niceeval 0.12.2-canary.31 → 0.13.0

package/dist/record/migration/orchestrate.cjs

@@ -1,368 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RecordMigrationPlan = void 0;
-exports.assertRecordMigrationNotInterrupted = assertRecordMigrationNotInterrupted;
-exports.planRecordMigrationWithStorage = planRecordMigrationWithStorage;
-exports.migrateRecordWithStorage = migrateRecordWithStorage;
-exports.planRecordMigration = planRecordMigration;
-exports.migrateRecord = migrateRecord;
-const effect_1 = require("effect");
-const runtime_ts_1 = require("../attachment/runtime.cjs");
-const services_ts_1 = require("../platform/services.cjs");
-const errors_ts_1 = require("./errors.cjs");
-const plan_ts_1 = require("./plan.cjs");
-const registry_ts_1 = require("./registry.cjs");
-/** Exact plan identity prevents a copied public summary from becoming executable. */
-const migrationPlanStates = new WeakMap();
-const migrationPlanRegistries = new WeakMap();
-function snapshotBackupState(backup) {
-    switch (backup.state) {
-        case "git-restore-point":
-            return Object.freeze({ state: backup.state, commit: backup.commit });
-        case "portable-root-dirty":
-            return Object.freeze({
-                state: backup.state,
-                entries: Object.freeze([...backup.entries]),
-            });
-        case "not-git-worktree":
-        case "root-outside-worktree":
-            return Object.freeze({ state: backup.state });
-    }
-}
-function snapshotMigrationSource(source) {
-    return Object.freeze({
-        root: source.root,
-        fingerprint: source.fingerprint,
-        core: Object.freeze({
-            format: source.core.format,
-            value: source.core.value,
-        }),
-        attachments: Object.freeze(source.attachments.map((attachment) => Object.freeze({
-            directory: attachment.directory,
-            owner: attachment.owner,
-            name: attachment.name,
-            schemaId: attachment.schemaId,
-        }))),
-    });
-}
-/**
- * Package-created plan bound to the source snapshot and Git observation. It
- * contains no CLI confirmation and cannot be reconstructed from its summary.
- */
-class RecordMigrationPlan {
-    summary;
-    constructor(summary) {
-        this.summary = summary;
-        Object.freeze(this);
-    }
-    static make(input) {
-        const source = snapshotMigrationSource(input.source);
-        const backup = snapshotBackupState(input.backup);
-        const attachmentPlans = Object.freeze(input.attachments.map((entry, index) => {
-            const sourceAttachment = source.attachments[index];
-            if (sourceAttachment === undefined) {
-                throw new Error("Record migration Attachment plan lost its source");
-            }
-            return Object.freeze({ ...entry, source: sourceAttachment });
-        }));
-        const attachments = Object.freeze(attachmentPlans.map((entry) => summarizeAttachment(entry)));
-        const hasAttachmentMigration = attachments.some((entry) => entry.state === "migrate");
-        const plan = new RecordMigrationPlan(Object.freeze({
-            core: input.core.summary,
-            attachments,
-            backup,
-            state: input.core.summary.state === "needed" || hasAttachmentMigration
-                ? "needed"
-                : "not-needed",
-        }));
-        migrationPlanStates.set(plan, Object.freeze({
-            source,
-            core: input.core,
-            attachments: attachmentPlans,
-            backup,
-            storage: input.storage,
-        }));
-        return plan;
-    }
-}
-exports.RecordMigrationPlan = RecordMigrationPlan;
-function recordMigrationPlanState(plan) {
-    const state = migrationPlanStates.get(plan);
-    if (state === undefined) {
-        throw new Error("Record migration plan is not package-created");
-    }
-    return state;
-}
-function summarizeAttachment(entry) {
-    const base = {
-        owner: entry.source.owner,
-        name: entry.source.name,
-        schemaId: entry.source.schemaId,
-    };
-    if (entry.resolution === undefined || entry.resolution.state === "unsupported") {
-        return Object.freeze({ ...base, state: "unsupported" });
-    }
-    switch (entry.resolution.state) {
-        case "current":
-            return Object.freeze({ ...base, state: "current" });
-        case "migration-required":
-            return Object.freeze({ ...base, state: "migrate" });
-        case "migration-unavailable":
-            return Object.freeze({
-                ...base,
-                state: "migration-unavailable",
-                reason: entry.resolution.reason,
-            });
-    }
-}
-function hasSameBackupState(left, right) {
-    if (left.state !== right.state) {
-        return false;
-    }
-    if (left.state === "git-restore-point" && right.state === "git-restore-point") {
-        return left.commit === right.commit;
-    }
-    if (left.state === "portable-root-dirty" && right.state === "portable-root-dirty") {
-        return (left.entries.length === right.entries.length &&
-            left.entries.every((entry, index) => entry === right.entries[index]));
-    }
-    return true;
-}
-function authorizationIsValid(backup, authorization) {
-    return backup.state === "git-restore-point"
-        ? authorization.state === "git-restore-point"
-        : authorization.state === "accept-data-loss";
-}
-/**
- * Shared reader/open code may call this guard after acquiring its shared
- * maintenance lock. Presence alone is terminal; content is intentionally not
- * decoded and no recovery action is attempted.
- */
-function assertRecordMigrationNotInterrupted(root) {
-    return effect_1.Effect.gen(function* () {
-        const fileSystem = yield* services_ts_1.RecordFileSystem;
-        const present = yield* fileSystem.migrationSentinelPresent(root);
-        if (present) {
-            return yield* effect_1.Effect.fail(new errors_ts_1.RecordMigrationInterruptedState({
-                code: "record-migration-interrupted",
-            }));
-        }
-    });
-}
-function withExclusiveMaintenance(input) {
-    return effect_1.Effect.scoped(effect_1.Effect.gen(function* () {
-        const lock = yield* services_ts_1.RecordMaintenanceLock;
-        yield* lock.acquireExclusive(input.root);
-        return yield* input.work;
-    }));
-}
-function resolveAttachmentPlanEntries(input) {
-    return effect_1.Effect.forEach(input.source, (attachment) => {
-        const family = (0, runtime_ts_1.recordAttachmentRegistryFamily)(input.registry, attachment.owner, attachment.name);
-        if (family === undefined) {
-            return effect_1.Effect.succeed(Object.freeze({
-                source: attachment,
-                family: undefined,
-                resolution: undefined,
-            }));
-        }
-        const resolution = (0, runtime_ts_1.resolveRecordAttachmentMigration)(family, attachment.schemaId);
-        if (resolution === undefined) {
-            throw new Error("RecordAttachment registry returned a forged family");
-        }
-        if (resolution.state !== "migration-required") {
-            return effect_1.Effect.succeed(Object.freeze({ source: attachment, family, resolution }));
-        }
-        const readiness = input.storage.preflightAttachmentMigration;
-        if (readiness === undefined) {
-            return effect_1.Effect.succeed(Object.freeze({ source: attachment, family, resolution }));
-        }
-        return effect_1.Effect.map(readiness({ source: attachment, family, resolution }), (state) => state.state === "ready"
-            ? Object.freeze({ source: attachment, family, resolution })
-            : Object.freeze({
-                source: attachment,
-                family,
-                resolution: Object.freeze({
-                    state: "migration-unavailable",
-                    from: resolution.from,
-                    to: resolution.to,
-                    reason: state.reason,
-                }),
-            }));
-    }).pipe(effect_1.Effect.map((entries) => Object.freeze(entries)));
-}
-/**
- * Read-only preflight. It holds the real exclusive maintenance lock, checks
- * the sentinel before opening the source, delegates exact decode/closure/path
- * validation to storage, and records the platform Git backup state.
- */
-/** @internal Generic seam for layout adapters and synthetic migration tests. */
-function planRecordMigrationWithStorage(input) {
-    return withExclusiveMaintenance({
-        root: input.root,
-        work: effect_1.Effect.gen(function* () {
-            yield* assertRecordMigrationNotInterrupted(input.root);
-            const source = yield* input.storage.inspectSource({
-                root: input.root,
-                attachments: input.attachments,
-            });
-            if (source.root !== input.root) {
-                throw new Error("Record migration storage returned a source for another root");
-            }
-            const git = yield* services_ts_1.RecordGit;
-            const backup = yield* git.inspectBackupState(input.root);
-            const core = (0, plan_ts_1.makeRecordCoreMigrationPlan)({
-                registry: input.core,
-                sourceFormat: source.core.format,
-            });
-            if (effect_1.Either.isLeft(core)) {
-                return yield* effect_1.Effect.fail(core.left);
-            }
-            const attachments = yield* resolveAttachmentPlanEntries({
-                source: source.attachments,
-                registry: input.attachments,
-                storage: input.storage,
-            });
-            return RecordMigrationPlan.make({
-                source,
-                core: core.right,
-                attachments,
-                backup,
-                storage: input.storage,
-            });
-        }),
-    });
-}
-function currentAttachmentFamily(entry) {
-    if (entry.family === undefined) {
-        throw new Error("A migration-required Attachment must have a registered family");
-    }
-    return entry.family;
-}
-/**
- * Execute a package-issued plan in place. No handler catches interruption or
- * defects, and no failure path removes the sentinel. Thus converter, I/O, and
- * cancellation failure leave the root fail-closed for Git/backup recovery.
- */
-/** @internal Executes a plan issued by `planRecordMigrationWithStorage`. */
-function migrateRecordWithStorage(input) {
-    return effect_1.Effect.suspend(() => {
-        const state = recordMigrationPlanState(input.plan);
-        return withExclusiveMaintenance({
-            root: state.source.root,
-            work: effect_1.Effect.gen(function* () {
-                yield* assertRecordMigrationNotInterrupted(state.source.root);
-                const git = yield* services_ts_1.RecordGit;
-                const backup = yield* git.inspectBackupState(state.source.root);
-                if (!hasSameBackupState(state.backup, backup)) {
-                    return yield* effect_1.Effect.fail((0, errors_ts_1.recordMigrationPlanStale)());
-                }
-                const sourceCurrent = yield* state.storage.isSourceCurrent(state.source);
-                if (!sourceCurrent) {
-                    return yield* effect_1.Effect.fail((0, errors_ts_1.recordMigrationPlanStale)());
-                }
-                if (input.plan.summary.state === "not-needed") {
-                    return Object.freeze({
-                        state: "not-needed",
-                        plan: input.plan.summary,
-                    });
-                }
-                if (!authorizationIsValid(backup, input.authorization)) {
-                    return yield* effect_1.Effect.fail(backup.state === "git-restore-point"
-                        ? (0, errors_ts_1.recordMigrationAuthorizationInvalid)()
-                        : (0, errors_ts_1.recordMigrationConfirmationRequired)());
-                }
-                const fileSystem = yield* services_ts_1.RecordFileSystem;
-                // A portable mutation must never begin until the fail-closed marker is
-                // durable. Keeping this pair uninterruptible also means cancellation
-                // during publication leaves the sentinel in place rather than creating
-                // an ambiguous partially-started migration.
-                yield* effect_1.Effect.uninterruptible(effect_1.Effect.gen(function* () {
-                    yield* fileSystem.createMigrationSentinel(state.source.root);
-                    yield* fileSystem.syncDirectory((0, services_ts_1.recordPortablePath)(state.source.root));
-                }));
-                let core = state.source.core.value;
-                const coreResolution = (0, plan_ts_1.recordCoreMigrationPlanResolution)(state.core);
-                if (coreResolution.state === "migration-required") {
-                    for (const edge of coreResolution.edges) {
-                        core = yield* edge.convert(core).pipe(effect_1.Effect.catchAll(() => effect_1.Effect.fail((0, errors_ts_1.recordCoreMigrationStepFailed)({ from: edge.from, to: edge.to }))));
-                    }
-                }
-                yield* state.storage.stageCore({ source: state.source, value: core });
-                for (const entry of state.attachments) {
-                    if (entry.resolution?.state !== "migration-required") {
-                        yield* state.storage.preserveAttachment({
-                            source: entry.source,
-                            targetCore: core,
-                        });
-                        continue;
-                    }
-                    let value = yield* state.storage.readAttachment({
-                        source: entry.source,
-                        family: currentAttachmentFamily(entry),
-                    });
-                    for (const edge of entry.resolution.edges) {
-                        const write = yield* state.storage
-                            .convertAttachment({ edge, source: value })
-                            .pipe(effect_1.Effect.catchAll(() => effect_1.Effect.fail((0, errors_ts_1.recordAttachmentMigrationStepFailed)({
-                            owner: entry.source.owner,
-                            name: entry.source.name,
-                            schemaId: entry.source.schemaId,
-                        }))));
-                        value = yield* state.storage.persistAttachment({
-                            source: entry.source,
-                            targetCore: core,
-                            edge,
-                            write,
-                        });
-                    }
-                }
-                // The root document remains interruptible while it is being written:
-                // cancellation there leaves the marker. Once that synced last write
-                // completes, deletion and directory sync form the tiny commit point.
-                yield* effect_1.Effect.uninterruptibleMask((restore) => restore(state.storage.writeRecordDocumentLast({
-                    source: state.source,
-                    value: core,
-                })).pipe(effect_1.Effect.zipRight(fileSystem.removeMigrationSentinel(state.source.root)), effect_1.Effect.zipRight(fileSystem.syncDirectory((0, services_ts_1.recordPortablePath)(state.source.root)))));
-                return Object.freeze({
-                    state: "migrated",
-                    plan: input.plan.summary,
-                });
-            }),
-        });
-    });
-}
-/**
- * Public migration preflight. Applications install the current Core registry,
- * selected Attachment families, and layout adapter once through
- * `RecordMigrationRegistry`; callers only supply the durable Record root.
- */
-function planRecordMigration(input) {
-    return effect_1.Effect.gen(function* () {
-        const registry = yield* registry_ts_1.RecordMigrationRegistry;
-        const plan = yield* planRecordMigrationWithStorage({
-            root: input.root,
-            core: registry.core,
-            attachments: registry.attachments,
-            storage: registry.storage,
-        });
-        yield* effect_1.Effect.sync(() => {
-            migrationPlanRegistries.set(plan, registry);
-        });
-        return plan;
-    });
-}
-/**
- * Public in-place execution remains bound to the exact installed registry
- * observed during preflight. Re-providing a different registry makes the plan
- * stale instead of allowing a copied summary to select different converters.
- */
-function migrateRecord(input) {
-    return effect_1.Effect.flatMap(registry_ts_1.RecordMigrationRegistry, (registry) => {
-        const plannedRegistry = migrationPlanRegistries.get(input.plan);
-        return plannedRegistry === registry
-            ? migrateRecordWithStorage(input)
-            : effect_1.Effect.fail((0, errors_ts_1.recordMigrationPlanStale)());
-    });
-}
-//# sourceMappingURL=orchestrate.cjs.map

package/dist/record/migration/orchestrate.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"orchestrate.js","sourceRoot":"","sources":["orchestrate.ts"],"names":[],"mappings":";;;AA4KA,kFAUC;AAwDD,wEAwCC;AAiBD,4DAyFC;AAMD,kDAgBC;AAMD,sCAUC;AAtaD,mCAAwC;AACxC,yDAA6G;AAM7G,yDAA0I;AAC1I,2CAA4Q;AAE5Q,uCAA+J;AAC/J,+CAAgI;AAgChI,qFAAqF;AACrF,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAAmB,CAAC;AAC3D,MAAM,uBAAuB,GAAG,IAAI,OAAO,EAA0C,CAAC;AACtF,SAAS,mBAAmB,CAAC,MAAyB;IAClD,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,mBAAmB;YACpB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,KAAK,qBAAqB;YACtB,OAAO,MAAM,CAAC,MAAM,CAAC;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;aAC9C,CAAC,CAAC;QACP,KAAK,kBAAkB,CAAC;QACxB,KAAK,uBAAuB;YACxB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;AACL,CAAC;AACD,SAAS,uBAAuB,CAAY,MAAwC;IAChF,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;YAChB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;YAC1B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;SAC3B,CAAC;QACF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YAC5E,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAChC,CAAC,CAAC,CAAC;KACP,CAAC,CAAC;AACP,CAAC;AACD;;;GAGG;AACH,MAAa,mBAAmB;IACC;IAA7B,YAA6B,OAAmC;QAAnC,YAAO,GAAP,OAAO,CAA4B;QAC5D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,CAAC,IAAI,CAAY,KAMtB;QACG,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACzE,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACnD,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC,CAAC;QACJ,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9F,MAAM,sBAAsB,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,IAAI,mBAAmB,CAAY,MAAM,CAAC,MAAM,CAAC;YAC1D,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;YACxB,WAAW;YACX,MAAM;YACN,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,sBAAsB;gBAClE,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,YAAY;SACrB,CAAC,CAAC,CAAC;QACJ,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;YACxC,MAAM;YACN,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,eAAe;YAC5B,MAAM;YACN,OAAO,EAAE,KAAK,CAAC,OAAO;SACzB,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAvCD,kDAuCC;AACD,SAAS,wBAAwB,CAAY,IAAoC;IAC7E,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,KAA4C,CAAC;AACxD,CAAC;AACD,SAAS,mBAAmB,CAAC,KAAyC;IAClE,MAAM,IAAI,GAAG;QACT,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;QACzB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;QACvB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;KACzB,CAAC;IACX,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QAC7E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,aAAsB,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,QAAQ,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC7B,KAAK,SAAS;YACV,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAkB,EAAE,CAAC,CAAC;QACjE,KAAK,oBAAoB;YACrB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAkB,EAAE,CAAC,CAAC;QACjE,KAAK,uBAAuB;YACxB,OAAO,MAAM,CAAC,MAAM,CAAC;gBACjB,GAAG,IAAI;gBACP,KAAK,EAAE,uBAAgC;gBACvC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM;aAClC,CAAC,CAAC;IACX,CAAC;AACL,CAAC;AACD,SAAS,kBAAkB,CAAC,IAAuB,EAAE,KAAwB;IACzE,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,mBAAmB,IAAI,KAAK,CAAC,KAAK,KAAK,mBAAmB,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;IACxC,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,qBAAqB,IAAI,KAAK,CAAC,KAAK,KAAK,qBAAqB,EAAE,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM;YAChD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AACD,SAAS,oBAAoB,CAAC,MAAyB,EAAE,aAA2C;IAChG,OAAO,MAAM,CAAC,KAAK,KAAK,mBAAmB;QACvC,CAAC,CAAC,aAAa,CAAC,KAAK,KAAK,mBAAmB;QAC7C,CAAC,CAAC,aAAa,CAAC,KAAK,KAAK,kBAAkB,CAAC;AACrD,CAAC;AACD;;;;GAIG;AACH,SAAgB,mCAAmC,CAAC,IAAgB;IAChE,OAAO,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,8BAAgB,CAAC;QAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,OAAO,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,2CAA+B,CAAC;gBAC1D,IAAI,EAAE,8BAA8B;aACvC,CAAC,CAAC,CAAC;QACR,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC;AACD,SAAS,wBAAwB,CAAc,KAG9C;IACG,OAAO,eAAM,CAAC,MAAM,CAAC,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,mCAAqB,CAAC;QAC1C,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IAC7B,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AACD,SAAS,4BAA4B,CAAY,KAIhD;IACG,OAAO,eAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE;QAC/C,MAAM,MAAM,GAAG,IAAA,2CAA8B,EAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QACjG,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,SAAS;gBACjB,UAAU,EAAE,SAAS;aACxB,CAAC,CAAC,CAAC;QACR,CAAC;QACD,MAAM,UAAU,GAAG,IAAA,6CAAgC,EAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;QACjF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,KAAK,oBAAoB,EAAE,CAAC;YAC5C,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,4BAA4B,CAAC;QAC7D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,eAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,KAAK,EAAsC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO;YAC3I,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAC3D,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;gBACZ,MAAM,EAAE,UAAU;gBAClB,MAAM;gBACN,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;oBACtB,KAAK,EAAE,uBAAgC;oBACvC,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,EAAE,EAAE,UAAU,CAAC,EAAE;oBACjB,MAAM,EAAE,KAAK,CAAC,MAAM;iBACvB,CAAC;aACL,CAAC,CAAC,CAAC;IACZ,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AACD;;;;GAIG;AACH,gFAAgF;AAChF,SAAgB,8BAA8B,CAAY,KAKzD;IACG,OAAO,wBAAwB,CAAC;QAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACtB,KAAK,CAAC,CAAC,mCAAmC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;gBAC9C,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,WAAW;aACjC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,uBAAS,CAAC;YAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,IAAA,qCAA2B,EAAC;gBACrC,QAAQ,EAAE,KAAK,CAAC,IAAI;gBACpB,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;aACnC,CAAC,CAAC;YACH,IAAI,eAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,CAAC;YACD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,4BAA4B,CAAC;gBACpD,MAAM,EAAE,MAAM,CAAC,WAAW;gBAC1B,QAAQ,EAAE,KAAK,CAAC,WAAW;gBAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;aACzB,CAAC,CAAC;YACH,OAAO,mBAAmB,CAAC,IAAI,CAAC;gBAC5B,MAAM;gBACN,IAAI,EAAE,IAAI,CAAC,KAAK;gBAChB,WAAW;gBACX,MAAM;gBACN,OAAO,EAAE,KAAK,CAAC,OAAO;aACzB,CAAC,CAAC;QACP,CAAC,CAAC;KACL,CAAC,CAAC;AACP,CAAC;AAKD,SAAS,uBAAuB,CAAC,KAAyC;IACtE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC;AACxB,CAAC;AACD;;;;GAIG;AACH,4EAA4E;AAC5E,SAAgB,wBAAwB,CAAY,KAGnD;IACG,OAAO,eAAM,CAAC,OAAO,CAAC,GAAG,EAAE;QACvB,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,OAAO,wBAAwB,CAAC;YAC5B,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;YACvB,IAAI,EAAE,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACtB,KAAK,CAAC,CAAC,mCAAmC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,uBAAS,CAAC;gBAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAChE,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;oBAC5C,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAA,oCAAwB,GAAE,CAAC,CAAC;gBAC1D,CAAC;gBACD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACzE,IAAI,CAAC,aAAa,EAAE,CAAC;oBACjB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAA,oCAAwB,GAAE,CAAC,CAAC;gBAC1D,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;oBAC5C,OAAO,MAAM,CAAC,MAAM,CAAC;wBACjB,KAAK,EAAE,YAAqB;wBAC5B,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;qBAC3B,CAAC,CAAC;gBACP,CAAC;gBACD,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;oBACrD,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,mBAAmB;wBAC1D,CAAC,CAAC,IAAA,+CAAmC,GAAE;wBACvC,CAAC,CAAC,IAAA,+CAAmC,GAAE,CAAC,CAAC;gBACjD,CAAC;gBACD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,8BAAgB,CAAC;gBAC3C,uEAAuE;gBACvE,qEAAqE;gBACrE,uEAAuE;gBACvE,4CAA4C;gBAC5C,KAAK,CAAC,CAAC,eAAM,CAAC,eAAe,CAAC,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAC9C,KAAK,CAAC,CAAC,UAAU,CAAC,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC7D,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,IAAA,gCAAkB,EAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC3E,CAAC,CAAC,CAAC,CAAC;gBACJ,IAAI,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;gBACnC,MAAM,cAAc,GAAG,IAAA,2CAAiC,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrE,IAAI,cAAc,CAAC,KAAK,KAAK,oBAAoB,EAAE,CAAC;oBAChD,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;wBACtC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,IAAA,yCAA6B,EAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC/I,CAAC;gBACL,CAAC;gBACD,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;oBACpC,IAAI,KAAK,CAAC,UAAU,EAAE,KAAK,KAAK,oBAAoB,EAAE,CAAC;wBACnD,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC;4BACpC,MAAM,EAAE,KAAK,CAAC,MAAM;4BACpB,UAAU,EAAE,IAAI;yBACnB,CAAC,CAAC;wBACH,SAAS;oBACb,CAAC;oBACD,IAAI,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;wBAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,MAAM,EAAE,uBAAuB,CAAC,KAAK,CAAC;qBACzC,CAAC,CAAC;oBACH,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;wBACxC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO;6BAC7B,iBAAiB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;6BAC1C,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,IAAA,+CAAmC,EAAC;4BAC5E,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;4BACzB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;4BACvB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;yBAClC,CAAC,CAAC,CAAC,CAAC,CAAC;wBACN,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC;4BAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;4BACpB,UAAU,EAAE,IAAI;4BAChB,IAAI;4BACJ,KAAK;yBACR,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;gBACD,qEAAqE;gBACrE,oEAAoE;gBACpE,qEAAqE;gBACrE,KAAK,CAAC,CAAC,eAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC;oBACzF,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,KAAK,EAAE,IAAI;iBACd,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,eAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,IAAA,gCAAkB,EAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpK,OAAO,MAAM,CAAC,MAAM,CAAC;oBACjB,KAAK,EAAE,UAAmB;oBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;iBAC3B,CAAC,CAAC;YACP,CAAC,CAAC;SACL,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC;AACD;;;;GAIG;AACH,SAAgB,mBAAmB,CAAC,KAEnC;IACG,OAAO,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,qCAAuB,CAAC;QAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,8BAA8B,CAAC;YAC/C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACpB,uBAAuB,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC,CAAC;AACP,CAAC;AACD;;;;GAIG;AACH,SAAgB,aAAa,CAAC,KAG7B;IACG,OAAO,eAAM,CAAC,OAAO,CAAC,qCAAuB,EAAE,CAAC,QAAQ,EAAE,EAAE;QACxD,MAAM,eAAe,GAAG,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO,eAAe,KAAK,QAAQ;YAC/B,CAAC,CAAC,wBAAwB,CAAC,KAAK,CAAC;YACjC,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAA,oCAAwB,GAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACP,CAAC","sourcesContent":["import { Effect, Either } from \"effect\";\nimport { recordAttachmentRegistryFamily, resolveRecordAttachmentMigration, } from \"../attachment/runtime.ts\";\nimport type { AnyRecordAttachmentFamily, RecordAttachmentMigrationResolution, RecordAttachmentRegistry, } from \"../attachment/types.ts\";\nimport type { RecordCoreV1 } from \"../model/core.ts\";\nimport type { RecordFormatId } from \"../model/identifiers.ts\";\nimport type { RecordGitError, RecordMaintenanceLockError, } from \"../platform/errors.ts\";\nimport type { RecordRoot } from \"../platform/root.ts\";\nimport { RecordFileSystem, RecordGit, RecordMaintenanceLock, recordPortablePath, type RecordBackupState, } from \"../platform/services.ts\";\nimport { recordAttachmentMigrationStepFailed, recordCoreMigrationStepFailed, recordMigrationAuthorizationInvalid, recordMigrationConfirmationRequired, recordMigrationPlanStale, RecordMigrationInterruptedState, type RecordCoreMigrationPlanInvalid, } from \"./errors.ts\";\nimport type { RecordMigrationAttachmentSource, RecordMigrationSource, RecordMigrationStorage, RecordMigrationStorageError, } from \"./internal.ts\";\nimport { makeRecordCoreMigrationPlan, recordCoreMigrationPlanResolution, type RecordCoreMigrationPlan, type RecordCoreMigrationPlanSummary, } from \"./plan.ts\";\nimport { RecordMigrationRegistry, type RecordCoreMigrationRegistry, type RecordMigrationRegistryService, } from \"./registry.ts\";\nexport type RecordMigrationAuthorization = {\n    readonly state: \"git-restore-point\";\n} | {\n    readonly state: \"accept-data-loss\";\n};\nexport type RecordMigrationAttachmentPlanState = \"current\" | \"migrate\" | \"migration-unavailable\" | \"unsupported\";\nexport interface RecordMigrationAttachmentPlanSummary {\n    readonly owner: \"run\" | \"attempt\";\n    readonly name: string;\n    readonly schemaId: string;\n    readonly state: RecordMigrationAttachmentPlanState;\n    readonly reason?: string;\n}\nexport interface RecordMigrationPlanSummary {\n    readonly core: RecordCoreMigrationPlanSummary;\n    readonly attachments: readonly RecordMigrationAttachmentPlanSummary[];\n    readonly backup: RecordBackupState;\n    readonly state: \"needed\" | \"not-needed\";\n}\ninterface RecordMigrationAttachmentPlanEntry {\n    readonly source: RecordMigrationAttachmentSource;\n    readonly family: AnyRecordAttachmentFamily | undefined;\n    readonly resolution: RecordAttachmentMigrationResolution | undefined;\n}\ninterface RecordMigrationPlanState<CoreValue> {\n    readonly source: RecordMigrationSource<CoreValue>;\n    readonly core: RecordCoreMigrationPlan<CoreValue>;\n    readonly attachments: readonly RecordMigrationAttachmentPlanEntry[];\n    readonly backup: RecordBackupState;\n    readonly storage: RecordMigrationStorage<CoreValue>;\n}\n/** Exact plan identity prevents a copied public summary from becoming executable. */\nconst migrationPlanStates = new WeakMap<object, unknown>();\nconst migrationPlanRegistries = new WeakMap<object, RecordMigrationRegistryService>();\nfunction snapshotBackupState(backup: RecordBackupState): RecordBackupState {\n    switch (backup.state) {\n        case \"git-restore-point\":\n            return Object.freeze({ state: backup.state, commit: backup.commit });\n        case \"portable-root-dirty\":\n            return Object.freeze({\n                state: backup.state,\n                entries: Object.freeze([...backup.entries]),\n            });\n        case \"not-git-worktree\":\n        case \"root-outside-worktree\":\n            return Object.freeze({ state: backup.state });\n    }\n}\nfunction snapshotMigrationSource<CoreValue>(source: RecordMigrationSource<CoreValue>): RecordMigrationSource<CoreValue> {\n    return Object.freeze({\n        root: source.root,\n        fingerprint: source.fingerprint,\n        core: Object.freeze({\n            format: source.core.format,\n            value: source.core.value,\n        }),\n        attachments: Object.freeze(source.attachments.map((attachment) => Object.freeze({\n            directory: attachment.directory,\n            owner: attachment.owner,\n            name: attachment.name,\n            schemaId: attachment.schemaId,\n        }))),\n    });\n}\n/**\n * Package-created plan bound to the source snapshot and Git observation. It\n * contains no CLI confirmation and cannot be reconstructed from its summary.\n */\nexport class RecordMigrationPlan<CoreValue = RecordCoreV1> {\n    private constructor(readonly summary: RecordMigrationPlanSummary) {\n        Object.freeze(this);\n    }\n    static make<CoreValue>(input: {\n        readonly source: RecordMigrationSource<CoreValue>;\n        readonly core: RecordCoreMigrationPlan<CoreValue>;\n        readonly attachments: readonly RecordMigrationAttachmentPlanEntry[];\n        readonly backup: RecordBackupState;\n        readonly storage: RecordMigrationStorage<CoreValue>;\n    }): RecordMigrationPlan<CoreValue> {\n        const source = snapshotMigrationSource(input.source);\n        const backup = snapshotBackupState(input.backup);\n        const attachmentPlans = Object.freeze(input.attachments.map((entry, index) => {\n            const sourceAttachment = source.attachments[index];\n            if (sourceAttachment === undefined) {\n                throw new Error(\"Record migration Attachment plan lost its source\");\n            }\n            return Object.freeze({ ...entry, source: sourceAttachment });\n        }));\n        const attachments = Object.freeze(attachmentPlans.map((entry) => summarizeAttachment(entry)));\n        const hasAttachmentMigration = attachments.some((entry) => entry.state === \"migrate\");\n        const plan = new RecordMigrationPlan<CoreValue>(Object.freeze({\n            core: input.core.summary,\n            attachments,\n            backup,\n            state: input.core.summary.state === \"needed\" || hasAttachmentMigration\n                ? \"needed\"\n                : \"not-needed\",\n        }));\n        migrationPlanStates.set(plan, Object.freeze({\n            source,\n            core: input.core,\n            attachments: attachmentPlans,\n            backup,\n            storage: input.storage,\n        }));\n        return plan;\n    }\n}\nfunction recordMigrationPlanState<CoreValue>(plan: RecordMigrationPlan<CoreValue>): RecordMigrationPlanState<CoreValue> {\n    const state = migrationPlanStates.get(plan);\n    if (state === undefined) {\n        throw new Error(\"Record migration plan is not package-created\");\n    }\n    return state as RecordMigrationPlanState<CoreValue>;\n}\nfunction summarizeAttachment(entry: RecordMigrationAttachmentPlanEntry): RecordMigrationAttachmentPlanSummary {\n    const base = {\n        owner: entry.source.owner,\n        name: entry.source.name,\n        schemaId: entry.source.schemaId,\n    } as const;\n    if (entry.resolution === undefined || entry.resolution.state === \"unsupported\") {\n        return Object.freeze({ ...base, state: \"unsupported\" as const });\n    }\n    switch (entry.resolution.state) {\n        case \"current\":\n            return Object.freeze({ ...base, state: \"current\" as const });\n        case \"migration-required\":\n            return Object.freeze({ ...base, state: \"migrate\" as const });\n        case \"migration-unavailable\":\n            return Object.freeze({\n                ...base,\n                state: \"migration-unavailable\" as const,\n                reason: entry.resolution.reason,\n            });\n    }\n}\nfunction hasSameBackupState(left: RecordBackupState, right: RecordBackupState): boolean {\n    if (left.state !== right.state) {\n        return false;\n    }\n    if (left.state === \"git-restore-point\" && right.state === \"git-restore-point\") {\n        return left.commit === right.commit;\n    }\n    if (left.state === \"portable-root-dirty\" && right.state === \"portable-root-dirty\") {\n        return (left.entries.length === right.entries.length &&\n            left.entries.every((entry, index) => entry === right.entries[index]));\n    }\n    return true;\n}\nfunction authorizationIsValid(backup: RecordBackupState, authorization: RecordMigrationAuthorization): boolean {\n    return backup.state === \"git-restore-point\"\n        ? authorization.state === \"git-restore-point\"\n        : authorization.state === \"accept-data-loss\";\n}\n/**\n * Shared reader/open code may call this guard after acquiring its shared\n * maintenance lock. Presence alone is terminal; content is intentionally not\n * decoded and no recovery action is attempted.\n */\nexport function assertRecordMigrationNotInterrupted(root: RecordRoot) {\n    return Effect.gen(function* () {\n        const fileSystem = yield* RecordFileSystem;\n        const present = yield* fileSystem.migrationSentinelPresent(root);\n        if (present) {\n            return yield* Effect.fail(new RecordMigrationInterruptedState({\n                code: \"record-migration-interrupted\",\n            }));\n        }\n    });\n}\nfunction withExclusiveMaintenance<A, Error, R>(input: {\n    readonly root: RecordRoot;\n    readonly work: Effect.Effect<A, Error, R>;\n}) {\n    return Effect.scoped(Effect.gen(function* () {\n        const lock = yield* RecordMaintenanceLock;\n        yield* lock.acquireExclusive(input.root);\n        return yield* input.work;\n    }));\n}\nfunction resolveAttachmentPlanEntries<CoreValue>(input: {\n    readonly source: readonly RecordMigrationAttachmentSource[];\n    readonly registry: RecordAttachmentRegistry;\n    readonly storage: RecordMigrationStorage<CoreValue>;\n}): Effect.Effect<readonly RecordMigrationAttachmentPlanEntry[], RecordMigrationStorageError, RecordFileSystem> {\n    return Effect.forEach(input.source, (attachment) => {\n        const family = recordAttachmentRegistryFamily(input.registry, attachment.owner, attachment.name);\n        if (family === undefined) {\n            return Effect.succeed(Object.freeze({\n                source: attachment,\n                family: undefined,\n                resolution: undefined,\n            }));\n        }\n        const resolution = resolveRecordAttachmentMigration(family, attachment.schemaId);\n        if (resolution === undefined) {\n            throw new Error(\"RecordAttachment registry returned a forged family\");\n        }\n        if (resolution.state !== \"migration-required\") {\n            return Effect.succeed(Object.freeze({ source: attachment, family, resolution }));\n        }\n        const readiness = input.storage.preflightAttachmentMigration;\n        if (readiness === undefined) {\n            return Effect.succeed(Object.freeze({ source: attachment, family, resolution }));\n        }\n        return Effect.map(readiness({ source: attachment, family, resolution }), (state): RecordMigrationAttachmentPlanEntry => state.state === \"ready\"\n            ? Object.freeze({ source: attachment, family, resolution })\n            : Object.freeze({\n                source: attachment,\n                family,\n                resolution: Object.freeze({\n                    state: \"migration-unavailable\" as const,\n                    from: resolution.from,\n                    to: resolution.to,\n                    reason: state.reason,\n                }),\n            }));\n    }).pipe(Effect.map((entries) => Object.freeze(entries)));\n}\n/**\n * Read-only preflight. It holds the real exclusive maintenance lock, checks\n * the sentinel before opening the source, delegates exact decode/closure/path\n * validation to storage, and records the platform Git backup state.\n */\n/** @internal Generic seam for layout adapters and synthetic migration tests. */\nexport function planRecordMigrationWithStorage<CoreValue>(input: {\n    readonly root: RecordRoot;\n    readonly core: RecordCoreMigrationRegistry<CoreValue>;\n    readonly attachments: RecordAttachmentRegistry;\n    readonly storage: RecordMigrationStorage<CoreValue>;\n}) {\n    return withExclusiveMaintenance({\n        root: input.root,\n        work: Effect.gen(function* () {\n            yield* assertRecordMigrationNotInterrupted(input.root);\n            const source = yield* input.storage.inspectSource({\n                root: input.root,\n                attachments: input.attachments,\n            });\n            if (source.root !== input.root) {\n                throw new Error(\"Record migration storage returned a source for another root\");\n            }\n            const git = yield* RecordGit;\n            const backup = yield* git.inspectBackupState(input.root);\n            const core = makeRecordCoreMigrationPlan({\n                registry: input.core,\n                sourceFormat: source.core.format,\n            });\n            if (Either.isLeft(core)) {\n                return yield* Effect.fail(core.left);\n            }\n            const attachments = yield* resolveAttachmentPlanEntries({\n                source: source.attachments,\n                registry: input.attachments,\n                storage: input.storage,\n            });\n            return RecordMigrationPlan.make({\n                source,\n                core: core.right,\n                attachments,\n                backup,\n                storage: input.storage,\n            });\n        }),\n    });\n}\nexport interface RecordMigrationReceipt {\n    readonly state: \"migrated\" | \"not-needed\";\n    readonly plan: RecordMigrationPlanSummary;\n}\nfunction currentAttachmentFamily(entry: RecordMigrationAttachmentPlanEntry): AnyRecordAttachmentFamily {\n    if (entry.family === undefined) {\n        throw new Error(\"A migration-required Attachment must have a registered family\");\n    }\n    return entry.family;\n}\n/**\n * Execute a package-issued plan in place. No handler catches interruption or\n * defects, and no failure path removes the sentinel. Thus converter, I/O, and\n * cancellation failure leave the root fail-closed for Git/backup recovery.\n */\n/** @internal Executes a plan issued by `planRecordMigrationWithStorage`. */\nexport function migrateRecordWithStorage<CoreValue>(input: {\n    readonly plan: RecordMigrationPlan<CoreValue>;\n    readonly authorization: RecordMigrationAuthorization;\n}) {\n    return Effect.suspend(() => {\n        const state = recordMigrationPlanState(input.plan);\n        return withExclusiveMaintenance({\n            root: state.source.root,\n            work: Effect.gen(function* () {\n                yield* assertRecordMigrationNotInterrupted(state.source.root);\n                const git = yield* RecordGit;\n                const backup = yield* git.inspectBackupState(state.source.root);\n                if (!hasSameBackupState(state.backup, backup)) {\n                    return yield* Effect.fail(recordMigrationPlanStale());\n                }\n                const sourceCurrent = yield* state.storage.isSourceCurrent(state.source);\n                if (!sourceCurrent) {\n                    return yield* Effect.fail(recordMigrationPlanStale());\n                }\n                if (input.plan.summary.state === \"not-needed\") {\n                    return Object.freeze({\n                        state: \"not-needed\" as const,\n                        plan: input.plan.summary,\n                    });\n                }\n                if (!authorizationIsValid(backup, input.authorization)) {\n                    return yield* Effect.fail(backup.state === \"git-restore-point\"\n                        ? recordMigrationAuthorizationInvalid()\n                        : recordMigrationConfirmationRequired());\n                }\n                const fileSystem = yield* RecordFileSystem;\n                // A portable mutation must never begin until the fail-closed marker is\n                // durable. Keeping this pair uninterruptible also means cancellation\n                // during publication leaves the sentinel in place rather than creating\n                // an ambiguous partially-started migration.\n                yield* Effect.uninterruptible(Effect.gen(function* () {\n                    yield* fileSystem.createMigrationSentinel(state.source.root);\n                    yield* fileSystem.syncDirectory(recordPortablePath(state.source.root));\n                }));\n                let core = state.source.core.value;\n                const coreResolution = recordCoreMigrationPlanResolution(state.core);\n                if (coreResolution.state === \"migration-required\") {\n                    for (const edge of coreResolution.edges) {\n                        core = yield* edge.convert(core).pipe(Effect.catchAll(() => Effect.fail(recordCoreMigrationStepFailed({ from: edge.from, to: edge.to }))));\n                    }\n                }\n                yield* state.storage.stageCore({ source: state.source, value: core });\n                for (const entry of state.attachments) {\n                    if (entry.resolution?.state !== \"migration-required\") {\n                        yield* state.storage.preserveAttachment({\n                            source: entry.source,\n                            targetCore: core,\n                        });\n                        continue;\n                    }\n                    let value = yield* state.storage.readAttachment({\n                        source: entry.source,\n                        family: currentAttachmentFamily(entry),\n                    });\n                    for (const edge of entry.resolution.edges) {\n                        const write = yield* state.storage\n                            .convertAttachment({ edge, source: value })\n                            .pipe(Effect.catchAll(() => Effect.fail(recordAttachmentMigrationStepFailed({\n                            owner: entry.source.owner,\n                            name: entry.source.name,\n                            schemaId: entry.source.schemaId,\n                        }))));\n                        value = yield* state.storage.persistAttachment({\n                            source: entry.source,\n                            targetCore: core,\n                            edge,\n                            write,\n                        });\n                    }\n                }\n                // The root document remains interruptible while it is being written:\n                // cancellation there leaves the marker. Once that synced last write\n                // completes, deletion and directory sync form the tiny commit point.\n                yield* Effect.uninterruptibleMask((restore) => restore(state.storage.writeRecordDocumentLast({\n                    source: state.source,\n                    value: core,\n                })).pipe(Effect.zipRight(fileSystem.removeMigrationSentinel(state.source.root)), Effect.zipRight(fileSystem.syncDirectory(recordPortablePath(state.source.root)))));\n                return Object.freeze({\n                    state: \"migrated\" as const,\n                    plan: input.plan.summary,\n                });\n            }),\n        });\n    });\n}\n/**\n * Public migration preflight. Applications install the current Core registry,\n * selected Attachment families, and layout adapter once through\n * `RecordMigrationRegistry`; callers only supply the durable Record root.\n */\nexport function planRecordMigration(input: {\n    readonly root: RecordRoot;\n}) {\n    return Effect.gen(function* () {\n        const registry = yield* RecordMigrationRegistry;\n        const plan = yield* planRecordMigrationWithStorage({\n            root: input.root,\n            core: registry.core,\n            attachments: registry.attachments,\n            storage: registry.storage,\n        });\n        yield* Effect.sync(() => {\n            migrationPlanRegistries.set(plan, registry);\n        });\n        return plan;\n    });\n}\n/**\n * Public in-place execution remains bound to the exact installed registry\n * observed during preflight. Re-providing a different registry makes the plan\n * stale instead of allowing a copied summary to select different converters.\n */\nexport function migrateRecord(input: {\n    readonly plan: RecordMigrationPlan;\n    readonly authorization: RecordMigrationAuthorization;\n}) {\n    return Effect.flatMap(RecordMigrationRegistry, (registry) => {\n        const plannedRegistry = migrationPlanRegistries.get(input.plan);\n        return plannedRegistry === registry\n            ? migrateRecordWithStorage(input)\n            : Effect.fail(recordMigrationPlanStale());\n    });\n}\nexport type RecordMigrationPlanError = RecordMigrationStorageError | RecordCoreMigrationPlanInvalid | RecordMigrationInterruptedState | RecordGitError | RecordMaintenanceLockError;\nexport type RecordMigrationError = RecordMigrationStorageError | RecordMigrationInterruptedState | RecordGitError | RecordMaintenanceLockError | ReturnType<typeof recordMigrationPlanStale> | ReturnType<typeof recordMigrationConfirmationRequired> | ReturnType<typeof recordMigrationAuthorizationInvalid> | ReturnType<typeof recordCoreMigrationStepFailed> | ReturnType<typeof recordAttachmentMigrationStepFailed>;\n"]}

package/dist/record/migration/orchestrate.d.cts

@@ -1,113 +0,0 @@
-import { Effect } from "effect";
-import type { AnyRecordAttachmentFamily, RecordAttachmentMigrationResolution, RecordAttachmentRegistry } from "../attachment/types.cjs";
-import type { RecordCoreV1 } from "../model/core.cjs";
-import type { RecordGitError, RecordMaintenanceLockError } from "../platform/errors.cjs";
-import type { RecordRoot } from "../platform/root.cjs";
-import { RecordFileSystem, RecordGit, RecordMaintenanceLock, type RecordBackupState } from "../platform/services.cjs";
-import { recordAttachmentMigrationStepFailed, recordCoreMigrationStepFailed, recordMigrationAuthorizationInvalid, recordMigrationConfirmationRequired, recordMigrationPlanStale, RecordMigrationInterruptedState, type RecordCoreMigrationPlanInvalid } from "./errors.cjs";
-import type { RecordMigrationAttachmentSource, RecordMigrationSource, RecordMigrationStorage, RecordMigrationStorageError } from "./internal.cjs";
-import { type RecordCoreMigrationPlan, type RecordCoreMigrationPlanSummary } from "./plan.cjs";
-import { RecordMigrationRegistry, type RecordCoreMigrationRegistry } from "./registry.cjs";
-export type RecordMigrationAuthorization = {
-    readonly state: "git-restore-point";
-} | {
-    readonly state: "accept-data-loss";
-};
-export type RecordMigrationAttachmentPlanState = "current" | "migrate" | "migration-unavailable" | "unsupported";
-export interface RecordMigrationAttachmentPlanSummary {
-    readonly owner: "run" | "attempt";
-    readonly name: string;
-    readonly schemaId: string;
-    readonly state: RecordMigrationAttachmentPlanState;
-    readonly reason?: string;
-}
-export interface RecordMigrationPlanSummary {
-    readonly core: RecordCoreMigrationPlanSummary;
-    readonly attachments: readonly RecordMigrationAttachmentPlanSummary[];
-    readonly backup: RecordBackupState;
-    readonly state: "needed" | "not-needed";
-}
-interface RecordMigrationAttachmentPlanEntry {
-    readonly source: RecordMigrationAttachmentSource;
-    readonly family: AnyRecordAttachmentFamily | undefined;
-    readonly resolution: RecordAttachmentMigrationResolution | undefined;
-}
-/**
- * Package-created plan bound to the source snapshot and Git observation. It
- * contains no CLI confirmation and cannot be reconstructed from its summary.
- */
-export declare class RecordMigrationPlan<CoreValue = RecordCoreV1> {
-    readonly summary: RecordMigrationPlanSummary;
-    private constructor();
-    static make<CoreValue>(input: {
-        readonly source: RecordMigrationSource<CoreValue>;
-        readonly core: RecordCoreMigrationPlan<CoreValue>;
-        readonly attachments: readonly RecordMigrationAttachmentPlanEntry[];
-        readonly backup: RecordBackupState;
-        readonly storage: RecordMigrationStorage<CoreValue>;
-    }): RecordMigrationPlan<CoreValue>;
-}
-/**
- * Shared reader/open code may call this guard after acquiring its shared
- * maintenance lock. Presence alone is terminal; content is intentionally not
- * decoded and no recovery action is attempted.
- */
-export declare function assertRecordMigrationNotInterrupted(root: RecordRoot): Effect.Effect<undefined, import("../platform/errors.cjs").RecordFileSystemError | RecordMigrationInterruptedState, RecordFileSystem>;
-/**
- * Read-only preflight. It holds the real exclusive maintenance lock, checks
- * the sentinel before opening the source, delegates exact decode/closure/path
- * validation to storage, and records the platform Git backup state.
- */
-/** @internal Generic seam for layout adapters and synthetic migration tests. */
-export declare function planRecordMigrationWithStorage<CoreValue>(input: {
-    readonly root: RecordRoot;
-    readonly core: RecordCoreMigrationRegistry<CoreValue>;
-    readonly attachments: RecordAttachmentRegistry;
-    readonly storage: RecordMigrationStorage<CoreValue>;
-}): Effect.Effect<RecordMigrationPlan<CoreValue>, import("../index.cjs").RecordCodecError | import("../index.cjs").RecordAttachmentPayloadInvalid | import("../index.cjs").RecordAttachmentClosureInvalid | import("../platform/errors.cjs").RecordGitCommandError | RecordMaintenanceLockError | RecordCoreMigrationPlanInvalid | RecordMigrationInterruptedState, RecordFileSystem | RecordMaintenanceLock | RecordGit>;
-export interface RecordMigrationReceipt {
-    readonly state: "migrated" | "not-needed";
-    readonly plan: RecordMigrationPlanSummary;
-}
-/**
- * Execute a package-issued plan in place. No handler catches interruption or
- * defects, and no failure path removes the sentinel. Thus converter, I/O, and
- * cancellation failure leave the root fail-closed for Git/backup recovery.
- */
-/** @internal Executes a plan issued by `planRecordMigrationWithStorage`. */
-export declare function migrateRecordWithStorage<CoreValue>(input: {
-    readonly plan: RecordMigrationPlan<CoreValue>;
-    readonly authorization: RecordMigrationAuthorization;
-}): Effect.Effect<Readonly<{
-    state: "not-needed";
-    plan: RecordMigrationPlanSummary;
-}> | Readonly<{
-    state: "migrated";
-    plan: RecordMigrationPlanSummary;
-}>, import("../index.cjs").RecordCodecError | import("../index.cjs").RecordAttachmentPayloadInvalid | import("../index.cjs").RecordAttachmentClosureInvalid | import("../platform/errors.cjs").RecordGitCommandError | RecordMaintenanceLockError | import("./errors.cjs").RecordCoreMigrationStepFailed | RecordMigrationInterruptedState | import("./errors.cjs").RecordMigrationPlanStale | import("./errors.cjs").RecordMigrationConfirmationRequired | import("./errors.cjs").RecordMigrationAuthorizationInvalid | import("./errors.cjs").RecordAttachmentMigrationStepFailed, RecordFileSystem | RecordMaintenanceLock | RecordGit>;
-/**
- * Public migration preflight. Applications install the current Core registry,
- * selected Attachment families, and layout adapter once through
- * `RecordMigrationRegistry`; callers only supply the durable Record root.
- */
-export declare function planRecordMigration(input: {
-    readonly root: RecordRoot;
-}): Effect.Effect<RecordMigrationPlan<RecordCoreV1>, import("../index.cjs").RecordCodecError | import("../index.cjs").RecordAttachmentPayloadInvalid | import("../index.cjs").RecordAttachmentClosureInvalid | import("../platform/errors.cjs").RecordGitCommandError | RecordMaintenanceLockError | RecordCoreMigrationPlanInvalid | RecordMigrationInterruptedState, RecordFileSystem | RecordMaintenanceLock | RecordGit | RecordMigrationRegistry>;
-/**
- * Public in-place execution remains bound to the exact installed registry
- * observed during preflight. Re-providing a different registry makes the plan
- * stale instead of allowing a copied summary to select different converters.
- */
-export declare function migrateRecord(input: {
-    readonly plan: RecordMigrationPlan;
-    readonly authorization: RecordMigrationAuthorization;
-}): Effect.Effect<Readonly<{
-    state: "not-needed";
-    plan: RecordMigrationPlanSummary;
-}> | Readonly<{
-    state: "migrated";
-    plan: RecordMigrationPlanSummary;
-}>, import("../index.cjs").RecordCodecError | import("../index.cjs").RecordAttachmentPayloadInvalid | import("../index.cjs").RecordAttachmentClosureInvalid | import("../platform/errors.cjs").RecordGitCommandError | RecordMaintenanceLockError | import("./errors.cjs").RecordCoreMigrationStepFailed | RecordMigrationInterruptedState | import("./errors.cjs").RecordMigrationPlanStale | import("./errors.cjs").RecordMigrationConfirmationRequired | import("./errors.cjs").RecordMigrationAuthorizationInvalid | import("./errors.cjs").RecordAttachmentMigrationStepFailed, RecordFileSystem | RecordMaintenanceLock | RecordGit | RecordMigrationRegistry>;
-export type RecordMigrationPlanError = RecordMigrationStorageError | RecordCoreMigrationPlanInvalid | RecordMigrationInterruptedState | RecordGitError | RecordMaintenanceLockError;
-export type RecordMigrationError = RecordMigrationStorageError | RecordMigrationInterruptedState | RecordGitError | RecordMaintenanceLockError | ReturnType<typeof recordMigrationPlanStale> | ReturnType<typeof recordMigrationConfirmationRequired> | ReturnType<typeof recordMigrationAuthorizationInvalid> | ReturnType<typeof recordCoreMigrationStepFailed> | ReturnType<typeof recordAttachmentMigrationStepFailed>;
-export {};