youmd 0.10.0 → 0.10.2

package/dist/lib/brain/safety.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BrainSafetyError = void 0;
+exports.assertBrainPayloadSafe = assertBrainPayloadSafe;
+const redact_1 = require("../redact");
+class BrainSafetyError extends Error {
+    constructor(message) {
+        super(message);
+        this.code = "brain_safety_gate_failed";
+        this.name = "BrainSafetyError";
+    }
+}
+exports.BrainSafetyError = BrainSafetyError;
+function safetyStrings(value) {
+    if (typeof value === "string") {
+        // Cryptographic digests are opaque evidence, not user content. Running PII
+        // regexes over random hex creates false phone-number matches.
+        if (/^(?:scan:|workspace:|sha256:|(?:machine|repository|worktree|branch):sha256:)[a-f0-9]{64}$/.test(value))
+            return [];
+        if (/^(?:sha256|heuristic):[a-f0-9]{64}$/.test(value))
+            return [];
+        return [value];
+    }
+    if (Array.isArray(value))
+        return value.flatMap(safetyStrings);
+    if (value && typeof value === "object")
+        return Object.values(value).flatMap(safetyStrings);
+    return [];
+}
+/** Must run over the complete payload before any persistent path is created. */
+function assertBrainPayloadSafe(scan, canaries = []) {
+    const payload = JSON.stringify(scan);
+    const hits = safetyStrings(scan).reduce((count, value) => count + (0, redact_1.redactText)(value).hits, 0);
+    if (hits > 0)
+        throw new BrainSafetyError(`brain snapshot contains ${hits} secret or PII pattern(s)`);
+    for (const canary of canaries) {
+        if (canary && payload.includes(canary))
+            throw new BrainSafetyError("brain snapshot contains a persistence canary");
+    }
+    return payload;
+}
+//# sourceMappingURL=safety.js.map

package/dist/lib/brain/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../../src/lib/brain/safety.ts"],"names":[],"mappings":";;;AAsBA,wDAQC;AA9BD,sCAAuC;AAGvC,MAAa,gBAAiB,SAAQ,KAAK;IAEzC,YAAY,OAAe;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QADrC,SAAI,GAAG,0BAA0B,CAAC;QACI,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IAAC,CAAC;CACjF;AAHD,4CAGC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,2EAA2E;QAC3E,8DAA8D;QAC9D,IAAI,2FAA2F,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACvH,IAAI,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjE,OAAO,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACtH,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,gFAAgF;AAChF,SAAgB,sBAAsB,CAAC,IAAsB,EAAE,WAAqB,EAAE;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,IAAA,mBAAU,EAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7F,IAAI,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,IAAI,2BAA2B,CAAC,CAAC;IACrG,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,8CAA8C,CAAC,CAAC;IACrH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/brain/staged-apply.d.ts

@@ -0,0 +1,57 @@
+import type { ProjectBrainApplyApproval } from "./safe-file";
+import type { ProjectBrainProposal } from "./proposal";
+export declare const PROJECT_BRAIN_STAGED_APPLY_VERSION: "you-md/project-brain-staged-apply/v1";
+export interface ProjectBrainStagedApplyEnvelope {
+    schemaVersion: typeof PROJECT_BRAIN_STAGED_APPLY_VERSION;
+    kind: "project-brain-staged-apply";
+    state: "staged" | "consumed";
+    proposalId: string;
+    applyId: string;
+    proposalRef: string;
+    rootPath: string;
+    rootPathHash: string;
+    proposalPath: string;
+    proposalContentHash: string;
+    approvalPath: string;
+    approvalContentHash: string;
+    createdAt: string;
+    expiresAt: string;
+    consumedAt?: string;
+}
+export interface StageProjectBrainApplyOptions {
+    brainRoot?: string;
+    proposalId: string;
+    applyId: string;
+    root: string;
+    proposalPath: string;
+    proposalContent: string;
+    proposal: ProjectBrainProposal;
+    approvalPath: string;
+    approvalContent: string;
+    approval: ProjectBrainApplyApproval;
+    now?: Date;
+}
+export interface ConsumeProjectBrainStagedApplyOptions {
+    brainRoot?: string;
+    proposalId: string;
+    applyId: string;
+    now?: Date;
+}
+export interface ProjectBrainStagedApplyResolution {
+    proposalId: string;
+    applyId: string;
+    proposalRef: string;
+    root: string;
+    proposalPath: string;
+    proposalContentHash: string;
+    approvalPath: string;
+    approvalContentHash: string;
+    state: "consumed";
+}
+export declare class BrainStagedApplyError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export declare function stageProjectBrainApply(options: StageProjectBrainApplyOptions): ProjectBrainStagedApplyEnvelope;
+export declare function consumeProjectBrainStagedApply(options: ConsumeProjectBrainStagedApplyOptions): ProjectBrainStagedApplyResolution;
+//# sourceMappingURL=staged-apply.d.ts.map

package/dist/lib/brain/staged-apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"staged-apply.d.ts","sourceRoot":"","sources":["../../../src/lib/brain/staged-apply.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD,eAAO,MAAM,kCAAkC,EAAG,sCAA+C,CAAC;AAMlG,MAAM,WAAW,+BAA+B;IAC9C,aAAa,EAAE,OAAO,kCAAkC,CAAC;IACzD,IAAI,EAAE,4BAA4B,CAAC;IACnC,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,yBAAyB,CAAC;IACpC,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,WAAW,qCAAqC;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,WAAW,iCAAiC;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAInD;AA0ID,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,6BAA6B,GAAG,+BAA+B,CAkC9G;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,qCAAqC,GAC7C,iCAAiC,CA0DnC"}

package/dist/lib/brain/staged-apply.js

@@ -0,0 +1,336 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BrainStagedApplyError = exports.PROJECT_BRAIN_STAGED_APPLY_VERSION = void 0;
+exports.stageProjectBrainApply = stageProjectBrainApply;
+exports.consumeProjectBrainStagedApply = consumeProjectBrainStagedApply;
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const config_1 = require("../config");
+exports.PROJECT_BRAIN_STAGED_APPLY_VERSION = "you-md/project-brain-staged-apply/v1";
+const OPAQUE_ID = /^[A-Za-z0-9_-]{10,128}$/;
+const SHA256_REF = /^sha256:[a-f0-9]{64}$/;
+const MAX_STAGE_BYTES = 32 * 1024;
+const MAX_STAGE_AGE_MS = 15 * 60000;
+class BrainStagedApplyError extends Error {
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "BrainStagedApplyError";
+    }
+}
+exports.BrainStagedApplyError = BrainStagedApplyError;
+function hash(value) {
+    return `sha256:${crypto.createHash("sha256").update(value).digest("hex")}`;
+}
+function assertOpaqueId(value, label) {
+    if (!OPAQUE_ID.test(value))
+        throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_INVALID_ID", `${label} is invalid`);
+}
+function canonicalExisting(value, kind) {
+    const absolute = path.resolve(value);
+    try {
+        if (fs.lstatSync(absolute).isSymbolicLink()) {
+            throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_UNSAFE_PATH", `${kind} binding is a symlink`);
+        }
+    }
+    catch (error) {
+        if (error instanceof BrainStagedApplyError)
+            throw error;
+        throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_UNSAFE_PATH", `${kind} is unavailable`);
+    }
+    let canonical;
+    try {
+        canonical = fs.realpathSync(absolute);
+    }
+    catch {
+        throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_UNSAFE_PATH", `${kind} is unavailable`);
+    }
+    const stat = fs.lstatSync(canonical);
+    if (stat.isSymbolicLink() || (kind === "file" ? !stat.isFile() : !stat.isDirectory())) {
+        throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_UNSAFE_PATH", `${kind} binding is unsafe`);
+    }
+    return canonical;
+}
+function stageRoot(value) {
+    const requested = path.resolve(value || path.join((0, config_1.getWritableHomeBundleDir)(), "brain"));
+    fs.mkdirSync(requested, { recursive: true, mode: 0o700 });
+    const canonical = fs.realpathSync(requested);
+    const stat = fs.lstatSync(canonical);
+    if (!stat.isDirectory() || stat.isSymbolicLink()) {
+        throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_UNSAFE_PATH", "brain root is unsafe");
+    }
+    try {
+        fs.chmodSync(canonical, 0o700);
+    }
+    catch { /* non-POSIX */ }
+    return canonical;
+}
+function stagePaths(root, applyId) {
+    assertOpaqueId(applyId, "apply id");
+    const digest = crypto.createHash("sha256").update(applyId, "utf8").digest("hex");
+    const directory = path.join(root, "audit", "apply-staging");
+    fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
+    const canonicalDirectory = fs.realpathSync(directory);
+    const stat = fs.lstatSync(canonicalDirectory);
+    if (!stat.isDirectory() || stat.isSymbolicLink()) {
+        throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_UNSAFE_PATH", "staging directory is unsafe");
+    }
+    try {
+        fs.chmodSync(canonicalDirectory, 0o700);
+    }
+    catch { /* non-POSIX */ }
+    return {
+        file: path.join(canonicalDirectory, `${digest}.json`),
+        lock: path.join(canonicalDirectory, `${digest}.lock`),
+    };
+}
+function fsyncDirectory(directory) {
+    let fd;
+    try {
+        fd = fs.openSync(directory, fs.constants.O_RDONLY);
+        fs.fsyncSync(fd);
+    }
+    finally {
+        if (fd !== undefined)
+            fs.closeSync(fd);
+    }
+}
+function atomicCreate(file, content) {
+    const temporary = `${file}.${process.pid}.${crypto.randomBytes(8).toString("hex")}.tmp`;
+    let fd;
+    try {
+        fd = fs.openSync(temporary, fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_EXCL, 0o600);
+        fs.writeFileSync(fd, content, "utf8");
+        fs.fsyncSync(fd);
+        fs.closeSync(fd);
+        fd = undefined;
+        try {
+            fs.linkSync(temporary, file);
+        }
+        catch {
+            throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_REPLAY", "apply id is already staged or consumed");
+        }
+        fs.unlinkSync(temporary);
+        try {
+            fs.chmodSync(file, 0o600);
+        }
+        catch { /* non-POSIX */ }
+        fsyncDirectory(path.dirname(file));
+    }
+    finally {
+        if (fd !== undefined)
+            try {
+                fs.closeSync(fd);
+            }
+            catch { /* closed */ }
+        try {
+            fs.unlinkSync(temporary);
+        }
+        catch { /* absent */ }
+    }
+}
+function atomicReplace(file, content) {
+    const temporary = `${file}.${process.pid}.${crypto.randomBytes(8).toString("hex")}.tmp`;
+    let fd;
+    try {
+        fd = fs.openSync(temporary, fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_EXCL, 0o600);
+        fs.writeFileSync(fd, content, "utf8");
+        fs.fsyncSync(fd);
+        fs.closeSync(fd);
+        fd = undefined;
+        fs.renameSync(temporary, file);
+        try {
+            fs.chmodSync(file, 0o600);
+        }
+        catch { /* non-POSIX */ }
+        fsyncDirectory(path.dirname(file));
+    }
+    finally {
+        if (fd !== undefined)
+            try {
+                fs.closeSync(fd);
+            }
+            catch { /* closed */ }
+        try {
+            fs.unlinkSync(temporary);
+        }
+        catch { /* absent */ }
+    }
+}
+function assertApprovalBinding(proposal, approval, now) {
+    const approvedAt = Date.parse(approval?.approvedAt || "");
+    const expiresAt = Date.parse(approval?.expiresAt || "");
+    const valid = approval?.schemaVersion === "you-md/project-brain-approval/v1"
+        && approval.kind === "project-brain-approval" && approval.decision === "approved" && approval.revoked === false
+        && approval.proposalRef === proposal.proposalRef
+        && approval.bindings?.projectRef === proposal.projectRef
+        && approval.bindings.machineRef === proposal.machineRef
+        && approval.bindings.workspaceRef === proposal.workspaceRef
+        && approval.bindings.baseRevision === proposal.baseRevision
+        && approval.bindings.baseContentHash === proposal.target.baseContentHash
+        && approval.bindings.sourceRevision === proposal.source.sourceRevision
+        && approval.bindings.patchFormat === proposal.patchFormat
+        && approval.bindings.patchDigest === proposal.patchDigest
+        && Number.isFinite(approvedAt) && Number.isFinite(expiresAt)
+        && approvedAt <= now.getTime() && expiresAt >= now.getTime();
+    if (!valid)
+        throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_APPROVAL_INVALID", "approval is stale or mismatched");
+}
+function parseEnvelope(file) {
+    const stat = fs.lstatSync(file);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_STAGE_BYTES
+        || (process.platform !== "win32" && (stat.mode & 0o077) !== 0)) {
+        throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_UNSAFE_PATH", "staged envelope is unsafe");
+    }
+    let envelope;
+    try {
+        envelope = JSON.parse(fs.readFileSync(file, "utf8"));
+    }
+    catch {
+        throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_INVALID", "staged envelope is invalid");
+    }
+    return envelope;
+}
+function stageProjectBrainApply(options) {
+    assertOpaqueId(options.proposalId, "proposal id");
+    assertOpaqueId(options.applyId, "apply id");
+    const now = options.now || new Date();
+    assertApprovalBinding(options.proposal, options.approval, now);
+    const rootPath = canonicalExisting(options.root, "directory");
+    const proposalPath = canonicalExisting(options.proposalPath, "file");
+    const approvalPath = canonicalExisting(options.approvalPath, "file");
+    if (proposalPath === approvalPath)
+        throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_UNSAFE_PATH", "proposal and approval paths must differ");
+    if (fs.readFileSync(proposalPath, "utf8") !== options.proposalContent
+        || fs.readFileSync(approvalPath, "utf8") !== options.approvalContent) {
+        throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_STALE_HASH", "staged inputs changed during validation");
+    }
+    const approvalExpiry = Date.parse(options.approval.expiresAt);
+    const expiresAt = new Date(Math.min(approvalExpiry, now.getTime() + MAX_STAGE_AGE_MS));
+    const envelope = {
+        schemaVersion: exports.PROJECT_BRAIN_STAGED_APPLY_VERSION,
+        kind: "project-brain-staged-apply",
+        state: "staged",
+        proposalId: options.proposalId,
+        applyId: options.applyId,
+        proposalRef: options.proposal.proposalRef,
+        rootPath,
+        rootPathHash: hash(rootPath),
+        proposalPath,
+        proposalContentHash: hash(options.proposalContent),
+        approvalPath,
+        approvalContentHash: hash(options.approvalContent),
+        createdAt: now.toISOString(),
+        expiresAt: expiresAt.toISOString(),
+    };
+    const paths = stagePaths(stageRoot(options.brainRoot), options.applyId);
+    atomicCreate(paths.file, `${JSON.stringify(envelope, null, 2)}\n`);
+    return envelope;
+}
+function consumeProjectBrainStagedApply(options) {
+    assertOpaqueId(options.proposalId, "proposal id");
+    assertOpaqueId(options.applyId, "apply id");
+    const paths = stagePaths(stageRoot(options.brainRoot), options.applyId);
+    let lockFd;
+    try {
+        lockFd = fs.openSync(paths.lock, fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_EXCL, 0o600);
+    }
+    catch {
+        throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_REPLAY", "staged apply is already being consumed");
+    }
+    try {
+        let envelope;
+        try {
+            envelope = parseEnvelope(paths.file);
+        }
+        catch (error) {
+            if (error instanceof BrainStagedApplyError)
+                throw error;
+            throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_NOT_FOUND", "staged apply is unavailable");
+        }
+        const now = options.now || new Date();
+        if (envelope.schemaVersion !== exports.PROJECT_BRAIN_STAGED_APPLY_VERSION || envelope.kind !== "project-brain-staged-apply"
+            || envelope.proposalId !== options.proposalId || envelope.applyId !== options.applyId
+            || !SHA256_REF.test(envelope.rootPathHash) || !SHA256_REF.test(envelope.proposalContentHash)
+            || !SHA256_REF.test(envelope.approvalContentHash)) {
+            throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_INVALID", "staged apply binding is invalid");
+        }
+        if (envelope.state !== "staged")
+            throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_REPLAY", "staged apply was already consumed");
+        if (!Number.isFinite(Date.parse(envelope.expiresAt)) || Date.parse(envelope.expiresAt) < now.getTime()) {
+            throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_EXPIRED", "staged apply expired");
+        }
+        const root = canonicalExisting(envelope.rootPath, "directory");
+        const proposalPath = canonicalExisting(envelope.proposalPath, "file");
+        const approvalPath = canonicalExisting(envelope.approvalPath, "file");
+        if (root !== envelope.rootPath || hash(root) !== envelope.rootPathHash
+            || proposalPath !== envelope.proposalPath || approvalPath !== envelope.approvalPath
+            || hash(fs.readFileSync(proposalPath)) !== envelope.proposalContentHash
+            || hash(fs.readFileSync(approvalPath)) !== envelope.approvalContentHash) {
+            throw new BrainStagedApplyError("PROJECT_BRAIN_STAGE_STALE_HASH", "staged apply inputs changed after staging");
+        }
+        const consumed = {
+            ...envelope,
+            state: "consumed",
+            consumedAt: now.toISOString(),
+        };
+        atomicReplace(paths.file, `${JSON.stringify(consumed, null, 2)}\n`);
+        return {
+            proposalId: consumed.proposalId,
+            applyId: consumed.applyId,
+            proposalRef: consumed.proposalRef,
+            root,
+            proposalPath,
+            proposalContentHash: consumed.proposalContentHash,
+            approvalPath,
+            approvalContentHash: consumed.approvalContentHash,
+            state: "consumed",
+        };
+    }
+    finally {
+        if (lockFd !== undefined)
+            try {
+                fs.closeSync(lockFd);
+            }
+            catch { /* closed */ }
+        try {
+            fs.unlinkSync(paths.lock);
+        }
+        catch { /* absent */ }
+    }
+}
+//# sourceMappingURL=staged-apply.js.map

package/dist/lib/brain/staged-apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"staged-apply.js","sourceRoot":"","sources":["../../../src/lib/brain/staged-apply.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+MA,wDAkCC;AAED,wEA4DC;AA/SD,+CAAiC;AACjC,uCAAyB;AACzB,2CAA6B;AAC7B,sCAAqD;AAIxC,QAAA,kCAAkC,GAAG,sCAA+C,CAAC;AAClG,MAAM,SAAS,GAAG,yBAAyB,CAAC;AAC5C,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAC3C,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAClC,MAAM,gBAAgB,GAAG,EAAE,GAAG,KAAM,CAAC;AAqDrC,MAAa,qBAAsB,SAAQ,KAAK;IAC9C,YAAqB,IAAY,EAAE,OAAe;QAChD,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,SAAI,GAAJ,IAAI,CAAQ;QAE/B,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AALD,sDAKC;AAED,SAAS,IAAI,CAAC,KAAsB;IAClC,OAAO,UAAU,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,KAAa;IAClD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,gCAAgC,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;AACvH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,IAA0B;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,qBAAqB,CAAC,iCAAiC,EAAE,GAAG,IAAI,uBAAuB,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qBAAqB;YAAE,MAAM,KAAK,CAAC;QACxD,MAAM,IAAI,qBAAqB,CAAC,iCAAiC,EAAE,GAAG,IAAI,iBAAiB,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QAAC,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAC9C,MAAM,CAAC;QAAC,MAAM,IAAI,qBAAqB,CAAC,iCAAiC,EAAE,GAAG,IAAI,iBAAiB,CAAC,CAAC;IAAC,CAAC;IACvG,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,qBAAqB,CAAC,iCAAiC,EAAE,GAAG,IAAI,oBAAoB,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAA,iCAAwB,GAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IACxF,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,qBAAqB,CAAC,iCAAiC,EAAE,sBAAsB,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IACjE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,OAAe;IAC/C,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;IAC5D,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,MAAM,kBAAkB,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,qBAAqB,CAAC,iCAAiC,EAAE,6BAA6B,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAC1E,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,MAAM,OAAO,CAAC;QACrD,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,MAAM,OAAO,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB;IACvC,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnD,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,OAAe;IACjD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IACxF,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvG,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjB,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjB,EAAE,GAAG,SAAS,CAAC;QACf,IAAI,CAAC;YAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;QACrC,MAAM,CAAC;YAAC,MAAM,IAAI,qBAAqB,CAAC,4BAA4B,EAAE,wCAAwC,CAAC,CAAC;QAAC,CAAC;QAClH,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACzB,IAAI,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;QAC5D,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,IAAI,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACtE,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe;IAClD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IACxF,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvG,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjB,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjB,EAAE,GAAG,SAAS,CAAC;QACf,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;QAC5D,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,IAAI,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACtE,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,QAA8B,EAAE,QAAmC,EAAE,GAAS;IAC3G,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,QAAQ,EAAE,aAAa,KAAK,kCAAkC;WACvE,QAAQ,CAAC,IAAI,KAAK,wBAAwB,IAAI,QAAQ,CAAC,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK;WAC5G,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;WAC7C,QAAQ,CAAC,QAAQ,EAAE,UAAU,KAAK,QAAQ,CAAC,UAAU;WACrD,QAAQ,CAAC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;WACpD,QAAQ,CAAC,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;WACxD,QAAQ,CAAC,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;WACxD,QAAQ,CAAC,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,MAAM,CAAC,eAAe;WACrE,QAAQ,CAAC,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,MAAM,CAAC,cAAc;WACnE,QAAQ,CAAC,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;WACtD,QAAQ,CAAC,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;WACtD,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;WACzD,UAAU,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,SAAS,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;IAC/D,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,qBAAqB,CAAC,sCAAsC,EAAE,iCAAiC,CAAC,CAAC;AACzH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,eAAe;WACrE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,qBAAqB,CAAC,iCAAiC,EAAE,2BAA2B,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,QAAyC,CAAC;IAC9C,IAAI,CAAC;QAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAoC,CAAC;IAAC,CAAC;IAChG,MAAM,CAAC;QAAC,MAAM,IAAI,qBAAqB,CAAC,6BAA6B,EAAE,4BAA4B,CAAC,CAAC;IAAC,CAAC;IACvG,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,sBAAsB,CAAC,OAAsC;IAC3E,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAClD,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACrE,IAAI,YAAY,KAAK,YAAY;QAAE,MAAM,IAAI,qBAAqB,CAAC,iCAAiC,EAAE,yCAAyC,CAAC,CAAC;IACjJ,IAAI,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,OAAO,CAAC,eAAe;WAChE,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,OAAO,CAAC,eAAe,EAAE,CAAC;QACvE,MAAM,IAAI,qBAAqB,CAAC,gCAAgC,EAAE,yCAAyC,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAoC;QAChD,aAAa,EAAE,0CAAkC;QACjD,IAAI,EAAE,4BAA4B;QAClC,KAAK,EAAE,QAAQ;QACf,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW;QACzC,QAAQ;QACR,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC;QAC5B,YAAY;QACZ,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;QAClD,YAAY;QACZ,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;QAClD,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;KACnC,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACxE,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACnE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,8BAA8B,CAC5C,OAA8C;IAE9C,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAClD,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACxE,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9G,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,qBAAqB,CAAC,4BAA4B,EAAE,wCAAwC,CAAC,CAAC;IAC1G,CAAC;IACD,IAAI,CAAC;QACH,IAAI,QAAyC,CAAC;QAC9C,IAAI,CAAC;YAAC,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAC7C,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,qBAAqB;gBAAE,MAAM,KAAK,CAAC;YACxD,MAAM,IAAI,qBAAqB,CAAC,+BAA+B,EAAE,6BAA6B,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;QACtC,IAAI,QAAQ,CAAC,aAAa,KAAK,0CAAkC,IAAI,QAAQ,CAAC,IAAI,KAAK,4BAA4B;eAC9G,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;eAClF,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;eACzF,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,qBAAqB,CAAC,6BAA6B,EAAE,iCAAiC,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,qBAAqB,CAAC,4BAA4B,EAAE,mCAAmC,CAAC,CAAC;QACpI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YACvG,MAAM,IAAI,qBAAqB,CAAC,6BAA6B,EAAE,sBAAsB,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,iBAAiB,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG,iBAAiB,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACtE,IAAI,IAAI,KAAK,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,YAAY;eACjE,YAAY,KAAK,QAAQ,CAAC,YAAY,IAAI,YAAY,KAAK,QAAQ,CAAC,YAAY;eAChF,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,KAAK,QAAQ,CAAC,mBAAmB;eACpE,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,KAAK,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAC1E,MAAM,IAAI,qBAAqB,CAAC,gCAAgC,EAAE,2CAA2C,CAAC,CAAC;QACjH,CAAC;QACD,MAAM,QAAQ,GAAoC;YAChD,GAAG,QAAQ;YACX,KAAK,EAAE,UAAU;YACjB,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;SAC9B,CAAC;QACF,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACpE,OAAO;YACL,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,IAAI;YACJ,YAAY;YACZ,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;YACjD,YAAY;YACZ,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;YACjD,KAAK,EAAE,UAAU;SAClB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC9E,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC"}

package/dist/lib/brain/store.d.ts

@@ -0,0 +1,26 @@
+import { BrainContentCache } from "./cache";
+import { BrainPersistenceFault, BrainPersistenceResult, ProjectBrainScan } from "./types";
+export declare function defaultBrainRoot(): string;
+export declare class BrainPersistenceInterruptedError extends Error {
+    readonly phase: string;
+    readonly code = "brain_persistence_interrupted";
+    constructor(phase: string);
+}
+export interface BrainPersistOptions {
+    signal?: AbortSignal;
+    cache?: BrainContentCache;
+    faultInjection?: BrainPersistenceFault;
+    lockTimeoutMs?: number;
+    lockStaleMs?: number;
+}
+export declare function brainWorkspaceLockPath(brainRoot: string, workspace: string): string;
+export declare function acquireBrainWorkspaceLock(brainRoot: string, workspace: string, options?: Pick<BrainPersistOptions, "signal" | "lockTimeoutMs" | "lockStaleMs">): () => void;
+export declare function persistBrainScan(scan: ProjectBrainScan, brainRoot?: string, canaries?: string[], options?: BrainPersistOptions): BrainPersistenceResult;
+export declare function listBrainWorkspaceRefs(brainRoot?: string, project?: string): string[];
+export declare function readBrainSnapshot(options: {
+    brainRoot?: string;
+    project?: string;
+    workspace?: string;
+    revision?: string;
+}): ProjectBrainScan | null;
+//# sourceMappingURL=store.d.ts.map

package/dist/lib/brain/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/lib/brain/store.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAE5C,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE1F,wBAAgB,gBAAgB,IAAI,MAAM,CAAqD;AAE/F,qBAAa,gCAAiC,SAAQ,KAAK;IAE7C,QAAQ,CAAC,KAAK,EAAE,MAAM;IADlC,QAAQ,CAAC,IAAI,mCAAmC;gBAC3B,KAAK,EAAE,MAAM;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAyCD,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAGnF;AA+CD,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,IAAI,CAAC,mBAAmB,EAAE,QAAQ,GAAG,eAAe,GAAG,aAAa,CAAM,GAAG,MAAM,IAAI,CAG/K;AAiJD,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,gBAAgB,EACtB,SAAS,SAAqB,EAC9B,QAAQ,GAAE,MAAM,EAAO,EACvB,OAAO,GAAE,mBAAwB,GAChC,sBAAsB,CAgExB;AA8BD,wBAAgB,sBAAsB,CAAC,SAAS,SAAqB,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAKjG;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,gBAAgB,GAAG,IAAI,CA8BnJ"}