@nickmeriano/task 0.8.0 → 0.10.0

package/dist/git-serve.test.js

@@ -0,0 +1,183 @@
+/**
+ * The git surface's contract (TAS-42), checked over real HTTP against real
+ * repositories — the properties that must hold before a board UI is allowed
+ * to run git:
+ *
+ * 1. Board commits are pathspec-scoped: with board AND non-board files dirty,
+ *    committing from the API commits exactly the board files.
+ * 2. Checkout is refused while tracked non-board files are dirty — no
+ *    stashing magic, the refusal says why.
+ * 3. The CSRF gate: a cross-origin browser write is 403 before any handler
+ *    runs; the board's own origin and origin-less clients pass.
+ * 4. Degradation: a repo with no origin advertises no `git` capability and
+ *    404s the whole route group — the self-hiding rule the UI builds on.
+ */
+import assert from "node:assert/strict";
+import { after, test } from "node:test";
+import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { spawnSync } from "node:child_process";
+import { initProject } from "./file-store.js";
+import { compareUrl } from "./git-serve.js";
+import { createTaskServer } from "./server.js";
+function tempDir() {
+    const dir = mkdtempSync(join(tmpdir(), "task-git-serve-test-"));
+    process.on("exit", () => rmSync(dir, { recursive: true, force: true }));
+    return dir;
+}
+function sh(cwd, command, ...args) {
+    const result = spawnSync(command, args, { cwd, encoding: "utf8" });
+    if (result.status !== 0) {
+        throw new Error(`${command} ${args.join(" ")} failed: ${result.stderr}`);
+    }
+    return result.stdout.trim();
+}
+/** A clone with a board, its origin bare — the shape `task serve` runs in. */
+function repoWithOrigin() {
+    const home = tempDir();
+    const bare = join(home, "origin.git");
+    sh(home, "git", "init", "--quiet", "--bare", "-b", "main", bare);
+    const clone = join(home, "clone");
+    sh(home, "git", "clone", "--quiet", bare, clone);
+    sh(clone, "git", "config", "user.name", "Test");
+    sh(clone, "git", "config", "user.email", "test@example.com");
+    const store = initProject(clone, { name: "git board", prefix: "GIT" });
+    const first = store.create({ title: "First", status: "todo" }).key;
+    writeFileSync(join(clone, "code.txt"), "original\n");
+    sh(clone, "git", "add", "-A");
+    sh(clone, "git", "commit", "--quiet", "-m", "board");
+    sh(clone, "git", "push", "--quiet", "-u", "origin", "main");
+    return { clone, first };
+}
+const servers = [];
+after(() => {
+    for (const server of servers)
+        server.close();
+});
+async function serve(root) {
+    const server = createTaskServer(root);
+    servers.push(server);
+    await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
+    const { port } = server.address();
+    return `http://127.0.0.1:${port}`;
+}
+async function call(base, path, init) {
+    const res = await fetch(`${base}${path}`, init);
+    return { status: res.status, body: (await res.json()) };
+}
+function post(body, headers = {}) {
+    return {
+        method: "POST",
+        headers: { "Content-Type": "application/json", ...headers },
+        body: JSON.stringify(body),
+    };
+}
+test("board commits are pathspec-scoped: mixed dirty tree, only board files land", async () => {
+    const { clone: repo, first } = repoWithOrigin();
+    const base = await serve(repo);
+    // Board dirt: edit a ticket and add a brand-new (untracked) one. Non-board
+    // dirt: a tracked file edited and an untracked scratch file.
+    const status = await call(base, "/api/git/status");
+    assert.equal(status.status, 200);
+    const patch = await call(base, `/api/tasks/${first}`, Object.assign(post({ status: "in_progress" }), { method: "PATCH" }));
+    assert.equal(patch.status, 200);
+    const created = await call(base, "/api/tasks", post({ title: "Second" }));
+    assert.equal(created.status, 201);
+    const second = created.body.task.key;
+    writeFileSync(join(repo, "code.txt"), "changed\n");
+    writeFileSync(join(repo, "scratch.txt"), "notes\n");
+    const before = await call(base, "/api/git/status");
+    const dirty = before.body.dirty;
+    assert.ok(dirty.length >= 2, JSON.stringify(before.body));
+    assert.ok(dirty.every((f) => f.path.startsWith(".task/")));
+    assert.deepEqual([...new Set(dirty.map((f) => f.ticket))].sort(), [first, second].sort());
+    assert.equal(before.body.otherDirty, 1); // code.txt — tracked; scratch.txt is untracked noise
+    const commit = await call(base, "/api/git/commit", post({ message: "chore(board): test" }));
+    assert.equal(commit.status, 200, JSON.stringify(commit.body));
+    // The commit holds board files only; the tree keeps its non-board dirt.
+    const committed = sh(repo, "git", "show", "--name-only", "--format=", "HEAD")
+        .split("\n")
+        .filter(Boolean);
+    assert.ok(committed.length >= 2);
+    assert.ok(committed.every((f) => f.startsWith(".task/")), committed.join(","));
+    const remaining = sh(repo, "git", "status", "--porcelain");
+    assert.ok(remaining.includes("code.txt"));
+    assert.ok(remaining.includes("scratch.txt"));
+    assert.ok(!remaining.includes(".task/"));
+    const after = await call(base, "/api/git/status");
+    assert.deepEqual(after.body.dirty, []);
+    assert.equal(after.body.ahead, 1); // committed, not pushed
+    // Nothing left to commit → clean refusal, not an empty commit.
+    const again = await call(base, "/api/git/commit", post({ message: "chore(board): empty" }));
+    assert.equal(again.status, 400);
+    assert.match(String(again.body.error), /nothing to commit/);
+});
+test("commit with newBranch cuts the branch first; checkout back is refused while code is dirty", async () => {
+    const { clone: repo, first } = repoWithOrigin();
+    const base = await serve(repo);
+    const patch = await call(base, `/api/tasks/${first}`, Object.assign(post({ tags: ["x"] }), { method: "PATCH" }));
+    assert.equal(patch.status, 200);
+    writeFileSync(join(repo, "code.txt"), "work in flight\n");
+    const commit = await call(base, "/api/git/commit", post({ message: "chore(board): branch it", newBranch: "board/test-1", base: "main" }));
+    assert.equal(commit.status, 200, JSON.stringify(commit.body));
+    assert.equal(commit.body.branch, "board/test-1");
+    assert.equal(sh(repo, "git", "branch", "--show-current"), "board/test-1");
+    // code.txt (tracked, dirty, outside every board dir) blocks the switch.
+    const refused = await call(base, "/api/git/checkout", post({ branch: "main" }));
+    assert.equal(refused.status, 409, JSON.stringify(refused.body));
+    assert.match(String(refused.body.error), /code\.txt/);
+    assert.equal(sh(repo, "git", "branch", "--show-current"), "board/test-1");
+    // Clean the code file and the same switch goes through.
+    sh(repo, "git", "checkout", "--", "code.txt");
+    const ok = await call(base, "/api/git/checkout", post({ branch: "main" }));
+    assert.equal(ok.status, 200, JSON.stringify(ok.body));
+    assert.equal(sh(repo, "git", "branch", "--show-current"), "main");
+});
+test("cross-origin writes are refused before any handler runs", async () => {
+    const { clone: repo } = repoWithOrigin();
+    const base = await serve(repo);
+    // A drive-by page POSTing at localhost: Origin names the attacker.
+    const evil = await call(base, "/api/git/commit", post({ message: "pwn" }, { Origin: "http://evil.example" }));
+    assert.equal(evil.status, 403);
+    // The board's own pages pass — Origin matches the Host it was served from.
+    const own = await call(base, "/api/tasks", post({ title: "From the board" }, { Origin: base }));
+    assert.equal(own.status, 201);
+    // And so do origin-less clients (curl, scripts) — the local-trust case.
+    const cli = await call(base, "/api/tasks", post({ title: "From a script" }));
+    assert.equal(cli.status, 201);
+    // Reads are uncontested either way.
+    const read = await call(base, "/api/git/status", { headers: { Origin: "http://evil.example" } });
+    assert.equal(read.status, 200);
+});
+test("a repo with no origin serves boards but no git surface at all", async () => {
+    const root = tempDir();
+    sh(root, "git", "init", "--quiet", "-b", "main", root);
+    sh(root, "git", "config", "user.name", "Test");
+    sh(root, "git", "config", "user.email", "test@example.com");
+    const store = initProject(root, { name: "loner", prefix: "LON" });
+    store.create({ title: "Only", status: "todo" });
+    const base = await serve(root);
+    const project = await call(base, "/api/project");
+    assert.equal(project.status, 200);
+    assert.equal("git" in project.body, false, JSON.stringify(project.body));
+    const status = await call(base, "/api/git/status");
+    assert.equal(status.status, 404);
+    const branches = await call(base, "/api/git/branches");
+    assert.equal(branches.status, 404);
+});
+test("a plain directory (no git at all) behaves the same", async () => {
+    const root = tempDir();
+    mkdirSync(join(root, "inner"));
+    const store = initProject(join(root, "inner"), { name: "bare", prefix: "BAR" });
+    store.create({ title: "Only", status: "todo" });
+    // Guard against the test machine's own enclosing repo: this only proves
+    // something when the temp dir is genuinely outside one, which tmpdir() is.
+    const base = await serve(join(root, "inner"));
+    const project = await call(base, "/api/project");
+    assert.equal("git" in project.body, false);
+});
+test("the gh-less PR fallback is the exact GitHub compare URL, branches escaped", () => {
+    assert.equal(compareUrl({ owner: "nicmeriano", repo: "nickmeriano.com" }, "main", "board/2026-09-01"), "https://github.com/nicmeriano/nickmeriano.com/compare/main...board%2F2026-09-01?expand=1");
+});
+//# sourceMappingURL=git-serve.test.js.map

package/dist/git-serve.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-serve.test.js","sourceRoot":"","sources":["../src/git-serve.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAG9C,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C,SAAS,OAAO;IACd,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAA;IAC/D,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACvE,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,EAAE,CAAC,GAAW,EAAE,OAAe,EAAE,GAAG,IAAc;IACzD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;AAC7B,CAAC;AAED,8EAA8E;AAC9E,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IACtB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IACrC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACjC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IAChD,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;IAC/C,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAA;IAC5D,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IACtE,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAA;IAClE,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,YAAY,CAAC,CAAA;IACpD,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IAC7B,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IACpD,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC3D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;AACzB,CAAC;AAED,MAAM,OAAO,GAAa,EAAE,CAAA;AAC5B,KAAK,CAAC,GAAG,EAAE;IACT,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,MAAM,CAAC,KAAK,EAAE,CAAA;AAC9C,CAAC,CAAC,CAAA;AAEF,KAAK,UAAU,KAAK,CAAC,IAAY;IAC/B,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACrC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACpB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;IAC5E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAA;IAChD,OAAO,oBAAoB,IAAI,EAAE,CAAA;AACnC,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,IAAY,EACZ,IAAY,EACZ,IAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAA;IAC/C,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,EAAE,CAAA;AACpF,CAAC;AAED,SAAS,IAAI,CAAC,IAAa,EAAE,UAAkC,EAAE;IAC/D,OAAO;QACL,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE;QAC3D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAA;AACH,CAAC;AAED,IAAI,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;IAC5F,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,cAAc,EAAE,CAAA;IAC/C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAE9B,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAA;IAClD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAChC,MAAM,KAAK,GAAG,MAAM,IAAI,CACtB,IAAI,EACJ,cAAc,KAAK,EAAE,EACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CACpE,CAAA;IACD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;IACzE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjC,MAAM,MAAM,GAAI,OAAO,CAAC,IAAI,CAAC,IAAwB,CAAC,GAAG,CAAA;IACzD,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,WAAW,CAAC,CAAA;IAClD,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,SAAS,CAAC,CAAA;IAEnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAA;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAkD,CAAA;IAC5E,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IACzD,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC1D,MAAM,CAAC,SAAS,CACd,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAC/C,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CACvB,CAAA;IACD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAA,CAAC,qDAAqD;IAE7F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAA;IAC3F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAE7D,wEAAwE;IACxE,MAAM,SAAS,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,CAAC;SAC1E,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,OAAO,CAAC,CAAA;IAClB,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC,CAAA;IAChC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9E,MAAM,SAAS,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAA;IAC1D,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAA;IACzC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAA;IAC5C,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;IAExC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAA;IACjD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACtC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA,CAAC,wBAAwB;IAE1D,+DAA+D;IAC/D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAA;IAC3F,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC,CAAA;AAC7D,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;IAC3G,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,cAAc,EAAE,CAAA;IAC/C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAE9B,MAAM,KAAK,GAAG,MAAM,IAAI,CACtB,IAAI,EACJ,cAAc,KAAK,EAAE,EACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAC1D,CAAA;IACD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC/B,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,kBAAkB,CAAC,CAAA;IAEzD,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,IAAI,EACJ,iBAAiB,EACjB,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CACtF,CAAA;IACD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAC7D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IAChD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,CAAC,EAAE,cAAc,CAAC,CAAA;IAEzE,wEAAwE;IACxE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;IAC/E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAA;IACrD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,CAAC,EAAE,cAAc,CAAC,CAAA;IAEzE,wDAAwD;IACxD,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;IAC7C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;IAC1E,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IACrD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAA;AACnE,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;IACzE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,cAAc,EAAE,CAAA;IACxC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAE9B,mEAAmE;IACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CACrB,IAAI,EACJ,iBAAiB,EACjB,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAC5D,CAAA;IACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9B,2EAA2E;IAC3E,MAAM,GAAG,GAAG,MAAM,IAAI,CACpB,IAAI,EACJ,YAAY,EACZ,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CACpD,CAAA;IACD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC7B,wEAAwE;IACxE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC,CAAA;IAC5E,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC7B,oCAAoC;IACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAA;IAChG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAChC,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;IAC/E,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IACtB,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IACtD,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;IAC9C,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAA;IAC3D,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IACjE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAE9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;IAChD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAExE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAA;IAClD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAA;IACtD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AACpC,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;IACpE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IACtB,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;IAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/E,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/C,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;IAChD,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AAC5C,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,2EAA2E,EAAE,GAAG,EAAE;IACrF,MAAM,CAAC,KAAK,CACV,UAAU,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,MAAM,EAAE,kBAAkB,CAAC,EACxF,0FAA0F,CAC3F,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/git.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Every git spawn in the CLI goes through here (TAS-40, folded into TAS-42):
+ * one place that guarantees a spawn can never wedge the process. Each call is
+ * non-interactive — `GIT_TERMINAL_PROMPT=0` turns a would-be credential
+ * prompt into a fast failure — and bounded by a timeout, because several of
+ * these run inside `task serve` request handlers, where a hung prompt or a
+ * wedged remote would hang the board for everyone looking at it.
+ *
+ * Three calling styles, because callers genuinely differ on what failure is:
+ * `git` returns the full result (claim flows branch on exit codes), `gitMust`
+ * throws (steps with no soft outcome), `gitOut` returns null (read paths that
+ * degrade to "can't ask git" — the serve/inbox rule).
+ */
+export interface GitResult {
+    status: number;
+    stdout: string;
+    stderr: string;
+}
+export interface GitOptions {
+    /** Extra env on top of the non-interactive baseline — e.g. GIT_INDEX_FILE. */
+    env?: Record<string, string>;
+    /** Piped to stdin — e.g. `hash-object -w --stdin`. */
+    input?: string;
+    timeoutMs?: number;
+}
+/** Local operations answer fast or something is genuinely wrong. */
+export declare const GIT_TIMEOUT_MS = 30000;
+/** Network operations (a full fetch, a push) get real-world headroom. */
+export declare const GIT_NETWORK_TIMEOUT_MS = 120000;
+/**
+ * The one spawn. A failed spawn (git missing, timeout hit) reads as status 1
+ * with the reason in stderr — callers treat it exactly like a failed command,
+ * which for every caller here is the truth that matters.
+ */
+export declare function runGit(cwd: string, args: string[], options?: GitOptions): GitResult;
+export declare function git(cwd: string, ...args: string[]): GitResult;
+/** Run git and throw on failure — for the steps that have no soft outcome. */
+export declare function gitMust(cwd: string, ...args: string[]): string;
+/** Soft git: stdout on success, null on any failure — callers decide if that's an error. */
+export declare function gitOut(cwd: string, ...args: string[]): string | null;
+/**
+ * The base a claim or board branch starts from: origin's default branch.
+ * Resolved from `origin/HEAD` when the clone recorded it, with a main/master
+ * fallback for repos wired up by hand (`git remote add` + push never sets
+ * origin/HEAD).
+ */
+export declare function defaultBase(cwd: string): string;
+export interface RepoRef {
+    owner: string;
+    repo: string;
+}
+/**
+ * The GitHub repo this working copy pushes to.
+ *
+ * `origin` first, then the only remote if there's exactly one — a clone with
+ * `upstream` and a fork remote should not silently pick the wrong one, so
+ * ambiguity reads as "no repo" and the caller asks the user.
+ */
+export declare function detectRepo(cwd: string): RepoRef | null;
+/**
+ * Every shape git writes a GitHub remote in: https, ssh, `git@`-scp, with or
+ * without `.git`, and with or without credentials embedded in the host.
+ */
+export declare function parseRemote(url: string): RepoRef | null;
+//# sourceMappingURL=git.d.ts.map

package/dist/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,UAAU;IACzB,8EAA8E;IAC9E,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,oEAAoE;AACpE,eAAO,MAAM,cAAc,QAAS,CAAA;AACpC,yEAAyE;AACzE,eAAO,MAAM,sBAAsB,SAAU,CAAA;AAE7C;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,UAAe,GAAG,SAAS,CAgBvF;AAED,wBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,CAE7D;AAED,8EAA8E;AAC9E,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAM9D;AAED,4FAA4F;AAC5F,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAGpE;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAW/C;AAID,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAItD;AAaD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CASvD"}

package/dist/git.js

@@ -0,0 +1,114 @@
+/**
+ * Every git spawn in the CLI goes through here (TAS-40, folded into TAS-42):
+ * one place that guarantees a spawn can never wedge the process. Each call is
+ * non-interactive — `GIT_TERMINAL_PROMPT=0` turns a would-be credential
+ * prompt into a fast failure — and bounded by a timeout, because several of
+ * these run inside `task serve` request handlers, where a hung prompt or a
+ * wedged remote would hang the board for everyone looking at it.
+ *
+ * Three calling styles, because callers genuinely differ on what failure is:
+ * `git` returns the full result (claim flows branch on exit codes), `gitMust`
+ * throws (steps with no soft outcome), `gitOut` returns null (read paths that
+ * degrade to "can't ask git" — the serve/inbox rule).
+ */
+import { spawnSync } from "node:child_process";
+/** Local operations answer fast or something is genuinely wrong. */
+export const GIT_TIMEOUT_MS = 30_000;
+/** Network operations (a full fetch, a push) get real-world headroom. */
+export const GIT_NETWORK_TIMEOUT_MS = 120_000;
+/**
+ * The one spawn. A failed spawn (git missing, timeout hit) reads as status 1
+ * with the reason in stderr — callers treat it exactly like a failed command,
+ * which for every caller here is the truth that matters.
+ */
+export function runGit(cwd, args, options = {}) {
+    const result = spawnSync("git", args, {
+        cwd,
+        encoding: "utf8",
+        input: options.input,
+        timeout: options.timeoutMs ?? GIT_TIMEOUT_MS,
+        env: { ...process.env, GIT_TERMINAL_PROMPT: "0", ...options.env },
+    });
+    if (result.error) {
+        return { status: 1, stdout: "", stderr: result.error.message };
+    }
+    return {
+        status: result.status ?? 1,
+        stdout: (result.stdout ?? "").trim(),
+        stderr: (result.stderr ?? "").trim(),
+    };
+}
+export function git(cwd, ...args) {
+    return runGit(cwd, args);
+}
+/** Run git and throw on failure — for the steps that have no soft outcome. */
+export function gitMust(cwd, ...args) {
+    const result = runGit(cwd, args);
+    if (result.status !== 0) {
+        throw new Error(`git ${args[0]} failed: ${result.stderr || result.stdout}`);
+    }
+    return result.stdout;
+}
+/** Soft git: stdout on success, null on any failure — callers decide if that's an error. */
+export function gitOut(cwd, ...args) {
+    const result = runGit(cwd, args);
+    return result.status === 0 ? result.stdout : null;
+}
+/**
+ * The base a claim or board branch starts from: origin's default branch.
+ * Resolved from `origin/HEAD` when the clone recorded it, with a main/master
+ * fallback for repos wired up by hand (`git remote add` + push never sets
+ * origin/HEAD).
+ */
+export function defaultBase(cwd) {
+    const head = git(cwd, "symbolic-ref", "--quiet", "refs/remotes/origin/HEAD");
+    if (head.status === 0)
+        return head.stdout.replace(/^refs\/remotes\//, "");
+    for (const name of ["main", "master"]) {
+        if (git(cwd, "show-ref", "--verify", "--quiet", `refs/remotes/origin/${name}`).status === 0) {
+            return `origin/${name}`;
+        }
+    }
+    throw new Error("couldn't resolve origin's default branch — origin/HEAD is unset and neither origin/main nor origin/master exists");
+}
+/**
+ * The GitHub repo this working copy pushes to.
+ *
+ * `origin` first, then the only remote if there's exactly one — a clone with
+ * `upstream` and a fork remote should not silently pick the wrong one, so
+ * ambiguity reads as "no repo" and the caller asks the user.
+ */
+export function detectRepo(cwd) {
+    const remotes = gitRemotes(cwd);
+    const url = remotes.get("origin") ?? (remotes.size === 1 ? [...remotes.values()][0] : null);
+    return url ? parseRemote(url) : null;
+}
+function gitRemotes(cwd) {
+    const out = new Map();
+    const raw = gitOut(cwd, "remote", "-v");
+    if (raw === null)
+        return out;
+    for (const line of raw.split("\n")) {
+        const match = /^(\S+)\s+(\S+)\s+\(fetch\)$/.exec(line.trim());
+        if (match)
+            out.set(match[1], match[2]);
+    }
+    return out;
+}
+/**
+ * Every shape git writes a GitHub remote in: https, ssh, `git@`-scp, with or
+ * without `.git`, and with or without credentials embedded in the host.
+ */
+export function parseRemote(url) {
+    const cleaned = url.trim().replace(/\.git$/, "");
+    const match = /^(?:https?:\/\/|ssh:\/\/)?(?:[^@/]+@)?github\.com[:/]([^/]+)\/([^/]+?)\/?$/.exec(cleaned);
+    if (!match)
+        return null;
+    const [, owner, repo] = match;
+    if (!/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})$/.test(owner))
+        return null;
+    if (!/^[A-Za-z0-9._-]{1,100}$/.test(repo))
+        return null;
+    return { owner, repo };
+}
+//# sourceMappingURL=git.js.map

package/dist/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAgB9C,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAA;AACpC,yEAAyE;AACzE,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAA;AAE7C;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,GAAW,EAAE,IAAc,EAAE,UAAsB,EAAE;IAC1E,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;QACpC,GAAG;QACH,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,SAAS,IAAI,cAAc;QAC5C,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;KAClE,CAAC,CAAA;IACF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;IAChE,CAAC;IACD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC;QAC1B,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACpC,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;KACrC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,GAAG,IAAc;IAChD,OAAO,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;AAC1B,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,GAAG,IAAc;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAChC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAA;AACtB,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,MAAM,CAAC,GAAW,EAAE,GAAG,IAAc;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAChC,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,0BAA0B,CAAC,CAAA;IAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAA;IACzE,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,uBAAuB,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5F,OAAO,UAAU,IAAI,EAAE,CAAA;QACzB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,kHAAkH,CACnH,CAAA;AACH,CAAC;AASD;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC3F,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAA;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;IACvC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,GAAG,CAAA;IAC5B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QAC7D,IAAI,KAAK;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACxC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IAChD,MAAM,KAAK,GACT,4EAA4E,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC5F,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,CAAA;IAC7B,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACnE,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACtD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AACxB,CAAC"}

package/dist/id.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Ticket keys — the branch-safe identity scheme (TAS-42).
+ *
+ * A ticket's key is 5 random characters from a 27-letter alphabet, minted at
+ * `task add` with no coordination: two checkouts that have never seen each
+ * other's commits can't mint the same key except by 1-in-14M chance per pair,
+ * and `task check`'s duplicate lint catches the miracle at merge. The key IS
+ * the ticket's directory name under `.task/tickets/`, so allocation is safe by
+ * construction — git can't merge two different tickets into one directory.
+ *
+ * The alphabet drops vowels (keys can't spell words), 0/1/i/l/o/u (no
+ * confusable glyphs when a key is read aloud or typed from a screen), and is
+ * all-lowercase (keys land in claim branch names, which are case-sensitive
+ * refs). A key always contains a letter — an all-digit roll is re-rolled — so
+ * a purely numeric directory is unambiguously a pre-migration ticket, which
+ * is exactly how the check lint tells the two apart.
+ *
+ * Keys deliberately carry no timestamp and no sequence: identity must be
+ * dumber than metadata. Creation order lives in `created:`; board order lives
+ * in `position:`. Anything the key "said" beyond naming the ticket could be
+ * wrong one day, and a wrong id breaks every reference to it.
+ */
+export declare const KEY_ALPHABET = "23456789bcdfghjkmnpqrstvwxz";
+export declare const KEY_LENGTH = 5;
+/**
+ * What a ticket key may look like — the shape readers accept, wider than what
+ * minting produces so a future length change doesn't strand old boards. Must
+ * contain a letter: an all-digit name is a pre-migration ticket number, and
+ * the two must never be confusable.
+ */
+export declare const KEY_PATTERN: RegExp;
+export declare function isTicketKey(value: string): boolean;
+/**
+ * Mint a key no ticket on this checkout uses. The local-collision retry is
+ * near-free insurance; the cross-branch case has no lock by design and rides
+ * on the odds (27^5 ≈ 14M keys) plus the check lint.
+ */
+export declare function mintKey(taken: ReadonlySet<string>): string;
+//# sourceMappingURL=id.d.ts.map

package/dist/id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.d.ts","sourceRoot":"","sources":["../src/id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,eAAO,MAAM,YAAY,gCAAgC,CAAA;AACzD,eAAO,MAAM,UAAU,IAAI,CAAA;AAE3B;;;;;GAKG;AACH,eAAO,MAAM,WAAW,QAAgC,CAAA;AAExD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAElD;AAoBD;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,MAAM,CAM1D"}

package/dist/id.js

@@ -0,0 +1,67 @@
+/**
+ * Ticket keys — the branch-safe identity scheme (TAS-42).
+ *
+ * A ticket's key is 5 random characters from a 27-letter alphabet, minted at
+ * `task add` with no coordination: two checkouts that have never seen each
+ * other's commits can't mint the same key except by 1-in-14M chance per pair,
+ * and `task check`'s duplicate lint catches the miracle at merge. The key IS
+ * the ticket's directory name under `.task/tickets/`, so allocation is safe by
+ * construction — git can't merge two different tickets into one directory.
+ *
+ * The alphabet drops vowels (keys can't spell words), 0/1/i/l/o/u (no
+ * confusable glyphs when a key is read aloud or typed from a screen), and is
+ * all-lowercase (keys land in claim branch names, which are case-sensitive
+ * refs). A key always contains a letter — an all-digit roll is re-rolled — so
+ * a purely numeric directory is unambiguously a pre-migration ticket, which
+ * is exactly how the check lint tells the two apart.
+ *
+ * Keys deliberately carry no timestamp and no sequence: identity must be
+ * dumber than metadata. Creation order lives in `created:`; board order lives
+ * in `position:`. Anything the key "said" beyond naming the ticket could be
+ * wrong one day, and a wrong id breaks every reference to it.
+ */
+export const KEY_ALPHABET = "23456789bcdfghjkmnpqrstvwxz";
+export const KEY_LENGTH = 5;
+/**
+ * What a ticket key may look like — the shape readers accept, wider than what
+ * minting produces so a future length change doesn't strand old boards. Must
+ * contain a letter: an all-digit name is a pre-migration ticket number, and
+ * the two must never be confusable.
+ */
+export const KEY_PATTERN = /^(?=.*[a-z])[a-z0-9]{4,12}$/;
+export function isTicketKey(value) {
+    return KEY_PATTERN.test(value);
+}
+/**
+ * One random roll — Web Crypto (global in Node ≥19 and in Workers, so this
+ * module stays importable by the hosted board), with rejection sampling so
+ * the 27-letter alphabet gets a uniform draw rather than a modulo bias.
+ */
+function roll() {
+    const limit = 256 - (256 % KEY_ALPHABET.length);
+    let key = "";
+    while (key.length < KEY_LENGTH) {
+        const bytes = crypto.getRandomValues(new Uint8Array(KEY_LENGTH * 2));
+        for (const byte of bytes) {
+            if (byte >= limit || key.length >= KEY_LENGTH)
+                continue;
+            key += KEY_ALPHABET[byte % KEY_ALPHABET.length];
+        }
+    }
+    return key;
+}
+/**
+ * Mint a key no ticket on this checkout uses. The local-collision retry is
+ * near-free insurance; the cross-branch case has no lock by design and rides
+ * on the odds (27^5 ≈ 14M keys) plus the check lint.
+ */
+export function mintKey(taken) {
+    for (;;) {
+        const key = roll();
+        if (!KEY_PATTERN.test(key))
+            continue; // all-digit roll — must stay pre-migration-only
+        if (!taken.has(key))
+            return key;
+    }
+}
+//# sourceMappingURL=id.js.map

package/dist/id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.js","sourceRoot":"","sources":["../src/id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,6BAA6B,CAAA;AACzD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAA;AAE3B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,6BAA6B,CAAA;AAExD,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAChC,CAAC;AAED;;;;GAIG;AACH,SAAS,IAAI;IACX,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IAC/C,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,OAAO,GAAG,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAA;QACpE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,IAAI,KAAK,IAAI,GAAG,CAAC,MAAM,IAAI,UAAU;gBAAE,SAAQ;YACvD,GAAG,IAAI,YAAY,CAAC,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QACjD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,KAA0B;IAChD,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,IAAI,EAAE,CAAA;QAClB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAQ,CAAC,gDAAgD;QACrF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAA;IACjC,CAAC;AACH,CAAC"}

package/dist/inbox.d.ts

@@ -0,0 +1,41 @@
+/**
+ * `task inbox` — every open ask on effectively-in-progress tickets, repo-wide.
+ * The one list a person checks to unblock work NOW (TAS-38): each entry is a
+ * stalled worker or stalled work, nothing else.
+ *
+ * "Effectively in progress" is TAS-26's read core: between claim and merge the
+ * default branch still says `todo` — the claim branch is the truth about
+ * in-flight work, and the branch *name* carries the ticket id, so resolving it
+ * costs one fetch of the claim refs, never a general branch scan. The asks a
+ * worker files mid-run live on its claim branch too, so the inbox reads each
+ * claimed ticket's ask files from the branch and unions them with the local
+ * ones by id (asks are one file each, so the union is exact; see claim-io.ts,
+ * which also owns the write side of the same rule). Offline, or with no
+ * origin at all, everything degrades silently to file truth — a board you
+ * can't fetch is still a board.
+ *
+ * Backlog and todo asks are deliberately out of scope: unstarted work owes
+ * nobody anything yet, and claiming is what promotes an ask into the inbox.
+ */
+import type { Store } from "./store.ts";
+import type { Ask, Task } from "./types.ts";
+/** A board handed to buildInbox: the store plus the id the UI navigates with. */
+export interface InboxBoard {
+    /** Path relative to the repo's board scope — "." for the root board. */
+    id: string;
+    store: Store;
+}
+export interface InboxEntry {
+    board: string;
+    prefix: string;
+    /** File truth — a claimed ticket may still read `todo` here; `claim` says why it counts. */
+    task: Task;
+    /** Present when the ticket's claim branch exists on origin. */
+    claim: {
+        branch: string;
+    } | null;
+    /** Open asks only, oldest first; ordinals match `task show`'s (the union's, when claimed). */
+    asks: Ask[];
+}
+export declare function buildInbox(boards: InboxBoard[]): InboxEntry[];
+//# sourceMappingURL=inbox.d.ts.map

package/dist/inbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.d.ts","sourceRoot":"","sources":["../src/inbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAE3C,iFAAiF;AACjF,MAAM,WAAW,UAAU;IACzB,wEAAwE;IACxE,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,KAAK,CAAA;CACb;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,4FAA4F;IAC5F,IAAI,EAAE,IAAI,CAAA;IACV,+DAA+D;IAC/D,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAChC,8FAA8F;IAC9F,IAAI,EAAE,GAAG,EAAE,CAAA;CACZ;AAOD,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE,CA4B7D"}

package/dist/inbox.js

@@ -0,0 +1,56 @@
+/**
+ * `task inbox` — every open ask on effectively-in-progress tickets, repo-wide.
+ * The one list a person checks to unblock work NOW (TAS-38): each entry is a
+ * stalled worker or stalled work, nothing else.
+ *
+ * "Effectively in progress" is TAS-26's read core: between claim and merge the
+ * default branch still says `todo` — the claim branch is the truth about
+ * in-flight work, and the branch *name* carries the ticket id, so resolving it
+ * costs one fetch of the claim refs, never a general branch scan. The asks a
+ * worker files mid-run live on its claim branch too, so the inbox reads each
+ * claimed ticket's ask files from the branch and unions them with the local
+ * ones by id (asks are one file each, so the union is exact; see claim-io.ts,
+ * which also owns the write side of the same rule). Offline, or with no
+ * origin at all, everything degrades silently to file truth — a board you
+ * can't fetch is still a board.
+ *
+ * Backlog and todo asks are deliberately out of scope: unstarted work owes
+ * nobody anything yet, and claiming is what promotes an ask into the inbox.
+ */
+import { claimBranch, claimNamespace } from "./claim.js";
+import { mergedAsks, remoteClaimTips, syncClaimRefs } from "./claim-io.js";
+/** Oldest open ask decides an entry's urgency — and the whole list's order. */
+function oldestAsk(entry) {
+    return entry.asks[0]?.createdAt ?? "";
+}
+export function buildInbox(boards) {
+    const entries = [];
+    for (const { id, store } of boards) {
+        // One bounded ls-remote per board; branches are then fetched only when
+        // their tip moved (syncClaimRefs), so a refetch-happy UI costs one round
+        // trip, not a fetch storm. Null = origin unreachable = file truth only.
+        const tips = remoteClaimTips(store);
+        const claimed = tips ? new Set(tips.keys()) : null;
+        if (tips && tips.size > 0) {
+            try {
+                syncClaimRefs(store, claimNamespace(store.config), tips);
+            }
+            catch {
+                // Namespace validated by remoteClaimTips already; nothing to do.
+            }
+        }
+        // in_progress is in by file truth; todo is in only via a live claim.
+        for (const task of store.list({ statuses: ["in_progress", "todo"] })) {
+            const branch = claimBranch(store.config, task.key);
+            const claim = claimed?.has(branch) ? { branch } : null;
+            if (task.status !== "in_progress" && !claim)
+                continue;
+            const asks = (claim ? mergedAsks(store, branch, task) : task.asks).filter((a) => !a.resolvedAt);
+            if (asks.length === 0)
+                continue;
+            entries.push({ board: id, prefix: store.config.prefix, task, claim, asks });
+        }
+    }
+    return entries.sort((a, b) => oldestAsk(a).localeCompare(oldestAsk(b)));
+}
+//# sourceMappingURL=inbox.js.map

package/dist/inbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.js","sourceRoot":"","sources":["../src/inbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAsB1E,+EAA+E;AAC/E,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,EAAE,CAAA;AACvC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAoB;IAC7C,MAAM,OAAO,GAAiB,EAAE,CAAA;IAChC,KAAK,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,MAAM,EAAE,CAAC;QACnC,uEAAuE;QACvE,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAClD,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,aAAa,CAAC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAA;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;QACH,CAAC;QACD,qEAAqE;QACrE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;YAClD,MAAM,KAAK,GAAG,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;YACtD,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,IAAI,CAAC,KAAK;gBAAE,SAAQ;YACrD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CACvE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CACrB,CAAA;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAQ;YAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7E,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACzE,CAAC"}

package/dist/overview.d.ts

@@ -24,7 +24,16 @@ export interface Overview {
     /** Live board only — the archive is history, not health. */
     statuses: Record<Status, number>;
     open: number;
+    /** Open tickets a person owes something — i.e. carrying open asks. */
     needsHuman: number;
+    /** Open asks across the live board's open tickets. */
+    openAsks: number;
+    /** The ask that's been owed longest — the standup's guilty number. */
+    oldestAsk: {
+        taskId: string;
+        text: string;
+        createdAt: string;
+    } | null;
     /**
      * Open tickets whose claim branch exists on origin right now; null when
      * origin can't be asked (no remote, offline) — unknown, not zero.