@descent-vtt/spec-harness 0.17.0 → 0.19.0

package/dist/fs.d.ts

@@ -3,11 +3,25 @@
  * directory outside the work tree, and paths as the filesystem spells them.
  */
 import { type HarnessConfig } from './config.js';
-/** Reads `.spec-harness.json` at the root, or the defaults when there is none. */
+/**
+ * Reads `.spec-harness.json` at the root, or the defaults when there is none.
+ *
+ * Only a file is read. A named pipe under the file's name was read without
+ * end, by every command and by the hook before every write; and Node's words
+ * for a directory, EISDIR, are not the harness's.
+ */
 export declare function loadConfig(root: string): Promise<{
     config: HarnessConfig;
     file: string | null;
 }>;
+/**
+ * A path where the harness keeps its state that holds something else: said
+ * in a line, exit 2, where Node's ENOTDIR and a stack sent a person looking
+ * for a defect (spec-core ADR-0005).
+ */
+export declare class StateError extends Error {
+    constructor(message: string);
+}
 /**
  * The real spelling of a path: links resolved and, on a filesystem that
  * ignores case, the case the directory entries have. A path that does not
@@ -17,16 +31,82 @@ export declare function loadConfig(root: string): Promise<{
  * `src/db/schema.ts` on Windows or macOS, where both name one file.
  */
 export declare function realSpelling(path: string): string;
+/**
+ * Whether `directory` is the one git names as the top of a work tree: the
+ * two spelled alike once the filesystem has spelled the directory, links
+ * and short names resolved, as git spells a top. A spelling that differs is
+ * read as another directory: what git said from the one is then not taken
+ * for what it would say from the other.
+ */
+export declare function isTop(directory: string, top: string): boolean;
+/**
+ * The repository's main work tree, where git keeps the repository as that
+ * work tree's `.git`, as `git init` and `git clone` do and every linked
+ * worktree's common directory then is: `null` for a common directory of any
+ * other name, a bare repository's, a submodule's under its superproject's
+ * `modules`, or one kept apart with `--separate-git-dir`. Read from the
+ * name, with no process: it says only where an install is looked for.
+ */
+export declare function mainWorkTree(commonDir: string): string | null;
+/** Whether a `.git` stands in `directory`, a repository's or the file that names one, as at the top of a work tree. */
+export declare function holdsGit(directory: string): boolean;
 /**
  * A path as the repository names it - relative to the root, POSIX-separated,
  * real spelling - or `null` when it lies outside the root.
  */
 export declare function repositoryPath(given: string, root: string, cwd: string): string | null;
-/** The harness's own directory under the git common directory, created on demand (ADR-0003). */
+/**
+ * The harness's own directory under the git common directory, created on
+ * demand (ADR-0003). Where something that is no directory stands at its path,
+ * or at one between it and git's, Node refuses to make it, with ENOTDIR or
+ * EEXIST, and the harness says which path holds what.
+ */
 export declare function stateDirectory(commonDir: string, ...parts: string[]): Promise<string>;
+/**
+ * A work tree and its git directories as the files git keeps name them, read
+ * with no process: the nearest directory at or above `root` that holds a
+ * `.git`; the git directory, that `.git` or the one a `.git` file names
+ * (`gitdir: <path>`, relative to the file's directory); and the common
+ * directory, the one that git directory's `commondir` file names, relative
+ * to it, or the git directory itself (gitrepository-layout(5)). `exact` is
+ * whether git, asked, would name the same work tree: not where
+ * `GIT_DIR` or `GIT_WORK_TREE` sends it elsewhere, and not where the
+ * repository's configuration names a `worktree`, which `core.worktree`
+ * moves it to (git-config(1)), or keeps one of its own for a worktree.
+ * `null` where no directory up to the top of the filesystem holds one, or
+ * a `.git` file names none.
+ */
+export declare function gitDirectories(root: string, env: Readonly<Record<string, string | undefined>>): {
+    readonly top: string;
+    readonly common: string;
+    readonly exact: boolean;
+} | null;
+/**
+ * How long a call's decisions are kept for a run after the write that does
+ * not come: a call refused by the person, one that failed, one stopped
+ * (ADR-0002). A day, since a call waits on a person's prompt for as long as
+ * the person is away, and an entry removed too soon costs only that call's
+ * answer being decided again.
+ */
+export declare const CALL_LIFE_MS: number;
+/**
+ * Keeps what a run before a write decided, under the common directory, for
+ * the run after it, and removes what no run after a write read in a day.
+ * Nothing here may change the answer before the write: whatever fails is
+ * passed over, and the run after the write then decides as it did.
+ */
+export declare function keepCall(commonDir: string, name: string, text: string, now?: number): Promise<void>;
+/** What was kept for a call, taken away as it is read; `null` where nothing was. */
+export declare function takeCall(commonDir: string, name: string): Promise<string | null>;
 /** Writes a file whole or not at all: a temporary file renamed over the target. */
 export declare function writeAtomic(file: string, content: string): Promise<void>;
-/** A JSON object from a file: `null` when there is no file, `'unreadable'` when it holds anything else. */
+/**
+ * A JSON object from a file: `null` when there is no file, `'unreadable'`
+ * when it holds anything else. Only a file is read: a named pipe where a
+ * settings file is expected was read without end, and neither doctor nor
+ * init came back. What is neither a file nor a directory holds no JSON
+ * object, as a directory holds none.
+ */
 export declare function readJsonObject(file: string): Promise<Record<string, unknown> | null | 'unreadable'>;
 /** Whether a path names a directory that is there; one that cannot be read names none. */
 export declare function isDirectory(path: string): boolean;

package/dist/fs.js

@@ -2,29 +2,54 @@
  * The edge where the harness meets the disk: the configuration, the state
  * directory outside the work tree, and paths as the filesystem spells them.
  */
-import { existsSync, realpathSync, statSync } from 'node:fs';
-import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
-import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { existsSync, readFileSync, realpathSync, statSync } from 'node:fs';
+import { mkdir, readdir, readFile, rename, rm, stat, writeFile } from 'node:fs/promises';
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
 import { ConfigError, CONFIG_FILE, DEFAULT_CONFIG, parseConfig } from './config.js';
-/** Reads `.spec-harness.json` at the root, or the defaults when there is none. */
+/** What stands at a path, links followed, or `null` where nothing does: a link to nothing is nothing. */
+function standing(path) {
+    try {
+        return statSync(path);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Reads `.spec-harness.json` at the root, or the defaults when there is none.
+ *
+ * Only a file is read. A named pipe under the file's name was read without
+ * end, by every command and by the hook before every write; and Node's words
+ * for a directory, EISDIR, are not the harness's.
+ */
 export async function loadConfig(root) {
     const file = join(root, CONFIG_FILE);
-    if (!existsSync(file))
+    const there = standing(file);
+    if (there === null)
         return { config: DEFAULT_CONFIG, file: null };
+    if (!there.isFile())
+        throw new ConfigError(`${CONFIG_FILE} is ${there.isDirectory() ? 'a directory' : 'neither a file nor a directory'}, not a configuration file`);
     let raw;
     try {
         // A Buffer parses as its text, so the encoding is equivalent to its mutant.
         raw = JSON.parse(await readFile(file, 'utf8'));
     }
     catch (error) {
-        // A directory under the file's name is not JSON that went wrong, and
-        // Node's words for it, EISDIR, are not the harness's.
-        if (error.code === 'EISDIR')
-            throw new ConfigError(`${CONFIG_FILE} is a directory, not a configuration file`);
         throw new ConfigError(`${CONFIG_FILE} is not valid JSON: ${error.message}`);
     }
     return { config: parseConfig(raw), file };
 }
+/**
+ * A path where the harness keeps its state that holds something else: said
+ * in a line, exit 2, where Node's ENOTDIR and a stack sent a person looking
+ * for a defect (spec-core ADR-0005).
+ */
+export class StateError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'StateError';
+    }
+}
 /**
  * The real spelling of a path: links resolved and, on a filesystem that
  * ignores case, the case the directory entries have. A path that does not
@@ -53,6 +78,31 @@ export function realSpelling(path) {
         }
     }
 }
+/**
+ * Whether `directory` is the one git names as the top of a work tree: the
+ * two spelled alike once the filesystem has spelled the directory, links
+ * and short names resolved, as git spells a top. A spelling that differs is
+ * read as another directory: what git said from the one is then not taken
+ * for what it would say from the other.
+ */
+export function isTop(directory, top) {
+    return realSpelling(directory).split(sep).join('/') === top;
+}
+/**
+ * The repository's main work tree, where git keeps the repository as that
+ * work tree's `.git`, as `git init` and `git clone` do and every linked
+ * worktree's common directory then is: `null` for a common directory of any
+ * other name, a bare repository's, a submodule's under its superproject's
+ * `modules`, or one kept apart with `--separate-git-dir`. Read from the
+ * name, with no process: it says only where an install is looked for.
+ */
+export function mainWorkTree(commonDir) {
+    return basename(commonDir) === '.git' ? dirname(commonDir) : null;
+}
+/** Whether a `.git` stands in `directory`, a repository's or the file that names one, as at the top of a work tree. */
+export function holdsGit(directory) {
+    return existsSync(join(directory, '.git'));
+}
 /**
  * A path as the repository names it - relative to the root, POSIX-separated,
  * real spelling - or `null` when it lies outside the root.
@@ -67,12 +117,130 @@ export function repositoryPath(given, root, cwd) {
         return null;
     return rel.split(sep).join('/');
 }
-/** The harness's own directory under the git common directory, created on demand (ADR-0003). */
+/**
+ * The harness's own directory under the git common directory, created on
+ * demand (ADR-0003). Where something that is no directory stands at its path,
+ * or at one between it and git's, Node refuses to make it, with ENOTDIR or
+ * EEXIST, and the harness says which path holds what.
+ */
 export async function stateDirectory(commonDir, ...parts) {
     const directory = join(commonDir, 'spec-harness', ...parts);
-    await mkdir(directory, { recursive: true });
+    try {
+        await mkdir(directory, { recursive: true });
+    }
+    catch (error) {
+        const { code } = error;
+        if (code !== 'ENOTDIR' && code !== 'EEXIST')
+            throw error;
+        // mkdir refuses for this alone, so one of the steps is there and is no
+        // directory, and every step before it is one.
+        const steps = ['spec-harness', ...parts].map((_, at, all) => join(commonDir, ...all.slice(0, at + 1)));
+        const there = steps.find((step) => !standing(step).isDirectory());
+        throw new StateError(`${there} is not a directory, where spec-harness keeps its state in one: move it away, and run the command again`);
+    }
     return directory;
 }
+/**
+ * A work tree and its git directories as the files git keeps name them, read
+ * with no process: the nearest directory at or above `root` that holds a
+ * `.git`; the git directory, that `.git` or the one a `.git` file names
+ * (`gitdir: <path>`, relative to the file's directory); and the common
+ * directory, the one that git directory's `commondir` file names, relative
+ * to it, or the git directory itself (gitrepository-layout(5)). `exact` is
+ * whether git, asked, would name the same work tree: not where
+ * `GIT_DIR` or `GIT_WORK_TREE` sends it elsewhere, and not where the
+ * repository's configuration names a `worktree`, which `core.worktree`
+ * moves it to (git-config(1)), or keeps one of its own for a worktree.
+ * `null` where no directory up to the top of the filesystem holds one, or
+ * a `.git` file names none.
+ */
+export function gitDirectories(root, env) {
+    let top = realSpelling(root);
+    let found = null;
+    for (;;) {
+        found = standing(join(top, '.git'));
+        if (found !== null)
+            break;
+        const parent = dirname(top);
+        if (parent === top)
+            return null;
+        top = parent;
+    }
+    const dotGit = join(top, '.git');
+    let gitDir = dotGit;
+    if (found.isFile()) {
+        // The path is the rest of the line: `.` stops at a line's end, a
+        // carriage return among them, so the mutant that drops `$` is
+        // equivalent; and a Buffer is read as its text, so is the encoding's.
+        const named = /^gitdir: (.+)$/m.exec(readFileSync(dotGit, 'utf8'))?.[1];
+        if (named === undefined)
+            return null;
+        gitDir = resolve(top, named);
+    }
+    const commondir = textOf(join(gitDir, 'commondir'));
+    const common = commondir === null ? gitDir : resolve(gitDir, commondir.trim());
+    const moved = env['GIT_DIR'] !== undefined || env['GIT_WORK_TREE'] !== undefined;
+    // No configuration holds no key, as a text without one does: the mutant
+    // of the empty text is equivalent.
+    const elsewhere = /^\s*worktree\s*=/im.test(textOf(join(common, 'config')) ?? '') || existsSync(join(gitDir, 'config.worktree'));
+    return { top, common, exact: !moved && !elsewhere };
+}
+/** A file's text, or `null` where it cannot be read. */
+function textOf(file) {
+    try {
+        return readFileSync(file, 'utf8');
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * How long a call's decisions are kept for a run after the write that does
+ * not come: a call refused by the person, one that failed, one stopped
+ * (ADR-0002). A day, since a call waits on a person's prompt for as long as
+ * the person is away, and an entry removed too soon costs only that call's
+ * answer being decided again.
+ */
+export const CALL_LIFE_MS = 24 * 60 * 60 * 1000;
+/**
+ * Keeps what a run before a write decided, under the common directory, for
+ * the run after it, and removes what no run after a write read in a day.
+ * Nothing here may change the answer before the write: whatever fails is
+ * passed over, and the run after the write then decides as it did.
+ */
+export async function keepCall(commonDir, name, text, now = Date.now()) {
+    try {
+        const directory = await stateDirectory(commonDir, 'calls');
+        await writeAtomic(join(directory, name), text);
+        // A file another run takes away before it is removed here ends the
+        // pruning in the catch below, where `force` would pass over it, and what
+        // is left is pruned by a later run: the mutants of `force` are
+        // equivalent.
+        for (const entry of await readdir(directory)) {
+            const file = join(directory, entry);
+            if (now - (await stat(file)).mtimeMs > CALL_LIFE_MS)
+                await rm(file, { force: true });
+        }
+    }
+    catch {
+        // A full disk, a directory another run removed: the call is decided again after the write.
+    }
+}
+/** What was kept for a call, taken away as it is read; `null` where nothing was. */
+export async function takeCall(commonDir, name) {
+    const file = join(commonDir, 'spec-harness', 'calls', name);
+    try {
+        const text = await readFile(file, 'utf8');
+        // Taken away by another run since it was read, the mutants of `force`
+        // decide the call again, which answers as the text read does: they are
+        // equivalent.
+        await rm(file, { force: true });
+        return text;
+    }
+    catch {
+        return null;
+    }
+}
 /** Writes a file whole or not at all: a temporary file renamed over the target. */
 export async function writeAtomic(file, content) {
     await mkdir(dirname(file), { recursive: true });
@@ -81,10 +249,19 @@ export async function writeAtomic(file, content) {
     await writeFile(temporary, content, 'utf8');
     await rename(temporary, file);
 }
-/** A JSON object from a file: `null` when there is no file, `'unreadable'` when it holds anything else. */
+/**
+ * A JSON object from a file: `null` when there is no file, `'unreadable'`
+ * when it holds anything else. Only a file is read: a named pipe where a
+ * settings file is expected was read without end, and neither doctor nor
+ * init came back. What is neither a file nor a directory holds no JSON
+ * object, as a directory holds none.
+ */
 export async function readJsonObject(file) {
-    if (!existsSync(file))
+    const there = standing(file);
+    if (there === null)
         return null;
+    if (!there.isFile())
+        return 'unreadable';
     try {
         // A Buffer parses as its text, so the encoding is equivalent to its mutant.
         const value = JSON.parse(await readFile(file, 'utf8'));

package/dist/fs.js.map

@@ -1 +1 @@
-{"version":3,"file":"fs.js","sourceRoot":"","sources":["../src/fs.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE9E,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAsB,MAAM,aAAa,CAAC;AAExG,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACrE,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,4EAA4E;QAC5E,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qEAAqE;QACrE,sDAAsD;QACtD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,WAAW,2CAA2C,CAAC,CAAC;QACzI,MAAM,IAAI,WAAW,CAAC,GAAG,WAAW,uBAAwB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,SAAS,CAAC;QACR,IAAI,CAAC;YACH,kEAAkE;YAClE,gDAAgD;YAChD,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAChC,oEAAoE;YACpE,2DAA2D;YAC3D,IAAI,MAAM,KAAK,OAAO;gBAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3C,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,IAAY,EAAE,GAAW;IACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrC,oEAAoE;IACpE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,GAAG,KAAe;IACxE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC,CAAC;IAC5D,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe;IAC7D,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC/C,6EAA6E;IAC7E,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,2GAA2G;AAC3G,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,4EAA4E;QAC5E,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAChE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,YAAY,CAAC;IAClI,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC;IACtB,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,8BAA8B;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["/**\n * The edge where the harness meets the disk: the configuration, the state\n * directory outside the work tree, and paths as the filesystem spells them.\n */\n\nimport { existsSync, realpathSync, statSync } from 'node:fs';\nimport { mkdir, readFile, rename, writeFile } from 'node:fs/promises';\nimport { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';\n\nimport { ConfigError, CONFIG_FILE, DEFAULT_CONFIG, parseConfig, type HarnessConfig } from './config.js';\n\n/** Reads `.spec-harness.json` at the root, or the defaults when there is none. */\nexport async function loadConfig(root: string): Promise<{ config: HarnessConfig; file: string | null }> {\n  const file = join(root, CONFIG_FILE);\n  if (!existsSync(file)) return { config: DEFAULT_CONFIG, file: null };\n  let raw: unknown;\n  try {\n    // A Buffer parses as its text, so the encoding is equivalent to its mutant.\n    raw = JSON.parse(await readFile(file, 'utf8'));\n  } catch (error) {\n    // A directory under the file's name is not JSON that went wrong, and\n    // Node's words for it, EISDIR, are not the harness's.\n    if ((error as NodeJS.ErrnoException).code === 'EISDIR') throw new ConfigError(`${CONFIG_FILE} is a directory, not a configuration file`);\n    throw new ConfigError(`${CONFIG_FILE} is not valid JSON: ${(error as Error).message}`);\n  }\n  return { config: parseConfig(raw), file };\n}\n\n/**\n * The real spelling of a path: links resolved and, on a filesystem that\n * ignores case, the case the directory entries have. A path that does not\n * exist yet is resolved through its nearest existing ancestor.\n *\n * This is what stops `SRC/db/schema.ts` from walking past a protection on\n * `src/db/schema.ts` on Windows or macOS, where both name one file.\n */\nexport function realSpelling(path: string): string {\n  const missing: string[] = [];\n  let current = resolve(path);\n  for (;;) {\n    try {\n      // join leaves a real path as it is, and reads a segment's leading\n      // separator as the one between it and the last.\n      return join(realpathSync.native(current), ...missing.reverse());\n    } catch {\n      const parent = dirname(current);\n      // Only a root that does not exist fails at the top, a drive Windows\n      // does not have; everywhere else the loop ends in the try.\n      if (parent === current) return resolve(path);\n      missing.push(current.slice(parent.length));\n      current = parent;\n    }\n  }\n}\n\n/**\n * A path as the repository names it - relative to the root, POSIX-separated,\n * real spelling - or `null` when it lies outside the root.\n */\nexport function repositoryPath(given: string, root: string, cwd: string): string | null {\n  const absolute = isAbsolute(given) ? given : resolve(cwd, given);\n  const real = realSpelling(absolute);\n  const realRoot = realSpelling(root);\n  const rel = relative(realRoot, real);\n  // `..env` at the root is inside it; only a `..` segment climbs out.\n  if (rel === '..' || rel.startsWith(`..${sep}`) || isAbsolute(rel)) return null;\n  return rel.split(sep).join('/');\n}\n\n/** The harness's own directory under the git common directory, created on demand (ADR-0003). */\nexport async function stateDirectory(commonDir: string, ...parts: string[]): Promise<string> {\n  const directory = join(commonDir, 'spec-harness', ...parts);\n  await mkdir(directory, { recursive: true });\n  return directory;\n}\n\n/** Writes a file whole or not at all: a temporary file renamed over the target. */\nexport async function writeAtomic(file: string, content: string): Promise<void> {\n  await mkdir(dirname(file), { recursive: true });\n  const temporary = `${file}.${process.pid}.tmp`;\n  // utf8 is writeFile's own default, so naming it is equivalent to its mutant.\n  await writeFile(temporary, content, 'utf8');\n  await rename(temporary, file);\n}\n\n/** A JSON object from a file: `null` when there is no file, `'unreadable'` when it holds anything else. */\nexport async function readJsonObject(file: string): Promise<Record<string, unknown> | null | 'unreadable'> {\n  if (!existsSync(file)) return null;\n  try {\n    // A Buffer parses as its text, so the encoding is equivalent to its mutant.\n    const value: unknown = JSON.parse(await readFile(file, 'utf8'));\n    return typeof value === 'object' && value !== null && !Array.isArray(value) ? (value as Record<string, unknown>) : 'unreadable';\n  } catch {\n    return 'unreadable';\n  }\n}\n\n/** Whether a path names a directory that is there; one that cannot be read names none. */\nexport function isDirectory(path: string): boolean {\n  try {\n    return statSync(path).isDirectory();\n  } catch {\n    // Each caller reads the answer with `!`, so the mutant that answers\n    // nothing here is equivalent.\n    return false;\n  }\n}\n\nexport async function readText(file: string): Promise<string | null> {\n  try {\n    return await readFile(file, 'utf8');\n  } catch {\n    return null;\n  }\n}\n"]}
+{"version":3,"file":"fs.js","sourceRoot":"","sources":["../src/fs.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAc,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAExF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAsB,MAAM,aAAa,CAAC;AAExG,yGAAyG;AACzG,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAClE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,WAAW,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gCAAgC,4BAA4B,CAAC,CAAC;IACpK,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,4EAA4E;QAC5E,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,WAAW,CAAC,GAAG,WAAW,uBAAwB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,UAAW,SAAQ,KAAK;IACnC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,SAAS,CAAC;QACR,IAAI,CAAC;YACH,kEAAkE;YAClE,gDAAgD;YAChD,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAChC,oEAAoE;YACpE,2DAA2D;YAC3D,IAAI,MAAM,KAAK,OAAO;gBAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3C,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,KAAK,CAAC,SAAiB,EAAE,GAAW;IAClD,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC;AAC9D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,OAAO,QAAQ,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,QAAQ,CAAC,SAAiB;IACxC,OAAO,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,IAAY,EAAE,GAAW;IACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrC,oEAAoE;IACpE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,GAAG,KAAe;IACxE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,IAAI,EAAE,GAAG,KAA8B,CAAC;QAChD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACzD,uEAAuE;QACvE,8CAA8C;QAC9C,MAAM,KAAK,GAAG,CAAC,cAAc,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvG,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAE,CAAC,WAAW,EAAE,CAAE,CAAC;QACpE,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,yGAAyG,CAAC,CAAC;IAC1I,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,GAAiD;IAC5F,IAAI,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,KAAK,GAAiB,IAAI,CAAC;IAC/B,SAAS,CAAC;QACR,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM;QAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,MAAM,GAAG,MAAM,CAAC;IACpB,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACnB,iEAAiE;QACjE,8DAA8D;QAC9D,sEAAsE;QACtE,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACrC,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,eAAe,CAAC,KAAK,SAAS,CAAC;IACjF,wEAAwE;IACxE,mCAAmC;IACnC,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACjI,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;AACtD,CAAC;AAED,wDAAwD;AACxD,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,SAAiB,EAAE,IAAY,EAAE,IAAY,EAAE,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IACpG,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/C,mEAAmE;QACnE,yEAAyE;QACzE,+DAA+D;QAC/D,cAAc;QACd,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACpC,IAAI,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,YAAY;gBAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2FAA2F;IAC7F,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,SAAiB,EAAE,IAAY;IAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,sEAAsE;QACtE,uEAAuE;QACvE,cAAc;QACd,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe;IAC7D,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC/C,6EAA6E;IAC7E,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;QAAE,OAAO,YAAY,CAAC;IACzC,IAAI,CAAC;QACH,4EAA4E;QAC5E,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAChE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,YAAY,CAAC;IAClI,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC;IACtB,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,8BAA8B;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["/**\n * The edge where the harness meets the disk: the configuration, the state\n * directory outside the work tree, and paths as the filesystem spells them.\n */\n\nimport { existsSync, readFileSync, realpathSync, statSync, type Stats } from 'node:fs';\nimport { mkdir, readdir, readFile, rename, rm, stat, writeFile } from 'node:fs/promises';\nimport { basename, dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';\n\nimport { ConfigError, CONFIG_FILE, DEFAULT_CONFIG, parseConfig, type HarnessConfig } from './config.js';\n\n/** What stands at a path, links followed, or `null` where nothing does: a link to nothing is nothing. */\nfunction standing(path: string): Stats | null {\n  try {\n    return statSync(path);\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Reads `.spec-harness.json` at the root, or the defaults when there is none.\n *\n * Only a file is read. A named pipe under the file's name was read without\n * end, by every command and by the hook before every write; and Node's words\n * for a directory, EISDIR, are not the harness's.\n */\nexport async function loadConfig(root: string): Promise<{ config: HarnessConfig; file: string | null }> {\n  const file = join(root, CONFIG_FILE);\n  const there = standing(file);\n  if (there === null) return { config: DEFAULT_CONFIG, file: null };\n  if (!there.isFile()) throw new ConfigError(`${CONFIG_FILE} is ${there.isDirectory() ? 'a directory' : 'neither a file nor a directory'}, not a configuration file`);\n  let raw: unknown;\n  try {\n    // A Buffer parses as its text, so the encoding is equivalent to its mutant.\n    raw = JSON.parse(await readFile(file, 'utf8'));\n  } catch (error) {\n    throw new ConfigError(`${CONFIG_FILE} is not valid JSON: ${(error as Error).message}`);\n  }\n  return { config: parseConfig(raw), file };\n}\n\n/**\n * A path where the harness keeps its state that holds something else: said\n * in a line, exit 2, where Node's ENOTDIR and a stack sent a person looking\n * for a defect (spec-core ADR-0005).\n */\nexport class StateError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'StateError';\n  }\n}\n\n/**\n * The real spelling of a path: links resolved and, on a filesystem that\n * ignores case, the case the directory entries have. A path that does not\n * exist yet is resolved through its nearest existing ancestor.\n *\n * This is what stops `SRC/db/schema.ts` from walking past a protection on\n * `src/db/schema.ts` on Windows or macOS, where both name one file.\n */\nexport function realSpelling(path: string): string {\n  const missing: string[] = [];\n  let current = resolve(path);\n  for (;;) {\n    try {\n      // join leaves a real path as it is, and reads a segment's leading\n      // separator as the one between it and the last.\n      return join(realpathSync.native(current), ...missing.reverse());\n    } catch {\n      const parent = dirname(current);\n      // Only a root that does not exist fails at the top, a drive Windows\n      // does not have; everywhere else the loop ends in the try.\n      if (parent === current) return resolve(path);\n      missing.push(current.slice(parent.length));\n      current = parent;\n    }\n  }\n}\n\n/**\n * Whether `directory` is the one git names as the top of a work tree: the\n * two spelled alike once the filesystem has spelled the directory, links\n * and short names resolved, as git spells a top. A spelling that differs is\n * read as another directory: what git said from the one is then not taken\n * for what it would say from the other.\n */\nexport function isTop(directory: string, top: string): boolean {\n  return realSpelling(directory).split(sep).join('/') === top;\n}\n\n/**\n * The repository's main work tree, where git keeps the repository as that\n * work tree's `.git`, as `git init` and `git clone` do and every linked\n * worktree's common directory then is: `null` for a common directory of any\n * other name, a bare repository's, a submodule's under its superproject's\n * `modules`, or one kept apart with `--separate-git-dir`. Read from the\n * name, with no process: it says only where an install is looked for.\n */\nexport function mainWorkTree(commonDir: string): string | null {\n  return basename(commonDir) === '.git' ? dirname(commonDir) : null;\n}\n\n/** Whether a `.git` stands in `directory`, a repository's or the file that names one, as at the top of a work tree. */\nexport function holdsGit(directory: string): boolean {\n  return existsSync(join(directory, '.git'));\n}\n\n/**\n * A path as the repository names it - relative to the root, POSIX-separated,\n * real spelling - or `null` when it lies outside the root.\n */\nexport function repositoryPath(given: string, root: string, cwd: string): string | null {\n  const absolute = isAbsolute(given) ? given : resolve(cwd, given);\n  const real = realSpelling(absolute);\n  const realRoot = realSpelling(root);\n  const rel = relative(realRoot, real);\n  // `..env` at the root is inside it; only a `..` segment climbs out.\n  if (rel === '..' || rel.startsWith(`..${sep}`) || isAbsolute(rel)) return null;\n  return rel.split(sep).join('/');\n}\n\n/**\n * The harness's own directory under the git common directory, created on\n * demand (ADR-0003). Where something that is no directory stands at its path,\n * or at one between it and git's, Node refuses to make it, with ENOTDIR or\n * EEXIST, and the harness says which path holds what.\n */\nexport async function stateDirectory(commonDir: string, ...parts: string[]): Promise<string> {\n  const directory = join(commonDir, 'spec-harness', ...parts);\n  try {\n    await mkdir(directory, { recursive: true });\n  } catch (error) {\n    const { code } = error as NodeJS.ErrnoException;\n    if (code !== 'ENOTDIR' && code !== 'EEXIST') throw error;\n    // mkdir refuses for this alone, so one of the steps is there and is no\n    // directory, and every step before it is one.\n    const steps = ['spec-harness', ...parts].map((_, at, all) => join(commonDir, ...all.slice(0, at + 1)));\n    const there = steps.find((step) => !standing(step)!.isDirectory())!;\n    throw new StateError(`${there} is not a directory, where spec-harness keeps its state in one: move it away, and run the command again`);\n  }\n  return directory;\n}\n\n/**\n * A work tree and its git directories as the files git keeps name them, read\n * with no process: the nearest directory at or above `root` that holds a\n * `.git`; the git directory, that `.git` or the one a `.git` file names\n * (`gitdir: <path>`, relative to the file's directory); and the common\n * directory, the one that git directory's `commondir` file names, relative\n * to it, or the git directory itself (gitrepository-layout(5)). `exact` is\n * whether git, asked, would name the same work tree: not where\n * `GIT_DIR` or `GIT_WORK_TREE` sends it elsewhere, and not where the\n * repository's configuration names a `worktree`, which `core.worktree`\n * moves it to (git-config(1)), or keeps one of its own for a worktree.\n * `null` where no directory up to the top of the filesystem holds one, or\n * a `.git` file names none.\n */\nexport function gitDirectories(root: string, env: Readonly<Record<string, string | undefined>>): { readonly top: string; readonly common: string; readonly exact: boolean } | null {\n  let top = realSpelling(root);\n  let found: Stats | null = null;\n  for (;;) {\n    found = standing(join(top, '.git'));\n    if (found !== null) break;\n    const parent = dirname(top);\n    if (parent === top) return null;\n    top = parent;\n  }\n  const dotGit = join(top, '.git');\n  let gitDir = dotGit;\n  if (found.isFile()) {\n    // The path is the rest of the line: `.` stops at a line's end, a\n    // carriage return among them, so the mutant that drops `$` is\n    // equivalent; and a Buffer is read as its text, so is the encoding's.\n    const named = /^gitdir: (.+)$/m.exec(readFileSync(dotGit, 'utf8'))?.[1];\n    if (named === undefined) return null;\n    gitDir = resolve(top, named);\n  }\n  const commondir = textOf(join(gitDir, 'commondir'));\n  const common = commondir === null ? gitDir : resolve(gitDir, commondir.trim());\n  const moved = env['GIT_DIR'] !== undefined || env['GIT_WORK_TREE'] !== undefined;\n  // No configuration holds no key, as a text without one does: the mutant\n  // of the empty text is equivalent.\n  const elsewhere = /^\\s*worktree\\s*=/im.test(textOf(join(common, 'config')) ?? '') || existsSync(join(gitDir, 'config.worktree'));\n  return { top, common, exact: !moved && !elsewhere };\n}\n\n/** A file's text, or `null` where it cannot be read. */\nfunction textOf(file: string): string | null {\n  try {\n    return readFileSync(file, 'utf8');\n  } catch {\n    return null;\n  }\n}\n\n/**\n * How long a call's decisions are kept for a run after the write that does\n * not come: a call refused by the person, one that failed, one stopped\n * (ADR-0002). A day, since a call waits on a person's prompt for as long as\n * the person is away, and an entry removed too soon costs only that call's\n * answer being decided again.\n */\nexport const CALL_LIFE_MS = 24 * 60 * 60 * 1000;\n\n/**\n * Keeps what a run before a write decided, under the common directory, for\n * the run after it, and removes what no run after a write read in a day.\n * Nothing here may change the answer before the write: whatever fails is\n * passed over, and the run after the write then decides as it did.\n */\nexport async function keepCall(commonDir: string, name: string, text: string, now: number = Date.now()): Promise<void> {\n  try {\n    const directory = await stateDirectory(commonDir, 'calls');\n    await writeAtomic(join(directory, name), text);\n    // A file another run takes away before it is removed here ends the\n    // pruning in the catch below, where `force` would pass over it, and what\n    // is left is pruned by a later run: the mutants of `force` are\n    // equivalent.\n    for (const entry of await readdir(directory)) {\n      const file = join(directory, entry);\n      if (now - (await stat(file)).mtimeMs > CALL_LIFE_MS) await rm(file, { force: true });\n    }\n  } catch {\n    // A full disk, a directory another run removed: the call is decided again after the write.\n  }\n}\n\n/** What was kept for a call, taken away as it is read; `null` where nothing was. */\nexport async function takeCall(commonDir: string, name: string): Promise<string | null> {\n  const file = join(commonDir, 'spec-harness', 'calls', name);\n  try {\n    const text = await readFile(file, 'utf8');\n    // Taken away by another run since it was read, the mutants of `force`\n    // decide the call again, which answers as the text read does: they are\n    // equivalent.\n    await rm(file, { force: true });\n    return text;\n  } catch {\n    return null;\n  }\n}\n\n/** Writes a file whole or not at all: a temporary file renamed over the target. */\nexport async function writeAtomic(file: string, content: string): Promise<void> {\n  await mkdir(dirname(file), { recursive: true });\n  const temporary = `${file}.${process.pid}.tmp`;\n  // utf8 is writeFile's own default, so naming it is equivalent to its mutant.\n  await writeFile(temporary, content, 'utf8');\n  await rename(temporary, file);\n}\n\n/**\n * A JSON object from a file: `null` when there is no file, `'unreadable'`\n * when it holds anything else. Only a file is read: a named pipe where a\n * settings file is expected was read without end, and neither doctor nor\n * init came back. What is neither a file nor a directory holds no JSON\n * object, as a directory holds none.\n */\nexport async function readJsonObject(file: string): Promise<Record<string, unknown> | null | 'unreadable'> {\n  const there = standing(file);\n  if (there === null) return null;\n  if (!there.isFile()) return 'unreadable';\n  try {\n    // A Buffer parses as its text, so the encoding is equivalent to its mutant.\n    const value: unknown = JSON.parse(await readFile(file, 'utf8'));\n    return typeof value === 'object' && value !== null && !Array.isArray(value) ? (value as Record<string, unknown>) : 'unreadable';\n  } catch {\n    return 'unreadable';\n  }\n}\n\n/** Whether a path names a directory that is there; one that cannot be read names none. */\nexport function isDirectory(path: string): boolean {\n  try {\n    return statSync(path).isDirectory();\n  } catch {\n    // Each caller reads the answer with `!`, so the mutant that answers\n    // nothing here is equivalent.\n    return false;\n  }\n}\n\nexport async function readText(file: string): Promise<string | null> {\n  try {\n    return await readFile(file, 'utf8');\n  } catch {\n    return null;\n  }\n}\n"]}

package/dist/git.d.ts

@@ -6,7 +6,7 @@
  * call is an argument vector, never a shell string, so a path or a ref cannot
  * become a command.
  */
-import type { FileChange } from './types.js';
+import type { FileChange, LocalBranch } from './types.js';
 export interface Run {
     readonly code: number;
     readonly stdout: string;
@@ -21,18 +21,77 @@ export declare class GitError extends Error {
 export declare function workTreeRoot(cwd: string): Promise<string | null>;
 /** The git directory every worktree of this repository shares. */
 export declare function commonDirectory(cwd: string): Promise<string | null>;
+/** A work tree as one start of git names it: its top, and the git directory its worktrees share. */
+export interface WorkTree {
+    readonly root: string;
+    readonly commonDir: string;
+}
+/**
+ * The top of the work tree holding `cwd` and the common directory, asked of
+ * git in one start where {@link workTreeRoot} and {@link commonDirectory}
+ * are two: `null` outside a work tree, and `'unread'` where the one answer
+ * cannot be taken for the two, which are then to be asked for as they were.
+ *
+ * Measured with git 2.43 and 2.55, rev-parse answers the two in the order
+ * they stand on its line, a line each, and prints nothing where the first
+ * fails. Its manual says of that only that `--show-toplevel` reports an
+ * error where there is no working tree (git-rev-parse(1), Options for
+ * Files, as git 2.55.0 has it, read 2026-10-14), so nothing is read on
+ * trust. Two lines that are each what `trim` would leave, from a git that
+ * did not fail, are the two answers. Nothing printed, by a git that
+ * failed, is the first question failing, the one {@link workTreeRoot}
+ * asks: `cwd` is in no work tree. Anything else is not read: a path that
+ * holds a line break is more lines than two, and so is what a git before
+ * 2.31 would print, to which `--path-format=absolute` is a flag to hand
+ * back (the same manual, Options for Filtering; the option is new in the
+ * release notes of 2.31.0). No such git was measured.
+ *
+ * `--path-format` reaches only what follows it on the line (Options for
+ * Files), so the top is printed as it is where it is asked for alone. The
+ * common directory is asked for from `cwd` here, and from the top by
+ * {@link commonDirectory}: the same directory only where `cwd` is the top.
+ */
+export declare function workTree(cwd: string): Promise<WorkTree | 'unread' | null>;
 /**
  * Where git runs the hook `name` from, absolute: `core.hooksPath` read as git
  * reads it - relative to the work tree, absolute, or under `~` - and a linked
- * worktree's shared hooks. `null` when git cannot say, before 2.31.
+ * worktree's shared hooks. Where git cannot say, the first line of what it
+ * said instead: under a `core.hooksPath` that names a file it refuses the
+ * path as one that is not a directory (measured with git 2.47 and 2.55).
+ */
+export declare function hookPath(name: string, cwd: string): Promise<{
+    readonly path: string;
+} | {
+    readonly refused: string;
+}>;
+/**
+ * The checked-out branch's name, or `null` on a detached head: what HEAD
+ * points at, with `refs/heads/` taken off and nothing else. `--short` gives
+ * the shortest name git reads as that ref and no other, which is another
+ * name where a tag, or a ref under `refs/`, has the branch's: measured with
+ * git 2.55, on `claude/brief-042-x` beside the tag `claude/brief-042-x` it
+ * answers `heads/claude/brief-042-x`, which no template reads, and the
+ * brief went unnamed (ADR-0005). A HEAD that points outside `refs/heads/`,
+ * as `git symbolic-ref HEAD refs/tags/x` leaves it, is named as git status
+ * names it, the ref whole.
  */
-export declare function hookPath(name: string, cwd: string): Promise<string | null>;
-/** The checked-out branch's short name, or `null` on a detached head. */
 export declare function currentBranch(cwd: string): Promise<string | null>;
-/** The remote's default branch as a local ref, such as `origin/main`, or `null`. */
+/**
+ * The remote's default branch as a local ref, such as `origin/main`, or
+ * `null`. This is a ref the harness hands git and spec-brief as the base, so
+ * it is the short name git reads as that ref and no other: beside a local
+ * branch or a tag named `origin/main`, measured with git 2.55, it is
+ * `remotes/origin/main`, where `origin/main` would be read as the branch or
+ * the tag (gitrevisions(7), the order a ref name is read in).
+ */
 export declare function remoteDefault(cwd: string): Promise<string | null>;
-/** Every local branch, by its short name. */
-export declare function localBranches(cwd: string): Promise<string[]>;
+/**
+ * Every local branch. The two are one name but where a tag, or a ref under
+ * `refs/`, has the branch's: `main` beside the tag `main` is the ref
+ * `heads/main`. A ref name holds no control character
+ * (git-check-ref-format(1)), so a tab parts the two.
+ */
+export declare function localBranches(cwd: string): Promise<LocalBranch[]>;
 export declare function revision(ref: string, cwd: string): Promise<string | null>;
 export declare function mergeBase(a: string, b: string, cwd: string): Promise<string | null>;
 /** Parses `git diff --name-status -z` output. */

package/dist/git.js

@@ -38,28 +38,100 @@ export async function workTreeRoot(cwd) {
 export async function commonDirectory(cwd) {
     return value(['rev-parse', '--path-format=absolute', '--git-common-dir'], cwd);
 }
+/**
+ * The top of the work tree holding `cwd` and the common directory, asked of
+ * git in one start where {@link workTreeRoot} and {@link commonDirectory}
+ * are two: `null` outside a work tree, and `'unread'` where the one answer
+ * cannot be taken for the two, which are then to be asked for as they were.
+ *
+ * Measured with git 2.43 and 2.55, rev-parse answers the two in the order
+ * they stand on its line, a line each, and prints nothing where the first
+ * fails. Its manual says of that only that `--show-toplevel` reports an
+ * error where there is no working tree (git-rev-parse(1), Options for
+ * Files, as git 2.55.0 has it, read 2026-10-14), so nothing is read on
+ * trust. Two lines that are each what `trim` would leave, from a git that
+ * did not fail, are the two answers. Nothing printed, by a git that
+ * failed, is the first question failing, the one {@link workTreeRoot}
+ * asks: `cwd` is in no work tree. Anything else is not read: a path that
+ * holds a line break is more lines than two, and so is what a git before
+ * 2.31 would print, to which `--path-format=absolute` is a flag to hand
+ * back (the same manual, Options for Filtering; the option is new in the
+ * release notes of 2.31.0). No such git was measured.
+ *
+ * `--path-format` reaches only what follows it on the line (Options for
+ * Files), so the top is printed as it is where it is asked for alone. The
+ * common directory is asked for from `cwd` here, and from the top by
+ * {@link commonDirectory}: the same directory only where `cwd` is the top.
+ */
+export async function workTree(cwd) {
+    const run = await git(['rev-parse', '--show-toplevel', '--path-format=absolute', '--git-common-dir'], cwd);
+    if (run.stdout === '')
+        return run.code === 0 ? 'unread' : null;
+    const lines = run.stdout.split('\n');
+    if (run.code !== 0 || lines.length !== 3 || lines[2] !== '')
+        return 'unread';
+    const root = lines[0];
+    const commonDir = lines[1];
+    if (root === '' || commonDir === '' || root.trim() !== root || commonDir.trim() !== commonDir)
+        return 'unread';
+    return { root, commonDir };
+}
 /**
  * Where git runs the hook `name` from, absolute: `core.hooksPath` read as git
  * reads it - relative to the work tree, absolute, or under `~` - and a linked
- * worktree's shared hooks. `null` when git cannot say, before 2.31.
+ * worktree's shared hooks. Where git cannot say, the first line of what it
+ * said instead: under a `core.hooksPath` that names a file it refuses the
+ * path as one that is not a directory (measured with git 2.47 and 2.55).
  */
 export async function hookPath(name, cwd) {
-    return value(['rev-parse', '--path-format=absolute', '--git-path', `hooks/${name}`], cwd);
+    const run = await git(['rev-parse', '--path-format=absolute', '--git-path', `hooks/${name}`], cwd);
+    if (run.code === 0)
+        return { path: run.stdout.trim() };
+    return { refused: run.stderr.split(/\r?\n/)[0] };
 }
-/** The checked-out branch's short name, or `null` on a detached head. */
+const HEADS = 'refs/heads/';
+/**
+ * The checked-out branch's name, or `null` on a detached head: what HEAD
+ * points at, with `refs/heads/` taken off and nothing else. `--short` gives
+ * the shortest name git reads as that ref and no other, which is another
+ * name where a tag, or a ref under `refs/`, has the branch's: measured with
+ * git 2.55, on `claude/brief-042-x` beside the tag `claude/brief-042-x` it
+ * answers `heads/claude/brief-042-x`, which no template reads, and the
+ * brief went unnamed (ADR-0005). A HEAD that points outside `refs/heads/`,
+ * as `git symbolic-ref HEAD refs/tags/x` leaves it, is named as git status
+ * names it, the ref whole.
+ */
 export async function currentBranch(cwd) {
-    return value(['symbolic-ref', '--quiet', '--short', 'HEAD'], cwd);
+    const ref = await value(['symbolic-ref', '--quiet', 'HEAD'], cwd);
+    return ref !== null && ref.startsWith(HEADS) ? ref.slice(HEADS.length) : ref;
 }
-/** The remote's default branch as a local ref, such as `origin/main`, or `null`. */
+/**
+ * The remote's default branch as a local ref, such as `origin/main`, or
+ * `null`. This is a ref the harness hands git and spec-brief as the base, so
+ * it is the short name git reads as that ref and no other: beside a local
+ * branch or a tag named `origin/main`, measured with git 2.55, it is
+ * `remotes/origin/main`, where `origin/main` would be read as the branch or
+ * the tag (gitrevisions(7), the order a ref name is read in).
+ */
 export async function remoteDefault(cwd) {
     return value(['symbolic-ref', '--quiet', '--short', 'refs/remotes/origin/HEAD'], cwd);
 }
-/** Every local branch, by its short name. */
+/**
+ * Every local branch. The two are one name but where a tag, or a ref under
+ * `refs/`, has the branch's: `main` beside the tag `main` is the ref
+ * `heads/main`. A ref name holds no control character
+ * (git-check-ref-format(1)), so a tab parts the two.
+ */
 export async function localBranches(cwd) {
-    const listed = await value(['for-each-ref', '--format=%(refname:short)', 'refs/heads/'], cwd);
+    const listed = await value(['for-each-ref', '--format=%(refname:lstrip=2)%09%(refname:short)', HEADS], cwd);
     // for-each-ref fails only where git itself does, outside a repository,
     // where init never runs: the null check is there for the type.
-    return listed === null || listed === '' ? [] : listed.split('\n');
+    if (listed === null || listed === '')
+        return [];
+    return listed.split('\n').map((line) => {
+        const parts = line.split('\t');
+        return { name: parts[0], ref: parts[1] };
+    });
 }
 export async function revision(ref, cwd) {
     return value(['rev-parse', '--verify', '--quiet', `${ref}^{commit}`], cwd);