@mnemonik/shared 7.97.1 → 7.98.0

package/dist/repositoryFingerprint.js

@@ -0,0 +1,160 @@
+import { createHash } from 'node:crypto';
+import { domainToASCII } from 'node:url';
+/** Registry changes require review and golden cases; changed v1 outputs require v2. */
+export const REPOSITORY_PROVIDER_RULES = Object.freeze([
+    Object.freeze({ name: 'github', host: 'github.com', sshUser: 'git', removeTerminalDotGit: true }),
+]);
+const controls = /\p{Cc}/u;
+const reject = (reason) => ({ status: 'rejected', reason });
+const encodeSegment = (segment) => encodeURIComponent(segment).replace(/[!'()*]/g, (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`);
+/** Parse the raw path ourselves: WHATWG URL would silently resolve dot segments. */
+export function canonicalizeRemote(url, { providerRules = REPOSITORY_PROVIDER_RULES, } = {}) {
+    if (controls.test(url))
+        return reject('control_character');
+    if (url.includes('\\'))
+        return reject('backslash');
+    if (/^file:/i.test(url))
+        return reject('local_remote');
+    const input = url.split(/[?#]/, 1)[0] ?? '';
+    const scheme = /^([a-z][a-z0-9+.-]*):\/\//i.exec(input);
+    let transport;
+    let authority;
+    let path;
+    if (scheme) {
+        const protocol = (scheme[1] ?? '').toLowerCase();
+        if (protocol !== 'https' && protocol !== 'ssh')
+            return reject('unsupported_transport');
+        transport = protocol;
+        const parts = /^([^/]*)(?:\/(.*))?$/.exec(input.slice(scheme[0].length));
+        if (!parts)
+            return reject('invalid_remote');
+        authority = parts[1] ?? '';
+        path = parts[2] ?? '';
+    }
+    else {
+        const scp = /^((?:[^@/:]+@)?(?:\[[^\]]+\]|[^/:]+)):(.*)$/.exec(input);
+        if (!scp)
+            return reject('invalid_remote');
+        transport = 'ssh';
+        authority = scp[1] ?? '';
+        path = scp[2] ?? '';
+    }
+    const at = authority.lastIndexOf('@');
+    let user = '';
+    if (at >= 0) {
+        if (transport === 'https')
+            return reject('https_userinfo');
+        user = authority.slice(0, at);
+        if (user.includes(':'))
+            return reject('ssh_password');
+        if (!/^[A-Za-z0-9._~!$&'()*+,;=-]+$/.test(user))
+            return reject('invalid_ssh_user');
+        authority = authority.slice(at + 1);
+    }
+    if (transport === 'ssh' && !user)
+        return reject('ssh_user_required');
+    const hostPort = /^(\[[^\]]+\]|[^:[\]]+)(?::([0-9]+))?$/.exec(authority);
+    if (!hostPort)
+        return reject(authority.includes(':') ? 'invalid_port' : 'invalid_host');
+    let host = hostPort[1] ?? '';
+    let port = hostPort[2] ?? '';
+    if (port && (Number(port) < 1 || Number(port) > 65535))
+        return reject('invalid_port');
+    if (port)
+        port = String(Number(port));
+    if (port === (transport === 'https' ? '443' : '22'))
+        port = '';
+    if (/[\s%/@?#]/u.test(host))
+        return reject('invalid_host');
+    try {
+        // Node's WHATWG host parser supplies UTS 46 ToASCII and IPv6 zero compression.
+        host = host.startsWith('[')
+            ? new URL(`https://${host}/`).hostname
+            : domainToASCII(host).toLowerCase();
+        if (!host)
+            return reject('invalid_host');
+    }
+    catch {
+        return reject('invalid_host');
+    }
+    const rule = providerRules.find((rule) => rule.host === host && !port && (transport === 'https' || user === rule.sshUser));
+    // Generic scp paths are home-relative; ssh:// paths are absolute. Only a
+    // reviewed provider rule can establish that both name the same repository.
+    if (!scheme && !rule)
+        return reject('scp_unreviewed_remote');
+    if (!scheme && path.startsWith('/'))
+        path = path.slice(1);
+    if (path.endsWith('/'))
+        path = path.slice(0, -1);
+    const segments = [];
+    for (const raw of path.split('/')) {
+        if (/%(?:2f|5c)/i.test(raw))
+            return reject('escaped_separator');
+        let segment;
+        try {
+            segment = decodeURIComponent(raw).normalize('NFC');
+        }
+        catch {
+            return reject('invalid_encoding');
+        }
+        if (controls.test(segment))
+            return reject('control_character');
+        if (segment.includes('\\'))
+            return reject('backslash');
+        if (!segment)
+            return reject('empty_segment');
+        if (segment === '.' || segment === '..')
+            return reject('dot_segment');
+        try {
+            segments.push(encodeSegment(segment));
+        }
+        catch {
+            return reject('invalid_encoding');
+        }
+    }
+    const parsed = { transport, host, user, port, path: segments.join('/') };
+    if (rule?.removeTerminalDotGit) {
+        parsed.path = parsed.path.replace(/\.git$/, '');
+        const last = parsed.path.split('/').at(-1);
+        if (!last)
+            return reject('empty_segment');
+        if (last === '.' || last === '..')
+            return reject('dot_segment');
+    }
+    const prefix = rule
+        ? `${rule.name}:${host}`
+        : `${transport}:${transport === 'ssh' ? `${user}@` : ''}${host}${port ? `:${port}` : ''}`;
+    const canonical = `repo-v1:${prefix}/${parsed.path}`;
+    return {
+        canonical,
+        hash: createHash('sha256').update(canonical, 'utf8').digest('hex'),
+        algorithmVersion: 1,
+    };
+}
+/** Choice results carry names, never credential-bearing URLs. No URL is guessed. */
+export function selectRemote(remotes) {
+    if (!remotes.length)
+        return { status: 'none', reason: 'no_remote' };
+    const origins = remotes.filter((remote) => remote.name === 'origin');
+    const selected = origins.length === 1 ? origins[0] : remotes.length === 1 ? remotes[0] : undefined;
+    if (!selected)
+        return {
+            status: 'choice_required',
+            reason: 'multiple_remotes',
+            remotes: remotes.map((r) => r.name),
+        };
+    if (!selected.fetchUrls.length)
+        return { status: 'none', reason: 'no_fetch_url' };
+    const results = [...selected.fetchUrls, ...(selected.pushUrls ?? [])].map((url) => canonicalizeRemote(url));
+    const first = results[0];
+    if (!first)
+        return { status: 'none', reason: 'no_fetch_url' };
+    if (results.length === 1 && 'reason' in first)
+        return { status: 'rejected', remote: selected.name, reason: first.reason };
+    if ('reason' in first ||
+        results.some((result) => 'reason' in result || result.canonical !== first.canonical)) {
+        return { status: 'choice_required', reason: 'different_urls', remotes: [selected.name] };
+    }
+    return { status: 'fingerprint', remote: selected.name, fingerprint: first };
+}
+//# sourceMappingURL=repositoryFingerprint.js.map

package/dist/repositoryFingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositoryFingerprint.js","sourceRoot":"","sources":["../src/repositoryFingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAyCzC,uFAAuF;AACvF,MAAM,CAAC,MAAM,yBAAyB,GAAsC,MAAM,CAAC,MAAM,CAAC;IACxF,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;CAClG,CAAC,CAAC;AACH,MAAM,QAAQ,GAAG,SAAS,CAAC;AAC3B,MAAM,MAAM,GAAG,CAAC,MAA6B,EAAgB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;AACjG,MAAM,aAAa,GAAG,CAAC,OAAe,EAAU,EAAE,CAChD,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,CACjC,UAAU,EACV,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAC9D,CAAC;AAEJ,oFAAoF;AACpF,MAAM,UAAU,kBAAkB,CAChC,GAAW,EACX,EACE,aAAa,GAAG,yBAAyB,GAC1C,GAA0D,EAAE;IAE7D,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC3D,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,SAA0B,CAAC;IAC/B,IAAI,SAAiB,CAAC;IACtB,IAAI,IAAY,CAAC;IACjB,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACvF,SAAS,GAAG,QAAQ,CAAC;QACrB,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC5C,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,6CAA6C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,GAAG;YAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1C,SAAS,GAAG,KAAK,CAAC;QAClB,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QACZ,IAAI,SAAS,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC3D,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;QACtD,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACnF,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,SAAS,KAAK,KAAK,IAAI,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,uCAAuC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzE,IAAI,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IACxF,IAAI,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;IACtF,IAAI,IAAI;QAAE,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,IAAI,GAAG,EAAE,CAAC;IAC/D,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,+EAA+E;QAC/E,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YACzB,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,CAAC,QAAQ;YACtC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAC7B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,IAAI,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,CAC1F,CAAC;IACF,yEAAyE;IACzE,2EAA2E;IAC3E,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAChE,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACvF,IAAI,IAAI,EAAE,oBAAoB,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,IAAI;QACjB,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE;QACxB,CAAC,CAAC,GAAG,SAAS,IAAI,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC5F,MAAM,SAAS,GAAG,WAAW,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;IACrD,OAAO;QACL,SAAS;QACT,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAClE,gBAAgB,EAAE,CAAC;KACpB,CAAC;AACJ,CAAC;AAiBD,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAC,OAAoC;IAC/D,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACpE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACrE,MAAM,QAAQ,GACZ,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,IAAI,CAAC,QAAQ;QACX,OAAO;YACL,MAAM,EAAE,iBAAiB;YACzB,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACpC,CAAC;IACJ,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAClF,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAChF,kBAAkB,CAAC,GAAG,CAAC,CACxB,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,IAAI,KAAK;QAC3C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7E,IACE,QAAQ,IAAI,KAAK;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,EACpF,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3F,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAC9E,CAAC"}

package/dist/repositoryRoot.d.ts

@@ -0,0 +1,56 @@
+import { type ProjectIdentityFile } from './projectIdentityFile.js';
+export interface RepositoryBoundary {
+    path: string;
+    kind: 'directory' | 'file';
+}
+export type RepositoryRootResult = {
+    kind: 'git';
+    root: string;
+    commonDir: string;
+    isLinkedWorktree: boolean;
+    nested: RepositoryBoundary[];
+} | {
+    kind: 'plain';
+    root: string;
+} | {
+    kind: 'git_unavailable';
+    detail: string;
+};
+type ResolvedRepository = Exclude<RepositoryRootResult, {
+    kind: 'git_unavailable';
+}>;
+type ResolvedBase = {
+    root: string;
+    repository: ResolvedRepository;
+    nested: RepositoryBoundary[];
+};
+export type ProjectIdentityResolution = (ResolvedBase & {
+    kind: 'ok';
+    identity: ProjectIdentityFile;
+}) | (ResolvedBase & {
+    kind: 'absent';
+}) | (ResolvedBase & {
+    kind: 'unknown_version';
+    version: unknown;
+    path: string;
+}) | (ResolvedBase & {
+    kind: 'malformed';
+    detail: string;
+    path: string;
+}) | (ResolvedBase & {
+    kind: 'nested';
+    parentIdentity?: ProjectIdentityFile;
+}) | (ResolvedBase & {
+    kind: 'conflict';
+    rootIdentity: ProjectIdentityFile;
+    nestedIdentity: ProjectIdentityFile;
+}) | {
+    kind: 'git_unavailable';
+    detail: string;
+};
+export declare function resolveRepositoryRoot(cwd: string): Promise<RepositoryRootResult>;
+export declare function resolveProjectIdentity(cwd: string, options?: {
+    allowNestedInherit?: boolean;
+}): Promise<ProjectIdentityResolution>;
+export {};
+//# sourceMappingURL=repositoryRoot.d.ts.map

package/dist/repositoryRoot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositoryRoot.d.ts","sourceRoot":"","sources":["../src/repositoryRoot.ts"],"names":[],"mappings":"AAIA,OAAO,EAAoB,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEtF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,WAAW,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,oBAAoB,GAC5B;IACE,IAAI,EAAE,KAAK,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,MAAM,EAAE,kBAAkB,EAAE,CAAC;CAC9B,GACD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD,KAAK,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,EAAE;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAAC;AAErF,KAAK,YAAY,GAAG;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,kBAAkB,EAAE,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,yBAAyB,GACjC,CAAC,YAAY,GAAG;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAA;CAAE,CAAC,GAC9D,CAAC,YAAY,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,GACnC,CAAC,YAAY,GAAG;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAC5E,CAAC,YAAY,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACpE,CAAC,YAAY,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,cAAc,CAAC,EAAE,mBAAmB,CAAA;CAAE,CAAC,GACzE,CAAC,YAAY,GAAG;IACd,IAAI,EAAE,UAAU,CAAC;IACjB,YAAY,EAAE,mBAAmB,CAAC;IAClC,cAAc,EAAE,mBAAmB,CAAC;CACrC,CAAC,GACF;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAoGhD,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAkCtF;AA2BD,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IAAE,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,yBAAyB,CAAC,CAuDpC"}

package/dist/repositoryRoot.js

@@ -0,0 +1,226 @@
+import { lstat, readFile } from 'node:fs/promises';
+import { execFile } from 'node:child_process';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { readIdentityFile } from './projectIdentityFile.js';
+const GIT_TIMEOUT_MS = 2_000;
+const GIT_ENV_KEYS = [
+    'PATH',
+    'HOME',
+    'LANG',
+    'LC_ALL',
+    'SYSTEMROOT',
+    'TEMP',
+    'TMP',
+    'USERPROFILE',
+];
+function gitEnvironment() {
+    const env = {};
+    for (const key of GIT_ENV_KEYS) {
+        if (process.env[key] !== undefined)
+            env[key] = process.env[key];
+    }
+    env.LC_ALL = 'C';
+    return env;
+}
+function runGit(cwd, args) {
+    return new Promise((resolvePromise, reject) => {
+        execFile('git', args, { cwd, timeout: GIT_TIMEOUT_MS, encoding: 'utf8', env: gitEnvironment() }, (error, stdout, stderr) => {
+            if (error)
+                reject(Object.assign(error, { stdout, stderr }));
+            else
+                resolvePromise({ stdout, stderr });
+        });
+    });
+}
+async function boundaryAt(path) {
+    try {
+        const stat = await lstat(join(path, '.git'));
+        if (stat.isDirectory())
+            return { path, kind: 'directory' };
+        if (stat.isFile())
+            return { path, kind: 'file' };
+    }
+    catch (error) {
+        const code = error.code;
+        if (code !== 'ENOENT' && code !== 'ENOTDIR')
+            throw error;
+    }
+    return undefined;
+}
+async function confirmedBoundaryAt(path) {
+    const boundary = await boundaryAt(path);
+    if (!boundary)
+        return undefined;
+    try {
+        const { stdout } = await runGit(path, ['rev-parse', '--git-dir']);
+        return stdout.trim() ? boundary : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function boundariesBetween(cwd, root) {
+    const boundaries = [];
+    let directory = cwd;
+    while (directory !== root) {
+        const boundary = await confirmedBoundaryAt(directory);
+        if (boundary)
+            boundaries.push(boundary);
+        const parent = dirname(directory);
+        if (parent === directory)
+            break;
+        directory = parent;
+    }
+    return boundaries;
+}
+async function containingRepository(root) {
+    let directory = dirname(root);
+    while (true) {
+        const boundary = await confirmedBoundaryAt(directory);
+        if (boundary)
+            return boundary;
+        const parent = dirname(directory);
+        if (parent === directory)
+            return undefined;
+        directory = parent;
+    }
+}
+async function canonicalBoundaryRoot(boundary) {
+    if (boundary.kind === 'directory')
+        return boundary.path;
+    const pointer = /^gitdir:\s*(.+)\s*$/im.exec(await readFile(join(boundary.path, '.git'), 'utf8'))?.[1];
+    if (!pointer)
+        return boundary.path;
+    const gitDir = resolve(boundary.path, pointer);
+    try {
+        const commonDir = resolve(gitDir, (await readFile(join(gitDir, 'commondir'), 'utf8')).trim());
+        return dirname(commonDir);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return boundary.path;
+        throw error;
+    }
+}
+export async function resolveRepositoryRoot(cwd) {
+    const absoluteCwd = resolve(cwd);
+    try {
+        const { stdout } = await runGit(absoluteCwd, [
+            'rev-parse',
+            '--show-toplevel',
+            '--git-common-dir',
+        ]);
+        const [rootLine, commonLine, ...extra] = stdout.trim().split(/\r?\n/);
+        if (!rootLine || !commonLine || extra.length) {
+            return { kind: 'git_unavailable', detail: 'git rev-parse returned an unexpected response' };
+        }
+        const root = resolve(rootLine);
+        const commonDir = resolve(root, commonLine);
+        const isLinkedWorktree = commonDir !== join(root, '.git');
+        const nested = await boundariesBetween(absoluteCwd, root);
+        if (!isLinkedWorktree && (await containingRepository(root))) {
+            const boundary = await boundaryAt(root);
+            if (boundary)
+                nested.push(boundary);
+        }
+        return {
+            kind: 'git',
+            root,
+            commonDir,
+            isLinkedWorktree,
+            nested,
+        };
+    }
+    catch (error) {
+        const failure = error;
+        if (failure.code === 128 && /not a git repository/i.test(failure.stderr ?? failure.message)) {
+            return { kind: 'plain', root: absoluteCwd };
+        }
+        return { kind: 'git_unavailable', detail: failure.message };
+    }
+}
+async function readPlainIdentity(start) {
+    const home = resolve(homedir());
+    let directory = start;
+    while (true) {
+        const result = await readIdentityFile(directory);
+        if (result.kind !== 'absent')
+            return { root: directory, result };
+        if (directory === home)
+            break;
+        const parent = dirname(directory);
+        if (parent === directory)
+            break;
+        directory = parent;
+    }
+    return { root: start, result: { kind: 'absent' } };
+}
+function withBase(repository, root, nested) {
+    return { root, repository, nested };
+}
+export async function resolveProjectIdentity(cwd, options = {}) {
+    const repository = await resolveRepositoryRoot(cwd);
+    if (repository.kind === 'git_unavailable')
+        return repository;
+    if (repository.kind === 'plain') {
+        const { root, result } = await readPlainIdentity(repository.root);
+        const base = withBase(repository, root, []);
+        if (result.kind === 'ok')
+            return { ...base, ...result };
+        if (result.kind === 'unknown_version')
+            return { ...base, ...result, path: root };
+        if (result.kind === 'malformed')
+            return { ...base, ...result, path: root };
+        return { ...base, kind: 'absent' };
+    }
+    const ownRoot = repository.isLinkedWorktree ? dirname(repository.commonDir) : repository.root;
+    const outer = repository.isLinkedWorktree
+        ? undefined
+        : await containingRepository(repository.root);
+    const own = await readIdentityFile(ownRoot);
+    if (!outer) {
+        const base = withBase(repository, ownRoot, repository.nested);
+        if (own.kind === 'ok')
+            return { ...base, ...own };
+        if (own.kind === 'unknown_version')
+            return { ...base, ...own, path: ownRoot };
+        if (own.kind === 'malformed')
+            return { ...base, ...own, path: ownRoot };
+        return { ...base, kind: 'absent' };
+    }
+    const nested = repository.nested;
+    const parentRoot = await canonicalBoundaryRoot(outer);
+    const parent = await readIdentityFile(parentRoot);
+    const base = withBase(repository, parentRoot, nested);
+    if (own.kind === 'unknown_version')
+        return { ...base, ...own, path: ownRoot };
+    if (own.kind === 'malformed')
+        return { ...base, ...own, path: ownRoot };
+    if (parent.kind === 'unknown_version')
+        return { ...base, ...parent, path: parentRoot };
+    if (parent.kind === 'malformed')
+        return { ...base, ...parent, path: parentRoot };
+    if (own.kind === 'ok' && parent.kind === 'ok') {
+        return {
+            ...base,
+            kind: 'conflict',
+            rootIdentity: parent.identity,
+            nestedIdentity: own.identity,
+        };
+    }
+    if (own.kind === 'ok') {
+        return { ...withBase(repository, ownRoot, nested), kind: 'ok', identity: own.identity };
+    }
+    if (!options.allowNestedInherit) {
+        return {
+            ...base,
+            kind: 'nested',
+            ...(parent.kind === 'ok' ? { parentIdentity: parent.identity } : {}),
+        };
+    }
+    if (parent.kind === 'ok')
+        return { ...base, kind: 'ok', identity: parent.identity };
+    return { ...base, kind: 'absent' };
+}
+//# sourceMappingURL=repositoryRoot.js.map

package/dist/repositoryRoot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositoryRoot.js","sourceRoot":"","sources":["../src/repositoryRoot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAA4B,MAAM,0BAA0B,CAAC;AAuCtF,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,YAAY,GAAG;IACnB,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,MAAM;IACN,KAAK;IACL,aAAa;CACL,CAAC;AAEX,SAAS,cAAc;IACrB,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClE,CAAC;IACD,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;IACjB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,GAAW,EAAE,IAAc;IACzC,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QAC5C,QAAQ,CACN,KAAK,EACL,IAAI,EACJ,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EACzE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACxB,IAAI,KAAK;gBAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;;gBACvD,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1C,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC3D,IAAI,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC;IAC3D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC7C,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;QAClE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAW,EAAE,IAAY;IACxD,MAAM,UAAU,GAAyB,EAAE,CAAC;IAC5C,IAAI,SAAS,GAAG,GAAG,CAAC;IACpB,OAAO,SAAS,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,QAAQ;YAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM;QAChC,SAAS,GAAG,MAAM,CAAC;IACrB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAY;IAC9C,IAAI,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,SAAS,GAAG,MAAM,CAAC;IACrB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,QAA4B;IAC/D,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;IACxD,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAC1C,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CACpD,EAAE,CAAC,CAAC,CAAC,CAAC;IACP,IAAI,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9F,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;QAC7E,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW;IACrD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE;YAC3C,WAAW;YACX,iBAAiB;YACjB,kBAAkB;SACnB,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7C,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC;QAC9F,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5C,MAAM,gBAAgB,GAAG,SAAS,KAAK,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,gBAAgB,IAAI,CAAC,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,QAAQ;gBAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QACD,OAAO;YACL,IAAI,EAAE,KAAK;YACX,IAAI;YACJ,SAAS;YACT,gBAAgB;YAChB,MAAM;SACP,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAA4D,CAAC;QAC7E,IAAI,OAAO,CAAC,IAAI,KAAK,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC9C,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,KAAa;IAI5C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAChC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACjE,IAAI,SAAS,KAAK,IAAI;YAAE,MAAM;QAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM;QAChC,SAAS,GAAG,MAAM,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,QAAQ,CACf,UAA8B,EAC9B,IAAY,EACZ,MAA4B;IAE5B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAW,EACX,OAAO,GAAqC,EAAE;IAE9C,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,UAAU,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,UAAU,CAAC;IAE7D,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;QACxD,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjF,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC3E,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;IAC9F,MAAM,KAAK,GAAG,UAAU,CAAC,gBAAgB;QACvC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,oBAAoB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC;QAClD,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC9E,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACxE,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACjC,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAEtD,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC9E,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACxE,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACvF,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACjF,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO;YACL,GAAG,IAAI;YACP,IAAI,EAAE,UAAU;YAChB,YAAY,EAAE,MAAM,CAAC,QAAQ;YAC7B,cAAc,EAAE,GAAG,CAAC,QAAQ;SAC7B,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,EAAE,GAAG,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAChC,OAAO;YACL,GAAG,IAAI;YACP,IAAI,EAAE,QAAQ;YACd,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IACpF,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC"}

package/dist/runtimeReader.d.ts

@@ -0,0 +1,102 @@
+import { type Execute, type Signer } from './runtimeSigners.js';
+export type HostArtifact = 'claude-code' | 'codex' | 'cursor' | 'grok';
+export type Artifact = 'cli' | 'scanner' | HostArtifact;
+export type Reason = 'digest_mismatch' | 'manifest_missing' | 'unsigned' | 'permission' | 'acl_unavailable' | 'lock_held';
+export declare class RuntimeError extends Error {
+    readonly reason: Reason;
+    constructor(reason: Reason);
+}
+export declare const hash: (bytes: Buffer | string) => string;
+export declare function safePath(path: string): string;
+export interface NpmReceipt {
+    name: string;
+    version: string;
+    integrity: string;
+    tarball: string;
+    tarballSha256: string;
+}
+export interface Manifest {
+    schemaVersion: 1;
+    artifact: Artifact;
+    version: string;
+    entry: string;
+    files: Record<string, {
+        sha256: string;
+        size: number;
+        executable: boolean;
+    }>;
+    totalSize: number;
+    source: {
+        kind: 'npm';
+        packages: NpmReceipt[];
+        launchedFrom: string;
+    } | {
+        kind: 'release';
+        url: string;
+    };
+    signer?: Signer;
+    signingStatus?: 'unsigned' | 'signed';
+    disclosureVersion?: string;
+}
+export interface RuntimeSource {
+    manifest: Manifest;
+    files: Record<string, Buffer>;
+}
+export interface Reference {
+    version: string;
+    manifestSha256: string;
+}
+interface Pointer {
+    current: Reference;
+    previous?: Reference;
+}
+export interface Verified {
+    directory: string;
+    manifest: Manifest;
+    entry: string;
+    reference: Reference;
+}
+export declare const missing: (e: unknown) => boolean;
+export declare const versionName: (v: string) => string;
+/** Only stdlib and the accepted bootstrap's signer adapter may load before verifyRuntime returns. */
+export declare class RuntimeReader {
+    readonly run?: Execute | undefined;
+    readonly options: {
+        allowUnsigned?: boolean;
+        cacheDirectories?: boolean;
+    };
+    private readonly now;
+    readonly state: string;
+    private static readonly windowsSignatures;
+    private readonly windowsAudit;
+    private readonly windowsStats;
+    private readonly windowsDirectories;
+    private audits;
+    private readonly auditsInFlight;
+    private activeOperation;
+    private operations;
+    constructor(state: string, run?: Execute | undefined, options?: {
+        allowUnsigned?: boolean;
+        cacheDirectories?: boolean;
+    }, now?: () => number);
+    pointerPath(artifact: Artifact): string;
+    private guardedPath;
+    private auditRoot;
+    private traceAudit;
+    private invalidateAudit;
+    private audit;
+    private auditPending;
+    inspect(path: string, directory?: boolean, allowMissing?: boolean, replacing?: boolean): Promise<void>;
+    /** Call only after an owned atomic replacement: its parent ctime is our own write. */
+    recordReplacement(path: string): Promise<void>;
+    bytes(path: string): Promise<Buffer>;
+    /** An owned inheritable ACL update can change every cached descendant's ctime. */
+    protected recordAclWrite(path: string): Promise<void>;
+    protected pointer(artifact: Artifact): Promise<Pointer | undefined>;
+    private operation;
+    protected verifyAt(artifact: Artifact, ref: Reference, directory: string): Promise<Verified>;
+    private verifyOpen;
+    verifyRuntime(artifact: Artifact): Promise<Verified>;
+}
+export * from './runtimeSigners.js';
+//# sourceMappingURL=runtimeReader.d.ts.map

package/dist/runtimeReader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeReader.d.ts","sourceRoot":"","sources":["../src/runtimeReader.ts"],"names":[],"mappings":"AAIA,OAAO,EAOL,KAAK,OAAO,EACZ,KAAK,MAAM,EACZ,MAAM,qBAAqB,CAAC;AAE7B,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;AACvE,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,SAAS,GAAG,YAAY,CAAC;AACxD,MAAM,MAAM,MAAM,GACd,iBAAiB,GACjB,kBAAkB,GAClB,UAAU,GACV,YAAY,GACZ,iBAAiB,GACjB,WAAW,CAAC;AAChB,qBAAa,YAAa,SAAQ,KAAK;aACT,MAAM,EAAE,MAAM;IAA1C,YAA4B,MAAM,EAAE,MAAM,EAGzC;CACF;AACD,eAAO,MAAM,IAAI,UAAW,MAAM,GAAG,MAAM,KAAG,MACI,CAAC;AACnD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAS7C;AACD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACvB;AACD,MAAM,WAAW,QAAQ;IACvB,aAAa,EAAE,CAAC,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC7E,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EACF;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,QAAQ,EAAE,UAAU,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAC7D;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAC;IACtC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AACD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AACD,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB;AACD,UAAU,OAAO;IACf,OAAO,EAAE,SAAS,CAAC;IACnB,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB;AACD,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,SAAS,CAAC;CACtB;AACD,eAAO,MAAM,OAAO,MAAO,OAAO,KAAG,OAAyD,CAAC;AAC/F,eAAO,MAAM,WAAW,MAAO,MAAM,KAAG,MAGvC,CAAC;AAKF,qGAAqG;AACrG,qBAAa,aAAa;IAgBtB,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO;IACtB,QAAQ,CAAC,OAAO,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAC;QAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE;IACzE,OAAO,CAAC,QAAQ,CAAC,GAAG;IAjBtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAoC;IAE7E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAGzB;IACJ,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IACxD,OAAO,CAAC,MAAM,CAAoC;IAClD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,UAAU,CAAuC;IACzD,YACE,KAAK,EAAE,MAAM,EACJ,GAAG,CAAC,EAAE,OAAO,YAAA,EACb,OAAO,GAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAC;QAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAO,EAC7D,GAAG,eAA0B,EAG/C;IACD,WAAW,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAItC;IACD,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,KAAK;YAWC,YAAY;IAqEpB,OAAO,CACX,IAAI,EAAE,MAAM,EACZ,SAAS,UAAQ,EACjB,YAAY,UAAQ,EACpB,SAAS,UAAQ,GAChB,OAAO,CAAC,IAAI,CAAC,CA8Df;IACD,sFAAsF;IAChF,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAcnD;IACK,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAWzC;IACD,kFAAkF;IAClF,UAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAM1D;IACD,UAAgB,OAAO,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAYxE;YACa,SAAS;IAavB,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAE3F;YACa,UAAU;IAiHlB,aAAa,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAWzD;CACF;AAED,cAAc,qBAAqB,CAAC"}