@cleocode/core 2026.9.20 → 2026.9.22

package/dist/git/bounded-git.js

@@ -0,0 +1,371 @@
+/**
+ * Bounded, hardened `git` invocation for read-only probes (T12511).
+ *
+ * A probe over hundreds of checkouts must neither hang nor run code the
+ * repositories configure. This module owns both properties.
+ *
+ * ## Bounded
+ *
+ * - Every call has an absolute `deadline`. Git runs in its own process group
+ *   (POSIX `detached`), and at the deadline the whole group is SIGKILLed
+ *   (`taskkill /T /F` on Windows). The pipes are destroyed and the child is
+ *   unref'd, so a grandchild that escaped the group cannot keep the CLI alive.
+ * - Output is capped at `maxOutputBytes` per call and optionally by a
+ *   run-wide {@link GitOutputBudget}; past either the group is killed.
+ * - While any call is live, `SIGINT`/`SIGTERM`/`SIGHUP` and `exit` kill every
+ *   live group. A detached group is not in the terminal's foreground group, so
+ *   Ctrl-C would otherwise orphan it. The signal is re-raised when no other
+ *   listener handles it, which keeps Node's default exit behaviour. Teardown
+ *   (`markShuttingDown`) also kills them.
+ *
+ * ## Hardened
+ *
+ * Every call carries {@link BASE_CONFIG} — no fsmonitor, no hooks, a protocol
+ * allowlist (http/https/ssh/file), empty gitProxy/alternateRefsCommand/
+ * credential helper/askpass, batch-mode ssh, no auto gc — plus caller pairs
+ * such as {@link filterConfig}. Overrides travel as `GIT_CONFIG_COUNT` /
+ * `GIT_CONFIG_KEY_n` / `GIT_CONFIG_VALUE_n`, never `-c`, because `-c` splits
+ * at the first `=` and a key may contain one. The environment disables every
+ * prompt (`GIT_TERMINAL_PROMPT=0`, empty `GIT_ASKPASS`/`SSH_ASKPASS`,
+ * `SSH_ASKPASS_REQUIRE=never`, `GCM_INTERACTIVE=never`), forbids partial-clone
+ * lazy fetches (`GIT_NO_LAZY_FETCH=1`), sets `GIT_OPTIONAL_LOCKS=0`, and drops
+ * `GIT_SSH`/`GIT_SSH_COMMAND`/`GIT_PROXY_COMMAND`/`GIT_EXTERNAL_DIFF` and any
+ * inherited `GIT_CONFIG_PARAMETERS`/`GIT_CONFIG_COUNT`/`GIT_CONFIG_GLOBAL`/
+ * `GIT_CONFIG_SYSTEM`.
+ *
+ * @task T12511
+ */
+import { spawn, spawnSync } from 'node:child_process';
+import { devNull } from 'node:os';
+import { registerTeardownAbort } from '../teardown-signal.js';
+import { discoveryEnv } from './work-tree.js';
+/** Default cap on one call's stdout + stderr, bytes. */
+export const DEFAULT_GIT_MAX_OUTPUT_BYTES = 8 * 1024 * 1024;
+/**
+ * Overrides applied to EVERY probe call. Any git command can reach the
+ * network (a partial clone fetches missing blobs lazily), so the transport
+ * pins apply everywhere, not only to `fetch`.
+ *
+ * - `core.fsmonitor=false`: no fsmonitor hook script, no fsmonitor daemon.
+ * - `core.hooksPath=<devnull>`: no hook.
+ * - `protocol.allow=never` plus an http/https/ssh/file allowlist: no `ext::`,
+ *   `fd::` or `<vcs>::` remote helper, no `git://` (whose `core.gitProxy`
+ *   runs a command).
+ * - Empty `core.gitProxy`, `core.alternateRefsCommand`, `credential.helper`
+ *   (resets the list) and `core.askPass`; plain batch-mode ssh.
+ * - `gc.auto=0`, `maintenance.auto=false`: no detached gc holding repo locks.
+ */
+export const BASE_CONFIG = [
+    ['core.fsmonitor', 'false'],
+    ['core.hooksPath', devNull],
+    ['protocol.allow', 'never'],
+    ['protocol.http.allow', 'always'],
+    ['protocol.https.allow', 'always'],
+    ['protocol.ssh.allow', 'always'],
+    ['protocol.file.allow', 'always'],
+    ['core.gitProxy', ''],
+    ['core.alternateRefsCommand', ''],
+    ['credential.helper', ''],
+    ['core.askPass', ''],
+    ['core.sshCommand', 'ssh -oBatchMode=yes'],
+    ['gc.auto', '0'],
+    ['maintenance.auto', 'false'],
+    ['fetch.recurseSubmodules', 'false'],
+    ['submodule.recurse', 'false'],
+];
+/**
+ * Overrides that disable the named filter drivers. Git has no global switch,
+ * so the caller enumerates `filter.<name>.*` from `git config` first. An empty
+ * `clean`/`smudge`/`process` is "no driver", and `required=false` keeps a
+ * disabled required filter from failing the command. Passed through
+ * `GIT_CONFIG_KEY_n`/`GIT_CONFIG_VALUE_n`, so a name containing `=` is intact
+ * (with `-c` git would split the key at that `=`).
+ *
+ * @param names - Filter driver names.
+ * @returns Config pairs.
+ */
+export function filterConfig(names) {
+    const out = [];
+    for (const name of names) {
+        for (const key of ['clean', 'smudge', 'process'])
+            out.push([`filter.${name}.${key}`, '']);
+        out.push([`filter.${name}.required`, 'false']);
+    }
+    return out;
+}
+/**
+ * Probe environment: no ambient repo, no prompts, no lazy fetch, no optional
+ * locks, no inherited command-scope config (`GIT_CONFIG_PARAMETERS`,
+ * `GIT_CONFIG_COUNT`/`KEY_n`/`VALUE_n`) or alternate config files
+ * (`GIT_CONFIG_GLOBAL`/`GIT_CONFIG_SYSTEM`), and {@link BASE_CONFIG} plus
+ * `config` as the only command-scope overrides.
+ *
+ * @param config - Overrides beyond {@link BASE_CONFIG}.
+ * @returns Environment for a probe git process.
+ */
+export function hardenedGitEnv(config = []) {
+    const env = { ...discoveryEnv() };
+    // Inherited command-scope config (GIT_CONFIG_PARAMETERS is read AFTER
+    // GIT_CONFIG_COUNT and would beat the hardening) and alternate config files
+    // are dropped, as are ssh/proxy/diff command overrides.
+    for (const key of [
+        'GIT_SSH',
+        'GIT_SSH_COMMAND',
+        'GIT_PROXY_COMMAND',
+        'GIT_EXTERNAL_DIFF',
+        'GIT_CONFIG_PARAMETERS',
+        'GIT_CONFIG_GLOBAL',
+        'GIT_CONFIG_SYSTEM',
+    ]) {
+        delete env[key];
+    }
+    for (const key of Object.keys(env)) {
+        if (key === 'GIT_CONFIG_COUNT' || /^GIT_CONFIG_(KEY|VALUE)_\d+$/.test(key))
+            delete env[key];
+    }
+    let n = 0;
+    for (const [key, value] of [...BASE_CONFIG, ...config]) {
+        env[`GIT_CONFIG_KEY_${n}`] = key;
+        env[`GIT_CONFIG_VALUE_${n}`] = value;
+        n++;
+    }
+    env['GIT_CONFIG_COUNT'] = String(n);
+    return {
+        ...env,
+        GIT_TERMINAL_PROMPT: '0',
+        GIT_ASKPASS: '',
+        SSH_ASKPASS: '',
+        SSH_ASKPASS_REQUIRE: 'never',
+        GCM_INTERACTIVE: 'never',
+        GIT_NO_LAZY_FETCH: '1',
+        GIT_OPTIONAL_LOCKS: '0',
+        LC_ALL: 'C',
+    };
+}
+/**
+ * Bytes of git output held in memory at once across a whole probe run, so a
+ * high concurrency cannot multiply the per-call cap into gigabytes.
+ */
+export class GitOutputBudget {
+    limit;
+    used = 0;
+    /**
+     * @param limit - Maximum bytes in flight across all calls sharing this budget.
+     */
+    constructor(limit) {
+        this.limit = limit;
+    }
+    /**
+     * Reserve `bytes`.
+     *
+     * @param bytes - Bytes about to be held.
+     * @returns `false` when the reservation would exceed the limit.
+     */
+    take(bytes) {
+        if (this.used + bytes > this.limit)
+            return false;
+        this.used += bytes;
+        return true;
+    }
+    /**
+     * Release `bytes` previously taken.
+     *
+     * @param bytes - Bytes no longer held.
+     */
+    release(bytes) {
+        this.used = Math.max(0, this.used - bytes);
+    }
+}
+// ---------------------------------------------------------------------------
+// Live process-group registry
+// ---------------------------------------------------------------------------
+const live = new Map();
+const SIGNALS = ['SIGINT', 'SIGTERM', 'SIGHUP'];
+const signalHandlers = new Map();
+/** Kill one child's whole tree. `sync` is required inside an `exit` handler. */
+function killTree(child, sync) {
+    const pid = child.pid;
+    if (pid === undefined)
+        return;
+    try {
+        if (process.platform === 'win32') {
+            const args = ['/T', '/F', '/PID', String(pid)];
+            if (sync)
+                spawnSync('taskkill', args, { stdio: 'ignore', windowsHide: true });
+            else
+                spawn('taskkill', args, { stdio: 'ignore', windowsHide: true }).unref();
+        }
+        else {
+            process.kill(-pid, 'SIGKILL');
+        }
+    }
+    catch {
+        // Already gone.
+    }
+}
+/**
+ * Kill every live git process group started by {@link runBoundedGit}.
+ *
+ * Installed on `exit` and on SIGINT/SIGTERM/SIGHUP while any call is live;
+ * exported for tests.
+ *
+ * @returns Number of groups signalled.
+ */
+export function killLiveGitProcesses() {
+    const n = live.size;
+    for (const child of live.values())
+        killTree(child, true);
+    live.clear();
+    uninstallHooks();
+    return n;
+}
+/** Number of live bounded git calls (tests). */
+export function liveGitProcessCount() {
+    return live.size;
+}
+function onExit() {
+    killLiveGitProcesses();
+}
+function installHooks() {
+    if (signalHandlers.size > 0)
+        return;
+    process.on('exit', onExit);
+    for (const sig of SIGNALS) {
+        const handler = () => {
+            killLiveGitProcesses();
+            // Nobody else handles it: restore Node's default (terminate) by
+            // re-raising now that our listener is gone.
+            if (process.listenerCount(sig) === 0)
+                process.kill(process.pid, sig);
+        };
+        signalHandlers.set(sig, handler);
+        process.on(sig, handler);
+    }
+}
+function uninstallHooks() {
+    if (signalHandlers.size === 0)
+        return;
+    process.removeListener('exit', onExit);
+    for (const [sig, handler] of signalHandlers)
+        process.removeListener(sig, handler);
+    signalHandlers.clear();
+}
+function track(child) {
+    if (child.pid === undefined)
+        return;
+    live.set(child.pid, child);
+    installHooks();
+}
+function untrack(child) {
+    if (child.pid !== undefined)
+        live.delete(child.pid);
+    if (live.size === 0)
+        uninstallHooks();
+}
+// ---------------------------------------------------------------------------
+// Runner
+// ---------------------------------------------------------------------------
+/**
+ * Run `git <args>` in `cwd` with {@link hardenedGitEnv}, bounded by `deadline` and
+ * `maxOutputBytes`. Never rejects.
+ *
+ * @param args - Git arguments.
+ * @param options - cwd, deadline, git executable and output cap.
+ * @returns The run outcome.
+ * @example
+ * ```ts
+ * const r = await runBoundedGit(['status', '--porcelain=v2'], { cwd, deadline: Date.now() + 5000 });
+ * ```
+ */
+export function runBoundedGit(args, options) {
+    const remaining = options.deadline - Date.now();
+    const empty = { stdout: '', stderr: '', overflowed: false, spawnError: null };
+    if (remaining <= 0)
+        return Promise.resolve({ ...empty, code: null, timedOut: true });
+    const maxOutputBytes = options.maxOutputBytes ?? DEFAULT_GIT_MAX_OUTPUT_BYTES;
+    return new Promise((resolveRun) => {
+        const out = [];
+        const err = [];
+        let bytes = 0;
+        let settled = false;
+        const child = spawn(options.gitBin ?? 'git', [...args], {
+            cwd: options.cwd,
+            env: hardenedGitEnv(options.config),
+            stdio: ['ignore', 'pipe', 'pipe'],
+            detached: process.platform !== 'win32',
+            windowsHide: true,
+        });
+        track(child);
+        const abort = new AbortController();
+        const deregister = registerTeardownAbort(abort);
+        const finish = (run, kill) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            deregister();
+            options.budget?.release(bytes);
+            if (kill) {
+                killTree(child, false);
+                // A grandchild outside the group may still hold these; release them so
+                // the event loop is not kept alive by a process we no longer wait for.
+                child.stdout?.destroy();
+                child.stderr?.destroy();
+                child.unref();
+            }
+            untrack(child);
+            resolveRun({
+                ...run,
+                stdout: Buffer.concat(out).toString('utf8'),
+                stderr: Buffer.concat(err).toString('utf8'),
+            });
+        };
+        const timer = setTimeout(() => finish({ code: null, timedOut: true, overflowed: false, spawnError: null }, true), remaining);
+        abort.signal.addEventListener('abort', () => finish({ code: null, timedOut: true, overflowed: false, spawnError: null }, true));
+        const collect = (into) => (b) => {
+            if (bytes + b.length > maxOutputBytes ||
+                (options.budget && !options.budget.take(b.length))) {
+                finish({ code: null, timedOut: false, overflowed: true, spawnError: null }, true);
+                return;
+            }
+            bytes += b.length;
+            into.push(b);
+        };
+        child.stdout?.on('data', collect(out));
+        child.stderr?.on('data', collect(err));
+        child.on('error', (e) => {
+            err.push(Buffer.from(e.message));
+            finish({ code: null, timedOut: false, overflowed: false, spawnError: e }, false);
+        });
+        child.on('close', (code) => finish({ code, timedOut: false, overflowed: false, spawnError: null }, false));
+    });
+}
+/** Sentinel for {@link withDeadline}. */
+export const DEADLINE_EXCEEDED = Symbol('deadline-exceeded');
+/**
+ * Race `work` against an absolute deadline. The work is not cancelled (a
+ * stuck filesystem call cannot be); the caller simply stops waiting.
+ *
+ * @param work - Promise to bound.
+ * @param deadline - Absolute epoch-ms deadline.
+ * @returns The result, or {@link DEADLINE_EXCEEDED}.
+ */
+export async function withDeadline(work, deadline) {
+    const remaining = deadline - Date.now();
+    if (remaining <= 0) {
+        work.catch(() => undefined);
+        return DEADLINE_EXCEEDED;
+    }
+    let timer;
+    const expired = new Promise((r) => {
+        timer = setTimeout(() => r(DEADLINE_EXCEEDED), remaining);
+        timer.unref();
+    });
+    try {
+        return await Promise.race([work, expired]);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=bounded-git.js.map

package/dist/git/bounded-git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-git.js","sourceRoot":"","sources":["../../src/git/bounded-git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAqB,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,wDAAwD;AACxD,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAK5D;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,WAAW,GAA6B;IACnD,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAC3B,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAC3B,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAC3B,CAAC,qBAAqB,EAAE,QAAQ,CAAC;IACjC,CAAC,sBAAsB,EAAE,QAAQ,CAAC;IAClC,CAAC,oBAAoB,EAAE,QAAQ,CAAC;IAChC,CAAC,qBAAqB,EAAE,QAAQ,CAAC;IACjC,CAAC,eAAe,EAAE,EAAE,CAAC;IACrB,CAAC,2BAA2B,EAAE,EAAE,CAAC;IACjC,CAAC,mBAAmB,EAAE,EAAE,CAAC;IACzB,CAAC,cAAc,EAAE,EAAE,CAAC;IACpB,CAAC,iBAAiB,EAAE,qBAAqB,CAAC;IAC1C,CAAC,SAAS,EAAE,GAAG,CAAC;IAChB,CAAC,kBAAkB,EAAE,OAAO,CAAC;IAC7B,CAAC,yBAAyB,EAAE,OAAO,CAAC;IACpC,CAAC,mBAAmB,EAAE,OAAO,CAAC;CAC/B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,KAAuB;IAClD,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1F,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,SAAmC,EAAE;IAClE,MAAM,GAAG,GAAsB,EAAE,GAAG,YAAY,EAAE,EAAE,CAAC;IACrD,sEAAsE;IACtE,4EAA4E;IAC5E,wDAAwD;IACxD,KAAK,MAAM,GAAG,IAAI;QAChB,SAAS;QACT,iBAAiB;QACjB,mBAAmB;QACnB,mBAAmB;QACnB,uBAAuB;QACvB,mBAAmB;QACnB,mBAAmB;KACpB,EAAE,CAAC;QACF,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,GAAG,KAAK,kBAAkB,IAAI,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;QACjC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;QACrC,CAAC,EAAE,CAAC;IACN,CAAC;IACD,GAAG,CAAC,kBAAkB,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpC,OAAO;QACL,GAAG,GAAG;QACN,mBAAmB,EAAE,GAAG;QACxB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,EAAE;QACf,mBAAmB,EAAE,OAAO;QAC5B,eAAe,EAAE,OAAO;QACxB,iBAAiB,EAAE,GAAG;QACtB,kBAAkB,EAAE,GAAG;QACvB,MAAM,EAAE,GAAG;KACZ,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,eAAe;IAML;IALb,IAAI,GAAG,CAAC,CAAC;IAEjB;;OAEG;IACH,YAAqB,KAAa;QAAb,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IAEtC;;;;;OAKG;IACH,IAAI,CAAC,KAAa;QAChB,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACjD,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,OAAO,CAAC,KAAa;QACnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;IAC7C,CAAC;CACF;AAkCD,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwB,CAAC;AAC7C,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAC;AACzD,MAAM,cAAc,GAAG,IAAI,GAAG,EAA8B,CAAC;AAE7D,gFAAgF;AAChF,SAAS,QAAQ,CAAC,KAAmB,EAAE,IAAa;IAClD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO;IAC9B,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/C,IAAI,IAAI;gBAAE,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;;gBACzE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC/E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB;IAClB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IACpB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;IACb,cAAc,EAAE,CAAC;IACjB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,SAAS,MAAM;IACb,oBAAoB,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,cAAc,CAAC,IAAI,GAAG,CAAC;QAAE,OAAO;IACpC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,oBAAoB,EAAE,CAAC;YACvB,gEAAgE;YAChE,4CAA4C;YAC5C,IAAI,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC,CAAC;QACF,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,cAAc,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO;IACtC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,cAAc;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAClF,cAAc,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,KAAK,CAAC,KAAmB;IAChC,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO;IACpC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3B,YAAY,EAAE,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CAAC,KAAmB;IAClC,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;QAAE,cAAc,EAAE,CAAC;AACxC,CAAC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAuB,EACvB,OAA0B;IAE1B,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9E,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,4BAA4B,CAAC;IAE9E,OAAO,IAAI,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;QAChC,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;YACtD,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;YACnC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;YACtC,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAEhD,MAAM,MAAM,GAAG,CAAC,GAA6C,EAAE,IAAa,EAAQ,EAAE;YACpF,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,UAAU,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,IAAI,EAAE,CAAC;gBACT,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBACvB,uEAAuE;gBACvE,uEAAuE;gBACvE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACxB,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACxB,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,UAAU,CAAC;gBACT,GAAG,GAAG;gBACN,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC3C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,EACvF,SAAS,CACV,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAC1C,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAClF,CAAC;QACF,MAAM,OAAO,GACX,CAAC,IAAc,EAAE,EAAE,CACnB,CAAC,CAAS,EAAQ,EAAE;YAClB,IACE,KAAK,GAAG,CAAC,CAAC,MAAM,GAAG,cAAc;gBACjC,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAClD,CAAC;gBACD,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;gBAClF,OAAO;YACT,CAAC;YACD,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC,CAAC;QACJ,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAwB,EAAE,EAAE;YAC7C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YACjC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CACzB,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAC9E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yCAAyC;AACzC,MAAM,CAAC,MAAM,iBAAiB,GAAkB,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAE5E;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAgB,EAChB,QAAgB;IAEhB,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACxC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,IAAI,KAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAA2B,CAAC,CAAC,EAAE,EAAE;QAC1D,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,SAAS,CAAC,CAAC;QAC1D,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/git/work-tree.d.ts

@@ -40,6 +40,14 @@ export declare const E_EVIDENCE_GIT_ROOT: "E_EVIDENCE_GIT_ROOT";
  * @task T12308
  */
 export declare const EVIDENCE_GIT_ROOT_ENV = "CLEO_EVIDENCE_GIT_ROOT";
+/**
+ * A copy of `env` with git's ambient repo-pointing variables removed.
+ *
+ * @param env - Source environment. Defaults to the current process env.
+ * @returns Environment safe for directory-discovery probes.
+ * @task T12308
+ */
+export declare function discoveryEnv(env?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
 /**
  * True when `dir` is inside a git work tree of its own — its own checkout or a
  * descendant of one, since git walks up. False when the directory is missing,
@@ -107,6 +115,18 @@ export interface DeclaredEvidenceGitRoot {
     /** Human-readable provenance, used verbatim in failure text. */
     source: string;
 }
+/**
+ * `evidence.gitRoot` from the text of a `.cleo/project-context.json`.
+ *
+ * Split from the file read so a caller that must bound the read (a probe
+ * over hundreds of checkouts, some on slow filesystems) can read the file
+ * asynchronously under its own deadline and still share this parse.
+ *
+ * @param raw - File contents.
+ * @returns The trimmed declared root, or `null` when absent or malformed.
+ * @task T12511
+ */
+export declare function parseConfiguredGitRoot(raw: string): string | null;
 /**
  * The checkout the operator declared for evidence execution, if any.
  *

package/dist/git/work-tree.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"work-tree.d.ts","sourceRoot":"","sources":["../../src/git/work-tree.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,EAAG,qBAA8B,CAAC;AAElE;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,2BAA2B,CAAC;AAgE9D;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAElD;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGtD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAgB5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGhE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,GAAG,EAAE,MAAM,GACV,MAAM,GAAG,IAAI,CAQf;AAED,uFAAuF;AACvF,MAAM,WAAW,uBAAuB;IACtC,yFAAyF;IACzF,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAC;CAChB;AA4BD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,uBAAuB,GAAG,IAAI,CAmBhC;AAED,iFAAiF;AACjF,MAAM,WAAW,yBAAyB;IACxC,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,yBAA8B,GACtC,MAAM,CA8CR;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAOhG"}
+{"version":3,"file":"work-tree.d.ts","sourceRoot":"","sources":["../../src/git/work-tree.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,EAAG,qBAA8B,CAAC;AAElE;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,2BAA2B,CAAC;AA2B9D;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAIpF;AA0BD;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAElD;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGtD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAgB5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGhE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,GAAG,EAAE,MAAM,GACV,MAAM,GAAG,IAAI,CAQf;AAED,uFAAuF;AACvF,MAAM,WAAW,uBAAuB;IACtC,yFAAyF;IACzF,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAC;CAChB;AAwBD;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWjE;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,uBAAuB,GAAG,IAAI,CAmBhC;AAED,iFAAiF;AACjF,MAAM,WAAW,yBAAyB;IACxC,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,yBAA8B,GACtC,MAAM,CA8CR;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAOhG"}

package/dist/git/work-tree.js

@@ -74,7 +74,7 @@ const GIT_AMBIENT_REPO_VARS = [
  * @returns Environment safe for directory-discovery probes.
  * @task T12308
  */
-function discoveryEnv(env = process.env) {
+export function discoveryEnv(env = process.env) {
     const copy = { ...env };
     for (const key of GIT_AMBIENT_REPO_VARS)
         delete copy[key];
@@ -215,7 +215,25 @@ export function findWorkTreeContainingCommit(candidates, sha) {
  */
 function readConfiguredGitRoot(storeRoot) {
     try {
-        const raw = readFileSync(join(storeRoot, '.cleo', 'project-context.json'), 'utf-8');
+        return parseConfiguredGitRoot(readFileSync(join(storeRoot, '.cleo', 'project-context.json'), 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * `evidence.gitRoot` from the text of a `.cleo/project-context.json`.
+ *
+ * Split from the file read so a caller that must bound the read (a probe
+ * over hundreds of checkouts, some on slow filesystems) can read the file
+ * asynchronously under its own deadline and still share this parse.
+ *
+ * @param raw - File contents.
+ * @returns The trimmed declared root, or `null` when absent or malformed.
+ * @task T12511
+ */
+export function parseConfiguredGitRoot(raw) {
+    try {
         const parsed = JSON.parse(raw);
         if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed))
             return null;

package/dist/git/work-tree.js.map

@@ -1 +1 @@
-{"version":3,"file":"work-tree.js","sourceRoot":"","sources":["../../src/git/work-tree.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAA8B,CAAC;AAElE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,qBAAqB,GAAG;IAC5B,SAAS;IACT,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,sBAAsB;CACd,CAAC;AAEX;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxD,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IACxB,KAAK,MAAM,GAAG,IAAI,qBAAqB;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qFAAqF;AACrF,SAAS,QAAQ,CAAC,GAAW,EAAE,IAAuB;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;YACzC,GAAG,EAAE,GAAG;YACR,QAAQ,EAAE,OAAO;YACjB,GAAG,EAAE,YAAY,EAAE;YACnB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC,KAAK,MAAM,CAAC;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC5D,OAAO,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,IAAI,KAAK,KAAK,cAAc;YAAE,SAAS;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAAE,SAAS;QAC/C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,4BAA4B,CAC1C,UAA6B,EAC7B,GAAW;IAEX,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC,KAAK,IAAI;YACrE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAUD;;;;;;;;;;;GAWG;AACH,SAAS,qBAAqB,CAAC,SAAiB;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC,CAAC;QACpF,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACxF,MAAM,QAAQ,GAAI,MAAiC,CAAC,QAAQ,CAAC;QAC7D,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9F,MAAM,OAAO,GAAI,QAAkC,CAAC,OAAO,CAAC;QAC5D,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,8BAA8B,CAC5C,SAAiB,EACjB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,CAAC,GAAW,EAAkC,EAAE;QAC9D,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3D,OAAO;YACL,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC;YAC3D,MAAM,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE;SAC1B,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,qBAAqB,CAAC,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5E,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IAEvC,MAAM,UAAU,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC;QAC1E,MAAM,EAAE,gDAAgD,UAAU,GAAG;KACtE,CAAC;AACJ,CAAC;AAYD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAW,EACX,UAAqC,EAAE;IAEvC,MAAM,EAAE,SAAS,EAAE,UAAU,GAAG,EAAE,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IAE7D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CACL,8BAA8B,GAAG,UAAU,YAAY,4BAA4B;YACnF,2EAA2E;YAC3E,2EAA2E;YAC3E,+DAA+D,CAChE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GACR,gCAAgC,GAAG,oCAAoC;QACvE,2EAA2E;QAC3E,iBAAiB,CAAC;IAEpB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,SAAS,IAAI,GAAG,CAAC;QAC9B,OAAO,CACL,GAAG,IAAI,kBAAkB,IAAI,YAAY,UAAU,CAAC,MAAM,aAAa;YACvE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,uDAAuD;YAChF,iEAAiE;YACjE,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,CAAC,IAAI;YAClD,6EAA6E;YAC7E,GAAG,qBAAqB,4BAA4B;YACpD,6EAA6E;YAC7E,qDAAqD,CACtD,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CACL,GAAG,IAAI,0CAA0C,UAAU,CAAC,CAAC,CAAC,uBAAuB;YACrF,qDAAqD;YACrD,GAAG,qBAAqB,IAAI,UAAU,CAAC,CAAC,CAAC,GAAG,CAC7C,CAAC;IACJ,CAAC;IAED,OAAO,CACL,GAAG,IAAI,uEAAuE;QAC9E,gCAAgC,qBAAqB,4BAA4B;QACjF,gDAAgD;QAChD,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,EAAE,OAAO,EAAE,sBAAsB,CAAC,GAAG;QAC7D,gDAAgD,CACjD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,+BAA+B,CAAC,SAAiB,EAAE,aAAqB;IACtF,MAAM,QAAQ,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;IAC3D,OAAO,0BAA0B,CAAC,aAAa,EAAE;QAC/C,SAAS;QACT,UAAU,EAAE,sBAAsB,CAAC,SAAS,CAAC;QAC7C,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;KAChE,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"work-tree.js","sourceRoot":"","sources":["../../src/git/work-tree.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAA8B,CAAC;AAElE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,qBAAqB,GAAG;IAC5B,SAAS;IACT,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,sBAAsB;CACd,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC/D,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IACxB,KAAK,MAAM,GAAG,IAAI,qBAAqB;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qFAAqF;AACrF,SAAS,QAAQ,CAAC,GAAW,EAAE,IAAuB;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;YACzC,GAAG,EAAE,GAAG;YACR,QAAQ,EAAE,OAAO;YACjB,GAAG,EAAE,YAAY,EAAE;YACnB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC,KAAK,MAAM,CAAC;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC5D,OAAO,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,IAAI,KAAK,KAAK,cAAc;YAAE,SAAS;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAAE,SAAS;QAC/C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,4BAA4B,CAC1C,UAA6B,EAC7B,GAAW;IAEX,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC,KAAK,IAAI;YACrE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAUD;;;;;;;;;;;GAWG;AACH,SAAS,qBAAqB,CAAC,SAAiB;IAC9C,IAAI,CAAC;QACH,OAAO,sBAAsB,CAC3B,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC,CACxE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACxF,MAAM,QAAQ,GAAI,MAAiC,CAAC,QAAQ,CAAC;QAC7D,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9F,MAAM,OAAO,GAAI,QAAkC,CAAC,OAAO,CAAC;QAC5D,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,8BAA8B,CAC5C,SAAiB,EACjB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,CAAC,GAAW,EAAkC,EAAE;QAC9D,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3D,OAAO;YACL,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC;YAC3D,MAAM,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE;SAC1B,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,qBAAqB,CAAC,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5E,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IAEvC,MAAM,UAAU,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC;QAC1E,MAAM,EAAE,gDAAgD,UAAU,GAAG;KACtE,CAAC;AACJ,CAAC;AAYD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAW,EACX,UAAqC,EAAE;IAEvC,MAAM,EAAE,SAAS,EAAE,UAAU,GAAG,EAAE,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IAE7D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CACL,8BAA8B,GAAG,UAAU,YAAY,4BAA4B;YACnF,2EAA2E;YAC3E,2EAA2E;YAC3E,+DAA+D,CAChE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GACR,gCAAgC,GAAG,oCAAoC;QACvE,2EAA2E;QAC3E,iBAAiB,CAAC;IAEpB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,SAAS,IAAI,GAAG,CAAC;QAC9B,OAAO,CACL,GAAG,IAAI,kBAAkB,IAAI,YAAY,UAAU,CAAC,MAAM,aAAa;YACvE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,uDAAuD;YAChF,iEAAiE;YACjE,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,CAAC,IAAI;YAClD,6EAA6E;YAC7E,GAAG,qBAAqB,4BAA4B;YACpD,6EAA6E;YAC7E,qDAAqD,CACtD,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CACL,GAAG,IAAI,0CAA0C,UAAU,CAAC,CAAC,CAAC,uBAAuB;YACrF,qDAAqD;YACrD,GAAG,qBAAqB,IAAI,UAAU,CAAC,CAAC,CAAC,GAAG,CAC7C,CAAC;IACJ,CAAC;IAED,OAAO,CACL,GAAG,IAAI,uEAAuE;QAC9E,gCAAgC,qBAAqB,4BAA4B;QACjF,gDAAgD;QAChD,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,EAAE,OAAO,EAAE,sBAAsB,CAAC,GAAG;QAC7D,gDAAgD,CACjD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,+BAA+B,CAAC,SAAiB,EAAE,aAAqB;IACtF,MAAM,QAAQ,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;IAC3D,OAAO,0BAA0B,CAAC,aAAa,EAAE;QAC/C,SAAS;QACT,UAAU,EAAE,sBAAsB,CAAC,SAAS,CAAC;QAC7C,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;KAChE,CAAC,CAAC;AACL,CAAC"}

package/dist/hooks/handlers/session-hooks.d.ts

@@ -7,14 +7,15 @@
  * T138: Triggers memory bridge refresh on session start and end.
  * T139: Regenerates bridge with session scope on start.
  * T144: Extracts transcript observations on session end.
- * T5158: Auto-snapshots SQLite databases (tasks.db + brain.db) via
- *        VACUUM INTO on SessionEnd to preserve a recovery point now that
- *        the databases are no longer tracked in project git (ADR-013).
+ * T5158: The session-end SQLite snapshot used to live here. T12508 moved it
+ *        to `sessions/session-end-snapshot.ts`, called by `endSession` after
+ *        the session is persisted (hook handlers run concurrently, before
+ *        the session row is written).
  * T527: Removed duplicate session observeBrain writes — session data already
  *       lives in the sessions table; writing it again to brain_observations
  *       was pure noise.
  * T549 Wave 3-E: Fire-and-forget sleep-time consolidation on session end.
- *       Runs after backup (priority 5) so brain.db snapshot is captured first.
+ *       Priority 5.
  * T554: Fire-and-forget LLM reflector on session end. Runs at priority 4
  *       (after consolidation at priority 5) to synthesize final session knowledge.
  * T732: Write `transcript_pending_extraction` tombstone on session end (priority 3).
@@ -44,36 +45,19 @@ export declare function handleSessionStart(projectRoot: string, _payload: Sessio
  *       persisted in the sessions table.
  */
 export declare function handleSessionEnd(projectRoot: string, payload: SessionEndPayload): Promise<void>;
-/**
- * Handle SessionEnd - snapshot SQLite databases to `.cleo/backups/sqlite/`.
- *
- * ADR-013 / T5158: `.cleo/tasks.db` and `.cleo/brain.db` are NOT tracked in
- * project git, so we need an out-of-band recovery mechanism. This handler
- * calls `vacuumIntoBackupAll` with `force: true` at every session end to
- * guarantee a fresh point-in-time snapshot of both databases.
- *
- * Rotation (MAX_SNAPSHOTS = 10 per database) is handled inside
- * `sqlite-backup.ts`. Failures here are non-fatal: a backup error must
- * never block session end.
- *
- * The `vacuumIntoBackupAll` import is deferred to call time so tests that
- * auto-load session-hooks (e.g. via `handlers/index.ts`) do not have to
- * mock every transitive dependency of `sqlite-backup.ts` at hoisted
- * `vi.mock` time.
- */
-export declare function handleSessionEndBackup(projectRoot: string, _payload: SessionEndPayload): Promise<void>;
 /**
  * Handle SessionEnd — fire-and-forget sleep-time memory consolidation.
  *
  * T549 Wave 3-E: Runs the full consolidation pipeline (dedup, quality recompute,
  * tier promotion, contradiction detection, soft eviction, graph strengthening,
- * summary generation) in the background after the session backup has completed.
+ * summary generation) in the background.
  *
  * Uses setImmediate to yield control so the session end flow completes before
  * consolidation begins. Consolidation errors are caught and logged to console.warn
  * — they MUST NOT block session end or throw to callers.
  *
- * Priority 5 ensures this runs last (after backup at priority 10).
+ * Registered at priority 5. Priorities order the handler list only; dispatch
+ * runs all SessionEnd handlers concurrently (see the NOTE at registration).
  */
 export declare function handleSessionEndConsolidation(projectRoot: string, _payload: SessionEndPayload): Promise<void>;
 /**
@@ -131,8 +115,9 @@ export declare function handleSessionEndTranscriptSchedule(projectRoot: string,
  * before process.exit. Using `setImmediate` here would silently drop the write.
  *
  * Runs at priority 2 — the last synchronous hook in the session-end pipeline,
- * ensuring all prior work (backup, consolidation, observer, reflector, transcript)
- * has been scheduled before the journal entry is written.
+ * alongside consolidation, observer, reflector and transcript scheduling
+ * (dispatch runs SessionEnd handlers concurrently, so none is guaranteed to
+ * have finished first).
  */
 export declare function handleSessionEndJournal(projectRoot: string, payload: SessionEndPayload): Promise<void>;
 //# sourceMappingURL=session-hooks.d.ts.map

package/dist/hooks/handlers/session-hooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-hooks.d.ts","sourceRoot":"","sources":["../../../src/hooks/handlers/session-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAG1E;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,6BAA6B,CACjD,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAYf;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,wBAAwB,CAC5C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,yBAAyB,CAC7C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CASf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,kCAAkC,CACtD,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CA6Cf"}
+{"version":3,"file":"session-hooks.d.ts","sourceRoot":"","sources":["../../../src/hooks/handlers/session-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAG1E;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,6BAA6B,CACjD,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAYf;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,wBAAwB,CAC5C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,yBAAyB,CAC7C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CASf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,kCAAkC,CACtD,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CA6Cf"}