@ashlr/hub 3.12.0 → 3.14.0

package/dist/core/fleet/verify-check-run.js

@@ -0,0 +1,274 @@
+/**
+ * The host-verified required check `ashlr/verify` — 3.13.
+ *
+ * WHY: G7 needs GitHub to prove a fleet PR green. A repo without CI (GitHub
+ * Actions off, e.g. ashlrai/ashlr-hub) reports zero check runs, so every PR
+ * went to the owner lane (`no-required-checks` / `no-checks`); and on a
+ * local-enforcement repo "every check green" accepted ANY green check — a
+ * Vercel preview deploy alone passed G7. The fleet already runs the real
+ * suite on the exact tree in its mirror (G3, verifyAndPersistProposal); this
+ * module turns that result into a GitHub check run the ashlr-fleet App posts
+ * on the PR head, so rulesets can REQUIRE it (pinned to the App's id) and G7
+ * can demand it on local-enforcement repos.
+ *
+ * The one rule: `success` is posted ONLY when G3 passed AND the PR head
+ * commit GitHub holds has exactly the verified tree on exactly the verified
+ * base (its only parent). Anything else — G3 not passed, no command ran, a
+ * head whose tree or parent differs — is `failure`. Nothing here ever posts
+ * `neutral` or `skipped` (G7 counts those as green).
+ *
+ * Idempotent per head SHA: a commit id fixes its tree and parents forever, so
+ * the decision is a pure function of (head SHA, verified binding). The memo
+ * (`FleetPrMemo.verifyCheck`, in the agent-unreadable fleet merge state)
+ * remembers the run posted for a head; an unchanged decision makes no GitHub
+ * call, a changed one PATCHes that run, a new head gets a new run.
+ *
+ * The App id G7 trusts comes from GitHub's own answer to the App's
+ * authenticated create call (`app.id` on the returned run) — an installation
+ * token can only create runs as its own App, so no other App (a Vercel
+ * integration, an agent's token) can ever be mistaken for the fleet's.
+ *
+ * Needs the App permission `checks: write`. A 403 is reported as `permission`
+ * (not retryable); `ashlr authority setup` detects the missing permission and
+ * prints where to grant it.
+ */
+import { createHash } from 'node:crypto';
+import { scrubSecrets } from '../util/scrub.js';
+/** The check-run name rulesets require and G7 demands on local-enforcement repos. */
+export const ASHLR_VERIFY_CHECK_NAME = 'ashlr/verify';
+/** Where to grant the missing permission (the exact per-App URL is printed by `ashlr authority setup`). */
+export const VERIFY_CHECK_PERMISSION_HINT = "the ashlr-fleet GitHub App needs the permission 'Checks: Read and write' to post ashlr/verify — " +
+    'grant it in the App settings (Permissions & events), accept the new permission on each installation, ' +
+    'then run `ashlr authority setup` (it prints the exact links)';
+const SHA_RE = /^[0-9a-f]{40}$/;
+const NAME_WITH_OWNER_RE = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})\/[A-Za-z0-9._-]{1,100}$/;
+const MAX_COMMANDS = 20;
+const MAX_CMD_CHARS = 200;
+function sha256(text) {
+    return createHash('sha256').update(text, 'utf8').digest('hex');
+}
+function obj(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value) ? value : null;
+}
+function short(value) {
+    return value ? value.slice(0, 12) : 'none';
+}
+/** Bounded, secret-scrubbed commands (they come from the base tree's config, never from the diff). */
+export function normalizeVerifyCommands(commands) {
+    if (!Array.isArray(commands))
+        return [];
+    const out = [];
+    for (const command of commands.slice(0, MAX_COMMANDS)) {
+        const kind = typeof command?.kind === 'string' ? command.kind.replace(/[^a-z0-9_-]/gi, '').slice(0, 32) : '';
+        if (!kind)
+            continue;
+        const cmd = Array.isArray(command.cmd)
+            ? command.cmd.filter((part) => typeof part === 'string').slice(0, 32)
+                .map((part) => scrubSecrets(part).replace(/[\r\n`]/g, ' ').slice(0, MAX_CMD_CHARS))
+            : [];
+        out.push({ kind, cmd });
+    }
+    return out;
+}
+/** Digest of everything the decision depends on besides the (immutable) head commit itself. */
+export function verifyCheckInputsDigest(headSha, verified) {
+    return sha256(`ashlr:verify-check:v1\0${JSON.stringify({
+        headSha,
+        g3: verified.g3 ? { verdict: verified.g3.verdict, code: verified.g3.code } : null,
+        verifyDigest: verified.verifyDigest,
+        baseSha: verified.baseSha,
+        treeSha: verified.treeSha,
+        commands: verified.commands.map((c) => ({ kind: c.kind, cmd: [...c.cmd] })),
+    })}`);
+}
+/**
+ * PURE: success only for G3 pass + at least one command + the head being the
+ * verified tree on the verified base as its only parent. `head` is GitHub's
+ * view of the PR head commit.
+ */
+export function decideVerifyCheck(input) {
+    const { verified, head } = input;
+    const facts = [
+        `- Head: \`${input.headSha}\` (tree \`${head.tree}\`, parent ${head.parents.map((p) => `\`${p}\``).join(', ') || 'none'})`,
+        `- Verified tree: \`${verified.treeSha ?? 'none'}\``,
+        `- Verified base: \`${verified.baseSha ?? 'none'}\``,
+        `- Verify digest: \`${verified.verifyDigest ?? 'none'}\``,
+        `- G3: ${verified.g3 ? `${verified.g3.verdict} (${verified.g3.code})` : 'not run'}`,
+    ];
+    let failure = null;
+    if (!verified.g3 || verified.g3.verdict !== 'pass') {
+        failure = verified.g3
+            ? `G3 did not pass (${verified.g3.verdict}: ${verified.g3.code})`
+            : 'G3 never ran for this change (owner-lane PRs are not host-verified)';
+    }
+    else if (!verified.verifyDigest)
+        failure = 'no verification digest is bound to this change';
+    else if (!verified.treeSha || !SHA_RE.test(verified.treeSha) || !verified.baseSha || !SHA_RE.test(verified.baseSha)) {
+        failure = 'the verified tree / base is not recorded';
+    }
+    else if (verified.commands.length === 0)
+        failure = 'no verify command is recorded as having run';
+    else if (head.tree !== verified.treeSha)
+        failure = `the head's tree ${short(head.tree)} is not the verified tree ${short(verified.treeSha)}`;
+    else if (head.parents.length !== 1 || head.parents[0] !== verified.baseSha) {
+        failure = `the head's parent is not the verified base ${short(verified.baseSha)}`;
+    }
+    const commandLines = verified.commands.length === 0
+        ? ['_No verify command recorded._']
+        : verified.commands.map((c) => `- ${failure === null ? 'passed' : 'recorded'} · **${c.kind}**${c.cmd.length > 0 ? ` · \`${c.cmd.join(' ')}\`` : ''}`);
+    const text = [
+        '### Binding',
+        ...facts,
+        '',
+        '### Commands (ran on the exact tree in the fleet mirror, confined)',
+        ...commandLines,
+    ].join('\n');
+    if (failure !== null) {
+        return {
+            conclusion: 'failure',
+            title: 'Not host-verified',
+            summary: scrubSecrets(`ashlr did not verify this head: ${failure}.`).slice(0, 1_000),
+            text,
+        };
+    }
+    return {
+        conclusion: 'success',
+        title: `Host-verified: tree ${short(verified.treeSha)} on ${short(verified.baseSha)}`,
+        summary: `The fleet ran ${verified.commands.length} verify command(s) on exactly this tree (G3 ${verified.g3.code}); ` +
+            `this head is that tree on that base, so GitHub can require this check.`,
+        text,
+    };
+}
+async function call(deps, repo, method, suffix, body) {
+    let token;
+    try {
+        token = (await deps.token(repo)).token;
+    }
+    catch (error) {
+        return { status: 0, body: { message: `no installation token for ${repo}: ${scrubSecrets(error instanceof Error ? error.message : String(error)).slice(0, 200)}` } };
+    }
+    try {
+        return await deps.transport({ method, path: `/repos/${repo}${suffix}`, token, ...(body !== undefined ? { body } : {}) });
+    }
+    catch {
+        return { status: 0, body: null };
+    }
+}
+function replyMessage(reply) {
+    const message = obj(reply.body)?.['message'];
+    return reply.status === 0
+        ? 'GitHub did not answer (network error or timeout)'
+        : `GitHub answered HTTP ${reply.status}${typeof message === 'string' ? `: ${scrubSecrets(message).slice(0, 200)}` : ''}`;
+}
+function failed(reply, what) {
+    if (reply.status === 403) {
+        return { ok: false, code: 'permission', reason: `${what}: ${replyMessage(reply)}; ${VERIFY_CHECK_PERMISSION_HINT}`, retryable: false };
+    }
+    const retryable = reply.status === 0 || reply.status === 429 || reply.status >= 500;
+    return { ok: false, code: 'github', reason: `${what}: ${replyMessage(reply)}`, retryable };
+}
+/**
+ * Create or update the `ashlr/verify` check run on `headSha` from the
+ * ashlr-fleet App (through the host-merge transport and its installation
+ * token). Never throws.
+ */
+export async function postVerifyCheckRun(input, deps) {
+    if (!NAME_WITH_OWNER_RE.test(input.repo) || !SHA_RE.test(input.headSha)) {
+        return { ok: false, code: 'invalid', reason: 'repo or head SHA is malformed', retryable: false };
+    }
+    const inputsDigest = verifyCheckInputsDigest(input.headSha, input.verified);
+    const prior = input.prior ?? null;
+    if (prior && prior.headSha === input.headSha && prior.inputsDigest === inputsDigest) {
+        return { ok: true, memo: prior, action: 'unchanged' };
+    }
+    // GitHub's view of the head — the tree the check vouches for is the one GitHub holds.
+    const headReply = await call(deps, input.repo, 'GET', `/git/commits/${input.headSha}`);
+    if (headReply.status !== 200)
+        return failed(headReply, 'head commit read');
+    const headBody = obj(headReply.body);
+    const tree = obj(headBody?.['tree'])?.['sha'];
+    const parentsRaw = headBody?.['parents'];
+    if (headBody?.['sha'] !== input.headSha || typeof tree !== 'string' || !SHA_RE.test(tree) || !Array.isArray(parentsRaw)) {
+        return { ok: false, code: 'github', reason: 'GitHub returned a malformed head commit', retryable: true };
+    }
+    const parents = parentsRaw.map((p) => obj(p)?.['sha']).filter((p) => typeof p === 'string' && SHA_RE.test(p));
+    if (parents.length !== parentsRaw.length)
+        return { ok: false, code: 'github', reason: 'GitHub returned malformed head parents', retryable: true };
+    const decision = decideVerifyCheck({ headSha: input.headSha, head: { tree, parents }, verified: input.verified });
+    const common = {
+        external_id: inputsDigest,
+        status: 'completed',
+        conclusion: decision.conclusion,
+        completed_at: new Date(deps.nowMs()).toISOString(),
+        output: { title: decision.title, summary: decision.summary, text: decision.text.slice(0, 60_000) },
+    };
+    let reply = null;
+    let action = 'created';
+    if (prior && prior.headSha === input.headSha) {
+        reply = await call(deps, input.repo, 'PATCH', `/check-runs/${prior.runId}`, common);
+        action = 'updated';
+        // The run is gone (or not ours any more): post a fresh one instead.
+        if (reply.status === 404 || reply.status === 422)
+            reply = null;
+    }
+    if (reply === null) {
+        reply = await call(deps, input.repo, 'POST', '/check-runs', { name: ASHLR_VERIFY_CHECK_NAME, head_sha: input.headSha, ...common });
+        action = 'created';
+    }
+    if (reply.status !== 200 && reply.status !== 201)
+        return failed(reply, `check run ${action === 'created' ? 'create' : 'update'}`);
+    const run = obj(reply.body);
+    const runId = run?.['id'];
+    const appIdRaw = obj(run?.['app'])?.['id'];
+    const appId = typeof appIdRaw === 'number' && Number.isSafeInteger(appIdRaw) && appIdRaw > 0 ? String(appIdRaw) : null;
+    if (!Number.isSafeInteger(runId) || runId < 1 || appId === null ||
+        run?.['head_sha'] !== input.headSha || run?.['name'] !== ASHLR_VERIFY_CHECK_NAME || run?.['conclusion'] !== decision.conclusion) {
+        return { ok: false, code: 'github', reason: 'GitHub returned a check run that is not the one posted', retryable: true };
+    }
+    // A PATCH answered by a different App than the one that created the run is not ours.
+    if (action === 'updated' && prior && prior.appId !== appId) {
+        return { ok: false, code: 'github', reason: `the check run is attributed to App ${appId}, not ${prior.appId}`, retryable: false };
+    }
+    return {
+        ok: true,
+        action,
+        memo: {
+            headSha: input.headSha,
+            runId: runId,
+            appId,
+            conclusion: decision.conclusion,
+            inputsDigest,
+            at: new Date(deps.nowMs()).toISOString(),
+        },
+    };
+}
+/** The verified binding a fleet merge state carries (G3 row, verify digest, verified base / tree, commands). */
+export function verifiedBindingOf(state) {
+    const g3 = state.gates['G3'];
+    return {
+        g3: g3 ? { verdict: g3.verdict, code: g3.code } : null,
+        verifyDigest: state.verifyDigest,
+        baseSha: state.baseSha,
+        treeSha: state.treeSha,
+        commands: normalizeVerifyCommands(state.verifyCommands ?? []),
+    };
+}
+/**
+ * Post (or confirm) `ashlr/verify` on the open fleet PR's current head and
+ * remember it on `state.pr.verifyCheck`. The caller persists the state.
+ */
+export async function ensureFleetVerifyCheck(state, deps) {
+    const pr = state.pr;
+    if (!pr || pr.state !== 'open')
+        return { ok: false, code: 'invalid', reason: 'no open fleet PR', retryable: false };
+    const result = await postVerifyCheckRun({
+        repo: state.repo,
+        headSha: pr.headSha,
+        verified: verifiedBindingOf(state),
+        prior: pr.verifyCheck ?? null,
+    }, deps);
+    if (result.ok)
+        pr.verifyCheck = result.memo;
+    return result;
+}
+//# sourceMappingURL=verify-check-run.js.map

package/dist/core/fleet/verify-check-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-check-run.js","sourceRoot":"","sources":["../../../src/core/fleet/verify-check-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIhD,qFAAqF;AACrF,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC;AAEtD,2GAA2G;AAC3G,MAAM,CAAC,MAAM,4BAA4B,GACvC,kGAAkG;IAClG,uGAAuG;IACvG,8DAA8D,CAAC;AAEjE,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAChC,MAAM,kBAAkB,GAAG,4DAA4D,CAAC;AACxF,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,aAAa,GAAG,GAAG,CAAC;AA2C1B,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxH,CAAC;AAED,SAAS,KAAK,CAAC,KAAoB;IACjC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC7C,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,uBAAuB,CAAC,QAAyE;IAC/G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,OAAO,OAAO,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7G,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;YACpC,CAAC,CAAE,OAAO,CAAC,GAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;iBAC/F,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;YACvF,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,QAAyB;IAChF,OAAO,MAAM,CAAC,0BAA0B,IAAI,CAAC,SAAS,CAAC;QACrD,OAAO;QACP,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;QACjF,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;KAC5E,CAAC,EAAE,CAAC,CAAC;AACR,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAIjC;IACC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACjC,MAAM,KAAK,GAAG;QACZ,aAAa,KAAK,CAAC,OAAO,cAAc,IAAI,CAAC,IAAI,cAAc,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG;QAC1H,sBAAsB,QAAQ,CAAC,OAAO,IAAI,MAAM,IAAI;QACpD,sBAAsB,QAAQ,CAAC,OAAO,IAAI,MAAM,IAAI;QACpD,sBAAsB,QAAQ,CAAC,YAAY,IAAI,MAAM,IAAI;QACzD,SAAS,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE;KACpF,CAAC;IACF,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACnD,OAAO,GAAG,QAAQ,CAAC,EAAE;YACnB,CAAC,CAAC,oBAAoB,QAAQ,CAAC,EAAE,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,CAAC,IAAI,GAAG;YACjE,CAAC,CAAC,qEAAqE,CAAC;IAC5E,CAAC;SAAM,IAAI,CAAC,QAAQ,CAAC,YAAY;QAAE,OAAO,GAAG,gDAAgD,CAAC;SACzF,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACpH,OAAO,GAAG,0CAA0C,CAAC;IACvD,CAAC;SAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,6CAA6C,CAAC;SAC9F,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO;QAAE,OAAO,GAAG,mBAAmB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;SACxI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC3E,OAAO,GAAG,8CAA8C,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;IACpF,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QACjD,CAAC,CAAC,CAAC,+BAA+B,CAAC;QACnC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxJ,MAAM,IAAI,GAAG;QACX,aAAa;QACb,GAAG,KAAK;QACR,EAAE;QACF,oEAAoE;QACpE,GAAG,YAAY;KAChB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO;YACL,UAAU,EAAE,SAAS;YACrB,KAAK,EAAE,mBAAmB;YAC1B,OAAO,EAAE,YAAY,CAAC,mCAAmC,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;YACpF,IAAI;SACL,CAAC;IACJ,CAAC;IACD,OAAO;QACL,UAAU,EAAE,SAAS;QACrB,KAAK,EAAE,uBAAuB,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;QACrF,OAAO,EAAE,iBAAiB,QAAQ,CAAC,QAAQ,CAAC,MAAM,+CAA+C,QAAQ,CAAC,EAAG,CAAC,IAAI,KAAK;YACrH,wEAAwE;QAC1E,IAAI;KACL,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAU,EAAE,IAAY,EAAE,MAA4B,EAAE,MAAc,EAAE,IAAc;IACxG,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,6BAA6B,IAAI,KAAK,YAAY,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;IACtK,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,IAAI,GAAG,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAkB;IACtC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,kDAAkD;QACpD,CAAC,CAAC,wBAAwB,KAAK,CAAC,MAAM,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC7H,CAAC;AAED,SAAS,MAAM,CAAC,KAAkB,EAAE,IAAY;IAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,KAAK,YAAY,CAAC,KAAK,CAAC,KAAK,4BAA4B,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACzI,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC;IACpF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC;AAC7F,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAKxC,EAAE,IAAU;IACX,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,+BAA+B,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACnG,CAAC;IACD,MAAM,YAAY,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC;IAClC,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;QACpF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACxD,CAAC;IACD,sFAAsF;IACtF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACvF,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,QAAQ,EAAE,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,QAAQ,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,OAAO,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACxH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,yCAAyC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3G,CAAC;IACD,MAAM,OAAO,GAAI,UAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1I,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,wCAAwC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAClJ,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClH,MAAM,MAAM,GAAG;QACb,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE,WAAW;QACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,YAAY,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE;QAClD,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE;KACnG,CAAC;IACF,IAAI,KAAK,GAAuB,IAAI,CAAC;IACrC,IAAI,MAAM,GAA0B,SAAS,CAAC;IAC9C,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7C,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,eAAe,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QACpF,MAAM,GAAG,SAAS,CAAC;QACnB,oEAAoE;QACpE,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;YAAE,KAAK,GAAG,IAAI,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACnI,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,aAAa,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClI,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvH,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI;QACzE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,uBAAuB,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QAClI,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,wDAAwD,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1H,CAAC;IACD,qFAAqF;IACrF,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,sCAAsC,KAAK,SAAS,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACpI,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM;QACN,IAAI,EAAE;YACJ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAe;YACtB,KAAK;YACL,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,YAAY;YACZ,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE;SACzC;KACF,CAAC;AACJ,CAAC;AAED,gHAAgH;AAChH,MAAM,UAAU,iBAAiB,CAAC,KAAwB;IACxD,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO;QACL,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;QACtD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,uBAAuB,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAwB,EAAE,IAAU;IAC/E,MAAM,EAAE,GAAuB,KAAK,CAAC,EAAE,CAAC;IACxC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACpH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC;QACtC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC;QAClC,KAAK,EAAE,EAAE,CAAC,WAAW,IAAI,IAAI;KAC9B,EAAE,IAAI,CAAC,CAAC;IACT,IAAI,MAAM,CAAC,EAAE;QAAE,EAAE,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core/git.d.ts

@@ -14,11 +14,19 @@ import type { GitStatus } from './types.js';
  * where `.git` is a plain file containing a `gitdir:` pointer.
  */
 export declare function isRepo(dir: string): boolean;
+/** {@link isRepo} with the stat off the event loop. Never rejects. */
+export declare function isRepoAsync(dir: string): Promise<boolean>;
 /**
  * Returns a GitStatus snapshot for the repo at `repoPath`, or null when the
  * path is not a repo or git is unavailable.
  */
 export declare function getGitStatus(repoPath: string): GitStatus | null;
+/**
+ * {@link getGitStatus} without blocking the event loop (see `gitAsync`): the
+ * same four git commands and the same answer. After the branch read succeeds
+ * the other three run concurrently; they are independent reads. Never rejects.
+ */
+export declare function getGitStatusAsync(repoPath: string, signal?: AbortSignal): Promise<GitStatus | null>;
 /**
  * Resolve the repository's default branch name (the integration target for an
  * auto-merge). Resolution order:
@@ -32,6 +40,8 @@ export declare function getGitStatus(repoPath: string): GitStatus | null;
  * through to 'main'.
  */
 export declare function defaultBranch(repoPath: string): string;
+/** {@link defaultBranch} without blocking the event loop (see `gitAsync`): same commands, same answer. Never rejects. */
+export declare function defaultBranchAsync(repoPath: string, signal?: AbortSignal): Promise<string>;
 /**
  * Resolve the sole GitHub owner/repo authorized by every `origin` fetch and
  * effective push URL. Git applies fetch URLs as push destinations when no
@@ -50,6 +60,13 @@ export interface GitHubOriginAuthority {
 }
 /** Resolve the canonical identity and one exact effective push transport. */
 export declare function resolveGitHubOriginAuthorityDetails(repoPath: string): GitHubOriginAuthority | null;
+/**
+ * {@link resolveGitHubOriginAuthority} without blocking the event loop (see
+ * `gitAsync`): the same three git commands and the same fail-closed answer.
+ * The two URL reads run concurrently once the rewrite-rule check has passed.
+ * Never rejects.
+ */
+export declare function resolveGitHubOriginAuthorityAsync(repoPath: string, signal?: AbortSignal): Promise<string | null>;
 /**
  * Parses the `origin` remote URL of the repo at `repoPath` and extracts the
  * GitHub org (or user) name. Returns `{ remote, org }` where either may be

package/dist/core/git.js

@@ -7,9 +7,10 @@
  *  - Every execFileSync call gets a tight timeout (5 s) and stdio:'pipe'
  *    so a hung git never blocks the indexer.
  */
-import { execFileSync } from 'node:child_process';
+import { execFile, execFileSync } from 'node:child_process';
 import { existsSync, statSync } from 'node:fs';
-import { join } from 'node:path';
+import { stat } from 'node:fs/promises';
+import { join, resolve as resolvePath } from 'node:path';
 // ---------------------------------------------------------------------------
 // Internal helpers
 // ---------------------------------------------------------------------------
@@ -33,6 +34,36 @@ function git(cwd, args) {
         return null;
     }
 }
+/**
+ * `git()` without blocking the event loop: the same command, timeout and
+ * output rules (trimmed stdout; null on a non-zero exit, a timeout, a spawn
+ * failure or stdout over execFileSync's default 1 MiB), but the wait happens
+ * in libuv instead of on the calling thread.
+ *
+ * WHY. A server calling these helpers per request (the Verse sidecar's
+ * GET /api/verse/workspaces, up to seven git calls per root) must not freeze
+ * while git works in a folder macOS guards with a privacy prompt (~/Desktop,
+ * ~/Documents, removable volumes): execFileSync parks the whole process until
+ * the prompt is answered or the timeout fires, once per call.
+ *
+ * The repo is named with `git -C <dir>` and the child starts in `/`, NOT with
+ * `cwd: dir`: the spawn's chdir runs inside the parent's posix_spawn/fork
+ * call, so a cwd behind a pending prompt would park the calling thread in
+ * uv_spawn itself. `-C` moves that chdir into git, where waiting is harmless.
+ * `-C` is git's documented equivalent of starting in that directory. Stdin is
+ * closed at once, as execFileSync's is, so a command that would read it sees EOF.
+ */
+function gitAsync(cwd, args, signal) {
+    return new Promise((resolvePromise) => {
+        try {
+            const child = execFile('git', ['-C', resolvePath(cwd), ...args], { cwd: '/', timeout: GIT_TIMEOUT, encoding: 'utf8', maxBuffer: 1024 * 1024, ...(signal ? { signal } : {}) }, (error, stdout) => resolvePromise(error ? null : String(stdout).trim()));
+            child.stdin?.end();
+        }
+        catch {
+            resolvePromise(null);
+        }
+    });
+}
 /** Normalize one supported GitHub transport URL to lowercase owner/repo. */
 function canonicalGitHubDestination(remote) {
     const match = remote.match(/^https:\/\/(?:[^/?#@]+@)?github\.com(?::443)?\/([^/?#]+)\/([^/?#]+)$/i) ??
@@ -70,6 +101,22 @@ export function isRepo(dir) {
     const st = statSync(gitEntry, { throwIfNoEntry: false });
     return st !== undefined; // exists as either file or dir
 }
+/** {@link isRepo} with the stat off the event loop. Never rejects. */
+export async function isRepoAsync(dir) {
+    try {
+        await stat(join(dir, '.git'));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+// The commands getGitStatus runs, shared with getGitStatusAsync so both ask
+// git exactly the same questions.
+const STATUS_BRANCH_ARGS = ['rev-parse', '--abbrev-ref', 'HEAD'];
+const STATUS_PORCELAIN_ARGS = ['status', '--porcelain'];
+const STATUS_REV_COUNT_ARGS = ['rev-list', '--left-right', '--count', '@{u}...HEAD'];
+const STATUS_LAST_COMMIT_ARGS = ['log', '-1', '--format=%cI'];
 /**
  * Returns a GitStatus snapshot for the repo at `repoPath`, or null when the
  * path is not a repo or git is unavailable.
@@ -78,24 +125,39 @@ export function getGitStatus(repoPath) {
     if (!isRepo(repoPath))
         return null;
     // --- branch ---
-    const branchRaw = git(repoPath, ['rev-parse', '--abbrev-ref', 'HEAD']);
+    const branchRaw = git(repoPath, [...STATUS_BRANCH_ARGS]);
     if (branchRaw === null)
         return null; // git not available / not a real repo
+    return gitStatusFrom(branchRaw, git(repoPath, [...STATUS_PORCELAIN_ARGS]), git(repoPath, [...STATUS_REV_COUNT_ARGS]), git(repoPath, [...STATUS_LAST_COMMIT_ARGS]));
+}
+/**
+ * {@link getGitStatus} without blocking the event loop (see `gitAsync`): the
+ * same four git commands and the same answer. After the branch read succeeds
+ * the other three run concurrently; they are independent reads. Never rejects.
+ */
+export async function getGitStatusAsync(repoPath, signal) {
+    if (!(await isRepoAsync(repoPath)))
+        return null;
+    const branchRaw = await gitAsync(repoPath, STATUS_BRANCH_ARGS, signal);
+    if (branchRaw === null)
+        return null; // git not available / not a real repo
+    const [porcelain, revCount, lastCommit] = await Promise.all([
+        gitAsync(repoPath, STATUS_PORCELAIN_ARGS, signal),
+        gitAsync(repoPath, STATUS_REV_COUNT_ARGS, signal),
+        gitAsync(repoPath, STATUS_LAST_COMMIT_ARGS, signal),
+    ]);
+    return gitStatusFrom(branchRaw, porcelain, revCount, lastCommit);
+}
+/** The GitStatus four git outputs describe (a null output: that command failed). */
+function gitStatusFrom(branchRaw, porcelain, revCount, lastCommitRaw) {
     const branch = branchRaw || 'HEAD'; // detached HEAD shows 'HEAD'
     // --- dirty (number of changed lines in porcelain output) ---
-    const porcelain = git(repoPath, ['status', '--porcelain']);
     const dirty = porcelain === null || porcelain === ''
         ? 0
         : porcelain.split('\n').filter(Boolean).length;
     // --- ahead / behind upstream ---
     let ahead = 0;
     let behind = 0;
-    const revCount = git(repoPath, [
-        'rev-list',
-        '--left-right',
-        '--count',
-        '@{u}...HEAD',
-    ]);
     if (revCount !== null) {
         // Output is "<behind>\t<ahead>" (left=upstream, right=HEAD)
         const parts = revCount.split(/\s+/);
@@ -106,7 +168,7 @@ export function getGitStatus(repoPath) {
     }
     // If no upstream is configured, revCount is null → ahead/behind stay 0.
     // --- last commit ISO timestamp ---
-    const lastCommit = git(repoPath, ['log', '-1', '--format=%cI']) || null;
+    const lastCommit = lastCommitRaw || null;
     return { branch, dirty, ahead, behind, lastCommit };
 }
 /**
@@ -122,15 +184,28 @@ export function getGitStatus(repoPath) {
  * through to 'main'.
  */
 export function defaultBranch(repoPath) {
-    const sym = git(repoPath, ['symbolic-ref', '--short', 'refs/remotes/origin/HEAD']);
-    if (sym) {
-        // e.g. "origin/main" → "main"
-        const slash = sym.indexOf('/');
-        const name = slash >= 0 ? sym.slice(slash + 1) : sym;
-        if (name)
-            return name;
-    }
-    const cur = git(repoPath, ['rev-parse', '--abbrev-ref', 'HEAD']);
+    const fromOrigin = originHeadBranch(git(repoPath, [...ORIGIN_HEAD_ARGS]));
+    if (fromOrigin)
+        return fromOrigin;
+    return currentBranchOrMain(git(repoPath, [...STATUS_BRANCH_ARGS]));
+}
+/** {@link defaultBranch} without blocking the event loop (see `gitAsync`): same commands, same answer. Never rejects. */
+export async function defaultBranchAsync(repoPath, signal) {
+    const fromOrigin = originHeadBranch(await gitAsync(repoPath, ORIGIN_HEAD_ARGS, signal));
+    if (fromOrigin)
+        return fromOrigin;
+    return currentBranchOrMain(await gitAsync(repoPath, STATUS_BRANCH_ARGS, signal));
+}
+const ORIGIN_HEAD_ARGS = ['symbolic-ref', '--short', 'refs/remotes/origin/HEAD'];
+/** e.g. "origin/main" → "main"; null when there is no usable origin/HEAD. */
+function originHeadBranch(sym) {
+    if (!sym)
+        return null;
+    const slash = sym.indexOf('/');
+    const name = slash >= 0 ? sym.slice(slash + 1) : sym;
+    return name || null;
+}
+function currentBranchOrMain(cur) {
     if (cur && cur !== 'HEAD')
         return cur;
     return 'main';
@@ -151,13 +226,37 @@ export function resolveGitHubOriginAuthority(repoPath) {
 export function resolveGitHubOriginAuthorityDetails(repoPath) {
     // A resolved URL can be rewritten again when fed back to another git command.
     // Refuse every rewrite rule instead of trying to reason about chained config.
-    const rewriteRules = git(repoPath, [
-        'config', '--get-regexp', '^url\\..*\\.(insteadof|pushinsteadof)$',
-    ]);
+    const rewriteRules = git(repoPath, [...ORIGIN_REWRITE_RULE_ARGS]);
+    if (rewriteRules)
+        return null;
+    return originAuthorityFrom(git(repoPath, [...ORIGIN_FETCH_URL_ARGS]), git(repoPath, [...ORIGIN_PUSH_URL_ARGS]));
+}
+// The commands resolveGitHubOriginAuthorityDetails runs, shared with its async twin.
+const ORIGIN_REWRITE_RULE_ARGS = [
+    'config', '--get-regexp', '^url\\..*\\.(insteadof|pushinsteadof)$',
+];
+const ORIGIN_FETCH_URL_ARGS = ['remote', 'get-url', '--all', 'origin'];
+const ORIGIN_PUSH_URL_ARGS = ['remote', 'get-url', '--push', '--all', 'origin'];
+/**
+ * {@link resolveGitHubOriginAuthority} without blocking the event loop (see
+ * `gitAsync`): the same three git commands and the same fail-closed answer.
+ * The two URL reads run concurrently once the rewrite-rule check has passed.
+ * Never rejects.
+ */
+export async function resolveGitHubOriginAuthorityAsync(repoPath, signal) {
+    const rewriteRules = await gitAsync(repoPath, ORIGIN_REWRITE_RULE_ARGS, signal);
     if (rewriteRules)
         return null;
-    const fetchUrls = gitUrls(git(repoPath, ['remote', 'get-url', '--all', 'origin']));
-    const pushUrls = gitUrls(git(repoPath, ['remote', 'get-url', '--push', '--all', 'origin']));
+    const [fetchOut, pushOut] = await Promise.all([
+        gitAsync(repoPath, ORIGIN_FETCH_URL_ARGS, signal),
+        gitAsync(repoPath, ORIGIN_PUSH_URL_ARGS, signal),
+    ]);
+    return originAuthorityFrom(fetchOut, pushOut)?.nameWithOwner ?? null;
+}
+/** The authority two `remote get-url --all` outputs describe, or null (fail closed). */
+function originAuthorityFrom(fetchOut, pushOut) {
+    const fetchUrls = gitUrls(fetchOut);
+    const pushUrls = gitUrls(pushOut);
     if (!fetchUrls || !pushUrls)
         return null;
     const destinations = new Set();

package/dist/core/git.js.map

@@ -1 +1 @@
-{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/core/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,KAAK;AAEhC,MAAM,eAAe,GAAG,4CAA4C,CAAC;AACrE,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAE3C;;GAEG;AACH,SAAS,GAAG,CAAC,GAAW,EAAE,IAAc;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;YACpC,GAAG;YACH,OAAO,EAAE,WAAW;YACpB,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,0BAA0B,CAAC,MAAc;IAChD,MAAM,KAAK,GACT,MAAM,CAAC,KAAK,CAAC,uEAAuE,CAAC;QACrF,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QACnE,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,OAAO,CAAC,MAAqB;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9E,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,GAAW;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,wDAAwD;IACxD,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,+BAA+B;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,iBAAiB;IACjB,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,sCAAsC;IAC3E,MAAM,MAAM,GAAG,SAAS,IAAI,MAAM,CAAC,CAAC,6BAA6B;IAEjE,8DAA8D;IAC9D,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3D,MAAM,KAAK,GACT,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,EAAE;QACpC,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAEnD,kCAAkC;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE;QAC7B,UAAU;QACV,cAAc;QACd,SAAS;QACT,aAAa;KACd,CAAC,CAAC;IACH,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,4DAA4D;QAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAC5C,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,wEAAwE;IAExE,oCAAoC;IACpC,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,IAAI,IAAI,CAAC;IAExE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACnF,IAAI,GAAG,EAAE,CAAC;QACR,8BAA8B;QAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACrD,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,IAAI,GAAG,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,GAAG,CAAC;IAEtC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAAC,QAAgB;IAC3D,OAAO,mCAAmC,CAAC,QAAQ,CAAC,EAAE,aAAa,IAAI,IAAI,CAAC;AAC9E,CAAC;AASD,6EAA6E;AAC7E,MAAM,UAAU,mCAAmC,CAAC,QAAgB;IAClE,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ,EAAE;QACjC,QAAQ,EAAE,cAAc,EAAE,wCAAwC;KACnE,CAAC,CAAC;IACH,IAAI,YAAY;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5F,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,SAAS,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;QACjD,MAAM,WAAW,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAC9B,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5B,OAAO,aAAa,IAAI,OAAO;QAC7B,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,OAAO,EAAE;QAChF,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAI3C,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAEhD,4CAA4C;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAC7B,gDAAgD,CACjD,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAChD,CAAC;IAED,sCAAsC;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC7D,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,gEAAgE;IAChE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/core/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAGzD,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,KAAK;AAEhC,MAAM,eAAe,GAAG,4CAA4C,CAAC;AACrE,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAE3C;;GAEG;AACH,SAAS,GAAG,CAAC,GAAW,EAAE,IAAc;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;YACpC,GAAG;YACH,OAAO,EAAE,WAAW;YACpB,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,QAAQ,CAAC,GAAW,EAAE,IAAuB,EAAE,MAAoB;IAC1E,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;QACpC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,CACpB,KAAK,EACL,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,EACjC,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC3G,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CACxE,CAAC;YACF,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAC5E,SAAS,0BAA0B,CAAC,MAAc;IAChD,MAAM,KAAK,GACT,MAAM,CAAC,KAAK,CAAC,uEAAuE,CAAC;QACrF,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QACnE,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,OAAO,CAAC,MAAqB;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9E,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,GAAW;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,wDAAwD;IACxD,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,+BAA+B;AAC1D,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW;IAC3C,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,kCAAkC;AAClC,MAAM,kBAAkB,GAAsB,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;AACpF,MAAM,qBAAqB,GAAsB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAC3E,MAAM,qBAAqB,GAAsB,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AACxG,MAAM,uBAAuB,GAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;AAEjF;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,iBAAiB;IACjB,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC;IACzD,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,sCAAsC;IAC3E,OAAO,aAAa,CAClB,SAAS,EACT,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,qBAAqB,CAAC,CAAC,EACzC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,qBAAqB,CAAC,CAAC,EACzC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,uBAAuB,CAAC,CAAC,CAC5C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,MAAoB;IAC5E,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACvE,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,sCAAsC;IAC3E,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1D,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,EAAE,MAAM,CAAC;QACjD,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,EAAE,MAAM,CAAC;QACjD,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,EAAE,MAAM,CAAC;KACpD,CAAC,CAAC;IACH,OAAO,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACnE,CAAC;AAED,oFAAoF;AACpF,SAAS,aAAa,CACpB,SAAiB,EACjB,SAAwB,EACxB,QAAuB,EACvB,aAA4B;IAE5B,MAAM,MAAM,GAAG,SAAS,IAAI,MAAM,CAAC,CAAC,6BAA6B;IAEjE,8DAA8D;IAC9D,MAAM,KAAK,GACT,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,EAAE;QACpC,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAEnD,kCAAkC;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,4DAA4D;QAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAC5C,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,wEAAwE;IAExE,oCAAoC;IACpC,MAAM,UAAU,GAAG,aAAa,IAAI,IAAI,CAAC;IAEzC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC1E,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,OAAO,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,yHAAyH;AACzH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAgB,EAAE,MAAoB;IAC7E,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;IACxF,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,OAAO,mBAAmB,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,gBAAgB,GAAsB,CAAC,cAAc,EAAE,SAAS,EAAE,0BAA0B,CAAC,CAAC;AAEpG,6EAA6E;AAC7E,SAAS,gBAAgB,CAAC,GAAkB;IAC1C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACrD,OAAO,IAAI,IAAI,IAAI,CAAC;AACtB,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAkB;IAC7C,IAAI,GAAG,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,GAAG,CAAC;IACtC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAAC,QAAgB;IAC3D,OAAO,mCAAmC,CAAC,QAAQ,CAAC,EAAE,aAAa,IAAI,IAAI,CAAC;AAC9E,CAAC;AASD,6EAA6E;AAC7E,MAAM,UAAU,mCAAmC,CAAC,QAAgB;IAClE,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,wBAAwB,CAAC,CAAC,CAAC;IAClE,IAAI,YAAY;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,mBAAmB,CACxB,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,qBAAqB,CAAC,CAAC,EACzC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,oBAAoB,CAAC,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,wBAAwB,GAAsB;IAClD,QAAQ,EAAE,cAAc,EAAE,wCAAwC;CACnE,CAAC;AACF,MAAM,qBAAqB,GAAsB,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC1F,MAAM,oBAAoB,GAAsB,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAEnG;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,QAAgB,EAAE,MAAoB;IAC5F,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,EAAE,MAAM,CAAC,CAAC;IAChF,IAAI,YAAY;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5C,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,EAAE,MAAM,CAAC;QACjD,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,EAAE,MAAM,CAAC;KACjD,CAAC,CAAC;IACH,OAAO,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,aAAa,IAAI,IAAI,CAAC;AACvE,CAAC;AAED,wFAAwF;AACxF,SAAS,mBAAmB,CAAC,QAAuB,EAAE,OAAsB;IAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,SAAS,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;QACjD,MAAM,WAAW,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAC9B,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5B,OAAO,aAAa,IAAI,OAAO;QAC7B,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,OAAO,EAAE;QAChF,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAI3C,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAEhD,4CAA4C;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAC7B,gDAAgD,CACjD,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAChD,CAAC;IAED,sCAAsC;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC7D,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,gEAAgE;IAChE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAC/B,CAAC"}

package/dist/core/goals/open-goals.d.ts

@@ -0,0 +1,47 @@
+/**
+ * The ONE definition of an "open" (active) goal, shared by the Leader's
+ * evidence, the Leader's `active-goals` metric, and the digest / dashboard
+ * "goals in flight" list.
+ *
+ * WHY THIS FILE EXISTS (3.14 Leader reliability). The Leader counted open
+ * goals from `listGoalsDetailed()` and replaced the WHOLE goals section with
+ * `null` whenever the read was incomplete — while the digest counted from
+ * `listGoals()`, which silently drops unreadable files. Three goal files had
+ * a 1970 `updatedAt` (earlier than `createdAt`, which the store's record
+ * guard rejects), so every read was "degraded": the digest reported 18–21
+ * active goals while the Leader's model saw `GOALS AND FOCUS: null` and wrote
+ * "the fleet has zero active goals". Now both sides count the same readable
+ * goals with the same status rule, and an incomplete read is reported as a
+ * LOWER BOUND with the unreadable-file count — never as nothing.
+ *
+ * Pure (no I/O): callers pass the result of a goal-store read.
+ */
+import type { Goal, GoalStatus } from '../types.js';
+/**
+ * Statuses that occupy focus capacity. `planning` counts: a goal with no
+ * milestones yet is still open work the fleet has committed to.
+ */
+export declare const OPEN_GOAL_STATUSES: readonly GoalStatus[];
+export declare function isOpenGoal(goal: Pick<Goal, 'status'>): boolean;
+export interface GoalReadLike {
+    goals: readonly Goal[];
+    /** False when any goal file could not be read (or the listing was truncated). */
+    complete: boolean;
+    /** Goal files that could not be read; undefined = not reported by the source. */
+    unreadable?: number;
+}
+export interface OpenGoalsSummary {
+    /** Open goals among the READABLE ones — a lower bound when `complete` is false. */
+    open: number;
+    active: number;
+    planning: number;
+    paused: number;
+    /** Readable goals of every status. */
+    total: number;
+    complete: boolean;
+    /** Goal files the store could not read (0 when complete; null = unknown). */
+    unreadable: number | null;
+    /** The open goals themselves, in the source's order. */
+    openGoals: Goal[];
+}
+export declare function summarizeOpenGoals(read: GoalReadLike): OpenGoalsSummary;