@claudexor/workspace 4.8.2 → 5.0.1

package/dist/git-result.js

@@ -0,0 +1,96 @@
+import { createHash } from "node:crypto";
+import { GIT_OBJECTS_V1, GitObjectResult, } from "@claudexor/schema";
+import { WorkspaceError } from "@claudexor/core";
+import { gitObserved } from "./git-observed.js";
+/**
+ * The canonical descriptor of digest v1 (E). Keys are fixed and sorted, values
+ * are lowercase object ids, so equal results always serialize to equal bytes.
+ */
+export function gitResultDescriptor(input) {
+    return JSON.stringify({
+        base_tree_oid: input.base_tree,
+        candidate_tree_oid: input.candidate_tree,
+        object_format: input.object_format,
+        schema: GIT_OBJECTS_V1,
+    });
+}
+export function gitResultDigest(input) {
+    return `sha256:${createHash("sha256").update(gitResultDescriptor(input), "utf8").digest("hex")}`;
+}
+export function makeGitObjectResult(input) {
+    return GitObjectResult.parse({
+        schema: GIT_OBJECTS_V1,
+        ...input,
+        digest: gitResultDigest(input),
+    });
+}
+/** A recorded result whose digest does not match its own descriptor is never trusted. */
+export function verifiedGitObjectResult(value) {
+    const parsed = GitObjectResult.safeParse(value);
+    if (!parsed.success)
+        return null;
+    return parsed.data.digest === gitResultDigest(parsed.data) ? parsed.data : null;
+}
+export async function repositoryObjectFormat(repo, env) {
+    const result = await gitObserved(repo, ["rev-parse", "--show-object-format"], {
+        env,
+        label: "rev-parse --show-object-format",
+        allowFailure: true,
+    });
+    const format = result.stdout.trim();
+    // Git before 2.29 has no --show-object-format and only knows SHA-1.
+    if (result.code !== 0 || format === "" || format === "--show-object-format")
+        return "sha1";
+    if (format === "sha1" || format === "sha256")
+        return format;
+    throw new WorkspaceError(`unsupported Git object format: ${format}`);
+}
+/** The object format of the repository holding `dir`; null when `dir` is in none. */
+export async function repositoryObjectFormatOrNull(dir) {
+    const inside = await gitObserved(dir, ["rev-parse", "--git-dir"], {
+        label: "rev-parse --git-dir",
+        allowFailure: true,
+    });
+    return inside.code === 0 ? repositoryObjectFormat(dir) : null;
+}
+/** The tree of a commit-ish (or a tree itself), resolved without reading blobs. */
+export async function treeOf(repo, rev, env) {
+    const result = await gitObserved(repo, ["rev-parse", "--verify", "--quiet", `${rev}^{tree}`], {
+        env,
+        label: "rev-parse tree",
+        allowFailure: true,
+    });
+    const tree = result.stdout.trim();
+    if (result.code !== 0 || !/^[0-9a-f]{40,64}$/.test(tree))
+        throw new WorkspaceError(`not a tree-ish: ${rev}`);
+    return tree;
+}
+const SNAPSHOT_SUBJECT = "claudexor: dirty worktree snapshot (incl. untracked)";
+const SNAPSHOT_AUTHOR = "Claudexor <noreply@claudexor.local>";
+/**
+ * The user commit a captured base relies on: a Claudexor dirty snapshot is not
+ * referenced by any user ref, so its own closure must enter the project store
+ * and its single parent is the boundary; any other commit is its own boundary.
+ */
+export async function storeBoundaryCommit(repo, commit, env) {
+    if (!commit)
+        return null;
+    const shown = await gitObserved(repo, ["cat-file", "commit", commit], {
+        env,
+        label: "cat-file commit",
+        allowFailure: true,
+    });
+    if (shown.code !== 0)
+        return null;
+    const [header = "", ...body] = shown.stdout.split("\n\n");
+    const parents = header
+        .split("\n")
+        .filter((line) => line.startsWith("parent "))
+        .map((line) => line.slice("parent ".length).trim());
+    const author = header.split("\n").find((line) => line.startsWith("author "));
+    const snapshot = parents.length === 1 &&
+        author?.startsWith(`author ${SNAPSHOT_AUTHOR} `) === true &&
+        body.join("\n\n").trim() === SNAPSHOT_SUBJECT;
+    return snapshot ? parents[0] : commit;
+}
+//# sourceMappingURL=git-result.js.map

package/dist/git-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-result.js","sourceRoot":"","sources":["../src/git-result.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,cAAc,EACd,eAAe,GAGhB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAInC;IACC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,aAAa,EAAE,KAAK,CAAC,SAAS;QAC9B,kBAAkB,EAAE,KAAK,CAAC,cAAc;QACxC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,MAAM,EAAE,cAAc;KACvB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAI/B;IACC,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAMnC;IACC,OAAO,eAAe,CAAC,KAAK,CAAC;QAC3B,MAAM,EAAE,cAAc;QACtB,GAAG,KAAK;QACR,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAY,EACZ,GAA4B;IAE5B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,sBAAsB,CAAC,EAAE;QAC5E,GAAG;QACH,KAAK,EAAE,gCAAgC;QACvC,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpC,oEAAoE;IACpE,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,sBAAsB;QAAE,OAAO,MAAM,CAAC;IAC3F,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC5D,MAAM,IAAI,cAAc,CAAC,kCAAkC,MAAM,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,GAAW;IAC5D,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE;QAChE,KAAK,EAAE,qBAAqB;QAC5B,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAY,EACZ,GAAW,EACX,GAA4B;IAE5B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,SAAS,CAAC,EAAE;QAC5F,GAAG;QACH,KAAK,EAAE,gBAAgB;QACvB,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QACtD,MAAM,IAAI,cAAc,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,gBAAgB,GAAG,sDAAsD,CAAC;AAChF,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAE9D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAY,EACZ,MAAqB,EACrB,GAA4B;IAE5B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;QACpE,GAAG;QACH,KAAK,EAAE,iBAAiB;QACxB,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM;SACnB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7E,MAAM,QAAQ,GACZ,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,MAAM,EAAE,UAAU,CAAC,UAAU,eAAe,GAAG,CAAC,KAAK,IAAI;QACzD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,gBAAgB,CAAC;IAChD,OAAO,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AACzC,CAAC"}

package/dist/git-run.d.ts

@@ -1,3 +1,13 @@
+/** A private operation decides from the bytes, whatever the user's configuration
+ * says: `core.ignoreStat` would mark every entry Git adds assume-valid, so a
+ * refresh and `diff-files` skip its content, and a filesystem monitor answers
+ * from its own last observation instead of looking. */
+export declare const STAT_TRUST_OFF: string[];
+/** A scratch index is always written whole: never as a split index (whose
+ * shared part lives in the user's Git directory) and never sparse. It trusts no
+ * stat shortcut, and an index copied from the user's carries over neither its
+ * monitor state nor its untracked cache (both are dropped as it is read). */
+export declare const SCRATCH_INDEX_CONFIG: string[];
 /** BYTE-FAITHFUL git capture: raw buffers, never readline — CR
  * bytes in CRLF diff content survive, and no trailing newline is fabricated
  * (trim-based consumers like revParse are unaffected: git ends its own
@@ -7,6 +17,7 @@ export declare function git(repo: string, args: string[], input?: string): Promi
     stdout: string;
     stderr: string;
 }>;
+export declare function revParse(repo: string, ref: string): Promise<string>;
 /** `git` with extra environment (e.g. a scratch GIT_INDEX_FILE for snapshots). */
 export declare function gitEnv(repo: string, args: string[], env: Record<string, string>, input?: string): Promise<{
     code: number | null;

package/dist/git-run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git-run.d.ts","sourceRoot":"","sources":["../src/git-run.ts"],"names":[],"mappings":"AAOA;;;sBAGsB;AACtB,wBAAsB,GAAG,CACvB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAQlE;AAED,kFAAkF;AAClF,wBAAsB,MAAM,CAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CASlE;AAED;;gEAEgE;AAChE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAQrE"}
+{"version":3,"file":"git-run.d.ts","sourceRoot":"","sources":["../src/git-run.ts"],"names":[],"mappings":"AAOA;;;uDAGuD;AACvD,eAAO,MAAM,cAAc,UAAgE,CAAC;AAE5F;;;6EAG6E;AAC7E,eAAO,MAAM,oBAAoB,UAQhC,CAAC;AAEF;;;sBAGsB;AACtB,wBAAsB,GAAG,CACvB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAQlE;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIzE;AAED,kFAAkF;AAClF,wBAAsB,MAAM,CAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CASlE;AAED;;gEAEgE;AAChE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAQrE"}

package/dist/git-run.js

@@ -1,4 +1,22 @@
 import { assertCaptureComplete, parseUnifiedDiff, runCaptureRaw, WorkspaceError, } from "@claudexor/core";
+/** A private operation decides from the bytes, whatever the user's configuration
+ * says: `core.ignoreStat` would mark every entry Git adds assume-valid, so a
+ * refresh and `diff-files` skip its content, and a filesystem monitor answers
+ * from its own last observation instead of looking. */
+export const STAT_TRUST_OFF = ["-c", "core.ignoreStat=false", "-c", "core.fsmonitor=false"];
+/** A scratch index is always written whole: never as a split index (whose
+ * shared part lives in the user's Git directory) and never sparse. It trusts no
+ * stat shortcut, and an index copied from the user's carries over neither its
+ * monitor state nor its untracked cache (both are dropped as it is read). */
+export const SCRATCH_INDEX_CONFIG = [
+    "-c",
+    "core.splitIndex=false",
+    "-c",
+    "index.sparse=false",
+    ...STAT_TRUST_OFF,
+    "-c",
+    "core.untrackedCache=false",
+];
 /** BYTE-FAITHFUL git capture: raw buffers, never readline — CR
  * bytes in CRLF diff content survive, and no trailing newline is fabricated
  * (trim-based consumers like revParse are unaffected: git ends its own
@@ -12,6 +30,12 @@ export async function git(repo, args, input) {
     assertCaptureComplete(r);
     return r;
 }
+export async function revParse(repo, ref) {
+    const r = await git(repo, ["rev-parse", ref]);
+    if (r.code !== 0)
+        throw new WorkspaceError(`git rev-parse ${ref} failed: ${r.stderr.trim()}`);
+    return r.stdout.trim();
+}
 /** `git` with extra environment (e.g. a scratch GIT_INDEX_FILE for snapshots). */
 export async function gitEnv(repo, args, env, input) {
     const r = await runCaptureRaw("git", ["-C", repo, ...args], {

package/dist/git-run.js.map

@@ -1 +1 @@
-{"version":3,"file":"git-run.js","sourceRoot":"","sources":["../src/git-run.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,cAAc,GACf,MAAM,iBAAiB,CAAC;AAEzB;;;sBAGsB;AACtB,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,IAAY,EACZ,IAAc,EACd,KAAc;IAEd,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE;QAC1D,SAAS,EAAE,MAAM;QACjB,KAAK;QACL,cAAc,EAAE,MAAM;KACvB,CAAC,CAAC;IACH,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAY,EACZ,IAAc,EACd,GAA2B,EAC3B,KAAc;IAEd,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE;QAC1D,SAAS,EAAE,MAAM;QACjB,GAAG;QACH,KAAK;QACL,cAAc,EAAE,MAAM;KACvB,CAAC,CAAC;IACH,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;gEAEgE;AAChE,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa;IAC7D,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjF,MAAM,IAAI,cAAc,CACtB,GAAG,KAAK,+CAA+C,KAAK,sCAAsC,CACnG,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"git-run.js","sourceRoot":"","sources":["../src/git-run.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,cAAc,GACf,MAAM,iBAAiB,CAAC;AAEzB;;;uDAGuD;AACvD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,sBAAsB,CAAC,CAAC;AAE5F;;;6EAG6E;AAC7E,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,IAAI;IACJ,uBAAuB;IACvB,IAAI;IACJ,oBAAoB;IACpB,GAAG,cAAc;IACjB,IAAI;IACJ,2BAA2B;CAC5B,CAAC;AAEF;;;sBAGsB;AACtB,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,IAAY,EACZ,IAAc,EACd,KAAc;IAEd,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE;QAC1D,SAAS,EAAE,MAAM;QACjB,KAAK;QACL,cAAc,EAAE,MAAM;KACvB,CAAC,CAAC;IACH,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,GAAW;IACtD,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,iBAAiB,GAAG,YAAY,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9F,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAY,EACZ,IAAc,EACd,GAA2B,EAC3B,KAAc;IAEd,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE;QAC1D,SAAS,EAAE,MAAM;QACjB,GAAG;QACH,KAAK;QACL,cAAc,EAAE,MAAM;KACvB,CAAC,CAAC;IACH,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;gEAEgE;AAChE,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa;IAC7D,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjF,MAAM,IAAI,cAAc,CACtB,GAAG,KAAK,+CAA+C,KAAK,sCAAsC,CACnG,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/git-snapshot.d.ts

@@ -0,0 +1,40 @@
+type GitEnv = Record<string, string>;
+/** Entries of an index the user marked so that Git skips their bytes: assume-unchanged
+ * (a lowercase `ls-files -v` tag) and skip-worktree (`S`). A name stdin cannot carry
+ * back to Git (not valid UTF-8) is only counted. */
+export interface MarkedEntries {
+    assumed: string[];
+    skipped: string[];
+    unnamed: number;
+    /** Merged (stage 0) entries of the wanted paths, as `--index-info` lines. */
+    held: {
+        path: string;
+        info: string;
+    }[];
+}
+/** The marked entries of the index `env` names, read as a stream (only marked ones are
+ * kept), and the entries of `wanted` paths in the same pass. */
+export declare function markedEntries(top: string, env: GitEnv, wanted?: ReadonlySet<string>): Promise<MarkedEntries>;
+/**
+ * Capture the full dirty working tree (tracked AND untracked) as a dangling
+ * commit; null if clean. Plain `git stash create` captures only TRACKED
+ * changes, silently dropping the user's new-but-unstaged files from the run's
+ * base. We instead seed a scratch index from HEAD, `add -A` into it (which
+ * respects .gitignore, so run artifacts stay out), and commit-tree the result.
+ * `objects`: where the snapshot's objects go instead (a dry run's scratch).
+ * `exact`: paths the caller decides on, which a clean answer has read by content
+ * ({@link snapshotStatus}); a dirty snapshot reads every file anyway.
+ */
+export declare function stashCreate(repo: string, objects?: GitEnv, exact?: readonly string[]): Promise<string | null>;
+/**
+ * Capture the CURRENT working-tree state (tracked + untracked, minus `.claudexor`)
+ * as a commit sha — always returns one. Dirty trees become a dangling snapshot
+ * commit (via `stashCreate`); a clean tree resolves to HEAD. This is the per-turn
+ * diff base for in-place threads: snapshot at turn start, snapshot at turn end,
+ * `diffTrees(base, end)` yields exactly that turn's net change (pre-existing dirty
+ * state is folded into `base`, so the reviewer never sees prior turns' edits).
+ * `exact`: as for {@link stashCreate}.
+ */
+export declare function snapshotTree(repo: string, exact?: readonly string[]): Promise<string>;
+export {};
+//# sourceMappingURL=git-snapshot.d.ts.map

package/dist/git-snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-snapshot.d.ts","sourceRoot":"","sources":["../src/git-snapshot.ts"],"names":[],"mappings":"AAqBA,KAAK,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAIrC;;oDAEoD;AACpD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACxC;AAED;gEACgE;AAChE,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,MAAM,GAAE,WAAW,CAAC,MAAM,CAAa,GACtC,OAAO,CAAC,aAAa,CAAC,CA6CxB;AA4FD;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,MAAW,EACpB,KAAK,GAAE,SAAS,MAAM,EAAO,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmFxB;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,SAAS,MAAM,EAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAG/F"}

package/dist/git-snapshot.js

@@ -0,0 +1,238 @@
+import { copyFileSync, existsSync, mkdtempSync, renameSync, rmSync, statSync, utimesSync, } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { WorkspaceError } from "@claudexor/core";
+import { lstatPresent } from "./fs-presence.js";
+import { nestedRepositoryExcludes, untrackedNestedRepositories, } from "./git-nested-repositories.js";
+import { diskProgress, gitObserved, proofStallMs, treeBlobBytes } from "./git-observed.js";
+import { git, gitEnv, revParse, SCRATCH_INDEX_CONFIG } from "./git-run.js";
+import { outsideSparseCheckout } from "./object-sparse.js";
+const STRICT_UTF8 = new TextDecoder("utf-8", { fatal: true });
+/** The marked entries of the index `env` names, read as a stream (only marked ones are
+ * kept), and the entries of `wanted` paths in the same pass. */
+export async function markedEntries(top, env, wanted = new Set()) {
+    const marked = { assumed: [], skipped: [], unnamed: 0, held: [] };
+    const staged = wanted.size > 0; // `-s`: "<tag> <mode> <oid> <stage>\t<path>"
+    const take = (record) => {
+        const tag = record[0] ?? 0;
+        const assumed = tag >= 0x61 && tag <= 0x7a; // a lowercase tag
+        const skipped = tag === 0x53 || tag === 0x73; // S or s
+        const tab = staged ? record.indexOf(0x09) : 1;
+        if ((!assumed && !skipped && !staged) || record.length < 3 || tab < 1)
+            return;
+        let path;
+        try {
+            path = STRICT_UTF8.decode(record.subarray(tab + 1));
+        }
+        catch {
+            if (assumed || skipped)
+                marked.unnamed += 1;
+            return;
+        }
+        if (assumed)
+            marked.assumed.push(path);
+        if (skipped)
+            marked.skipped.push(path);
+        if (staged && wanted.has(path)) {
+            const [mode, oid, stage] = record.subarray(2, tab).toString("latin1").split(" ");
+            if (stage === "0")
+                marked.held.push({ path, info: `${mode} ${oid}\t${path}` });
+        }
+    };
+    let carry = Buffer.alloc(0);
+    await gitObserved(top, [...SCRATCH_INDEX_CONFIG, "ls-files", "-v", ...(staged ? ["-s"] : []), "-z"], {
+        env,
+        label: "ls-files -v (snapshot)",
+        stdout: {
+            write(chunk) {
+                const data = carry.length > 0 ? Buffer.concat([carry, chunk]) : chunk;
+                let start = 0;
+                for (let end = data.indexOf(0); end !== -1; end = data.indexOf(0, start)) {
+                    take(data.subarray(start, end));
+                    start = end + 1;
+                }
+                carry = Buffer.from(data.subarray(start));
+            },
+            end: () => "",
+        },
+    });
+    return marked;
+}
+/**
+ * The snapshot's clean check: `git status`. No stat shortcut of the user's
+ * configuration applies (`STAT_TRUST_OFF`, no untracked cache), and an entry the
+ * user marked assume-unchanged or skip-worktree is compared like any other in a
+ * private copy of the index, so the check answers what the snapshot's `add -A`
+ * would record. Only an absent skip-worktree file the sparse-checkout patterns
+ * leave out stays as the index has it: a sparse checkout leaves such a file absent
+ * on purpose, and `add -A` skips it too. A marked file that is gone otherwise is a
+ * deletion (a clean check that trusted the mark held HEAD's blob where a dirty
+ * worktree's snapshot held the deletion). `git status` still trusts the index's stat
+ * cache for every other file, as the user's own does: an edit that kept a file's
+ * size and times (with `core.checkStat=minimal` and `core.trustctime=false`, a
+ * restored mtime is enough) reads as unchanged. So the `exact` paths, the ones the
+ * caller decides on, are re-added to the private copy without stat data, and the
+ * check reads exactly those files (bar the out-of-pattern absences above) by
+ * content. The copy keeps the user's index time, so an entry Git would compare as
+ * racily clean is still compared. The user's own index is never written. Null: the
+ * comparison could not be set up (or this Git cannot evaluate the sparse
+ * patterns), so the caller reads every file instead.
+ */
+async function snapshotStatus(repo, objects, scratchDir, exact) {
+    const env = { ...objects, GIT_OPTIONAL_LOCKS: "0" };
+    const top = await gitEnv(repo, ["rev-parse", "--show-toplevel"], env);
+    if (top.code !== 0)
+        throw new WorkspaceError(`snapshot top level failed: ${top.stderr.trim()}`);
+    const root = top.stdout.trim();
+    const marked = await markedEntries(root, env, new Set(exact));
+    // A parent that became a file (ENOTDIR) means the marked file is not there.
+    const compared = [];
+    const absent = [];
+    for (const path of marked.skipped)
+        (lstatPresent(join(root, path)) === undefined ? absent : compared).push(path);
+    let kept = new Set();
+    if (absent.length > 0) {
+        const excluded = await outsideSparseCheckout(root, absent, env);
+        if (excluded === null)
+            return null;
+        kept = new Set(excluded);
+        compared.push(...absent.filter((path) => !kept.has(path)));
+    }
+    const reread = marked.held.filter(({ path }) => !kept.has(path));
+    if (marked.assumed.length > 0 || compared.length > 0 || marked.unnamed > 0 || reread.length > 0) {
+        if (marked.unnamed > 0)
+            return null;
+        const located = await gitEnv(root, ["rev-parse", "--path-format=absolute", "--git-path", "index"], env);
+        const userIndex = located.code === 0 ? located.stdout.trim() : "";
+        if (!userIndex || !existsSync(userIndex))
+            return null;
+        const copy = join(scratchDir, "status-index");
+        const { atimeMs, mtimeMs } = statSync(userIndex);
+        copyFileSync(userIndex, `${copy}.copy`);
+        // Git compares an entry's times to its index file's own: never later than the user's.
+        utimesSync(`${copy}.copy`, atimeMs / 1000, Math.floor(mtimeMs) / 1000);
+        renameSync(`${copy}.copy`, copy);
+        env["GIT_INDEX_FILE"] = copy;
+        for (const [flag, paths] of [
+            ["--no-assume-unchanged", marked.assumed],
+            ["--no-skip-worktree", compared],
+        ]) {
+            if (paths.length === 0)
+                continue;
+            const cleared = await gitEnv(root, [...SCRATCH_INDEX_CONFIG, "update-index", flag, "-z", "--stdin"], env, `${paths.join("\0")}\0`);
+            if (cleared.code !== 0)
+                return null;
+        }
+        if (reread.length > 0) {
+            const unstated = await gitEnv(root, [...SCRATCH_INDEX_CONFIG, "update-index", "-z", "--index-info"], env, reread.map(({ info }) => `${info}\0`).join(""));
+            if (unstated.code !== 0)
+                return null;
+        }
+    }
+    return gitEnv(repo, [...SCRATCH_INDEX_CONFIG, "status", "--porcelain=v1", "-z", "--untracked-files=all"], env);
+}
+/**
+ * Capture the full dirty working tree (tracked AND untracked) as a dangling
+ * commit; null if clean. Plain `git stash create` captures only TRACKED
+ * changes, silently dropping the user's new-but-unstaged files from the run's
+ * base. We instead seed a scratch index from HEAD, `add -A` into it (which
+ * respects .gitignore, so run artifacts stay out), and commit-tree the result.
+ * `objects`: where the snapshot's objects go instead (a dry run's scratch).
+ * `exact`: paths the caller decides on, which a clean answer has read by content
+ * ({@link snapshotStatus}); a dirty snapshot reads every file anyway.
+ */
+export async function stashCreate(repo, objects = {}, exact = []) {
+    // Unique per call: concurrent envelope creates (a best_of_n wave) must never
+    // collide on the scratch index (same pid + same millisecond is real). It lives
+    // in the OS temp dir, NOT under `<repo>/.git` — in a linked worktree `.git` is
+    // a FILE (gitdir pointer), so a scratch path there fails (review #8).
+    const scratchDir = mkdtempSync(join(tmpdir(), "claudexor-snapshot-index-"));
+    const tmpIndex = join(scratchDir, "index");
+    const env = {
+        ...objects,
+        GIT_INDEX_FILE: tmpIndex,
+        GIT_AUTHOR_NAME: "Claudexor",
+        GIT_AUTHOR_EMAIL: "noreply@claudexor.local",
+        GIT_COMMITTER_NAME: "Claudexor",
+        GIT_COMMITTER_EMAIL: "noreply@claudexor.local",
+    };
+    try {
+        // NUL form is filename-faithful (newlines, quotes and whitespace are legal
+        // path bytes). Runtime is external, so every reported path is user state.
+        const status = await snapshotStatus(repo, objects, scratchDir, exact);
+        if (status && status.code !== 0)
+            throw new WorkspaceError(`snapshot status failed: ${status.stderr.trim()}`);
+        if (status && status.stdout.length === 0)
+            return null;
+        const head = await git(repo, ["rev-parse", "HEAD"]);
+        if (head.code !== 0)
+            throw new WorkspaceError(`snapshot rev-parse HEAD failed: ${head.stderr.trim()}`);
+        const headSha = head.stdout.trim();
+        const read = await gitEnv(repo, [...SCRATCH_INDEX_CONFIG, "read-tree", "HEAD"], env);
+        if (read.code !== 0)
+            throw new WorkspaceError(`snapshot read-tree failed: ${read.stderr.trim()}`);
+        // Bare add runs only against the scratch index. It respects the project's
+        // own ignore policy without changing the live index. `.claudexor/` is not a
+        // runtime exception in v2: tracked or untracked project config is user state.
+        // An undeclared nested repository stays out, as in the candidate capture:
+        // `add` refuses one without a commit and would freeze one with a commit as
+        // a commit link (`:/` keeps the whole-tree scope of the bare add).
+        const nested = await untrackedNestedRepositories(repo, env, [":/"], "snapshot");
+        const add = await gitObserved(repo, [
+            ...SCRATCH_INDEX_CONFIG,
+            "add",
+            "-A",
+            ...(nested.length ? ["--", ":/", ...nestedRepositoryExcludes(nested)] : []),
+        ], {
+            env,
+            label: "add -A (snapshot)",
+            progress: diskProgress(repo),
+            allowFailure: true,
+            // Re-hashing HEAD's files reads silently: bounded by their bytes, not a flat ten minutes.
+            stallMs: proofStallMs(await treeBlobBytes(repo, headSha, env)),
+        });
+        if (add.code !== 0)
+            throw new WorkspaceError(`snapshot add -A failed: ${add.stderr.trim()}`);
+        const writeTree = await gitEnv(repo, [...SCRATCH_INDEX_CONFIG, "write-tree"], env);
+        if (writeTree.code !== 0)
+            throw new WorkspaceError(`snapshot write-tree failed: ${writeTree.stderr.trim()}`);
+        const tree = writeTree.stdout.trim();
+        // Read without the clean check: a tree equal to HEAD's is no change either.
+        if (!status && tree === (await revParse(repo, "HEAD^{tree}")))
+            return null;
+        const commit = await gitEnv(repo, [
+            "commit-tree",
+            tree,
+            "-p",
+            headSha,
+            "-m",
+            "claudexor: dirty worktree snapshot (incl. untracked)",
+        ], env);
+        if (commit.code !== 0)
+            throw new WorkspaceError(`snapshot commit-tree failed: ${commit.stderr.trim()}`);
+        const sha = commit.stdout.trim();
+        return sha.length > 0 ? sha : null;
+    }
+    finally {
+        try {
+            rmSync(scratchDir, { recursive: true, force: true });
+        }
+        catch {
+            /* scratch index cleanup is best-effort */
+        }
+    }
+}
+/**
+ * Capture the CURRENT working-tree state (tracked + untracked, minus `.claudexor`)
+ * as a commit sha — always returns one. Dirty trees become a dangling snapshot
+ * commit (via `stashCreate`); a clean tree resolves to HEAD. This is the per-turn
+ * diff base for in-place threads: snapshot at turn start, snapshot at turn end,
+ * `diffTrees(base, end)` yields exactly that turn's net change (pre-existing dirty
+ * state is folded into `base`, so the reviewer never sees prior turns' edits).
+ * `exact`: as for {@link stashCreate}.
+ */
+export async function snapshotTree(repo, exact = []) {
+    const snap = await stashCreate(repo, {}, exact);
+    return snap ?? (await revParse(repo, "HEAD"));
+}
+//# sourceMappingURL=git-snapshot.js.map

package/dist/git-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-snapshot.js","sourceRoot":"","sources":["../src/git-snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,UAAU,EACV,WAAW,EACX,UAAU,EACV,MAAM,EACN,QAAQ,EACR,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAI3D,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAa9D;gEACgE;AAChE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAW,EACX,GAAW,EACX,MAAM,GAAwB,IAAI,GAAG,EAAE;IAEvC,MAAM,MAAM,GAAkB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACjF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,6CAA6C;IAC7E,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE;QAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,kBAAkB;QAC9D,MAAM,OAAO,GAAG,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,SAAS;QACvD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO;QAC9E,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,OAAO,IAAI,OAAO;gBAAE,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,IAAI,OAAO;YAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,OAAO;YAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjF,IAAI,KAAK,KAAK,GAAG;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,GAAG,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC,CAAC;IACF,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,WAAW,CACf,GAAG,EACH,CAAC,GAAG,oBAAoB,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,EAC5E;QACE,GAAG;QACH,KAAK,EAAE,wBAAwB;QAC/B,MAAM,EAAE;YACN,KAAK,CAAC,KAAK;gBACT,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBACtE,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,KAAK,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;oBACzE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;oBAChC,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC;gBAClB,CAAC;gBACD,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5C,CAAC;YACD,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE;SACd;KACF,CACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,KAAK,UAAU,cAAc,CAC3B,IAAY,EACZ,OAAe,EACf,UAAkB,EAClB,KAAwB;IAExB,MAAM,GAAG,GAAW,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC;IAC5D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,GAAG,CAAC,CAAC;IACtE,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,8BAA8B,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChG,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,4EAA4E;IAC5E,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO;QAC/B,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChF,IAAI,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAChE,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChG,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,MAAM,CAC1B,IAAI,EACJ,CAAC,WAAW,EAAE,wBAAwB,EAAE,YAAY,EAAE,OAAO,CAAC,EAC9D,GAAG,CACJ,CAAC;QACF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAC9C,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjD,YAAY,CAAC,SAAS,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;QACxC,sFAAsF;QACtF,UAAU,CAAC,GAAG,IAAI,OAAO,EAAE,OAAO,GAAG,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QACvE,UAAU,CAAC,GAAG,IAAI,OAAO,EAAE,IAAI,CAAC,CAAC;QACjC,GAAG,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI;YAC1B,CAAC,uBAAuB,EAAE,MAAM,CAAC,OAAO,CAAC;YACzC,CAAC,oBAAoB,EAAE,QAAQ,CAAC;SACxB,EAAE,CAAC;YACX,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACjC,MAAM,OAAO,GAAG,MAAM,MAAM,CAC1B,IAAI,EACJ,CAAC,GAAG,oBAAoB,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,EAChE,GAAG,EACH,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACxB,CAAC;YACF,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;QACtC,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAC3B,IAAI,EACJ,CAAC,GAAG,oBAAoB,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,CAAC,EAC/D,GAAG,EACH,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAC/C,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CACX,IAAI,EACJ,CAAC,GAAG,oBAAoB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,uBAAuB,CAAC,EACpF,GAAG,CACJ,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,OAAO,GAAW,EAAE,EACpB,KAAK,GAAsB,EAAE;IAE7B,6EAA6E;IAC7E,+EAA+E;IAC/E,+EAA+E;IAC/E,sEAAsE;IACtE,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,GAAG,GAA2B;QAClC,GAAG,OAAO;QACV,cAAc,EAAE,QAAQ;QACxB,eAAe,EAAE,WAAW;QAC5B,gBAAgB,EAAE,yBAAyB;QAC3C,kBAAkB,EAAE,WAAW;QAC/B,mBAAmB,EAAE,yBAAyB;KAC/C,CAAC;IACF,IAAI,CAAC;QACH,2EAA2E;QAC3E,0EAA0E;QAC1E,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACtE,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAC7B,MAAM,IAAI,cAAc,CAAC,2BAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9E,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YACjB,MAAM,IAAI,cAAc,CAAC,mCAAmC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,oBAAoB,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QACrF,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YACjB,MAAM,IAAI,cAAc,CAAC,8BAA8B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/E,0EAA0E;QAC1E,4EAA4E;QAC5E,8EAA8E;QAC9E,0EAA0E;QAC1E,2EAA2E;QAC3E,mEAAmE;QACnE,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;QAChF,MAAM,GAAG,GAAG,MAAM,WAAW,CAC3B,IAAI,EACJ;YACE,GAAG,oBAAoB;YACvB,KAAK;YACL,IAAI;YACJ,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,EACD;YACE,GAAG;YACH,KAAK,EAAE,mBAAmB;YAC1B,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC;YAC5B,YAAY,EAAE,IAAI;YAClB,0FAA0F;YAC1F,OAAO,EAAE,YAAY,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;SAC/D,CACF,CAAC;QACF,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,2BAA2B,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7F,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,oBAAoB,EAAE,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC;QACnF,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC;YACtB,MAAM,IAAI,cAAc,CAAC,+BAA+B,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,4EAA4E;QAC5E,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,MAAM,CACzB,IAAI,EACJ;YACE,aAAa;YACb,IAAI;YACJ,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,sDAAsD;SACvD,EACD,GAAG,CACJ,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YACnB,MAAM,IAAI,cAAc,CAAC,gCAAgC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,KAAK,GAAsB,EAAE;IAC5E,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IAChD,OAAO,IAAI,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC"}

package/dist/git-transient-capture.d.ts

@@ -1,30 +1,77 @@
-import { CaptureOutputExceeded } from "@claudexor/core";
+import type { CaptureChangeInventory, GitObjectResult, PatchViewUnavailable } from "@claudexor/schema";
 /**
- * Capture the current worktree against an exact base without writing its blobs
- * into the user's Git object database. In-place harness output is untrusted
- * until the secret fence has inspected the resulting patch; `snapshotTree`
- * would otherwise leave a dangling raw-secret blob even when artifact
- * persistence later refused the patch.
+ * Capture the current worktree against an exact base as Git objects (#535
+ * phase 2). The candidate tree is written through a scratch index into a
+ * private scratch object directory (the user's object database and the
+ * project store are read-only alternates), then everything it needs beyond its
+ * boundary enters the project object store, where it is verified alone. The
+ * store is an alternate only under a pending lease: Git writes no object it
+ * finds there, so a prune must not delete one meanwhile. The object pair is
+ * the canonical result; capture runs no rename detection.
  *
- * Git still owns filename, mode, symlink, binary, ignored-file, and untracked
- * semantics. A scratch index plus an isolated temporary object directory holds
- * the candidate tree only for the duration of `git diff`; the real object
- * directory is read-only through Git's alternates mechanism.
+ * A patch is only a VIEW: a render is attempted when an estimate computed from its
+ * blob sizes fits today's 256 MiB view limit, and it is absent with a typed reason
+ * when that estimate does not fit or the render overflows or fails, while the
+ * result stays exact, verifiable, deliverable and revertable.
  */
 export interface TransientDiffCapture {
     captureIncomplete: boolean;
-    captureFailure?: CaptureOutputExceeded;
+    captureFailure?: Error;
+    /** The rendered patch view, "" when no view was rendered. */
     patch: string;
-    /** Changed binary files whose pre- or postimage holds secret-like bytes (or
-     * could not be read for inspection). The exact patch still carries their
-     * payload; a persisted COPY withholds it and discloses these paths (INV-062). */
-    binarySecretPaths: string[];
     /** Untracked directories holding their own Git repository. A patch cannot
      * carry another repository (Git would record a commit link, or refuse a
      * repository without a commit), so they are left out of the capture and
      * named here instead of failing the whole capture. */
     excludedNestedRepositories?: string[];
+    /** The exact candidate as Git objects; absent only for a refused capture. */
+    result?: GitObjectResult;
+    /** Present when no patch view was rendered (the object result stays exact). */
+    patchViewUnavailable?: PatchViewUnavailable;
+    /** Bounded listing of the largest changed files of an unrendered result. */
+    inventory?: CaptureChangeInventory;
+    /** Every changed path of an unrendered result (no view to read them from),
+     * and those whose old side existed, from the no-renames raw diff. */
+    changedPaths?: string[];
+    existingPaths?: string[];
 }
-export declare function captureWorkingTreeTransient(repo: string, baseSha: string, pathExcludes?: string[]): Promise<TransientDiffCapture>;
+export interface TransientCaptureOptions {
+    /** Project root owning the object store (the user's repository root). */
+    projectRoot?: string;
+    /** Render limit of the patch view; today's capture buffer by default. */
+    viewLimitBytes?: number;
+    /** Path whose existence keeps the result's objects in the store (the run directory). */
+    owner?: string;
+}
+export declare function captureWorkingTreeTransient(repo: string, baseSha: string, pathExcludes?: string[], options?: TransientCaptureOptions): Promise<TransientDiffCapture>;
 export declare function diffWorkingTreeTransient(repo: string, baseSha: string, pathExcludes?: string[]): Promise<string>;
+/** The capture's object-backed facts, carried unchanged to its consumers. */
+export declare function captureObjectFacts(captured: TransientDiffCapture): {
+    result?: {
+        schema: "git_objects/v1";
+        object_format: "sha1" | "sha256";
+        base_tree: string;
+        candidate_tree: string;
+        base_commit: string | null;
+        store_boundary_commit: string | null;
+        digest: string;
+    } | undefined;
+    patchViewUnavailable?: {
+        reason: "exceeds_view_limit" | "render_failed";
+        limitBytes: number;
+        estimatedBytes: number | null;
+    } | undefined;
+    inventory?: {
+        exact: false;
+        changedFiles: number;
+        largest: {
+            path: string;
+            change: "added" | "deleted" | "modified" | "type_changed";
+            sizeBytes: number | null;
+        }[];
+    } | undefined;
+    changedPaths?: string[] | undefined;
+    existingPaths?: string[] | undefined;
+    excludedNestedRepositories?: string[] | undefined;
+};
 //# sourceMappingURL=git-transient-capture.d.ts.map

package/dist/git-transient-capture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git-transient-capture.d.ts","sourceRoot":"","sources":["../src/git-transient-capture.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAoC,MAAM,iBAAiB,CAAC;AAQ1F;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,oBAAoB;IACnC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd;;qFAEiF;IACjF,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B;;;0DAGsD;IACtD,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;CACvC;AAED,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,YAAY,GAAE,MAAM,EAAO,GAC1B,OAAO,CAAC,oBAAoB,CAAC,CA2H/B;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,YAAY,GAAE,MAAM,EAAO,GAC1B,OAAO,CAAC,MAAM,CAAC,CAIjB"}
+{"version":3,"file":"git-transient-capture.d.ts","sourceRoot":"","sources":["../src/git-transient-capture.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,sBAAsB,EACtB,eAAe,EACf,oBAAoB,EACrB,MAAM,mBAAmB,CAAC;AA8B3B;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,oBAAoB;IACnC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,KAAK,CAAC;IACvB,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd;;;0DAGsD;IACtD,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;IACtC,6EAA6E;IAC7E,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,+EAA+E;IAC/E,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,4EAA4E;IAC5E,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC;yEACqE;IACrE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wFAAwF;IACxF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAQD,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,YAAY,GAAE,MAAM,EAAO,EAC3B,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,oBAAoB,CAAC,CA4M/B;AAyBD,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,YAAY,GAAE,MAAM,EAAO,GAC1B,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED,6EAA6E;AAC7E,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAahE"}