@pmelab/gtd 26.0.0 → 27.0.0

package/dist/gtd.bundle.mjs

@@ -4126,7 +4126,7 @@ var DeferredSymbolKey, DeferredTypeId$1, deferredVariance, pending, done$5, init
 			return new SingleShotGen(this.self);
 		}
 	};
-})), blocked, runRequestBlock, EffectTypeId, RevertFlags, EffectPrimitive, EffectPrimitiveFailure, EffectPrimitiveSuccess, isEffect$1, withFiberRuntime$1, acquireUseRelease$3, as$1, asVoid$1, custom, unsafeAsync, asyncInterrupt, async_, catchAllCause$1, catchAll$1, catchIf, originalSymbol, capture, die$3, dieMessage$1, either$1, exit$2, fail$12, failSync, failCause$6, failCauseSync$1, fiberId, fiberIdWith$1, flatMap$6, andThen$1, step, flatten$6, matchCause$1, matchCauseEffect$2, matchEffect$1, forEachSequential, forEachSequentialDiscard, interrupt$4, interruptWith, interruptible$2, intoDeferred$1, map$8, mapBoth$3, mapError$2, onError$1, onExit$1, onInterrupt, orElse$2, orDie$1, orDieWith, succeed$8, suspend$7, sync$2, tap$1, transplant, attemptOrElse, uninterruptible$1, uninterruptibleMask$2, void_$4, updateRuntimeFlags, whenEffect, whileLoop, fromIterator, gen$1, fnUntraced$1, withRuntimeFlags, yieldNow$2, zip$3, zipLeft$1, zipRight$3, zipWith$1, interruptFiber, interruptAsFiber, logLevelAll, logLevelFatal, logLevelError, logLevelWarning, logLevelInfo, logLevelDebug, logLevelTrace, logLevelNone, FiberRefSymbolKey, FiberRefTypeId, fiberRefVariance, fiberRefGet, fiberRefGetWith, fiberRefSet, fiberRefModify, fiberRefLocally, fiberRefLocallyWith, fiberRefUnsafeMake, fiberRefUnsafeMakeHashSet, fiberRefUnsafeMakeReadonlyArray, fiberRefUnsafeMakeContext, fiberRefUnsafeMakePatch, fiberRefUnsafeMakeRuntimeFlags, currentContext$1, currentSchedulingPriority, currentMaxOpsBeforeYield, currentLogAnnotations, currentLogLevel, currentLogSpan, withSchedulingPriority, currentConcurrency, currentRequestBatching, currentUnhandledErrorLogLevel, currentVersionMismatchErrorLogLevel, currentMetricLabels, currentForkScopeOverride, currentInterruptedCause, ScopeTypeId, CloseableScopeTypeId, scopeAddFinalizer, scopeAddFinalizerExit, scopeClose, scopeFork, causeSquash, causeSquashWith, YieldableError$1, makeException, RuntimeExceptionTypeId, RuntimeException, InterruptedExceptionTypeId, InterruptedException, isInterruptedException, IllegalArgumentExceptionTypeId, IllegalArgumentException$1, NoSuchElementExceptionTypeId, NoSuchElementException$2, TimeoutExceptionTypeId, TimeoutException$1, timeoutExceptionFromDuration, UnknownExceptionTypeId, UnknownException, exitIsExit, exitIsFailure, exitIsSuccess, exitAs, exitAsVoid, exitCollectAll, exitDie$1, exitFail, exitFailCause$1, exitInterrupt$1, exitMap, exitMapBoth, exitMatch, exitMatchEffect, exitSucceed$1, exitVoid$1, exitZip, exitZipRight, exitZipWith, exitCollectAllInternal, deferredUnsafeMake, deferredMake, deferredMakeAs, deferredAwait, deferredComplete, deferredCompleteWith, deferredDone, deferredFail, deferredFailCause, deferredInterrupt, deferredInterruptWith, deferredIsDone, deferredSucceed, deferredUnsafeDone, deferredInterruptJoiner, constContext, context$1, contextWithEffect, provideContext$1, provideSomeContext, mapInputContext, currentSpanFromFiber;
+})), blocked, runRequestBlock, EffectTypeId, RevertFlags, EffectPrimitive, EffectPrimitiveFailure, EffectPrimitiveSuccess, isEffect$1, withFiberRuntime$1, acquireUseRelease$3, as$1, asVoid$1, custom, unsafeAsync, asyncInterrupt, async_, catchAllCause$1, catchAll$1, catchIf$1, originalSymbol, capture, die$3, dieMessage$1, either$1, exit$2, fail$12, failSync, failCause$6, failCauseSync$1, fiberId, fiberIdWith$1, flatMap$6, andThen$1, step, flatten$6, matchCause$1, matchCauseEffect$2, matchEffect$1, forEachSequential, forEachSequentialDiscard, interrupt$4, interruptWith, interruptible$2, intoDeferred$1, map$8, mapBoth$3, mapError$2, onError$1, onExit$1, onInterrupt, orElse$2, orDie$1, orDieWith, succeed$8, suspend$7, sync$2, tap$1, transplant, attemptOrElse, uninterruptible$1, uninterruptibleMask$2, void_$4, updateRuntimeFlags, whenEffect, whileLoop, fromIterator, gen$1, fnUntraced$1, withRuntimeFlags, yieldNow$2, zip$3, zipLeft$1, zipRight$3, zipWith$1, interruptFiber, interruptAsFiber, logLevelAll, logLevelFatal, logLevelError, logLevelWarning, logLevelInfo, logLevelDebug, logLevelTrace, logLevelNone, FiberRefSymbolKey, FiberRefTypeId, fiberRefVariance, fiberRefGet, fiberRefGetWith, fiberRefSet, fiberRefModify, fiberRefLocally, fiberRefLocallyWith, fiberRefUnsafeMake, fiberRefUnsafeMakeHashSet, fiberRefUnsafeMakeReadonlyArray, fiberRefUnsafeMakeContext, fiberRefUnsafeMakePatch, fiberRefUnsafeMakeRuntimeFlags, currentContext$1, currentSchedulingPriority, currentMaxOpsBeforeYield, currentLogAnnotations, currentLogLevel, currentLogSpan, withSchedulingPriority, currentConcurrency, currentRequestBatching, currentUnhandledErrorLogLevel, currentVersionMismatchErrorLogLevel, currentMetricLabels, currentForkScopeOverride, currentInterruptedCause, ScopeTypeId, CloseableScopeTypeId, scopeAddFinalizer, scopeAddFinalizerExit, scopeClose, scopeFork, causeSquash, causeSquashWith, YieldableError$1, makeException, RuntimeExceptionTypeId, RuntimeException, InterruptedExceptionTypeId, InterruptedException, isInterruptedException, IllegalArgumentExceptionTypeId, IllegalArgumentException$1, NoSuchElementExceptionTypeId, NoSuchElementException$2, TimeoutExceptionTypeId, TimeoutException$1, timeoutExceptionFromDuration, UnknownExceptionTypeId, UnknownException, exitIsExit, exitIsFailure, exitIsSuccess, exitAs, exitAsVoid, exitCollectAll, exitDie$1, exitFail, exitFailCause$1, exitInterrupt$1, exitMap, exitMapBoth, exitMatch, exitMatchEffect, exitSucceed$1, exitVoid$1, exitZip, exitZipRight, exitZipWith, exitCollectAllInternal, deferredUnsafeMake, deferredMake, deferredMakeAs, deferredAwait, deferredComplete, deferredCompleteWith, deferredDone, deferredFail, deferredFailCause, deferredInterrupt, deferredInterruptWith, deferredIsDone, deferredSucceed, deferredUnsafeDone, deferredInterruptJoiner, constContext, context$1, contextWithEffect, provideContext$1, provideSomeContext, mapInputContext, currentSpanFromFiber;
 var init_core = __esmMin((() => {
 	init_Array();
 	init_Chunk();
@@ -4382,7 +4382,7 @@ var init_core = __esmMin((() => {
 		onFailure: f,
 		onSuccess: succeed$8
 	}));
-	catchIf = /*#__PURE__*/ dual(3, (self, predicate, f) => catchAllCause$1(self, (cause) => {
+	catchIf$1 = /*#__PURE__*/ dual(3, (self, predicate, f) => catchAllCause$1(self, (cause) => {
 		const either = failureOrCause$1(cause);
 		switch (either._tag) {
 			case "Left": return predicate(either.left) ? f(either.left) : failCause$6(cause);
@@ -6871,7 +6871,7 @@ var init_core_effect = __esmMin((() => {
 			for (let i = 0; i < args.length - 1; i++) if (args[i] === tag) return true;
 			return false;
 		};
-		return catchIf(self, predicate, f);
+		return catchIf$1(self, predicate, f);
 	});
 	diffFiberRefs = (self) => summarized(self, fiberRefs, diff$2);
 	bind = /*#__PURE__*/ bind$1(map$8, flatMap$6);
@@ -11435,7 +11435,7 @@ var init_MutableQueue = __esmMin((() => {
 }));
 //#endregion
 //#region node_modules/effect/dist/esm/Effect.js
-var isEffect, all$1, forEach$2, async, withFiberRuntime, fail$7, failCause$2, die, dieMessage, gen, promise, succeed$3, suspend$5, sync$1, _void, catchAll, catchAllCause, catchTag, ignore, sandbox, retry, try_, tryMap, tryPromise, interrupt, interruptible, uninterruptible, uninterruptibleMask, as, asVoid, map$4, mapBoth$1, mapError$1, negate, acquireRelease, acquireUseRelease$2, addFinalizer, ensuring$2, onError, scope$1, scopeWith, scopedWith$1, scoped$3, fiberIdWith, forkDaemon, forkIn, forkScoped, timeout, provide$1, provideService, serviceOption, either, exit$1, intoDeferred, when, flatMap$4, andThen, flatten$5, race, raceWith, tap, tapErrorCause, repeat, match$2, matchCause, matchCauseEffect, matchEffect, logWarning, logError, annotateLogs, orDie, orElse$1, orElseSucceed, runtime, unsafeMakeSemaphore, makeSemaphore, unsafeMakeLatch, runFork$1, runPromise, runSync, zip$1, zipLeft, zipRight$1, zipWith, fnUntraced;
+var isEffect, all$1, forEach$2, async, withFiberRuntime, fail$7, failCause$2, die, dieMessage, gen, promise, succeed$3, suspend$5, sync$1, _void, catchAll, catchAllCause, catchIf, catchTag, ignore, sandbox, retry, try_, tryMap, tryPromise, interrupt, interruptible, uninterruptible, uninterruptibleMask, as, asVoid, map$4, mapBoth$1, mapError$1, negate, acquireRelease, acquireUseRelease$2, addFinalizer, ensuring$2, onError, scope$1, scopeWith, scopedWith$1, scoped$3, fiberIdWith, forkDaemon, forkIn, forkScoped, timeout, provide$1, provideService, serviceOption, either, exit$1, intoDeferred, when, flatMap$4, andThen, flatten$5, race, raceWith, tap, tapErrorCause, repeat, match$2, matchCause, matchCauseEffect, matchEffect, logWarning, logError, annotateLogs, orDie, orElse$1, orElseSucceed, runtime, unsafeMakeSemaphore, makeSemaphore, unsafeMakeLatch, runFork$1, runPromise, runSync, zip$1, zipLeft, zipRight$1, zipWith, fnUntraced;
 var init_Effect = __esmMin((() => {
 	init_core_effect();
 	init_core();
@@ -11461,6 +11461,7 @@ var init_Effect = __esmMin((() => {
 	_void = void_$4;
 	catchAll = catchAll$1;
 	catchAllCause = catchAllCause$1;
+	catchIf = catchIf$1;
 	catchTag = catchTag$1;
 	ignore = ignore$1;
 	sandbox = sandbox$1;
@@ -20267,6 +20268,7 @@ const makeGitImpl = (executor, root) => {
 		}))),
 		hasCommits: () => exec("git", "rev-parse", "--verify", "HEAD").pipe(map$4(() => true), catchAll(() => succeed$3(false))),
 		readFileAtRef: (ref, path) => exec("git", "show", `${ref}:${path}`),
+		diffPaths: (base, tip) => exec("git", "diff", "--name-only", "-z", "--no-renames", "--no-relative", "--ignore-submodules=none", "--end-of-options", base, tip, "--").pipe(map$4(splitNul)),
 		changedPaths: (base) => gen(function* () {
 			const ref = base ?? "HEAD";
 			const nameStatusOut = yield* exec("git", "diff", "--name-status", "-z", ref).pipe(catchAll(() => succeed$3("")));
@@ -20943,6 +20945,8 @@ const HISTORY_REF = "refs/worktree/gtd/history";
 /** One ref per finished process, kept past the branch's deletion; distinct from the per-worktree `HISTORY_REF`. */
 const PROCESS_HISTORY_PREFIX = "refs/gtd/history/";
 const processHistoryRef = (hash) => `${PROCESS_HISTORY_PREFIX}${hash}`;
+/** Directory of a step's turns set aside by `keep: true`, each at `<this>/<kept hash>`; own namespace, so history list/show/fetch never see it. */
+const keptRef = (entry, step) => `refs/gtd/kept/${entry}/${step}`;
 const readRetainedHistory = (git) => git.readRefOption(HISTORY_REF);
 /**
 * Whether resetting to `tipHash` is safe: HEAD must be an ancestor of
@@ -21715,6 +21719,19 @@ const changesSince = (hash, pattern) => {
 	const all = context.changesSince(hash);
 	return toChanges(pattern === void 0 ? all : all.filter((c) => context.matches(c.path, pattern)));
 };
+/**
+* The latest kept tip of step `name` (scoped from here, same as `agent()`) in
+* this episode, or `undefined` when none.
+*/
+const kept = (name) => {
+	const context = ctx();
+	if (typeof context.kept !== "function") throw new Error("gtd: kept() needs a newer gtd — upgrade the gtd that runs it");
+	const tip = context.kept(name);
+	return tip === void 0 ? void 0 : {
+		hash: tip.hash,
+		changes: toChanges(tip.changes)
+	};
+};
 /** The commit the process stands on at this point of the flow. */
 const head = () => ctx().head();
 /** The process's diff base: the commit before it began, or the base `gtd --workflow` fixed. */
@@ -22108,6 +22125,7 @@ var flows_exports = /* @__PURE__ */ __exportAll({
 	installContext: () => installContext,
 	isFactoryWorkflow: () => isFactoryWorkflow,
 	judge: () => judge,
+	kept: () => kept,
 	moveScript: () => moveScript,
 	numeric: () => numeric,
 	openQuestions: () => openQuestions,
@@ -37470,7 +37488,7 @@ var init_Glob = __esmMin((() => {
 				i += 2;
 			}
 		}
-		return new RegExp(`${pattern}$`);
+		return new RegExp(`${pattern}$`, "s");
 	};
 	globMatches = (path, glob) => compile(glob).test(path);
 }));
@@ -37491,8 +37509,24 @@ var init_wire = __esmMin((() => {
 	init_Glob();
 }));
 //#endregion
-//#region src/replay/Tree.ts
+//#region src/replay/RefName.ts
 init_wire();
+const FORBIDDEN = /[\u0000- \u007f~^:?*[\\]/;
+/** Why `name` cannot be (part of) a git ref name, or `undefined` when it can. */
+const refNameFault = (name) => {
+	if (name === "") return "it is empty";
+	if (FORBIDDEN.test(name)) return "it contains a space, control character or one of ~^:?*[\\";
+	if (name.includes("..")) return "it contains \"..\"";
+	if (name.includes("@{")) return "it contains \"@{\"";
+	if (name.endsWith(".")) return "it ends with \".\"";
+	for (const part of name.split("/")) {
+		if (part === "") return "it has an empty \"/\" component";
+		if (part.startsWith(".")) return "a component starts with \".\"";
+		if (part.endsWith(".lock")) return "a component ends with \".lock\"";
+	}
+};
+//#endregion
+//#region src/replay/Tree.ts
 const treeFromRecord = (files) => ({
 	paths: () => Object.keys(files).sort(),
 	read: (path) => Object.hasOwn(files, path) ? files[path] : void 0
@@ -37586,6 +37620,7 @@ const decodePath = (raw) => {
 	return typeof path === "string" && path !== "" && !CONTROL_CHARACTER$1.test(path) ? path : void 0;
 };
 const FORMAT_RE = /^[1-9][0-9]*$/;
+const HASH_RE = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/;
 const TRAILER_READERS = {
 	"Gtd-Step": (value, into) => {
 		into.step ??= parseStepId(value);
@@ -37615,6 +37650,9 @@ const TRAILER_READERS = {
 	"Gtd-Version": (value, into) => {
 		if (value !== "") into.version ??= value;
 	},
+	"Gtd-Kept": (value, into) => {
+		if (HASH_RE.test(value)) into.kept ??= value;
+	},
 	"Gtd-Format": (value, into) => {
 		if (FORMAT_RE.test(value)) into.format ??= Number(value);
 	},
@@ -37635,6 +37673,7 @@ const parseCommitMessage = (message) => {
 		reviewBase: void 0,
 		branch: void 0,
 		version: void 0,
+		kept: void 0,
 		judge: [],
 		vars: {},
 		config: {},
@@ -37749,7 +37788,8 @@ const KNOWN_OPTIONS = {
 		...STEERING_OPTIONS,
 		"model",
 		"system",
-		"allowEmpty"
+		"allowEmpty",
+		"keep"
 	]),
 	human: /* @__PURE__ */ new Set([
 		...STEERING_OPTIONS,
@@ -37781,6 +37821,7 @@ const replay = async (input) => {
 	const scopeCallIds = [];
 	let scopeCallCount = 0;
 	const trace = [];
+	const keptTips = /* @__PURE__ */ new Map();
 	let landed;
 	let outcome;
 	let signal;
@@ -37940,6 +37981,12 @@ const replay = async (input) => {
 		}
 		cursor++;
 		advance(commit);
+		if (commit.parsed.kept !== void 0) if (commit.kept === void 0) keptTips.delete(step.name);
+		else keptTips.set(step.name, {
+			hash: commit.kept.hash,
+			before: commit.tree,
+			after: commit.kept.tree
+		});
 		const to = commit.parsed.parsed?.to;
 		if (to !== void 0) expectedNext = {
 			name: to,
@@ -37947,6 +37994,21 @@ const replay = async (input) => {
 		};
 		return replyFor(step.request, commit.parsed.judge);
 	};
+	const landPending = (step, pending) => {
+		pendingUsed = true;
+		landed = step;
+		const keeping = step.request.kind === "agent" && step.request.options.keep === true;
+		if (keeping) keptTips.set(step.name, {
+			hash: "",
+			before: position.tree,
+			after: pending.tree
+		});
+		advance({
+			hash: "",
+			tree: keeping ? position.tree : pending.tree
+		});
+		return replyFor(step.request, pending.verdicts ?? []);
+	};
 	const answer = (step) => {
 		while (cursor < commits.length && isAttemptAt(commits[cursor], step.name)) cursor++;
 		const commit = commits[cursor];
@@ -37957,17 +38019,18 @@ const replay = async (input) => {
 			trace,
 			landed
 		});
-		pendingUsed = true;
-		landed = step;
-		advance({
-			hash: "",
-			tree: input.pending.tree
-		});
-		return replyFor(step.request, input.pending.verdicts ?? []);
+		return landPending(step, input.pending);
 	};
 	const requestFault = (request) => {
 		if (request.kind === "run" && typeof request.body !== "string") return `gtd: step "${scoped(request.name)}": a run() body is a shell script string — decide in flow code, then render the script (see checkScript and friends)`;
-		return request.kind === "agent" ? scopeAccessFault() : void 0;
+		if (request.kind !== "agent") return void 0;
+		const name = scoped(request.name);
+		if (request.options.keep === true) {
+			if (request.options.allowEmpty === true) return `gtd: step "${name}": keep: true cannot be combined with allowEmpty — a turn that changes nothing has nothing to keep`;
+			const refFault = name.includes("/") ? "it contains \"/\"" : refNameFault(name);
+			if (refFault !== void 0) return `gtd: step "${name}": keep: true files the turn under a git ref named after the step, but ${refFault}`;
+		}
+		return scopeAccessFault();
 	};
 	const handleStep = async (request) => {
 		if (outcome !== void 0) throw new Stop();
@@ -38050,6 +38113,13 @@ const replay = async (input) => {
 				faults: findings.filter((f) => f.message.startsWith(`Code thread at ${c.path}:${t.line + 1}: `)).map((f) => f.message)
 			}));
 		}),
+		kept: (name) => {
+			const tip = keptTips.get(scoped(name));
+			return tip === void 0 ? void 0 : {
+				hash: tip.hash,
+				changes: changesBetween(tip.before, tip.after)
+			};
+		},
 		vars: input.vars,
 		env: input.env,
 		start: () => input.start,
@@ -39019,7 +39089,11 @@ const planStep = (snapshot, opts = {}) => {
 			...uncheckStep(snapshot),
 			{
 				kind: "gitWrite",
-				write: {
+				write: landing.keepTurn !== void 0 ? {
+					kind: "keepTurn",
+					ref: landing.keepTurn,
+					message
+				} : {
 					kind: "commitAll",
 					message
 				}
@@ -39137,6 +39211,11 @@ const resolveBase = (commandLabel, value) => gen(function* () {
 	return mergeBase.value;
 });
 //#endregion
+//#region src/step/strayPaths.ts
+init_wire();
+/** Globs use the `access.write` dialect (`globMatches`). */
+const strayPaths = (touched, allow) => touched.filter((path) => !allow.some((glob) => globMatches(path, glob))).sort();
+//#endregion
 //#region src/edge/Edge.ts
 init_esm();
 init_steering();
@@ -39499,6 +39578,7 @@ const promptDef = (common, request, skills, access) => ({
 	...optional$1("model", request.options.model),
 	...optional$1("system", request.options.system),
 	...optional$1("allowEmpty", request.options.allowEmpty),
+	...optional$1("keep", request.options.keep),
 	...optional$1("skills", skills),
 	...optional$1("access", access)
 });
@@ -39613,11 +39693,21 @@ const setupFor = (config, run, workspace, host, startOverrides = {}) => gen(func
 		hash: run.episode.base,
 		tree: commitTree(workspace, run.episode.base)
 	};
-	const episode = run.episode.commits.map((c) => ({
-		hash: c.hash,
-		message: c.message,
-		tree: commitTree(workspace, c.hash)
-	}));
+	const git = yield* GitService;
+	const episode = [];
+	for (const c of run.episode.commits) {
+		const tip = parseCommitMessage(c.message).kept;
+		const exists = tip !== void 0 && isSome(yield* git.readRefOption(`${tip}^{commit}`));
+		episode.push({
+			hash: c.hash,
+			message: c.message,
+			tree: commitTree(workspace, c.hash),
+			...exists ? { kept: {
+				hash: tip,
+				tree: commitTree(workspace, tip)
+			} } : {}
+		});
+	}
 	let pendingMemo;
 	return {
 		resolved,
@@ -39793,6 +39883,7 @@ const closingTrailers = (branch) => ({
 	...isSome(branch) ? { branch: branch.value } : {}
 });
 const isSettledNoop = (rest, to) => rest.changes.length === 0 && rest.stepDef.kind === "script" && to === rest.state;
+const keptTurn = (rest) => rest.stepDef.keep === true && rest.changes.length > 0 ? { keepTurn: keptRef(rest.run.startHash, rest.state) } : {};
 const landingTo = (rest, to, branch) => {
 	if (isSettledNoop(rest, to)) return {
 		kind: "noop",
@@ -39817,7 +39908,8 @@ const landingTo = (rest, to, branch) => {
 			} : {},
 			...finishes ? closingTrailers(branch) : {}
 		},
-		...finishes ? { keepHistory: processHistoryRef(rest.run.startHash) } : {}
+		...finishes ? { keepHistory: processHistoryRef(rest.run.startHash) } : {},
+		...keptTurn(rest)
 	};
 };
 /**
@@ -39954,7 +40046,7 @@ const commitAllowEmpty = (message) => {
 	return [
 		`if ! out=$(git commit --allow-empty -m ${m} 2>&1); then`,
 		`  case "$out" in`,
-		`    *"empty git commit"*) git commit --allow-empty --no-verify -m ${m} ;;`,
+		`    *"empty git commit"*) git commit --allow-empty --no-verify -m ${m} || exit 1 ;;`,
 		`    *) printf '%s\\n' "$out" >&2; exit 1 ;;`,
 		`  esac`,
 		`fi`
@@ -39964,6 +40056,36 @@ const commitAllowEmpty = (message) => {
 const commitAll = (message) => `git add -A || exit 1\n${commitAllowEmpty(message)}`;
 const mixedResetTo = (ref) => `git reset --mixed ${shellQuote$1(ref)}`;
 const hardResetTo = (ref) => `git reset --hard ${shellQuote$1(ref)}`;
+/**
+* POSIX sh (runs under dash). The marker is a `commit-tree` over HEAD's own
+* tree, so no hook runs on it and its tree is the pre-turn tree by
+* construction; `commit-tree` ignores `commit.gpgSign`, hence the explicit
+* `-S`, read (and failing closed) before any object or ref is written; the
+* index is already staged by then, so an early exit leaves the turn staged.
+* The kept ref is deleted only after `reset -q` succeeds: it is then the
+* turn's only handle.
+* The branch moves before the final hard reset, so if that reset fails the
+* marker has landed and the turn is still in the working tree (kept ref
+* present); every other failure leaves the branch untouched.
+*/
+const keepTurn = (refPrefix, message) => {
+	const keptRef = `${shellQuote$1(`${refPrefix}/`)}"$gtd_kept"`;
+	return [
+		`git add -A || exit 1`,
+		`gtd_sign_cfg=$(git config --type=bool --default=false commit.gpgSign) || exit 1`,
+		`if [ "$gtd_sign_cfg" = true ]; then gtd_sign=-S; else gtd_sign=--no-gpg-sign; fi`,
+		`gtd_head=$(git rev-parse --verify HEAD) || exit 1`,
+		`gtd_tree=$(git write-tree) || exit 1`,
+		`gtd_kept=$(git commit-tree "$gtd_tree" -p "$gtd_head" -m ${shellQuote$1(message)}) || exit 1`,
+		`git update-ref ${keptRef} "$gtd_kept" || exit 1`,
+		`gtd_marker=$(printf '%s\\nGtd-Kept: %s' ${shellQuote$1(message)} "$gtd_kept")`,
+		`if ! gtd_tip=$(git commit-tree "$gtd_sign" "$gtd_head^{tree}" -p "$gtd_head" -m "$gtd_marker") || ! git update-ref HEAD "$gtd_tip" "$gtd_head"; then`,
+		`  git reset -q && git update-ref -d ${keptRef}`,
+		`  exit 1`,
+		`fi`,
+		`git reset --hard HEAD`
+	].join("\n");
+};
 const updateRef = (ref, hash) => `git update-ref ${shellQuote$1(ref)} ${shellQuote$1(hash)}`;
 /** `git update-ref -d <ref>` — idempotent: deleting a missing ref is already a no-op in real git. */
 const deleteRef = (ref) => `git update-ref -d ${shellQuote$1(ref)}`;
@@ -39996,6 +40118,7 @@ const renderGitWrite = (write) => {
 	switch (write.kind) {
 		case "commitAll": return commitAll(write.message);
 		case "updateRef": return updateRef(write.ref, write.target);
+		case "keepTurn": return keepTurn(write.ref, write.message);
 	}
 };
 /**
@@ -40386,6 +40509,26 @@ const writeSelection = (out, fields, path) => gen(function* () {
 	else if (selection.kind === "unknown") return yield* fail$7(new SelectorUsageError(`gtd: unknown --json selector "${selection.path}" — see \`gtd --help\``));
 });
 //#endregion
+//#region src/cli/Strays.ts
+init_esm();
+init_wire();
+const resolveSide = (git, side) => git.resolveRef(`${side}^{commit}`).pipe(mapError$1(() => new GtdError(`gtd strays: unknown revision '${side}'`)));
+/** stdout carries the array alone; the summary is ungated stderr so a quiet run still explains its exit code, the per-path lines are narration. */
+const runStraysCommand = (command, json, out) => gen(function* () {
+	const git = yield* GitService;
+	const narrator = yield* Narrator;
+	const base = yield* resolveSide(git, command.base);
+	const tip = yield* resolveSide(git, command.tip);
+	const touched = yield* git.diffPaths(base, tip);
+	const strays = strayPaths(touched, command.globs);
+	const total = touched.length;
+	if (json.kind === "select") yield* writeSelection(out, strays, json.path).pipe(catchIf((error) => error instanceof SelectorUsageError && /^\d+$/.test(json.path), () => _void));
+	else out.write(`${JSON.stringify(strays)}\n`);
+	for (const path of strays) yield* narrator.narrate(`stray: ${JSON.stringify(path)}`);
+	yield* narrator.warn(strays.length === 0 ? `gtd strays: no strays — ${total} touched files, all inside the allowlist` : `gtd strays: ${strays.length} of ${total} touched files outside the allowlist`);
+	return strays.length === 0 ? 0 : 10;
+});
+//#endregion
 //#region src/cli/History.ts
 init_esm();
 /** Newest tip first. */
@@ -41046,7 +41189,8 @@ const needsOf = (kind) => {
 		case "lsp":
 		case "install":
 		case "loop":
-		case "judgeRun": return "none";
+		case "judgeRun":
+		case "strays": return "none";
 		case "check":
 		case "uncheck": return "fs";
 		default: return "state";
@@ -41055,10 +41199,13 @@ const needsOf = (kind) => {
 /**
 * Dispatches to the named `run*Command` handler for every `Command.kind` —
 * the counterpart of `Cli.ts`'s `parseArgv`, which has already validated
-* every field a handler receives. A command choosing its own exit code is
-* unrepresentable: every branch returns `Effect<void>`, and `Cli.ts`'s
-* `runCli` supplies `EXIT_OK` once, after this Effect succeeds.
+* every field a handler receives. Only `strays` chooses its exit code; every
+* other branch returns `Effect<void>` and resolves to `EXIT_OK`.
 */
+const dispatchCommand = (command, json, out) => {
+	if (command.kind === "strays") return runStraysCommand(command, json, out);
+	return as(dispatchVoidCommand(command, json, out), 0);
+};
 const dispatchVoidCommand = (command, json, out) => {
 	switch (command.kind) {
 		case "lsp": return runLspCommand();
@@ -41098,7 +41245,7 @@ const dispatchVoidCommand = (command, json, out) => {
 * so a refusal writes nothing and emits no script by construction.
 */
 const runCommand = (command, json, out) => {
-	const dispatch = dispatchVoidCommand(command, json, out);
+	const dispatch = dispatchCommand(command, json, out);
 	if (needsOf(command.kind) !== "state") return dispatch;
 	return gen(function* () {
 		const git = yield* GitService;
@@ -41111,7 +41258,7 @@ const runCommand = (command, json, out) => {
 			warn: () => _void
 		}));
 		for (const warning of config.warnings) yield* narrator.warn(`gtd: warning: ${formatDiagnostic(warning)}`);
-		yield* dispatch;
+		return yield* dispatch;
 	});
 };
 //#endregion
@@ -41128,13 +41275,13 @@ const FLAGS = [
 		name: "--json",
 		arity: "optional",
 		repeatable: false,
-		scope: (kind) => kind === "next" || kind === "land" || kind === "judge" || kind === "judgeAnswer" || kind === "doors" || kind === "historyList" || kind === "historyShow",
+		scope: (kind) => kind === "next" || kind === "land" || kind === "judge" || kind === "judgeAnswer" || kind === "doors" || kind === "historyList" || kind === "historyShow" || kind === "strays",
 		decode: ([raw]) => right(raw ?? ""),
-		scopeError: "gtd: --json is only valid for `gtd next`/`gtd land`/`gtd judge`/`gtd judge answer`/`gtd doors`/`gtd history list`/`gtd history show` — every other command prints plain text; see `gtd install` for the driver protocol briefing",
+		scopeError: "gtd: --json is only valid for `gtd next`/`gtd land`/`gtd judge`/`gtd judge answer`/`gtd doors`/`gtd history list`/`gtd history show`/`gtd strays` — every other command prints plain text; see `gtd install` for the driver protocol briefing",
 		valueHint: "<path>",
 		help: [
 			"(gtd next/gtd land/gtd judge/gtd judge answer/gtd doors/gtd history",
-			"list/gtd history show only) output structured JSON. Bare --json prints the whole document;",
+			"list/gtd history show/gtd strays only) output structured JSON. Bare --json prints the whole document;",
 			"--json=<path> (a dotted key path into that document, e.g.",
 			"kind, content, session.id) prints just that value: a",
 			"scalar raw and unquoted, a boolean as true/false, a list",
@@ -41643,6 +41790,28 @@ const COMMAND_ROWS = [
 			"every question, with nothing on stdout"
 		]
 	},
+	{
+		token: "strays",
+		kind: "strays",
+		arity: {
+			name: "range",
+			variadic: "glob"
+		},
+		details: [
+			"List the files <range> (<base>..<tip>, an empty side is HEAD)",
+			"touched in its committed net diff that match none of the",
+			"globs. Anchored at the repo root: * stays within one path",
+			"segment, ** crosses them, everything else is literal — quote",
+			"globs in the shell. stdout: a sorted JSON array, [] when",
+			"clean; stderr: a summary, plus one stray: line per path with",
+			"--verbose. --json=<n> picks one entry, nothing past the end;",
+			"a symlink is a path like any other, never followed; a",
+			"submodule counts as its path, whatever diff.ignoreSubmodules",
+			"or .gitmodules ignore say. Runs in any git repository, no",
+			"process needed. Exits 10 when",
+			"strays were found, 1 on an unknown revision, 2 on a bad range"
+		]
+	},
 	{
 		token: "history list",
 		kind: "historyList",
@@ -41985,6 +42154,22 @@ const parseArgv = (argv) => {
 		json,
 		verbose
 	};
+	if (kind === "strays") {
+		const [range, ...globs] = restPositionals;
+		const at = range.indexOf("..");
+		if (at < 0 || range.includes("...") || range.indexOf("..", at + 1) >= 0) return usagePlan(`gtd strays: <range> must be <base>..<tip> (an empty side is HEAD) — got '${range}'`, jsonSeen);
+		return {
+			kind: "command",
+			command: {
+				kind: "strays",
+				base: range.slice(0, at) || "HEAD",
+				tip: range.slice(at + 2) || "HEAD",
+				globs
+			},
+			json,
+			verbose
+		};
+	}
 	if (kind === "uncheck") return {
 		kind: "command",
 		command: {
@@ -42076,9 +42261,9 @@ const runCli = (argv, io) => {
 	return flatMap$4(Host, ({ env }) => try_({
 		try: () => resolveFlags(env, io.flags),
 		catch: (e) => new GtdError(e.message)
-	})).pipe(flatMap$4(() => runCommand(plan.command, plan.json, out)), map$4(() => {
+	})).pipe(flatMap$4(() => runCommand(plan.command, plan.json, out)), map$4((code) => {
 		out.flush();
-		io.exit(0);
+		io.exit(code);
 	}), provide$1(io.layers(plan.verbose)), sandbox, catchAll((cause) => isInterruptedOnly(cause) ? failCause$2(cause) : report(io, plan.json.kind !== "off")(cause)));
 };
 //#endregion