@scolladon/tsgit 2.0.1 → 3.1.0

package/dist/esm/index.node.js

@@ -1,2 +1 @@
-import{realpath as r,stat as o}from"node:fs/promises";import*as s from"node:path";import{N as e,d as t,c as p,b as m,a as h}from"./chunks/node-http-transport-DPa2lK3T.js";import{S as l,c as u}from"./chunks/lru-cache-Cy7C7Lx2.js";import{o as w}from"./chunks/repository-DF6ePd1x.js";export{d as detectRuntime,i as isBrowser,a as isNode}from"./chunks/adapter-detect-DkZhhUhd.js";export{c as consoleProgress,n as noopProgress}from"./chunks/progress-BZobfl7p.js";import"node:zlib";import"./chunks/error-Dc-SRSJK.js";import"node:fs";import"node:os";import"node:crypto";import"node:child_process";import"node:http";import"node:https";import"node:stream";import"./chunks/walk-submodules-Dq9oGwP8.js";import"./chunks/readable-stream-CGuf8k1J.js";import"./chunks/index-jH0UMhh-.js";import"./transport/index.js";import"./primitives/index.js";const f=async(o={})=>{const a=o.cwd??process.cwd(),i=await r(s.resolve(a)).catch(()=>s.resolve(a)),n=await k(i)??{workDir:i,gitDir:s.join(i,".git"),bare:!1},c={fs:new t(n.workDir),hash:new p,compressor:new m,transport:new h({allowInsecureHttp:o.allowInsecureHttp??!1}),hooks:new e,runtime:"node",layout:n,hashConfig:l,deltaCache:u(o.deltaCacheMaxBytes??16777216,o.deltaCacheMaxEntries??65536)},{cwd:d,allowInsecureHttp:f,deltaCacheMaxBytes:j,deltaCacheMaxEntries:x,...g}=o;return w({...g,cwd:i},c)},k=async r=>{let e=r;for(;;){const r=s.join(e,".git"),t=await o(r).catch(()=>{});if(t?.isDirectory())return{workDir:e,gitDir:r,bare:!1};const a=s.dirname(e);if(a===e)return;e=a}};export{f as openRepository};
-//# sourceMappingURL=index.node.js.map
+import{realpath as e,stat as r}from"node:fs/promises";import*as o from"node:path";import{N as s,a as t,g as p,c as m,b as h,d as l,e as f,f as w,n as u}from"./chunks/node-ssh-transport-BgSv2IhT.js";import{S as k,c as j}from"./chunks/lru-cache-Cy7C7Lx2.js";import{o as g}from"./chunks/repository-DyxknzvE.js";export{d as detectRuntime,i as isBrowser,a as isNode}from"./chunks/adapter-detect-BkCMnjrI.js";export{c as consoleProgress,n as noopProgress}from"./chunks/progress-B_AJnOHx.js";export{F as FilePath,O as ObjectId,R as RefName}from"./chunks/write-sparse-checkout-BwHbNKNS.js";import"node:child_process";import"node:zlib";import"./chunks/error-BotOd-nD.js";import"node:fs";import"node:os";import"node:stream/promises";import"node:crypto";import"node:http";import"node:https";import"node:stream";import"./chunks/index-DsvINN8n.js";import"./chunks/readable-stream-CGuf8k1J.js";import"./transport/index.js";import"./primitives/index.js";const x=(e,r)=>e.slice(r.rootOf(e).length).split(r.sep).filter(Boolean),y=(e,r,o)=>void 0!==e&&o.normalizeForCompare(e)===o.normalizeForCompare(r),C=async(r={})=>{const a=r.cwd??process.cwd(),n=await e(o.resolve(a)).catch(()=>o.resolve(a)),i=await v(n)??{workDir:n,gitDir:o.join(n,".git"),bare:!1},c={fs:new p(i.workDir),hash:new w,compressor:new f,transport:new l({allowInsecureHttp:r.allowInsecureHttp??!1}),hooks:new t,command:new s,env:new h,ssh:new m,runtime:"node",layout:i,hashConfig:k,deltaCache:j(r.deltaCacheMaxBytes??16777216,r.deltaCacheMaxEntries??65536),makeWorktreeFs:e=>new p(((e,r)=>{const o=e.map(e=>r.resolve(e)),[s,...t]=o;if(void 0===s)return r.sep;const a=r.rootOf(s);if(!o.every(e=>r.normalizeForCompare(r.rootOf(e))===r.normalizeForCompare(a)))return s;const n=t.map(e=>x(e,r)),i=[];for(const e of x(s,r)){if(!n.every(o=>y(o[i.length],e,r)))break;i.push(e)}return a+i.join(r.sep)})([i.workDir,...e],u),u)},{cwd:d,allowInsecureHttp:C,deltaCacheMaxBytes:b,deltaCacheMaxEntries:D,...F}=r;return g({...F,cwd:n},c)},v=async e=>{let s=e;for(;;){const e=o.join(s,".git"),t=await r(e).catch(()=>{});if(t?.isDirectory())return{workDir:s,gitDir:e,bare:!1};const a=o.dirname(s);if(a===s)return;s=a}};export{C as openRepository};

package/dist/esm/operators/index.js

@@ -1,2 +1 @@
 export{r as readableStreamToAsyncIterable}from"../chunks/readable-stream-CGuf8k1J.js";function n(n){return async function*(t){for await(const r of t)await n(r)&&(yield r)}}function t(n){return async t=>{for await(const r of t)if(await n(r))return r}}function e(n){return async function*(t){for await(const r of t){const t=await n(r);for await(const n of t)yield n}}}function o(n,t=Number.POSITIVE_INFINITY){if(Number.isNaN(t)||t<0)throw new RangeError("groupBy(limit): must be a non-negative number or Infinity");return async r=>{const e=new Map;let o=0;for await(const a of r){if(o>=t)throw new RangeError(`groupBy: exceeded limit of ${t} items`);const r=await n(a),i=e.get(r);i?i.push(a):e.set(r,[a]),o+=1}return e}}function a(n){return async function*(t){for await(const r of t)yield await n(r)}}function i(n,...t){return t.reduce((n,t)=>t(n),n)}function u(n){if(!Number.isInteger(n)||n<0)throw new RangeError("take(count): count must be a non-negative integer");return async function*(t){if(0===n)return;let r=0;for await(const e of t)if(yield e,r+=1,r>=n)return}}async function f(n,t=Number.POSITIVE_INFINITY){if(Number.isNaN(t)||t<0)throw new RangeError("toArray(limit): must be a non-negative number or Infinity");const r=[];for await(const e of n){if(r.length>=t)throw new RangeError(`toArray: exceeded limit of ${t} items`);r.push(e)}return r}export{n as filter,t as find,e as flatMap,o as groupBy,a as map,i as pipe,u as take,f as toArray};
-//# sourceMappingURL=index.js.map

package/dist/esm/primitives/index.js

@@ -1,2 +1 @@
-import{b3 as s,b4 as i,b5 as d,N as f,P as u,K as E,f as S,b6 as I,s as N,S as T}from"../chunks/walk-submodules-Dq9oGwP8.js";export{b7 as MAX_SPARSE_PATTERN_FILE_BYTES,aO as appendReflog,aD as applyChangeset,b8 as applyConfigOpInText,aT as buildIndexFromTree,aY as buildPack,y as catFileBatch,a0 as compareWorkingTreeEntry,b9 as computeChangeset,x as createCommit,aM as deleteReflog,v as diffTrees,aZ as enumeratePushObjects,aC as enumerateRefs,ai as fetchPack,$ as flattenTree,am as getAllConfigValues,al as getConfigValue,t as getRepoRoot,ba as invalidateConfigCache,bb as invalidateScopedConfigCache,aE as isWorkingTreeDirty,b1 as listReflogs,J as loadSparseMatcher,L as materializeTree,q as mergeBase,a4 as parseIniSections,r as readBlob,a6 as readConfig,an as readConfigSections,b as readObject,a as readReflog,bc as readShallow,aF as readSparsePatternText,p as readTree,o as recordRefUpdate,a9 as reflogExists,ap as removeConfigSection,aq as renameConfigSection,c as resolveRef,aN as resolveReflogIdentity,n as runHook,ar as setConfigEntry,bd as setConfigEntryInText,be as setCoreConfigEntryInText,bf as sparseCheckoutPath,_ as synthesizeTreeFromIndex,at as unsetAllConfigEntries,as as unsetConfigEntry,ak as updateConfigEntries,aG as updateCoreConfig,m as updateRef,aj as updateShallow,l as walkCommits,k as walkSubmodules,w as walkTree,e as walkWorkingTree,j as writeObject,Y as writeReflog,aK as writeSparsePatternText,h as writeSymbolicRef,g as writeTree}from"../chunks/walk-submodules-Dq9oGwP8.js";import{o as C,J as D,T as R}from"../chunks/error-Dc-SRSJK.js";import"../chunks/readable-stream-CGuf8k1J.js";const A=async(a,e)=>{if(a.signal?.aborted)throw C();if(0===e.length)return[];const t=await s(a),r=[...t.base],n=new Set,o=async a=>{for(const e of(a=>{const e=a.split("/");if(e.length<=1)return[];const t=[];for(let a=1;a<e.length;a+=1)t.push(e.slice(0,a).join("/"));return t})(a)){if(n.has(e))continue;n.add(e);const a=await t.loadDirRules(e);a.length>0&&r.push({basedir:e,rules:a,kind:"gitignore"})}},l=[];for(const t of e){if(a.signal?.aborted)throw C();await o(t.path);const e=i(r,t.path,!0===t.isDirectory);if("ignored"!==e.verdict||void 0===e.level||void 0===e.ruleIndex){l.push({path:t.path,ignored:!1});continue}const s=e.level.rules[e.ruleIndex];l.push(void 0!==s?{path:t.path,ignored:!0,source:{kind:e.level.kind??"gitignore",basedir:e.level.basedir,line:s.lineNumber,pattern:s.pattern}}:{path:t.path,ignored:!1})}return l},M=new Set(["FILE_NOT_FOUND","INVALID_INDEX_HEADER","INVALID_INDEX_ENTRY"]),F=async(a,e,t,s={})=>{if(a.signal?.aborted)throw C();d(e,I),await f(a),await u(a,"setEntryFlags");const r=await E(a,void 0!==s.breakStaleLockMs?{breakStaleLockMs:s.breakStaleLockMs}:{});try{const s=await(async a=>{try{return(await S(a)).entries}catch(a){if(a instanceof R&&M.has(a.data.code))return[];throw a}})(a),n=s.filter(a=>a.path===e);if(0===n.length)throw D(e);const o=n.map(a=>({...a,flags:{...a.flags,...t}})),i=s.map(a=>a.path!==e?a:o.find(e=>e.flags.stage===a.flags.stage)??a);return await r.commit(i),(a=>{let e=a[0];for(const t of a)t.flags.stage<e.flags.stage&&(e=t);return e})(o)}finally{await r.release()}},O=new Set(["FILE_NOT_FOUND","INVALID_INDEX_HEADER","INVALID_INDEX_ENTRY"]),P=async(a,e,t,s={})=>{if(a.signal?.aborted)throw C();d(e,I),await f(a),await u(a,"stageEntry");const r={...T,...s.flags},n=await E(a,void 0!==s.breakStaleLockMs?{breakStaleLockMs:s.breakStaleLockMs}:{});try{const s=await(async a=>{try{return(await S(a)).entries}catch(a){if(a instanceof R&&O.has(a.data.code))return[];throw a}})(a);let o,i,l;"content"in t?(o=await N(a,t.content,{write:!0}),i=t.mode??"100644",l=t.content.byteLength):(o=t.id,i=t.mode,l=0);const c=((a,e,t,s,r)=>{const n=Math.floor(Date.now()/1e3);return{ctimeSeconds:n,ctimeNanoseconds:0,mtimeSeconds:n,mtimeNanoseconds:0,dev:0,ino:0,mode:t,uid:0,gid:0,fileSize:s,id:e,flags:r,path:a}})(e,o,i,l,r),d=s.filter(a=>a.path!==e||a.flags.stage!==r.stage);return d.push(c),await n.commit(d),c}finally{await n.release()}},V=new Set(["FILE_NOT_FOUND","INVALID_INDEX_HEADER","INVALID_INDEX_ENTRY"]),X=async(a,e,t={})=>{if(a.signal?.aborted)throw C();d(e,I),await f(a),await u(a,"unstageEntry");const s=await E(a,void 0!==t.breakStaleLockMs?{breakStaleLockMs:t.breakStaleLockMs}:{});try{const t=await(async a=>{try{return(await S(a)).entries}catch(a){if(a instanceof R&&V.has(a.data.code))return[];throw a}})(a),r=t.filter(a=>a.path!==e),n=r.length!==t.length;return await s.commit(r),{removed:n}}finally{await s.release()}};export{N as hashBlob,A as isIgnored,S as readIndex,F as setEntryFlags,P as stageEntry,X as unstageEntry};
-//# sourceMappingURL=index.js.map
+import{b as a,ap as i,cc as c,cd as l}from"../chunks/write-sparse-checkout-BwHbNKNS.js";export{ce as DEFAULT_NOTES_REF,cf as MAX_SPARSE_PATTERN_FILE_BYTES,bW as appendReflog,bL as applyChangeset,c0 as applyConfigOpInText,bZ as buildIndexFromTree,aC as buildPack,E as catFileBatch,bf as compareWorkingTreeDelta,aO as compareWorkingTreeEntry,cg as computeChangeset,D as createCommit,c6 as createTag,bU as deleteReflog,B as diffTrees,bs as enumerateObjects,ca as enumeratePushObjects,aB as enumerateRefs,aZ as fetchPack,a3 as findFirstValuelessEntry,aQ as flattenTree,b5 as getAllConfigValues,b4 as getConfigValue,A as getRepoRoot,bi as hasObject,z as hashBlob,ch as invalidateConfigCache,ci as invalidateScopedConfigCache,bM as isWorkingTreeDirty,br as listReflogs,bG as loadNotesTree,a6 as loadSparseMatcher,a8 as materializeTree,b$ as materializeWorktreeFromHead,y as mergeBase,aU as parseIniSections,d as readBlob,a5 as readConfig,b6 as readConfigSections,be as readHeadTree,r as readIndex,g as readReflog,cj as readShallow,bN as readSparsePatternText,x as readTree,am as reflogExists,b8 as removeConfigSection,b9 as renameConfigSection,bF as resolveNotesRef,h as resolveRef,bV as resolveReflogIdentity,b2 as resolveSigningSelector,v as runHook,aH as runInformationalHook,ba as setConfigEntry,ck as setConfigEntryInText,cl as setCoreConfigEntryInText,b1 as signPayload,cm as sparseCheckoutPath,t as streamBlob,aJ as synthesizeTreeFromIndex,bc as unsetAllConfigEntries,bb as unsetConfigEntry,b0 as updateConfigEntries,bO as updateCoreConfig,s as updateRef,a_ as updateShallow,q as walkCommits,p as walkCommitsByDate,o as walkSubmodules,e as walkTree,w as walkWorkingTree,bH as writeNotesTree,n as writeObject,au as writeReflog,bS as writeSparsePatternText,m as writeTree}from"../chunks/write-sparse-checkout-BwHbNKNS.js";import{D as f,o as u}from"../chunks/error-BotOd-nD.js";import"../chunks/readable-stream-CGuf8k1J.js";const b=e=>{if(e<3)return 0;const a=Math.floor(Math.log2(e)),t=1<<a;return t<3*(e-t)?a:a-1},C=(e,a)=>{const t=new Set,s=[e];for(;s.length>0;){const e=s.pop();if(t.has(e))continue;const n=a.get(e);t.add(e);for(const e of n.parents)t.has(e)||s.push(e)}return t.size},T=(e,a)=>{const t=2*e-a;return t>=-1&&t<=1},k=(e,a,t)=>{if(a.has(e.id)||1!==e.parents.length)return;const s=a.get(e.parents[0]);if(void 0===s)return;const n=s+1;return a.set(e.id,n),T(n,t)?{nextCommit:e.id,candidateCount:t,reaches:n}:null},S=async(e,t)=>{const s=await a(e,t);if("commit"!==s.type)throw f(`bisectMidpoint: ${t} is not a commit`);return{date:s.data.committer.timestamp,parents:s.data.parents}},R=(e,a)=>e.date>a.date||e.date===a.date&&e.ins<a.ins,I=async(e,a,t)=>{const s=await(async(e,a)=>{const t=new Map,s=[...a];let n=0;for(;n<s.length;){const a=s[n++];if(t.has(a))continue;const r=await S(e,a);t.set(a,r);for(const e of r.parents)t.has(e)||s.push(e)}return t})(e,a),n=await(async(e,a,t)=>{const s=(e=>{const a=new Map;return async t=>{const s=a.get(t);if(void 0!==s)return s;const n=await S(e,t);return a.set(t,n),n}})(e),n=await s(a);if(t.has(a))return[];const r=await(async(e,a,t,s)=>{let n=0;const r=new Set,o=[],c=new i(R);for(c.push({id:a,date:t,ins:n++});c.size()>0;){const{id:a}=c.pop();if(r.has(a))continue;r.add(a);const t=await e(a);o.push({id:a,date:t.date,parents:t.parents});for(const a of t.parents){if(r.has(a)||s.has(a))continue;const t=await e(a);c.push({id:a,date:t.date,ins:n++})}}return o})(s,a,n.date,t);return(e=>{const a=new Set;for(const t of e)a.add(t.id);return e.slice().reverse().map(e=>({id:e.id,parents:e.parents.filter(e=>a.has(e)),date:e.date}))})(r)})(e,t,s),r=(e=>{if(0===e.length)return;const a=e.length,t=new Map(e.map(e=>[e.id,e])),s=new Map;((e,a)=>{for(const t of e)0===t.parents.length&&a.set(t.id,1)})(e,s);const n=((e,a,t,s)=>{for(const n of e){if(n.parents.length<2)continue;const e=C(n.id,a);if(t.set(n.id,e),T(e,s))return{nextCommit:n.id,candidateCount:s,reaches:e}}})(e,t,s,a);if(void 0!==n)return n;const r=((e,a,t)=>{let s=!0;for(;s;){s=!1;for(const n of e){const e=k(n,a,t);if(void 0!==e){if(null!==e)return e;s=!0}}}})(e,s,a);if(void 0!==r)return r;const o=((e,a,t)=>{const s=e[0],n=a.get(s.id);let r=s.id,o=Math.min(n,t-n),i=n;for(let s=1;s<e.length;s+=1){const n=e[s],c=a.get(n.id),d=Math.min(c,t-c);d>o&&(o=d,r=n.id,i=c)}return{id:r,weight:i}})(e,s,a);return{nextCommit:o.id,candidateCount:a,reaches:o.weight}})(n);return void 0===r?void 0:(e=>({nextCommit:e.nextCommit,candidateCount:e.candidateCount,remainingIfGood:e.candidateCount-e.reaches-1,remainingIfBad:e.reaches-1,remainingSteps:b(e.candidateCount)}))(r)},M=async(e,a)=>{if(e.signal?.aborted)throw u();if(0===a.length)return[];const t=await c(e),s=[...t.base],n=new Set,r=async e=>{for(const a of(e=>{const a=e.split("/");if(a.length<=1)return[];const t=[];for(let e=1;e<a.length;e+=1)t.push(a.slice(0,e).join("/"));return t})(e)){if(n.has(a))continue;n.add(a);const e=await t.loadDirRules(a);e.length>0&&s.push({basedir:a,rules:e,kind:"gitignore"})}},o=[];for(const t of a){if(e.signal?.aborted)throw u();await r(t.path);const a=l(s,t.path,!0===t.isDirectory);if("ignored"!==a.verdict||void 0===a.level||void 0===a.ruleIndex){o.push({path:t.path,ignored:!1});continue}const n=a.level.rules[a.ruleIndex];o.push(void 0!==n?{path:t.path,ignored:!0,source:{kind:a.level.kind??"gitignore",basedir:a.level.basedir,line:n.lineNumber,pattern:n.pattern}}:{path:t.path,ignored:!1})}return o};export{I as bisectMidpoint,M as isIgnored,a as readObject};

package/dist/esm/transport/index.js

@@ -1,2 +1 @@
 const e=new TextEncoder,r=r=>((e=>{"bearer"===e.type&&(e=>{if(""===e)throw new TypeError("withAuth: token is empty")})(e.token),"basic"===e.type&&(e=>{if(e.includes(":"))throw new TypeError('withAuth: basic username must not contain ":"')})(e.username)})(r),t=>({request:async o=>{if(Object.keys(o.headers).some(e=>"authorization"===e.toLowerCase()))return t.request(o);const s=await(async(r,t)=>{if("bearer"===r.type)return`Bearer ${r.token}`;if("basic"===r.type)return`Basic ${(r=>{const t=e.encode(r);let o="";for(let e=0;e<t.byteLength;e+=1)o+=String.fromCharCode(t[e]??0);return btoa(o)})(`${r.username}:${r.password}`)}`;const o=await r.header(t);if(""===o||null==o)throw new TypeError("withAuth: custom returned empty value");return o})(r,o);return t.request(((e,r)=>({...e,headers:{...e.headers,authorization:r}}))(o,s))}})),t=new Set(["authorization","cookie","set-cookie","proxy-authorization"]),o=/^(access[_-]?token|api[_-]?key|password|secret|token|sig|signature)$/i,s=(e,r)=>{const o=r.map(e=>e.toLowerCase()),s={};for(const[r,n]of Object.entries(e)){const e=r.toLowerCase();t.has(e)||o.includes(e)||(s[r]=n)}return s},n=(e,r)=>{try{e.log(r)}catch{}},a=e=>e instanceof Error?e.message:String(e),i=e=>{const r=e.now??(()=>performance.now()),t=e.redactHeaders??[];return i=>({request:async c=>{const u=(e=>{let r;try{r=new URL(e)}catch{return e}const t=[];for(const e of r.searchParams.keys())o.test(e)&&t.push(e);for(const e of t)r.searchParams.delete(e);return r.toString()})(c.url),h=s(c.headers,t),m=r();n(e.logger,((e,r,t)=>({kind:"request",method:e.method,url:r,headers:t,bodyBytes:e.body?.byteLength??0}))(c,u,h));try{const o=await i.request(c),a=s(o.headers,t);return n(e.logger,((e,r,t,o)=>({kind:"response",statusCode:e.statusCode,url:r,elapsedMs:t,headers:o}))(o,u,r()-m,a)),o}catch(t){throw n(e.logger,((e,r,t)=>({kind:"error",url:e,elapsedMs:r,errorMessage:a(t)}))(u,r()-m,t)),t}}})},c=({error:e,response:r})=>{return r?!((t=r.statusCode)<429||t>429&&t<500||501===t||t>=600):!(e instanceof DOMException&&"AbortError"===e.name)&&void 0!==e;var t},u=e=>{if(e)try{e.cancel().catch(()=>{})}catch{}},h=(e,r)=>r?.aborted?Promise.reject(r.reason):0===e?Promise.resolve():new Promise((t,o)=>{let s;const n=()=>{void 0!==s&&clearTimeout(s),o(r?.reason)};s=setTimeout(()=>{r?.removeEventListener("abort",n),t()},e),r&&r.addEventListener("abort",n,{once:!0})}),m=(e,r)=>{const t=r.baseMs??250,o=r.jitter??.2,s=Math.min("exponential"===(r.backoff??"fixed")?t*2**(e-1):t,r.maxDelayMs??3e4),n=1-o+2*o*Math.random();return Math.floor(s*n)},d=async(e,r)=>{try{return{response:await e.request(r)}}catch(e){return{error:e}}},w=e=>{if(void 0!==e.response)return e.response;throw e.error},p=(e,r)=>{return void 0!==e.outcome.error&&(t=e.outcome.error)instanceof DOMException&&"AbortError"===t.name||!!e.isLast||!r((o=e.outcome,s=e.attempt,void 0!==o.response?{response:o.response,attempt:s}:{error:o.error,attempt:s}));var t,o,s},y=e=>{(e=>{(e=>{if(!Number.isFinite(e)||!Number.isInteger(e)||e<1||e>10)throw new RangeError("withRetry: attempts must be 1..10")})(e.attempts),(e=>{if(void 0!==e&&(!Number.isFinite(e)||e<0))throw new RangeError("withRetry: baseMs must be ≥ 0")})(e.baseMs),((e,r)=>{if(void 0===r)return;const t=e??250;if(!Number.isFinite(r)||r<t)throw new RangeError("withRetry: maxDelayMs must be ≥ baseMs")})(e.baseMs,e.maxDelayMs),(e=>{if(void 0!==e&&(!Number.isFinite(e)||e<0||e>1))throw new RangeError("withRetry: jitter must be in [0, 1]")})(e.jitter)})(e);const r=e.isRetryable??c,t=e.delay??h;return o=>({request:async s=>{if(s.signal?.aborted)throw s.signal.reason;let n={};for(let a=1;a<=e.attempts;a+=1){if(n=await d(o,s),p({attempt:a,isLast:a===e.attempts,outcome:n},r))return w(n);void 0!==n.response&&u(n.response.body),await t(m(a,e),s.signal)}return w(n)}})};export{r as withAuth,i as withLogging,y as withRetry};
-//# sourceMappingURL=index.js.map

package/dist/types/adapters/browser/index.d.cts

@@ -1,5 +1,5 @@
-import { b as Context, C as Compressor, I as InflateStreamResult, F as FileSystem, d as FileStat, D as DirEntry, e as FileHandle, H as HashService, f as Hasher } from '../../chunks/context-YDw6qicq.cjs';
-import { H as HttpTransport, a as HttpRequest, b as HttpResponse } from '../../chunks/http-transport--_NdQOiw.cjs';
+import { c as Context, a as Compressor, I as InflateStreamResult, g as FileSystem, f as FileStat, D as DirEntry, y as FileHandle, h as HashService, i as Hasher } from '../../chunks/context-CF1YF2S8.cjs';
+import { b as HttpTransport, H as HttpRequest, a as HttpResponse } from '../../chunks/http-transport-DirKfK2S.cjs';
 
 interface BrowserAdapterOptions {
     readonly rootHandle: FileSystemDirectoryHandle;
@@ -12,7 +12,8 @@ interface BrowserAdapterOptions {
 declare function createBrowserContext(options: BrowserAdapterOptions): Context;
 
 declare class BrowserCompressor implements Compressor {
-    deflate(data: Uint8Array): Promise<Uint8Array>;
+    deflate(data: Uint8Array, _level?: number): Promise<Uint8Array>;
+    deflateRaw(data: Uint8Array, _level?: number): Promise<Uint8Array>;
     inflate(data: Uint8Array): Promise<Uint8Array>;
     streamInflate(bytes: Uint8Array, offset: number): Promise<InflateStreamResult>;
     createInflateStream(): TransformStream<Uint8Array, Uint8Array>;
@@ -28,6 +29,7 @@ declare class BrowserFileSystem implements FileSystem {
     readSlice(path: string, offset: number, length: number): Promise<Uint8Array>;
     readUtf8(path: string): Promise<string>;
     write(path: string, data: Uint8Array): Promise<void>;
+    writeStream(path: string, source: AsyncIterable<Uint8Array>): Promise<void>;
     writeExclusive(path: string, data: Uint8Array): Promise<void>;
     writeUtf8(path: string, content: string): Promise<void>;
     appendUtf8(path: string, content: string): Promise<void>;

package/dist/types/adapters/browser/index.d.ts

@@ -1,5 +1,5 @@
-import { b as Context, C as Compressor, I as InflateStreamResult, F as FileSystem, d as FileStat, D as DirEntry, e as FileHandle, H as HashService, f as Hasher } from '../../chunks/context-CCL0_F8R.js';
-import { H as HttpTransport, a as HttpRequest, b as HttpResponse } from '../../chunks/http-transport--_NdQOiw.js';
+import { c as Context, a as Compressor, I as InflateStreamResult, g as FileSystem, f as FileStat, D as DirEntry, y as FileHandle, h as HashService, i as Hasher } from '../../chunks/context-sIhhtk2u.js';
+import { b as HttpTransport, H as HttpRequest, a as HttpResponse } from '../../chunks/http-transport-DirKfK2S.js';
 
 interface BrowserAdapterOptions {
     readonly rootHandle: FileSystemDirectoryHandle;
@@ -12,7 +12,8 @@ interface BrowserAdapterOptions {
 declare function createBrowserContext(options: BrowserAdapterOptions): Context;
 
 declare class BrowserCompressor implements Compressor {
-    deflate(data: Uint8Array): Promise<Uint8Array>;
+    deflate(data: Uint8Array, _level?: number): Promise<Uint8Array>;
+    deflateRaw(data: Uint8Array, _level?: number): Promise<Uint8Array>;
     inflate(data: Uint8Array): Promise<Uint8Array>;
     streamInflate(bytes: Uint8Array, offset: number): Promise<InflateStreamResult>;
     createInflateStream(): TransformStream<Uint8Array, Uint8Array>;
@@ -28,6 +29,7 @@ declare class BrowserFileSystem implements FileSystem {
     readSlice(path: string, offset: number, length: number): Promise<Uint8Array>;
     readUtf8(path: string): Promise<string>;
     write(path: string, data: Uint8Array): Promise<void>;
+    writeStream(path: string, source: AsyncIterable<Uint8Array>): Promise<void>;
     writeExclusive(path: string, data: Uint8Array): Promise<void>;
     writeUtf8(path: string, content: string): Promise<void>;
     appendUtf8(path: string, content: string): Promise<void>;

package/dist/types/adapters/memory/index.d.cts

@@ -1,5 +1,5 @@
-import { a as HookRunner, b as Context, C as Compressor, I as InflateStreamResult, F as FileSystem, d as FileStat, D as DirEntry, e as FileHandle, H as HashService, f as Hasher, g as HookName, h as HookResult, i as HookRequest } from '../../chunks/context-YDw6qicq.cjs';
-import { H as HttpTransport, a as HttpRequest, b as HttpResponse } from '../../chunks/http-transport--_NdQOiw.cjs';
+import { m as HookRunner, C as CommandRunner, e as EnvReader, c as Context, z as CommandRequest, B as CommandResult, a as Compressor, I as InflateStreamResult, g as FileSystem, f as FileStat, D as DirEntry, y as FileHandle, h as HashService, i as Hasher, j as HookName, l as HookResult, k as HookRequest } from '../../chunks/context-CF1YF2S8.cjs';
+import { b as HttpTransport, H as HttpRequest, a as HttpResponse } from '../../chunks/http-transport-DirKfK2S.cjs';
 
 interface MemoryAdapterOptions {
     readonly files?: Readonly<Record<string, Uint8Array>>;
@@ -11,6 +11,10 @@ interface MemoryAdapterOptions {
     readonly homeDir?: string;
     /** Optional hook runner exposed via `ctx.hooks` (default: undefined — hooks inert). */
     readonly hooks?: HookRunner;
+    /** Optional command runner exposed via `ctx.command` (default: undefined — drivers fall back). */
+    readonly command?: CommandRunner;
+    /** Optional environment-variable reader exposed via `ctx.env` (default: undefined — every var is unset). */
+    readonly env?: EnvReader;
     /** Override for `fs.homedir()` (default: `'/home/user'`). */
     readonly home?: string;
     /** Override for `fs.xdgConfigHome()` (default: `'/home/user/.config'`). */
@@ -20,9 +24,25 @@ interface MemoryAdapterOptions {
 }
 declare function createMemoryContext(options?: MemoryAdapterOptions): Context;
 
+/**
+ * In-memory `CommandRunner` test double. Constructed with a behaviour callback
+ * that simulates the driver (e.g. editing the `%A` file on the shared `ctx.fs`)
+ * and returns the exit code. Every invocation is recorded on `calls` so a test
+ * can assert the command, cwd, and env without spawning a process.
+ */
+declare class MemoryCommandRunner implements CommandRunner {
+    private readonly behaviour;
+    private readonly recorded;
+    constructor(behaviour?: (request: CommandRequest) => Promise<number> | number);
+    /** Every `CommandRequest` received, in invocation order. */
+    get calls(): ReadonlyArray<CommandRequest>;
+    run(request: CommandRequest): Promise<CommandResult>;
+}
+
 declare class MemoryCompressor implements Compressor {
     constructor();
-    deflate: (data: Uint8Array) => Promise<Uint8Array>;
+    deflate: (data: Uint8Array, _level?: number) => Promise<Uint8Array>;
+    deflateRaw: (data: Uint8Array, _level?: number) => Promise<Uint8Array>;
     inflate: (data: Uint8Array) => Promise<Uint8Array>;
     streamInflate: (bytes: Uint8Array, offset: number) => Promise<InflateStreamResult>;
     createInflateStream: () => TransformStream<Uint8Array, Uint8Array>;
@@ -52,6 +72,7 @@ declare class MemoryFileSystem implements FileSystem {
     readSlice: (path: string, offset: number, length: number) => Promise<Uint8Array>;
     readUtf8: (path: string) => Promise<string>;
     write: (path: string, data: Uint8Array) => Promise<void>;
+    writeStream: (path: string, source: AsyncIterable<Uint8Array>) => Promise<void>;
     writeExclusive: (path: string, data: Uint8Array) => Promise<void>;
     writeUtf8: (path: string, content: string) => Promise<void>;
     appendUtf8: (path: string, content: string) => Promise<void>;
@@ -66,6 +87,12 @@ declare class MemoryFileSystem implements FileSystem {
     mkdir: (path: string) => Promise<void>;
     rm: (path: string) => Promise<void>;
     rename: (src: string, dst: string) => Promise<void>;
+    /**
+     * Move a directory subtree by re-keying every files/symlinks/times/directories
+     * entry at `src` or under `src/` to the corresponding `dst` path. Mirrors a
+     * POSIX directory rename (what the node adapter does natively).
+     */
+    private renameDirectory;
     readlink: (path: string) => Promise<string>;
     symlink: (target: string, path: string) => Promise<void>;
     chmod: (path: string, _mode: number) => Promise<void>;
@@ -127,5 +154,5 @@ declare class MemoryHttpTransport implements HttpTransport {
     clearMocks(): void;
 }
 
-export { MemoryCompressor, MemoryFileSystem, MemoryHashService, MemoryHookRunner, MemoryHttpTransport, createMemoryContext };
+export { MemoryCommandRunner, MemoryCompressor, MemoryFileSystem, MemoryHashService, MemoryHookRunner, MemoryHttpTransport, createMemoryContext };
 export type { MemoryAdapterOptions, MemoryFileSystemOptions, MockSetup };

package/dist/types/adapters/memory/index.d.ts

@@ -1,5 +1,5 @@
-import { a as HookRunner, b as Context, C as Compressor, I as InflateStreamResult, F as FileSystem, d as FileStat, D as DirEntry, e as FileHandle, H as HashService, f as Hasher, g as HookName, h as HookResult, i as HookRequest } from '../../chunks/context-CCL0_F8R.js';
-import { H as HttpTransport, a as HttpRequest, b as HttpResponse } from '../../chunks/http-transport--_NdQOiw.js';
+import { m as HookRunner, C as CommandRunner, e as EnvReader, c as Context, z as CommandRequest, B as CommandResult, a as Compressor, I as InflateStreamResult, g as FileSystem, f as FileStat, D as DirEntry, y as FileHandle, h as HashService, i as Hasher, j as HookName, l as HookResult, k as HookRequest } from '../../chunks/context-sIhhtk2u.js';
+import { b as HttpTransport, H as HttpRequest, a as HttpResponse } from '../../chunks/http-transport-DirKfK2S.js';
 
 interface MemoryAdapterOptions {
     readonly files?: Readonly<Record<string, Uint8Array>>;
@@ -11,6 +11,10 @@ interface MemoryAdapterOptions {
     readonly homeDir?: string;
     /** Optional hook runner exposed via `ctx.hooks` (default: undefined — hooks inert). */
     readonly hooks?: HookRunner;
+    /** Optional command runner exposed via `ctx.command` (default: undefined — drivers fall back). */
+    readonly command?: CommandRunner;
+    /** Optional environment-variable reader exposed via `ctx.env` (default: undefined — every var is unset). */
+    readonly env?: EnvReader;
     /** Override for `fs.homedir()` (default: `'/home/user'`). */
     readonly home?: string;
     /** Override for `fs.xdgConfigHome()` (default: `'/home/user/.config'`). */
@@ -20,9 +24,25 @@ interface MemoryAdapterOptions {
 }
 declare function createMemoryContext(options?: MemoryAdapterOptions): Context;
 
+/**
+ * In-memory `CommandRunner` test double. Constructed with a behaviour callback
+ * that simulates the driver (e.g. editing the `%A` file on the shared `ctx.fs`)
+ * and returns the exit code. Every invocation is recorded on `calls` so a test
+ * can assert the command, cwd, and env without spawning a process.
+ */
+declare class MemoryCommandRunner implements CommandRunner {
+    private readonly behaviour;
+    private readonly recorded;
+    constructor(behaviour?: (request: CommandRequest) => Promise<number> | number);
+    /** Every `CommandRequest` received, in invocation order. */
+    get calls(): ReadonlyArray<CommandRequest>;
+    run(request: CommandRequest): Promise<CommandResult>;
+}
+
 declare class MemoryCompressor implements Compressor {
     constructor();
-    deflate: (data: Uint8Array) => Promise<Uint8Array>;
+    deflate: (data: Uint8Array, _level?: number) => Promise<Uint8Array>;
+    deflateRaw: (data: Uint8Array, _level?: number) => Promise<Uint8Array>;
     inflate: (data: Uint8Array) => Promise<Uint8Array>;
     streamInflate: (bytes: Uint8Array, offset: number) => Promise<InflateStreamResult>;
     createInflateStream: () => TransformStream<Uint8Array, Uint8Array>;
@@ -52,6 +72,7 @@ declare class MemoryFileSystem implements FileSystem {
     readSlice: (path: string, offset: number, length: number) => Promise<Uint8Array>;
     readUtf8: (path: string) => Promise<string>;
     write: (path: string, data: Uint8Array) => Promise<void>;
+    writeStream: (path: string, source: AsyncIterable<Uint8Array>) => Promise<void>;
     writeExclusive: (path: string, data: Uint8Array) => Promise<void>;
     writeUtf8: (path: string, content: string) => Promise<void>;
     appendUtf8: (path: string, content: string) => Promise<void>;
@@ -66,6 +87,12 @@ declare class MemoryFileSystem implements FileSystem {
     mkdir: (path: string) => Promise<void>;
     rm: (path: string) => Promise<void>;
     rename: (src: string, dst: string) => Promise<void>;
+    /**
+     * Move a directory subtree by re-keying every files/symlinks/times/directories
+     * entry at `src` or under `src/` to the corresponding `dst` path. Mirrors a
+     * POSIX directory rename (what the node adapter does natively).
+     */
+    private renameDirectory;
     readlink: (path: string) => Promise<string>;
     symlink: (target: string, path: string) => Promise<void>;
     chmod: (path: string, _mode: number) => Promise<void>;
@@ -127,5 +154,5 @@ declare class MemoryHttpTransport implements HttpTransport {
     clearMocks(): void;
 }
 
-export { MemoryCompressor, MemoryFileSystem, MemoryHashService, MemoryHookRunner, MemoryHttpTransport, createMemoryContext };
+export { MemoryCommandRunner, MemoryCompressor, MemoryFileSystem, MemoryHashService, MemoryHookRunner, MemoryHttpTransport, createMemoryContext };
 export type { MemoryAdapterOptions, MemoryFileSystemOptions, MockSetup };

package/dist/types/adapters/node/index.d.cts

@@ -1,5 +1,5 @@
-import { b as Context, C as Compressor, I as InflateStreamResult, F as FileSystem, d as FileStat, D as DirEntry, e as FileHandle, H as HashService, f as Hasher, a as HookRunner, i as HookRequest, h as HookResult } from '../../chunks/context-YDw6qicq.cjs';
-import { H as HttpTransport, a as HttpRequest, b as HttpResponse } from '../../chunks/http-transport--_NdQOiw.cjs';
+import { c as Context, C as CommandRunner, z as CommandRequest, B as CommandResult, a as Compressor, I as InflateStreamResult, g as FileSystem, f as FileStat, D as DirEntry, y as FileHandle, h as HashService, i as Hasher, m as HookRunner, k as HookRequest, l as HookResult } from '../../chunks/context-CF1YF2S8.cjs';
+import { b as HttpTransport, H as HttpRequest, a as HttpResponse } from '../../chunks/http-transport-DirKfK2S.cjs';
 
 interface NodeAdapterOptions {
     readonly workDir: string;
@@ -15,9 +15,62 @@ interface NodeAdapterOptions {
      * `process.env` — disable it for repositories you do not trust.
      */
     readonly hooks?: boolean;
+    /**
+     * Wire the merge-driver command runner (default true). Pass `false` to
+     * disable external merge drivers. A wired runner executes the configured
+     * `[merge "<driver>"].driver` shell command with the full `process.env`.
+     */
+    readonly command?: boolean;
+    /**
+     * Wire the ssh transport (default true). Pass `false` to refuse ssh/scp
+     * remotes. A wired transport spawns the resolved ssh command
+     * (`GIT_SSH_COMMAND`/`GIT_SSH`/`core.sshCommand`, else `ssh`) inheriting
+     * the full `process.env`.
+     */
+    readonly ssh?: boolean;
 }
 declare function createNodeContext(options: NodeAdapterOptions): Context;
 
+/** Minimal child-process surface `NodeCommandRunner` consumes. */
+interface CommandChild {
+    on(event: 'error', listener: (err: Error) => void): void;
+    on(event: 'close', listener: (code: number | null) => void): void;
+    kill(): void;
+    readonly stdin: {
+        write(chunk: Uint8Array): void;
+        end(): void;
+    };
+    readonly stdout: {
+        on(event: 'data', listener: (chunk: Uint8Array) => void): void;
+    };
+}
+/**
+ * Injectable process surface. Production uses `node:child_process` spawn; unit
+ * tests inject a fake so every branch runs deterministically without a real
+ * process (mirrors `HookRunnerOps`).
+ */
+interface CommandRunnerOps {
+    readonly spawn: (command: string, args: ReadonlyArray<string>, options: {
+        readonly cwd: string;
+        readonly env: NodeJS.ProcessEnv;
+        readonly stdio: ['pipe', 'pipe', 'inherit'];
+    }) => CommandChild;
+}
+declare const realCommandRunnerOps: CommandRunnerOps;
+/**
+ * Node `CommandRunner`: runs a command line through the platform shell
+ * (`sh -c` on POSIX, `cmd /c` on Windows) with `cwd` and an environment that
+ * merges `request.env` over `process.env`. Stdin is piped from `request.stdin`
+ * when present; stdout is captured into `result.stdout`. Never rejects for a
+ * non-zero exit.
+ */
+declare class NodeCommandRunner implements CommandRunner {
+    private readonly isWindows;
+    private readonly ops;
+    constructor(platform?: NodeJS.Platform, ops?: CommandRunnerOps);
+    run(request: CommandRequest): Promise<CommandResult>;
+}
+
 interface NodeCompressorOptions {
     /** Override the inflated-output cap. Tests use a small value to exercise the overflow branch. */
     readonly maxInflatedBytes?: number;
@@ -25,7 +78,8 @@ interface NodeCompressorOptions {
 declare class NodeCompressor implements Compressor {
     private readonly maxInflatedBytes;
     constructor(options?: NodeCompressorOptions);
-    deflate: (data: Uint8Array) => Promise<Uint8Array>;
+    deflate: (data: Uint8Array, level?: number) => Promise<Uint8Array>;
+    deflateRaw: (data: Uint8Array, level?: number) => Promise<Uint8Array>;
     inflate: (data: Uint8Array) => Promise<Uint8Array>;
     streamInflate: (bytes: Uint8Array, offset: number) => Promise<InflateStreamResult>;
     createInflateStream: () => TransformStream<Uint8Array, Uint8Array>;
@@ -95,61 +149,86 @@ declare class NodeFileSystem implements FileSystem {
     private readonly fsOps;
     /**
      * Memoised realpath of an *existing* parent directory, keyed by the raw
-     * (pre-realpath) parent path. Populated on every cache-miss inside
-     * `resolveForCreation` so a clone/checkout that writes N files into the
-     * same tree pays the realpath walk-up once per parent rather than once
-     * per file.
+     * (pre-realpath) parent path, paired with that parent's containment
+     * verdict (`isContainedInEitherRoot(realParent, …)`, computed once right
+     * after the realpath resolves). The cached value is mode-independent, so
+     * this single cache serves BOTH `resolveForCreation` (creation mode) and
+     * `resolveForMode`'s lstat arm (lstat mode): a clone/checkout writing N
+     * files into the same tree, or a status walk lstat-ing N entries under
+     * the same directory, pays the realpath walk-up — and, for the lstat
+     * arm, the containment POST-check — once per parent rather than once per
+     * file/entry. The verdict is a per-clean-leaf equivalence
+     * (`isContainedInEitherRoot(join(realParent, basename))` ≡
+     * `isContainedInEitherRoot(realParent)`, see the design doc's proof) and
+     * is consulted ONLY by the lstat arm; `read`/`creation` realpath the full
+     * leaf and keep their own per-entry post-check.
      *
      * Invariants:
      * - Only EXISTING parents are cached. ENOENT walks fall back to
-     *   `realpathNearestExisting` and are never recorded.
-     * - `rmRecursive` and `rename` clear the cache, which is correct (the
-     *   parent realpath may have changed) and cheap (the cache holds at
-     *   most a handful of small strings).
+     *   `realpathNearestExisting` (creation) or propagate (lstat) and are
+     *   never recorded.
+     * - The realpath and the verdict are set together — never divergent.
+     * - `rmRecursive` and `rename` clear the cache (invalidating BOTH the
+     *   realpath and the verdict), which is correct (the parent realpath may
+     *   have changed) and cheap relative to a re-walk. `rm` clears neither —
+     *   a leaf removal does not change the parent's realpath or containment.
+     * - Sized to exceed the 256 loose-object fanout directories so a
+     *   full-history walk does not thrash the cache.
      */
-    private readonly creationParentCache;
+    private readonly parentRealpathCache;
     /**
-     * Lazy long-name canonicalisation of `rootDir` for containment checks.
-     * Promise so concurrent first calls share one `realpath`; cleared on
-     * rejection so a transient ENOENT can be retried.
+     * Lazy long-name canonicalisation of `rootDir` for containment checks,
+     * resolving to the canonical root's `RootPrefix`. Promise so concurrent
+     * first calls share one `realpath`; cleared on rejection so a transient
+     * ENOENT can be retried.
      */
     private canonicalRootPromise;
     /**
-     * Memoised result of `pathPolicy.normalizeForCompare(rootDir)`. The
-     * rootDir is `readonly` for the adapter's lifetime, so a single
-     * normalisation is amortised across every containment check.
+     * Synchronous cache of the resolved canonical-root `RootPrefix`, set on
+     * `getCanonicalRoot()`'s promise-resolution arm and cleared on its
+     * rejection arm — always in lockstep with `canonicalRootPromise`. Lets
+     * hot-path callers (`checkContainment`, `exists`, `symlink`) read the
+     * settled value directly, without an `await` (and its microtask), once
+     * the root has resolved at least once.
      */
-    private normalizedRootDir;
+    private resolvedCanonicalRootPrefix;
     /**
-     * Memoised result of `pathPolicy.normalizeForCompare(canonicalRoot)`.
-     * Tracked alongside the canonical-root promise: when the promise
-     * resolves we cache the normalised form once. The promise's
-     * rejection-clears-cache rule means a transient ENOENT also clears
-     * this field (so the next call re-normalises against the retried
-     * canonical root).
+     * Memoised `{ normalized, withSep }` pair for `pathPolicy.normalizeForCompare(rootDir)`.
+     * The rootDir is `readonly` for the adapter's lifetime, so a single
+     * normalisation (and its `+sep` prefix) is amortised across every
+     * containment check. Bundled in one field — never two — so the prefix
+     * can never diverge from the root it was derived from.
      */
-    private normalizedCanonicalRoot;
+    private normalizedRootDirPrefix;
     constructor(rootDir: string, pathPolicy?: PathPolicy, fsOps?: FsOperations);
+    /**
+     * Lazily normalises `rootDir` and its `+sep` prefix as one bundled
+     * `RootPrefix`, memoised for the adapter's lifetime.
+     */
+    private getRootDirPrefix;
     private getNormalizedRootDir;
     /**
-     * Returns the cached normalised canonical root. Caller must have
-     * `await this.getCanonicalRoot()` immediately prior — the cache is
-     * populated by the promise's success arm and cleared on rejection, so
-     * a successful `await` guarantees the field is set.
-     *
-     * Kept synchronous (vs `async` + `await this.getCanonicalRoot()`
-     * inside) so the hot path doesn't pay an extra microtask suspension
-     * per containment check on a settled promise. The `!` is the only
-     * machine-readable form of "trust the post-await invariant"; the
-     * private `await getCanonicalRoot()` discipline at every call site is
-     * what makes it safe.
+     * Resolves and memoises the canonical-root `RootPrefix`. Returns the
+     * bundled `{ normalized, withSep }` value directly from the promise
+     * chain — callers thread the returned value onward, so there is no
+     * synchronous "trust it's been set" field read: the type system proves
+     * the value is defined via the `await`'s return, not a nullable field.
      */
-    private getResolvedNormalizedCanonicalRoot;
     private getCanonicalRoot;
+    /**
+     * Synchronous-first-path accessor for the canonical root: returns the
+     * already-settled `resolvedCanonicalRootPrefix` field when populated (no
+     * `await`, no microtask), falling back to `getCanonicalRoot()` only on
+     * the first call or after a rejection cleared the field. Used by every
+     * hot-path call site (`checkContainment`, `exists`, `symlink`) instead of
+     * an unconditional `await this.getCanonicalRoot()`.
+     */
+    private resolveCanonicalRoot;
     read: (path: string) => Promise<Uint8Array>;
     readSlice: (path: string, offset: number, length: number) => Promise<Uint8Array>;
     readUtf8: (path: string) => Promise<string>;
     write: (path: string, data: Uint8Array) => Promise<void>;
+    writeStream: (path: string, source: AsyncIterable<Uint8Array>) => Promise<void>;
     writeExclusive: (path: string, data: Uint8Array) => Promise<void>;
     writeUtf8: (path: string, content: string) => Promise<void>;
     appendUtf8: (path: string, content: string) => Promise<void>;
@@ -168,8 +247,35 @@ declare class NodeFileSystem implements FileSystem {
     private isSymlinkLeaf;
     private removeTree;
     private resolveForCreation;
+    private cachedParentRealpath;
     private realpathForCreation;
+    /**
+     * Resolves `resolved` to its real, containment-checkable form. `contained`
+     * is `undefined` for `read`/`creation` — those arms realpath a full leaf,
+     * so `checkContainment` still runs its own per-entry POST-check on the
+     * returned `real`. For `lstat`, `contained` carries the per-parent
+     * verdict `cachedParentRealpath` already computed (once per parent,
+     * proven verdict-identical to a per-entry check for a single clean leaf)
+     * — `checkContainment` consults it directly instead of re-normalising.
+     */
     private resolveForMode;
+    /**
+     * `abs` is normalised ONCE (not once per root) and compared against
+     * both roots' precomputed `+sep` prefixes. Both the `=== root` equality
+     * arm and the `startsWith(root + sep)` prefix arm are retained per
+     * root — dropping either changes the verdict (a bare `startsWith(root)`
+     * would admit the prefix-only sibling `root-evil`). Both roots are
+     * passed in as already-resolved `RootPrefix` values — no field read-back.
+     */
+    private isContainedInEitherRoot;
+    /**
+     * Single source of truth for the two-root, two-arm containment test —
+     * `isContainedInEitherRoot` and the lstat arm's PRE-check both delegate
+     * here so the "is `abs` exactly one of the roots" fact (needed by the
+     * lstat arm's exact-root shortcut) is derived from the SAME normalise
+     * call as the containment verdict, not a second one.
+     */
+    private containmentVerdict;
     private checkContainment;
     homedir(): string;
     xdgConfigHome(): string;
@@ -249,5 +355,5 @@ declare class NodeHttpTransport implements HttpTransport {
     request: (req: HttpRequest) => Promise<HttpResponse>;
 }
 
-export { NodeCompressor, NodeFileSystem, NodeHashService, NodeHookRunner, NodeHttpTransport, createNodeContext };
-export type { NodeAdapterOptions, NodeHttpTransportOptions };
+export { NodeCommandRunner, NodeCompressor, NodeFileSystem, NodeHashService, NodeHookRunner, NodeHttpTransport, createNodeContext, realCommandRunnerOps };
+export type { CommandRunnerOps, NodeAdapterOptions, NodeHttpTransportOptions };