@bluewombat/isolation-git 0.1.0

package/dist/reference.d.ts

@@ -0,0 +1,15 @@
+import type { ReferenceBackend } from "./types.js";
+/**
+ * A reference work line, for git: a remote and a branch on it; and, when the
+ * manager says so, how the system is named on what it commits (`author`) and
+ * which environment variable holds the token git authenticates with
+ * (`credentialEnv`). Both become the git environment of this run — see
+ * `run-env.ts` — so the commits and the pushes are the system's, not the
+ * machine's.
+ *
+ * The copy is a single-branch clone whose `origin` is that remote — the shape
+ * the git Publisher pushes to and the git Refresher reads from, and the one
+ * they assume without an option to say otherwise.
+ */
+export declare const gitReference: ReferenceBackend;
+//# sourceMappingURL=reference.d.ts.map

package/dist/reference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference.d.ts","sourceRoot":"","sources":["../src/reference.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAmB,gBAAgB,EAAsB,MAAM,YAAY,CAAC;AAaxF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,YAAY,EAAE,gBAmC1B,CAAC"}

package/dist/reference.js

@@ -0,0 +1,196 @@
+import { spawnSync } from "node:child_process";
+import { existsSync, mkdirSync, statSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { envFor, runEnv, setRunEnv } from "./run-env.js";
+const KEYS = ["remote", "branch", "credentialEnv", "author"];
+const REQUIRED = ["remote", "branch"];
+const REMOTE = "origin";
+/**
+ * A reference work line, for git: a remote and a branch on it; and, when the
+ * manager says so, how the system is named on what it commits (`author`) and
+ * which environment variable holds the token git authenticates with
+ * (`credentialEnv`). Both become the git environment of this run — see
+ * `run-env.ts` — so the commits and the pushes are the system's, not the
+ * machine's.
+ *
+ * The copy is a single-branch clone whose `origin` is that remote — the shape
+ * the git Publisher pushes to and the git Refresher reads from, and the one
+ * they assume without an option to say otherwise.
+ */
+export const gitReference = {
+    parse(raw) {
+        for (const key of Object.keys(raw)) {
+            if (!KEYS.includes(key)) {
+                return {
+                    ok: false,
+                    reason: `unknown key "${key}" — a git reference has ${KEYS.join(", ")}`,
+                };
+            }
+        }
+        const remote = nonEmptyString(raw, "remote");
+        if (!remote.ok) {
+            return remote;
+        }
+        const branch = nonEmptyString(raw, "branch");
+        if (!branch.ok) {
+            return branch;
+        }
+        const credentialEnv = optionalString(raw, "credentialEnv");
+        if (!credentialEnv.ok) {
+            return credentialEnv;
+        }
+        const author = optionalAuthor(raw);
+        if (!author.ok) {
+            return author;
+        }
+        const reference = {
+            remote: remote.value,
+            branch: branch.value,
+            credentialEnv: credentialEnv.value,
+            author: author.value,
+        };
+        setRunEnv(envFor(reference));
+        return parsed(reference);
+    },
+};
+function optionalString(raw, key) {
+    const value = raw[key];
+    if (value === undefined) {
+        return { ok: true, value: undefined };
+    }
+    if (typeof value !== "string" || value.trim().length === 0) {
+        return { ok: false, reason: `"${key}" must be a non-empty string` };
+    }
+    return { ok: true, value: value.trim() };
+}
+/** `author` is `{ name, email }`, both non-empty; anything else is refused. */
+function optionalAuthor(raw) {
+    const value = raw.author;
+    if (value === undefined) {
+        return { ok: true, value: undefined };
+    }
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        return { ok: false, reason: '"author" must be { name, email }' };
+    }
+    const { name, email } = value;
+    if (typeof name !== "string" || name.trim().length === 0) {
+        return { ok: false, reason: '"author.name" must be a non-empty string' };
+    }
+    if (typeof email !== "string" || email.trim().length === 0) {
+        return { ok: false, reason: '"author.email" must be a non-empty string' };
+    }
+    return { ok: true, value: { name: name.trim(), email: email.trim() } };
+}
+function nonEmptyString(raw, key) {
+    const value = raw[key];
+    if (value === undefined) {
+        return { ok: false, reason: `missing "${key}" — a git reference has ${REQUIRED.join(", ")}` };
+    }
+    if (typeof value !== "string" || value.trim().length === 0) {
+        return { ok: false, reason: `"${key}" must be a non-empty string` };
+    }
+    return { ok: true, value: value.trim() };
+}
+function parsed(reference) {
+    return {
+        ok: true,
+        summary: `${reference.remote} (${reference.branch})`,
+        target: reference.branch,
+        inspect: (path) => inspectCopy(reference, path),
+        materialize: async (path) => materializeCopy(reference, path),
+        env: runEnv(),
+    };
+}
+/**
+ * Whether what is at `path` is a copy of this reference: a git tree, whose
+ * `origin` is the remote, checked out on the branch. Anything else is somebody
+ * else's directory, and this system does not write over those.
+ */
+function inspectCopy(reference, path) {
+    if (!existsSync(path)) {
+        return { kind: "missing" };
+    }
+    if (!statSync(path).isDirectory()) {
+        return { kind: "mismatch", reason: `${path} exists and is not a directory` };
+    }
+    if (!existsSync(join(path, ".git"))) {
+        return { kind: "mismatch", reason: `${path} is not a git tree` };
+    }
+    const url = git(["remote", "get-url", REMOTE], path);
+    if (!url.ok) {
+        return { kind: "mismatch", reason: `${path} has no "${REMOTE}" remote` };
+    }
+    if (sameRemote(url.stdout.trim(), reference.remote) === false) {
+        return {
+            kind: "mismatch",
+            reason: `${path} has "${REMOTE}" at ${url.stdout.trim()}, not ${reference.remote}`,
+        };
+    }
+    const branch = git(["symbolic-ref", "--short", "HEAD"], path);
+    const checkedOut = branch.ok ? branch.stdout.trim() : "a detached HEAD";
+    if (checkedOut !== reference.branch) {
+        return {
+            kind: "mismatch",
+            reason: `${path} is on "${checkedOut}", not "${reference.branch}"`,
+        };
+    }
+    return { kind: "matches" };
+}
+/** `.git` and a trailing slash are spelling, not a different remote. */
+function sameRemote(a, b) {
+    const trim = (url) => url.replace(/\/+$/, "").replace(/\.git$/, "");
+    return trim(a) === trim(b);
+}
+/**
+ * A single-branch clone, after the branch has been shown to exist: a
+ * `git clone --branch` that misses fails with a message about a repository,
+ * not about the name that was wrong.
+ */
+function materializeCopy(reference, path) {
+    const listed = git(["ls-remote", "--heads", reference.remote]);
+    if (!listed.ok) {
+        return {
+            ok: false,
+            reason: `cannot reach ${reference.remote}: ${listed.stderr.trim() || "git ls-remote failed"}`,
+        };
+    }
+    const names = [];
+    for (const line of listed.stdout.split("\n")) {
+        const ref = line.split("\t")[1];
+        if (ref?.startsWith("refs/heads/")) {
+            names.push(ref.slice("refs/heads/".length));
+        }
+    }
+    if (!names.includes(reference.branch)) {
+        return {
+            ok: false,
+            reason: `${reference.remote} has no branch "${reference.branch}". It has: ${names.join(", ")}`,
+        };
+    }
+    mkdirSync(dirname(path), { recursive: true });
+    const cloned = git([
+        "clone",
+        "--branch",
+        reference.branch,
+        "--single-branch",
+        reference.remote,
+        path,
+    ]);
+    if (!cloned.ok) {
+        return { ok: false, reason: cloned.stderr.trim() || "git clone failed" };
+    }
+    return { ok: true };
+}
+function git(argv, cwd) {
+    const result = spawnSync("git", argv, {
+        encoding: "utf8",
+        env: { ...process.env, ...runEnv() },
+        ...(cwd === undefined ? {} : { cwd }),
+    });
+    return {
+        ok: result.status === 0,
+        stdout: result.stdout ?? "",
+        stderr: result.stderr ?? String(result.error ?? ""),
+    };
+}
+//# sourceMappingURL=reference.js.map

package/dist/reference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference.js","sourceRoot":"","sources":["../src/reference.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAoB,MAAM,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAG3E,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,CAAU,CAAC;AACtE,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC;AASxB;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,YAAY,GAAqB;IAC5C,KAAK,CAAC,GAAG;QACP,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,CAAE,IAA0B,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,gBAAgB,GAAG,2BAA2B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACxE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,SAAS,GAAiB;YAC9B,MAAM,EAAE,MAAM,CAAC,KAAK;YACpB,MAAM,EAAE,MAAM,CAAC,KAAK;YACpB,aAAa,EAAE,aAAa,CAAC,KAAK;YAClC,MAAM,EAAE,MAAM,CAAC,KAAK;SACrB,CAAC;QACF,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;CACF,CAAC;AAEF,SAAS,cAAc,CACrB,GAA4B,EAC5B,GAA0B;IAE1B,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG,8BAA8B,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;AAC3C,CAAC;AAED,+EAA+E;AAC/E,SAAS,cAAc,CACrB,GAA4B;IAE5B,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC;IACzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAgC,CAAC;IACzD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,cAAc,CACrB,GAA4B,EAC5B,GAA8B;IAE9B,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,GAAG,2BAA2B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IAChG,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG,8BAA8B,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,MAAM,CAAC,SAAuB;IACrC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,GAAG,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,GAAG;QACpD,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC;QAC/C,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC;QAC7D,GAAG,EAAE,MAAM,EAAE;KACd,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,SAAuB,EAAE,IAAY;IACxD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,gCAAgC,EAAE,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,YAAY,MAAM,UAAU,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9D,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,GAAG,IAAI,SAAS,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,SAAS,CAAC,MAAM,EAAE;SACnF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC;IACxE,IAAI,UAAU,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QACpC,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,GAAG,IAAI,WAAW,UAAU,WAAW,SAAS,CAAC,MAAM,GAAG;SACnE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC7B,CAAC;AAED,wEAAwE;AACxE,SAAS,UAAU,CAAC,CAAS,EAAE,CAAS;IACtC,MAAM,IAAI,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACpF,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CACtB,SAAuB,EACvB,IAAY;IAEZ,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,gBAAgB,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,sBAAsB,EAAE;SAC9F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,GAAG,EAAE,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,mBAAmB,SAAS,CAAC,MAAM,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC/F,CAAC;IACJ,CAAC;IACD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,GAAG,CAAC;QACjB,OAAO;QACP,UAAU;QACV,SAAS,CAAC,MAAM;QAChB,iBAAiB;QACjB,SAAS,CAAC,MAAM;QAChB,IAAI;KACL,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,kBAAkB,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,GAAG,CAAC,IAAc,EAAE,GAAY;IACvC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;QACpC,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,EAAE;QACpC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;KACtC,CAAC,CAAC;IACH,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;KACpD,CAAC;AACJ,CAAC"}

package/dist/run-env.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The environment every git this package spawns runs with — the identity the
+ * system commits under, and how it authenticates against the remote. Both
+ * come from the reference the manager named, read once by `reference.parse`
+ * at boot; every later `git` (clone, ls-remote, fold) picks them up here.
+ *
+ * Nothing is written to disk: the credential helper is an inline shell
+ * function that reads the token from the environment at the moment git asks,
+ * so `.git/config` never holds it and a `git` run by hand in the copy does
+ * not either.
+ */
+export type GitIdentity = {
+    name: string;
+    email: string;
+};
+/** What `reference.parse` decided for this run; empty until it ran. */
+export declare function runEnv(): Record<string, string>;
+export declare function setRunEnv(env: Record<string, string>): void;
+/** For tests: back to a process that inherits its own git identity. */
+export declare function clearRunEnv(): void;
+/**
+ * Build the environment for one reference. `credentialEnv` names the
+ * variable the token is in; the helper reads it when git asks, and refuses a
+ * terminal prompt so a missing token fails rather than hangs.
+ */
+export declare function envFor(input: {
+    author?: GitIdentity | undefined;
+    credentialEnv?: string | undefined;
+}): Record<string, string>;
+//# sourceMappingURL=run-env.d.ts.map

package/dist/run-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-env.d.ts","sourceRoot":"","sources":["../src/run-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAI1D,uEAAuE;AACvE,wBAAgB,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE/C;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAE3D;AAED,uEAAuE;AACvE,wBAAgB,WAAW,IAAI,IAAI,CAElC;AAED;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE;IAC5B,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAmBzB"}

package/dist/run-env.js

@@ -0,0 +1,49 @@
+/**
+ * The environment every git this package spawns runs with — the identity the
+ * system commits under, and how it authenticates against the remote. Both
+ * come from the reference the manager named, read once by `reference.parse`
+ * at boot; every later `git` (clone, ls-remote, fold) picks them up here.
+ *
+ * Nothing is written to disk: the credential helper is an inline shell
+ * function that reads the token from the environment at the moment git asks,
+ * so `.git/config` never holds it and a `git` run by hand in the copy does
+ * not either.
+ */
+let current = {};
+/** What `reference.parse` decided for this run; empty until it ran. */
+export function runEnv() {
+    return { ...current };
+}
+export function setRunEnv(env) {
+    current = { ...env };
+}
+/** For tests: back to a process that inherits its own git identity. */
+export function clearRunEnv() {
+    current = {};
+}
+/**
+ * Build the environment for one reference. `credentialEnv` names the
+ * variable the token is in; the helper reads it when git asks, and refuses a
+ * terminal prompt so a missing token fails rather than hangs.
+ */
+export function envFor(input) {
+    const env = {};
+    if (input.author !== undefined) {
+        env.GIT_AUTHOR_NAME = input.author.name;
+        env.GIT_AUTHOR_EMAIL = input.author.email;
+        env.GIT_COMMITTER_NAME = input.author.name;
+        env.GIT_COMMITTER_EMAIL = input.author.email;
+    }
+    if (input.credentialEnv !== undefined) {
+        // An empty helper first: it clears the list, so the machine's own helpers
+        // (a keychain with the operator's account) are not asked before ours.
+        env.GIT_CONFIG_COUNT = "2";
+        env.GIT_CONFIG_KEY_0 = "credential.helper";
+        env.GIT_CONFIG_VALUE_0 = "";
+        env.GIT_CONFIG_KEY_1 = "credential.helper";
+        env.GIT_CONFIG_VALUE_1 = `!f() { echo username=x-access-token; echo "password=\${${input.credentialEnv}}"; }; f`;
+        env.GIT_TERMINAL_PROMPT = "0";
+    }
+    return env;
+}
+//# sourceMappingURL=run-env.js.map

package/dist/run-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-env.js","sourceRoot":"","sources":["../src/run-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,IAAI,OAAO,GAA2B,EAAE,CAAC;AAEzC,uEAAuE;AACvE,MAAM,UAAU,MAAM;IACpB,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAA2B;IACnD,OAAO,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;AACvB,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,WAAW;IACzB,OAAO,GAAG,EAAE,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,KAGtB;IACC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;QACxC,GAAG,CAAC,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;QAC1C,GAAG,CAAC,kBAAkB,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;QAC3C,GAAG,CAAC,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;IAC/C,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtC,0EAA0E;QAC1E,sEAAsE;QACtE,GAAG,CAAC,gBAAgB,GAAG,GAAG,CAAC;QAC3B,GAAG,CAAC,gBAAgB,GAAG,mBAAmB,CAAC;QAC3C,GAAG,CAAC,kBAAkB,GAAG,EAAE,CAAC;QAC5B,GAAG,CAAC,gBAAgB,GAAG,mBAAmB,CAAC;QAC3C,GAAG,CAAC,kBAAkB,GAAG,0DAA0D,KAAK,CAAC,aAAa,UAAU,CAAC;QACjH,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/strategy.d.ts

@@ -0,0 +1,19 @@
+import type { IsolationStrategy } from "./types.js";
+/** The strategy as a config with no `isolationOptions` gets it. */
+export declare const strategy: IsolationStrategy;
+/**
+ * The strategy shaped by a Project's `workLine.isolationOptions`. Strict, like
+ * a manager's options: an unknown key or a wrong type stops `mason run`
+ * before it isolates anything.
+ *
+ * `exclude` replaces the default list (`.env`, `.env.*`) rather than adding
+ * to it: a Project that names its own list has looked at the default.
+ */
+export declare function createStrategy(raw: Record<string, unknown>): {
+    ok: true;
+    strategy: IsolationStrategy;
+} | {
+    ok: false;
+    reason: string;
+};
+//# sourceMappingURL=strategy.d.ts.map

package/dist/strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy.d.ts","sourceRoot":"","sources":["../src/strategy.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,mEAAmE;AACnE,eAAO,MAAM,QAAQ,EAAE,iBAKtB,CAAC;AAIF;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAuB3E"}

package/dist/strategy.js

@@ -0,0 +1,44 @@
+import { branchNameOf } from "./branch-name.js";
+import { DEFAULT_EXCLUDES } from "./copy-working-files.js";
+import { gitFold } from "./fold.js";
+import { createGitIsolation, gitIsolation } from "./isolation.js";
+import { gitReference } from "./reference.js";
+/** The strategy as a config with no `isolationOptions` gets it. */
+export const strategy = {
+    isolation: gitIsolation,
+    fold: gitFold,
+    reference: gitReference,
+    refOf: branchNameOf,
+};
+const OPTION_KEYS = new Set(["exclude"]);
+/**
+ * The strategy shaped by a Project's `workLine.isolationOptions`. Strict, like
+ * a manager's options: an unknown key or a wrong type stops `mason run`
+ * before it isolates anything.
+ *
+ * `exclude` replaces the default list (`.env`, `.env.*`) rather than adding
+ * to it: a Project that names its own list has looked at the default.
+ */
+export function createStrategy(raw) {
+    for (const key of Object.keys(raw)) {
+        if (!OPTION_KEYS.has(key)) {
+            return {
+                ok: false,
+                reason: `isolationOptions "${key}" is not one @bluewombat/isolation-git reads (known: ${[...OPTION_KEYS].join(", ")}).`,
+            };
+        }
+    }
+    const exclude = raw.exclude === undefined ? DEFAULT_EXCLUDES : raw.exclude;
+    if (!Array.isArray(exclude) ||
+        exclude.some((entry) => typeof entry !== "string" || entry.trim().length === 0)) {
+        return {
+            ok: false,
+            reason: 'isolationOptions "exclude" must be a list of non-empty path patterns.',
+        };
+    }
+    return {
+        ok: true,
+        strategy: { ...strategy, isolation: createGitIsolation({ exclude: [...exclude] }) },
+    };
+}
+//# sourceMappingURL=strategy.js.map

package/dist/strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy.js","sourceRoot":"","sources":["../src/strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C,mEAAmE;AACnE,MAAM,CAAC,MAAM,QAAQ,GAAsB;IACzC,SAAS,EAAE,YAAY;IACvB,IAAI,EAAE,OAAO;IACb,SAAS,EAAE,YAAY;IACvB,KAAK,EAAE,YAAY;CACpB,CAAC;AAEF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAEzC;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,GAA4B;IAE5B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,qBAAqB,GAAG,wDAAwD,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;aACxH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAC3E,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,EAC/E,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,uEAAuE;SAChF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE;KACpF,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,63 @@
+import type { FoldBackend } from "@bluewombat/integrator";
+import type { IsolationBackend } from "@bluewombat/isolator";
+/** What is at a path today, held against the reference it should be a copy of. */
+export type ReferenceCopyState = {
+    kind: "missing";
+} | {
+    kind: "matches";
+} | {
+    kind: "mismatch";
+    reason: string;
+};
+/**
+ * One reference work line, read and understood.
+ *
+ * Every method is bound to the value `parse` accepted, so nothing loosely typed
+ * travels past that one call.
+ */
+export type ParsedReference = {
+    ok: true;
+    /** One line for `mason doctor` and the trace. */
+    summary: string;
+    /** The work line Host offers work to, and the Refresher's `--target`. */
+    target: string;
+    /** Offline. */
+    inspect(path: string): ReferenceCopyState;
+    /** Fetches a copy to `path`. Network. */
+    materialize(path: string): Promise<{
+        ok: true;
+    } | {
+        ok: false;
+        reason: string;
+    }>;
+    /**
+     * What every git process of this run must carry: the identity the system
+     * commits under, and how it authenticates. Host hands it to the slots it
+     * spawns on the work line (Publisher, Refresher); this package applies it
+     * to its own git calls.
+     */
+    env: Record<string, string>;
+};
+/**
+ * How this strategy reads what a manager names as the reference work line.
+ *
+ * `parse` is strict — an unknown key, a missing one, a wrong type — because the
+ * words are agreed between two packages with nothing checking them at compile
+ * time. A mistake has to stop `mason run` before it writes anything.
+ */
+export type ReferenceBackend = {
+    parse(raw: Record<string, unknown>): ParsedReference | {
+        ok: false;
+        reason: string;
+    };
+};
+/** One Isolation method: how a Child is attached, and how it folds back. */
+export type IsolationStrategy = {
+    isolation: IsolationBackend;
+    fold: FoldBackend;
+    /** Absent: this strategy cannot keep a copy of a reference work line. */
+    reference?: ReferenceBackend;
+    /** The branch a Child isolated under `id` lives on — a Publisher's `--ref`. */
+    refOf: (id: string) => string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,kFAAkF;AAClF,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,IAAI,CAAC;IACT,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,eAAe;IACf,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAAC;IAC1C,yCAAyC;IACzC,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjF;;;;;OAKG;IACH,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CACtF,CAAC;AAEF,4EAA4E;AAC5E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,IAAI,EAAE,WAAW,CAAC;IAClB,yEAAyE;IACzE,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,+EAA+E;IAC/E,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,CAAC;CAC/B,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@bluewombat/isolation-git",
+  "version": "0.1.0",
+  "type": "module",
+  "description": "Isolation strategy: git worktree attach, three-way merge fold.",
+  "keywords": [
+    "mason",
+    "bluewombat",
+    "isolation",
+    "git"
+  ],
+  "license": "MIT",
+  "homepage": "https://github.com/tilap/bluewombat/tree/main/packages/plugins/isolation-git#readme",
+  "bugs": "https://github.com/tilap/bluewombat/issues",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/tilap/bluewombat.git",
+    "directory": "packages/plugins/isolation-git"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=24.20.0"
+  },
+  "scripts": {
+    "lint": "biome check .",
+    "format": "biome check --write .",
+    "tsc": "tsc --noEmit",
+    "test": "tsx --test $(find src -name '*.test.ts')",
+    "build": "tsc -p tsconfig.build.json"
+  },
+  "dependencies": {
+    "@bluewombat/integrator": "^0.1.0",
+    "@bluewombat/isolator": "^0.1.0"
+  }
+}