@amalgm/shell 0.1.164-preview.36072132286 → 0.1.164-preview.36809057014

package/dist/git-literal-replay.js

@@ -0,0 +1,268 @@
+/** Reconstruct accepted index and literal worktree separately. No checkout,
+ * filter, text conversion or user diff program participates in replay. */
+import { chmodSync, closeSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, readlinkSync, renameSync, rmSync, rmdirSync, symlinkSync, unlinkSync, writeFileSync, } from "node:fs";
+import { randomUUID } from "node:crypto";
+import { dirname, join, resolve } from "node:path";
+import { ensurePrivateDir } from "./filesystem.js";
+import { gitText, runGit } from "./git-command.js";
+import { withinGitBoundary } from "./git-index-entries.js";
+import { judgeNativeFile, observeNativeGitFile } from "./git-native-file.js";
+import { prepareLiteralCheckpoint } from "./git-checkpoint-preparation.js";
+const durableGit = (repository, args, input) => runGit(repository, ["-c", "core.fsync=all", "-c", "core.fsyncMethod=fsync", ...args], { input, purpose: "apply" });
+function optionalIndex(path) {
+    const observed = observeNativeGitFile(path);
+    judgeNativeFile(observed.witness);
+    return observed.bytes;
+}
+/** The index lock is held across the whole reveal, so Git itself refuses any
+ * concurrent index writer while working ground is replaced. */
+async function installIndex(path, bytes, expected, reveal) {
+    const lock = `${path}.lock`;
+    const descriptor = openSync(lock, "wx", 0o600);
+    let installed = false, open = true;
+    try {
+        const current = optionalIndex(path);
+        if (expected === null ? current !== null : current === null || !expected.equals(current)) {
+            throw new Error("repository index changed before its write lock was acquired");
+        }
+        writeFileSync(descriptor, bytes);
+        fsyncSync(descriptor);
+        await reveal();
+        closeSync(descriptor);
+        open = false;
+        renameSync(lock, path);
+        installed = true;
+        if (process.platform !== "win32") {
+            const directory = openSync(dirname(path), "r");
+            try {
+                fsyncSync(directory);
+            }
+            finally {
+                closeSync(directory);
+            }
+        }
+    }
+    finally {
+        if (!installed) {
+            if (open)
+                closeSync(descriptor);
+            rmSync(lock, { force: true });
+        }
+    }
+}
+function protectedGround(repository, declared) {
+    const boundaries = new Set(declared);
+    const visit = (directory, prefix) => {
+        for (const child of readdirSync(directory, { withFileTypes: true })) {
+            if ([".git", ".amalgm"].includes(child.name.toLowerCase()) || !child.isDirectory())
+                continue;
+            const path = prefix ? `${prefix}/${child.name}` : child.name;
+            if (boundaries.has(path))
+                continue;
+            const absolute = join(directory, child.name);
+            if (existsSync(join(absolute, ".git")))
+                boundaries.add(path);
+            else
+                visit(absolute, path);
+        }
+    };
+    visit(repository, "");
+    return [...boundaries];
+}
+export class RepositoryGroundObstructed extends Error {
+    paths;
+    constructor(paths) {
+        super(`repository ground obstructs the accepted result: ${paths.join(", ")}`);
+        this.paths = paths;
+    }
+}
+const withParents = (paths, into) => {
+    for (const path of paths) {
+        for (let parent = dirname(path); parent !== "."; parent = dirname(parent))
+            into.add(parent);
+    }
+    return into;
+};
+/** Removal is sharing's decision, never an occupant's: only members the
+ * shared identity held and the accepted identity drops are removed. A
+ * remainder in a slot the result needs, a dropped directory still holding
+ * kept ground, or anything neither identity nor the remainder accounts for
+ * obstructs before any effect, naming its paths. */
+export function planWorkingReveal(repository, target, shared, remainder) {
+    const boundaries = target.filter(entry => entry.type === "repo.git").map(entry => entry.path);
+    const leaves = new Set(target.filter(entry => entry.type !== "folder" && entry.type !== "repo.git").map(entry => entry.path));
+    const directories = withParents([...leaves, ...boundaries], new Set(target.filter(entry => entry.type === "folder").map(entry => entry.path)));
+    const held = new Set(shared.map(entry => entry.path));
+    withParents(shared.map(entry => entry.path), held);
+    const obstructed = [], removeLeaves = [], removeDirectories = [];
+    /** True when the subtree keeps anything. */
+    const visit = (absolute, prefix) => {
+        let keeps = false;
+        for (const child of readdirSync(absolute, { withFileTypes: true })) {
+            if ([".git", ".amalgm"].includes(child.name.toLowerCase()))
+                continue;
+            const path = prefix ? `${prefix}/${child.name}` : child.name;
+            if (withinGitBoundary(path, boundaries)) {
+                keeps = true;
+                continue;
+            }
+            const kept = remainder.has(path);
+            if (kept && (leaves.has(path) || directories.has(path))) {
+                obstructed.push(path);
+                keeps = true;
+                continue;
+            }
+            if (child.isDirectory()) {
+                const inner = visit(join(absolute, child.name), path);
+                if (kept || directories.has(path)) {
+                    keeps = true;
+                    continue;
+                }
+                if (inner || !held.has(path)) {
+                    obstructed.push(path);
+                    keeps = true;
+                    continue;
+                }
+                removeDirectories.push(path);
+            }
+            else if (kept)
+                keeps = true;
+            else if (!held.has(path)) {
+                obstructed.push(path);
+                keeps = true;
+            }
+            else if (leaves.has(path))
+                keeps = true;
+            else
+                removeLeaves.push(path);
+        }
+        return keeps;
+    };
+    visit(repository, "");
+    if (obstructed.length)
+        throw new RepositoryGroundObstructed(obstructed.sort());
+    return { leaves: removeLeaves, directories: removeDirectories };
+}
+const absentIsDone = (remove) => {
+    try {
+        remove();
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+};
+/** Final reveal already owns this repository. Owned ground removes every
+ * other ordinary member; working ground removes only its plan, and a
+ * non-empty directory or a leaf turned directory refuses rather than
+ * recursing. Never through a symlink, Git metadata or independent owner. */
+function preparePhysicalGround(repository, leaves, directories, boundaries, ground) {
+    const visit = (absolute, prefix) => {
+        for (const child of readdirSync(absolute, { withFileTypes: true })) {
+            if ([".git", ".amalgm"].includes(child.name.toLowerCase()))
+                continue;
+            const path = prefix ? `${prefix}/${child.name}` : child.name;
+            if (withinGitBoundary(path, boundaries))
+                continue;
+            const file = join(absolute, child.name);
+            if (child.isDirectory()) {
+                visit(file, path);
+                if (!directories.has(path))
+                    rmdirSync(file);
+            }
+            else if (!leaves.has(path))
+                rmSync(file);
+        }
+    };
+    if (ground.kind === "owned")
+        visit(repository, "");
+    else {
+        for (const path of ground.removals.leaves)
+            absentIsDone(() => unlinkSync(join(repository, path)));
+        for (const path of ground.removals.directories)
+            absentIsDone(() => rmdirSync(join(repository, path)));
+    }
+    for (const path of [...directories].sort((a, b) => a.split("/").length - b.split("/").length)) {
+        if (!withinGitBoundary(path, boundaries))
+            mkdirSync(join(repository, path), { recursive: true });
+    }
+}
+/** Leaves are finished in the repository's own control tree: owned, on the
+ * worktree's filesystem, and excluded from Detect and Checkpoint capture, so
+ * an interrupted write never leaves a name that could publish as user work. */
+const revealStage = (repository) => join(repository, ".amalgm", "reveal");
+function writeLiteralLeaf(repository, path, mode, bytes) {
+    const file = join(repository, path);
+    let current;
+    try {
+        current = lstatSync(file);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    // A published inode is never written: each leaf is finished under a
+    // private name and replaces the visible one by rename, so neither a
+    // hard-linked twin of the old leaf nor an alias of the new one can see a
+    // partial write.
+    const link = mode === "120000";
+    const executable = mode === "100755";
+    if (link ? current?.isSymbolicLink() && readlinkSync(file) === bytes.toString("utf8")
+        : current?.isFile() && Boolean(current.mode & 0o111) === executable && readFileSync(file).equals(bytes))
+        return;
+    const staged = join(revealStage(repository), randomUUID());
+    try {
+        if (link)
+            symlinkSync(bytes.toString("utf8"), staged);
+        else {
+            const fileMode = executable ? 0o755 : 0o644;
+            writeFileSync(staged, bytes, { mode: fileMode, flag: "wx" });
+            // The mode is set before publication: a published inode never changes.
+            chmodSync(staged, fileMode);
+        }
+        renameSync(staged, file);
+    }
+    finally {
+        rmSync(staged, { force: true });
+    }
+}
+export async function installLiteralCheckpoint(repository, checkpoint, identity, ground, installMetadata) {
+    const indexPath = resolve(repository, await gitText(repository, ["rev-parse", "--git-path", "index"], { purpose: "binding" }));
+    const beforeIndex = optionalIndex(indexPath);
+    const prepared = await prepareLiteralCheckpoint(repository, checkpoint, identity);
+    try {
+        const { view, index, finalIndex, physical, directories, boundaries } = prepared;
+        // Preparation can be expensive. Discover independent ground afterward,
+        // before any real objects, metadata or working files may be changed.
+        const unexpected = protectedGround(repository, boundaries).filter(path => !boundaries.includes(path));
+        if (unexpected.length)
+            throw new Error(`independent repository must settle before parent Apply: ${unexpected.join(", ")}`);
+        // Staged blobs produced by --cached patching belong in the real index's
+        // object database. Working-only objects remain private and disposable.
+        const newIndexObjects = [...new Set(index.filter(entry => entry.mode !== "160000"
+                && view.ownsObject(entry.objectId)).map(entry => entry.objectId))];
+        if (newIndexObjects.length) {
+            const pack = await view.pack(newIndexObjects);
+            await durableGit(repository, ["index-pack", "--stdin", "--fix-thin"], pack);
+        }
+        const required = [...new Set(finalIndex.filter(entry => entry.mode !== "160000").map(entry => entry.objectId))];
+        if (required.length) {
+            const objects = (await runGit(repository, ["cat-file", "--batch-check=%(objectname) %(objecttype)"], { input: Buffer.from(required.join("\n") + "\n"), purpose: "apply" })).toString("ascii").trim().split("\n");
+            if (objects.some((line, i) => line !== `${required[i]} blob`))
+                throw new Error("repository index object closure is incomplete");
+        }
+        await installIndex(indexPath, await view.indexBytes(finalIndex), beforeIndex, async () => {
+            await installMetadata();
+            preparePhysicalGround(repository, physical, directories, boundaries, ground);
+            // An interrupted reveal's leftovers are this reveal's own private work.
+            rmSync(revealStage(repository), { recursive: true, force: true });
+            ensurePrivateDir(revealStage(repository));
+            await prepared.readLeaves((entry, bytes) => writeLiteralLeaf(repository, entry.path, entry.mode, bytes));
+            rmSync(revealStage(repository), { recursive: true, force: true });
+        });
+    }
+    finally {
+        await prepared.close();
+    }
+}
+//# sourceMappingURL=git-literal-replay.js.map

package/dist/git-literal-replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-literal-replay.js","sourceRoot":"","sources":["../src/git-literal-replay.ts"],"names":[],"mappings":"AAAA;0EAC0E;AAC1E,OAAO,EACL,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EACpH,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,GACtE,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAgC,MAAM,iCAAiC,CAAC;AAEzG,MAAM,UAAU,GAAG,CAAC,UAAkB,EAAE,IAAuB,EAAE,KAAkB,EAAmB,EAAE,CACtG,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAErH,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC5C,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,QAAQ,CAAC,KAAK,CAAC;AACxB,CAAC;AAED;+DAC+D;AAC/D,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,KAAa,EAAE,QAAuB,EAAE,MAA2B;IAC3G,MAAM,IAAI,GAAG,GAAG,IAAI,OAAO,CAAC;IAC5B,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,SAAS,GAAG,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACzF,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACxD,MAAM,MAAM,EAAE,CAAC;QACf,SAAS,CAAC,UAAU,CAAC,CAAC;QAAC,IAAI,GAAG,KAAK,CAAC;QACpC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAAC,SAAS,GAAG,IAAI,CAAC;QACzC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC;gBAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;QACjE,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,IAAI;gBAAE,SAAS,CAAC,UAAU,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB,EAAE,QAA2B;IACtE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,CAAC,SAAiB,EAAE,MAAc,EAAQ,EAAE;QACxD,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAAE,SAAS;YAC7F,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC7D,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;;gBACxD,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC;AACzB,CAAC;AAkBD,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC9B;IAArB,YAAqB,KAAwB;QAC3C,KAAK,CAAC,oDAAoD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAD3D,UAAK,GAAL,KAAK,CAAmB;IAE7C,CAAC;CACF;AAED,MAAM,WAAW,GAAG,CAAC,KAAuB,EAAE,IAAiB,EAAe,EAAE;IAC9E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,IAAI,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF;;;;oDAIoD;AACpD,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAAE,MAAoC,EAAE,MAAoC,EAC9F,SAA8B;IAE9B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9H,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,UAAU,CAAC,EACxD,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,UAAU,GAAa,EAAE,EAAE,YAAY,GAAa,EAAE,EAAE,iBAAiB,GAAa,EAAE,CAAC;IAC/F,4CAA4C;IAC5C,MAAM,KAAK,GAAG,CAAC,QAAgB,EAAE,MAAc,EAAW,EAAE;QAC1D,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAAE,SAAS;YACrE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC7D,IAAI,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC;gBAAC,SAAS;YAAC,CAAC;YACpE,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC3G,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;gBACtD,IAAI,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAC,KAAK,GAAG,IAAI,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC9D,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAC,KAAK,GAAG,IAAI,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAChF,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;iBAAM,IAAI,IAAI;gBAAE,KAAK,GAAG,IAAI,CAAC;iBACzB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC;YAAC,CAAC;iBAC7D,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,KAAK,GAAG,IAAI,CAAC;;gBACnC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACtB,IAAI,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/E,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,MAAkB,EAAQ,EAAE;IAChD,IAAI,CAAC;QAAC,MAAM,EAAE,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;AAC1G,CAAC,CAAC;AAEF;;;4EAG4E;AAC5E,SAAS,qBAAqB,CAC5B,UAAkB,EAAE,MAA2B,EAAE,WAAgC,EAAE,UAA6B,EAChH,MAAoB;IAEpB,MAAM,KAAK,GAAG,CAAC,QAAgB,EAAE,MAAc,EAAQ,EAAE;QACvD,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAAE,SAAS;YACrE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC7D,IAAI,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC;gBAAE,SAAS;YAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAClB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9C,CAAC;iBAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;SAC9C,CAAC;QACJ,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM;YAAE,YAAY,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAClG,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW;YAAE,YAAY,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACxG,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9F,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnG,CAAC;AACH,CAAC;AAED;;+EAE+E;AAC/E,MAAM,WAAW,GAAG,CAAC,UAAkB,EAAU,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAE1F,SAAS,gBAAgB,CAAC,UAAkB,EAAE,IAAY,EAAE,IAAY,EAAE,KAAa;IACrF,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QAAC,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IACD,oEAAoE;IACpE,oEAAoE;IACpE,yEAAyE;IACzE,iBAAiB;IACjB,MAAM,IAAI,GAAG,IAAI,KAAK,QAAQ,CAAC;IAC/B,MAAM,UAAU,GAAG,IAAI,KAAK,QAAQ,CAAC;IACrC,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QACnF,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,UAAU,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO;IAClH,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,IAAI,IAAI;YAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;aACjD,CAAC;YACJ,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YAC5C,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,uEAAuE;YACvE,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9B,CAAC;QACD,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,UAAkB,EAAE,UAAmC,EAAE,QAAsC,EAC/F,MAAoB,EAAE,eAAoC;IAE1D,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC/H,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAClF,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;QAChF,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACtG,IAAI,UAAU,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3H,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;mBAC5E,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,eAAe,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC9C,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAChH,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,2CAA2C,CAAC,EACjG,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9G,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAClI,CAAC;QACD,MAAM,YAAY,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;YACvF,MAAM,eAAe,EAAE,CAAC;YACxB,qBAAqB,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAC7E,wEAAwE;YACxE,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,gBAAgB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;YAC1C,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACzG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACvC,CAAC"}

package/dist/git-native-file.d.ts

@@ -0,0 +1,42 @@
+/** What one read saw. `path` is the file, or its first absent ancestor, whose
+ * parent route resolved to `parent`; `file` is the object's real address. */
+export interface NativeFileWitness {
+    readonly kind: "native-file";
+    readonly path: string;
+    readonly parent: string;
+    readonly parentIdentity: string;
+    readonly file: string;
+    readonly version: string | null;
+    readonly bytes: Uint8Array | null;
+}
+export interface NativeGitFile {
+    readonly bytes: Buffer | null;
+    readonly version: string | null;
+    /** The physical key of the object actually opened and read; null when absent. */
+    readonly physical: string | null;
+    readonly witness: NativeFileWitness;
+}
+export interface NativeRead {
+    readonly bytes: Buffer;
+    readonly version: string;
+    /** The physical key of the object actually opened and read. */
+    readonly physical: string;
+}
+/** An absent file is an observation under a proven directory, never a missing
+ * repository. */
+export declare function observeNativeGitFile(path: string): NativeGitFile;
+export declare function judgeNativeFile(witness: NativeFileWitness): void;
+/** A directory as one read resolved it: its address, real path and identity. */
+export interface NativeDirectory {
+    readonly path: string;
+    readonly real: string;
+    readonly identity: string;
+}
+/** A directory gone since its binding was proven is a change. */
+export declare function observeNativeDirectory(path: string): NativeDirectory;
+/** The file `name` in an observed directory, read whole as it is now,
+ * whatever it held before; null when absent. Observation refuses a file that
+ * is not regular. */
+export declare function observeGitFileIn(directory: NativeDirectory, name: string): NativeRead | null;
+/** The same read at judgment, where any other kind of file is a change. */
+export declare function rereadGitFileIn(directory: NativeDirectory, name: string): NativeRead | null;

package/dist/git-native-file.js

@@ -0,0 +1,145 @@
+/** One native Git file read without a Git process: its bytes, or its proven
+ * absence, under a proven parent. The witness is plain data, so any thread
+ * reads the file again and judges it byte for byte. A current read takes
+ * whatever object the address holds now, for a judge of what bytes mean. */
+import { closeSync, constants, fstatSync, lstatSync, openSync, readFileSync, realpathSync } from "node:fs";
+import { basename, dirname, join } from "node:path";
+import { CaptureSourceChangedError } from "./content-cache-host.js";
+import { physicalKey, sourceSignature } from "./source-signature.js";
+const identity = (s) => [s.dev, s.ino, s.mode].join(":");
+const changed = () => { throw new CaptureSourceChangedError("repository native index binding or bytes changed"); };
+const irregular = (path) => { throw new Error(`Git index storage must be a regular file: ${path}`); };
+const absent = (error) => ["ENOENT", "ENOTDIR"].includes(error.code ?? "");
+const stat = (path) => {
+    try {
+        return lstatSync(path, { bigint: true });
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        throw error;
+    }
+};
+/** Retain the first absent component, not a newly chosen absence at closing.
+ * A present obstruction is refused without opening or reading its contents. */
+function observeSlot(path) {
+    const parentPath = dirname(path);
+    let parent;
+    try {
+        parent = realpathSync(parentPath);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT" || parentPath === path)
+            throw error;
+        const absent = observeSlot(parentPath);
+        if (absent.before !== null)
+            throw error;
+        return absent;
+    }
+    const file = join(parent, basename(path));
+    return { path, parent, parentIdentity: identity(lstatSync(parent, { bigint: true })), file, before: stat(file) };
+}
+function validateParent(slot) {
+    try {
+        if (realpathSync(dirname(slot.path)) !== slot.parent
+            || identity(lstatSync(slot.parent, { bigint: true })) !== slot.parentIdentity)
+            changed();
+    }
+    catch (error) {
+        if (absent(error))
+            changed();
+        throw error;
+    }
+}
+/** Nonblocking, no-follow: an object that vanished or became a link after
+ * its stat is a change or not regular, never an opened special file. */
+function open(file, notRegular) {
+    try {
+        return openSync(file, constants.O_RDONLY | constants.O_NONBLOCK | (constants.O_NOFOLLOW ?? 0));
+    }
+    catch (error) {
+        if (absent(error))
+            changed();
+        if (error.code === "ELOOP")
+            notRegular();
+        throw error;
+    }
+}
+/** The slot's object as it is now, read whole while it holds still, provided
+ * its parent still resolves as observed; any other kind of file is `notRegular`. */
+function readCurrent(slot, notRegular) {
+    validateParent(slot);
+    const current = stat(slot.file);
+    if (current === null) {
+        validateParent(slot);
+        return null;
+    }
+    if (!current.isFile())
+        notRegular();
+    const version = sourceSignature(current);
+    const same = (s) => s !== null && sourceSignature(s) === version;
+    const fd = open(slot.file, notRegular);
+    try {
+        if (!same(fstatSync(fd, { bigint: true })))
+            changed();
+        const bytes = readFileSync(fd);
+        const read = fstatSync(fd, { bigint: true });
+        if (!same(read) || BigInt(bytes.length) !== read.size || !same(stat(slot.file)))
+            changed();
+        validateParent(slot);
+        return { bytes, version, physical: physicalKey(read) };
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** The slot's bytes, provided it still holds the observed object. */
+function readSlot(slot) {
+    const read = readCurrent(slot, changed);
+    if ((read?.version ?? null) !== slot.version)
+        changed();
+    return read;
+}
+/** An absent file is an observation under a proven directory, never a missing
+ * repository. */
+export function observeNativeGitFile(path) {
+    const { before, ...slot } = observeSlot(path);
+    if (before !== null && !before.isFile())
+        irregular(path);
+    const observed = { ...slot, version: before === null ? null : sourceSignature(before) };
+    const read = readSlot(observed);
+    const bytes = read?.bytes ?? null;
+    return { bytes, version: observed.version, physical: read?.physical ?? null,
+        witness: Object.freeze({ kind: "native-file", ...observed, bytes }) };
+}
+export function judgeNativeFile(witness) {
+    const current = readSlot(witness)?.bytes ?? null;
+    if (witness.bytes === null ? current !== null : current === null || !current.equals(witness.bytes))
+        changed();
+}
+/** A directory gone since its binding was proven is a change. */
+export function observeNativeDirectory(path) {
+    try {
+        const real = realpathSync(path);
+        return Object.freeze({ path, real, identity: identity(lstatSync(real, { bigint: true })) });
+    }
+    catch (error) {
+        if (absent(error))
+            changed();
+        throw error;
+    }
+}
+const slotIn = (directory, name) => ({ path: join(directory.path, name),
+    parent: directory.real, parentIdentity: directory.identity, file: join(directory.real, name) });
+/** The file `name` in an observed directory, read whole as it is now,
+ * whatever it held before; null when absent. Observation refuses a file that
+ * is not regular. */
+export function observeGitFileIn(directory, name) {
+    const slot = slotIn(directory, name);
+    return readCurrent(slot, () => irregular(slot.path));
+}
+/** The same read at judgment, where any other kind of file is a change. */
+export function rereadGitFileIn(directory, name) {
+    return readCurrent(slotIn(directory, name), changed);
+}
+//# sourceMappingURL=git-native-file.js.map

package/dist/git-native-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-native-file.js","sourceRoot":"","sources":["../src/git-native-file.ts"],"names":[],"mappings":"AAAA;;;4EAG4E;AAC5E,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAoB,MAAM,SAAS,CAAC;AAC7H,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAsBrE,MAAM,QAAQ,GAAG,CAAC,CAAc,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9E,MAAM,OAAO,GAAG,GAAU,EAAE,GAAG,MAAM,IAAI,yBAAyB,CAAC,kDAAkD,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1H,MAAM,SAAS,GAAG,CAAC,IAAY,EAAS,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACrH,MAAM,MAAM,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACxH,MAAM,IAAI,GAAG,CAAC,IAAY,EAAsB,EAAE;IAChD,IAAI,CAAC;QAAC,OAAO,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IACjD,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACrG,CAAC,CAAC;AAIF;+EAC+E;AAC/E,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QAAC,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IAC1C,OAAO,KAAK,EAAE,CAAC;QACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI;YAAE,MAAM,KAAK,CAAC;QAC3F,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,MAAM,KAAK,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACnH,CAAC;AAED,SAAS,cAAc,CAAC,IAAmE;IACzF,IAAI,CAAC;QACH,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM;eAC/C,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,cAAc;YAAE,OAAO,EAAE,CAAC;IAC7F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;wEACwE;AACxE,SAAS,IAAI,CAAC,IAAY,EAAE,UAAuB;IACjD,IAAI,CAAC;QAAC,OAAO,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACvG,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7B,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,UAAU,EAAE,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AASD;oFACoF;AACpF,SAAS,WAAW,CAAC,IAA2D,EAC9E,UAAuB;IACvB,cAAc,CAAC,IAAI,CAAC,CAAC;IACrB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC5D,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;QAAE,UAAU,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,CAAqB,EAAW,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,eAAe,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC;IAC9F,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAC3F,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;IACzD,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AAED,qEAAqE;AACrE,SAAS,QAAQ,CAAC,IAA+C;IAC/D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;iBACiB;AACjB,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;IACxF,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC;IAClC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,IAAI,IAAI;QACzE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAA0B;IACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC;IACjD,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;AAChH,CAAC;AASD,iEAAiE;AACjE,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AAChE,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,SAA0B,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;IAC9F,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;AAElG;;qBAEqB;AACrB,MAAM,UAAU,gBAAgB,CAAC,SAA0B,EAAE,IAAY;IACvE,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrC,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAAC,SAA0B,EAAE,IAAY;IACtE,OAAO,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC"}

package/dist/git-native-index.d.ts

@@ -0,0 +1,21 @@
+/** The capture's one native index observation, from which indexed and
+ * untracked inventory are both drawn and by whose witness both close
+ * (git-index-witness.ts). */
+import type { NativeIndexBinding } from "./git-binding.js";
+import { type GitIndexEntry } from "./git-index-entries.js";
+import { type GitIndexWitness } from "./git-index-witness.js";
+import { type SourceProof } from "./source-proof.js";
+export declare class NativeIndexSnapshot {
+    #private;
+    readonly witness: GitIndexWitness;
+    readonly proof: SourceProof;
+    /** Physical keys of the index and shared base read. */
+    readonly physical: readonly string[];
+    private constructor();
+    static observe(repository: string, binding: NativeIndexBinding): Promise<NativeIndexSnapshot>;
+    /** The stage entries, parsed once. Callers share them and must not mutate them. */
+    entries(): Promise<readonly GitIndexEntry[]>;
+    /** Git's untracked names under a scope, over these index bytes and the
+     * current worktree namespace. Raw: its caller owns their meaning. */
+    untracked(paths: readonly string[] | null, closing: boolean): Promise<Buffer>;
+}

package/dist/git-native-index.js

@@ -0,0 +1,44 @@
+import { parseGitIndex } from "./git-index-entries.js";
+import { observeGitIndex } from "./git-index-witness.js";
+import { PrivateNativeIndex } from "./git-private-index.js";
+import { witnessProof } from "./source-proof.js";
+import { finishStepsInTurns } from "./turns.js";
+export class NativeIndexSnapshot {
+    #repository;
+    #format;
+    #listing;
+    #files;
+    #entries = null;
+    witness;
+    proof;
+    /** Physical keys of the index and shared base read. */
+    physical;
+    constructor(repository, format, observation) {
+        this.#repository = repository;
+        this.#format = format;
+        this.#listing = observation.listing;
+        this.#files = observation.files;
+        this.witness = observation.witness;
+        this.proof = witnessProof([observation.witness]);
+        this.physical = Object.freeze([...observation.physical]);
+    }
+    static async observe(repository, binding) {
+        return new NativeIndexSnapshot(repository, binding.format, await finishStepsInTurns(observeGitIndex(binding)));
+    }
+    /** The stage entries, parsed once. Callers share them and must not mutate them. */
+    entries() {
+        return this.#entries ??= parseGitIndex(this.#listing).then(entries => Object.freeze(entries));
+    }
+    /** Git's untracked names under a scope, over these index bytes and the
+     * current worktree namespace. Raw: its caller owns their meaning. */
+    async untracked(paths, closing) {
+        const view = await PrivateNativeIndex.create(this.#format, this.#files, closing);
+        try {
+            return await view.untracked(this.#repository, paths);
+        }
+        finally {
+            await view.close();
+        }
+    }
+}
+//# sourceMappingURL=git-native-index.js.map

package/dist/git-native-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-native-index.js","sourceRoot":"","sources":["../src/git-native-index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAsB,MAAM,wBAAwB,CAAC;AAE3E,OAAO,EAAE,eAAe,EAAkD,MAAM,wBAAwB,CAAC;AACzG,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAoB,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,OAAO,mBAAmB;IACrB,WAAW,CAAS;IACpB,OAAO,CAAkB;IACzB,QAAQ,CAAS;IACjB,MAAM,CAA8B;IAC7C,QAAQ,GAA6C,IAAI,CAAC;IACjD,OAAO,CAAkB;IACzB,KAAK,CAAc;IAC5B,uDAAuD;IAC9C,QAAQ,CAAoB;IAErC,YAAoB,UAAkB,EAAE,MAAuB,EAAE,WAAgC;QAC/F,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAkB,EAAE,OAA2B;QAClE,OAAO,IAAI,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,kBAAkB,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjH,CAAC;IAED,mFAAmF;IACnF,OAAO;QACL,OAAO,IAAI,CAAC,QAAQ,KAAK,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAChG,CAAC;IAED;yEACqE;IACrE,KAAK,CAAC,SAAS,CAAC,KAA+B,EAAE,OAAgB;QAC/D,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjF,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IAC/F,CAAC;CACF"}

package/dist/git-operation-host.d.ts

@@ -0,0 +1,48 @@
+import type { RepoMergeOperation } from '@amalgm/live';
+export declare const UNSUPPORTED_GIT_OPERATIONS: readonly [readonly ["rebase-merge", "rebase"], readonly ["rebase-apply", "rebase"], readonly ["CHERRY_PICK_HEAD", "cherry-pick"], readonly ["REVERT_HEAD", "revert"], readonly ["sequencer", "cherry-pick or revert sequence"], readonly ["MERGE_AUTOSTASH", "merge with an autostash"]];
+/** An Amalgm reveal rewrites a repository in place over several Git
+ * invocations. Like MERGE_HEAD, this file in the Git directory says the
+ * repository is mid-operation: capture refuses it (so Detect never records a
+ * torn moment as truth, and retries once it settles), while the reveal that
+ * owns it resumes from whatever state an interruption left behind. */
+export declare const REVEAL_MARKER = "amalgm-reveal";
+export declare function unsupportedGitOperation(gitDirectory: string): string | null;
+export declare class UnsupportedGitOperationError extends Error {
+    readonly operation: string;
+    readonly code = "UNSUPPORTED_GIT_OPERATION";
+    constructor(operation: string);
+}
+/** The unfinished merge the Checkpoint carries, or null. */
+export declare function mergeOperation(directory: string): RepoMergeOperation | null;
+/** The marker that makes this moment unrecordable: an operation the
+ * Checkpoint cannot carry throws; another owner's reveal is named. Git's
+ * locks are not such markers. They exclude Git's writers, never its readers:
+ * the committed index stays whole while a lock exists, a rename that lands
+ * during a capture fails its witnesses, and a lock a dead Git left behind
+ * says nothing at all. A live lock says only when to read: see
+ * `gitWriterLock`. */
+export declare function busyMarker(directory: string, ownReveal: boolean): string | null;
+/** A live Git writer's lock, and how long it still holds. */
+export interface GitWriterLock {
+    readonly name: string;
+    readonly settlesInMs: number;
+}
+/** The lock a live Git writer holds in this checkout's storage, or null. A
+ * rung reader waits for that lock's release ring, since a read taken while
+ * the writer works would only be invalidated by its commit. A stale lock
+ * never rings, so the wait also ends when the last live lock stops holding;
+ * an older lock holds nothing, and the witnesses judge whatever is read
+ * through it. A lock that cannot be read is no evidence of a writer: the
+ * capture meets whatever made it unreadable. */
+export declare function gitWriterLock(repository: string): GitWriterLock | null;
+/** One capture's continuation state: its merge, and no busy marker. */
+export interface GitOperationWitness {
+    readonly kind: 'git-operation';
+    readonly directory: string;
+    readonly ownReveal: boolean;
+    readonly operation: string;
+}
+export declare const gitOperationWitness: (directory: string, ownReveal: boolean, operation: RepoMergeOperation | null) => GitOperationWitness;
+/** A marker that appeared since capture changed the moment the capture
+ * describes; the next capture classifies it. */
+export declare function judgeGitOperation(witness: GitOperationWitness): void;