@amalgm/shell 0.1.164-preview.36072132286 → 0.1.164-preview.36809057014

package/dist/git-operation-host.js

@@ -0,0 +1,127 @@
+/** Git continuation state in a repository's own Git directory, read natively.
+ * Capture, Apply and seal eligibility share this one classification: what
+ * the portable Checkpoint carries (an unfinished merge), what it cannot
+ * reproduce, and an Amalgm reveal in progress. */
+import { existsSync, lstatSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { CaptureSourceChangedError } from './content-cache-host.js';
+import { gitCommonDirectory, gitStorageDirectory } from './git-binding.js';
+export const UNSUPPORTED_GIT_OPERATIONS = [
+    ['rebase-merge', 'rebase'], ['rebase-apply', 'rebase'],
+    ['CHERRY_PICK_HEAD', 'cherry-pick'], ['REVERT_HEAD', 'revert'],
+    ['sequencer', 'cherry-pick or revert sequence'], ['MERGE_AUTOSTASH', 'merge with an autostash'],
+];
+/** An Amalgm reveal rewrites a repository in place over several Git
+ * invocations. Like MERGE_HEAD, this file in the Git directory says the
+ * repository is mid-operation: capture refuses it (so Detect never records a
+ * torn moment as truth, and retries once it settles), while the reveal that
+ * owns it resumes from whatever state an interruption left behind. */
+export const REVEAL_MARKER = 'amalgm-reveal';
+export function unsupportedGitOperation(gitDirectory) {
+    return UNSUPPORTED_GIT_OPERATIONS.find(([marker]) => existsSync(join(gitDirectory, marker)))?.[1] ?? null;
+}
+export class UnsupportedGitOperationError extends Error {
+    operation;
+    code = 'UNSUPPORTED_GIT_OPERATION';
+    constructor(operation) {
+        super(`Live cannot reproduce an unfinished ${operation}. Continue or abort that Git operation before syncing this checkout.`);
+        this.operation = operation;
+    }
+}
+function optionalGitFile(directory, name) {
+    try {
+        return readFileSync(join(directory, name));
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return Buffer.alloc(0);
+        throw error;
+    }
+}
+/** The unfinished merge the Checkpoint carries, or null. */
+export function mergeOperation(directory) {
+    const heads = optionalGitFile(directory, 'MERGE_HEAD').toString('utf8')
+        .split(/\r?\n/).filter(Boolean);
+    if (heads.length === 0)
+        return null;
+    if (heads.some((head) => !/^[0-9a-f]{40}([0-9a-f]{24})?$/.test(head))) {
+        throw new Error('repository has an invalid MERGE_HEAD');
+    }
+    return {
+        kind: 'merge',
+        heads,
+        message: optionalGitFile(directory, 'MERGE_MSG'),
+        mode: optionalGitFile(directory, 'MERGE_MODE'),
+    };
+}
+/** The marker that makes this moment unrecordable: an operation the
+ * Checkpoint cannot carry throws; another owner's reveal is named. Git's
+ * locks are not such markers. They exclude Git's writers, never its readers:
+ * the committed index stays whole while a lock exists, a rename that lands
+ * during a capture fails its witnesses, and a lock a dead Git left behind
+ * says nothing at all. A live lock says only when to read: see
+ * `gitWriterLock`. */
+export function busyMarker(directory, ownReveal) {
+    const unsupported = unsupportedGitOperation(directory);
+    if (unsupported)
+        throw new UnsupportedGitOperationError(unsupported);
+    return !ownReveal && existsSync(join(directory, REVEAL_MARKER)) ? REVEAL_MARKER : null;
+}
+/** Git replaces a control file by writing `<name>.lock` beside it and then
+ * renaming it into place, or unlinking it if the write fails; either end
+ * rings Watch. The storage directory holds each checkout's own files, and
+ * the common directory the files its worktrees share. */
+const GIT_WRITER_LOCKS = [
+    ['storage', 'index.lock'], ['storage', 'HEAD.lock'],
+    ['common', 'config.lock'], ['common', 'packed-refs.lock'], ['common', 'shallow.lock'],
+];
+/** How long a lock may still be a writer rewriting the repository: what the
+ * one-second Git budget leaves once the held repository's own read, an
+ * ordinary read with its 250 ms budget, is paid. A lock that has held Detect
+ * back that long holds nothing more. Its writer is waiting on a person, as a
+ * commit editor does, or has died, and neither moves ground. */
+const GIT_WRITER_SETTLE_MS = 750;
+/** The lock a live Git writer holds in this checkout's storage, or null. A
+ * rung reader waits for that lock's release ring, since a read taken while
+ * the writer works would only be invalidated by its commit. A stale lock
+ * never rings, so the wait also ends when the last live lock stops holding;
+ * an older lock holds nothing, and the witnesses judge whatever is read
+ * through it. A lock that cannot be read is no evidence of a writer: the
+ * capture meets whatever made it unreadable. */
+export function gitWriterLock(repository) {
+    const now = Date.now();
+    let held = null;
+    try {
+        const storage = gitStorageDirectory(repository).directory;
+        const directories = { storage, common: gitCommonDirectory(storage) };
+        for (const [place, name] of GIT_WRITER_LOCKS) {
+            const lock = lstatSync(join(directories[place], name), { throwIfNoEntry: false });
+            // Either side of now: a file time and the clock round differently.
+            if (!lock || Math.abs(now - lock.mtimeMs) >= GIT_WRITER_SETTLE_MS)
+                continue;
+            const settlesInMs = Math.ceil(GIT_WRITER_SETTLE_MS - (now - lock.mtimeMs));
+            if (held === null || settlesInMs > held.settlesInMs)
+                held = { name, settlesInMs };
+        }
+    }
+    catch { /* no readable storage: no evidence of a writer */ }
+    return held;
+}
+export const gitOperationWitness = (directory, ownReveal, operation) => Object.freeze({ kind: 'git-operation', directory, ownReveal, operation: JSON.stringify(operation) });
+/** A marker that appeared since capture changed the moment the capture
+ * describes; the next capture classifies it. */
+export function judgeGitOperation(witness) {
+    let busy;
+    try {
+        busy = busyMarker(witness.directory, witness.ownReveal) !== null;
+    }
+    catch (error) {
+        if (!(error instanceof UnsupportedGitOperationError))
+            throw error;
+        busy = true;
+    }
+    if (busy || JSON.stringify(mergeOperation(witness.directory)) !== witness.operation) {
+        throw new CaptureSourceChangedError('repository Git basis changed after capture');
+    }
+}
+//# sourceMappingURL=git-operation-host.js.map

package/dist/git-operation-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-operation-host.js","sourceRoot":"","sources":["../src/git-operation-host.ts"],"names":[],"mappings":"AAAA;;;kDAGkD;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAE3E,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC,cAAc,EAAE,QAAQ,CAAC;IACtD,CAAC,kBAAkB,EAAE,aAAa,CAAC,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC;IAC9D,CAAC,WAAW,EAAE,gCAAgC,CAAC,EAAE,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;CACvF,CAAC;AAEX;;;;sEAIsE;AACtE,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;AAE7C,MAAM,UAAU,uBAAuB,CAAC,YAAoB;IAC1D,OAAO,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5G,CAAC;AAED,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAEhC;IADZ,IAAI,GAAG,2BAA2B,CAAC;IAC5C,YAAqB,SAAiB;QACpC,KAAK,CAAC,uCAAuC,SAAS,sEAAsE,CAAC,CAAC;QAD3G,cAAS,GAAT,SAAS,CAAQ;IAEtC,CAAC;CACF;AAED,SAAS,eAAe,CAAC,SAAiB,EAAE,IAAY;IACtD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;SACpE,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO;QACb,KAAK;QACL,OAAO,EAAE,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC;QAChD,IAAI,EAAE,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;sBAMsB;AACtB,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,SAAkB;IAC9D,MAAM,WAAW,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,WAAW;QAAE,MAAM,IAAI,4BAA4B,CAAC,WAAW,CAAC,CAAC;IACrE,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;AACzF,CAAC;AAED;;;yDAGyD;AACzD,MAAM,gBAAgB,GAAG;IACvB,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC;IACnD,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,kBAAkB,CAAC,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC;CAC7E,CAAC;AAEX;;;;gEAIgE;AAChE,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAQjC;;;;;;gDAMgD;AAChD,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,IAAI,GAAyB,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC;QAC1D,MAAM,WAAW,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QACrE,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,gBAAgB,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;YAClF,mEAAmE;YACnE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,oBAAoB;gBAAE,SAAS;YAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3E,IAAI,IAAI,KAAK,IAAI,IAAI,WAAW,GAAG,IAAI,CAAC,WAAW;gBAAE,IAAI,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACpF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,kDAAkD,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC;AAUD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,SAAiB,EAAE,SAAkB,EAAE,SAAoC,EACtD,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAE/H;gDACgD;AAChD,MAAM,UAAU,iBAAiB,CAAC,OAA4B;IAC5D,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QAAC,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;IAAC,CAAC;IACzE,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,CAAC,KAAK,YAAY,4BAA4B,CAAC;YAAE,MAAM,KAAK,CAAC;QAAC,IAAI,GAAG,IAAI,CAAC;IAAC,CAAC;IACjG,IAAI,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QACpF,MAAM,IAAI,yBAAyB,CAAC,4CAA4C,CAAC,CAAC;IACpF,CAAC;AACH,CAAC"}

package/dist/git-private-index.d.ts

@@ -0,0 +1,11 @@
+export declare class PrivateNativeIndex {
+    #private;
+    private constructor();
+    /** `files` are the index and its shared base, by the names Git reads them under. */
+    static create(format: "sha1" | "sha256", files: ReadonlyMap<string, Buffer>, closing: boolean): Promise<PrivateNativeIndex>;
+    /** A worktree command runs in its worktree, so one that emptied fails as
+     * that address's absence (git-command.ts). */
+    untracked(repository: string, paths: readonly string[] | null): Promise<Buffer>;
+    /** Callers retire the view only once its Git children have exited. */
+    close(): Promise<void>;
+}

package/dist/git-private-index.js

@@ -0,0 +1,42 @@
+/** Git lists untracked names over copied native index bytes, without source
+ * objects or settings. Every file effect is asynchronous: an index can be
+ * many megabytes, and its directory is retired only after every Git child
+ * over it has exited. */
+import { rm, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { runGit } from "./git-command.js";
+import { createPrivateRepository } from "./git-private-repository.js";
+const PROFILE = Object.freeze({ LC_ALL: "C" });
+export class PrivateNativeIndex {
+    #directory;
+    #closing;
+    constructor(directory, closing) {
+        this.#directory = directory;
+        this.#closing = closing;
+    }
+    /** `files` are the index and its shared base, by the names Git reads them under. */
+    static async create(format, files, closing) {
+        const view = new PrivateNativeIndex(await createPrivateRepository("amalgm-git-index-", format), closing);
+        try {
+            // Every write settles before a failure retires the directory under it.
+            const written = await Promise.allSettled([...files].map(([name, bytes]) => writeFile(join(view.#directory, name), bytes)));
+            const failed = written.find((outcome) => outcome.status === "rejected");
+            if (failed)
+                throw failed.reason;
+            return view;
+        }
+        catch (error) {
+            await view.close();
+            throw error;
+        }
+    }
+    /** A worktree command runs in its worktree, so one that emptied fails as
+     * that address's absence (git-command.ts). */
+    untracked(repository, paths) {
+        return runGit(repository, [`--git-dir=${this.#directory}`, `--work-tree=${repository}`, "ls-files", "--others", "-z",
+            ...paths ? ["--", ...paths.map(path => `:(literal)${path}`)] : []], { profile: PROFILE, purpose: "checkpoint", closing: this.#closing });
+    }
+    /** Callers retire the view only once its Git children have exited. */
+    close() { return rm(this.#directory, { recursive: true, force: true }); }
+}
+//# sourceMappingURL=git-private-index.js.map

package/dist/git-private-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-private-index.js","sourceRoot":"","sources":["../src/git-private-index.ts"],"names":[],"mappings":"AAAA;;;yBAGyB;AACzB,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAmB,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,MAAM,OAAO,GAAe,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAE3D,MAAM,OAAO,kBAAkB;IACpB,UAAU,CAAS;IACnB,QAAQ,CAAU;IAE3B,YAAoB,SAAiB,EAAE,OAAgB;QACrD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,oFAAoF;IACpF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAyB,EAAE,KAAkC,EAC/E,OAAgB;QAChB,MAAM,IAAI,GAAG,IAAI,kBAAkB,CAAC,MAAM,uBAAuB,CAAC,mBAAmB,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QACzG,IAAI,CAAC;YACH,uEAAuE;YACvE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3H,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAoC,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;YAC1G,IAAI,MAAM;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACtD,CAAC;IAED;kDAC8C;IAC9C,SAAS,CAAC,UAAkB,EAAE,KAA+B;QAC3D,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,aAAa,IAAI,CAAC,UAAU,EAAE,EAAE,eAAe,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI;YAClH,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EACpE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,sEAAsE;IACtE,KAAK,KAAoB,OAAO,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;CACzF"}

package/dist/git-private-repository.d.ts

@@ -0,0 +1,4 @@
+type Format = "sha1" | "sha256";
+/** A new private bare repository; its owner removes the returned directory. */
+export declare function createPrivateRepository(prefix: string, format: Format): Promise<string>;
+export {};

package/dist/git-private-repository.js

@@ -0,0 +1,69 @@
+/** A private bare repository is Git's own empty layout. Git creates it once
+ * per host and object format, probing the temporary filesystem it will live
+ * on; every later private repository is that layout written into a fresh
+ * directory, with no Git process. */
+import { lstat, mkdir, mkdtemp, readFile, readdir, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { gitHost, runGit } from "./git-command.js";
+const layouts = new Map();
+async function initializedLayout(format) {
+    const scratch = await mkdtemp(join(tmpdir(), "amalgm-git-layout-"));
+    try {
+        await runGit(scratch, ["init", "--bare", "--quiet", `--object-format=${format}`, "--template="], { profile: { LC_ALL: "C" }, purpose: "checkpoint" });
+        const directories = [], files = new Map();
+        // Parents precede children, so a replay creates each directory in order.
+        const visit = async (relative) => {
+            for (const name of (await readdir(join(scratch, relative))).sort()) {
+                const child = relative ? `${relative}/${name}` : name;
+                const stat = await lstat(join(scratch, child));
+                if (stat.isDirectory()) {
+                    directories.push(child);
+                    await visit(child);
+                }
+                else if (stat.isFile())
+                    files.set(child, await readFile(join(scratch, child)));
+                else
+                    throw new Error(`Git's empty repository holds an unsupported entry: ${child}`);
+            }
+        };
+        await visit("");
+        return Object.freeze({ directories: Object.freeze(directories), files });
+    }
+    finally {
+        await rm(scratch, { recursive: true, force: true });
+    }
+}
+/** A failed initialization leaves no layout, so the next caller asks Git again. */
+function layoutOf(format) {
+    const key = JSON.stringify([gitHost().key, format]);
+    let layout = layouts.get(key);
+    if (!layout) {
+        layout = initializedLayout(format);
+        layouts.set(key, layout);
+        layout.catch(() => { if (layouts.get(key) === layout)
+            layouts.delete(key); });
+    }
+    return layout;
+}
+/** A new private bare repository; its owner removes the returned directory. */
+export async function createPrivateRepository(prefix, format) {
+    const layout = await layoutOf(format);
+    const directory = await mkdtemp(join(tmpdir(), prefix));
+    try {
+        for (const relative of layout.directories)
+            await mkdir(join(directory, relative));
+        // Every write settles before a failure retires the directory under it.
+        const written = await Promise.allSettled([...layout.files]
+            .map(([relative, bytes]) => writeFile(join(directory, relative), bytes)));
+        const failed = written.find((outcome) => outcome.status === "rejected");
+        if (failed)
+            throw failed.reason;
+        return directory;
+    }
+    catch (error) {
+        await rm(directory, { recursive: true, force: true });
+        throw error;
+    }
+}
+//# sourceMappingURL=git-private-repository.js.map

package/dist/git-private-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-private-repository.js","sourceRoot":"","sources":["../src/git-private-repository.ts"],"names":[],"mappings":"AAAA;;;qCAGqC;AACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAKnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;AAEnD,KAAK,UAAU,iBAAiB,CAAC,MAAc;IAC7C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,mBAAmB,MAAM,EAAE,EAAE,aAAa,CAAC,EAC7F,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;QACvD,MAAM,WAAW,GAAa,EAAE,EAAE,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QACpE,yEAAyE;QACzE,MAAM,KAAK,GAAG,KAAK,EAAE,QAAgB,EAAiB,EAAE;YACtD,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBACtD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC/C,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;qBACnE,IAAI,IAAI,CAAC,MAAM,EAAE;oBAAE,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;;oBAC1E,MAAM,IAAI,KAAK,CAAC,sDAAsD,KAAK,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC,CAAC;QACF,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACpE,CAAC;AAED,mFAAmF;AACnF,SAAS,QAAQ,CAAC,MAAc;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAAc,EAAE,MAAc;IAC1E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,WAAW;YAAE,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClF,uEAAuE;QACvE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;aACvD,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAoC,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QAC1G,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACzF,CAAC"}

package/dist/git-private-view.d.ts

@@ -0,0 +1,39 @@
+import type { NativeIndexBinding } from "./git-binding.js";
+import { type GitIndexEntry } from "./git-index-entries.js";
+/** Source alternates are used only by readers. Git object writers can refresh
+ * an existing alternate object's timestamp, so they run without alternates.
+ * Required patch bases are copied into private storage before a writer runs. */
+export declare class PrivateGitView {
+    #private;
+    readonly directory: string;
+    readonly format: string;
+    private constructor();
+    /** The binding names the source's object format and store, so opening a
+     * view asks Git nothing. */
+    static open(binding: Pick<NativeIndexBinding, "format" | "objects">, shallow?: readonly string[]): Promise<PrivateGitView>;
+    private read;
+    private write;
+    tree(entries: readonly GitIndexEntry[]): Promise<string>;
+    rawBlob(leaf: {
+        readonly content: Uint8Array;
+        readonly objectId: string;
+    }): Promise<void>;
+    writeBlob(bytes: Uint8Array): Promise<string>;
+    blobSizes(objects: readonly string[]): Promise<Buffer>;
+    blobs(objects: readonly string[]): Promise<Buffer>;
+    pack(objects: readonly string[]): Promise<Buffer>;
+    /** The objects this view holds, asked once. */
+    present(objects: readonly string[]): Promise<string[]>;
+    /** Those of these commits the tips reach under this view's horizon, each
+     * with the parents that horizon gives it. */
+    reached(tips: readonly string[], commits: readonly string[]): Promise<Map<string, string[]>>;
+    /** A shallow receiver's haves may reach no wanted commit through their
+     * parents, so, as upload-pack does, each have's own tree is its edge. */
+    exportPack(revisions: Uint8Array, file: string, shallowReceiver: boolean): Promise<void>;
+    diff(before: string, after: string): Promise<Buffer>;
+    apply(base: string, patch: Uint8Array): Promise<GitIndexEntry[]>;
+    ownsObject(oid: string): boolean;
+    private replaceIndex;
+    indexBytes(entries: readonly GitIndexEntry[]): Promise<Buffer>;
+    close(): Promise<void>;
+}

package/dist/git-private-view.js

@@ -0,0 +1,162 @@
+/** Private Git object/index effects, with borrowed source objects only for readers. */
+import { existsSync } from "node:fs";
+import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { runGit, runGitToFile } from "./git-command.js";
+import { assertGitPath, parseGitIndex } from "./git-index-entries.js";
+import { createPrivateRepository } from "./git-private-repository.js";
+/** Source alternates are used only by readers. Git object writers can refresh
+ * an existing alternate object's timestamp, so they run without alternates.
+ * Required patch bases are copied into private storage before a writer runs. */
+export class PrivateGitView {
+    directory;
+    format;
+    #profile;
+    constructor(directory, format, profile) {
+        this.directory = directory;
+        this.format = format;
+        this.#profile = profile;
+    }
+    /** The binding names the source's object format and store, so opening a
+     * view asks Git nothing. */
+    static async open(binding, shallow = []) {
+        const view = new PrivateGitView(await createPrivateRepository("amalgm-git-view-", binding.format), binding.format, Object.freeze({ GIT_ALTERNATE_OBJECT_DIRECTORIES: JSON.stringify(binding.objects), GIT_NO_REPLACE_OBJECTS: "1",
+            LC_ALL: "C" }));
+        try {
+            // Only history traversal needs a horizon, supplied by its captured Card.
+            // Index/tree/blob readers never reread an unrelated live shallow file.
+            if (shallow.length)
+                await writeFile(join(view.directory, "shallow"), `${shallow.join("\n")}\n`);
+            await mkdir(join(view.directory, "info"), { recursive: true });
+            await writeFile(join(view.directory, "info", "attributes"), "* -diff\n");
+            return view;
+        }
+        catch (error) {
+            await view.close();
+            throw error;
+        }
+    }
+    read(args, input, purpose = "checkpoint") {
+        return runGit(this.directory, ["-c", "core.quotePath=true", "-c", "core.autocrlf=false", ...args], { input, profile: this.#profile, purpose });
+    }
+    write(args, input) {
+        const { GIT_ALTERNATE_OBJECT_DIRECTORIES: _alternates, ...profile } = this.#profile;
+        return runGit(this.directory, ["-c", "core.quotePath=true", "-c", "core.autocrlf=false", ...args], { input, profile, purpose: "checkpoint" });
+    }
+    async tree(entries) {
+        await this.replaceIndex(entries);
+        return (await this.write(["write-tree", "--missing-ok"])).toString("utf8").trim();
+    }
+    async rawBlob(leaf) {
+        const oid = await this.writeBlob(leaf.content);
+        if (oid !== leaf.objectId)
+            throw new Error("Git disagrees with literal blob identity");
+    }
+    async writeBlob(bytes) {
+        return (await this.write(["hash-object", "-w", "--no-filters", "--stdin"], bytes)).toString("ascii").trim();
+    }
+    blobSizes(objects) {
+        return this.read(["cat-file", "--batch-check=%(objectsize)"], Buffer.from(objects.join("\n") + "\n"));
+    }
+    blobs(objects) {
+        return this.read(["cat-file", "--batch"], Buffer.from(objects.join("\n") + "\n"));
+    }
+    pack(objects) {
+        return this.read(["pack-objects", "--stdout"], Buffer.from(objects.join("\n") + "\n"), "transport");
+    }
+    /** The objects this view holds, asked once. */
+    async present(objects) {
+        if (!objects.length)
+            return [];
+        const held = new Set((await this.read(["cat-file", "--batch-check=%(objectname)"], Buffer.from(`${objects.join("\n")}\n`), "transport")).toString("ascii").split("\n"));
+        return objects.filter(object => held.has(object));
+    }
+    /** Those of these commits the tips reach under this view's horizon, each
+     * with the parents that horizon gives it. */
+    async reached(tips, commits) {
+        const found = new Map();
+        if (!tips.length || !commits.length)
+            return found;
+        const wanted = new Set(commits);
+        const ancestry = await this.read(["rev-list", "--parents", "--stdin"], Buffer.from(`${tips.join("\n")}\n`), "transport");
+        for (const line of ancestry.toString("ascii").split("\n")) {
+            const [commit, ...parents] = line.split(" ");
+            if (wanted.has(commit))
+                found.set(commit, parents);
+        }
+        return found;
+    }
+    /** A shallow receiver's haves may reach no wanted commit through their
+     * parents, so, as upload-pack does, each have's own tree is its edge. */
+    exportPack(revisions, file, shallowReceiver) {
+        // With no remotes in this private repository, a missing borrowed object
+        // cannot trigger a lazy fetch into the source repository.
+        return runGitToFile(this.directory, ["pack-objects", "--stdout", "--revs", "--thin", "--delta-base-offset",
+            ...shallowReceiver ? ["--shallow"] : []], file, { input: revisions, profile: this.#profile, purpose: "transport" });
+    }
+    diff(before, after) {
+        return this.read(["diff-tree", "-r", "--no-commit-id", "--binary", "--full-index",
+            "--no-renames", "--no-ext-diff", "--no-textconv", "--no-color", "--submodule=short",
+            "--src-prefix=a/", "--dst-prefix=b/", "--diff-algorithm=myers", "--no-indent-heuristic",
+            "--unified=3", "--inter-hunk-context=0", before, after, "--"]);
+    }
+    async apply(base, patch) {
+        // Enumerate the source tree without letting an index writer see source
+        // storage. Even index-only commands may generate cached tree objects.
+        const entries = (await this.read(["ls-tree", "-r", "-z", "--full-tree", base]))
+            .toString("utf8").split("\0").filter(Boolean).map(record => {
+            const separator = record.indexOf("\t");
+            const [mode, , objectId] = record.slice(0, separator).split(" ");
+            if (separator < 0)
+                throw new Error("invalid Git tree entry");
+            return `${mode} ${objectId} 0\t${record.slice(separator + 1)}\0`;
+        });
+        await this.replaceIndex(await parseGitIndex(Buffer.from(entries.join(""))));
+        if (patch.length) {
+            // Extended headers are unprefixed; text hunks prefix each content line
+            // and binary hunks use space-free base85. Human-readable --summary
+            // cannot enforce this rule because it prints embedded filename newlines.
+            const bytes = Buffer.from(patch.buffer, patch.byteOffset, patch.byteLength);
+            for (const header of ["rename from ", "rename to ", "rename old ", "rename new ", "copy from ", "copy to "]) {
+                if (bytes.subarray(0, header.length).equals(Buffer.from(header)) || bytes.includes(Buffer.from(`\n${header}`))) {
+                    throw new Error("repository patch must not contain rename/copy instructions");
+                }
+            }
+            // Let Git parse its patch path grammar, including tabs and newlines.
+            // The canonical profile emits no rename records. Only changed base
+            // blobs need copying; unrelated history stays in the read-only view.
+            const changed = new Set((await this.write(["apply", "--numstat", "-z"], patch))
+                .toString("utf8").split("\0").filter(Boolean).map(record => {
+                const first = record.indexOf("\t"), second = record.indexOf("\t", first + 1);
+                if (first < 0 || second < 0)
+                    throw new Error("invalid Git patch path inventory");
+                const path = record.slice(second + 1);
+                assertGitPath(path);
+                return path;
+            }));
+            const current = await parseGitIndex(await this.write(["ls-files", "--stage", "-z"]));
+            for (const entry of current) {
+                if (!changed.has(entry.path) || entry.mode === "160000" || this.ownsObject(entry.objectId))
+                    continue;
+                const bytes = await this.read(["cat-file", "blob", entry.objectId]);
+                const oid = await this.writeBlob(bytes);
+                if (oid !== entry.objectId)
+                    throw new Error("private Git patch base failed verification");
+            }
+            await this.write(["apply", "--cached", "--binary", "--whitespace=nowarn"], patch);
+        }
+        return parseGitIndex(await this.write(["ls-files", "--stage", "-z"]));
+    }
+    ownsObject(oid) { return existsSync(join(this.directory, "objects", oid.slice(0, 2), oid.slice(2))); }
+    async replaceIndex(entries) {
+        await this.write(["read-tree", "--empty"]);
+        if (entries.length)
+            await this.write(["update-index", "-z", "--index-info"], Buffer.from(entries.map(entry => `${entry.mode} ${entry.objectId} ${entry.stage}\t${entry.path}\0`).join("")));
+    }
+    async indexBytes(entries) {
+        await this.replaceIndex(entries);
+        return readFile(join(this.directory, "index"));
+    }
+    close() { return rm(this.directory, { recursive: true, force: true }); }
+}
+//# sourceMappingURL=git-private-view.js.map

package/dist/git-private-view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-private-view.js","sourceRoot":"","sources":["../src/git-private-view.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAoC,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAE,aAAa,EAAsB,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAGtE;;gFAEgF;AAChF,MAAM,OAAO,cAAc;IAChB,SAAS,CAAS;IAClB,MAAM,CAAS;IACf,QAAQ,CAAa;IAE9B,YAAoB,SAAiB,EAAE,MAAc,EAAE,OAAmB;QACxE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED;gCAC4B;IAC5B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAuD,EACvE,UAA6B,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,MAAM,uBAAuB,CAAC,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,EAC/G,MAAM,CAAC,MAAM,CAAC,EAAE,gCAAgC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,sBAAsB,EAAE,GAAG;YAC5G,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,yEAAyE;YACzE,uEAAuE;YACvE,IAAI,OAAO,CAAC,MAAM;gBAAE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,WAAW,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACtD,CAAC;IAEO,IAAI,CAAC,IAAuB,EAAE,KAAkB,EAAE,UAAsB,YAAY;QAC1F,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACjJ,CAAC;IAEO,KAAK,CAAC,IAAuB,EAAE,KAAkB;QACvD,MAAM,EAAE,gCAAgC,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACpF,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAChJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAiC;QAC1C,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAiE;QAC7E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,GAAG,KAAK,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACzF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAiB;QAC/B,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9G,CAAC;IAED,SAAS,CAAC,OAA0B;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,6BAA6B,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACxG,CAAC;IAED,KAAK,CAAC,OAA0B;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,CAAC,OAA0B;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;IACtG,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,OAAO,CAAC,OAA0B;QACtC,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,6BAA6B,CAAC,EAC/E,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACvF,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IAED;iDAC6C;IAC7C,KAAK,CAAC,OAAO,CAAC,IAAuB,EAAE,OAA0B;QAC/D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;QACzH,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,MAAM,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,MAAM,CAAC,GAAG,CAAC,MAAO,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,MAAO,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;6EACyE;IACzE,UAAU,CAAC,SAAqB,EAAE,IAAY,EAAE,eAAwB;QACtE,wEAAwE;QACxE,0DAA0D;QAC1D,OAAO,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,qBAAqB;YACxG,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IACxH,CAAC;IAED,IAAI,CAAC,MAAc,EAAE,KAAa;QAChC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc;YAC/E,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,EAAE,mBAAmB;YACnF,iBAAiB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,uBAAuB;YACvF,aAAa,EAAE,wBAAwB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,KAAiB;QACzC,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;aAC5E,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;YACzD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,CAAC,IAAI,EAAE,AAAD,EAAG,QAAQ,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,SAAS,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC7D,OAAO,GAAG,IAAI,IAAI,QAAQ,OAAO,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC;QACnE,CAAC,CAAC,CAAC;QACL,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,uEAAuE;YACvE,mEAAmE;YACnE,yEAAyE;YACzE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAC5E,KAAK,MAAM,MAAM,IAAI,CAAC,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;gBAC5G,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/G,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;YACD,qEAAqE;YACrE,mEAAmE;YACnE,qEAAqE;YACrE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;iBAC5E,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;gBACzD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC7E,IAAI,KAAK,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBACjF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YAC1E,CAAC,CAAC,CAAC,CAAC;YACN,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACrF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;oBAAE,SAAS;gBACrG,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACxC,IAAI,GAAG,KAAK,KAAK,CAAC,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC5F,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,qBAAqB,CAAC,EAAE,KAAK,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,aAAa,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,UAAU,CAAC,GAAW,IAAa,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/G,KAAK,CAAC,YAAY,CAAC,OAAiC;QAC1D,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,IAAI,CACtF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvG,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAiC;QAChD,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,KAAoB,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;CACxF"}

package/dist/git-ref-store.d.ts

@@ -0,0 +1,12 @@
+export type LooseRef = {
+    readonly kind: "direct";
+    readonly commit: string;
+} | {
+    readonly kind: "symbolic";
+    readonly target: string;
+} | {
+    readonly kind: "unreadable";
+};
+/** Every loose ref this checkout sees, by full name, read on demand. Git
+ * ignores its own `.lock` files, and so does this reader. */
+export declare function looseRefs(repository: string): Map<string, () => LooseRef>;

package/dist/git-ref-store.js

@@ -0,0 +1,68 @@
+/** Git's loose ref store, read natively for the two facts for-each-ref
+ * cannot give. The files backend keeps every symbolic ref as one loose file
+ * (pack-refs never packs one), and `%(symref)` follows a chain to its end, so
+ * only the loose file names a symbolic ref's immediate target. for-each-ref
+ * also silently omits every stored ref it cannot read — a dangling or cyclic
+ * symbolic ref, unreadable content, a malformed name — so its output alone
+ * never proves the ref set complete. */
+import { readdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { refusal } from "@amalgm/live";
+import { CaptureSourceChangedError } from "./content-cache-host.js";
+import { gitCommonDirectory, gitStorageDirectory } from "./git-binding.js";
+/** Git's per-worktree namespaces; every other ref lives in the common directory. */
+const PER_WORKTREE = ["refs/bisect/", "refs/worktree/", "refs/rewritten/"];
+/** Every loose ref this checkout sees, by full name, read on demand. Git
+ * ignores its own `.lock` files, and so does this reader. */
+export function looseRefs(repository) {
+    const gitDir = gitStorageDirectory(repository).directory;
+    const common = gitCommonDirectory(gitDir);
+    const found = new Map();
+    const walk = (store, relative, admit) => {
+        let entries;
+        try {
+            entries = readdirSync(join(store, relative), { withFileTypes: true });
+        }
+        catch (error) {
+            if (missing(error))
+                return;
+            throw error;
+        }
+        for (const entry of entries) {
+            const name = `${relative}/${entry.name}`;
+            if (entry.isDirectory())
+                walk(store, name, admit);
+            else if (entry.isSymbolicLink())
+                throw refusal(`repository stores a symbolic-link ref: ${name}`);
+            else if (!entry.name.endsWith(".lock") && admit(name))
+                found.set(name, () => readLoose(join(store, name)));
+        }
+    };
+    const perWorktree = (name) => PER_WORKTREE.some(prefix => name.startsWith(prefix));
+    if (common === gitDir)
+        walk(gitDir, "refs", () => true);
+    else {
+        walk(common, "refs", name => !perWorktree(name));
+        walk(gitDir, "refs", perWorktree);
+    }
+    return found;
+}
+/** Git's loose-ref grammar: `ref:` and a target, or one object ID. */
+function readLoose(path) {
+    let content;
+    try {
+        content = readFileSync(path, "utf8");
+    }
+    catch (error) {
+        if (missing(error))
+            throw new CaptureSourceChangedError("repository ref store changed", { cause: error });
+        throw error;
+    }
+    const symbolic = /^ref:[ \t]*(\S+)\s*$/.exec(content);
+    if (symbolic)
+        return { kind: "symbolic", target: symbolic[1] };
+    const direct = /^([0-9a-f]{40}|[0-9a-f]{64})\s*$/.exec(content);
+    return direct ? { kind: "direct", commit: direct[1] } : { kind: "unreadable" };
+}
+const missing = (error) => ["ENOENT", "ENOTDIR"].includes(error.code ?? "");
+//# sourceMappingURL=git-ref-store.js.map

package/dist/git-ref-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-ref-store.js","sourceRoot":"","sources":["../src/git-ref-store.ts"],"names":[],"mappings":"AAAA;;;;;;wCAMwC;AACxC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAO3E,oFAAoF;AACpF,MAAM,YAAY,GAAG,CAAC,cAAc,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;AAE3E;6DAC6D;AAC7D,MAAM,UAAU,SAAS,CAAC,UAAkB;IAC1C,MAAM,MAAM,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC;IACzD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAChD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,QAAgB,EAAE,KAAgC,EAAQ,EAAE;QACvF,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YAAC,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAC9E,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QAC1D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;iBAC7C,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,MAAM,OAAO,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;iBAC5F,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACpG,IAAI,MAAM,KAAK,MAAM;QAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;SACnD,CAAC;QAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAAC,CAAC;IAC7F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sEAAsE;AACtE,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QAAC,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAC7C,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1G,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AAClF,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC"}