF"}

package/dist/global/state-dir.js

@@ -0,0 +1,43 @@
+import { join } from "node:path";
+import { repoKey } from "./repo-id.js";
+/**
+ * Where a ghostrail's state lives: its runs, events, artifacts, lock, pause
+ * flag, and respond watermarks.
+ *
+ * Outside the repo, keyed by the repo's identity. Inside the checkout, all of
+ * it was per-directory, so two clones of one repo had two stores and two locks
+ * and therefore raced each other, split their history, and each got a full
+ * `max_cost_usd_per_run` ceiling of their own.
+ */
+/**
+ * The root for ghostrail's state, honouring `$XDG_STATE_HOME`.
+ *
+ * State, not config, so this is the state dir rather than the config dir the
+ * registry and `secrets.env` live in. The XDG spec is explicit that state is
+ * for data that persists between runs but is neither configuration nor a cache,
+ * which is exactly a run history.
+ *
+ * `GHOSTRAIL_HOME` still wins, as it does for the global dir: a caller who has
+ * pinned everything to one directory means it, and splitting their state
+ * somewhere else would be a surprise. Tests rely on this too.
+ */
+export function stateHome(env, homedir) {
+    if (env.GHOSTRAIL_HOME !== undefined && env.GHOSTRAIL_HOME.length > 0) {
+        return join(env.GHOSTRAIL_HOME, "state");
+    }
+    const base = env.XDG_STATE_HOME !== undefined && env.XDG_STATE_HOME.length > 0
+        ? env.XDG_STATE_HOME
+        : join(homedir, ".local", "state");
+    return join(base, "ghostrail");
+}
+/**
+ * The state directory for one repo: `<stateHome>/repos/<key>`.
+ *
+ * `repos/` rather than the root so the layout has room for state that belongs
+ * to the account rather than to a repo, without a future addition colliding
+ * with a repo whose key happens to match.
+ */
+export function repoStateDir(repoId, env, homedir) {
+    return join(stateHome(env, homedir), "repos", repoKey(repoId));
+}
+//# sourceMappingURL=state-dir.js.map

package/dist/global/state-dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-dir.js","sourceRoot":"","sources":["../../src/global/state-dir.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAGvC;;;;;;;;GAQG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,SAAS,CAAC,GAAc,EAAE,OAAe;IACvD,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,IAAI,GACR,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;QAC/D,CAAC,CAAC,GAAG,CAAC,cAAc;QACpB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,GAAc,EAAE,OAAe;IAC1E,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AACjE,CAAC"}

package/dist/global/store.d.ts

@@ -2,6 +2,8 @@ import { type Ghostrail } from "./registry.js";
 export interface GlobalEnv {
     GHOSTRAIL_HOME?: string;
     XDG_CONFIG_HOME?: string;
+    /** Where run state goes. Config and state are different XDG directories. */
+    XDG_STATE_HOME?: string;
 }
 /**
  * Resolve the global ghostrail config directory that holds account-level

package/dist/global/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/global/store.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,SAAS,EAAgD,MAAM,eAAe,CAAC;AAE7F,MAAM,WAAW,SAAS;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAOxE;AAED,yDAAyD;AACzD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;GAIG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;gBAEjB,GAAG,EAAE,MAAM;IAIvB,YAAY,IAAI,MAAM;IAItB,mEAAmE;IAC7D,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAQjD,wDAAwD;IAClD,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAQxC,YAAY,IAAI,MAAM;IAItB;;;;OAIG;IACG,YAAY,IAAI,OAAO,CAAC,SAAS,EAAE,GAAG,SAAS,CAAC;IAUtD,8EAA8E;IACxE,aAAa,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjE,4EAA4E;IACtE,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAU9D"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/global/store.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,SAAS,EAAgD,MAAM,eAAe,CAAC;AAE7F,MAAM,WAAW,SAAS;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,4EAA4E;IAC5E,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAOxE;AAED,yDAAyD;AACzD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;GAIG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;gBAEjB,GAAG,EAAE,MAAM;IAIvB,YAAY,IAAI,MAAM;IAItB,mEAAmE;IAC7D,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAQjD,wDAAwD;IAClD,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAQxC,YAAY,IAAI,MAAM;IAItB;;;;OAIG;IACG,YAAY,IAAI,OAAO,CAAC,SAAS,EAAE,GAAG,SAAS,CAAC;IAUtD,8EAA8E;IACxE,aAAa,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjE,4EAA4E;IACtE,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAU9D"}

package/dist/global/store.js.map

@@ -1 +1 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/global/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAkB,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAO7F;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAc,EAAE,OAAe;IAC9D,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,cAAc,CAAC;IACjG,MAAM,IAAI,GACR,GAAG,CAAC,eAAe,KAAK,SAAS,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;QACjE,CAAC,CAAC,GAAG,CAAC,eAAe;QACrB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACjC,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,WAAW;IACL,GAAG,CAAS;IAE7B,YAAY,GAAW;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACzC,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY;QAChB,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,aAAa,CAAC,OAA6B;QAC/C,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,KAAK,MAAM,SAAS,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC;gBACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;YACxE,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/global/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAkB,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAS7F;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAc,EAAE,OAAe;IAC9D,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,cAAc,CAAC;IACjG,MAAM,IAAI,GACR,GAAG,CAAC,eAAe,KAAK,SAAS,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;QACjE,CAAC,CAAC,GAAG,CAAC,eAAe;QACrB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACjC,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,WAAW;IACL,GAAG,CAAS;IAE7B,YAAY,GAAW;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACzC,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY;QAChB,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,aAAa,CAAC,OAA6B;QAC/C,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,KAAK,MAAM,SAAS,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC;gBACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;YACxE,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}

package/dist/loop/advice.d.ts

@@ -0,0 +1,11 @@
+import type { GhostrailConfig } from "../config/schema.js";
+/**
+ * One line about what concurrent runs will share, or undefined when there is
+ * nothing worth saying.
+ *
+ * Silent at `concurrency` 1, because nothing overlaps and a warning on the
+ * default configuration is noise that teaches people to ignore warnings. Silent
+ * on a backend that clones per run, because the sharing does not exist there.
+ */
+export declare function concurrencyAdvice(config: GhostrailConfig): string | undefined;
+//# sourceMappingURL=advice.d.ts.map

package/dist/loop/advice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advice.d.ts","sourceRoot":"","sources":["../../src/loop/advice.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAe,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAsBxE;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CAmB7E"}

package/dist/loop/advice.js

@@ -0,0 +1,48 @@
+/**
+ * What raising `concurrency` costs, on the backend you actually have.
+ *
+ * Not a gate. Six concurrent `git worktree add -B` calls against one repo were
+ * tried before any of this was written, and all six succeeded: git is not the
+ * constraint, so refusing would be the tool overruling someone who knows their
+ * own setup. What is worth saying is what concurrent runs share, which depends
+ * on the backend and on whether the factory owns its clone.
+ */
+/**
+ * Backends that give each run its own filesystem by cloning into it.
+ *
+ * Listed by what they do rather than by excluding `local-worktree`, so a
+ * backend added later does not silently inherit a warning that does not apply
+ * to it. Getting added here is a claim about isolation, which is the right
+ * thing to have to make deliberately.
+ */
+const CLONES_PER_RUN = ["container", "firecracker", "e2b", "remote"];
+/**
+ * One line about what concurrent runs will share, or undefined when there is
+ * nothing worth saying.
+ *
+ * Silent at `concurrency` 1, because nothing overlaps and a warning on the
+ * default configuration is noise that teaches people to ignore warnings. Silent
+ * on a backend that clones per run, because the sharing does not exist there.
+ */
+export function concurrencyAdvice(config) {
+    const { concurrency } = config.guardrails;
+    if (!Number.isFinite(concurrency) || concurrency <= 1)
+        return undefined;
+    if (CLONES_PER_RUN.includes(config.backend.kind))
+        return undefined;
+    // Only when the factory is still borrowing the operator's checkout. With its
+    // own clone (TJ-1586) this hazard is gone, and a warning describing something
+    // the operator already turned off costs trust in every other warning.
+    const shared = [
+        ...(config.backend.managedCheckout ? [] : ["a git object store shared with your own work"]),
+        "your tool caches (one pnpm/cargo store for every gate at once)",
+        "this machine (N agents plus N gate runs)",
+    ];
+    // Joined, not newline-separated: the caller decides framing, and a warning
+    // that smuggles line breaks into someone else's log format is rude.
+    return [
+        `concurrency ${concurrency} on local-worktree: runs will share ${shared.join(", ")}.`,
+        "The container backend gives each run its own filesystem.",
+    ].join(" ");
+}
+//# sourceMappingURL=advice.js.map

package/dist/loop/advice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"advice.js","sourceRoot":"","sources":["../../src/loop/advice.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAEH;;;;;;;GAOG;AACH,MAAM,cAAc,GAA2B,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AAE7F;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAuB;IACvD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxE,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAEnE,6EAA6E;IAC7E,8EAA8E;IAC9E,sEAAsE;IACtE,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC;QAC3F,gEAAgE;QAChE,0CAA0C;KAC3C,CAAC;IACF,2EAA2E;IAC3E,oEAAoE;IACpE,OAAO;QACL,eAAe,WAAW,uCAAuC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACrF,0DAA0D;KAC3D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC"}

package/dist/loop/control.d.ts

@@ -2,7 +2,7 @@
 export interface ControlState {
     enabled: boolean;
 }
-/** The control file's path inside a store directory (e.g. `<repo>/.factory`). */
+/** The control file's path inside a store directory (this repo's state dir). */
 export declare function controlPath(dir: string): string;
 /**
  * Read the run/pause state written for a ghostrail. Absent, unreadable, or
@@ -12,4 +12,18 @@ export declare function controlPath(dir: string): string;
 export declare function readControl(dir: string): Promise<ControlState>;
 /** Persist the run/pause state so any process reading the same directory sees it. */
 export declare function writeControl(dir: string, state: ControlState): Promise<void>;
+/**
+ * Reading and writing a ghostrail's run/pause flag, behind a port.
+ *
+ * Separate from the run store because they are different concerns that only
+ * happened to share a directory. The board used to reach through the store to
+ * its `dir` to get at this, which worked exactly as long as every store was a
+ * directory on this machine.
+ */
+export interface RunControl {
+    read(): Promise<ControlState>;
+    write(state: ControlState): Promise<void>;
+}
+/** The control flag as a file in `dir`, which is what a local ghostrail has. */
+export declare function fileControl(dir: string): RunControl;
 //# sourceMappingURL=control.d.ts.map

package/dist/loop/control.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control.d.ts","sourceRoot":"","sources":["../../src/loop/control.ts"],"names":[],"mappings":"AAGA,yEAAyE;AACzE,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;CAClB;AAID,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAWpE;AAED,qFAAqF;AACrF,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAGlF"}
+{"version":3,"file":"control.d.ts","sourceRoot":"","sources":["../../src/loop/control.ts"],"names":[],"mappings":"AAGA,yEAAyE;AACzE,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;CAClB;AAID,gFAAgF;AAChF,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAWpE;AAED,qFAAqF;AACrF,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAGlF;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9B,KAAK,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,gFAAgF;AAChF,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAKnD"}