mars_agents/lock/

mod.rs

use std::collections::BTreeMap;
use std::collections::{HashMap, HashSet};
use std::path::Path;

use indexmap::IndexMap;
use serde::{Deserialize, Serialize};

use crate::diagnostic::Diagnostic;
use crate::error::{LockError, MarsError};
use crate::models::ModelAlias;
use crate::types::{
    CommitHash, ContentHash, DestPath, SourceId, SourceName, SourceOrigin, SourceSubpath, SourceUrl,
};

/// The complete lock file — ownership registry for all managed items.
///
/// Schema version 2: items are keyed by logical identity ("kind/name"), and each item
/// carries a list of per-output records (one per target root materialization).
///
/// TOML format, deterministically ordered (sorted keys) for clean git diffs.
#[derive(Debug, Clone, Serialize, PartialEq)]
pub struct LockFile {
    /// Schema version. Current version is 2.
    pub version: u32,
    #[serde(default)]
    pub dependencies: IndexMap<SourceName, LockedSource>,
    /// V2: logical items keyed by "kind/name" identity string.
    #[serde(default)]
    pub items: IndexMap<String, LockedItemV2>,
    /// Config entries installed by mars sync, keyed by target root and entry key.
    #[serde(default, skip_serializing_if = "BTreeMap::is_empty")]
    pub config_entries: BTreeMap<String, BTreeMap<String, ConfigEntryRecord>>,
    /// Dependency model alias winners (declaration-order merged, dependency-only).
    #[serde(default)]
    pub dependency_model_aliases: IndexMap<String, ModelAlias>,
}

/// Custom `Deserialize` for `LockFile`: delegates to the v2 wire type.
///
/// For reading v1 lock files, always go through [`load()`] which handles
/// the v1→v2 promotion. Direct deserialization via `toml::from_str::<LockFile>`
/// only supports v2 format.
impl<'de> serde::Deserialize<'de> for LockFile {
    fn deserialize<D: serde::Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error> {
        let wire = LockFileV2Wire::deserialize(deserializer)?;
        Ok(LockFile {
            version: wire.version,
            dependencies: wire.dependencies,
            items: wire.items,
            config_entries: wire.config_entries,
            dependency_model_aliases: wire.dependency_model_aliases,
        })
    }
}

impl LockFile {
    /// Create a new empty lock file with the current schema version.
    pub fn empty() -> Self {
        LockFile {
            version: LOCK_VERSION,
            dependencies: IndexMap::new(),
            items: IndexMap::new(),
            config_entries: BTreeMap::new(),
            dependency_model_aliases: IndexMap::new(),
        }
    }

    /// Look up a locked item by its output dest_path, returning a flat [`LockedItem`] view.
    ///
    /// Searches across all items and their output records. Returns the first match.
    pub fn find_by_dest_path(&self, dest_path: &DestPath) -> Option<LockedItem> {
        for item_v2 in self.items.values() {
            for output in &item_v2.outputs {
                if crate::target::dest_paths_equivalent(
                    output.dest_path.as_str(),
                    dest_path.as_str(),
                ) {
                    return Some(LockedItem {
                        source: item_v2.source.clone(),
                        kind: item_v2.kind,
                        version: item_v2.version.clone(),
                        source_checksum: item_v2.source_checksum.clone(),
                        installed_checksum: output.installed_checksum.clone(),
                        dest_path: output.dest_path.clone(),
                    });
                }
            }
        }
        None
    }

    /// Check if any output record has the given dest_path.
    pub fn contains_dest_path(&self, dest_path: &DestPath) -> bool {
        self.items.values().any(|item| {
            item.outputs.iter().any(|o| {
                crate::target::dest_paths_equivalent(o.dest_path.as_str(), dest_path.as_str())
            })
        })
    }

    /// Iterate all output dest_paths across all items.
    pub fn all_output_dest_paths(&self) -> impl Iterator<Item = &DestPath> {
        self.items
            .values()
            .flat_map(|item| item.outputs.iter().map(|o| &o.dest_path))
    }

    /// Dest paths previously managed under a specific target root.
    pub fn output_dest_paths_for_target(&self, target_root: &str) -> HashSet<String> {
        self.items
            .values()
            .flat_map(|item| item.outputs.iter())
            .filter(|output| output.target_root == target_root)
            .map(|output| output.dest_path.to_string())
            .collect()
    }

    /// Whether the lock records ownership of `dest_path` under `target_root`.
    pub fn contains_output(&self, target_root: &str, dest_path: &str) -> bool {
        self.items.values().any(|item| {
            item.outputs.iter().any(|output| {
                output.target_root == target_root
                    && crate::target::dest_paths_equivalent(output.dest_path.as_str(), dest_path)
            })
        })
    }

    /// Flat view of canonical `.mars` outputs only.
    pub fn canonical_flat_items(&self) -> Vec<(DestPath, LockedItem)> {
        self.flat_items_for_target(CANONICAL_TARGET_ROOT)
    }

    /// Flat view of outputs materialized under `target_root`.
    pub fn flat_items_for_target(&self, target_root: &str) -> Vec<(DestPath, LockedItem)> {
        self.items
            .values()
            .flat_map(|item_v2| {
                item_v2.outputs.iter().filter_map(|output| {
                    if output.target_root != target_root {
                        return None;
                    }
                    Some((
                        output.dest_path.clone(),
                        LockedItem {
                            source: item_v2.source.clone(),
                            kind: item_v2.kind,
                            version: item_v2.version.clone(),
                            source_checksum: item_v2.source_checksum.clone(),
                            installed_checksum: output.installed_checksum.clone(),
                            dest_path: output.dest_path.clone(),
                        },
                    ))
                })
            })
            .collect()
    }

    /// Flat view of all items as owned `(dest_path, LockedItem)` pairs.
    ///
    /// Used by diff, orphan scan, and CLI commands that need a per-output view.
    pub fn flat_items(&self) -> Vec<(DestPath, LockedItem)> {
        self.items
            .values()
            .flat_map(|item_v2| {
                item_v2.outputs.iter().map(|output| {
                    (
                        output.dest_path.clone(),
                        LockedItem {
                            source: item_v2.source.clone(),
                            kind: item_v2.kind,
                            version: item_v2.version.clone(),
                            source_checksum: item_v2.source_checksum.clone(),
                            installed_checksum: output.installed_checksum.clone(),
                            dest_path: output.dest_path.clone(),
                        },
                    )
                })
            })
            .collect()
    }
}

/// Ephemeral lookup index for lock files.
///
/// `LockFile` preserves the persisted v2 shape. Build this short-lived index
/// at hot call sites that need repeated output-path lookups.
pub struct LockIndex<'a> {
    lock: &'a LockFile,
    by_output: HashMap<(String, String), (&'a str, usize)>,
    by_dest_path: HashMap<String, (&'a str, usize)>,
}

impl<'a> LockIndex<'a> {
    pub fn new(lock: &'a LockFile) -> Self {
        let mut by_output = HashMap::new();
        let mut by_dest_path = HashMap::new();

        for (key, item) in &lock.items {
            for (idx, output) in item.outputs.iter().enumerate() {
                let normalized_dest = normalize_dest_path(output.dest_path.as_str());
                by_dest_path
                    .entry(normalized_dest.clone())
                    .or_insert((key.as_str(), idx));
                by_output.insert(
                    (output.target_root.clone(), normalized_dest),
                    (key.as_str(), idx),
                );
            }
        }

        Self {
            lock,
            by_output,
            by_dest_path,
        }
    }

    /// Look up a locked item by output dest_path, returning a flat [`LockedItem`] view.
    pub fn find_by_dest_path(&self, dest_path: &DestPath) -> Option<LockedItem> {
        let (item_key, output_idx) = *self
            .by_dest_path
            .get(&normalize_dest_path(dest_path.as_str()))?;
        self.locked_item_for(item_key, output_idx)
    }

    /// Look up a locked output by target root + dest_path, returning a flat [`LockedItem`] view.
    pub fn find_output(&self, target_root: &str, dest_path: &DestPath) -> Option<LockedItem> {
        let (item_key, output_idx) = *self.by_output.get(&(
            target_root.to_string(),
            normalize_dest_path(dest_path.as_str()),
        ))?;
        self.locked_item_for(item_key, output_idx)
    }

    /// Whether any output is recorded for `target_root + dest_path`.
    pub fn contains_output(&self, target_root: &str, dest_path: &DestPath) -> bool {
        self.by_output.contains_key(&(
            target_root.to_string(),
            normalize_dest_path(dest_path.as_str()),
        ))
    }

    fn locked_item_for(&self, item_key: &str, output_idx: usize) -> Option<LockedItem> {
        let item_v2 = self.lock.items.get(item_key)?;
        let output = item_v2.outputs.get(output_idx)?;
        Some(LockedItem {
            source: item_v2.source.clone(),
            kind: item_v2.kind,
            version: item_v2.version.clone(),
            source_checksum: item_v2.source_checksum.clone(),
            installed_checksum: output.installed_checksum.clone(),
            dest_path: output.dest_path.clone(),
        })
    }

    /// Check if any output record has the given dest_path.
    pub fn contains_dest_path(&self, dest_path: &DestPath) -> bool {
        self.by_dest_path
            .contains_key(&normalize_dest_path(dest_path.as_str()))
    }
}

fn normalize_dest_path(s: &str) -> String {
    if cfg!(windows) {
        s.replace('\\', "/")
    } else {
        s.to_string()
    }
}

/// One resolved source in the lock.
#[derive(Debug, Clone, Serialize, Deserialize, PartialEq)]
pub struct LockedSource {
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub url: Option<SourceUrl>,
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub path: Option<String>,
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub subpath: Option<SourceSubpath>,
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub version: Option<String>,
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub commit: Option<CommitHash>,
    /// Reserved for future content verification of fetched source trees.
    /// TODO: populate during fetch/build once deterministic tree hashing is implemented.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub tree_hash: Option<String>,
}

/// V2 locked item: one logical item with per-output records.
///
/// `source_checksum` is shared across all outputs (same source content).
/// Each `OutputRecord` has its own `installed_checksum` for divergence detection.
#[derive(Debug, Clone, Serialize, Deserialize, PartialEq)]
pub struct LockedItemV2 {
    pub source: SourceName,
    pub kind: ItemKind,
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub version: Option<String>,
    pub source_checksum: ContentHash,
    /// Per-output records: one per target root this item was materialized to.
    pub outputs: Vec<OutputRecord>,
}

/// A single materialized output of a logical item.
#[derive(Debug, Clone, Serialize, Deserialize, PartialEq)]
pub struct OutputRecord {
    /// Target root this output belongs to (e.g., ".mars", ".claude").
    pub target_root: String,
    /// Relative path under the target root (e.g., "agents/coder.md").
    pub dest_path: DestPath,
    /// Checksum of the installed content at this output location.
    pub installed_checksum: ContentHash,
}

/// Ownership record for one target-native config entry.
#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
pub struct ConfigEntryRecord {
    pub source: String,
}

/// Flat view of a single installed item — used by diff, plan, and apply stages.
///
/// Constructed from [`LockedItemV2`] + one [`OutputRecord`]; preserves backward
/// compat with code that operates on per-dest-path records.
#[derive(Debug, Clone, Serialize, Deserialize, PartialEq)]
pub struct LockedItem {
    pub source: SourceName,
    pub kind: ItemKind,
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub version: Option<String>,
    pub source_checksum: ContentHash,
    pub installed_checksum: ContentHash,
    pub dest_path: DestPath,
}

// Re-export ItemKind and ItemId from types — they're shared vocabulary,
// not lock-specific. This preserves `use crate::lock::ItemKind` compatibility.
pub use crate::types::{ItemId, ItemKind};

const LOCK_FILE: &str = "mars.lock";
/// Current lock file schema version.
const LOCK_VERSION: u32 = 2;
/// Canonical materialization root for `.mars/` apply outcomes.
pub const CANONICAL_TARGET_ROOT: &str = ".mars";

// ---------------------------------------------------------------------------
// V1 wire type — used only for reading legacy lock files.
// ---------------------------------------------------------------------------

/// V1 wire format for reading legacy lock files.
#[derive(Deserialize)]
struct LockFileV1 {
    #[allow(dead_code)]
    version: u32,
    #[serde(default)]
    dependencies: IndexMap<SourceName, LockedSource>,
    #[serde(default)]
    items: IndexMap<DestPath, LockedItem>,
}

/// V2 wire format for Deserialize (mirrors `LockFile` but derives `Deserialize`).
#[derive(Deserialize)]
struct LockFileV2Wire {
    version: u32,
    #[serde(default)]
    dependencies: IndexMap<SourceName, LockedSource>,
    #[serde(default)]
    items: IndexMap<String, LockedItemV2>,
    #[serde(default)]
    config_entries: BTreeMap<String, BTreeMap<String, ConfigEntryRecord>>,
    #[serde(default)]
    dependency_model_aliases: IndexMap<String, ModelAlias>,
}

// ---------------------------------------------------------------------------
// Load / write
// ---------------------------------------------------------------------------

/// Load the lock file from the given root directory.
///
/// Returns an empty LockFile (v2) if the file is absent.
/// V1 lock files are transparently promoted to the v2 in-memory shape (D19):
/// the lock is only written as v2 after a successful sync.
pub fn load(root: &Path) -> Result<LockFile, MarsError> {
    let (lock, _) = load_with_diagnostics(root)?;
    Ok(lock)
}

/// Load lock for runtime alias commands (`models list/resolve`, launch bundle routing).
///
/// Legacy v2 lock files created before dependency aliases were moved into `mars.lock`
/// may omit `dependency_model_aliases` entirely. When dependency entries exist, runtime
/// alias consumers must fail closed so dependency alias authority is not silently treated
/// as empty.
pub fn load_for_runtime_aliases(root: &Path) -> Result<LockFile, MarsError> {
    let path = root.join(LOCK_FILE);
    let content = match std::fs::read_to_string(&path) {
        Ok(c) => c,
        Err(e) if e.kind() == std::io::ErrorKind::NotFound => return Ok(LockFile::empty()),
        Err(e) => return Err(LockError::Io(e).into()),
    };

    let value: toml::Value = toml::from_str(&content).map_err(|e| LockError::Corrupt {
        message: format!("failed to parse {}: {e}", path.display()),
    })?;

    let has_dependency_alias_field = value
        .as_table()
        .map(|table| table.contains_key("dependency_model_aliases"))
        .unwrap_or(false);

    let (lock, _) = load_with_diagnostics(root)?;

    if !has_dependency_alias_field && !lock.dependencies.is_empty() {
        return Err(LockError::Corrupt {
            message: format!(
                "legacy {} is missing `dependency_model_aliases` for dependency alias authority; run `{}` to update it",
                LOCK_FILE,
                crate::types::managed_cmd("mars sync")
            ),
        }
        .into());
    }

    Ok(lock)
}

/// Load the lock file and return any diagnostics produced while reading it.
///
/// This preserves legacy v1→v2 in-memory promotion while routing promotion
/// warnings through the normal diagnostic flow for sync callers.
pub fn load_with_diagnostics(root: &Path) -> Result<(LockFile, Vec<Diagnostic>), MarsError> {
    let path = root.join(LOCK_FILE);
    let content = match std::fs::read_to_string(&path) {
        Ok(c) => c,
        Err(e) if e.kind() == std::io::ErrorKind::NotFound => {
            return Ok((LockFile::empty(), Vec::new()));
        }
        Err(e) => return Err(LockError::Io(e).into()),
    };

    let value: toml::Value = toml::from_str(&content).map_err(|e| LockError::Corrupt {
        message: format!("failed to parse {}: {e}", path.display()),
    })?;

    match value.clone().try_into::<LockFileV2Wire>() {
        Ok(wire) if wire.version >= 2 => Ok((
            LockFile {
                version: wire.version,
                dependencies: wire.dependencies,
                items: wire.items,
                config_entries: wire.config_entries,
                dependency_model_aliases: wire.dependency_model_aliases,
            },
            Vec::new(),
        )),
        v2_result => {
            // V1 → V2 promotion (D19): map each DestPath key to a logical identity.
            let wire: LockFileV1 = value.clone().try_into().map_err(|v1_error| {
                let parse_error = match v2_result {
                    Ok(wire) => format!("unsupported lock version {}", wire.version),
                    Err(v2_error) => {
                        format!("v2 parse failed: {v2_error}; v1 parse failed: {v1_error}")
                    }
                };
                LockError::Corrupt {
                    message: format!("failed to parse {}: {parse_error}", path.display()),
                }
            })?;
            let (items, diagnostics) = promote_v1_items(wire.items);
            Ok((
                LockFile {
                    version: LOCK_VERSION,
                    dependencies: wire.dependencies,
                    items,
                    config_entries: BTreeMap::new(),
                    dependency_model_aliases: IndexMap::new(),
                },
                diagnostics,
            ))
        }
    }
}

/// Write the lock file atomically to the given root directory (always v2 format).
pub fn write(root: &Path, lock: &LockFile) -> Result<(), MarsError> {
    let path = root.join(LOCK_FILE);
    let mut normalized = lock.clone();
    normalized.dependencies.sort_keys();
    normalized.items.sort_keys();
    normalized.dependency_model_aliases.sort_keys();

    let content = toml::to_string_pretty(&normalized).map_err(|e| LockError::Corrupt {
        message: format!("failed to serialize lock file: {e}"),
    })?;
    crate::fs::atomic_write(&path, content.as_bytes())
}

/// Convert v1 `IndexMap<DestPath, LockedItem>` to v2 `IndexMap<String, LockedItemV2>`.
///
/// Each v1 entry becomes one `LockedItemV2` with exactly one `OutputRecord`
/// using `target_root = ".mars"` (the only output root in v1).
///
/// Key collision: two v1 entries with different dest_paths but the same basename
/// (e.g. `hooks/pre-commit/hook.sh` and `hooks/pre-push/hook.sh` both name "hook")
/// would map to the same key and silently drop one. When a collision is detected,
/// we warn and fall back to the raw dest_path string as a disambiguated key.
fn promote_v1_items(
    v1_items: IndexMap<DestPath, LockedItem>,
) -> (IndexMap<String, LockedItemV2>, Vec<Diagnostic>) {
    let mut result: IndexMap<String, LockedItemV2> = IndexMap::new();
    let mut diagnostics = Vec::new();

    for (dest_path, item) in v1_items {
        let key = format!("{}/{}", item.kind, dest_path.item_name(item.kind));
        let item_v2 = LockedItemV2 {
            source: item.source,
            kind: item.kind,
            version: item.version,
            source_checksum: item.source_checksum,
            outputs: vec![OutputRecord {
                target_root: ".mars".to_string(),
                dest_path: item.dest_path,
                installed_checksum: item.installed_checksum,
            }],
        };

        if result.contains_key(&key) {
            // Two v1 entries share the same basename — use the full dest_path as a
            // disambiguated key so neither entry is silently dropped.
            let fallback_key = format!("{}/{}", item_v2.kind, dest_path.as_str());
            diagnostics.push(Diagnostic {
                level: crate::diagnostic::DiagnosticLevel::Warning,
                code: "lock-promotion-collision",
                message: format!(
                    "v1→v2 promotion: key collision on `{key}`; using dest_path key `{fallback_key}`"
                ),
                context: None,
                category: None,
            });
            result.insert(fallback_key, item_v2);
        } else {
            result.insert(key, item_v2);
        }
    }

    (result, diagnostics)
}

// ---------------------------------------------------------------------------
// Build
// ---------------------------------------------------------------------------

/// Build a new lock file from resolved graph + apply results.
///
/// Constructs the lock file from the graph (source provenance) and
/// the apply outcomes (checksums). Items that were skipped, kept, or
/// merged retain their provenance from the graph. Removed items are excluded.
pub fn build(
    graph: &crate::resolve::ResolvedGraph,
    applied: &crate::sync::apply::ApplyResult,
    old_lock: &LockFile,
    config_entries: BTreeMap<String, BTreeMap<String, ConfigEntryRecord>>,
) -> Result<LockFile, MarsError> {
    use crate::sync::apply::ActionTaken;

    let mut dependencies = IndexMap::new();
    let mut items: IndexMap<String, LockedItemV2> = IndexMap::new();
    let old_lock_index = LockIndex::new(old_lock);

    for outcome in &applied.outcomes {
        match outcome.action {
            ActionTaken::Installed
            | ActionTaken::Updated
            | ActionTaken::Merged
            | ActionTaken::Conflicted => {
                let installed =
                    outcome
                        .installed_checksum
                        .as_ref()
                        .ok_or_else(|| LockError::Corrupt {
                            message: format!(
                                "missing checksum for write-producing action on {}",
                                outcome.dest_path
                            ),
                        })?;
                if checksum_is_empty(installed) {
                    return Err(LockError::Corrupt {
                        message: format!("empty installed_checksum for {}", outcome.dest_path),
                    }
                    .into());
                }

                let source =
                    outcome
                        .source_checksum
                        .as_ref()
                        .ok_or_else(|| LockError::Corrupt {
                            message: format!(
                                "missing source checksum for write-producing action on {}",
                                outcome.dest_path
                            ),
                        })?;
                if checksum_is_empty(source) {
                    return Err(LockError::Corrupt {
                        message: format!("empty source_checksum for {}", outcome.dest_path),
                    }
                    .into());
                }
            }
            ActionTaken::Removed | ActionTaken::Skipped | ActionTaken::Kept => {}
        }
    }

    // Build dependency entries directly from resolved graph provenance.
    for (name, node) in &graph.nodes {
        dependencies.insert(name.clone(), to_locked_source(node));
    }

    // Build item entries from apply outcomes.
    for outcome in &applied.outcomes {
        match &outcome.action {
            ActionTaken::Removed | ActionTaken::Skipped => {
                // For skipped items, carry forward from old lock
                if matches!(outcome.action, ActionTaken::Skipped) {
                    let item_key = item_key(&outcome.item_id);
                    if let Some(old_item) = old_lock.items.get(&item_key) {
                        items.insert(item_key, old_item.clone());
                    } else {
                        // Fall back: search old lock by dest_path (handles v1→v2 migrations
                        // where item_key may not match yet)
                        if let Some(flat) =
                            old_lock_index.find_output(CANONICAL_TARGET_ROOT, &outcome.dest_path)
                        {
                            let key =
                                format!("{}/{}", flat.kind, outcome.dest_path.item_name(flat.kind));
                            items.entry(key).or_insert_with(|| LockedItemV2 {
                                source: flat.source,
                                kind: flat.kind,
                                version: flat.version,
                                source_checksum: flat.source_checksum,
                                outputs: vec![OutputRecord {
                                    target_root: ".mars".to_string(),
                                    dest_path: flat.dest_path,
                                    installed_checksum: flat.installed_checksum,
                                }],
                            });
                        }
                    }
                }
                // Removed items are excluded from the new lock.
            }
            ActionTaken::Kept => {
                // Keep local: carry forward old lock entry.
                let item_key = item_key(&outcome.item_id);
                if let Some(old_item) = old_lock.items.get(&item_key) {
                    items.insert(item_key, old_item.clone());
                } else if let Some(flat) =
                    old_lock_index.find_output(CANONICAL_TARGET_ROOT, &outcome.dest_path)
                {
                    let key = format!("{}/{}", flat.kind, outcome.dest_path.item_name(flat.kind));
                    items.entry(key).or_insert_with(|| LockedItemV2 {
                        source: flat.source,
                        kind: flat.kind,
                        version: flat.version,
                        source_checksum: flat.source_checksum,
                        outputs: vec![OutputRecord {
                            target_root: ".mars".to_string(),
                            dest_path: flat.dest_path,
                            installed_checksum: flat.installed_checksum,
                        }],
                    });
                }
            }
            ActionTaken::Installed
            | ActionTaken::Updated
            | ActionTaken::Merged
            | ActionTaken::Conflicted => {
                let dest_path = outcome.dest_path.clone();
                if dest_path.as_str().is_empty() {
                    continue;
                }

                // Use source_name from outcome (propagated from TargetItem)
                let source_name = if outcome.source_name.as_ref().is_empty() {
                    None
                } else {
                    Some(outcome.source_name.clone())
                };

                // Determine version from graph
                let version = source_name.as_ref().and_then(|sn| {
                    graph
                        .nodes
                        .get(sn)
                        .and_then(|n| n.resolved_ref.version_tag.clone())
                });

                let source_checksum = outcome
                    .source_checksum
                    .clone()
                    .expect("validated above: source_checksum exists for write actions");
                let installed_checksum = outcome
                    .installed_checksum
                    .clone()
                    .expect("validated above: installed_checksum exists for write actions");

                let key = item_key(&outcome.item_id);
                items.insert(
                    key,
                    LockedItemV2 {
                        source: source_name.unwrap_or_else(|| SourceName::from("")),
                        kind: outcome.item_id.kind,
                        version,
                        source_checksum,
                        outputs: vec![OutputRecord {
                            target_root: ".mars".to_string(),
                            dest_path,
                            installed_checksum,
                        }],
                    },
                );
            }
        }
    }

    // Add synthetic _self source if any local package items exist.
    let local_source_name: SourceName = SourceOrigin::LocalPackage.to_string().into();
    let has_self_items = items.values().any(|item| item.source == local_source_name);
    if has_self_items {
        dependencies.insert(
            local_source_name,
            LockedSource {
                url: None,
                path: Some(".".into()),
                subpath: None,
                version: None,
                commit: None,
                tree_hash: None,
            },
        );
    }

    // Validate checksums.
    for item in items.values() {
        if checksum_is_empty(&item.source_checksum) {
            let dest = item
                .outputs
                .first()
                .map(|o| o.dest_path.to_string())
                .unwrap_or_default();
            return Err(LockError::Corrupt {
                message: format!("empty source_checksum for {dest}"),
            }
            .into());
        }
        for output in &item.outputs {
            if checksum_is_empty(&output.installed_checksum) {
                return Err(LockError::Corrupt {
                    message: format!("empty installed_checksum for {}", output.dest_path),
                }
                .into());
            }
        }
    }

    // Sort keys for deterministic output.
    dependencies.sort_keys();
    items.sort_keys();

    Ok(LockFile {
        version: LOCK_VERSION,
        dependencies,
        items,
        config_entries,
        dependency_model_aliases: IndexMap::new(),
    })
}

/// Lock view for native emission immediately after apply + target sync.
///
/// Seeds canonical `.mars` items from the current apply pass, then layers
/// per-target sync outputs so `copy_decision` treats freshly synced paths as
/// managed. Full lock rebuild happens in `finalize()`; this path avoids a
/// graph walk while still covering first-sync agents absent from `old_lock`.
pub fn ownership_lock_for_native_emission(
    old_lock: &LockFile,
    apply_outcomes: &[crate::sync::apply::ActionOutcome],
    target_outcomes: &[crate::target_sync::TargetSyncOutcome],
) -> LockFile {
    let mut lock = old_lock.clone();
    apply_apply_outcomes_to_lock(&mut lock, old_lock, apply_outcomes);
    apply_target_sync_outputs(&mut lock, target_outcomes);
    lock
}

/// Lock view for native emission after `mars link` target sync.
///
/// The persisted lock already reflects canonical items; only target-sync outputs
/// from the link pass need to be layered on for ownership checks.
pub fn ownership_lock_after_target_sync(
    old_lock: &LockFile,
    target_outcomes: &[crate::target_sync::TargetSyncOutcome],
) -> LockFile {
    let mut lock = old_lock.clone();
    apply_target_sync_outputs(&mut lock, target_outcomes);
    lock
}

/// Merge current apply outcomes into a lock view for ownership checks.
///
/// Write actions upsert canonical `.mars` outputs; removals drop the item;
/// skipped/kept entries carry forward from `old_lock` when the clone lacks them.
pub fn apply_apply_outcomes_to_lock(
    lock: &mut LockFile,
    old_lock: &LockFile,
    outcomes: &[crate::sync::apply::ActionOutcome],
) {
    use crate::sync::apply::ActionTaken;

    let old_lock_index = LockIndex::new(old_lock);
    for outcome in outcomes {
        match outcome.action {
            ActionTaken::Removed => {
                lock.items.shift_remove(&item_key(&outcome.item_id));
            }
            ActionTaken::Skipped => {
                let key = item_key(&outcome.item_id);
                if lock.items.contains_key(&key) {
                    continue;
                }
                if let Some(old_item) = old_lock.items.get(&key) {
                    lock.items.insert(key, old_item.clone());
                } else if let Some(flat) =
                    old_lock_index.find_output(CANONICAL_TARGET_ROOT, &outcome.dest_path)
                {
                    let key = format!("{}/{}", flat.kind, outcome.dest_path.item_name(flat.kind));
                    lock.items.entry(key).or_insert_with(|| LockedItemV2 {
                        source: flat.source,
                        kind: flat.kind,
                        version: flat.version,
                        source_checksum: flat.source_checksum,
                        outputs: vec![OutputRecord {
                            target_root: CANONICAL_TARGET_ROOT.to_string(),
                            dest_path: flat.dest_path,
                            installed_checksum: flat.installed_checksum,
                        }],
                    });
                }
            }
            ActionTaken::Kept => {
                let key = item_key(&outcome.item_id);
                if let Some(old_item) = old_lock.items.get(&key) {
                    lock.items.insert(key, old_item.clone());
                } else if let Some(flat) =
                    old_lock_index.find_output(CANONICAL_TARGET_ROOT, &outcome.dest_path)
                {
                    let key = format!("{}/{}", flat.kind, outcome.dest_path.item_name(flat.kind));
                    lock.items.entry(key).or_insert_with(|| LockedItemV2 {
                        source: flat.source,
                        kind: flat.kind,
                        version: flat.version,
                        source_checksum: flat.source_checksum,
                        outputs: vec![OutputRecord {
                            target_root: CANONICAL_TARGET_ROOT.to_string(),
                            dest_path: flat.dest_path,
                            installed_checksum: flat.installed_checksum,
                        }],
                    });
                }
            }
            ActionTaken::Installed
            | ActionTaken::Updated
            | ActionTaken::Merged
            | ActionTaken::Conflicted => {
                if outcome.dest_path.as_str().is_empty() {
                    continue;
                }
                let Some(source_checksum) = outcome
                    .source_checksum
                    .as_ref()
                    .filter(|checksum| !checksum_is_empty(checksum))
                else {
                    continue;
                };
                let Some(installed_checksum) = outcome
                    .installed_checksum
                    .as_ref()
                    .filter(|checksum| !checksum_is_empty(checksum))
                else {
                    continue;
                };

                let source_name = if outcome.source_name.as_ref().is_empty() {
                    SourceName::from("")
                } else {
                    outcome.source_name.clone()
                };

                let key = item_key(&outcome.item_id);
                lock.items.insert(
                    key,
                    LockedItemV2 {
                        source: source_name,
                        kind: outcome.item_id.kind,
                        version: None,
                        source_checksum: source_checksum.clone(),
                        outputs: vec![OutputRecord {
                            target_root: CANONICAL_TARGET_ROOT.to_string(),
                            dest_path: outcome.dest_path.clone(),
                            installed_checksum: installed_checksum.clone(),
                        }],
                    },
                );
            }
        }
    }
}

/// Merge per-target sync results into a built lock file.
pub fn apply_target_sync_outputs(
    lock: &mut LockFile,
    target_outcomes: &[crate::target_sync::TargetSyncOutcome],
) {
    for outcome in target_outcomes {
        for dest_path in &outcome.removed_dest_paths {
            remove_target_output(lock, &outcome.target, dest_path);
        }
        for synced in &outcome.synced_outputs {
            upsert_target_output(
                lock,
                &outcome.target,
                &synced.dest_path,
                &synced.installed_checksum,
            );
        }
    }
}

/// Native harness output recorded in the lock for a canonical `.mars` agent item.
#[derive(Debug, Clone, PartialEq, Eq)]
pub struct CompiledNativeOutput {
    /// Canonical `.mars` dest path for the owning agent (e.g. `agents/coder.md`).
    pub owner_canonical_dest_path: String,
    pub target_root: String,
    pub dest_path: String,
    pub installed_checksum: ContentHash,
}

/// Drop native harness output records removed by native agent reconcile.
pub fn apply_removed_native_outputs(lock: &mut LockFile, records: &[(String, String)]) {
    for (target_root, dest_path) in records {
        remove_target_output(lock, target_root, dest_path);
    }
}

/// Record native harness outputs produced by dual-surface compile.
pub fn apply_compiled_native_outputs(lock: &mut LockFile, records: &[CompiledNativeOutput]) {
    for record in records {
        upsert_native_output_on_owner(
            lock,
            &record.owner_canonical_dest_path,
            &record.target_root,
            &record.dest_path,
            &record.installed_checksum,
        );
    }
}

fn upsert_target_output(
    lock: &mut LockFile,
    target_root: &str,
    dest_path: &str,
    installed_checksum: &ContentHash,
) {
    let dest = DestPath::from(dest_path);
    for item in lock.items.values_mut() {
        if !item.outputs.iter().any(|output| {
            crate::target::dest_paths_equivalent(output.dest_path.as_str(), dest_path)
        }) {
            continue;
        }

        if let Some(output) = item.outputs.iter_mut().find(|output| {
            output.target_root == target_root
                && crate::target::dest_paths_equivalent(output.dest_path.as_str(), dest_path)
        }) {
            output.installed_checksum = installed_checksum.clone();
            return;
        }

        item.outputs.push(OutputRecord {
            target_root: target_root.to_string(),
            dest_path: dest,
            installed_checksum: installed_checksum.clone(),
        });
        item.outputs.sort_by(|a, b| {
            a.target_root
                .cmp(&b.target_root)
                .then_with(|| a.dest_path.as_str().cmp(b.dest_path.as_str()))
        });
        return;
    }
}

fn upsert_native_output_on_owner(
    lock: &mut LockFile,
    owner_canonical_dest_path: &str,
    target_root: &str,
    native_dest_path: &str,
    installed_checksum: &ContentHash,
) {
    let native_dest = DestPath::from(native_dest_path);
    for item in lock.items.values_mut() {
        let owns_canonical = item.outputs.iter().any(|output| {
            output.target_root == CANONICAL_TARGET_ROOT
                && crate::target::dest_paths_equivalent(
                    output.dest_path.as_str(),
                    owner_canonical_dest_path,
                )
        });
        if !owns_canonical {
            continue;
        }

        if let Some(output) = item.outputs.iter_mut().find(|output| {
            output.target_root == target_root
                && crate::target::dest_paths_equivalent(output.dest_path.as_str(), native_dest_path)
        }) {
            output.installed_checksum = installed_checksum.clone();
            return;
        }

        item.outputs.push(OutputRecord {
            target_root: target_root.to_string(),
            dest_path: native_dest,
            installed_checksum: installed_checksum.clone(),
        });
        item.outputs.sort_by(|a, b| {
            a.target_root
                .cmp(&b.target_root)
                .then_with(|| a.dest_path.as_str().cmp(b.dest_path.as_str()))
        });
        return;
    }
}

fn remove_target_output(lock: &mut LockFile, target_root: &str, dest_path: &str) {
    for item in lock.items.values_mut() {
        item.outputs.retain(|output| {
            !(output.target_root == target_root
                && crate::target::dest_paths_equivalent(output.dest_path.as_str(), dest_path))
        });
    }
    lock.items.retain(|_, item| !item.outputs.is_empty());
}

// ---------------------------------------------------------------------------
// Helpers
// ---------------------------------------------------------------------------

fn checksum_is_empty(checksum: &ContentHash) -> bool {
    checksum.as_ref().trim().is_empty()
}

fn to_locked_source(node: &crate::resolve::ResolvedNode) -> LockedSource {
    let (url, path, subpath) = match &node.source_id {
        SourceId::Git { url, subpath } => (Some(url.clone()), None, subpath.clone()),
        SourceId::Path { canonical, subpath } => (
            None,
            Some(canonical.to_string_lossy().to_string()),
            subpath.clone(),
        ),
    };

    LockedSource {
        url,
        path,
        subpath,
        version: node.resolved_ref.version_tag.clone(),
        commit: node.resolved_ref.commit.clone(),
        tree_hash: None,
    }
}

/// Canonical item key for v2 lock: `"kind/name"`.
pub fn item_key(id: &ItemId) -> String {
    format!("{}/{}", id.kind, id.name)
}

// ---------------------------------------------------------------------------
// Tests
// ---------------------------------------------------------------------------

#[cfg(test)]
mod tests {
    use super::*;
    use std::collections::HashMap;
    use std::path::PathBuf;

    use crate::resolve::{ResolvedGraph, ResolvedNode};
    use crate::source::ResolvedRef;
    use crate::sync::apply::{ActionOutcome, ActionTaken, ApplyResult};
    use crate::types::{ItemName, SourceId, SourceUrl};
    use tempfile::TempDir;

    fn sample_lock() -> LockFile {
        let mut dependencies = IndexMap::new();
        dependencies.insert(
            "base".into(),
            LockedSource {
                url: Some("https://github.com/org/base.git".into()),
                path: None,
                subpath: None,
                version: Some("v1.0.0".into()),
                commit: Some("abc123".into()),
                tree_hash: Some("def456".into()),
            },
        );

        let mut items = IndexMap::new();
        items.insert(
            "agent/coder".to_string(),
            LockedItemV2 {
                source: "base".into(),
                kind: ItemKind::Agent,
                version: Some("v1.0.0".into()),
                source_checksum: "sha256:aaa".into(),
                outputs: vec![OutputRecord {
                    target_root: ".mars".to_string(),
                    dest_path: "agents/coder.md".into(),
                    installed_checksum: "sha256:bbb".into(),
                }],
            },
        );
        items.insert(
            "skill/review".to_string(),
            LockedItemV2 {
                source: "base".into(),
                kind: ItemKind::Skill,
                version: Some("v1.0.0".into()),
                source_checksum: "sha256:ccc".into(),
                outputs: vec![OutputRecord {
                    target_root: ".mars".to_string(),
                    dest_path: "skills/review".into(),
                    installed_checksum: "sha256:ddd".into(),
                }],
            },
        );

        LockFile {
            version: LOCK_VERSION,
            dependencies,
            items,
            config_entries: BTreeMap::new(),
            dependency_model_aliases: IndexMap::new(),
        }
    }

    #[test]
    fn parse_v1_lock_file_promoted_to_v2() {
        let toml_str = r#"
version = 1

[dependencies.base]
url = "https://github.com/org/base.git"
version = "v1.0.0"
commit = "abc123"
tree_hash = "def456"

[items."agents/coder.md"]
source = "base"
kind = "agent"
version = "v1.0.0"
source_checksum = "sha256:aaa"
installed_checksum = "sha256:bbb"
dest_path = "agents/coder.md"
"#;
        // Load via the full load() path (promotion happens there).
        let dir = TempDir::new().unwrap();
        std::fs::write(dir.path().join("mars.lock"), toml_str).unwrap();
        let lock = load(dir.path()).unwrap();

        // Promoted to v2 in memory.
        assert_eq!(lock.version, LOCK_VERSION);
        assert_eq!(lock.dependencies.len(), 1);
        assert_eq!(lock.items.len(), 1);

        // V2 key is "kind/name".
        let item = &lock.items["agent/coder"];
        assert_eq!(item.source, "base");
        assert_eq!(item.kind, ItemKind::Agent);
        assert_eq!(item.source_checksum, "sha256:aaa");
        assert_eq!(item.outputs.len(), 1);
        assert_eq!(item.outputs[0].installed_checksum, "sha256:bbb");
        assert_eq!(item.outputs[0].dest_path.as_str(), "agents/coder.md");
        assert_eq!(item.outputs[0].target_root, ".mars");
    }

    #[test]
    fn parse_v2_lock_file() {
        let toml_str = r#"
version = 2

[dependencies.base]
url = "https://github.com/org/base.git"
version = "v1.0.0"
commit = "abc123"

[items."agent/coder"]
source = "base"
kind = "agent"
version = "v1.0.0"
source_checksum = "sha256:aaa"

[[items."agent/coder".outputs]]
target_root = ".mars"
dest_path = "agents/coder.md"
installed_checksum = "sha256:bbb"
"#;
        let dir = TempDir::new().unwrap();
        std::fs::write(dir.path().join("mars.lock"), toml_str).unwrap();
        let lock = load(dir.path()).unwrap();

        assert_eq!(lock.version, 2);
        assert_eq!(lock.items.len(), 1);

        let item = &lock.items["agent/coder"];
        assert_eq!(item.source_checksum, "sha256:aaa");
        assert_eq!(item.outputs[0].installed_checksum, "sha256:bbb");
    }

    #[test]
    fn load_for_runtime_aliases_rejects_legacy_v2_without_dependency_alias_authority() {
        let toml_str = r#"
version = 2

[dependencies.base]
url = "https://github.com/org/base.git"
version = "v1.0.0"
commit = "abc123"

[items."agent/coder"]
source = "base"
kind = "agent"
source_checksum = "sha256:aaa"

[[items."agent/coder".outputs]]
target_root = ".mars"
dest_path = "agents/coder.md"
installed_checksum = "sha256:bbb"
"#;
        let dir = TempDir::new().unwrap();
        std::fs::write(dir.path().join("mars.lock"), toml_str).unwrap();

        let err = load_for_runtime_aliases(dir.path()).unwrap_err();
        let message = err.to_string();
        assert!(message.contains("missing `dependency_model_aliases`"));
        assert!(message.contains("run `mars sync`"));
    }

    #[test]
    fn load_for_runtime_aliases_allows_missing_dependency_aliases_when_no_dependencies() {
        let toml_str = r#"
version = 2

[items."agent/coder"]
source = "_self"
kind = "agent"
source_checksum = "sha256:aaa"

[[items."agent/coder".outputs]]
target_root = ".mars"
dest_path = "agents/coder.md"
installed_checksum = "sha256:bbb"
"#;
        let dir = TempDir::new().unwrap();
        std::fs::write(dir.path().join("mars.lock"), toml_str).unwrap();

        let lock = load_for_runtime_aliases(dir.path()).unwrap();
        assert!(lock.dependencies.is_empty());
        assert!(lock.dependency_model_aliases.is_empty());
    }

    #[test]
    fn roundtrip_lock_file() {
        let lock = sample_lock();
        let dir = TempDir::new().unwrap();
        write(dir.path(), &lock).unwrap();
        let reloaded = load(dir.path()).unwrap();
        assert_eq!(lock, reloaded);
    }

    #[test]
    fn roundtrip_lock_file_with_config_entries() {
        let mut lock = sample_lock();
        lock.config_entries.insert(
            ".claude".to_string(),
            BTreeMap::from([(
                "mcp:context7".to_string(),
                ConfigEntryRecord {
                    source: "base".to_string(),
                },
            )]),
        );

        let dir = TempDir::new().unwrap();
        write(dir.path(), &lock).unwrap();
        let reloaded = load(dir.path()).unwrap();

        assert_eq!(lock, reloaded);
        assert_eq!(
            reloaded.config_entries[".claude"]["mcp:context7"].source,
            "base"
        );
    }

    #[test]
    fn write_emits_dependency_model_aliases_table_even_when_empty() {
        let lock = sample_lock();
        let dir = TempDir::new().unwrap();
        write(dir.path(), &lock).unwrap();

        let content = std::fs::read_to_string(dir.path().join("mars.lock")).unwrap();
        assert!(
            content.contains("dependency_model_aliases"),
            "serialized lock should include dependency_model_aliases authority table"
        );
    }

    #[test]
    fn deterministic_serialization() {
        let lock = sample_lock();
        let s1 = toml::to_string_pretty(&lock).unwrap();
        let s2 = toml::to_string_pretty(&lock).unwrap();
        assert_eq!(s1, s2);

        // V2: keys are "agent/coder" and "skill/review" — agent comes before skill alphabetically.
        let coder_pos = s1.find("agent/coder").unwrap();
        let review_pos = s1.find("skill/review").unwrap();
        assert!(
            coder_pos < review_pos,
            "agent/coder should appear before skill/review"
        );
    }

    #[test]
    fn write_sorts_dependency_model_aliases_keys() {
        let toml_str = r#"
version = 2

[dependency_model_aliases.zeta]
model = "openai/gpt-z"

[dependency_model_aliases.alpha]
model = "openai/gpt-a"
"#;
        let dir = TempDir::new().unwrap();
        std::fs::write(dir.path().join("mars.lock"), toml_str).unwrap();

        let lock = load(dir.path()).unwrap();
        write(dir.path(), &lock).unwrap();

        let written = std::fs::read_to_string(dir.path().join("mars.lock")).unwrap();
        let alpha = written
            .find("[dependency_model_aliases.alpha]")
            .expect("alpha alias should be serialized");
        let zeta = written
            .find("[dependency_model_aliases.zeta]")
            .expect("zeta alias should be serialized");
        assert!(alpha < zeta, "aliases should serialize in sorted key order");
    }

    #[test]
    fn empty_lock_file() {
        let lock = LockFile::empty();
        assert_eq!(lock.version, LOCK_VERSION);
        assert!(lock.dependencies.is_empty());
        assert!(lock.items.is_empty());
    }

    #[test]
    fn load_absent_returns_empty() {
        let dir = TempDir::new().unwrap();
        let lock = load(dir.path()).unwrap();
        assert_eq!(lock.version, LOCK_VERSION);
        assert!(lock.dependencies.is_empty());
        assert!(lock.items.is_empty());
    }

    #[test]
    fn write_and_reload() {
        let dir = TempDir::new().unwrap();
        let lock = sample_lock();
        write(dir.path(), &lock).unwrap();
        let reloaded = load(dir.path()).unwrap();
        assert_eq!(lock, reloaded);
    }

    #[test]
    fn dual_checksums_present() {
        let lock = sample_lock();
        let item = &lock.items["agent/coder"];
        assert_ne!(item.source_checksum, item.outputs[0].installed_checksum);
        assert!(item.source_checksum.starts_with("sha256:"));
        assert!(item.outputs[0].installed_checksum.starts_with("sha256:"));
    }

    #[test]
    fn path_source_in_lock() {
        let toml_str = r#"
version = 2

[dependencies.local]
path = "/home/dev/agents"

[items."agent/helper"]
source = "local"
kind = "agent"
source_checksum = "sha256:111"

[[items."agent/helper".outputs]]
target_root = ".mars"
dest_path = "agents/helper.md"
installed_checksum = "sha256:222"
"#;
        let dir = TempDir::new().unwrap();
        std::fs::write(dir.path().join("mars.lock"), toml_str).unwrap();
        let lock = load(dir.path()).unwrap();
        let source = &lock.dependencies["local"];
        assert!(source.url.is_none());
        assert_eq!(source.path.as_deref(), Some("/home/dev/agents"));
        assert!(source.commit.is_none());
    }

    #[test]
    fn item_kind_serializes_lowercase() {
        let item = LockedItemV2 {
            source: "base".into(),
            kind: ItemKind::Skill,
            version: None,
            source_checksum: "sha256:aaa".into(),
            outputs: vec![OutputRecord {
                target_root: ".mars".to_string(),
                dest_path: "skills/review".into(),
                installed_checksum: "sha256:bbb".into(),
            }],
        };
        let serialized = toml::to_string(&item).unwrap();
        assert!(serialized.contains("kind = \"skill\""));
    }

    #[test]
    fn item_id_display() {
        let id = ItemId {
            kind: ItemKind::Agent,
            name: "coder".into(),
        };
        assert_eq!(id.to_string(), "agent/coder");
    }

    #[test]
    fn item_kind_display() {
        assert_eq!(ItemKind::Agent.to_string(), "agent");
        assert_eq!(ItemKind::Skill.to_string(), "skill");
    }

    #[test]
    fn find_by_dest_path_returns_flat_view() {
        let lock = sample_lock();
        let found = lock
            .find_by_dest_path(&DestPath::from("agents/coder.md"))
            .unwrap();
        assert_eq!(found.source, "base");
        assert_eq!(found.kind, ItemKind::Agent);
        assert_eq!(found.source_checksum, "sha256:aaa");
        assert_eq!(found.installed_checksum, "sha256:bbb");
        assert_eq!(found.dest_path.as_str(), "agents/coder.md");
    }

    #[test]
    fn find_by_dest_path_missing_returns_none() {
        let lock = sample_lock();
        assert!(
            lock.find_by_dest_path(&DestPath::from("agents/missing.md"))
                .is_none()
        );
    }

    #[test]
    fn contains_dest_path_hit_and_miss() {
        let lock = sample_lock();
        assert!(lock.contains_dest_path(&DestPath::from("agents/coder.md")));
        assert!(!lock.contains_dest_path(&DestPath::from("agents/nobody.md")));
    }

    #[test]
    fn lock_index_find_by_dest_path_hit_and_miss() {
        let lock = sample_lock();
        let index = LockIndex::new(&lock);

        let found = index
            .find_by_dest_path(&DestPath::from("agents/coder.md"))
            .unwrap();
        assert_eq!(found.source, "base");
        assert_eq!(found.kind, ItemKind::Agent);
        assert_eq!(found.source_checksum, "sha256:aaa");
        assert_eq!(found.installed_checksum, "sha256:bbb");
        assert_eq!(found.dest_path.as_str(), "agents/coder.md");

        assert!(
            index
                .find_by_dest_path(&DestPath::from("agents/missing.md"))
                .is_none()
        );
    }

    #[test]
    fn lock_index_contains_dest_path_hit_and_miss() {
        let lock = sample_lock();
        let index = LockIndex::new(&lock);

        assert!(index.contains_dest_path(&DestPath::from("agents/coder.md")));
        assert!(!index.contains_dest_path(&DestPath::from("agents/nobody.md")));
    }

    #[test]
    fn lock_index_target_scoped_lookup_distinguishes_same_dest_path() {
        let mut lock = sample_lock();
        lock.items
            .get_mut("agent/coder")
            .unwrap()
            .outputs
            .push(OutputRecord {
                target_root: ".pi".to_string(),
                dest_path: "agents/coder.md".into(),
                installed_checksum: "sha256:pi".into(),
            });

        let index = LockIndex::new(&lock);
        let dest = DestPath::from("agents/coder.md");

        let mars = index
            .find_output(".mars", &dest)
            .expect("expected canonical .mars output");
        let pi = index
            .find_output(".pi", &dest)
            .expect("expected .pi output");

        assert_eq!(mars.installed_checksum, "sha256:bbb");
        assert_eq!(pi.installed_checksum, "sha256:pi");
        assert!(index.contains_output(".mars", &dest));
        assert!(index.contains_output(".pi", &dest));
        assert!(!index.contains_output(".cursor", &dest));
    }

    #[test]
    fn output_dest_paths_for_target_filters_by_target_root() {
        let mut lock = sample_lock();
        lock.items
            .get_mut("agent/coder")
            .unwrap()
            .outputs
            .push(OutputRecord {
                target_root: ".cursor".to_string(),
                dest_path: "agents/coder.md".into(),
                installed_checksum: "sha256:cursor".into(),
            });

        let mars_paths = lock.output_dest_paths_for_target(".mars");
        assert!(mars_paths.contains("agents/coder.md"));
        assert!(mars_paths.contains("skills/review"));

        let cursor_paths = lock.output_dest_paths_for_target(".cursor");
        assert_eq!(cursor_paths.len(), 1);
        assert!(cursor_paths.contains("agents/coder.md"));
        assert!(lock.output_dest_paths_for_target(".claude").is_empty());
    }

    #[test]
    fn contains_output_matches_target_root_and_dest_path() {
        let mut lock = sample_lock();
        assert!(lock.contains_output(".mars", "agents/coder.md"));
        assert!(!lock.contains_output(".cursor", "agents/coder.md"));

        lock.items
            .get_mut("agent/coder")
            .unwrap()
            .outputs
            .push(OutputRecord {
                target_root: ".cursor".to_string(),
                dest_path: "agents/coder.md".into(),
                installed_checksum: "sha256:cursor".into(),
            });
        assert!(lock.contains_output(".cursor", "agents/coder.md"));
        assert!(!lock.contains_output(".cursor", "agents/missing.md"));
    }

    #[test]
    fn apply_compiled_native_outputs_upserts_codex_native_by_canonical_owner() {
        let mut lock = sample_lock();
        apply_compiled_native_outputs(
            &mut lock,
            &[CompiledNativeOutput {
                owner_canonical_dest_path: "agents/coder.md".to_string(),
                target_root: ".codex".to_string(),
                dest_path: "agents/coder.toml".to_string(),
                installed_checksum: "sha256:codex".into(),
            }],
        );
        assert!(lock.contains_output(".codex", "agents/coder.toml"));
        assert!(lock.contains_output(".mars", "agents/coder.md"));
    }

    #[test]
    fn apply_compiled_native_outputs_upserts_when_frontmatter_name_differs_from_filename() {
        let mut lock = sample_lock();
        lock.items.insert(
            "agent/alias-name".to_string(),
            LockedItemV2 {
                source: "base".into(),
                kind: ItemKind::Agent,
                version: Some("v1.0.0".into()),
                source_checksum: "sha256:alias-src".into(),
                outputs: vec![OutputRecord {
                    target_root: ".mars".to_string(),
                    dest_path: "agents/on-disk-stem.md".into(),
                    installed_checksum: "sha256:alias-mars".into(),
                }],
            },
        );
        apply_compiled_native_outputs(
            &mut lock,
            &[CompiledNativeOutput {
                owner_canonical_dest_path: "agents/on-disk-stem.md".to_string(),
                target_root: ".claude".to_string(),
                dest_path: "agents/alias-name.md".to_string(),
                installed_checksum: "sha256:claude-native".into(),
            }],
        );
        assert!(lock.contains_output(".claude", "agents/alias-name.md"));
    }

    #[test]
    fn ownership_lock_for_native_emission_seeds_new_apply_outcomes() {
        let old_lock = LockFile::empty();
        let apply_outcomes = vec![ActionOutcome {
            item_id: ItemId {
                kind: ItemKind::Agent,
                name: ItemName::from("coder"),
            },
            action: ActionTaken::Installed,
            dest_path: "agents/coder.md".into(),
            source_name: "base".into(),
            source_checksum: Some("sha256:src".into()),
            installed_checksum: Some("sha256:mars".into()),
        }];
        let view = ownership_lock_for_native_emission(
            &old_lock,
            &apply_outcomes,
            &[crate::target_sync::TargetSyncOutcome {
                target: ".cursor".to_string(),
                items_synced: 1,
                items_removed: 0,
                errors: Vec::new(),
                synced_outputs: vec![crate::target_sync::TargetSyncedOutput {
                    dest_path: "agents/coder.md".to_string(),
                    installed_checksum: "sha256:cursor".into(),
                }],
                removed_dest_paths: Vec::new(),
            }],
        );
        assert!(view.contains_output(".mars", "agents/coder.md"));
        assert!(view.contains_output(".cursor", "agents/coder.md"));
        assert!(!old_lock.contains_output(".mars", "agents/coder.md"));
    }

    #[test]
    fn ownership_lock_after_target_sync_layers_synced_outputs() {
        let lock = sample_lock();
        let view = ownership_lock_after_target_sync(
            &lock,
            &[crate::target_sync::TargetSyncOutcome {
                target: ".cursor".to_string(),
                items_synced: 1,
                items_removed: 0,
                errors: Vec::new(),
                synced_outputs: vec![crate::target_sync::TargetSyncedOutput {
                    dest_path: "agents/coder.md".to_string(),
                    installed_checksum: "sha256:cursor".into(),
                }],
                removed_dest_paths: Vec::new(),
            }],
        );
        assert!(view.contains_output(".cursor", "agents/coder.md"));
        assert!(!lock.contains_output(".cursor", "agents/coder.md"));
    }

    #[test]
    fn apply_target_sync_outputs_upserts_and_removes_target_records() {
        let mut lock = sample_lock();
        apply_target_sync_outputs(
            &mut lock,
            &[crate::target_sync::TargetSyncOutcome {
                target: ".cursor".to_string(),
                items_synced: 1,
                items_removed: 0,
                errors: Vec::new(),
                synced_outputs: vec![crate::target_sync::TargetSyncedOutput {
                    dest_path: "agents/coder.md".to_string(),
                    installed_checksum: "sha256:cursor".into(),
                }],
                removed_dest_paths: Vec::new(),
            }],
        );
        assert!(lock.contains_output(".cursor", "agents/coder.md"));

        apply_target_sync_outputs(
            &mut lock,
            &[crate::target_sync::TargetSyncOutcome {
                target: ".cursor".to_string(),
                items_synced: 0,
                items_removed: 1,
                errors: Vec::new(),
                synced_outputs: Vec::new(),
                removed_dest_paths: vec!["agents/coder.md".to_string()],
            }],
        );
        assert!(!lock.contains_output(".cursor", "agents/coder.md"));
        assert!(lock.contains_output(".mars", "agents/coder.md"));
    }

    #[test]
    fn canonical_flat_items_excludes_linked_target_outputs() {
        let mut lock = sample_lock();
        lock.items
            .get_mut("agent/coder")
            .unwrap()
            .outputs
            .push(OutputRecord {
                target_root: ".cursor".to_string(),
                dest_path: "agents/coder.md".into(),
                installed_checksum: "sha256:cursor".into(),
            });

        let canonical = lock.canonical_flat_items();
        assert_eq!(canonical.len(), 2);
        assert!(
            canonical
                .iter()
                .any(|(dp, _)| dp.as_str() == "agents/coder.md")
        );
        assert!(
            canonical
                .iter()
                .all(|(_, item)| { lock.contains_output(".mars", item.dest_path.as_str()) })
        );

        let cursor = lock.flat_items_for_target(".cursor");
        assert_eq!(cursor.len(), 1);
        assert_eq!(cursor[0].0.as_str(), "agents/coder.md");
    }

    #[test]
    fn flat_items_yields_all_outputs() {
        let lock = sample_lock();
        let flat = lock.flat_items();
        assert_eq!(flat.len(), 2);
        let paths: Vec<&str> = flat.iter().map(|(dp, _)| dp.as_str()).collect();
        assert!(paths.contains(&"agents/coder.md"));
        assert!(paths.contains(&"skills/review"));
    }

    #[test]
    fn v1_lock_no_spurious_reinstall() {
        // V1 lock loaded → promoted to v2 → find_by_dest_path works for diff.
        let v1_toml = r#"
version = 1

[dependencies.base]
url = "https://github.com/org/base.git"

[items."agents/coder.md"]
source = "base"
kind = "agent"
source_checksum = "sha256:src"
installed_checksum = "sha256:inst"
dest_path = "agents/coder.md"
"#;
        let dir = TempDir::new().unwrap();
        std::fs::write(dir.path().join("mars.lock"), v1_toml).unwrap();
        let lock = load(dir.path()).unwrap();

        // Promoted items should still be findable by dest_path.
        let found = lock.find_by_dest_path(&DestPath::from("agents/coder.md"));
        assert!(found.is_some());
        let item = found.unwrap();
        assert_eq!(item.source_checksum, "sha256:src");
        assert_eq!(item.installed_checksum, "sha256:inst");
    }

    #[test]
    fn build_uses_graph_provenance_for_sources() {
        let git_name: SourceName = "base".into();
        let path_name: SourceName = "local".into();
        let git_url: SourceUrl = "https://example.com/new.git".into();
        let path_canonical = PathBuf::from("/tmp/mars-agents-local-source");

        let mut nodes = IndexMap::new();
        nodes.insert(
            git_name.clone(),
            ResolvedNode {
                source_name: git_name.clone(),
                source_id: SourceId::git_with_subpath(
                    git_url.clone(),
                    Some(crate::types::SourceSubpath::new("plugins/base").unwrap()),
                ),
                rooted_ref: crate::resolve::RootedSourceRef {
                    checkout_root: PathBuf::from("/tmp/cache/base"),
                    package_root: PathBuf::from("/tmp/cache/base/plugins/base"),
                },
                resolved_ref: ResolvedRef {
                    source_name: git_name.clone(),
                    version: Some(semver::Version::new(1, 2, 3)),
                    version_tag: Some("v1.2.3".into()),
                    commit: Some("abc123".into()),
                    tree_path: PathBuf::from("/tmp/cache/base"),
                },
                latest_version: None,
                manifest: None,
                deps: vec![],
            },
        );
        nodes.insert(
            path_name.clone(),
            ResolvedNode {
                source_name: path_name.clone(),
                source_id: SourceId::Path {
                    canonical: path_canonical.clone(),
                    subpath: Some(crate::types::SourceSubpath::new("plugins/local").unwrap()),
                },
                rooted_ref: crate::resolve::RootedSourceRef {
                    checkout_root: PathBuf::from("/tmp/cache/local"),
                    package_root: PathBuf::from("/tmp/cache/local/plugins/local"),
                },
                resolved_ref: ResolvedRef {
                    source_name: path_name.clone(),
                    version: None,
                    version_tag: None,
                    commit: None,
                    tree_path: PathBuf::from("/tmp/cache/local"),
                },
                latest_version: None,
                manifest: None,
                deps: vec![],
            },
        );

        let graph = ResolvedGraph {
            nodes,
            order: vec![git_name.clone(), path_name.clone()],
            filters: HashMap::new(),
            version_constraints: std::collections::HashMap::new(),
        };
        let applied = ApplyResult { outcomes: vec![] };

        let mut old_sources = IndexMap::new();
        old_sources.insert(
            git_name.clone(),
            LockedSource {
                url: Some("https://example.com/old.git".into()),
                path: None,
                subpath: None,
                version: Some("v0.0.1".into()),
                commit: Some("deadbeef".into()),
                tree_hash: None,
            },
        );
        let old_lock = LockFile {
            version: LOCK_VERSION,
            dependencies: old_sources,
            items: IndexMap::new(),
            config_entries: std::collections::BTreeMap::new(),
            dependency_model_aliases: IndexMap::new(),
        };

        let new_lock = build(
            &graph,
            &applied,
            &old_lock,
            std::collections::BTreeMap::new(),
        )
        .unwrap();

        let base = &new_lock.dependencies["base"];
        assert_eq!(base.url.as_ref(), Some(&git_url));
        assert_eq!(
            base.subpath
                .as_ref()
                .map(crate::types::SourceSubpath::as_str),
            Some("plugins/base")
        );
        assert_eq!(base.version.as_deref(), Some("v1.2.3"));
        assert_eq!(base.commit.as_deref(), Some("abc123"));

        let local = &new_lock.dependencies["local"];
        assert!(local.url.is_none());
        assert_eq!(
            local
                .subpath
                .as_ref()
                .map(crate::types::SourceSubpath::as_str),
            Some("plugins/local")
        );
        assert_eq!(
            local.path.as_deref(),
            Some(path_canonical.to_string_lossy().as_ref())
        );
    }

    #[test]
    fn build_persists_ref_selector_in_locked_source_version() {
        let source_name: SourceName = "base".into();
        let mut nodes = IndexMap::new();
        nodes.insert(
            source_name.clone(),
            ResolvedNode {
                source_name: source_name.clone(),
                source_id: SourceId::git("https://example.com/base.git".into()),
                rooted_ref: crate::resolve::RootedSourceRef {
                    checkout_root: PathBuf::from("/tmp/cache/base"),
                    package_root: PathBuf::from("/tmp/cache/base"),
                },
                resolved_ref: ResolvedRef {
                    source_name: source_name.clone(),
                    version: None,
                    version_tag: Some("main".into()),
                    commit: Some("abc123".into()),
                    tree_path: PathBuf::from("/tmp/cache/base"),
                },
                latest_version: None,
                manifest: None,
                deps: vec![],
            },
        );

        let graph = ResolvedGraph {
            nodes,
            order: vec![source_name.clone()],
            filters: HashMap::new(),
            version_constraints: std::collections::HashMap::new(),
        };
        let applied = ApplyResult { outcomes: vec![] };
        let new_lock = build(
            &graph,
            &applied,
            &LockFile::empty(),
            std::collections::BTreeMap::new(),
        )
        .unwrap();

        let source = &new_lock.dependencies["base"];
        assert_eq!(source.version.as_deref(), Some("main"));
        assert_eq!(source.commit.as_deref(), Some("abc123"));
    }

    #[test]
    fn build_keeps_self_items_from_old_lock_on_skipped_action() {
        let graph = ResolvedGraph {
            nodes: IndexMap::new(),
            order: Vec::new(),
            filters: HashMap::new(),
            version_constraints: std::collections::HashMap::new(),
        };
        let local_source_name: SourceName = SourceOrigin::LocalPackage.to_string().into();
        let old_lock = LockFile {
            version: LOCK_VERSION,
            dependencies: IndexMap::from([(
                local_source_name.clone(),
                LockedSource {
                    url: None,
                    path: Some(".".into()),
                    subpath: None,
                    version: None,
                    commit: None,
                    tree_hash: None,
                },
            )]),
            items: IndexMap::from([(
                "skill/local-skill".to_string(),
                LockedItemV2 {
                    source: local_source_name.clone(),
                    kind: ItemKind::Skill,
                    version: None,
                    source_checksum: "sha256:self".into(),
                    outputs: vec![OutputRecord {
                        target_root: ".mars".to_string(),
                        dest_path: DestPath::from("skills/local-skill"),
                        installed_checksum: "sha256:self".into(),
                    }],
                },
            )]),
            config_entries: std::collections::BTreeMap::new(),
            dependency_model_aliases: IndexMap::new(),
        };
        let applied = ApplyResult {
            outcomes: vec![ActionOutcome {
                item_id: ItemId {
                    kind: ItemKind::Skill,
                    name: "local-skill".into(),
                },
                action: ActionTaken::Skipped,
                dest_path: "skills/local-skill".into(),
                source_name: local_source_name.clone(),
                source_checksum: None,
                installed_checksum: None,
            }],
        };

        let new_lock = build(
            &graph,
            &applied,
            &old_lock,
            std::collections::BTreeMap::new(),
        )
        .unwrap();

        assert!(
            new_lock
                .dependencies
                .contains_key(local_source_name.as_str())
        );
        let item = &new_lock.items["skill/local-skill"];
        assert_eq!(item.source, local_source_name);
        assert_eq!(item.kind, ItemKind::Skill);
        assert_eq!(item.source_checksum, "sha256:self");
        assert_eq!(item.outputs[0].installed_checksum, "sha256:self");
    }

    #[test]
    fn build_rejects_missing_installed_checksum_for_write_actions() {
        let graph = ResolvedGraph {
            nodes: IndexMap::new(),
            order: Vec::new(),
            filters: HashMap::new(),
            version_constraints: std::collections::HashMap::new(),
        };
        let old_lock = LockFile::empty();
        let applied = ApplyResult {
            outcomes: vec![ActionOutcome {
                item_id: ItemId {
                    kind: ItemKind::Agent,
                    name: "coder".into(),
                },
                action: ActionTaken::Installed,
                dest_path: "agents/coder.md".into(),
                source_name: "base".into(),
                source_checksum: Some("sha256:source".into()),
                installed_checksum: None,
            }],
        };

        let err = build(
            &graph,
            &applied,
            &old_lock,
            std::collections::BTreeMap::new(),
        )
        .unwrap_err();
        let msg = err.to_string();
        assert!(msg.contains("missing checksum for write-producing action"));
        assert!(msg.contains("agents/coder.md"));
    }

    #[test]
    fn promote_v1_collision_both_survive() {
        // Two v1 items with different full dest_paths but the same basename
        // (e.g. "hook" from two different subdirectories) must both survive promotion.
        // Without collision handling the second would silently overwrite the first.
        let mut v1_items: IndexMap<DestPath, LockedItem> = IndexMap::new();

        v1_items.insert(
            DestPath::from("hooks/pre-commit/hook.sh"),
            LockedItem {
                source: "base".into(),
                kind: ItemKind::Hook,
                version: None,
                source_checksum: "sha256:aaa".into(),
                installed_checksum: "sha256:bbb".into(),
                dest_path: DestPath::from("hooks/pre-commit/hook.sh"),
            },
        );
        v1_items.insert(
            DestPath::from("hooks/pre-push/hook.sh"),
            LockedItem {
                source: "base".into(),
                kind: ItemKind::Hook,
                version: None,
                source_checksum: "sha256:ccc".into(),
                installed_checksum: "sha256:ddd".into(),
                dest_path: DestPath::from("hooks/pre-push/hook.sh"),
            },
        );

        let (promoted, diagnostics) = promote_v1_items(v1_items);

        // Both entries must be present — neither was silently dropped.
        assert_eq!(promoted.len(), 2, "both items should survive promotion");
        assert_eq!(diagnostics.len(), 1);

        // The first item gets the canonical key; the second gets the fallback dest_path key.
        let checksums: std::collections::HashSet<String> = promoted
            .values()
            .map(|v| v.source_checksum.as_ref().to_string())
            .collect();
        assert!(
            checksums.contains("sha256:aaa"),
            "pre-commit hook must be present"
        );
        assert!(
            checksums.contains("sha256:ccc"),
            "pre-push hook must be present"
        );
    }

    #[test]
    fn load_with_diagnostics_reports_v1_promotion_collision() {
        let v1_toml = r#"
version = 1

[dependencies.base]
url = "https://github.com/org/base.git"

[items."hooks/pre-commit/hook.sh"]
source = "base"
kind = "hook"
source_checksum = "sha256:aaa"
installed_checksum = "sha256:bbb"
dest_path = "hooks/pre-commit/hook.sh"

[items."hooks/pre-push/hook.sh"]
source = "base"
kind = "hook"
source_checksum = "sha256:ccc"
installed_checksum = "sha256:ddd"
dest_path = "hooks/pre-push/hook.sh"
"#;
        let dir = TempDir::new().unwrap();
        std::fs::write(dir.path().join("mars.lock"), v1_toml).unwrap();

        let (lock, diagnostics) = load_with_diagnostics(dir.path()).unwrap();

        assert_eq!(lock.version, LOCK_VERSION);
        assert_eq!(lock.items.len(), 2);
        assert_eq!(diagnostics.len(), 1);
        let diagnostic = &diagnostics[0];
        assert_eq!(
            diagnostic.level,
            crate::diagnostic::DiagnosticLevel::Warning
        );
        assert_eq!(diagnostic.code, "lock-promotion-collision");
        assert!(diagnostic.message.contains("key collision"));
        assert!(diagnostic.message.contains("hook/hooks/pre-push/hook.sh"));
    }

    #[test]
    fn build_rejects_empty_checksums_from_carried_items() {
        let graph = ResolvedGraph {
            nodes: IndexMap::new(),
            order: Vec::new(),
            filters: HashMap::new(),
            version_constraints: std::collections::HashMap::new(),
        };
        let old_lock = LockFile {
            version: LOCK_VERSION,
            dependencies: IndexMap::new(),
            items: IndexMap::from([(
                "agent/coder".to_string(),
                LockedItemV2 {
                    source: "base".into(),
                    kind: ItemKind::Agent,
                    version: None,
                    source_checksum: "".into(),
                    outputs: vec![OutputRecord {
                        target_root: ".mars".to_string(),
                        dest_path: DestPath::from("agents/coder.md"),
                        installed_checksum: "sha256:installed".into(),
                    }],
                },
            )]),
            config_entries: std::collections::BTreeMap::new(),
            dependency_model_aliases: IndexMap::new(),
        };
        let applied = ApplyResult {
            outcomes: vec![ActionOutcome {
                item_id: ItemId {
                    kind: ItemKind::Agent,
                    name: "coder".into(),
                },
                action: ActionTaken::Skipped,
                dest_path: "agents/coder.md".into(),
                source_name: "base".into(),
                source_checksum: None,
                installed_checksum: None,
            }],
        };

        let err = build(
            &graph,
            &applied,
            &old_lock,
            std::collections::BTreeMap::new(),
        )
        .unwrap_err();
        let msg = err.to_string();
        assert!(msg.contains("empty source_checksum"));
    }
}