kiokuko 1.0.0

package/dist/package-version.js

@@ -0,0 +1,7 @@
+import { createRequire } from 'node:module';
+const packageMetadata = createRequire(import.meta.url)('../package.json');
+if (typeof packageMetadata.version !== 'string' || packageMetadata.version.length === 0) {
+    throw new Error('Kiokuko package version is unavailable');
+}
+export const PACKAGE_VERSION = packageMetadata.version;
+//# sourceMappingURL=package-version.js.map

package/dist/package-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-version.js","sourceRoot":"","sources":["../src/package-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAA0B,CAAC;AAEnG,IAAI,OAAO,eAAe,CAAC,OAAO,KAAK,QAAQ,IAAI,eAAe,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;IACxF,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC,OAAO,CAAC"}

package/dist/repository/binding.d.ts

@@ -0,0 +1,32 @@
+import type { SqliteDatabase } from '../db/adapter.js';
+export interface RepositoryRegistration {
+    repositoryId: string;
+    workspace: string;
+    displayName: string;
+    canonicalRoot: string;
+    remoteFingerprint: string | null;
+    bindingSchemaVersion: number;
+    agentTemplateVersion: number;
+    /** Exact current owner required before moving an existing canonical root. */
+    rebindFrom?: {
+        repositoryId: string;
+        workspace: string;
+    };
+    now?: string;
+}
+export interface RegistrationResult {
+    created: boolean;
+    repositoryId: string;
+    workspace: string;
+    canonicalRoot: string;
+}
+export interface RepositoryLocation extends Record<string, unknown> {
+    repositoryId: string;
+    canonicalRoot: string;
+}
+export declare function listRepositoryLocations(database: SqliteDatabase): RepositoryLocation[];
+export declare function findMissingRepositoryLocations(database: SqliteDatabase): RepositoryLocation[];
+/** Remove only confirmed location rows whose roots are still absent. */
+export declare function removeMissingRepositoryLocations(database: SqliteDatabase, candidates: readonly RepositoryLocation[]): number;
+export declare function registerRepositoryAndLocation(database: SqliteDatabase, registration: RepositoryRegistration): RegistrationResult;
+//# sourceMappingURL=binding.d.ts.map

package/dist/repository/binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.d.ts","sourceRoot":"","sources":["../../src/repository/binding.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAIvD,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,6EAA6E;IAC7E,UAAU,CAAC,EAAE;QACX,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AAmCD,MAAM,WAAW,kBAAmB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACjE,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,cAAc,GAAG,kBAAkB,EAAE,CAMtF;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,cAAc,GAAG,kBAAkB,EAAE,CAE7F;AAED,wEAAwE;AACxE,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,SAAS,kBAAkB,EAAE,GACxC,MAAM,CAgBR;AA2BD,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,cAAc,EACxB,YAAY,EAAE,sBAAsB,GACnC,kBAAkB,CA6KpB"}

package/dist/repository/binding.js

@@ -0,0 +1,208 @@
+import { existsSync } from 'node:fs';
+import { KiokukoError } from '../errors.js';
+import { withImmediateTransaction } from '../db/transaction.js';
+import { validateRepositoryBindingIdentity } from './identity-value.js';
+function conflict(message) {
+    throw new KiokukoError('CONFLICT', message);
+}
+function requireSingleChange(database, message) {
+    const changes = database.prepare('SELECT changes() AS changes').get()?.changes;
+    if (changes !== 1 && changes !== 1n)
+        conflict(message);
+}
+function validateRegistrationVersions(registration) {
+    if (!Number.isSafeInteger(registration.bindingSchemaVersion)
+        || registration.bindingSchemaVersion < 1) {
+        throw new KiokukoError('VALIDATION_ERROR', 'bindingSchemaVersion must be a positive safe integer');
+    }
+    // Zero is the explicit sentinel used by location-only discovery, which does
+    // not claim that an agent template was installed or request a downgrade.
+    if (!Number.isSafeInteger(registration.agentTemplateVersion)
+        || registration.agentTemplateVersion < 0) {
+        throw new KiokukoError('VALIDATION_ERROR', 'agentTemplateVersion must be a non-negative safe integer');
+    }
+}
+export function listRepositoryLocations(database) {
+    return database.prepare(`
+    SELECT repository_id AS repositoryId, canonical_root AS canonicalRoot
+      FROM repository_locations
+     ORDER BY canonical_root
+  `).all();
+}
+export function findMissingRepositoryLocations(database) {
+    return listRepositoryLocations(database).filter((location) => !existsSync(location.canonicalRoot));
+}
+/** Remove only confirmed location rows whose roots are still absent. */
+export function removeMissingRepositoryLocations(database, candidates) {
+    return withImmediateTransaction(database, () => {
+        let removed = 0;
+        for (const candidate of candidates) {
+            if (existsSync(candidate.canonicalRoot))
+                continue;
+            database
+                .prepare('DELETE FROM repository_locations WHERE repository_id = ? AND canonical_root = ?')
+                .run(candidate.repositoryId, candidate.canonicalRoot);
+            const changes = database.prepare('SELECT changes() AS changes').get()?.changes;
+            if (changes !== 1 && changes !== 1n) {
+                throw new KiokukoError('CONFLICT', 'Repository location changed before missing binding cleanup');
+            }
+            removed += 1;
+        }
+        return removed;
+    });
+}
+function validateStoredVersions(metadata) {
+    if (typeof metadata.bindingSchemaVersion !== 'number'
+        || !Number.isSafeInteger(metadata.bindingSchemaVersion)
+        || metadata.bindingSchemaVersion < 1
+        || typeof metadata.agentTemplateVersion !== 'number'
+        || !Number.isSafeInteger(metadata.agentTemplateVersion)
+        || metadata.agentTemplateVersion < 0) {
+        throw new KiokukoError('INTEGRITY_ERROR', 'Stored repository binding version metadata is invalid');
+    }
+}
+function rejectsStoredAgentVersion(storedAgentTemplateVersion, requestedAgentTemplateVersion) {
+    return requestedAgentTemplateVersion > 0
+        && storedAgentTemplateVersion > requestedAgentTemplateVersion;
+}
+export function registerRepositoryAndLocation(database, registration) {
+    validateRegistrationVersions(registration);
+    validateRepositoryBindingIdentity(registration.repositoryId, registration.workspace);
+    if (registration.rebindFrom !== undefined) {
+        validateRepositoryBindingIdentity(registration.rebindFrom.repositoryId, registration.rebindFrom.workspace);
+        if (registration.rebindFrom.repositoryId === registration.repositoryId
+            && registration.rebindFrom.workspace === registration.workspace) {
+            conflict('Rebind target must differ from the current project binding');
+        }
+    }
+    const now = registration.now ?? new Date().toISOString();
+    if (registration.remoteFingerprint !== null && !/^sha256:[a-f0-9]{64}$/.test(registration.remoteFingerprint)) {
+        throw new KiokukoError('VALIDATION_ERROR', 'remoteFingerprint must be a SHA-256 fingerprint');
+    }
+    return withImmediateTransaction(database, () => {
+        const location = database
+            .prepare(`
+        SELECT l.repository_id AS repositoryId, r.workspace AS workspace,
+               r.binding_schema_version AS bindingSchemaVersion,
+               r.agent_template_version AS agentTemplateVersion
+        FROM repository_locations l
+        JOIN repositories r ON r.repository_id = l.repository_id
+        WHERE l.canonical_root = ?
+      `)
+            .get(registration.canonicalRoot);
+        if (location !== undefined)
+            validateStoredVersions(location);
+        const rebindFrom = registration.rebindFrom;
+        if (rebindFrom !== undefined) {
+            if (location === undefined
+                || location.repositoryId !== rebindFrom.repositoryId
+                || location.workspace !== rebindFrom.workspace) {
+                conflict('Repository root changed after rebind planning');
+            }
+        }
+        else if (location && location.repositoryId !== registration.repositoryId) {
+            conflict('Repository root is already bound to another repository ID; rebind is required');
+        }
+        if (location !== undefined
+            && (location.bindingSchemaVersion > registration.bindingSchemaVersion
+                || rejectsStoredAgentVersion(location.agentTemplateVersion, registration.agentTemplateVersion))) {
+            conflict('Repository root is owned by a newer binding or agent-template version');
+        }
+        const repository = database
+            .prepare(`
+        SELECT workspace, binding_schema_version AS bindingSchemaVersion,
+               agent_template_version AS agentTemplateVersion
+        FROM repositories
+        WHERE repository_id = ?
+      `)
+            .get(registration.repositoryId);
+        if (repository !== undefined)
+            validateStoredVersions(repository);
+        if (repository && repository.workspace !== registration.workspace) {
+            conflict('Repository ID is already bound to another workspace');
+        }
+        if (repository !== undefined
+            && (repository.bindingSchemaVersion > registration.bindingSchemaVersion
+                || rejectsStoredAgentVersion(repository.agentTemplateVersion, registration.agentTemplateVersion))) {
+            conflict('Repository ID uses a newer binding or agent-template version');
+        }
+        const expectedAgentTemplateVersion = repository === undefined
+            ? registration.agentTemplateVersion
+            : Math.max(repository.agentTemplateVersion, registration.agentTemplateVersion);
+        const workspace = database
+            .prepare('SELECT repository_id FROM repositories WHERE workspace = ?')
+            .get(registration.workspace);
+        if (workspace && workspace.repository_id !== registration.repositoryId) {
+            conflict('Workspace is already bound to another repository ID');
+        }
+        const created = !repository;
+        if (created) {
+            database
+                .prepare(`
+          INSERT INTO repositories (
+            repository_id, workspace, display_name, remote_fingerprint,
+            binding_schema_version, agent_template_version, created_at, last_used_at
+          ) VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+        `)
+                .run(registration.repositoryId, registration.workspace, registration.displayName, registration.remoteFingerprint, registration.bindingSchemaVersion, registration.agentTemplateVersion, now, now);
+        }
+        else {
+            database
+                .prepare('UPDATE repositories SET last_used_at = ?, display_name = ?, agent_template_version = MAX(agent_template_version, ?) WHERE repository_id = ?')
+                .run(now, registration.displayName, registration.agentTemplateVersion, registration.repositoryId);
+            requireSingleChange(database, 'Repository metadata changed after registration planning');
+        }
+        if (!location) {
+            database
+                .prepare(`
+          INSERT INTO repository_locations (
+            repository_id, canonical_root, first_seen_at, last_seen_at
+          ) VALUES (?, ?, ?, ?)
+        `)
+                .run(registration.repositoryId, registration.canonicalRoot, now, now);
+        }
+        else if (location.repositoryId === registration.repositoryId) {
+            database
+                .prepare('UPDATE repository_locations SET last_seen_at = ? WHERE repository_id = ? AND canonical_root = ?')
+                .run(now, registration.repositoryId, registration.canonicalRoot);
+            requireSingleChange(database, 'Repository location changed after registration planning');
+        }
+        else {
+            database
+                .prepare(`
+          UPDATE repository_locations
+          SET repository_id = ?, last_seen_at = ?
+          WHERE repository_id = ? AND canonical_root = ?
+        `)
+                .run(registration.repositoryId, now, location.repositoryId, registration.canonicalRoot);
+            requireSingleChange(database, 'Repository location changed after rebind planning');
+        }
+        const registeredLocation = database
+            .prepare(`
+        SELECT l.repository_id AS repositoryId, r.workspace AS workspace,
+               r.binding_schema_version AS bindingSchemaVersion,
+               r.agent_template_version AS agentTemplateVersion
+        FROM repository_locations l
+        JOIN repositories r ON r.repository_id = l.repository_id
+        WHERE l.canonical_root = ?
+      `)
+            .get(registration.canonicalRoot);
+        if (registeredLocation !== undefined)
+            validateStoredVersions(registeredLocation);
+        if (registeredLocation?.repositoryId !== registration.repositoryId
+            || registeredLocation.workspace !== registration.workspace) {
+            conflict('Repository location did not commit the planned binding identity');
+        }
+        if (registeredLocation.bindingSchemaVersion !== registration.bindingSchemaVersion
+            || registeredLocation.agentTemplateVersion !== expectedAgentTemplateVersion) {
+            conflict('Repository location did not commit the planned binding version metadata');
+        }
+        return {
+            created,
+            repositoryId: registration.repositoryId,
+            workspace: registration.workspace,
+            canonicalRoot: registration.canonicalRoot,
+        };
+    });
+}
+//# sourceMappingURL=binding.js.map

package/dist/repository/binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.js","sourceRoot":"","sources":["../../src/repository/binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,iCAAiC,EAAE,MAAM,qBAAqB,CAAC;AAyBxE,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAwB,EAAE,OAAe;IACpE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,GAAG,EAAwB,EAAE,OAAO,CAAC;IACrG,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,EAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,4BAA4B,CAAC,YAAoC;IACxE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,oBAAoB,CAAC;WACvD,YAAY,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,YAAY,CACpB,kBAAkB,EAClB,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,4EAA4E;IAC5E,yEAAyE;IACzE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,oBAAoB,CAAC;WACvD,YAAY,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,YAAY,CACpB,kBAAkB,EAClB,0DAA0D,CAC3D,CAAC;IACJ,CAAC;AACH,CAAC;AAYD,MAAM,UAAU,uBAAuB,CAAC,QAAwB;IAC9D,OAAO,QAAQ,CAAC,OAAO,CAAC;;;;GAIvB,CAAC,CAAC,GAAG,EAAsB,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,QAAwB;IACrE,OAAO,uBAAuB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,gCAAgC,CAC9C,QAAwB,EACxB,UAAyC;IAEzC,OAAO,wBAAwB,CAAC,QAAQ,EAAE,GAAG,EAAE;QAC7C,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC;gBAAE,SAAS;YAClD,QAAQ;iBACL,OAAO,CAAC,iFAAiF,CAAC;iBAC1F,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;YACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,GAAG,EAAwB,EAAE,OAAO,CAAC;YACrG,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,4DAA4D,CAAC,CAAC;YACnG,CAAC;YACD,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,QAA+B;IAI7D,IAAI,OAAO,QAAQ,CAAC,oBAAoB,KAAK,QAAQ;WAChD,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,oBAAoB,CAAC;WACpD,QAAQ,CAAC,oBAAoB,GAAG,CAAC;WACjC,OAAO,QAAQ,CAAC,oBAAoB,KAAK,QAAQ;WACjD,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,oBAAoB,CAAC;WACpD,QAAQ,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,YAAY,CACpB,iBAAiB,EACjB,uDAAuD,CACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAChC,0BAAkC,EAClC,6BAAqC;IAErC,OAAO,6BAA6B,GAAG,CAAC;WACnC,0BAA0B,GAAG,6BAA6B,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,QAAwB,EACxB,YAAoC;IAEpC,4BAA4B,CAAC,YAAY,CAAC,CAAC;IAC3C,iCAAiC,CAAC,YAAY,CAAC,YAAY,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACrF,IAAI,YAAY,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC1C,iCAAiC,CAC/B,YAAY,CAAC,UAAU,CAAC,YAAY,EACpC,YAAY,CAAC,UAAU,CAAC,SAAS,CAClC,CAAC;QACF,IAAI,YAAY,CAAC,UAAU,CAAC,YAAY,KAAK,YAAY,CAAC,YAAY;eACjE,YAAY,CAAC,UAAU,CAAC,SAAS,KAAK,YAAY,CAAC,SAAS,EAAE,CAAC;YAClE,QAAQ,CAAC,4DAA4D,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzD,IAAI,YAAY,CAAC,iBAAiB,KAAK,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7G,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,iDAAiD,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,wBAAwB,CAAC,QAAQ,EAAE,GAAG,EAAE;QAC7C,MAAM,QAAQ,GAAG,QAAQ;aACtB,OAAO,CAAC;;;;;;;OAOR,CAAC;aACD,GAAG,CAKD,YAAY,CAAC,aAAa,CAAC,CAAC;QACjC,IAAI,QAAQ,KAAK,SAAS;YAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC;QAC3C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,QAAQ,KAAK,SAAS;mBACrB,QAAQ,CAAC,YAAY,KAAK,UAAU,CAAC,YAAY;mBACjD,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS,EAAE,CAAC;gBACjD,QAAQ,CAAC,+CAA+C,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;aAAM,IAAI,QAAQ,IAAI,QAAQ,CAAC,YAAY,KAAK,YAAY,CAAC,YAAY,EAAE,CAAC;YAC3E,QAAQ,CAAC,+EAA+E,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS;eACrB,CAAC,QAAQ,CAAC,oBAAoB,GAAG,YAAY,CAAC,oBAAoB;mBAChE,yBAAyB,CAC1B,QAAQ,CAAC,oBAAoB,EAC7B,YAAY,CAAC,oBAAoB,CAClC,CAAC,EAAE,CAAC;YACP,QAAQ,CAAC,uEAAuE,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,UAAU,GAAG,QAAQ;aACxB,OAAO,CAAC;;;;;OAKR,CAAC;aACD,GAAG,CAID,YAAY,CAAC,YAAY,CAAC,CAAC;QAChC,IAAI,UAAU,KAAK,SAAS;YAAE,sBAAsB,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,UAAU,IAAI,UAAU,CAAC,SAAS,KAAK,YAAY,CAAC,SAAS,EAAE,CAAC;YAClE,QAAQ,CAAC,qDAAqD,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,UAAU,KAAK,SAAS;eACvB,CAAC,UAAU,CAAC,oBAAoB,GAAG,YAAY,CAAC,oBAAoB;mBAClE,yBAAyB,CAC1B,UAAU,CAAC,oBAAoB,EAC/B,YAAY,CAAC,oBAAoB,CAClC,CAAC,EAAE,CAAC;YACP,QAAQ,CAAC,8DAA8D,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,4BAA4B,GAAG,UAAU,KAAK,SAAS;YAC3D,CAAC,CAAC,YAAY,CAAC,oBAAoB;YACnC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,oBAAoB,EAAE,YAAY,CAAC,oBAAoB,CAAC,CAAC;QAEjF,MAAM,SAAS,GAAG,QAAQ;aACvB,OAAO,CAAC,4DAA4D,CAAC;aACrE,GAAG,CAA4B,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,SAAS,IAAI,SAAS,CAAC,aAAa,KAAK,YAAY,CAAC,YAAY,EAAE,CAAC;YACvE,QAAQ,CAAC,qDAAqD,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC;QAC5B,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ;iBACL,OAAO,CAAC;;;;;SAKR,CAAC;iBACD,GAAG,CACF,YAAY,CAAC,YAAY,EACzB,YAAY,CAAC,SAAS,EACtB,YAAY,CAAC,WAAW,EACxB,YAAY,CAAC,iBAAiB,EAC9B,YAAY,CAAC,oBAAoB,EACjC,YAAY,CAAC,oBAAoB,EACjC,GAAG,EACH,GAAG,CACJ,CAAC;QACN,CAAC;aAAM,CAAC;YACN,QAAQ;iBACL,OAAO,CAAC,6IAA6I,CAAC;iBACtJ,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,oBAAoB,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;YACpG,mBAAmB,CAAC,QAAQ,EAAE,yDAAyD,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ;iBACL,OAAO,CAAC;;;;SAIR,CAAC;iBACD,GAAG,CAAC,YAAY,CAAC,YAAY,EAAE,YAAY,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;aAAM,IAAI,QAAQ,CAAC,YAAY,KAAK,YAAY,CAAC,YAAY,EAAE,CAAC;YAC/D,QAAQ;iBACL,OAAO,CAAC,iGAAiG,CAAC;iBAC1G,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,YAAY,CAAC,aAAa,CAAC,CAAC;YACnE,mBAAmB,CAAC,QAAQ,EAAE,yDAAyD,CAAC,CAAC;QAC3F,CAAC;aAAM,CAAC;YACN,QAAQ;iBACL,OAAO,CAAC;;;;SAIR,CAAC;iBACD,GAAG,CACF,YAAY,CAAC,YAAY,EACzB,GAAG,EACH,QAAQ,CAAC,YAAY,EACrB,YAAY,CAAC,aAAa,CAC3B,CAAC;YACJ,mBAAmB,CAAC,QAAQ,EAAE,mDAAmD,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,kBAAkB,GAAG,QAAQ;aAChC,OAAO,CAAC;;;;;;;OAOR,CAAC;aACD,GAAG,CAKD,YAAY,CAAC,aAAa,CAAC,CAAC;QACjC,IAAI,kBAAkB,KAAK,SAAS;YAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;QACjF,IAAI,kBAAkB,EAAE,YAAY,KAAK,YAAY,CAAC,YAAY;eAC7D,kBAAkB,CAAC,SAAS,KAAK,YAAY,CAAC,SAAS,EAAE,CAAC;YAC7D,QAAQ,CAAC,iEAAiE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,kBAAkB,CAAC,oBAAoB,KAAK,YAAY,CAAC,oBAAoB;eAC5E,kBAAkB,CAAC,oBAAoB,KAAK,4BAA4B,EAAE,CAAC;YAC9E,QAAQ,CAAC,yEAAyE,CAAC,CAAC;QACtF,CAAC;QACD,OAAO;YACL,OAAO;YACP,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,SAAS,EAAE,YAAY,CAAC,SAAS;YACjC,aAAa,EAAE,YAAY,CAAC,aAAa;SAC1C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/repository/cwd-schema.d.ts

@@ -0,0 +1,4 @@
+import * as z from 'zod/v4';
+/** Validate one explicitly supplied MCP working directory before filesystem access. */
+export declare const absoluteCwdSchema: z.ZodString;
+//# sourceMappingURL=cwd-schema.d.ts.map

package/dist/repository/cwd-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cwd-schema.d.ts","sourceRoot":"","sources":["../../src/repository/cwd-schema.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,uFAAuF;AACvF,eAAO,MAAM,iBAAiB,aAGsD,CAAC"}

package/dist/repository/cwd-schema.js

@@ -0,0 +1,8 @@
+import path from 'node:path';
+import * as z from 'zod/v4';
+/** Validate one explicitly supplied MCP working directory before filesystem access. */
+export const absoluteCwdSchema = z.string()
+    .min(1)
+    .refine(path.isAbsolute, { message: 'cwd must be an absolute path' })
+    .refine((value) => !value.includes('\0'), { message: 'cwd must not contain NUL' });
+//# sourceMappingURL=cwd-schema.js.map

package/dist/repository/cwd-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cwd-schema.js","sourceRoot":"","sources":["../../src/repository/cwd-schema.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,uFAAuF;AACvF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE;KACxC,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;KACpE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC"}

package/dist/repository/detect-root.d.ts

@@ -0,0 +1,13 @@
+export type RootSource = 'explicit' | 'binding' | 'git' | 'git-marker' | 'directory';
+export interface DetectedRepositoryRoot {
+    root: string;
+    source: RootSource;
+}
+export interface DetectRepositoryRootOptions {
+    cwd?: string;
+    root?: string;
+    allowDirectory?: boolean;
+}
+export declare function canonicalDirectory(directory: string): string;
+export declare function detectRepositoryRoot(options?: DetectRepositoryRootOptions): DetectedRepositoryRoot;
+//# sourceMappingURL=detect-root.d.ts.map

package/dist/repository/detect-root.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-root.d.ts","sourceRoot":"","sources":["../../src/repository/detect-root.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,KAAK,GAAG,YAAY,GAAG,WAAW,CAAC;AAErF,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAuB5D;AA0BD,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,2BAAgC,GAAG,sBAAsB,CAuBtG"}

package/dist/repository/detect-root.js

@@ -0,0 +1,77 @@
+import { execFileSync } from 'node:child_process';
+import { existsSync, realpathSync, statSync } from 'node:fs';
+import path from 'node:path';
+import { KiokukoError } from '../errors.js';
+export function canonicalDirectory(directory) {
+    if (!path.isAbsolute(directory)) {
+        throw new KiokukoError('VALIDATION_ERROR', 'Directory path must be absolute');
+    }
+    try {
+        const resolved = realpathSync(directory);
+        if (!statSync(resolved).isDirectory()) {
+            throw new KiokukoError('VALIDATION_ERROR', 'Repository root must be a directory');
+        }
+        return resolved;
+    }
+    catch (error) {
+        if (error instanceof KiokukoError)
+            throw error;
+        const code = error instanceof Error && 'code' in error
+            ? error.code
+            : undefined;
+        if (code === 'ENOENT' || code === 'ENOTDIR') {
+            throw new KiokukoError('NOT_FOUND', 'Directory was not found');
+        }
+        if (code === 'EACCES' || code === 'EPERM') {
+            throw new KiokukoError('VALIDATION_ERROR', 'Directory is not accessible');
+        }
+        throw error;
+    }
+}
+function ancestorDirectories(start) {
+    const directories = [];
+    let current = canonicalDirectory(start);
+    for (;;) {
+        directories.push(current);
+        const parent = path.dirname(current);
+        if (parent === current)
+            return directories;
+        current = parent;
+    }
+}
+function gitRoot(cwd) {
+    try {
+        const output = execFileSync('git', ['rev-parse', '--show-toplevel'], {
+            cwd,
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+        }).trim();
+        return output ? canonicalDirectory(output) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function detectRepositoryRoot(options = {}) {
+    const cwd = canonicalDirectory(options.cwd ?? process.cwd());
+    if (options.root !== undefined) {
+        return { root: canonicalDirectory(options.root), source: 'explicit' };
+    }
+    for (const directory of ancestorDirectories(cwd)) {
+        if (existsSync(path.join(directory, '.kiokuko.json'))) {
+            return { root: directory, source: 'binding' };
+        }
+    }
+    const discoveredGitRoot = gitRoot(cwd);
+    if (discoveredGitRoot)
+        return { root: discoveredGitRoot, source: 'git' };
+    for (const directory of ancestorDirectories(cwd)) {
+        if (existsSync(path.join(directory, '.git'))) {
+            return { root: directory, source: 'git-marker' };
+        }
+    }
+    if (options.allowDirectory)
+        return { root: cwd, source: 'directory' };
+    throw new KiokukoError('NOT_FOUND', 'No repository root found; pass --root or --allow-directory');
+}
+//# sourceMappingURL=detect-root.js.map

package/dist/repository/detect-root.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-root.js","sourceRoot":"","sources":["../../src/repository/detect-root.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAe5C,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,qCAAqC,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY;YAAE,MAAM,KAAK,CAAC;QAC/C,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK;YACpD,CAAC,CAAE,KAA+B,CAAC,IAAI;YACvC,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1C,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,6BAA6B,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,SAAS,CAAC;QACR,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,WAAW,CAAC;QAC3C,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE;YACnE,GAAG;YACH,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAuC,EAAE;IAC5E,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACxE,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;YACtD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,iBAAiB;QAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAEzE,KAAK,MAAM,SAAS,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,cAAc;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACtE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,4DAA4D,CAAC,CAAC;AACpG,CAAC"}

package/dist/repository/framework-version.d.ts

@@ -0,0 +1,8 @@
+export type FrameworkVersionCompatibility = 'exact' | 'compatible' | 'unknown' | 'incompatible';
+/**
+ * Compare an observed framework version or range with a required version or range.
+ * Unknown syntax fails closed at callers. An observed range is compatible only
+ * when every version it permits is also permitted by the requirement.
+ */
+export declare function satisfiesFrameworkVersion(actual: string, requirement: string): FrameworkVersionCompatibility;
+//# sourceMappingURL=framework-version.d.ts.map

package/dist/repository/framework-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework-version.d.ts","sourceRoot":"","sources":["../../src/repository/framework-version.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,6BAA6B,GAAG,OAAO,GAAG,YAAY,GAAG,SAAS,GAAG,cAAc,CAAC;AAQhG;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,6BAA6B,CAc5G"}

package/dist/repository/framework-version.js

@@ -0,0 +1,29 @@
+import { satisfies, subset, valid, validRange } from 'semver';
+function normalizeExactVersion(value) {
+    const match = value.trim().match(/^v?(\d+)(?:\.(\d+))?(?:\.(\d+))?((?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?)$/u);
+    if (match === null)
+        return null;
+    return valid(`${match[1]}.${match[2] ?? '0'}.${match[3] ?? '0'}${match[4] ?? ''}`);
+}
+/**
+ * Compare an observed framework version or range with a required version or range.
+ * Unknown syntax fails closed at callers. An observed range is compatible only
+ * when every version it permits is also permitted by the requirement.
+ */
+export function satisfiesFrameworkVersion(actual, requirement) {
+    const normalizedActual = normalizeExactVersion(actual);
+    const requirementRange = validRange(requirement);
+    if (requirementRange === null)
+        return 'unknown';
+    const exactRequirement = valid(requirement);
+    if (normalizedActual !== null) {
+        if (exactRequirement !== null)
+            return normalizedActual === exactRequirement ? 'exact' : 'incompatible';
+        return satisfies(normalizedActual, requirementRange) ? 'compatible' : 'incompatible';
+    }
+    const actualRange = validRange(actual);
+    if (actualRange === null)
+        return 'unknown';
+    return subset(actualRange, requirementRange) ? 'compatible' : 'incompatible';
+}
+//# sourceMappingURL=framework-version.js.map

package/dist/repository/framework-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework-version.js","sourceRoot":"","sources":["../../src/repository/framework-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAI9D,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;IAClH,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAc,EAAE,WAAmB;IAC3E,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,gBAAgB,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,gBAAgB,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAEhD,MAAM,gBAAgB,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC9B,IAAI,gBAAgB,KAAK,IAAI;YAAE,OAAO,gBAAgB,KAAK,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;QACvG,OAAO,SAAS,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC;IACvF,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,MAAM,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC;AAC/E,CAAC"}

package/dist/repository/git-origin.d.ts

@@ -0,0 +1,2 @@
+export declare function readGitOrigin(repositoryRoot: string): string | undefined;
+//# sourceMappingURL=git-origin.d.ts.map

package/dist/repository/git-origin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-origin.d.ts","sourceRoot":"","sources":["../../src/repository/git-origin.ts"],"names":[],"mappings":"AAEA,wBAAgB,aAAa,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAWxE"}

package/dist/repository/git-origin.js

@@ -0,0 +1,15 @@
+import { execFileSync } from 'node:child_process';
+export function readGitOrigin(repositoryRoot) {
+    try {
+        const value = execFileSync('git', ['config', '--get', 'remote.origin.url'], {
+            cwd: repositoryRoot,
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+        }).trim();
+        return value || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=git-origin.js.map

package/dist/repository/git-origin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-origin.js","sourceRoot":"","sources":["../../src/repository/git-origin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,UAAU,aAAa,CAAC,cAAsB;IAClD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE;YAC1E,GAAG,EAAE,cAAc;YACnB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAK,IAAI,SAAS,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/repository/gitignore.d.ts

@@ -0,0 +1,8 @@
+export declare const PROJECT_BINDING_IGNORE_ENTRY = ".kiokuko.json";
+export interface RenderedProjectGitignore {
+    content: string;
+    action: 'created' | 'updated' | 'unchanged';
+}
+/** Append the project binding ignore entry without rewriting user-owned bytes. */
+export declare function renderProjectGitignore(existing: string | undefined): RenderedProjectGitignore;
+//# sourceMappingURL=gitignore.d.ts.map

package/dist/repository/gitignore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitignore.d.ts","sourceRoot":"","sources":["../../src/repository/gitignore.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,4BAA4B,kBAAkB,CAAC;AAE5D,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;CAC7C;AASD,kFAAkF;AAClF,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,wBAAwB,CAW7F"}

package/dist/repository/gitignore.js

@@ -0,0 +1,21 @@
+export const PROJECT_BINDING_IGNORE_ENTRY = '.kiokuko.json';
+function containsProjectBindingEntry(content) {
+    return content
+        .replaceAll('\r\n', '\n')
+        .split('\n')
+        .some((line) => line === PROJECT_BINDING_IGNORE_ENTRY || line === `/${PROJECT_BINDING_IGNORE_ENTRY}`);
+}
+/** Append the project binding ignore entry without rewriting user-owned bytes. */
+export function renderProjectGitignore(existing) {
+    if (existing !== undefined && containsProjectBindingEntry(existing)) {
+        return { content: existing, action: 'unchanged' };
+    }
+    const current = existing ?? '';
+    const newline = current.includes('\r\n') ? '\r\n' : '\n';
+    const separator = current.length === 0 || current.endsWith('\n') ? '' : newline;
+    return {
+        content: `${current}${separator}${PROJECT_BINDING_IGNORE_ENTRY}${newline}`,
+        action: existing === undefined ? 'created' : 'updated',
+    };
+}
+//# sourceMappingURL=gitignore.js.map

package/dist/repository/gitignore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitignore.js","sourceRoot":"","sources":["../../src/repository/gitignore.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,4BAA4B,GAAG,eAAe,CAAC;AAO5D,SAAS,2BAA2B,CAAC,OAAe;IAClD,OAAO,OAAO;SACX,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC;SACxB,KAAK,CAAC,IAAI,CAAC;SACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,4BAA4B,IAAI,IAAI,KAAK,IAAI,4BAA4B,EAAE,CAAC,CAAC;AAC1G,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,sBAAsB,CAAC,QAA4B;IACjE,IAAI,QAAQ,KAAK,SAAS,IAAI,2BAA2B,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,IAAI,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAChF,OAAO;QACL,OAAO,EAAE,GAAG,OAAO,GAAG,SAAS,GAAG,4BAA4B,GAAG,OAAO,EAAE;QAC1E,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KACvD,CAAC;AACJ,CAAC"}

package/dist/repository/identity-value.d.ts

@@ -0,0 +1,4 @@
+export declare function validateRepositoryId(value: unknown): asserts value is string;
+export declare function validateWorkspace(value: unknown): asserts value is string;
+export declare function validateRepositoryBindingIdentity(repositoryId: unknown, workspace: unknown): void;
+//# sourceMappingURL=identity-value.d.ts.map

package/dist/repository/identity-value.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-value.d.ts","sourceRoot":"","sources":["../../src/repository/identity-value.ts"],"names":[],"mappings":"AAoBA,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAE5E;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAEzE;AAED,wBAAgB,iCAAiC,CAAC,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI,CASjG"}

package/dist/repository/identity-value.js

@@ -0,0 +1,24 @@
+import { KiokukoError } from '../errors.js';
+const REPOSITORY_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u;
+const WORKSPACE_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/u;
+const RESERVED_GLOBAL_REPOSITORY_ID = 'kiokuko_global';
+const RESERVED_GLOBAL_WORKSPACE = 'global';
+function validateCanonicalIdentity(value, label, pattern) {
+    if (typeof value !== 'string' || !pattern.test(value)) {
+        throw new KiokukoError('VALIDATION_ERROR', `${label} must use the canonical ASCII identity grammar`);
+    }
+}
+export function validateRepositoryId(value) {
+    validateCanonicalIdentity(value, 'repositoryId', REPOSITORY_ID_PATTERN);
+}
+export function validateWorkspace(value) {
+    validateCanonicalIdentity(value, 'workspace', WORKSPACE_PATTERN);
+}
+export function validateRepositoryBindingIdentity(repositoryId, workspace) {
+    validateRepositoryId(repositoryId);
+    validateWorkspace(workspace);
+    if (repositoryId === RESERVED_GLOBAL_REPOSITORY_ID || workspace === RESERVED_GLOBAL_WORKSPACE) {
+        throw new KiokukoError('VALIDATION_ERROR', 'Reserved global identities cannot be used for a project repository binding');
+    }
+}
+//# sourceMappingURL=identity-value.js.map

package/dist/repository/identity-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-value.js","sourceRoot":"","sources":["../../src/repository/identity-value.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,qBAAqB,GAAG,sCAAsC,CAAC;AACrE,MAAM,iBAAiB,GAAG,sCAAsC,CAAC;AACjE,MAAM,6BAA6B,GAAG,gBAAgB,CAAC;AACvD,MAAM,yBAAyB,GAAG,QAAQ,CAAC;AAE3C,SAAS,yBAAyB,CAChC,KAAc,EACd,KAAmC,EACnC,OAAe;IAEf,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,YAAY,CACpB,kBAAkB,EAClB,GAAG,KAAK,gDAAgD,CACzD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,yBAAyB,CAAC,KAAK,EAAE,cAAc,EAAE,qBAAqB,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,yBAAyB,CAAC,KAAK,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,YAAqB,EAAE,SAAkB;IACzF,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACnC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,YAAY,KAAK,6BAA6B,IAAI,SAAS,KAAK,yBAAyB,EAAE,CAAC;QAC9F,MAAM,IAAI,YAAY,CACpB,kBAAkB,EAClB,4EAA4E,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/repository/identity.d.ts

@@ -0,0 +1,19 @@
+export interface ExistingBindingIdentity {
+    repositoryId: string;
+    workspace: string;
+}
+export interface RepositoryIdentityOptions {
+    repositoryRoot: string;
+    remoteUrl?: string;
+    repositoryId?: string;
+    workspace?: string;
+    existingBinding?: ExistingBindingIdentity;
+}
+export interface RepositoryIdentity {
+    repositoryId: string;
+    workspace: string;
+    displayName: string;
+    remoteFingerprint: string | null;
+}
+export declare function createRepositoryIdentity(options: RepositoryIdentityOptions): RepositoryIdentity;
+//# sourceMappingURL=identity.d.ts.map

package/dist/repository/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/repository/identity.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,uBAAuB,CAAC;CAC3C;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAWD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG,kBAAkB,CAY/F"}

package/dist/repository/identity.js

@@ -0,0 +1,25 @@
+import { createHash, randomUUID } from 'node:crypto';
+import path from 'node:path';
+import { fingerprintRemoteUrl } from './remote-url.js';
+import { validateRepositoryBindingIdentity } from './identity-value.js';
+function slugForRoot(repositoryRoot) {
+    const base = path.basename(repositoryRoot) || 'repository';
+    return base.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '') || 'repository';
+}
+function shortIdentityHash(value) {
+    return createHash('sha256').update(value).digest('hex').slice(0, 12);
+}
+export function createRepositoryIdentity(options) {
+    const displayName = slugForRoot(options.repositoryRoot);
+    const remoteFingerprint = options.remoteUrl ? fingerprintRemoteUrl(options.remoteUrl) : null;
+    const remoteHash = remoteFingerprint?.slice('sha256:'.length);
+    const repositoryId = options.existingBinding?.repositoryId
+        ?? options.repositoryId
+        ?? (remoteHash ? `repo_${remoteHash.slice(0, 12)}` : `repo_${randomUUID()}`);
+    const workspace = options.existingBinding?.workspace
+        ?? options.workspace
+        ?? `project:${displayName}-${shortIdentityHash(repositoryId)}`;
+    validateRepositoryBindingIdentity(repositoryId, workspace);
+    return { repositoryId, workspace, displayName, remoteFingerprint };
+}
+//# sourceMappingURL=identity.js.map

package/dist/repository/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/repository/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,iCAAiC,EAAE,MAAM,qBAAqB,CAAC;AAsBxE,SAAS,WAAW,CAAC,cAAsB;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC;IAC3D,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC;AAChG,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAkC;IACzE,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7F,MAAM,UAAU,GAAG,iBAAiB,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE,YAAY;WACrD,OAAO,CAAC,YAAY;WACpB,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,UAAU,EAAE,EAAE,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,EAAE,SAAS;WAC/C,OAAO,CAAC,SAAS;WACjB,WAAW,WAAW,IAAI,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;IACjE,iCAAiC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC3D,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;AACrE,CAAC"}