@amalgm/shell 0.1.17 → 0.1.19

package/PURPOSE.md

@@ -93,6 +93,11 @@ shell only assembles.
     an in-flight registration. A gateway response belongs to the exact wire
     that delivered its request; if that source closes first, the late response
     is discarded cleanly rather than sent through a replacement or closed wire.
+    Closing is a one-way lifecycle boundary: a rescan that was already in
+    flight may finish its durable work, but it can never recreate watcher
+    handles afterward. Each tracked root owns one recursive Node watcher, not
+    one handle per descendant directory; the Node version floor supplies this
+    primitive on macOS, Linux, and Windows.
 
 17. **Independent content may travel concurrently; authority remains atomic.**
     The host bounds parallel uploads for small immutable objects and processes
@@ -100,13 +105,48 @@ shell only assembles.
     memory. The registry head advances only after every referenced object is
     durably acknowledged.
 
-18. **A Git repository travels as one repository parcel.** The host uses Git
-    itself to capture and restore the repository's Card + Checkpoint transport.
-    `.git` is transport metadata rather than entity ground; worktree children
-    keep their UUID rows locally and ride as an identity map inside the parcel,
-    while the cloud registry carries the one `repo.git` record. A shallow
-    boundary travels in that parcel and is installed before Git reads its
-    bundle; it changes transport completeness, not the semantic repository id.
+18. **A Git repository travels through Git.** The host asks Git to pack the
+    declared refs against the authority's known object frontier and asks Git
+    to index received packs. `.git` is transport metadata rather than entity
+    ground; worktree children keep their UUID rows locally and ride in the
+    repository state metadata, while the cloud registry carries the one
+    `repo.git` record. A shallow boundary travels with that metadata and is
+    installed before Git reads the imported objects.
+
+19. **Live owns transfer; Shell owns transfer effects.** `@amalgm/live`
+    decides which entity types have artifacts, which chunks are missing, when
+    an upload manifest may commit, and when a download is verified. The Shell
+    adapter supplies seekable immutable-cache reads, the authority inventory
+    probe, bounded R2 requests, and a machine-local content-addressed chunk
+    cache; it never scans, registers, materializes, or publishes inside those
+    operations.
+    Control and integrity metadata remains JSON, while immutable block and Git
+    parcel bytes use the authenticated binary WebSocket rail without base64.
+
+20. **Git is the repository-transfer performance gate.** On the same source,
+    destination inventory, machine, and network path, cold upload sends the
+    same Git object pack as a native push and incremental upload sends only the
+    newly missing objects. Timing comparisons use repeated runs because wall
+    clocks are noisy; byte-work parity is exact and any fixed Amalgm metadata
+    overhead is reported separately.
+
+21. **Watch events preserve suspicion until proof.** A named filesystem event
+    scopes registration evidence to that path and its ancestors; a nameless
+    event, index-wide Git change, enrollment-policy change, watcher restart,
+    or command-end catch-up scopes the complete covered root. A scan settles
+    only the generations it observed, so an event received during that scan
+    remains pending.
+
+22. **Git supplies clean repository evidence.** Registration obtains clean
+    tracked leaf identity and text/binary classification from Git's index,
+    attributes, and object database. It reads worktree bytes only for dirty or
+    untracked leaves. Git ignore never becomes Amalgm enrollment policy.
+
+23. **Cold add never rereads a repository graph.** Download verifies and
+    assembles each content-addressed transport to a file, streams its Git pack
+    range directly into `index-pack`, and derives local SQLite rows from the
+    transported UUID/type/payload identity map plus filesystem stats. It does
+    not buffer the complete repository parcel or reclassify checked-out files.
 
 ## Relationship to amalgm-engine
 

package/dist/filesystem.d.ts

@@ -1,5 +1,11 @@
 export declare function ensurePrivateDir(directory: string): void;
 export declare function atomicWrite(file: string, bytes: string | Uint8Array, mode?: number): void;
+export declare function atomicCopy(source: string, destination: string, mode?: number): void;
+/** Assemble verified chunk files without holding the complete artifact in RAM. */
+export declare function atomicAssemble(destination: string, sources: readonly string[]): Promise<{
+    readonly bytes: number;
+    readonly sha256: string;
+}>;
 export declare function readJson<T>(file: string): T | null;
 export declare function atomicJson(file: string, value: unknown): void;
 /** Commit related JSON documents without ever leaving a split public/secret

package/dist/filesystem.js

@@ -1,6 +1,7 @@
-import { randomUUID } from "node:crypto";
-import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+import { createHash, randomUUID } from "node:crypto";
+import { chmodSync, copyFileSync, createReadStream, createWriteStream, existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
 import { dirname } from "node:path";
+import { once } from "node:events";
 export function ensurePrivateDir(directory) {
     mkdirSync(directory, { recursive: true, mode: 0o700 });
     chmodSync(directory, 0o700);
@@ -17,6 +18,49 @@ export function atomicWrite(file, bytes, mode = 0o600) {
         rmSync(temporary, { force: true });
     }
 }
+export function atomicCopy(source, destination, mode = 0o600) {
+    ensurePrivateDir(dirname(destination));
+    const temporary = `${destination}.${randomUUID()}.tmp`;
+    try {
+        copyFileSync(source, temporary);
+        chmodSync(temporary, mode);
+        renameSync(temporary, destination);
+    }
+    finally {
+        rmSync(temporary, { force: true });
+    }
+}
+/** Assemble verified chunk files without holding the complete artifact in RAM. */
+export async function atomicAssemble(destination, sources) {
+    ensurePrivateDir(dirname(destination));
+    const temporary = `${destination}.${randomUUID()}.tmp`;
+    const output = createWriteStream(temporary, { flags: "wx", mode: 0o600 });
+    const hash = createHash("sha256");
+    let bytes = 0;
+    try {
+        for (const source of sources) {
+            for await (const chunk of createReadStream(source)) {
+                const value = chunk;
+                hash.update(value);
+                bytes += value.byteLength;
+                if (!output.write(value))
+                    await once(output, "drain");
+            }
+        }
+        output.end();
+        await once(output, "close");
+        renameSync(temporary, destination);
+        chmodSync(destination, 0o600);
+        return { bytes, sha256: hash.digest("hex") };
+    }
+    catch (error) {
+        output.destroy();
+        throw error;
+    }
+    finally {
+        rmSync(temporary, { force: true });
+    }
+}
 export function readJson(file) {
     try {
         return JSON.parse(readFileSync(file, "utf8"));

package/dist/filesystem.js.map

@@ -1 +1 @@
-{"version":3,"file":"filesystem.js","sourceRoot":"","sources":["../src/filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAA0B,EAAE,IAAI,GAAG,KAAK;IAChF,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,IAAI,CAAC;QACH,aAAa,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5B,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAI,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,KAAc;IACrD,WAAW,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED;4DAC4D;AAC5D,MAAM,UAAU,aAAa,CAAC,SAAkD;IAC9E,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;IACjC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAqC,EAAE,CAAC;IACrD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,WAAW,MAAM,CAAC;YAC1C,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAChC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAA+B,CAAC;YAC9D,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,WAAW,MAAM,CAAC;YAC5C,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAC/B,CAAC;YACD,UAAU,CAAC,SAAS,CAAC,KAAK,CAAW,EAAE,IAAI,CAAC,CAAC;YAC7C,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,OAAO;YAAE,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACpD,IAAI,UAAU,CAAC,MAAM,CAAC;gBAAE,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,SAAS;YAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"filesystem.js","sourceRoot":"","sources":["../src/filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,SAAS,EACT,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEnC,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAA0B,EAAE,IAAI,GAAG,KAAK;IAChF,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,IAAI,CAAC;QACH,aAAa,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5B,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,WAAmB,EAAE,IAAI,GAAG,KAAK;IAC1E,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,GAAG,WAAW,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,IAAI,CAAC;QACH,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3B,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACrC,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAmB,EACnB,OAA0B;IAE1B,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,GAAG,WAAW,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnD,MAAM,KAAK,GAAG,KAAe,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;gBAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,MAAM,CAAC,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5B,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACnC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAI,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,KAAc;IACrD,WAAW,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED;4DAC4D;AAC5D,MAAM,UAAU,aAAa,CAAC,SAAkD;IAC9E,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;IACjC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAqC,EAAE,CAAC;IACrD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,WAAW,MAAM,CAAC;YAC1C,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAChC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAA+B,CAAC;YAC9D,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,WAAW,MAAM,CAAC;YAC5C,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAC/B,CAAC;YACD,UAAU,CAAC,SAAS,CAAC,KAAK,CAAW,EAAE,IAAI,CAAC,CAAC;YAC7C,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,OAAO;YAAE,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACpD,IAAI,UAAU,CAAC,MAAM,CAAC;gBAAE,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,SAAS;YAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/git-command.d.ts

@@ -0,0 +1,8 @@
+export declare function runGit(cwd: string, args: readonly string[], input?: Uint8Array): Buffer;
+/** Git grep uses exit 1 to mean a valid search with no matches. */
+export declare function runGitSearch(cwd: string, args: readonly string[]): Buffer;
+/** Stream a potentially large Git result directly to a private destination. */
+export declare function runGitToFile(cwd: string, args: readonly string[], input: Uint8Array, file: string): void;
+export declare function tryGit(cwd: string, args: readonly string[]): Buffer | null;
+export declare const gitText: (cwd: string, args: readonly string[]) => string;
+export declare function tryGitText(cwd: string, args: readonly string[]): string | null;

package/dist/git-command.js

@@ -0,0 +1,68 @@
+import { execFileSync } from "node:child_process";
+import { closeSync, openSync } from "node:fs";
+const MAX_GIT_BUFFER = 512 * 1024 * 1024;
+function explainGitFailure(error, args) {
+    const failure = error;
+    const stderr = failure.stderr?.toString("utf8").trim();
+    failure.message = `git ${args.join(" ")} failed${stderr ? `: ${stderr}` : ""}`;
+    throw failure;
+}
+export function runGit(cwd, args, input) {
+    try {
+        return execFileSync("git", [...args], {
+            cwd,
+            input,
+            maxBuffer: MAX_GIT_BUFFER,
+            stdio: ["pipe", "pipe", "pipe"],
+            env: { ...process.env, GIT_TERMINAL_PROMPT: "0" },
+        });
+    }
+    catch (error) {
+        explainGitFailure(error, args);
+    }
+}
+/** Git grep uses exit 1 to mean a valid search with no matches. */
+export function runGitSearch(cwd, args) {
+    try {
+        return runGit(cwd, args);
+    }
+    catch (error) {
+        const failure = error;
+        if (failure.status === 1)
+            return failure.stdout ?? Buffer.alloc(0);
+        throw error;
+    }
+}
+/** Stream a potentially large Git result directly to a private destination. */
+export function runGitToFile(cwd, args, input, file) {
+    const descriptor = openSync(file, "wx", 0o600);
+    try {
+        execFileSync("git", [...args], {
+            cwd,
+            input,
+            maxBuffer: MAX_GIT_BUFFER,
+            stdio: ["pipe", descriptor, "pipe"],
+            env: { ...process.env, GIT_TERMINAL_PROMPT: "0" },
+        });
+    }
+    catch (error) {
+        explainGitFailure(error, args);
+    }
+    finally {
+        closeSync(descriptor);
+    }
+}
+export function tryGit(cwd, args) {
+    try {
+        return runGit(cwd, args);
+    }
+    catch {
+        return null;
+    }
+}
+export const gitText = (cwd, args) => runGit(cwd, args).toString("utf8").trim();
+export function tryGitText(cwd, args) {
+    const value = tryGit(cwd, args);
+    return value === null ? null : value.toString("utf8").trim();
+}
+//# sourceMappingURL=git-command.js.map

package/dist/git-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-command.js","sourceRoot":"","sources":["../src/git-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE9C,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzC,SAAS,iBAAiB,CAAC,KAAc,EAAE,IAAuB;IAChE,MAAM,OAAO,GAAG,KAAoC,CAAC;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,OAAO,CAAC,OAAO,GAAG,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC/E,MAAM,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAW,EAAE,IAAuB,EAAE,KAAkB;IAC7E,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;YACpC,GAAG;YACH,KAAK;YACL,SAAS,EAAE,cAAc;YACzB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;SAClD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAuB;IAC/D,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAqD,CAAC;QACtE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAC1B,GAAW,EACX,IAAuB,EACvB,KAAiB,EACjB,IAAY;IAEZ,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,YAAY,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;YAC7B,GAAG;YACH,KAAK;YACL,SAAS,EAAE,cAAc;YACzB,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC;YACnC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;SAClD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAW,EAAE,IAAuB;IACzD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,IAAuB,EAAU,EAAE,CACtE,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AAE5C,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,IAAuB;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAChC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC"}

package/dist/git-registration-host.d.ts

@@ -0,0 +1,18 @@
+import { type EntityType } from "@amalgm/live";
+export interface GitRegisteredLeaf {
+    readonly type: Extract<EntityType, "file.text" | "file.binary" | "link">;
+    /** Git's indexed blob is the content witness; Shell does not hash it again. */
+    readonly payloadVersion: string;
+}
+export interface GitRegistrationEvidence {
+    /** Present only while the worktree path still agrees with the indexed blob. */
+    readonly cleanLeaves: ReadonlyMap<string, GitRegisteredLeaf>;
+}
+/**
+ * Obtain registration evidence from Git's index and object database.
+ *
+ * Git is authoritative only for stage-zero paths whose worktree stat/content
+ * still agrees with the index. Dirty and untracked paths are deliberately
+ * absent so the ordinary scanner must read their current worktree bytes.
+ */
+export declare function inspectGitRegistration(repository: string, paths?: readonly string[] | null): GitRegistrationEvidence;

package/dist/git-registration-host.js

@@ -0,0 +1,107 @@
+import { classifyFile } from "@amalgm/live";
+import { gitText, runGit, runGitSearch, tryGitText } from "./git-command.js";
+const zeroFields = (bytes) => Buffer.from(bytes).toString("utf8").split("\0").filter((field) => field.length > 0);
+const literalPathspecs = (paths) => paths.map((path) => {
+    const segments = path.split("/");
+    if (!path || path.startsWith("/") || segments.some((segment) => segment === "..")) {
+        throw new Error(`Git registration path is unsafe: ${path}`);
+    }
+    return `:(literal)${path}`;
+});
+function indexedBlobs(repository, paths) {
+    if (paths?.length === 0)
+        return new Map();
+    const fields = zeroFields(runGit(repository, [
+        "ls-files", "--stage", "-z",
+        ...(paths ? ["--", ...literalPathspecs(paths)] : []),
+    ]));
+    const entries = new Map();
+    for (const field of fields) {
+        const separator = field.indexOf("\t");
+        if (separator < 0)
+            throw new Error("Git returned an invalid index entry");
+        const [mode, objectId, stage] = field.slice(0, separator).split(" ");
+        const path = field.slice(separator + 1);
+        if (!mode || !objectId || !stage || !path)
+            throw new Error("Git returned an invalid index entry");
+        if (stage !== "0")
+            throw new Error(`repository index has unresolved entry: ${path}`);
+        entries.set(path, { mode, objectId });
+    }
+    return entries;
+}
+function blobSizes(repository, blobs) {
+    const objectIds = [...new Set([...blobs.values()]
+            .filter((blob) => blob.mode !== "160000")
+            .map((blob) => blob.objectId))];
+    if (objectIds.length === 0)
+        return new Map();
+    const output = runGit(repository, ["cat-file", "--batch-check=%(objectname) %(objectsize)"], Buffer.from(`${objectIds.join("\n")}\n`, "utf8")).toString("utf8");
+    const result = new Map();
+    for (const line of output.split("\n").filter(Boolean)) {
+        const separator = line.lastIndexOf(" ");
+        const objectId = line.slice(0, separator);
+        const size = Number(line.slice(separator + 1));
+        if (!objectId || !Number.isSafeInteger(size) || size < 0) {
+            throw new Error("Git returned invalid indexed blob metadata");
+        }
+        result.set(objectId, size);
+    }
+    return result;
+}
+function diffAttributes(repository, paths) {
+    if (paths.length === 0)
+        return new Map();
+    const output = zeroFields(runGit(repository, ["check-attr", "--cached", "-z", "--stdin", "diff"], Buffer.from(`${paths.join("\0")}\0`, "utf8")));
+    if (output.length !== paths.length * 3)
+        throw new Error("Git returned invalid diff attributes");
+    const result = new Map();
+    for (let index = 0; index < output.length; index += 3) {
+        if (output[index + 1] !== "diff")
+            throw new Error("Git returned the wrong requested attribute");
+        result.set(output[index], output[index + 2]);
+    }
+    return result;
+}
+function binaryDrivers(repository, attributes) {
+    const drivers = new Set([...attributes.values()].filter((value) => !["set", "unset", "unspecified"].includes(value)));
+    return new Set([...drivers].filter((driver) => tryGitText(repository, ["config", "--bool", "--get", `diff.${driver}.binary`]) === "true"));
+}
+/**
+ * Obtain registration evidence from Git's index and object database.
+ *
+ * Git is authoritative only for stage-zero paths whose worktree stat/content
+ * still agrees with the index. Dirty and untracked paths are deliberately
+ * absent so the ordinary scanner must read their current worktree bytes.
+ */
+export function inspectGitRegistration(repository, paths = null) {
+    const blobs = indexedBlobs(repository, paths);
+    if (blobs.size === 0)
+        return { cleanLeaves: new Map() };
+    const pathspecs = paths ? literalPathspecs(paths) : [];
+    const dirty = new Set(zeroFields(runGit(repository, [
+        "diff-files", "--name-only", "-z", "--", ...pathspecs,
+    ])));
+    const text = new Set(zeroFields(runGitSearch(repository, [
+        "grep", "--cached", "-I", "-l", "-z", "-e", "", "--", ...pathspecs,
+    ])).filter((path) => blobs.has(path)));
+    const blobPaths = [...blobs.keys()];
+    const sizes = blobSizes(repository, blobs);
+    const attributes = diffAttributes(repository, blobPaths);
+    const forcedBinaryDrivers = binaryDrivers(repository, attributes);
+    const objectFormat = gitText(repository, ["rev-parse", "--show-object-format"]);
+    const cleanLeaves = new Map();
+    for (const [path, blob] of blobs) {
+        if (dirty.has(path) || blob.mode === "160000")
+            continue;
+        const attribute = attributes.get(path) ?? "unspecified";
+        const forcedBinary = attribute === "unset" || forcedBinaryDrivers.has(attribute);
+        const binary = forcedBinary || (!text.has(path) && (sizes.get(blob.objectId) ?? 0) > 0);
+        cleanLeaves.set(path, {
+            type: blob.mode === "120000" ? "link" : classifyFile({ binary }),
+            payloadVersion: `git:${objectFormat}:${blob.objectId}`,
+        });
+    }
+    return { cleanLeaves };
+}
+//# sourceMappingURL=git-registration-host.js.map

package/dist/git-registration-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-registration-host.js","sourceRoot":"","sources":["../src/git-registration-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAmB,MAAM,cAAc,CAAC;AAE7D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAkB7E,MAAM,UAAU,GAAG,CAAC,KAAiB,EAAY,EAAE,CACjD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAEtF,MAAM,gBAAgB,GAAG,CAAC,KAAwB,EAAY,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;IAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,aAAa,IAAI,EAAE,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,UAAkB,EAAE,KAA+B;IACvE,IAAI,KAAK,EAAE,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE;QAC3C,UAAU,EAAE,SAAS,EAAE,IAAI;QAC3B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC,CAAC,CAAC;IACJ,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,SAAS,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC1E,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAClG,IAAI,KAAK,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,UAAkB,EAAE,KAAuC;IAC5E,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;aAC9C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;aACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,2CAA2C,CAAC,EACzF,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB,EAAE,KAAwB;IAClE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,EACzC,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,EACnD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAW,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,CAAW,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,UAAkB,EAAE,UAAuC;IAChF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAChE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAC5C,UAAU,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,MAAM,SAAS,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;AAChG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAkB,EAClB,QAAkC,IAAI;IAEtC,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IACxD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE;QAClD,YAAY,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,SAAS;KACtD,CAAC,CAAC,CAAC,CAAC;IACL,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,UAAU,EAAE;QACvD,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,SAAS;KACnE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,mBAAmB,GAAG,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,IAAI,GAAG,EAA6B,CAAC;IACzD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QACxD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC;QACxD,MAAM,YAAY,GAAG,SAAS,KAAK,OAAO,IAAI,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,YAAY,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxF,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;YAChE,cAAc,EAAE,OAAO,YAAY,IAAI,IAAI,CAAC,QAAQ,EAAE;SACvD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,CAAC;AACzB,CAAC"}

package/dist/git-repository-host.d.ts

@@ -1,4 +1,4 @@
-import { type LocalRepoState, type RepoIdentityEntry, type RepoState } from "@amalgm/live";
+import { type RepoIdentityEntry, type RepoState, type RepositoryTransportLayout } from "@amalgm/live";
 /** A `.git` directory or linked-worktree file is evidence only when Git says
  * this exact directory is the worktree root. Stale marker files remain
  * ordinary folder ground. */
@@ -6,15 +6,34 @@ export declare function isRepository(directory: string): boolean;
 export interface PriorRepositoryTransport {
     readonly stateId: string;
     readonly transportVersion: string;
-    readonly bytes: Uint8Array;
+    readonly card: RepoState["card"];
+    readonly identityHash: string;
 }
 export interface CapturedRepositoryTransport extends PriorRepositoryTransport {
     readonly state: RepoState;
+    /** null means the prior immutable transport is already the exact result. */
+    readonly bytes: Uint8Array | null;
 }
-/** Capture one semantic repository state. An unchanged state and identity map
- * reuse their prior immutable transport head; a new state creates one Git
- * bundle parcel, never one cloud object per worktree file. */
-export declare function captureRepository(repository: string, identity: readonly RepoIdentityEntry[], prior: PriorRepositoryTransport | null): CapturedRepositoryTransport;
-/** Materialize and then re-derive the semantic ids. Only a proved return is
- * accepted as the repository state described by the transport. */
-export declare function applyRepository(repository: string, bytes: Uint8Array): LocalRepoState;
+/** Capture one semantic repository state. A chainable capture packs only Git
+ * objects absent from its parent and only changed identity-map paths. */
+export declare function captureRepository(repository: string, identity: readonly RepoIdentityEntry[], prior: PriorRepositoryTransport | null, previousIdentity?: readonly RepoIdentityEntry[] | null): CapturedRepositoryTransport;
+export interface AppliedRepositoryState {
+    readonly stateId: string;
+    readonly cardId: string;
+    readonly checkpointId: string;
+    readonly card: RepoState["card"];
+    readonly transportVersion: string;
+    readonly identity: readonly RepoIdentityEntry[];
+}
+/** Materialize a complete transport chain and then re-derive its semantic
+ * state. The oldest node must be self-contained; every later node must name
+ * the exact predecessor whose Git objects and identity map it extends. */
+export declare function applyRepository(repository: string, chain: readonly Uint8Array[]): AppliedRepositoryState;
+export interface SealedRepositoryTransport {
+    readonly file: string;
+    readonly transportVersion: string;
+}
+export declare function inspectRepositoryTransportFile(file: string): RepositoryTransportLayout;
+/** Apply sealed repository artifacts by streaming each Git range directly
+ * into index-pack. Download already verified each complete transport hash. */
+export declare function applyRepositoryFiles(repository: string, chain: readonly SealedRepositoryTransport[]): Promise<AppliedRepositoryState>;