tenjin-cli 0.1.0-alpha.1 → 0.1.0-alpha.3

package/dist/chunk-TLCMMYLY.js

@@ -0,0 +1,126 @@
+import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+import {
+  UUID_RE,
+  newId
+} from "./chunk-3OV7E5G5.js";
+import {
+  hasCode
+} from "./chunk-2I4QTOLB.js";
+import {
+  writeFileAtomicExclusive
+} from "./chunk-MUBUQVC3.js";
+import {
+  external_exports
+} from "./chunk-OYMYCW7J.js";
+
+// src/lib/candidate-store.ts
+import { mkdir, readFile, readdir, rm, stat } from "fs/promises";
+import { join } from "path";
+var DRAFT_FILE = "draft.md";
+var META_FILE = "meta.json";
+var CandidateMetaSchema = external_exports.object({
+  schemaVersion: external_exports.literal(1),
+  lookupId: external_exports.string(),
+  question: external_exports.string().optional(),
+  // Fixed-width UTC ISO-8601 (a trailing Z, never an offset): listCandidates
+  // sorts newest-first lexicographically on this string, which is only a valid
+  // proxy for chronological order when every value is same-zone UTC. z.iso
+  // .datetime() rejects offsets and non-datetime strings, pinning that invariant.
+  created: external_exports.iso.datetime(),
+  /** The repo root the add ran in, or the cwd when not in a repo. */
+  sourceProject: external_exports.string()
+});
+function candidatesDir(dataDir) {
+  return join(dataDir, "candidates");
+}
+function candidateDir(dataDir, id) {
+  return join(candidatesDir(dataDir), id);
+}
+async function createCandidate(dataDir, input) {
+  const id = newId();
+  const dir = candidateDir(dataDir, id);
+  await mkdir(dir, { recursive: true, mode: 448 });
+  const draftPath = join(dir, DRAFT_FILE);
+  const meta = {
+    schemaVersion: 1,
+    lookupId: input.lookupId,
+    ...input.question !== void 0 ? { question: input.question } : {},
+    created: input.created,
+    sourceProject: input.sourceProject
+  };
+  try {
+    await writeFileAtomicExclusive(draftPath, input.draft, { mode: 384, dirMode: 448 });
+    await writeFileAtomicExclusive(join(dir, META_FILE), `${JSON.stringify(meta, null, 2)}
+`, {
+      mode: 384,
+      dirMode: 448
+    });
+  } catch (err) {
+    if (!hasCode(err, "EEXIST")) {
+      await rm(dir, { recursive: true, force: true }).catch(() => void 0);
+    }
+    throw err;
+  }
+  return { id, meta, dir, draftPath };
+}
+async function readCandidate(dataDir, id) {
+  if (!UUID_RE.test(id)) return null;
+  const dir = candidateDir(dataDir, id);
+  const meta = await readMeta(dir);
+  if (meta === null) return null;
+  return { id, meta, dir, draftPath: join(dir, DRAFT_FILE) };
+}
+async function listCandidates(dataDir) {
+  let entries;
+  try {
+    entries = await readdir(candidatesDir(dataDir), { withFileTypes: true });
+  } catch {
+    return [];
+  }
+  const records = [];
+  for (const entry of entries) {
+    if (!entry.isDirectory() || !UUID_RE.test(entry.name)) continue;
+    const record = await readCandidate(dataDir, entry.name);
+    if (record !== null) records.push(record);
+  }
+  records.sort((a, b) => {
+    if (a.meta.created !== b.meta.created) return a.meta.created < b.meta.created ? 1 : -1;
+    return a.id < b.id ? 1 : -1;
+  });
+  return records;
+}
+async function dropCandidate(dataDir, id) {
+  if (!UUID_RE.test(id)) return false;
+  const dir = candidateDir(dataDir, id);
+  try {
+    if (!(await stat(dir)).isDirectory()) return false;
+  } catch {
+    return false;
+  }
+  await rm(dir, { recursive: true, force: true });
+  return true;
+}
+async function readMeta(dir) {
+  let raw;
+  try {
+    raw = await readFile(join(dir, META_FILE), "utf8");
+  } catch {
+    return null;
+  }
+  let json;
+  try {
+    json = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  const parsed = CandidateMetaSchema.safeParse(json);
+  return parsed.success ? parsed.data : null;
+}
+
+export {
+  createCandidate,
+  readCandidate,
+  listCandidates,
+  dropCandidate
+};
+//# sourceMappingURL=chunk-TLCMMYLY.js.map

package/dist/chunk-TLCMMYLY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/candidate-store.ts"],"sourcesContent":["import { mkdir, readFile, readdir, rm, stat } from 'node:fs/promises';\nimport type { Dirent } from 'node:fs';\nimport { join } from 'node:path';\nimport { z } from 'zod';\nimport { writeFileAtomicExclusive } from './atomic-json';\nimport { hasCode } from './errno';\nimport { newId, UUID_RE } from './ids';\n\n/**\n * The D40 candidate store: publish drafts parked locally that never touch the\n * network and never upload — only a later `tenjin publish --candidate <id>`\n * sends one, under the D38 consent scan. Each candidate is its OWN directory\n * `~/.tenjin/candidates/<id>/` holding the draft markdown plus a meta.json.\n *\n * Custody mirrors the wallet key discipline: the candidates tree is 0700 and\n * every file 0600, written create-once through writeFileAtomicExclusive so a\n * reader sees a complete file or none and a uuid collision is loud, never a\n * silent overwrite. Unlike lookup-store's single shared ledger, there is no shared\n * mutable file here — a fresh uuid per add means two concurrent adds land in two\n * distinct dirs and cannot contend — so no cross-process lock is needed. The\n * meta.json is written LAST and atomically, making it the commit point: `list`\n * skips any dir whose meta is absent or unreadable, so a torn or half-written\n * add reads as not-yet-there rather than a broken candidate, the same\n * best-effort posture loadLookups takes on a corrupt store. A crash mid-add is\n * cleaned up eagerly (the dir is removed on any write failure), and `drop` can\n * still remove a metaless orphan by id so a leaked draft is never stranded.\n */\n\nconst DRAFT_FILE = 'draft.md';\nconst META_FILE = 'meta.json';\n\nconst CandidateMetaSchema = z.object({\n  schemaVersion: z.literal(1),\n  lookupId: z.string(),\n  question: z.string().optional(),\n  // Fixed-width UTC ISO-8601 (a trailing Z, never an offset): listCandidates\n  // sorts newest-first lexicographically on this string, which is only a valid\n  // proxy for chronological order when every value is same-zone UTC. z.iso\n  // .datetime() rejects offsets and non-datetime strings, pinning that invariant.\n  created: z.iso.datetime(),\n  /** The repo root the add ran in, or the cwd when not in a repo. */\n  sourceProject: z.string(),\n});\nexport type CandidateMeta = z.infer<typeof CandidateMetaSchema>;\n\nexport interface CandidateRecord {\n  id: string;\n  meta: CandidateMeta;\n  /** Absolute path of the candidate directory. */\n  dir: string;\n  /** Absolute path of the draft markdown inside the directory. */\n  draftPath: string;\n}\n\nexport interface CreateCandidateInput {\n  /** The draft markdown, copied verbatim into the candidate. */\n  draft: string;\n  lookupId: string;\n  question?: string;\n  /** ISO-8601 creation time; the command supplies it via its clock seam. */\n  created: string;\n  sourceProject: string;\n}\n\nfunction candidatesDir(dataDir: string): string {\n  return join(dataDir, 'candidates');\n}\n\nfunction candidateDir(dataDir: string, id: string): string {\n  return join(candidatesDir(dataDir), id);\n}\n\n/** Park a draft as a new candidate and return the created record. Both files are\n *  written create-once (no-clobber, fsynced) at a fresh uuid path, meta.json\n *  last, so the candidate is either fully present to `list`/`read` or absent,\n *  never half-there. */\nexport async function createCandidate(\n  dataDir: string,\n  input: CreateCandidateInput,\n): Promise<CandidateRecord> {\n  const id = newId();\n  const dir = candidateDir(dataDir, id);\n  await mkdir(dir, { recursive: true, mode: 0o700 });\n\n  const draftPath = join(dir, DRAFT_FILE);\n  const meta: CandidateMeta = {\n    schemaVersion: 1,\n    lookupId: input.lookupId,\n    ...(input.question !== undefined ? { question: input.question } : {}),\n    created: input.created,\n    sourceProject: input.sourceProject,\n  };\n  try {\n    // Exclusive (create-or-EEXIST, fsynced) so a uuid collision is loud, not a\n    // silent overwrite of an existing candidate, and the crash-durable commit of\n    // meta.json is the last, atomic step.\n    await writeFileAtomicExclusive(draftPath, input.draft, { mode: 0o600, dirMode: 0o700 });\n    await writeFileAtomicExclusive(join(dir, META_FILE), `${JSON.stringify(meta, null, 2)}\\n`, {\n      mode: 0o600,\n      dirMode: 0o700,\n    });\n  } catch (err) {\n    // An EEXIST means something already lived at this fresh-uuid path (a real\n    // collision, astronomically unlikely): surface it loudly and NEVER delete\n    // what was already there. Any other failure is a partial write of our own\n    // fresh dir — remove it so a crash mid-add can't strand a hidden dir holding\n    // the (secrets-adjacent) draft that `list` skips and no one can name to `drop`.\n    if (!hasCode(err, 'EEXIST')) {\n      await rm(dir, { recursive: true, force: true }).catch(() => undefined);\n    }\n    throw err;\n  }\n\n  return { id, meta, dir, draftPath };\n}\n\n/** One candidate by id, or null when it is unknown (or the id is malformed, so a\n *  stray argument can never traverse out of the store). */\nexport async function readCandidate(dataDir: string, id: string): Promise<CandidateRecord | null> {\n  if (!UUID_RE.test(id)) return null;\n  const dir = candidateDir(dataDir, id);\n  const meta = await readMeta(dir);\n  if (meta === null) return null;\n  return { id, meta, dir, draftPath: join(dir, DRAFT_FILE) };\n}\n\n/** Every pending candidate, newest first by `created` (no auto-expiry — stale\n *  candidates stay visible, D40). Tie-broken on id so the order is total. */\nexport async function listCandidates(dataDir: string): Promise<CandidateRecord[]> {\n  let entries: Dirent[];\n  try {\n    entries = await readdir(candidatesDir(dataDir), { withFileTypes: true });\n  } catch {\n    return [];\n  }\n  const records: CandidateRecord[] = [];\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !UUID_RE.test(entry.name)) continue;\n    const record = await readCandidate(dataDir, entry.name);\n    if (record !== null) records.push(record);\n  }\n  records.sort((a, b) => {\n    if (a.meta.created !== b.meta.created) return a.meta.created < b.meta.created ? 1 : -1;\n    return a.id < b.id ? 1 : -1;\n  });\n  return records;\n}\n\n/** Discard one candidate by id. Returns false when the id is malformed or no\n *  such dir exists, so the command can surface a clean not-found; nothing is\n *  ever auto-deleted. Removes the dir even when its meta is absent or corrupt,\n *  so a crash-orphaned candidate can still be cleaned up by id (the id is\n *  UUID-gated first, so a stray argument can never target a path outside the\n *  store). */\nexport async function dropCandidate(dataDir: string, id: string): Promise<boolean> {\n  if (!UUID_RE.test(id)) return false;\n  const dir = candidateDir(dataDir, id);\n  try {\n    if (!(await stat(dir)).isDirectory()) return false;\n  } catch {\n    return false; // no such candidate\n  }\n  await rm(dir, { recursive: true, force: true });\n  return true;\n}\n\n/** Read and validate a candidate's meta.json; null on any absence/corruption. */\nasync function readMeta(dir: string): Promise<CandidateMeta | null> {\n  let raw: string;\n  try {\n    raw = await readFile(join(dir, META_FILE), 'utf8');\n  } catch {\n    return null;\n  }\n  let json: unknown;\n  try {\n    json = JSON.parse(raw);\n  } catch {\n    return null;\n  }\n  const parsed = CandidateMetaSchema.safeParse(json);\n  return parsed.success ? parsed.data : null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA,SAAS,OAAO,UAAU,SAAS,IAAI,YAAY;AAEnD,SAAS,YAAY;AA0BrB,IAAM,aAAa;AACnB,IAAM,YAAY;AAElB,IAAM,sBAAsB,iBAAE,OAAO;AAAA,EACnC,eAAe,iBAAE,QAAQ,CAAC;AAAA,EAC1B,UAAU,iBAAE,OAAO;AAAA,EACnB,UAAU,iBAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAK9B,SAAS,iBAAE,IAAI,SAAS;AAAA;AAAA,EAExB,eAAe,iBAAE,OAAO;AAC1B,CAAC;AAsBD,SAAS,cAAc,SAAyB;AAC9C,SAAO,KAAK,SAAS,YAAY;AACnC;AAEA,SAAS,aAAa,SAAiB,IAAoB;AACzD,SAAO,KAAK,cAAc,OAAO,GAAG,EAAE;AACxC;AAMA,eAAsB,gBACpB,SACA,OAC0B;AAC1B,QAAM,KAAK,MAAM;AACjB,QAAM,MAAM,aAAa,SAAS,EAAE;AACpC,QAAM,MAAM,KAAK,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAEjD,QAAM,YAAY,KAAK,KAAK,UAAU;AACtC,QAAM,OAAsB;AAAA,IAC1B,eAAe;AAAA,IACf,UAAU,MAAM;AAAA,IAChB,GAAI,MAAM,aAAa,SAAY,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,IACnE,SAAS,MAAM;AAAA,IACf,eAAe,MAAM;AAAA,EACvB;AACA,MAAI;AAIF,UAAM,yBAAyB,WAAW,MAAM,OAAO,EAAE,MAAM,KAAO,SAAS,IAAM,CAAC;AACtF,UAAM,yBAAyB,KAAK,KAAK,SAAS,GAAG,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAAA,GAAM;AAAA,MACzF,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,KAAK;AAMZ,QAAI,CAAC,QAAQ,KAAK,QAAQ,GAAG;AAC3B,YAAM,GAAG,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,IACvE;AACA,UAAM;AAAA,EACR;AAEA,SAAO,EAAE,IAAI,MAAM,KAAK,UAAU;AACpC;AAIA,eAAsB,cAAc,SAAiB,IAA6C;AAChG,MAAI,CAAC,QAAQ,KAAK,EAAE,EAAG,QAAO;AAC9B,QAAM,MAAM,aAAa,SAAS,EAAE;AACpC,QAAM,OAAO,MAAM,SAAS,GAAG;AAC/B,MAAI,SAAS,KAAM,QAAO;AAC1B,SAAO,EAAE,IAAI,MAAM,KAAK,WAAW,KAAK,KAAK,UAAU,EAAE;AAC3D;AAIA,eAAsB,eAAe,SAA6C;AAChF,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,QAAQ,cAAc,OAAO,GAAG,EAAE,eAAe,KAAK,CAAC;AAAA,EACzE,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACA,QAAM,UAA6B,CAAC;AACpC,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,QAAQ,KAAK,MAAM,IAAI,EAAG;AACvD,UAAM,SAAS,MAAM,cAAc,SAAS,MAAM,IAAI;AACtD,QAAI,WAAW,KAAM,SAAQ,KAAK,MAAM;AAAA,EAC1C;AACA,UAAQ,KAAK,CAAC,GAAG,MAAM;AACrB,QAAI,EAAE,KAAK,YAAY,EAAE,KAAK,QAAS,QAAO,EAAE,KAAK,UAAU,EAAE,KAAK,UAAU,IAAI;AACpF,WAAO,EAAE,KAAK,EAAE,KAAK,IAAI;AAAA,EAC3B,CAAC;AACD,SAAO;AACT;AAQA,eAAsB,cAAc,SAAiB,IAA8B;AACjF,MAAI,CAAC,QAAQ,KAAK,EAAE,EAAG,QAAO;AAC9B,QAAM,MAAM,aAAa,SAAS,EAAE;AACpC,MAAI;AACF,QAAI,EAAE,MAAM,KAAK,GAAG,GAAG,YAAY,EAAG,QAAO;AAAA,EAC/C,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,GAAG,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC9C,SAAO;AACT;AAGA,eAAe,SAAS,KAA4C;AAClE,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,SAAS,KAAK,KAAK,SAAS,GAAG,MAAM;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI;AACJ,MAAI;AACF,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,SAAS,oBAAoB,UAAU,IAAI;AACjD,SAAO,OAAO,UAAU,OAAO,OAAO;AACxC;","names":[]}