@scolladon/tsgit 3.0.0 → 3.1.0

package/dist/types/chunks/{context-CNtbFlwI.d.ts → context-sIhhtk2u.d.ts}

@@ -448,6 +448,43 @@ interface PromisorRemote {
     fetch(oids: ReadonlyArray<ObjectId>): Promise<PromisorFetchOutcome>;
 }
 
+/**
+ * Request to open one SSH duplex channel. `command`/`args` are the fully
+ * resolved ssh program and argv (host token, `-p` flag, sq-quoted remote
+ * command) — the adapter performs no faithfulness logic of its own.
+ */
+interface SshSpawnRequest {
+    /** Resolved ssh program (e.g. `ssh`, or a `GIT_SSH`/`core.sshCommand` override). */
+    readonly command: string;
+    /** Full argv, incl. host token and remote-command token. */
+    readonly args: ReadonlyArray<string>;
+    /** Additions merged OVER the parent process environment by the adapter. */
+    readonly env: Readonly<Record<string, string>>;
+    readonly signal?: AbortSignal;
+}
+/**
+ * One live SSH duplex channel — a thin process bridge. Stream shapes mirror
+ * `HttpTransport`: web streams in, web streams out.
+ */
+interface SshChannel {
+    /** Request bytes written to the server. */
+    readonly stdin: WritableStream<Uint8Array>;
+    /** Advertisement + response bytes read from the server. */
+    readonly stdout: ReadableStream<Uint8Array>;
+    /** Resolves with the ssh process's exit code. */
+    readonly exit: Promise<number>;
+    /** Idempotent teardown — kills the child process. */
+    readonly close: () => Promise<void>;
+}
+/**
+ * Thin duplex process spawner. Knows nothing about git — argv building,
+ * quoting, and command resolution are pure application-tier concerns tested
+ * independently of this port.
+ */
+interface SshTransport {
+    readonly open: (req: SshSpawnRequest) => Promise<SshChannel>;
+}
+
 /**
  * Repository physical layout — where the working tree and.git directory live.
  * Renamed in from the previous `RepositoryConfig` (port-tier) to free that
@@ -544,6 +581,8 @@ interface Context {
     readonly layout: RepositoryLayout;
     /** User-supplied working directory (may be a sub-path of layout.workDir). Defaults to layout.workDir when not set by the facade. */
     readonly cwd: string;
+    /** The runtime this context was built for — names the adapter set in refusal messages. */
+    readonly runtime: 'node' | 'browser' | 'memory';
     /** Object serialization parameters (sha1 vs sha256 digest+hex sizes). */
     readonly hashConfig: HashConfig;
     /** Shared delta-base LRU cache; consumed by primitives' iterative delta walker. */
@@ -567,6 +606,11 @@ interface Context {
      * memory, where there is no process env). Notes-ref selection reads GIT_NOTES_REF through it.
      */
     readonly env?: EnvReader;
+    /**
+     * Optional SSH transport. Absent ⇒ ssh/scp remotes refuse — browser/memory
+     * cannot spawn a process.
+     */
+    readonly ssh?: SshTransport;
     /**
      * Optional promisor-remote capability. Populated by `openRepository`;
      * `readObject` consults it to lazy-fetch an object a partial clone omitted.
@@ -590,6 +634,7 @@ interface CreateContextParts {
     readonly progress: ProgressReporter;
     readonly layout: RepositoryLayout;
     readonly cwd?: string;
+    readonly runtime: 'node' | 'browser' | 'memory';
     readonly hashConfig: HashConfig;
     readonly deltaCache: LruCache<Uint8Array>;
     readonly config?: RepositoryConfig;
@@ -598,9 +643,10 @@ interface CreateContextParts {
     readonly hooks?: HookRunner;
     readonly command?: CommandRunner;
     readonly env?: EnvReader;
+    readonly ssh?: SshTransport;
 }
 /** Assemble a frozen Context from its constituent ports + layout. */
 declare function createContext(parts: CreateContextParts): Context;
 
-export { EMPTY_TREE_OID as E, FilePath as F, ObjectId as O, RefName as R, SHA1_CONFIG as S, ZERO_OID as Z, SHA256_CONFIG as r, createContext as s, noopLogger as t, wrapLoggerSanitizer as w };
-export type { AuthStrategy as A, CommandRunner as C, DirEntry as D, HashConfig as H, InflateStreamResult as I, Logger as L, ProgressReporter as P, Compressor as a, AuthorIdentity as b, Context as c, CreateContextParts as d, EnvReader as e, FileStat as f, FileSystem as g, HashService as h, Hasher as i, HookName as j, HookRequest as k, HookResult as l, HookRunner as m, PromisorFetchOutcome as n, PromisorRemote as o, RepositoryConfig as p, RepositoryLayout as q, FileHandle as u, CommandRequest as v, CommandResult as x };
+export { EMPTY_TREE_OID as E, FilePath as F, ObjectId as O, RefName as R, SHA1_CONFIG as S, ZERO_OID as Z, SHA256_CONFIG as r, createContext as v, noopLogger as w, wrapLoggerSanitizer as x };
+export type { AuthStrategy as A, CommandResult as B, CommandRunner as C, DirEntry as D, HashConfig as H, InflateStreamResult as I, Logger as L, ProgressReporter as P, Compressor as a, AuthorIdentity as b, Context as c, CreateContextParts as d, EnvReader as e, FileStat as f, FileSystem as g, HashService as h, Hasher as i, HookName as j, HookRequest as k, HookResult as l, HookRunner as m, PromisorFetchOutcome as n, PromisorRemote as o, RepositoryConfig as p, RepositoryLayout as q, SshChannel as s, SshSpawnRequest as t, SshTransport as u, FileHandle as y, CommandRequest as z };

package/dist/types/chunks/{index-E_KapqW9.d.ts → index-B5Dps3fg.d.ts}

@@ -1,5 +1,5 @@
-import { O as ObjectId, R as RefName, F as FilePath, c as Context, o as PromisorRemote } from './context-CNtbFlwI.js';
-import { o as FileMode, aN as IndexEntry, _ as StatData, G as GitIndex, p as FlatTree, a7 as TreeDiff, L as LineKey, a as AuthorIdentity, C as CatFileBatchEntry, aO as ConfigKey, aM as ConfigScope, W as RenameDetectOptions, a2 as StatTreeDiff, a3 as SubmoduleEntry, U as ReadObjectOptions, aP as ReflogEntry, e as CommitData, a5 as TagData } from './reflog-entry-DecZqJna.js';
+import { O as ObjectId, R as RefName, F as FilePath, c as Context, o as PromisorRemote } from './context-sIhhtk2u.js';
+import { p as FileMode, aO as IndexEntry, $ as StatData, G as GitIndex, q as FlatTree, a8 as TreeDiff, L as LineKey, a as AuthorIdentity, C as CatFileBatchEntry, aP as ConfigKey, aN as ConfigScope, X as RenameDetectOptions, a3 as StatTreeDiff, a4 as SubmoduleEntry, V as ReadObjectOptions, aQ as ReflogEntry, e as CommitData, a6 as TagData } from './reflog-entry-Cqh3QrPH.js';
 
 type BundleVersion = 2 | 3;
 type BundleHashAlgorithm = 'sha1';
@@ -489,6 +489,14 @@ interface CommitOptions {
     readonly allowEmptyMessage?: boolean;
     /** Skip the `pre-commit` and `commit-msg` hooks (git's `--no-verify`). */
     readonly noVerify?: boolean;
+    /**
+     * Sign the commit (git's `-S`). Tri-state against `commit.gpgsign`: an
+     * explicit `true`/`false` here always wins; leaving it `undefined` falls
+     * back to `commit.gpgsign` from config.
+     */
+    readonly sign?: boolean;
+    /** Signing key/identity override (git's `-S<keyid>`); falls back to `user.signingKey`. */
+    readonly signKey?: string;
 }
 interface CommitResult {
     readonly id: ObjectId;
@@ -780,6 +788,10 @@ declare function diff(ctx: Context, opts: DiffOptions & {
 declare function diff(ctx: Context, opts?: DiffOptions): Promise<TreeDiff>;
 
 interface FetchOptions {
+    /**
+     * Remote to fetch from. Default: `branch.<current>.remote` ?? the sole
+     * configured remote ?? `'origin'`; detached HEAD skips the branch step.
+     */
     readonly remote?: string;
     readonly refspecs?: ReadonlyArray<string>;
     readonly prune?: boolean;
@@ -1787,6 +1799,14 @@ interface TagCreateInput {
     readonly name: string;
     readonly target?: string;
     readonly force?: boolean;
+    /** Create an annotated tag object (git's `-a`). Implied by `message` and `sign`. */
+    readonly annotate?: boolean;
+    /** Annotated tag message (git's `-m`). Setting this implies `annotate`. */
+    readonly message?: string;
+    /** GPG-sign the annotated tag (git's `-s`). Implies `annotate`; falls back to `tag.gpgSign` when unset. */
+    readonly sign?: boolean;
+    /** Signer key override (git's `-u <keyid>` / `--local-user`). */
+    readonly signKey?: string;
 }
 interface TagCreateResult {
     readonly name: RefName;
@@ -2015,7 +2035,10 @@ interface MvResult {
 declare const mv: (ctx: Context, sources: ReadonlyArray<string>, destination: string, opts?: MvOptions) => Promise<MvResult>;
 
 interface PullOptions {
-    /** Remote to pull from. Default: `branch.<current>.remote` ?? `'origin'`. */
+    /**
+     * Remote to pull from. Default: `branch.<current>.remote` ?? the sole
+     * configured remote ?? `'origin'`.
+     */
     readonly remote?: string;
     /**
      * Remote ref to merge — a short branch name resolved as
@@ -2055,6 +2078,12 @@ interface PushOptions {
     readonly forceWithLease?: ObjectId | 'auto';
     /** Skip the `pre-push` hook (git's `--no-verify`). */
     readonly noVerify?: boolean;
+    /**
+     * GPG-sign the push certificate (git's `--signed`). `'yes'` refuses when
+     * the receiving end doesn't advertise `push-cert`; `'if-asked'` falls back
+     * to an unsigned push in that case. Falls back to `push.gpgSign` when unset.
+     */
+    readonly signed?: 'yes' | 'no' | 'if-asked';
 }
 interface PushedRef {
     readonly name: RefName;

package/dist/types/chunks/{index-BJDekgCP.d.ts → index-B_A8VLaf.d.ts}

@@ -1,6 +1,5 @@
-import { o as FileMode, aN as IndexEntry, G as GitIndex, B as BisectMidpoint, c as CatFileBatchOptions, C as CatFileBatchEntry, aM as ConfigScope, aO as ConfigKey, g as CreateCommitInput, m as DiffTreesInput, n as DiffTreesOptions, a2 as StatTreeDiff, a7 as TreeDiff, a6 as Tree, p as FlatTree, aQ as TreeEntry, U as ReadObjectOptions, b as Blob, r as GitObject, a as AuthorIdentity, aP as ReflogEntry, X as ResolveRefOptions, a9 as UpdateRefOptions, ab as WalkCommitsOptions, d as Commit, aa as WalkCommitsByDateOptions, ac as WalkSubmodulesOptions, a3 as SubmoduleEntry, ae as WalkTreeOptions, ad as WalkTreeEntry, ag as WalkWorkingTreeOptions, af as WalkWorkingTreeEntry } from './reflog-entry-DecZqJna.js';
-import { F as FilePath, c as Context, O as ObjectId, R as RefName, j as HookName } from './context-CNtbFlwI.js';
-import { b as HttpTransport } from './http-transport-DirKfK2S.js';
+import { p as FileMode, aO as IndexEntry, G as GitIndex, B as BisectMidpoint, c as CatFileBatchOptions, C as CatFileBatchEntry, aN as ConfigScope, aP as ConfigKey, g as CreateCommitInput, h as CreateTagInput, n as DiffTreesInput, o as DiffTreesOptions, a3 as StatTreeDiff, a8 as TreeDiff, a7 as Tree, q as FlatTree, aR as TreeEntry, V as ReadObjectOptions, b as Blob, s as GitObject, a as AuthorIdentity, aQ as ReflogEntry, Y as ResolveRefOptions, aa as UpdateRefOptions, ac as WalkCommitsOptions, d as Commit, ab as WalkCommitsByDateOptions, ad as WalkSubmodulesOptions, a4 as SubmoduleEntry, af as WalkTreeOptions, ae as WalkTreeEntry, ah as WalkWorkingTreeOptions, ag as WalkWorkingTreeEntry } from './reflog-entry-Cqh3QrPH.js';
+import { F as FilePath, c as Context, O as ObjectId, R as RefName, j as HookName } from './context-sIhhtk2u.js';
 
 /**
  * The four states a git attribute can resolve to (`gitattributes(5)`):
@@ -190,6 +189,8 @@ declare const buildPack: (ctx: Context, input: BuildPackInput) => Promise<BuildP
 
 declare function catFileBatch(ctx: Context, ids: AsyncIterable<ObjectId> | Iterable<ObjectId>, options?: CatFileBatchOptions): AsyncIterable<CatFileBatchEntry>;
 
+/** `push.default` mode; `tracking` is a deprecated alias canonicalized to `upstream` at parse time. */
+type PushDefaultMode = 'nothing' | 'current' | 'upstream' | 'simple' | 'matching';
 /**
  * Subset of `.git/config` that v1 commands consume. Only fields actually used by
  * commands are typed — the parser ignores everything else (lenient, like git itself).
@@ -206,10 +207,13 @@ interface ParsedConfig {
         readonly sparseCheckout?: boolean;
         readonly sparseCheckoutCone?: boolean;
         readonly looseCompression?: number;
+        /** `core.sshCommand` — shell string resolved by `resolveSshCommand` ahead of `GIT_SSH`. */
+        readonly sshCommand?: string;
     };
     readonly user?: {
-        readonly name: string;
-        readonly email: string;
+        readonly name?: string;
+        readonly email?: string;
+        readonly signingKey?: string;
     };
     readonly remote?: ReadonlyMap<string, {
         readonly url?: string;
@@ -221,9 +225,13 @@ interface ParsedConfig {
         /** `remote.<name>.partialclonefilter` — the canonical filter spec applied at clone. */
         readonly partialCloneFilter?: string;
     }>;
+    /** `remote.pushDefault` — subsectionless `[remote]` only; per-remote `[remote "x"] pushDefault` is not read. */
+    readonly remotePushDefault?: string;
     readonly branch?: ReadonlyMap<string, {
         readonly remote?: string;
         readonly merge?: string;
+        /** `branch.<name>.pushRemote` — overrides the push-remote for this branch. */
+        readonly pushRemote?: string;
     }>;
     /** `[submodule "<name>"]` — the registered (initialised) submodules. */
     readonly submodule?: ReadonlyMap<string, {
@@ -253,6 +261,29 @@ interface ParsedConfig {
     readonly extensions?: {
         readonly partialClone?: string;
     };
+    /** `commit.gpgSign` — sign commits by default when true. */
+    readonly commit?: {
+        readonly gpgSign?: boolean;
+    };
+    /** `tag.gpgSign` — sign annotated tags by default when true. */
+    readonly tag?: {
+        readonly gpgSign?: boolean;
+    };
+    readonly push?: {
+        /** `push.gpgSign` — sign push certificates: `true`/`false`, or `if-asked` (server-requested). */
+        readonly gpgSign?: 'true' | 'false' | 'if-asked';
+        /** `push.default` — canonicalized push remote-selection mode (`tracking` maps to `upstream`). */
+        readonly default?: PushDefaultMode;
+    };
+    /** `[gpg]` — signing backend selection and the external program(s) invoked to sign/verify. */
+    readonly gpg?: {
+        readonly format?: 'openpgp' | 'ssh' | 'x509';
+        readonly program?: string;
+        /** `gpg.ssh.program` — the `ssh-keygen`-compatible binary used for `gpg.format = ssh`. */
+        readonly ssh?: {
+            readonly program?: string;
+        };
+    };
 }
 /**
  * Read and cache `${gitDir}/config`. Missing → empty config (not an error).
@@ -275,12 +306,13 @@ interface ValuelessEntry {
     readonly line: number;
 }
 /**
- * Cold-path detection: re-tokenize the repo-local config and return the FIRST
+ * Valueless-entry detection: scan the repo-local config and return the FIRST
  * valueless (`value === null`) entry, by config-file line, whose key
  * (case-insensitive) is one of `keys` and which sits under `[<section> "<subsection>"]`
  * (subsection `undefined` ⇒ the section with no subsection). Returns the fully-qualified
  * key, the absolute config path, and the 1-based line, or `undefined` when no such
- * entry exists. Runs ONLY on a command's refusal path.
+ * entry exists. Walks the cached token stream, so an eager caller (the `[user]`
+ * identity pre-flight) pays only an in-memory scan, not a second read.
  */
 declare const findFirstValuelessEntry: (ctx: Context, section: string, subsection: string | undefined, keys: ReadonlyArray<string>) => Promise<ValuelessEntry | undefined>;
 /**
@@ -405,6 +437,16 @@ declare const getAllConfigValues: ({ ctx, key, scope, }: {
 
 declare function createCommit(ctx: Context, input: CreateCommitInput): Promise<ObjectId>;
 
+/**
+ * Build and write an annotated tag object (`object`/`type`/`tag`/`tagger` +
+ * message). Tag-name validity (non-empty, no `\n`/`\0`) is enforced by
+ * `serializeTagContent` during `writeObject`; the tagger identity is
+ * roundtripped through `serializeIdentity` here first (rejects control
+ * characters per Step 0(a)), matching `createCommit`'s author/committer
+ * validation.
+ */
+declare function createTag(ctx: Context, input: CreateTagInput): Promise<ObjectId>;
+
 declare function diffTrees(ctx: Context, a: DiffTreesInput, b: DiffTreesInput, options: DiffTreesOptions & {
     withStat: true;
 }): Promise<StatTreeDiff>;
@@ -465,8 +507,6 @@ interface FetchPackInput {
     readonly haves: ReadonlyArray<ObjectId>;
     /** Negotiated capabilities (intersection of advertised + supported). */
     readonly capabilities: ReadonlyArray<string>;
-    /** Base remote URL (the same URL passed to clone). */
-    readonly url: string;
     /** Progress op label — clone uses 'clone:write-objects', fetch uses 'fetch:write-objects'. */
     readonly progressOp: string;
     /**
@@ -498,7 +538,19 @@ interface FetchPackResult {
     /** Commits the server advertised as no-longer-shallow (empty when depth is unset). */
     readonly unshallow: ReadonlyArray<ObjectId>;
 }
-declare const fetchPack: (ctx: Context, transport: HttpTransport, input: FetchPackInput) => Promise<FetchPackResult>;
+interface PackDownload {
+    readonly packBytes: Uint8Array;
+    readonly shallow: ReadonlyArray<ObjectId>;
+    readonly unshallow: ReadonlyArray<ObjectId>;
+}
+/**
+ * Negotiates and drains the pack body for one `fetchPack` call. Callers bind
+ * the wire version and the transport session into this closure — `fetchPack`
+ * itself stays version-agnostic, matching every other caller of the shared
+ * `PackDownload` shape.
+ */
+type NegotiatePackBytes = (ctx: Context, input: FetchPackInput) => Promise<PackDownload>;
+declare const fetchPack: (ctx: Context, negotiatePackBytes: NegotiatePackBytes, input: FetchPackInput) => Promise<FetchPackResult>;
 
 /**
  * Flatten a nested `Tree` into the `FlatTree` shape that the `mergeTrees`
@@ -517,6 +569,16 @@ declare const fetchPack: (ctx: Context, transport: HttpTransport, input: FetchPa
 
 declare const flattenTree: (ctx: Context, treeIdOrObject: ObjectId | Tree) => Promise<FlatTree>;
 
+/**
+ * Local-only object-presence probe. A CQS query: unlike `readObject`, it never
+ * inflates, never verifies, and never consults `ctx.promisor` — a promised
+ * (not-yet-fetched) object in a partial repo answers `false` here, exactly as
+ * it would on disk. Callers that need the object's bytes still go through
+ * `readObject`.
+ */
+
+declare const hasObject: (ctx: Context, id: ObjectId) => Promise<boolean>;
+
 interface HashBlobOptions {
     /** Persist the loose object under `.git/objects/<2>/<38>`. Default `false`. */
     readonly write?: boolean;
@@ -809,6 +871,43 @@ interface ShallowUpdate {
  */
 declare const updateShallow: (ctx: Context, updates: ShallowUpdate) => Promise<void>;
 
+type SignPayloadResult = {
+    readonly ok: true;
+    readonly armor: string;
+} | {
+    readonly ok: false;
+    readonly reason: 'off-node' | 'unsupported-format' | 'signer-failed';
+};
+interface SignRequest {
+    readonly format: 'openpgp' | 'ssh' | 'x509';
+    /** `gpg.program` / `gpg.ssh.program`; a family-specific default applies when absent. */
+    readonly program?: string;
+    /** Resolved `-u` value (openpgp) / `-f` key-file path (ssh). */
+    readonly selector: string;
+}
+interface ResolveSigningSelectorInput {
+    readonly signingKey?: string;
+    readonly keyOverride?: string;
+    readonly fallbackIdent: string;
+}
+/**
+ * Resolves the openpgp `-u` selector / the push-cert `pusher` selector —
+ * the identical `user.signingKey`-else-ident rule shared by commit, tag, and
+ * push-cert signing. The ssh `-f` key-file selector has NO ident fallback and
+ * is resolved by the caller directly (`keyOverride ?? signingKey`), not here.
+ */
+declare const resolveSigningSelector: (input: ResolveSigningSelectorInput) => string;
+/**
+ * Pure(ish) signing primitive delegating to the system signer through
+ * `ctx.command` — no new port. `gpg` runs stdin→stdout; `ssh-keygen` writes
+ * the payload to a temp file and reads the armor back from `<file>.sig`.
+ * Requesting `x509` and running with no `ctx.command` both refuse with a
+ * typed reason before any spawn or temp-file write. Success requires exit 0
+ * AND a well-formed armor block on the signer's output; anything else is a
+ * typed `signer-failed` refusal — never a partial or silent result.
+ */
+declare const signPayload: (ctx: Context, payload: Uint8Array, req: SignRequest) => Promise<SignPayloadResult>;
+
 interface StreamBlobOptions {
     readonly verifyHash?: boolean;
 }
@@ -1118,5 +1217,5 @@ declare const writeSparsePatternText: (ctx: Context, text: string) => Promise<vo
 
 declare function writeTree(ctx: Context, entries: ReadonlyArray<TreeEntry>): Promise<ObjectId>;
 
-export { getRepoRoot as $, DEFAULT_NOTES_REF as D, compareWorkingTreeEntry as G, computeChangeset as J, createCommit as K, MAX_SPARSE_PATTERN_FILE_BYTES as M, deleteReflog as N, diffTrees as O, enumerateObjects as Q, enumeratePushObjects as R, enumerateRefs as T, fetchPack as U, findFirstValuelessEntry as X, flattenTree as Y, getAllConfigValues as Z, getConfigValue as _, hashBlob as a0, invalidateConfigCache as a1, invalidateScopedConfigCache as a2, isIgnored as a3, isWorkingTreeDirty as a4, listReflogs as a5, loadNotesTree as a6, loadSparseMatcher as a7, materializeTree as a8, materializeWorktreeFromHead as a9, unsetAllConfigEntries as aA, unsetConfigEntry as aB, updateConfigEntries as aC, updateCoreConfig as aD, updateRef as aE, updateShallow as aF, walkCommits as aG, walkCommitsByDate as aH, walkSubmodules as aI, walkTree as aJ, walkWorkingTree as aK, writeNotesTree as aL, writeObject as aM, writeReflog as aN, writeSparsePatternText as aO, writeTree as aP, mergeBase as aa, parseIniSections as ab, readBlob as ac, readConfig as ad, readConfigSections as ae, readHeadTree as af, readIndex as ag, readObject as ah, readReflog as ai, readShallow as aj, readSparsePatternText as ak, readTree as al, reflogExists as am, removeConfigSection as an, renameConfigSection as ao, resolveNotesRef as ap, resolveRef as aq, resolveReflogIdentity as ar, runHook as as, runInformationalHook as at, setConfigEntry as au, setConfigEntryInText as av, setCoreConfigEntryInText as aw, sparseCheckoutPath as ax, streamBlob as ay, synthesizeTreeFromIndex as az, appendReflog as s, applyChangeset as t, applyConfigOpInText as u, bisectMidpoint as v, buildIndexFromTree as w, buildPack as x, catFileBatch as y, compareWorkingTreeDelta as z };
-export type { ApplyChangesetOpts as A, BlobStream as B, Changeset as C, EnumerateObjectsOptions as E, FetchPackInput as F, HashBlobOptions as H, IniSection as I, LoadedNotesTree as L, ParsedConfig as P, StreamBlobOptions as S, ValuelessEntry as V, WorkingTreeComparison as W, ApplyChangesetResult as a, GlobMatcher as aQ, BuildIndexFromTreeOpts as b, BuildPackInput as c, BuildPackResult as d, ChangesetEntry as e, ChangesetStats as f, ConfigEntry as g, EnumeratePushObjectsInput as h, FetchPackResult as i, HookInput as j, IsIgnoredMatch as k, IsIgnoredMatchSource as l, IsIgnoredQuery as m, MaterializeTreeOpts as n, MaterializeTreeResult as o, MergeBaseOptions as p, WorkingTreeDelta as q, WriteNotesTreeInput as r };
+export { findFirstValuelessEntry as $, DEFAULT_NOTES_REF as D, buildPack as G, catFileBatch as J, compareWorkingTreeDelta as K, MAX_SPARSE_PATTERN_FILE_BYTES as M, compareWorkingTreeEntry as N, computeChangeset as O, createCommit as Q, createTag as R, deleteReflog as T, diffTrees as U, enumerateObjects as X, enumeratePushObjects as Y, enumerateRefs as Z, fetchPack as _, flattenTree as a0, getAllConfigValues as a1, getConfigValue as a2, getRepoRoot as a3, hasObject as a4, hashBlob as a5, invalidateConfigCache as a6, invalidateScopedConfigCache as a7, isIgnored as a8, isWorkingTreeDirty as a9, setConfigEntry as aA, setConfigEntryInText as aB, setCoreConfigEntryInText as aC, signPayload as aD, sparseCheckoutPath as aE, streamBlob as aF, synthesizeTreeFromIndex as aG, unsetAllConfigEntries as aH, unsetConfigEntry as aI, updateConfigEntries as aJ, updateCoreConfig as aK, updateRef as aL, updateShallow as aM, walkCommits as aN, walkCommitsByDate as aO, walkSubmodules as aP, walkTree as aQ, walkWorkingTree as aR, writeNotesTree as aS, writeObject as aT, writeReflog as aU, writeSparsePatternText as aV, writeTree as aW, listReflogs as aa, loadNotesTree as ab, loadSparseMatcher as ac, materializeTree as ad, materializeWorktreeFromHead as ae, mergeBase as af, parseIniSections as ag, readBlob as ah, readConfig as ai, readConfigSections as aj, readHeadTree as ak, readIndex as al, readObject as am, readReflog as an, readShallow as ao, readSparsePatternText as ap, readTree as aq, reflogExists as ar, removeConfigSection as as, renameConfigSection as at, resolveNotesRef as au, resolveRef as av, resolveReflogIdentity as aw, resolveSigningSelector as ax, runHook as ay, runInformationalHook as az, appendReflog as v, applyChangeset as w, applyConfigOpInText as x, bisectMidpoint as y, buildIndexFromTree as z };
+export type { ApplyChangesetOpts as A, BlobStream as B, Changeset as C, EnumerateObjectsOptions as E, FetchPackInput as F, HashBlobOptions as H, IniSection as I, LoadedNotesTree as L, ParsedConfig as P, SignPayloadResult as S, ValuelessEntry as V, WorkingTreeComparison as W, ApplyChangesetResult as a, GlobMatcher as aX, BuildIndexFromTreeOpts as b, BuildPackInput as c, BuildPackResult as d, ChangesetEntry as e, ChangesetStats as f, ConfigEntry as g, EnumeratePushObjectsInput as h, FetchPackResult as i, HookInput as j, IsIgnoredMatch as k, IsIgnoredMatchSource as l, IsIgnoredQuery as m, MaterializeTreeOpts as n, MaterializeTreeResult as o, MergeBaseOptions as p, PushDefaultMode as q, SignRequest as r, StreamBlobOptions as s, WorkingTreeDelta as t, WriteNotesTreeInput as u };

package/dist/types/chunks/{index-wwZiot4c.d.cts → index-Dfh8cvEs.d.cts}

@@ -1,5 +1,5 @@
-import { O as ObjectId, R as RefName, F as FilePath, c as Context, o as PromisorRemote } from './context-D_A7-uau.cjs';
-import { o as FileMode, aN as IndexEntry, _ as StatData, G as GitIndex, p as FlatTree, a7 as TreeDiff, L as LineKey, a as AuthorIdentity, C as CatFileBatchEntry, aO as ConfigKey, aM as ConfigScope, W as RenameDetectOptions, a2 as StatTreeDiff, a3 as SubmoduleEntry, U as ReadObjectOptions, aP as ReflogEntry, e as CommitData, a5 as TagData } from './reflog-entry-BGJr9VfU.cjs';
+import { O as ObjectId, R as RefName, F as FilePath, c as Context, o as PromisorRemote } from './context-CF1YF2S8.cjs';
+import { p as FileMode, aO as IndexEntry, $ as StatData, G as GitIndex, q as FlatTree, a8 as TreeDiff, L as LineKey, a as AuthorIdentity, C as CatFileBatchEntry, aP as ConfigKey, aN as ConfigScope, X as RenameDetectOptions, a3 as StatTreeDiff, a4 as SubmoduleEntry, V as ReadObjectOptions, aQ as ReflogEntry, e as CommitData, a6 as TagData } from './reflog-entry-Dy-O27Dd.cjs';
 
 type BundleVersion = 2 | 3;
 type BundleHashAlgorithm = 'sha1';
@@ -489,6 +489,14 @@ interface CommitOptions {
     readonly allowEmptyMessage?: boolean;
     /** Skip the `pre-commit` and `commit-msg` hooks (git's `--no-verify`). */
     readonly noVerify?: boolean;
+    /**
+     * Sign the commit (git's `-S`). Tri-state against `commit.gpgsign`: an
+     * explicit `true`/`false` here always wins; leaving it `undefined` falls
+     * back to `commit.gpgsign` from config.
+     */
+    readonly sign?: boolean;
+    /** Signing key/identity override (git's `-S<keyid>`); falls back to `user.signingKey`. */
+    readonly signKey?: string;
 }
 interface CommitResult {
     readonly id: ObjectId;
@@ -780,6 +788,10 @@ declare function diff(ctx: Context, opts: DiffOptions & {
 declare function diff(ctx: Context, opts?: DiffOptions): Promise<TreeDiff>;
 
 interface FetchOptions {
+    /**
+     * Remote to fetch from. Default: `branch.<current>.remote` ?? the sole
+     * configured remote ?? `'origin'`; detached HEAD skips the branch step.
+     */
     readonly remote?: string;
     readonly refspecs?: ReadonlyArray<string>;
     readonly prune?: boolean;
@@ -1787,6 +1799,14 @@ interface TagCreateInput {
     readonly name: string;
     readonly target?: string;
     readonly force?: boolean;
+    /** Create an annotated tag object (git's `-a`). Implied by `message` and `sign`. */
+    readonly annotate?: boolean;
+    /** Annotated tag message (git's `-m`). Setting this implies `annotate`. */
+    readonly message?: string;
+    /** GPG-sign the annotated tag (git's `-s`). Implies `annotate`; falls back to `tag.gpgSign` when unset. */
+    readonly sign?: boolean;
+    /** Signer key override (git's `-u <keyid>` / `--local-user`). */
+    readonly signKey?: string;
 }
 interface TagCreateResult {
     readonly name: RefName;
@@ -2015,7 +2035,10 @@ interface MvResult {
 declare const mv: (ctx: Context, sources: ReadonlyArray<string>, destination: string, opts?: MvOptions) => Promise<MvResult>;
 
 interface PullOptions {
-    /** Remote to pull from. Default: `branch.<current>.remote` ?? `'origin'`. */
+    /**
+     * Remote to pull from. Default: `branch.<current>.remote` ?? the sole
+     * configured remote ?? `'origin'`.
+     */
     readonly remote?: string;
     /**
      * Remote ref to merge — a short branch name resolved as
@@ -2055,6 +2078,12 @@ interface PushOptions {
     readonly forceWithLease?: ObjectId | 'auto';
     /** Skip the `pre-push` hook (git's `--no-verify`). */
     readonly noVerify?: boolean;
+    /**
+     * GPG-sign the push certificate (git's `--signed`). `'yes'` refuses when
+     * the receiving end doesn't advertise `push-cert`; `'if-asked'` falls back
+     * to an unsigned push in that case. Falls back to `push.gpgSign` when unset.
+     */
+    readonly signed?: 'yes' | 'no' | 'if-asked';
 }
 interface PushedRef {
     readonly name: RefName;