@h-rig/runtime 0.0.6-alpha.31 → 0.0.6-alpha.33

package/dist/src/control-plane/hooks/inject-context.js

@@ -1651,11 +1651,287 @@ function readBuildConfig() {
   }
 }
 
-// packages/runtime/src/control-plane/runtime/tooling/shell.ts
+// packages/runtime/src/control-plane/native/git-native.ts
+import { chmodSync as chmodSync2, copyFileSync as copyFileSync3, existsSync as existsSync10, mkdirSync as mkdirSync8, readFileSync as readFileSync4, renameSync as renameSync2, rmSync as rmSync3, writeFileSync as writeFileSync4 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
-import { basename as basename3, dirname as dirname7, resolve as resolve9 } from "path";
-var sharedNativeShellOutputDir = resolve9(tmpdir2(), "rig-native");
-var sharedNativeShellOutputPath = resolve9(sharedNativeShellOutputDir, `rig-shell-${process.platform}-${process.arch}${process.platform === "win32" ? ".exe" : ""}`);
+import { dirname as dirname7, isAbsolute, resolve as resolve9 } from "path";
+import { createHash as createHash2 } from "crypto";
+var sharedGitNativeOutputDir = resolve9(tmpdir2(), "rig-native");
+var sharedGitNativeOutputPath = resolve9(sharedGitNativeOutputDir, `rig-git-${process.platform}-${process.arch}${process.platform === "win32" ? ".exe" : ""}`);
+var trackerCommandUsageProbe = "usage: rig-git fetch-ref <repo-path> <remote> <branch>";
+function temporaryGitBinaryOutputPath(outputPath) {
+  const suffix2 = process.platform === "win32" ? ".exe" : "";
+  return resolve9(dirname7(outputPath), `.rig-git-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}${suffix2}`);
+}
+function publishGitBinary(tempOutputPath, outputPath) {
+  try {
+    renameSync2(tempOutputPath, outputPath);
+  } catch (error) {
+    if (process.platform === "win32" && existsSync10(outputPath)) {
+      rmSync3(outputPath, { force: true });
+      renameSync2(tempOutputPath, outputPath);
+      return;
+    }
+    throw error;
+  }
+}
+function runtimeRigGitFileName() {
+  return `rig-git${process.platform === "win32" ? ".exe" : ""}`;
+}
+function rigGitSourceCandidates() {
+  const execDir = process.execPath?.trim() ? dirname7(process.execPath.trim()) : "";
+  const cwd = process.cwd()?.trim() || "";
+  const projectRoot = process.env.PROJECT_RIG_ROOT?.trim() || "";
+  const hostProjectRoot = process.env.RIG_HOST_PROJECT_ROOT?.trim() || "";
+  const moduleRelativeSource = resolve9(import.meta.dir, "../../../native/rig-git.zig");
+  return [...new Set([
+    process.env.RIG_NATIVE_GIT_SOURCE?.trim() || "",
+    moduleRelativeSource,
+    projectRoot ? resolve9(projectRoot, "packages/runtime/native/rig-git.zig") : "",
+    hostProjectRoot ? resolve9(hostProjectRoot, "packages/runtime/native/rig-git.zig") : "",
+    cwd ? resolve9(cwd, "packages/runtime/native/rig-git.zig") : "",
+    execDir ? resolve9(execDir, "..", "..", "packages/runtime/native/rig-git.zig") : "",
+    execDir ? resolve9(execDir, "..", "native", "rig-git.zig") : ""
+  ].filter(Boolean))];
+}
+function nativePackageBinaryCandidates(fromDir, fileName) {
+  const candidates = [];
+  let cursor = resolve9(fromDir);
+  for (let index = 0;index < 8; index += 1) {
+    candidates.push(resolve9(cursor, "native", `${process.platform}-${process.arch}`, fileName), resolve9(cursor, "native", `${process.platform}-${process.arch}`, "bin", fileName), resolve9(cursor, "native", fileName), resolve9(cursor, "native", "bin", fileName));
+    const parent = dirname7(cursor);
+    if (parent === cursor)
+      break;
+    cursor = parent;
+  }
+  return candidates;
+}
+function rigGitBinaryCandidates() {
+  const execDir = process.execPath?.trim() ? dirname7(process.execPath.trim()) : "";
+  const fileName = runtimeRigGitFileName();
+  const explicit = process.env.RIG_NATIVE_GIT_BIN?.trim() || "";
+  return [...new Set([
+    explicit,
+    ...nativePackageBinaryCandidates(import.meta.dir, fileName),
+    execDir ? resolve9(execDir, fileName) : "",
+    execDir ? resolve9(execDir, "..", fileName) : "",
+    execDir ? resolve9(execDir, "..", "bin", fileName) : "",
+    sharedGitNativeOutputPath
+  ].filter(Boolean))];
+}
+function resolveGitSourcePath() {
+  for (const candidate of rigGitSourceCandidates()) {
+    if (candidate && existsSync10(candidate)) {
+      return candidate;
+    }
+  }
+  return null;
+}
+function resolveGitBinaryPath() {
+  if (process.env.RIG_DISABLE_ZIG_NATIVE === "1") {
+    return null;
+  }
+  for (const candidate of rigGitBinaryCandidates()) {
+    if (candidate && existsSync10(candidate)) {
+      return candidate;
+    }
+  }
+  return null;
+}
+function preferredGitBinaryOutputPath() {
+  const explicit = process.env.RIG_NATIVE_GIT_BIN?.trim() || "";
+  return explicit || sharedGitNativeOutputPath;
+}
+function binarySupportsTrackerCommandsSync(binaryPath) {
+  try {
+    const probe = Bun.spawnSync([binaryPath, "fetch-ref", "."], {
+      stdout: "pipe",
+      stderr: "pipe"
+    });
+    const stdout = probe.stdout.toString().trim();
+    const stderr = probe.stderr.toString().trim();
+    if (stdout.includes('"error":"unknown command"')) {
+      return false;
+    }
+    return probe.exitCode === 2 && stderr.includes(trackerCommandUsageProbe);
+  } catch {
+    return false;
+  }
+}
+function nativeBuildManifestPath(outputPath) {
+  return `${outputPath}.build-manifest.json`;
+}
+function hasMatchingNativeBuildManifestSync(manifestPath, buildKey) {
+  if (!existsSync10(manifestPath)) {
+    return false;
+  }
+  try {
+    const manifest = JSON.parse(readFileSync4(manifestPath, "utf8"));
+    return manifest.version === 1 && manifest.buildKey === buildKey;
+  } catch {
+    return false;
+  }
+}
+function sha256FileSync(path) {
+  return createHash2("sha256").update(readFileSync4(path)).digest("hex");
+}
+function ensureRigGitBinaryPathSync(outputPath = preferredGitBinaryOutputPath()) {
+  if (process.env.RIG_DISABLE_ZIG_NATIVE === "1") {
+    throw new Error("Zig native git is disabled via RIG_DISABLE_ZIG_NATIVE=1");
+  }
+  const sourcePath = resolveGitSourcePath();
+  if (!sourcePath) {
+    const binaryPath = resolveGitBinaryPath();
+    if (binaryPath) {
+      return binaryPath;
+    }
+    throw new Error("rig-git.zig source file not found.");
+  }
+  const zigBinary = Bun.which("zig");
+  if (!zigBinary) {
+    throw new Error("zig is required to build native Rig git tools.");
+  }
+  mkdirSync8(dirname7(outputPath), { recursive: true });
+  const sourceDigest = sha256FileSync(sourcePath);
+  const buildKey = JSON.stringify({
+    version: 1,
+    zigBinary,
+    platform: process.platform,
+    arch: process.arch,
+    sourcePath,
+    sourceDigest
+  });
+  const manifestPath = nativeBuildManifestPath(outputPath);
+  const needsBuild = !existsSync10(outputPath) || !hasMatchingNativeBuildManifestSync(manifestPath, buildKey) || !binarySupportsTrackerCommandsSync(outputPath);
+  if (!needsBuild) {
+    chmodSync2(outputPath, 493);
+    return outputPath;
+  }
+  const tempOutputPath = temporaryGitBinaryOutputPath(outputPath);
+  const build = Bun.spawnSync([
+    zigBinary,
+    "build-exe",
+    sourcePath,
+    "-O",
+    "ReleaseFast",
+    `-femit-bin=${tempOutputPath}`
+  ], {
+    cwd: dirname7(sourcePath),
+    stdout: "pipe",
+    stderr: "pipe"
+  });
+  if (build.exitCode !== 0 || !existsSync10(tempOutputPath)) {
+    const stderr = build.stderr.toString().trim();
+    const stdout = build.stdout.toString().trim();
+    const details = [stderr, stdout].filter(Boolean).join(`
+`);
+    throw new Error(`Failed to build native Rig git tools: ${details || `zig exited with code ${build.exitCode}`}`);
+  }
+  chmodSync2(tempOutputPath, 493);
+  if (existsSync10(outputPath) && hasMatchingNativeBuildManifestSync(manifestPath, buildKey)) {
+    rmSync3(tempOutputPath, { force: true });
+    chmodSync2(outputPath, 493);
+    return outputPath;
+  }
+  publishGitBinary(tempOutputPath, outputPath);
+  if (!binarySupportsTrackerCommandsSync(outputPath)) {
+    rmSync3(outputPath, { force: true });
+    throw new Error("Failed to build native Rig git tools: tracker command probe failed");
+  }
+  writeFileSync4(manifestPath, `${JSON.stringify({ version: 1, buildKey }, null, 2)}
+`, "utf8");
+  return outputPath;
+}
+function runGitNative(command, args) {
+  if (process.env.RIG_DISABLE_ZIG_NATIVE === "1") {
+    return { ok: false, error: "rig-git native disabled" };
+  }
+  const trackerCommand = command === "fetch-ref" || command === "read-blob-at-ref" || command === "write-tree-commit" || command === "push-ref-with-lease";
+  let binaryPath = null;
+  if (trackerCommand) {
+    try {
+      binaryPath = ensureRigGitBinaryPathSync(preferredGitBinaryOutputPath());
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      if (message.includes("rig-git.zig source file not found")) {
+        return { ok: false, error: "rig-git binary not found" };
+      }
+      return { ok: false, error: message };
+    }
+  } else {
+    const explicitBinaryPath = process.env.RIG_NATIVE_GIT_BIN?.trim() || "";
+    binaryPath = explicitBinaryPath && existsSync10(explicitBinaryPath) ? explicitBinaryPath : !explicitBinaryPath ? resolveGitBinaryPath() : null;
+    if (!binaryPath) {
+      try {
+        binaryPath = ensureRigGitBinaryPathSync(preferredGitBinaryOutputPath());
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        if (message.includes("rig-git.zig source file not found")) {
+          return { ok: false, error: "rig-git binary not found" };
+        }
+        return { ok: false, error: message };
+      }
+    }
+  }
+  try {
+    const proc = Bun.spawnSync([binaryPath, command, ...args], {
+      stdout: "pipe",
+      stderr: "pipe",
+      env: process.env
+    });
+    if (proc.exitCode !== 0) {
+      const stdoutText = proc.stdout.toString().trim();
+      if (stdoutText) {
+        try {
+          const parsed = JSON.parse(stdoutText);
+          if (!parsed.ok) {
+            return parsed;
+          }
+        } catch {}
+      }
+      const errText = proc.stderr.toString().trim() || `exit code ${proc.exitCode}`;
+      return { ok: false, error: errText };
+    }
+    const output = proc.stdout.toString().trim();
+    return JSON.parse(output);
+  } catch (err) {
+    return { ok: false, error: String(err) };
+  }
+}
+function requireGitNative(command, args) {
+  const result = runGitNative(command, args);
+  if (!result.ok) {
+    throw new Error(`rig-git ${command} failed: ${result.error}`);
+  }
+  return result;
+}
+function requireGitNativeString(command, args) {
+  const result = requireGitNative(command, args);
+  if ("value" in result && typeof result.value === "string") {
+    return result.value;
+  }
+  throw new Error(`rig-git ${command} returned an unexpected result payload`);
+}
+function nativeFetchRef(repoPath, remote, branch) {
+  return requireGitNativeString("fetch-ref", [repoPath, remote, branch]);
+}
+function nativeReadBlobAtRef(repoPath, ref, path) {
+  const requestDir = resolve9(sharedGitNativeOutputDir, "reads", `${Date.now()}-${Math.random().toString(36).slice(2, 10)}`);
+  mkdirSync8(requestDir, { recursive: true });
+  const outputPath = resolve9(requestDir, "blob.txt");
+  try {
+    requireGitNative("read-blob-at-ref", [repoPath, ref, path, outputPath]);
+    return readFileSync4(outputPath, "utf8");
+  } finally {
+    rmSync3(requestDir, { recursive: true, force: true });
+  }
+}
+
+// packages/runtime/src/control-plane/runtime/tooling/shell.ts
+import { tmpdir as tmpdir3 } from "os";
+import { basename as basename3, dirname as dirname8, resolve as resolve10 } from "path";
+var sharedNativeShellOutputDir = resolve10(tmpdir3(), "rig-native");
+var sharedNativeShellOutputPath = resolve10(sharedNativeShellOutputDir, `rig-shell-${process.platform}-${process.arch}${process.platform === "win32" ? ".exe" : ""}`);
 function runtimeToolGatewayNames() {
   return [
     "bash",
@@ -1696,10 +1972,10 @@ function runtimeToolGatewayNames() {
   ];
 }
 // packages/runtime/src/control-plane/runtime/tooling/file-tools.ts
-import { tmpdir as tmpdir3 } from "os";
-import { basename as basename4, dirname as dirname8, resolve as resolve10 } from "path";
-var sharedNativeToolsOutputDir = resolve10(tmpdir3(), "rig-native");
-var sharedNativeToolsOutputPath = resolve10(sharedNativeToolsOutputDir, `rig-tools-${process.platform}-${process.arch}${process.platform === "win32" ? ".exe" : ""}`);
+import { tmpdir as tmpdir4 } from "os";
+import { basename as basename4, dirname as dirname9, resolve as resolve11 } from "path";
+var sharedNativeToolsOutputDir = resolve11(tmpdir4(), "rig-native");
+var sharedNativeToolsOutputPath = resolve11(sharedNativeToolsOutputDir, `rig-tools-${process.platform}-${process.arch}${process.platform === "win32" ? ".exe" : ""}`);
 function runtimeFileToolNames() {
   return [
     "rig-read",
@@ -1715,7 +1991,7 @@ function runtimeGatewayToolNames() {
   return runtimeToolGatewayNames();
 }
 // packages/runtime/src/control-plane/browser-contract.ts
-import { resolve as resolve11 } from "path";
+import { resolve as resolve12 } from "path";
 var DEFAULT_BROWSER_ATTACH_URL = "http://127.0.0.1:9333";
 var DEFAULT_BROWSER_MODE = "persistent";
 var RUNTIME_BROWSER_HELPERS = {
@@ -1750,9 +2026,9 @@ function sanitizeRuntimeSuffix(runtimeId) {
 function resolveBrowserStateDir(projectRoot, configuredStateDir) {
   const trimmed = configuredStateDir?.trim() || ".tmp/rig-browser";
   if (trimmed.startsWith("/")) {
-    return resolve11(trimmed);
+    return resolve12(trimmed);
   }
-  return resolve11(projectRoot || process.cwd(), trimmed);
+  return resolve12(projectRoot || process.cwd(), trimmed);
 }
 function resolveTaskBrowserContext(browser, options = {}) {
   if (!browser?.required) {
@@ -1914,7 +2190,7 @@ function createTaskFieldRegistry(extensions) {
 }
 
 // packages/runtime/src/control-plane/validators/runtime-registration.ts
-import { existsSync as existsSync10 } from "fs";
+import { existsSync as existsSync11 } from "fs";
 import { join as join3 } from "path";
 function createValidatorRegistry() {
   const map = new Map;
@@ -1947,7 +2223,7 @@ function registerBuiltInValidators(registry) {
 }
 async function runStdTypecheck(ctx) {
   const packageJsonPath = join3(ctx.workspaceRoot, "package.json");
-  if (!existsSync10(packageJsonPath)) {
+  if (!existsSync11(packageJsonPath)) {
     return {
       id: "std:typecheck",
       passed: false,
@@ -1975,8 +2251,8 @@ async function runStdTypecheck(ctx) {
 }
 
 // packages/runtime/src/control-plane/hook-materializer.ts
-import { existsSync as existsSync11, mkdirSync as mkdirSync8, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
-import { dirname as dirname9, resolve as resolve12 } from "path";
+import { existsSync as existsSync12, mkdirSync as mkdirSync9, readFileSync as readFileSync5, writeFileSync as writeFileSync5 } from "fs";
+import { dirname as dirname10, resolve as resolve13 } from "path";
 var MARKER_PLUGIN = "_rigPlugin";
 var MARKER_HOOK_ID = "_rigHookId";
 function matcherToString(matcher) {
@@ -1990,8 +2266,8 @@ function isPluginOwned(cmd) {
   return typeof cmd[MARKER_PLUGIN] === "string";
 }
 function materializeHooks(projectRoot, entries) {
-  const settingsPath = resolve12(projectRoot, ".claude", "settings.json");
-  const existing = existsSync11(settingsPath) ? safeReadJson(settingsPath) : {};
+  const settingsPath = resolve13(projectRoot, ".claude", "settings.json");
+  const existing = existsSync12(settingsPath) ? safeReadJson(settingsPath) : {};
   const hooks = existing.hooks ?? {};
   for (const event of Object.keys(hooks)) {
     const groups = hooks[event] ?? [];
@@ -2033,56 +2309,56 @@ function materializeHooks(projectRoot, entries) {
   } else {
     delete next.hooks;
   }
-  mkdirSync8(dirname9(settingsPath), { recursive: true });
-  writeFileSync4(settingsPath, `${JSON.stringify(next, null, 2)}
+  mkdirSync9(dirname10(settingsPath), { recursive: true });
+  writeFileSync5(settingsPath, `${JSON.stringify(next, null, 2)}
 `, "utf-8");
   return settingsPath;
 }
 function safeReadJson(path) {
   try {
-    return JSON.parse(readFileSync4(path, "utf-8"));
+    return JSON.parse(readFileSync5(path, "utf-8"));
   } catch {
     return {};
   }
 }
 
 // packages/runtime/src/control-plane/skill-materializer.ts
-import { existsSync as existsSync12, mkdirSync as mkdirSync9, readFileSync as readFileSync5, readdirSync as readdirSync2, rmSync as rmSync3, writeFileSync as writeFileSync5 } from "fs";
-import { resolve as resolve13 } from "path";
+import { existsSync as existsSync13, mkdirSync as mkdirSync10, readFileSync as readFileSync6, readdirSync as readdirSync2, rmSync as rmSync4, writeFileSync as writeFileSync6 } from "fs";
+import { resolve as resolve14 } from "path";
 import { loadSkill } from "@rig/skill-loader";
 var MARKER_FILENAME = ".rig-plugin";
 function skillDirName(id) {
   return id.replace(/[^a-zA-Z0-9._-]+/g, "-");
 }
 async function materializeSkills(projectRoot, entries) {
-  const skillsRoot = resolve13(projectRoot, ".pi", "skills");
-  if (existsSync12(skillsRoot)) {
+  const skillsRoot = resolve14(projectRoot, ".pi", "skills");
+  if (existsSync13(skillsRoot)) {
     for (const name of readdirSync2(skillsRoot)) {
-      const dir = resolve13(skillsRoot, name);
-      if (existsSync12(resolve13(dir, MARKER_FILENAME))) {
-        rmSync3(dir, { recursive: true, force: true });
+      const dir = resolve14(skillsRoot, name);
+      if (existsSync13(resolve14(dir, MARKER_FILENAME))) {
+        rmSync4(dir, { recursive: true, force: true });
       }
     }
   }
   const written = [];
   for (const { pluginName, skill } of entries) {
-    const sourcePath = resolve13(projectRoot, skill.path);
-    if (!existsSync12(sourcePath)) {
+    const sourcePath = resolve14(projectRoot, skill.path);
+    if (!existsSync13(sourcePath)) {
       console.warn(`[plugin-host] skill "${skill.id}" from plugin "${pluginName}" not materialized: ${sourcePath} does not exist`);
       continue;
     }
     let body;
     try {
       await loadSkill(sourcePath);
-      body = readFileSync5(sourcePath, "utf-8");
+      body = readFileSync6(sourcePath, "utf-8");
     } catch (err) {
       console.warn(`[plugin-host] skill "${skill.id}" from plugin "${pluginName}" not materialized: ${err instanceof Error ? err.message : err}`);
       continue;
     }
-    const dir = resolve13(skillsRoot, skillDirName(skill.id));
-    mkdirSync9(dir, { recursive: true });
-    writeFileSync5(resolve13(dir, "SKILL.md"), body, "utf-8");
-    writeFileSync5(resolve13(dir, MARKER_FILENAME), `${JSON.stringify({ plugin: pluginName, skillId: skill.id }, null, 2)}
+    const dir = resolve14(skillsRoot, skillDirName(skill.id));
+    mkdirSync10(dir, { recursive: true });
+    writeFileSync6(resolve14(dir, "SKILL.md"), body, "utf-8");
+    writeFileSync6(resolve14(dir, MARKER_FILENAME), `${JSON.stringify({ plugin: pluginName, skillId: skill.id }, null, 2)}
 `, "utf-8");
     written.push({ id: skill.id, pluginName, directory: dir });
   }
@@ -2149,12 +2425,12 @@ async function buildPluginHostContext(projectRoot) {
 
 // packages/runtime/src/control-plane/tasks/source-aware-task-config-source.ts
 import { spawnSync } from "child_process";
-import { existsSync as existsSync14, readFileSync as readFileSync7, readdirSync as readdirSync3, statSync as statSync3, writeFileSync as writeFileSync6 } from "fs";
-import { basename as basename5, join as join4, resolve as resolve15 } from "path";
+import { existsSync as existsSync15, readFileSync as readFileSync8, readdirSync as readdirSync3, statSync as statSync3, writeFileSync as writeFileSync7 } from "fs";
+import { basename as basename5, join as join4, resolve as resolve16 } from "path";
 
 // packages/runtime/src/control-plane/tasks/legacy-task-config-source.ts
-import { existsSync as existsSync13, readFileSync as readFileSync6 } from "fs";
-import { resolve as resolve14 } from "path";
+import { existsSync as existsSync14, readFileSync as readFileSync7 } from "fs";
+import { resolve as resolve15 } from "path";
 
 // packages/runtime/src/control-plane/tasks/task-record-reader.ts
 async function findTaskById(reader, id) {
@@ -2177,7 +2453,7 @@ class LegacyTaskConfigReadError extends Error {
   }
 }
 function createLegacyTaskConfigRecordReader(projectRoot, options = {}) {
-  const configPath = options.configPath ?? resolve14(projectRoot, ".rig", "task-config.json");
+  const configPath = options.configPath ?? resolve15(projectRoot, ".rig", "task-config.json");
   const reader = {
     async listTasks() {
       return readLegacyTaskRecords(projectRoot, configPath);
@@ -2188,8 +2464,8 @@ function createLegacyTaskConfigRecordReader(projectRoot, options = {}) {
   };
   return reader;
 }
-function readLegacyTaskRecords(projectRoot, configPath = resolve14(projectRoot, ".rig", "task-config.json")) {
-  if (!existsSync13(configPath)) {
+function readLegacyTaskRecords(projectRoot, configPath = resolve15(projectRoot, ".rig", "task-config.json")) {
+  if (!existsSync14(configPath)) {
     return [];
   }
   const rawConfig = readLegacyTaskConfigJson(projectRoot, configPath);
@@ -2197,7 +2473,7 @@ function readLegacyTaskRecords(projectRoot, configPath = resolve14(projectRoot,
 }
 function readLegacyTaskConfigJson(projectRoot, configPath) {
   try {
-    const parsed = JSON.parse(readFileSync6(configPath, "utf8"));
+    const parsed = JSON.parse(readFileSync7(configPath, "utf8"));
     if (isPlainRecord(parsed)) {
       return parsed;
     }
@@ -2281,7 +2557,7 @@ function isPlainRecord(candidate) {
 var STATUS_LABELS = new Set(["ready", "blocked", "in-progress", "under-review", "failed", "cancelled"]);
 var FILE_TASK_PATTERN = /\.(task\.)?json$/;
 function createSourceAwareTaskConfigRecordReader(projectRoot, options = {}) {
-  const configPath = options.configPath ?? resolve15(projectRoot, ".rig", "task-config.json");
+  const configPath = options.configPath ?? resolve16(projectRoot, ".rig", "task-config.json");
   const legacy = createLegacyTaskConfigRecordReader(projectRoot, { configPath });
   const spawnFn = options.spawn ?? spawnSync;
   const ghBinary = options.ghBinary ?? "gh";
@@ -2364,10 +2640,10 @@ function readMaterializedTaskMetadata(entry) {
   return metadata;
 }
 function readConfiguredFilesTaskSourcePath(projectRoot) {
-  const jsonPath = resolve15(projectRoot, "rig.config.json");
-  if (existsSync14(jsonPath)) {
+  const jsonPath = resolve16(projectRoot, "rig.config.json");
+  if (existsSync15(jsonPath)) {
     try {
-      const parsed = JSON.parse(readFileSync7(jsonPath, "utf8"));
+      const parsed = JSON.parse(readFileSync8(jsonPath, "utf8"));
       if (isPlainRecord2(parsed) && isPlainRecord2(parsed.taskSource)) {
         const source = parsed.taskSource;
         return source.kind === "files" && typeof source.path === "string" ? source.path : null;
@@ -2376,12 +2652,12 @@ function readConfiguredFilesTaskSourcePath(projectRoot) {
       return null;
     }
   }
-  const tsPath = resolve15(projectRoot, "rig.config.ts");
-  if (!existsSync14(tsPath)) {
+  const tsPath = resolve16(projectRoot, "rig.config.ts");
+  if (!existsSync15(tsPath)) {
     return null;
   }
   try {
-    const source = readFileSync7(tsPath, "utf8");
+    const source = readFileSync8(tsPath, "utf8");
     const taskSourceBlock = source.match(/taskSource\s*:\s*\{[\s\S]*?\}/m)?.[0] ?? "";
     const kind = taskSourceBlock.match(/kind\s*:\s*["']([^"']+)["']/)?.[1];
     if (kind !== "files") {
@@ -2401,10 +2677,10 @@ function readRawTaskEntry(configPath, taskId) {
   return isPlainRecord2(entry) ? entry : null;
 }
 function readRawTaskConfig(configPath) {
-  if (!existsSync14(configPath)) {
+  if (!existsSync15(configPath)) {
     return null;
   }
-  const parsed = JSON.parse(readFileSync7(configPath, "utf8"));
+  const parsed = JSON.parse(readFileSync8(configPath, "utf8"));
   return isPlainRecord2(parsed) ? parsed : null;
 }
 function stripLegacyTaskConfigMetadata2(raw) {
@@ -2412,8 +2688,8 @@ function stripLegacyTaskConfigMetadata2(raw) {
   return tasks;
 }
 function listFileBackedTasks(projectRoot, sourcePath) {
-  const directory = resolve15(projectRoot, sourcePath);
-  if (!existsSync14(directory)) {
+  const directory = resolve16(projectRoot, sourcePath);
+  if (!existsSync15(directory)) {
     return [];
   }
   const tasks = [];
@@ -2428,11 +2704,11 @@ function listFileBackedTasks(projectRoot, sourcePath) {
   return tasks;
 }
 function readFileBackedTask(projectRoot, sourcePath, taskId, rawEntry) {
-  const file = findFileBackedTaskFile(resolve15(projectRoot, sourcePath), taskId);
+  const file = findFileBackedTaskFile(resolve16(projectRoot, sourcePath), taskId);
   if (!file) {
     return null;
   }
-  const raw = JSON.parse(readFileSync7(file, "utf8"));
+  const raw = JSON.parse(readFileSync8(file, "utf8"));
   if (!isPlainRecord2(raw)) {
     return null;
   }
@@ -2445,7 +2721,7 @@ function readFileBackedTask(projectRoot, sourcePath, taskId, rawEntry) {
   };
 }
 function findFileBackedTaskFile(directory, taskId) {
-  if (!existsSync14(directory)) {
+  if (!existsSync15(directory)) {
     return null;
   }
   for (const name of readdirSync3(directory)) {
@@ -2455,7 +2731,7 @@ function findFileBackedTaskFile(directory, taskId) {
     try {
       if (!statSync3(file).isFile())
         continue;
-      const raw = JSON.parse(readFileSync7(file, "utf8"));
+      const raw = JSON.parse(readFileSync8(file, "utf8"));
       const inferredId = basename5(file).replace(FILE_TASK_PATTERN, "");
       const id = isPlainRecord2(raw) && typeof raw.id === "string" ? raw.id : inferredId;
       if (id === taskId) {
@@ -2621,282 +2897,6 @@ import { basename as basename6, resolve as resolve19 } from "path";
 import { existsSync as existsSync17, readFileSync as readFileSync9 } from "fs";
 import { resolve as resolve18 } from "path";
 
-// packages/runtime/src/control-plane/native/git-native.ts
-import { chmodSync as chmodSync2, copyFileSync as copyFileSync3, existsSync as existsSync15, mkdirSync as mkdirSync10, readFileSync as readFileSync8, renameSync as renameSync2, rmSync as rmSync4, writeFileSync as writeFileSync7 } from "fs";
-import { tmpdir as tmpdir4 } from "os";
-import { dirname as dirname10, isAbsolute, resolve as resolve16 } from "path";
-import { createHash as createHash2 } from "crypto";
-var sharedGitNativeOutputDir = resolve16(tmpdir4(), "rig-native");
-var sharedGitNativeOutputPath = resolve16(sharedGitNativeOutputDir, `rig-git-${process.platform}-${process.arch}${process.platform === "win32" ? ".exe" : ""}`);
-var trackerCommandUsageProbe = "usage: rig-git fetch-ref <repo-path> <remote> <branch>";
-function temporaryGitBinaryOutputPath(outputPath) {
-  const suffix2 = process.platform === "win32" ? ".exe" : "";
-  return resolve16(dirname10(outputPath), `.rig-git-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}${suffix2}`);
-}
-function publishGitBinary(tempOutputPath, outputPath) {
-  try {
-    renameSync2(tempOutputPath, outputPath);
-  } catch (error) {
-    if (process.platform === "win32" && existsSync15(outputPath)) {
-      rmSync4(outputPath, { force: true });
-      renameSync2(tempOutputPath, outputPath);
-      return;
-    }
-    throw error;
-  }
-}
-function runtimeRigGitFileName() {
-  return `rig-git${process.platform === "win32" ? ".exe" : ""}`;
-}
-function rigGitSourceCandidates() {
-  const execDir = process.execPath?.trim() ? dirname10(process.execPath.trim()) : "";
-  const cwd = process.cwd()?.trim() || "";
-  const projectRoot = process.env.PROJECT_RIG_ROOT?.trim() || "";
-  const hostProjectRoot = process.env.RIG_HOST_PROJECT_ROOT?.trim() || "";
-  const moduleRelativeSource = resolve16(import.meta.dir, "../../../native/rig-git.zig");
-  return [...new Set([
-    process.env.RIG_NATIVE_GIT_SOURCE?.trim() || "",
-    moduleRelativeSource,
-    projectRoot ? resolve16(projectRoot, "packages/runtime/native/rig-git.zig") : "",
-    hostProjectRoot ? resolve16(hostProjectRoot, "packages/runtime/native/rig-git.zig") : "",
-    cwd ? resolve16(cwd, "packages/runtime/native/rig-git.zig") : "",
-    execDir ? resolve16(execDir, "..", "..", "packages/runtime/native/rig-git.zig") : "",
-    execDir ? resolve16(execDir, "..", "native", "rig-git.zig") : ""
-  ].filter(Boolean))];
-}
-function nativePackageBinaryCandidates(fromDir, fileName) {
-  const candidates = [];
-  let cursor = resolve16(fromDir);
-  for (let index = 0;index < 8; index += 1) {
-    candidates.push(resolve16(cursor, "native", `${process.platform}-${process.arch}`, fileName), resolve16(cursor, "native", `${process.platform}-${process.arch}`, "bin", fileName), resolve16(cursor, "native", fileName), resolve16(cursor, "native", "bin", fileName));
-    const parent = dirname10(cursor);
-    if (parent === cursor)
-      break;
-    cursor = parent;
-  }
-  return candidates;
-}
-function rigGitBinaryCandidates() {
-  const execDir = process.execPath?.trim() ? dirname10(process.execPath.trim()) : "";
-  const fileName = runtimeRigGitFileName();
-  const explicit = process.env.RIG_NATIVE_GIT_BIN?.trim() || "";
-  return [...new Set([
-    explicit,
-    ...nativePackageBinaryCandidates(import.meta.dir, fileName),
-    execDir ? resolve16(execDir, fileName) : "",
-    execDir ? resolve16(execDir, "..", fileName) : "",
-    execDir ? resolve16(execDir, "..", "bin", fileName) : "",
-    sharedGitNativeOutputPath
-  ].filter(Boolean))];
-}
-function resolveGitSourcePath() {
-  for (const candidate of rigGitSourceCandidates()) {
-    if (candidate && existsSync15(candidate)) {
-      return candidate;
-    }
-  }
-  return null;
-}
-function resolveGitBinaryPath() {
-  if (process.env.RIG_DISABLE_ZIG_NATIVE === "1") {
-    return null;
-  }
-  for (const candidate of rigGitBinaryCandidates()) {
-    if (candidate && existsSync15(candidate)) {
-      return candidate;
-    }
-  }
-  return null;
-}
-function preferredGitBinaryOutputPath() {
-  const explicit = process.env.RIG_NATIVE_GIT_BIN?.trim() || "";
-  return explicit || sharedGitNativeOutputPath;
-}
-function binarySupportsTrackerCommandsSync(binaryPath) {
-  try {
-    const probe = Bun.spawnSync([binaryPath, "fetch-ref", "."], {
-      stdout: "pipe",
-      stderr: "pipe"
-    });
-    const stdout = probe.stdout.toString().trim();
-    const stderr = probe.stderr.toString().trim();
-    if (stdout.includes('"error":"unknown command"')) {
-      return false;
-    }
-    return probe.exitCode === 2 && stderr.includes(trackerCommandUsageProbe);
-  } catch {
-    return false;
-  }
-}
-function nativeBuildManifestPath(outputPath) {
-  return `${outputPath}.build-manifest.json`;
-}
-function hasMatchingNativeBuildManifestSync(manifestPath, buildKey) {
-  if (!existsSync15(manifestPath)) {
-    return false;
-  }
-  try {
-    const manifest = JSON.parse(readFileSync8(manifestPath, "utf8"));
-    return manifest.version === 1 && manifest.buildKey === buildKey;
-  } catch {
-    return false;
-  }
-}
-function sha256FileSync(path) {
-  return createHash2("sha256").update(readFileSync8(path)).digest("hex");
-}
-function ensureRigGitBinaryPathSync(outputPath = preferredGitBinaryOutputPath()) {
-  if (process.env.RIG_DISABLE_ZIG_NATIVE === "1") {
-    throw new Error("Zig native git is disabled via RIG_DISABLE_ZIG_NATIVE=1");
-  }
-  const sourcePath = resolveGitSourcePath();
-  if (!sourcePath) {
-    const binaryPath = resolveGitBinaryPath();
-    if (binaryPath) {
-      return binaryPath;
-    }
-    throw new Error("rig-git.zig source file not found.");
-  }
-  const zigBinary = Bun.which("zig");
-  if (!zigBinary) {
-    throw new Error("zig is required to build native Rig git tools.");
-  }
-  mkdirSync10(dirname10(outputPath), { recursive: true });
-  const sourceDigest = sha256FileSync(sourcePath);
-  const buildKey = JSON.stringify({
-    version: 1,
-    zigBinary,
-    platform: process.platform,
-    arch: process.arch,
-    sourcePath,
-    sourceDigest
-  });
-  const manifestPath = nativeBuildManifestPath(outputPath);
-  const needsBuild = !existsSync15(outputPath) || !hasMatchingNativeBuildManifestSync(manifestPath, buildKey) || !binarySupportsTrackerCommandsSync(outputPath);
-  if (!needsBuild) {
-    chmodSync2(outputPath, 493);
-    return outputPath;
-  }
-  const tempOutputPath = temporaryGitBinaryOutputPath(outputPath);
-  const build = Bun.spawnSync([
-    zigBinary,
-    "build-exe",
-    sourcePath,
-    "-O",
-    "ReleaseFast",
-    `-femit-bin=${tempOutputPath}`
-  ], {
-    cwd: dirname10(sourcePath),
-    stdout: "pipe",
-    stderr: "pipe"
-  });
-  if (build.exitCode !== 0 || !existsSync15(tempOutputPath)) {
-    const stderr = build.stderr.toString().trim();
-    const stdout = build.stdout.toString().trim();
-    const details = [stderr, stdout].filter(Boolean).join(`
-`);
-    throw new Error(`Failed to build native Rig git tools: ${details || `zig exited with code ${build.exitCode}`}`);
-  }
-  chmodSync2(tempOutputPath, 493);
-  if (existsSync15(outputPath) && hasMatchingNativeBuildManifestSync(manifestPath, buildKey)) {
-    rmSync4(tempOutputPath, { force: true });
-    chmodSync2(outputPath, 493);
-    return outputPath;
-  }
-  publishGitBinary(tempOutputPath, outputPath);
-  if (!binarySupportsTrackerCommandsSync(outputPath)) {
-    rmSync4(outputPath, { force: true });
-    throw new Error("Failed to build native Rig git tools: tracker command probe failed");
-  }
-  writeFileSync7(manifestPath, `${JSON.stringify({ version: 1, buildKey }, null, 2)}
-`, "utf8");
-  return outputPath;
-}
-function runGitNative(command, args) {
-  if (process.env.RIG_DISABLE_ZIG_NATIVE === "1") {
-    return { ok: false, error: "rig-git native disabled" };
-  }
-  const trackerCommand = command === "fetch-ref" || command === "read-blob-at-ref" || command === "write-tree-commit" || command === "push-ref-with-lease";
-  let binaryPath = null;
-  if (trackerCommand) {
-    try {
-      binaryPath = ensureRigGitBinaryPathSync(preferredGitBinaryOutputPath());
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      if (message.includes("rig-git.zig source file not found")) {
-        return { ok: false, error: "rig-git binary not found" };
-      }
-      return { ok: false, error: message };
-    }
-  } else {
-    const explicitBinaryPath = process.env.RIG_NATIVE_GIT_BIN?.trim() || "";
-    binaryPath = explicitBinaryPath && existsSync15(explicitBinaryPath) ? explicitBinaryPath : !explicitBinaryPath ? resolveGitBinaryPath() : null;
-    if (!binaryPath) {
-      try {
-        binaryPath = ensureRigGitBinaryPathSync(preferredGitBinaryOutputPath());
-      } catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        if (message.includes("rig-git.zig source file not found")) {
-          return { ok: false, error: "rig-git binary not found" };
-        }
-        return { ok: false, error: message };
-      }
-    }
-  }
-  try {
-    const proc = Bun.spawnSync([binaryPath, command, ...args], {
-      stdout: "pipe",
-      stderr: "pipe",
-      env: process.env
-    });
-    if (proc.exitCode !== 0) {
-      const stdoutText = proc.stdout.toString().trim();
-      if (stdoutText) {
-        try {
-          const parsed = JSON.parse(stdoutText);
-          if (!parsed.ok) {
-            return parsed;
-          }
-        } catch {}
-      }
-      const errText = proc.stderr.toString().trim() || `exit code ${proc.exitCode}`;
-      return { ok: false, error: errText };
-    }
-    const output = proc.stdout.toString().trim();
-    return JSON.parse(output);
-  } catch (err) {
-    return { ok: false, error: String(err) };
-  }
-}
-function requireGitNative(command, args) {
-  const result = runGitNative(command, args);
-  if (!result.ok) {
-    throw new Error(`rig-git ${command} failed: ${result.error}`);
-  }
-  return result;
-}
-function requireGitNativeString(command, args) {
-  const result = requireGitNative(command, args);
-  if ("value" in result && typeof result.value === "string") {
-    return result.value;
-  }
-  throw new Error(`rig-git ${command} returned an unexpected result payload`);
-}
-function nativeFetchRef(repoPath, remote, branch) {
-  return requireGitNativeString("fetch-ref", [repoPath, remote, branch]);
-}
-function nativeReadBlobAtRef(repoPath, ref, path) {
-  const requestDir = resolve16(sharedGitNativeOutputDir, "reads", `${Date.now()}-${Math.random().toString(36).slice(2, 10)}`);
-  mkdirSync10(requestDir, { recursive: true });
-  const outputPath = resolve16(requestDir, "blob.txt");
-  try {
-    requireGitNative("read-blob-at-ref", [repoPath, ref, path, outputPath]);
-    return readFileSync8(outputPath, "utf8");
-  } finally {
-    rmSync4(requestDir, { recursive: true, force: true });
-  }
-}
-
 // packages/runtime/src/control-plane/state-sync/repo.ts
 import { existsSync as existsSync16 } from "fs";
 import { resolve as resolve17 } from "path";