Module repository_migration 

Explicit repository-scope continuity for the local operator, never model tools.

Identity reporting and mapping digests inspect no memory. Built-in migration imports each verified path scope under its ORIGINAL key, then links membership to the repository key. Neither capture payloads nor archive identities are rewritten. Every import remains a separate <=24 MiB atomic operation; a batch and its final alias link are NOT a global transaction. Sources/config remain untouched, and no session/private-history discovery is implied.

Structs

ApplyReport

No global rollback is promised. Error reports intentionally omit raw service errors/bodies and retain acknowledged progress for safe reconciliation.

IdentityReport

Safe operator output. No note IDs, bodies, capture evidence or archive notes.

LinkManifest

Link preview is offline. Consent binds the exact mapping, destination, and selected original scope keys. It does not claim to snapshot live DB contents.

MigrationPlan

The combined consent binds imports plus the subsequent explicit alias plan.

RepositoryManifest

Offline built-in batch preview; each source preview carries its own original scope, digest, migration ID and frame bound. Empty verified scopes are included so new source data appearing between preview/apply invalidates the batch.

ScopeInfo

ScopeMember

Metadata only: a verified root and its canonical or original path-scope key.

UpgradeManifest

Digest-gated schema-marker conversion of the configured existing brain, NOT an import or alias grant. Offline preview hashes the complete quiescent file; the service validates its pinned host schema and exact expected pin at apply. Stop/checkpoint writers first. File locks are advisory; the small host-check to service-dispatch gap cannot protect against uncooperative external writers.

Functions

apply_external

apply_link

apply_migration

apply_upgrade

identity_report

Construct an identity report only from host-verified scopes. Callers must use repository discovery, not infer aliases from project-key prefixes or names. Sorting makes the mapping digest independent of worktree registration order. Include the canonical member even when it has no legacy data of its own.

preview_builtin

preview_builtin_in

preview_external

Plugin mapping is per source: exporter alias -> explicit verified original host scope. Native host exports must target their own source scope exactly.

preview_link

preview_migration

preview_upgrade

report

Report the immutable identity captured by the production binding. This never reads a brain, changes configuration, or reinterprets the current directory.

scope_info

Strict metadata projection: never forward arbitrary service output to stdout.

source_binding

Select an original scope from captured host evidence, including historical paths that no longer exist. Never reconstruct/recanonicalize a source root.

verified_projects