@schnick371/devsteps-shared 1.1.0-next.4 → 2.0.0-next.1

package/dist/core/closeout-rescue.js

@@ -0,0 +1,302 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Archive tags and rescue refs for the session close-out (EPIC-061). The rescue changes no
+ * worktree file, no worktree index and no branch: it builds a commit from a temporary index file
+ * and stores it under `refs/heads/rescue/<date>/<name>`, and it tags branch tips under
+ * `archive/<date>/<branch>`. Besides the new refs and tags its only write is the blobs and trees
+ * that `git add` and `commit-tree` put into the object store. Paths that match a secret pattern
+ * never enter the rescue commit.
+ */
+import { existsSync, lstatSync, mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { git, parseStatusZ, tryGit } from './closeout-git.js';
+import { GIT_TIMEOUT_MS, refSafe, withFreeName } from './closeout-rescue-refs.js';
+import { matchesSecret } from './closeout-secrets.js';
+const ADD_CHUNK = 200;
+/** Stays below the Windows command-line limit of 32,767 characters. */
+const ADD_MAX_CHARS = 24_000;
+const FALLBACK_IDENTITY = { name: 'DevSteps close-out', email: 'closeout@devsteps.invalid' };
+export function createArchiveTags(repoPath, date, branches) {
+    const tags = [];
+    for (const branch of branches) {
+        const base = `archive/${date}/${refSafe(branch.name)}`;
+        try {
+            tags.push(withFreeName(repoPath, 'refs/tags', base, (name, existing) => {
+                if (existing === branch.head)
+                    return { name, sha: branch.head, created: false };
+                if (existing !== null)
+                    return undefined;
+                // A lightweight tag through update-ref never signs or opens an editor; the empty old
+                // value makes git refuse a tag that appeared in the meantime.
+                git(['update-ref', `refs/tags/${name}`, branch.head, ''], {
+                    cwd: repoPath,
+                    timeoutMs: GIT_TIMEOUT_MS,
+                });
+                return { name, sha: branch.head, created: true };
+            }));
+        }
+        catch (error) {
+            // One failing tag must not stop the other tags or the worktree rescue.
+            const message = error instanceof Error ? error.message : String(error);
+            tags.push({ name: base, sha: branch.head, created: false, error: message });
+        }
+    }
+    return tags;
+}
+/** Untracked directory roots hold their files one by one; a nested repository stays whole. */
+function expandUntracked(worktree, root, patterns) {
+    const listed = git(['ls-files', '-z', '--others', '--exclude-standard', '--', root], {
+        cwd: worktree,
+        env: { GIT_LITERAL_PATHSPECS: '1' },
+        timeoutMs: GIT_TIMEOUT_MS,
+    })
+        .split('\0')
+        .filter((entry) => entry !== '');
+    const skipped = [];
+    const files = [];
+    if (existsSync(join(worktree, root, '.git'))) {
+        return { files, skipped: [{ worktree, path: root, reason: 'nested-repository' }] };
+    }
+    if (listed.some((entry) => matchesSecret(entry, patterns))) {
+        return { files, skipped: [{ worktree, path: root, reason: 'secret-tree' }] };
+    }
+    for (const entry of listed) {
+        // `ls-files --others` shows a nested repository as one entry ending in a slash.
+        if (entry.endsWith('/'))
+            skipped.push({ worktree, path: entry, reason: 'nested-repository' });
+        else
+            files.push(entry);
+    }
+    return { files, skipped };
+}
+/** The paths that go into the rescue commit, and the ones kept out. */
+function selectPaths(worktree, entries, patterns) {
+    const paths = [];
+    const staged = [];
+    const removed = [];
+    const skipped = [];
+    for (const entry of entries) {
+        if (entry.code === '??' && entry.path.endsWith('/')) {
+            const expanded = expandUntracked(worktree, entry.path.replace(/\/+$/, ''), patterns);
+            paths.push(...expanded.files);
+            skipped.push(...expanded.skipped);
+        }
+        else if (matchesSecret(entry.path, patterns) ||
+            (entry.from !== undefined && matchesSecret(entry.from, patterns))) {
+            // A rename or copy out of a secret file carries the secret content under the new name.
+            skipped.push({ worktree, path: entry.path, reason: 'secret' });
+        }
+        else if (entry.code === '??' && existsSync(join(worktree, entry.path, '.git'))) {
+            skipped.push({ worktree, path: entry.path, reason: 'nested-repository' });
+        }
+        else if (lstatOk(join(worktree, entry.path))) {
+            paths.push(entry.path);
+            if (entry.from)
+                paths.push(entry.from);
+        }
+        else if ('AMRCU'.includes(entry.code[0] ?? ' ')) {
+            // Staged content whose worktree file is gone (AD, MD, UD ...) lives only in the index.
+            staged.push(entry.path);
+            if (entry.from)
+                removed.push(entry.from);
+        }
+    }
+    return { paths: [...new Set(paths)], staged, removed: [...new Set(removed)], skipped };
+}
+/** Splits paths into groups that stay under the count and the character limit. */
+export function chunkPaths(paths, baseChars, maxChars = ADD_MAX_CHARS, maxCount = ADD_CHUNK) {
+    const chunks = [];
+    let current = [];
+    let size = baseChars;
+    for (const path of paths) {
+        const cost = path.length + 1;
+        if (current.length > 0 && (current.length >= maxCount || size + cost > maxChars)) {
+            chunks.push(current);
+            current = [];
+            size = baseChars;
+        }
+        current.push(path);
+        size += cost;
+    }
+    if (current.length > 0)
+        chunks.push(current);
+    return chunks;
+}
+function lstatOk(path) {
+    try {
+        lstatSync(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Adds the paths to the temporary index in chunks. When a chunk fails, its paths go in one by one
+ * so a file deleted since the selection is skipped as vanished instead of failing the rescue.
+ */
+export function addPaths(worktree, paths, run) {
+    const skipped = [];
+    for (const chunk of chunkPaths(paths, 'git add -A --'.length)) {
+        try {
+            git(['add', '-A', '--', ...chunk], run);
+        }
+        catch (chunkError) {
+            for (const path of chunk) {
+                try {
+                    git(['add', '-A', '--', path], run);
+                }
+                catch (error) {
+                    if (lstatOk(join(worktree, path)))
+                        throw error instanceof Error ? error : chunkError;
+                    skipped.push({ worktree, path, reason: 'vanished' });
+                }
+            }
+        }
+    }
+    return skipped;
+}
+/**
+ * Copies the staged blobs of the given paths from the real index into the temporary one. A path
+ * the real index does not hold is returned as skipped, never dropped silently.
+ */
+function addStagedBlobs(worktree, staged, run) {
+    const realEnv = { GIT_LITERAL_PATHSPECS: '1' };
+    const skipped = [];
+    let copied = 0;
+    for (const path of staged) {
+        const listed = git(['ls-files', '-s', '-z', '--', path], {
+            cwd: worktree,
+            env: realEnv,
+            timeoutMs: GIT_TIMEOUT_MS,
+        })
+            .split('\0')
+            .filter((line) => line !== '');
+        // An unmerged path has stages 1 to 3; ours (2) stands in for it, else theirs (3), else base.
+        const parsed = listed.flatMap((line) => {
+            const found = /^(\d+) ([0-9a-f]+) (\d)\t/.exec(line);
+            return found ? [found] : [];
+        });
+        const rank = (stage) => ({ '2': 0, '3': 1, '1': 2 })[stage ?? ''] ?? 3;
+        const match = parsed.sort((a, b) => rank(a[3]) - rank(b[3]))[0];
+        if (!match) {
+            skipped.push({ worktree, path, reason: 'staged-only-missing' });
+            continue;
+        }
+        git(['update-index', '--add', '--cacheinfo', `${match[1]},${match[2]},${path}`], run);
+        copied++;
+    }
+    return { copied, skipped };
+}
+function identityEnv(worktree) {
+    const env = {};
+    const has = (key) => tryGit(['config', '--get', key], { cwd: worktree, timeoutMs: GIT_TIMEOUT_MS }).stdout.trim() !==
+        '';
+    if (!has('user.name')) {
+        env.GIT_AUTHOR_NAME = FALLBACK_IDENTITY.name;
+        env.GIT_COMMITTER_NAME = FALLBACK_IDENTITY.name;
+    }
+    if (!has('user.email')) {
+        env.GIT_AUTHOR_EMAIL = FALLBACK_IDENTITY.email;
+        env.GIT_COMMITTER_EMAIL = FALLBACK_IDENTITY.email;
+    }
+    return env;
+}
+function rescueWorktree(input, options) {
+    const { path: worktree } = input;
+    const run = { cwd: worktree, timeoutMs: GIT_TIMEOUT_MS };
+    const result = { worktree, ref: null, commit: null, files: 0, empty: false };
+    const skipped = [];
+    let tmp = null;
+    try {
+        const resolved = tryGit(['rev-parse', '--verify', '--quiet', 'HEAD^{commit}'], run);
+        const status = parseStatusZ(git(['status', '--porcelain=v1', '-z', '--untracked-files=normal'], run));
+        if (!resolved.ok) {
+            // Changed work without a parent commit must be reported, never dropped as an empty rescue.
+            if (status.changed.length > 0)
+                result.error = 'HEAD does not resolve: nothing preserved';
+            return { ref: result, skipped: [] };
+        }
+        // One SHA for the whole build: a commit landing meanwhile must not mix two parents.
+        const head = resolved.stdout.trim();
+        const selected = selectPaths(worktree, status.changed, options.secretPatterns);
+        skipped.push(...selected.skipped);
+        const { paths } = selected;
+        if (paths.length === 0 && selected.staged.length === 0)
+            return { ref: result, skipped };
+        result.files = paths.length + selected.staged.length;
+        tmp = mkdtempSync(join(tmpdir(), 'devsteps-rescue-'));
+        const env = { GIT_INDEX_FILE: join(tmp, 'index'), GIT_LITERAL_PATHSPECS: '1' };
+        git(['read-tree', head], { ...run, env });
+        const vanished = addPaths(worktree, paths, { ...run, env });
+        skipped.push(...vanished);
+        result.files -= vanished.length;
+        for (const from of selected.removed) {
+            tryGit(['update-index', '--force-remove', '--', from], { ...run, env });
+        }
+        const stagedBlobs = addStagedBlobs(worktree, selected.staged, { ...run, env });
+        skipped.push(...stagedBlobs.skipped);
+        result.files -= stagedBlobs.skipped.length;
+        const tree = git(['write-tree'], { ...run, env }).trim();
+        if (tree === git(['rev-parse', `${head}^{tree}`], run).trim()) {
+            result.empty = true;
+            return { ref: result, skipped };
+        }
+        const message = `rescue: ${input.name} ${options.date}`;
+        const commit = git(['commit-tree', '--no-gpg-sign', tree, '-p', head, '-m', message], {
+            ...run,
+            env: { ...env, ...identityEnv(worktree) },
+        }).trim();
+        const ref = withFreeName(worktree, 'refs/heads', `rescue/${options.date}/${refSafe(input.name)}`, (name, existing) => {
+            if (existing !== null)
+                return undefined;
+            // The empty old value makes git refuse a ref that appeared in the meantime.
+            git(['update-ref', `refs/heads/${name}`, commit, ''], run);
+            return `refs/heads/${name}`;
+        });
+        result.ref = ref;
+        result.commit = commit;
+    }
+    catch (error) {
+        result.error = error instanceof Error ? error.message : String(error);
+    }
+    finally {
+        if (tmp !== null)
+            rmSync(tmp, { recursive: true, force: true });
+    }
+    return { ref: result, skipped };
+}
+/** Tags the given branch tips and rescues the uncommitted work of the given worktrees. */
+export function closeoutRescue(repoPath, options) {
+    if (!/^\d{8}$/.test(options.date))
+        throw new Error(`The date must be yyyymmdd: ${options.date}`);
+    const result = {
+        tags: createArchiveTags(repoPath, options.date, options.tagBranches),
+        refs: [],
+        skipped: [],
+    };
+    for (const worktree of options.worktrees) {
+        try {
+            const rescued = rescueWorktree(worktree, options);
+            result.refs.push(rescued.ref);
+            result.skipped.push(...rescued.skipped);
+        }
+        catch (error) {
+            // The loop goes on so the report names every worktree and no later one is left unrescued.
+            const message = error instanceof Error ? error.message : String(error);
+            result.refs.push({
+                worktree: worktree.path,
+                ref: null,
+                commit: null,
+                files: 0,
+                empty: false,
+                error: message,
+            });
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=closeout-rescue.js.map

package/dist/core/closeout-rescue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"closeout-rescue.js","sourceRoot":"","sources":["../../src/core/closeout-rescue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,YAAY,EAAoB,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAyCtD,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,uEAAuE;AACvE,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,iBAAiB,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;AAE7F,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,IAAY,EACZ,QAAsC;IAEtC,MAAM,IAAI,GAAyB,EAAE,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,WAAW,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CACP,YAAY,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE;gBAC3D,IAAI,QAAQ,KAAK,MAAM,CAAC,IAAI;oBAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;gBAChF,IAAI,QAAQ,KAAK,IAAI;oBAAE,OAAO,SAAS,CAAC;gBACxC,qFAAqF;gBACrF,8DAA8D;gBAC9D,GAAG,CAAC,CAAC,YAAY,EAAE,aAAa,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE;oBACxD,GAAG,EAAE,QAAQ;oBACb,SAAS,EAAE,cAAc;iBAC1B,CAAC,CAAC;gBACH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACnD,CAAC,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uEAAuE;YACvE,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8FAA8F;AAC9F,SAAS,eAAe,CACtB,QAAgB,EAChB,IAAY,EACZ,QAA2B;IAE3B,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;QACnF,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,EAAE,qBAAqB,EAAE,GAAG,EAAE;QACnC,SAAS,EAAE,cAAc;KAC1B,CAAC;SACC,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IACnC,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAC/E,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,gFAAgF;QAChF,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;;YACzF,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED,uEAAuE;AACvE,SAAS,WAAW,CAClB,QAAgB,EAChB,OAA+B,EAC/B,QAA2B;IAE3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YACrF,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;aAAM,IACL,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;YACnC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EACjE,CAAC;YACD,uFAAuF;YACvF,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACjF,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC5E,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,KAAK,CAAC,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAClD,uFAAuF;YACvF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,KAAK,CAAC,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;AACzF,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,UAAU,CACxB,KAAwB,EACxB,SAAiB,EACjB,QAAQ,GAAG,aAAa,EACxB,QAAQ,GAAG,SAAS;IAEpB,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,GAAG,SAAS,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,QAAQ,IAAI,IAAI,GAAG,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC;YACjF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,IAAI,IAAI,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CACtB,QAAgB,EAChB,KAAwB,EACxB,GAAoE;IAEpE,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC;YACH,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;gBACtC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;wBAAE,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;oBACrF,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CACrB,QAAgB,EAChB,MAAyB,EACzB,GAAoE;IAEpE,MAAM,OAAO,GAAG,EAAE,qBAAqB,EAAE,GAAG,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;YACvD,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,OAAO;YACZ,SAAS,EAAE,cAAc;SAC1B,CAAC;aACC,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;QACjC,6FAA6F;QAC7F,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,KAAyB,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QACD,GAAG,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QACtF,MAAM,EAAE,CAAC;IACX,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAC1B,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QAC5F,EAAE,CAAC;IACL,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACtB,GAAG,CAAC,eAAe,GAAG,iBAAiB,CAAC,IAAI,CAAC;QAC7C,GAAG,CAAC,kBAAkB,GAAG,iBAAiB,CAAC,IAAI,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,gBAAgB,GAAG,iBAAiB,CAAC,KAAK,CAAC;QAC/C,GAAG,CAAC,mBAAmB,GAAG,iBAAiB,CAAC,KAAK,CAAC;IACpD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAID,SAAS,cAAc,CACrB,KAA0B,EAC1B,OAAsB;IAEtB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACjC,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IACzD,MAAM,MAAM,GAAc,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACxF,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,IAAI,GAAG,GAAkB,IAAI,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,GAAG,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,YAAY,CACzB,GAAG,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,0BAA0B,CAAC,EAAE,GAAG,CAAC,CACzE,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,2FAA2F;YAC3F,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,KAAK,GAAG,0CAA0C,CAAC;YACzF,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACtC,CAAC;QACD,oFAAoF;QACpF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QAC/E,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACxF,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QACrD,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,qBAAqB,EAAE,GAAG,EAAE,CAAC;QAC/E,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC1B,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,CAAC,CAAC,cAAc,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9D,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;YACpB,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAClC,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;YACpF,GAAG,GAAG;YACN,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE;SAC1C,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,YAAY,CACtB,QAAQ,EACR,YAAY,EACZ,UAAU,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAC/C,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE;YACjB,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO,SAAS,CAAC;YACxC,4EAA4E;YAC5E,GAAG,CAAC,CAAC,YAAY,EAAE,cAAc,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YAC3D,OAAO,cAAc,IAAI,EAAE,CAAC;QAC9B,CAAC,CACF,CAAC;QACF,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;QACjB,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC;YAAS,CAAC;QACT,IAAI,GAAG,KAAK,IAAI;YAAE,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,OAAsB;IACrE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACjG,MAAM,MAAM,GAAiB;QAC3B,IAAI,EAAE,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC;QACpE,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,EAAE;KACZ,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0FAA0F;YAC1F,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBACf,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,GAAG,EAAE,IAAI;gBACT,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,OAAO;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core/closeout-rows.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * The user table of the session close-out (EPIC-061): one row per branch and one per dirty
+ * worktree, with a short detail text.
+ */
+import type { CloseoutRow, RepositoryInventory } from './closeout-types.js';
+export declare function buildRows(repositories: readonly RepositoryInventory[]): CloseoutRow[];
+//# sourceMappingURL=closeout-rows.d.ts.map

package/dist/core/closeout-rows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"closeout-rows.d.ts","sourceRoot":"","sources":["../../src/core/closeout-rows.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAEV,WAAW,EACX,mBAAmB,EAEpB,MAAM,qBAAqB,CAAC;AAkC7B,wBAAgB,SAAS,CAAC,YAAY,EAAE,SAAS,mBAAmB,EAAE,GAAG,WAAW,EAAE,CA4DrF"}

package/dist/core/closeout-rows.js

@@ -0,0 +1,103 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * The user table of the session close-out (EPIC-061): one row per branch and one per dirty
+ * worktree, with a short detail text.
+ */
+function plural(count, one, many = `${one}s`) {
+    return `${count} ${count === 1 ? one : many}`;
+}
+function branchDetail(branch) {
+    const parts = [];
+    if (branch.ahead > 0)
+        parts.push(`${plural(branch.ahead, 'commit')} ahead`);
+    if (branch.remaining.length > 0)
+        parts.push(`${branch.remaining.length} not in mainline`);
+    if (branch.matched.length > 0)
+        parts.push(`${branch.matched.length} matched in mainline`);
+    if (branch.conflicts && branch.conflicts.length > 0) {
+        parts.push(`conflicts: ${branch.conflicts.join(', ')}`);
+    }
+    if (branch.unpushed)
+        parts.push(`${branch.unpushed} unpushed`);
+    if (branch.duplicates.length > 0)
+        parts.push(`same tip as ${branch.duplicates.join(', ')}`);
+    if (branch.worktree)
+        parts.push(`worktree ${branch.worktree}`);
+    if (branch.note)
+        parts.unshift(branch.note);
+    return parts.join('; ');
+}
+function detachedDetail(worktree) {
+    return `${plural(worktree.unreachable_commits, 'commit')} on no branch; ${worktree.path}`;
+}
+function dirtyDetail(worktree) {
+    const parts = [plural(worktree.changed.length, 'changed entry', 'changed entries')];
+    if (worktree.secret_paths.length > 0) {
+        parts.push(`secret paths kept out: ${worktree.secret_paths.join(', ')}`);
+    }
+    parts.push(worktree.path);
+    return parts.join('; ');
+}
+export function buildRows(repositories) {
+    const rows = [];
+    for (const repository of repositories) {
+        for (const branch of repository.branches) {
+            rows.push({
+                repository: repository.name,
+                branch: branch.name,
+                class: branch.class,
+                markers: branch.markers,
+                action: branch.suggested_action,
+                detail: branchDetail(branch),
+            });
+        }
+        for (const worktree of repository.worktrees) {
+            if (worktree.links.length > 0 || worktree.link_scan_errors.length > 0) {
+                const findings = worktree.links.map((link) => `${link.kind} ${link.path}${link.target ? ` → ${link.target}` : ''}`);
+                rows.push({
+                    repository: repository.name,
+                    branch: worktree.branch ?? '(detached)',
+                    class: 'linked-worktree',
+                    markers: [],
+                    action: 'keep',
+                    detail: [...findings, ...worktree.link_scan_errors, worktree.path].join('; '),
+                });
+            }
+            if (worktree.unreachable_commits > 0) {
+                rows.push({
+                    repository: repository.name,
+                    branch: '(detached)',
+                    class: 'detached-head',
+                    markers: [],
+                    action: 'keep',
+                    detail: detachedDetail(worktree),
+                });
+            }
+            if (worktree.removal_blockers.includes('status unavailable')) {
+                rows.push({
+                    repository: repository.name,
+                    branch: worktree.branch ?? '(detached)',
+                    class: 'dirty-worktree',
+                    markers: [],
+                    action: 'keep',
+                    detail: `status unavailable; ${worktree.path}`,
+                });
+                continue;
+            }
+            if (worktree.changed.length === 0 && worktree.secret_paths.length === 0)
+                continue;
+            rows.push({
+                repository: repository.name,
+                branch: worktree.branch ?? '(detached)',
+                class: 'dirty-worktree',
+                markers: [],
+                action: 'keep',
+                detail: dirtyDetail(worktree),
+            });
+        }
+    }
+    return rows;
+}
+//# sourceMappingURL=closeout-rows.js.map

package/dist/core/closeout-rows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"closeout-rows.js","sourceRoot":"","sources":["../../src/core/closeout-rows.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,SAAS,MAAM,CAAC,KAAa,EAAE,GAAW,EAAE,IAAI,GAAG,GAAG,GAAG,GAAG;IAC1D,OAAO,GAAG,KAAK,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,YAAY,CAAC,MAAuB;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,kBAAkB,CAAC,CAAC;IAC1F,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,sBAAsB,CAAC,CAAC;IAC1F,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,WAAW,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5F,IAAI,MAAM,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,IAAI;QAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,cAAc,CAAC,QAA2B;IACjD,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC,kBAAkB,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC5F,CAAC;AAED,SAAS,WAAW,CAAC,QAA2B;IAC9C,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACpF,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,0BAA0B,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,YAA4C;IACpE,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;QACtC,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC;gBACR,UAAU,EAAE,UAAU,CAAC,IAAI;gBAC3B,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,gBAAgB;gBAC/B,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;YAC5C,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtE,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CACjC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/E,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC;oBACR,UAAU,EAAE,UAAU,CAAC,IAAI;oBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,YAAY;oBACvC,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBAC9E,CAAC,CAAC;YACL,CAAC;YACD,IAAI,QAAQ,CAAC,mBAAmB,GAAG,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC,IAAI,CAAC;oBACR,UAAU,EAAE,UAAU,CAAC,IAAI;oBAC3B,MAAM,EAAE,YAAY;oBACpB,KAAK,EAAE,eAAe;oBACtB,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC;iBACjC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC7D,IAAI,CAAC,IAAI,CAAC;oBACR,UAAU,EAAE,UAAU,CAAC,IAAI;oBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,YAAY;oBACvC,KAAK,EAAE,gBAAgB;oBACvB,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,uBAAuB,QAAQ,CAAC,IAAI,EAAE;iBAC/C,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAClF,IAAI,CAAC,IAAI,CAAC;gBACR,UAAU,EAAE,UAAU,CAAC,IAAI;gBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,YAAY;gBACvC,KAAK,EAAE,gBAAgB;gBACvB,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/closeout-secrets.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Secret patterns for the session close-out (EPIC-061): a path that matches stays out of every
+ * commit, rescue ref and archive the close-out builds, and keeps its worktree from being removed.
+ * Built-in defaults cover common key and credential files; a project adds its own names, such as
+ * a site environment file, under `settings.closeout.secret_patterns` in `.devsteps/config.json`.
+ */
+export declare const DEFAULT_SECRET_PATTERNS: readonly string[];
+/** The built-in defaults plus the project's own patterns; `null` gives the defaults alone. */
+export declare function projectSecretPatterns(devstepsDir: string | null): string[];
+/**
+ * True when the path matches a pattern: a pattern without `/` is tested against every path
+ * segment, so `Site-Environment.json` also covers a folder of that name; a pattern with `/`
+ * against the whole relative path. A pattern ending in `/` names a folder and matches it and
+ * everything below it.
+ */
+export declare function matchesSecret(relativePath: string, patterns: readonly string[]): boolean;
+//# sourceMappingURL=closeout-secrets.d.ts.map

package/dist/core/closeout-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"closeout-secrets.d.ts","sourceRoot":"","sources":["../../src/core/closeout-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EA4BpD,CAAC;AAsBF,8FAA8F;AAC9F,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,EAAE,CAG1E;AAwBD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAkBxF"}

package/dist/core/closeout-secrets.js

@@ -0,0 +1,119 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Secret patterns for the session close-out (EPIC-061): a path that matches stays out of every
+ * commit, rescue ref and archive the close-out builds, and keeps its worktree from being removed.
+ * Built-in defaults cover common key and credential files; a project adds its own names, such as
+ * a site environment file, under `settings.closeout.secret_patterns` in `.devsteps/config.json`.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+export const DEFAULT_SECRET_PATTERNS = [
+    '.env',
+    '.env.*',
+    '*.env',
+    '*.pem',
+    '*.key',
+    '*.pfx',
+    '*.p12',
+    '*.jks',
+    '*.keystore',
+    '*.kdbx',
+    '*.ppk',
+    'id_rsa',
+    'id_rsa.*',
+    'id_dsa*',
+    'id_ecdsa*',
+    'id_ed25519*',
+    '.npmrc',
+    '.pypirc',
+    '.netrc',
+    '.git-credentials',
+    'secret.*',
+    'secrets.*',
+    '*.secret',
+    '*.secrets',
+    'credentials',
+    'credentials.*',
+    '*credentials.json',
+];
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/** Patterns a project adds in config.json; an unreadable or malformed config adds none. */
+function configuredPatterns(devstepsDir) {
+    const file = join(devstepsDir, 'config.json');
+    if (!existsSync(file))
+        return [];
+    try {
+        const config = JSON.parse(readFileSync(file, 'utf8'));
+        const settings = isRecord(config) ? config.settings : undefined;
+        const closeout = isRecord(settings) ? settings.closeout : undefined;
+        const patterns = isRecord(closeout) ? closeout.secret_patterns : undefined;
+        if (!Array.isArray(patterns))
+            return [];
+        return patterns.filter((entry) => typeof entry === 'string' && entry !== '');
+    }
+    catch {
+        return [];
+    }
+}
+/** The built-in defaults plus the project's own patterns; `null` gives the defaults alone. */
+export function projectSecretPatterns(devstepsDir) {
+    const extra = devstepsDir ? configuredPatterns(devstepsDir) : [];
+    return [...new Set([...DEFAULT_SECRET_PATTERNS, ...extra])];
+}
+const compiled = new Map();
+/** `**` spans folders, `*` and `?` stay inside one path segment. */
+function globToRegExp(pattern) {
+    const cached = compiled.get(pattern);
+    if (cached)
+        return cached;
+    let source = '';
+    for (let index = 0; index < pattern.length; index++) {
+        const char = pattern[index] ?? '';
+        if (char === '*' && pattern[index + 1] === '*') {
+            const slash = pattern[index + 2] === '/';
+            source += slash ? '(?:.*/)?' : '.*';
+            index += slash ? 2 : 1;
+        }
+        else if (char === '*')
+            source += '[^/]*';
+        else if (char === '?')
+            source += '[^/]';
+        else
+            source += char.replace(/[.+^${}()|[\]\\]/g, '\\$&');
+    }
+    const regexp = new RegExp(`^${source}$`, 'i');
+    compiled.set(pattern, regexp);
+    return regexp;
+}
+/**
+ * True when the path matches a pattern: a pattern without `/` is tested against every path
+ * segment, so `Site-Environment.json` also covers a folder of that name; a pattern with `/`
+ * against the whole relative path. A pattern ending in `/` names a folder and matches it and
+ * everything below it.
+ */
+export function matchesSecret(relativePath, patterns) {
+    const path = relativePath.replace(/\\/g, '/').replace(/^\.\//, '').replace(/\/+$/, '');
+    const segments = path.split('/');
+    // Every leading part of the path, so a folder pattern also covers what lies below it.
+    const prefixes = segments.map((_, index) => segments.slice(0, index + 1).join('/'));
+    return patterns.some((pattern) => {
+        const normalized = pattern.replace(/\\/g, '/').replace(/^\.\//, '');
+        const folder = normalized.endsWith('/');
+        // A leading slash anchors the pattern at the repository root, as in .gitignore.
+        const anchored = normalized.startsWith('/');
+        const body = normalized.replace(/^\/+/, '').replace(/\/+$/, '');
+        if (body === '')
+            return false;
+        const regexp = globToRegExp(body);
+        if (!body.includes('/') && !anchored)
+            return segments.some((segment) => regexp.test(segment));
+        // An anchored name without a further slash still covers what lies below that root entry.
+        const below = folder || (anchored && !body.includes('/'));
+        return below ? prefixes.some((prefix) => regexp.test(prefix)) : regexp.test(path);
+    });
+}
+//# sourceMappingURL=closeout-secrets.js.map

package/dist/core/closeout-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"closeout-secrets.js","sourceRoot":"","sources":["../../src/core/closeout-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,MAAM;IACN,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,YAAY;IACZ,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,UAAU;IACV,SAAS;IACT,WAAW;IACX,aAAa;IACb,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,kBAAkB;IAClB,UAAU;IACV,WAAW;IACX,UAAU;IACV,WAAW;IACX,aAAa;IACb,eAAe;IACf,mBAAmB;CACpB,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,2FAA2F;AAC3F,SAAS,kBAAkB,CAAC,WAAmB;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QACxC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;IAChG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,qBAAqB,CAAC,WAA0B;IAC9D,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,uBAAuB,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE3C,oEAAoE;AACpE,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,IAAI,KAAK,GAAG,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;YACpC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG;YAAE,MAAM,IAAI,OAAO,CAAC;aACtC,IAAI,IAAI,KAAK,GAAG;YAAE,MAAM,IAAI,MAAM,CAAC;;YACnC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9C,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,YAAoB,EAAE,QAA2B;IAC7E,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,sFAAsF;IACtF,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACpF,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxC,gFAAgF;QAChF,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChE,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAC9B,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9F,yFAAyF;QACzF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC"}