@smthrs/std 0.0.0-stage → 1.0.0-rc.12

package/dist/esm/internal/FsFailure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FsFailure.d.ts","sourceRoot":"","sources":["../../../src/internal/FsFailure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,KAAK,aAAa,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAE1C;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,KAAG,QAAQ,CAAC,QAC0C,CAAA;AAEnG;;;;;;GAMG;AACH,eAAO,MAAM,MAAM,GACjB,MAAM,MAAM,EACZ,WAAW,CAAC,KAAK,EAAE,aAAa,CAAC,aAAa,KAAK,QAAQ,CAAC,QAAQ,MAErE,OAAO,aAAa,CAAC,aAAa,KAAG,QAAQ,CAAC,QACuC,CAAA;AAEtF;;;;;;;GAOG;AACH,eAAO,MAAM,OAAO,GAAI,MAAM,MAAM,EAAE,iBAAiB,MAAM,aAXrD,aAAa,CAAC,aAAa,KAAG,QAAQ,CAAC,QAesE,CAAA"}

package/dist/esm/internal/FsFailure.js

@@ -0,0 +1,39 @@
+/**
+ * Maps a filesystem failure to the standard-flow code that names its reason.
+ *
+ * A permission denial is not a missing file. Telling the model a denied path
+ * does not exist sends it searching for a file that is right there, and hides
+ * the denial from whoever reads the run. Every standard flow that touches the
+ * filesystem routes its failures through here so `PermissionDenied` always
+ * reaches the model as `permission_denied`.
+ *
+ * @since 1.0.0
+ */
+import * as StdError from "../StdError.js";
+/**
+ * The failure for a path the host or the kernel guard refused.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export const permissionDenied = (path) => new StdError.StdError({ code: "permission_denied", message: `Permission denied: ${path}`, path });
+/**
+ * Maps `PermissionDenied` to `permission_denied` and any other reason through
+ * `otherwise`.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export const denied = (path, otherwise) => (error) => error.reason._tag === "PermissionDenied" ? permissionDenied(path) : otherwise(error);
+/**
+ * Maps a read-side failure: `NotFound` to `not_found` with `notFoundMessage`,
+ * `PermissionDenied` to `permission_denied`, and anything else to
+ * `command_failed` carrying the host's reason.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export const reading = (path, notFoundMessage) => denied(path, (error) => error.reason._tag === "NotFound"
+    ? new StdError.StdError({ code: "not_found", message: notFoundMessage, path })
+    : new StdError.StdError({ code: "command_failed", message: `Could not read ${path}: ${error.message}`, path }));
+//# sourceMappingURL=FsFailure.js.map

package/dist/esm/internal/FsFailure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FsFailure.js","sourceRoot":"","sources":["../../../src/internal/FsFailure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAE1C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAqB,EAAE,CAClE,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,sBAAsB,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;AAEnG;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,IAAY,EACZ,SAAoE,EACpE,EAAE,CACJ,CAAC,KAAkC,EAAqB,EAAE,CACxD,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;AAEtF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,eAAuB,EAAE,EAAE,CAC/D,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU;IAC9B,CAAC,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IAC9E,CAAC,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA","sourcesContent":["/**\n * Maps a filesystem failure to the standard-flow code that names its reason.\n *\n * A permission denial is not a missing file. Telling the model a denied path\n * does not exist sends it searching for a file that is right there, and hides\n * the denial from whoever reads the run. Every standard flow that touches the\n * filesystem routes its failures through here so `PermissionDenied` always\n * reaches the model as `permission_denied`.\n *\n * @since 1.0.0\n */\n\nimport type * as PlatformError from \"effect/PlatformError\"\nimport * as StdError from \"../StdError.ts\"\n\n/**\n * The failure for a path the host or the kernel guard refused.\n *\n * @private\n * @since 1.0.0\n */\nexport const permissionDenied = (path: string): StdError.StdError =>\n  new StdError.StdError({ code: \"permission_denied\", message: `Permission denied: ${path}`, path })\n\n/**\n * Maps `PermissionDenied` to `permission_denied` and any other reason through\n * `otherwise`.\n *\n * @private\n * @since 1.0.0\n */\nexport const denied = (\n  path: string,\n  otherwise: (error: PlatformError.PlatformError) => StdError.StdError\n) =>\n(error: PlatformError.PlatformError): StdError.StdError =>\n  error.reason._tag === \"PermissionDenied\" ? permissionDenied(path) : otherwise(error)\n\n/**\n * Maps a read-side failure: `NotFound` to `not_found` with `notFoundMessage`,\n * `PermissionDenied` to `permission_denied`, and anything else to\n * `command_failed` carrying the host's reason.\n *\n * @private\n * @since 1.0.0\n */\nexport const reading = (path: string, notFoundMessage: string) =>\n  denied(path, (error) =>\n    error.reason._tag === \"NotFound\"\n      ? new StdError.StdError({ code: \"not_found\", message: notFoundMessage, path })\n      : new StdError.StdError({ code: \"command_failed\", message: `Could not read ${path}: ${error.message}`, path }))\n"]}

package/dist/esm/internal/GitWorktree.d.ts

@@ -0,0 +1,108 @@
+/**
+ * Detached checkouts shared by checkpoint reads and baseline test runs.
+ *
+ * ## Host git never reads a file the agent can write that names a program
+ *
+ * The repository is the workspace's, and an agent can write its `.git`: a
+ * containerised agent writes it through the bind mount. Git reads programs out
+ * of that directory in more places than any list of `-c` overrides can close.
+ * Hooks and `core.fsmonitor` can be overridden, but a filter driver
+ * (`filter.<name>.clean`/`.smudge` in `.git/config`, selected by
+ * `.git/info/attributes`) cannot: git has no switch that ignores repository
+ * config or `$GIT_DIR/info/attributes`, and overriding each driver by name
+ * races an agent that keeps rewriting the file.
+ *
+ * So the git that records and checks out trees runs against a **shadow**
+ * `GIT_DIR`: a bare repository this module creates under the host's temporary
+ * directory for one operation and deletes afterwards. Its config, hooks and
+ * `info/attributes` are the ones `git init --template=` writes, which is none.
+ * `GIT_CONFIG_NOSYSTEM` and `GIT_CONFIG_GLOBAL=/dev/null` drop the host's own
+ * config files too, so the only settings are the ones on the command line.
+ * `GIT_OBJECT_DIRECTORY` points at the workspace's object store, because objects
+ * are data: git hashes and inflates them and never runs anything they say.
+ *
+ * What still touches the workspace repository is plain data:
+ *
+ * - `rev-parse` in the workspace, which resolves refs and paths and runs no
+ *   hook, filter, fsmonitor or other configured program;
+ * - `git config --file <workspace config>`, which reads or writes that one file
+ *   and follows no `include`;
+ * - a copy of the workspace index into the shadow, so the recorded tree holds
+ *   what the agent staged without the harness writing the agent's index; and
+ * - a handful of `core.*` settings that change how bytes are hashed
+ *   ({@link dataSettings}), each accepted only as a bare word.
+ *
+ * A materialized checkout gets its own standalone `.git`, written by this
+ * module as files, so a container can still run git in it: `HEAD` names the
+ * commit, `objects/info/alternates` points back at the workspace's objects by a
+ * relative path, and `index` is the one the checkout was written from. Host git
+ * never uses that directory; it is the container's.
+ *
+ * @since 1.0.0
+ */
+import type { ChildProcessSpawner } from "@smthrs/kernel/ChildProcessSpawner";
+import { Effect } from "effect";
+import * as StdError from "../StdError.ts";
+import * as Exec from "./Exec.ts";
+/**
+ * Where one workspace repository keeps what the shadow needs, as its own git
+ * reports it.
+ *
+ * @category models
+ * @since 1.0.0
+ */
+export interface Repository {
+    /** The root the caller named, without a trailing slash. */
+    readonly root: string;
+    /** The same directory, as git canonicalizes it. */
+    readonly toplevel: string;
+    /** The common git directory, which holds config and objects. */
+    readonly common: string;
+    /** The workspace index. */
+    readonly index: string;
+    readonly objectFormat: string;
+    /** {@link dataSettings} as `-c` arguments. */
+    readonly settings: ReadonlyArray<string>;
+}
+/**
+ * A harness-owned `GIT_DIR` over one workspace's objects.
+ *
+ * @category models
+ * @since 1.0.0
+ */
+export interface Shadow {
+    readonly path: string;
+    readonly repository: Repository;
+    /** Runs host git with the shadow as `GIT_DIR`, and `workTree` as its work tree when given. */
+    readonly git: (args: ReadonlyArray<string>, workTree?: string) => Effect.Effect<Exec.ExecResult, StdError.StdError, ChildProcessSpawner>;
+    /**
+     * Copies the workspace index into the shadow, with its modification time, so
+     * the shadow never writes the agent's own.
+     *
+     * The time is part of what git reads. It trusts an entry's recorded stat
+     * unless the entry is at least as new as the index file, in whole seconds;
+     * a copy stamped at the moment of copying made every entry look older, and a
+     * same-size edit from the second the index was written was recorded as the
+     * committed bytes (#3431). The time is taken before the bytes are read, so
+     * an index rewritten meanwhile leaves the copy looking older, never newer.
+     */
+    readonly adoptIndex: Effect.Effect<void, StdError.StdError, ChildProcessSpawner>;
+}
+/**
+ * Internal Git operations used by both checkpoint and baseline leases.
+ *
+ * @category utilities
+ * @since 1.0.0
+ */
+export declare const GitWorktree: {
+    config: (repository: Pick<Repository, "common">, args: ReadonlyArray<string>) => Effect.Effect<Exec.ExecResult, StdError.StdError, ChildProcessSpawner>;
+    git: (root: string, args: ReadonlyArray<string>) => Effect.Effect<Exec.ExecResult, StdError.StdError, ChildProcessSpawner>;
+    open: (root: string) => Effect.Effect<Repository, StdError.StdError, ChildProcessSpawner>;
+    resolveCommit: (root: string, refs: ReadonlyArray<string>) => Effect.Effect<{
+        ref: string;
+        commit: string;
+    }, StdError.StdError, ChildProcessSpawner>;
+    withDetachedWorktree: <A, E, R>(repository: Repository, prefix: string, commit: string, use: (host: string) => Effect.Effect<A, E, R>) => Effect.Effect<A, E | StdError.StdError, R | ChildProcessSpawner>;
+    withShadow: <A, E, R>(root: string | Repository, use: (shadow: Shadow) => Effect.Effect<A, E, R>) => Effect.Effect<A, E | StdError.StdError, R | ChildProcessSpawner>;
+};
+//# sourceMappingURL=GitWorktree.d.ts.map

package/dist/esm/internal/GitWorktree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitWorktree.d.ts","sourceRoot":"","sources":["../../../src/internal/GitWorktree.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AAC7E,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAC1C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AA+CjC;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,gEAAgE;IAChE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,2BAA2B;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;CACzC;AAuDD;;;;;GAKG;AACH,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,8FAA8F;IAC9F,QAAQ,CAAC,GAAG,EAAE,CACZ,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAC3B,QAAQ,CAAC,EAAE,MAAM,KACd,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAA;IAC3E;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAA;CACjF;AAmSD;;;;;GAKG;AACH,eAAO,MAAM,WAAW;yBA/WI,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,aAAa,CAAC,MAAM,CAAC;gBA1ChE,MAAM,QAAQ,aAAa,CAAC,MAAM,CAAC;iBA6ClC,MAAM,KAAG,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;0BA3CjE,MAAM,QAAQ,aAAa,CAAC,MAAM,CAAC;;;;2BAmXlC,CAAC,EAAE,CAAC,EAAE,CAAC,cACvB,UAAU,UACd,MAAM,UACN,MAAM,OACT,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,mBAAmB,CAAC;iBA3N/C,CAAC,EAAE,CAAC,EAAE,CAAC,QACnB,MAAM,GAAG,UAAU,OACpB,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,mBAAmB,CAAC;CAuP8B,CAAA"}

package/dist/esm/internal/GitWorktree.js

@@ -0,0 +1,352 @@
+/**
+ * Detached checkouts shared by checkpoint reads and baseline test runs.
+ *
+ * ## Host git never reads a file the agent can write that names a program
+ *
+ * The repository is the workspace's, and an agent can write its `.git`: a
+ * containerised agent writes it through the bind mount. Git reads programs out
+ * of that directory in more places than any list of `-c` overrides can close.
+ * Hooks and `core.fsmonitor` can be overridden, but a filter driver
+ * (`filter.<name>.clean`/`.smudge` in `.git/config`, selected by
+ * `.git/info/attributes`) cannot: git has no switch that ignores repository
+ * config or `$GIT_DIR/info/attributes`, and overriding each driver by name
+ * races an agent that keeps rewriting the file.
+ *
+ * So the git that records and checks out trees runs against a **shadow**
+ * `GIT_DIR`: a bare repository this module creates under the host's temporary
+ * directory for one operation and deletes afterwards. Its config, hooks and
+ * `info/attributes` are the ones `git init --template=` writes, which is none.
+ * `GIT_CONFIG_NOSYSTEM` and `GIT_CONFIG_GLOBAL=/dev/null` drop the host's own
+ * config files too, so the only settings are the ones on the command line.
+ * `GIT_OBJECT_DIRECTORY` points at the workspace's object store, because objects
+ * are data: git hashes and inflates them and never runs anything they say.
+ *
+ * What still touches the workspace repository is plain data:
+ *
+ * - `rev-parse` in the workspace, which resolves refs and paths and runs no
+ *   hook, filter, fsmonitor or other configured program;
+ * - `git config --file <workspace config>`, which reads or writes that one file
+ *   and follows no `include`;
+ * - a copy of the workspace index into the shadow, so the recorded tree holds
+ *   what the agent staged without the harness writing the agent's index; and
+ * - a handful of `core.*` settings that change how bytes are hashed
+ *   ({@link dataSettings}), each accepted only as a bare word.
+ *
+ * A materialized checkout gets its own standalone `.git`, written by this
+ * module as files, so a container can still run git in it: `HEAD` names the
+ * commit, `objects/info/alternates` points back at the workspace's objects by a
+ * relative path, and `index` is the one the checkout was written from. Host git
+ * never uses that directory; it is the container's.
+ *
+ * @since 1.0.0
+ */
+import { Effect } from "effect";
+import * as StdError from "../StdError.js";
+import * as Exec from "./Exec.js";
+const failed = (message, code = "command_failed") => new StdError.StdError({ code, message });
+/**
+ * Settings that stop the workspace repository from naming a program for the
+ * `rev-parse` this module runs in it. `rev-parse` runs none of them; these keep
+ * that true if a later call is added beside it.
+ */
+const hostGitSettings = ["-c", "core.hooksPath=/dev/null", "-c", "core.fsmonitor=false"];
+/** Host config files git would otherwise read, removed from every shadow command. */
+const isolated = { GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_GLOBAL: "/dev/null" };
+/**
+ * Workspace settings that change how a tree is hashed or compared, carried
+ * onto the shadow so a checkpoint records what the agent's own git would.
+ * None of them names a program.
+ */
+const dataSettings = /^core\.(autocrlf|eol|safecrlf|filemode|symlinks|ignorecase|precomposeunicode)$/;
+/** A setting value this module will repeat to git: a bare word, never a command. */
+const bareWord = /^[A-Za-z0-9_-]+$/;
+const run = (command, args, env) => Exec.exec(command, { args, ...(env === undefined ? {} : { env }) }).pipe(Effect.mapError((error) => failed(`${command} could not run: ${error.message}`)));
+/**
+ * Runs host git in the workspace at `root`, for `rev-parse` only.
+ *
+ * @category utilities
+ * @since 1.0.0
+ */
+const git = (root, args) => run("git", [...hostGitSettings, "-C", root, ...args]);
+const resolveCommit = (root, refs) => Effect.gen(function* () {
+    for (const ref of refs) {
+        const answer = yield* git(root, ["rev-parse", "--verify", "--quiet", `${ref}^{commit}`]);
+        const commit = answer.stdout.trim();
+        if (answer.exitCode === 0 && commit !== "")
+            return { ref, commit };
+    }
+    return yield* Effect.fail(failed(`No commit resolves from ${refs.join(" or ")} in ${root}.`, "not_found"));
+});
+/**
+ * Reads or writes the workspace's config file as a file, never as a repository.
+ *
+ * `--git-dir=/dev/null` stops git discovering any repository around the host's
+ * working directory, and `--file` reads the one file without `include`s.
+ *
+ * @category utilities
+ * @since 1.0.0
+ */
+const config = (repository, args) => run("git", ["--git-dir=/dev/null", "config", "--file", `${repository.common}/config`, ...args], isolated);
+const open = (root) => Effect.gen(function* () {
+    const stripped = root.replace(/\/+$/, "");
+    const answer = yield* git(stripped, [
+        "rev-parse",
+        "--path-format=absolute",
+        "--show-toplevel",
+        "--git-common-dir",
+        "--git-path",
+        "index",
+        "--show-object-format"
+    ]);
+    const [toplevel, common, index, objectFormat] = answer.stdout.split("\n").map((line) => line.trim());
+    if (answer.exitCode !== 0 || toplevel === undefined || toplevel === "" || common === undefined || common === "" ||
+        index === undefined || index === "" || objectFormat === undefined || !bareWord.test(objectFormat)) {
+        return yield* Effect.fail(failed(`${stripped} is not a git work tree: ${answer.stderr.trim()}`));
+    }
+    const found = yield* config({ common }, ["--get-regexp", dataSettings.source]);
+    const settings = found.exitCode === 0
+        ? found.stdout.split("\n").flatMap((line) => {
+            const [key, value] = line.trim().split(/\s+/);
+            return key !== undefined && value !== undefined && dataSettings.test(key) && bareWord.test(value)
+                ? ["-c", `${key}=${value}`]
+                : [];
+        })
+        : [];
+    return { root: stripped, toplevel, common, index, objectFormat, settings };
+});
+const temporaryRoot = () => {
+    const configured = globalThis.process?.env?.TMPDIR?.replace(/\/+$/, "");
+    return configured === undefined || configured === "" ? "/tmp" : configured;
+};
+const remove = (path) => run("rm", ["-rf", "--", path]).pipe(Effect.flatMap((removed) => removed.exitCode === 0 ? Effect.void : Effect.fail(failed(removed.stderr.trim()))));
+/** The `adoptIndex` script: `$1` is the workspace index, `$2` the shadow's. */
+const adoptIndexScript = [
+    "set -C",
+    "if [ -e \"$1\" ]",
+    "then : > \"$2.at\" && touch -r \"$1\" -- \"$2.at\" && cat -- \"$1\" > \"$2\" && touch -r \"$2.at\" -- \"$2\" && rm -f -- \"$2.at\"",
+    "fi"
+].join("; ");
+const shadowOf = (repository, path) => ({
+    path,
+    repository,
+    git: (args, workTree) => run("git", [
+        `--git-dir=${path}`,
+        ...(workTree === undefined ? [] : [`--work-tree=${workTree}`]),
+        ...hostGitSettings,
+        ...repository.settings,
+        ...args
+    ], { ...isolated, GIT_OBJECT_DIRECTORY: `${repository.common}/objects` }),
+    adoptIndex: run("sh", [
+        "-c",
+        adoptIndexScript,
+        "sh",
+        repository.index,
+        `${path}/index`
+    ]).pipe(Effect.flatMap((copied) => copied.exitCode === 0
+        ? Effect.void
+        : Effect.fail(failed(`Could not read the workspace index: ${copied.stderr.trim()}`))))
+});
+/**
+ * Runs `use` with a fresh {@link Shadow} over the repository at `root`, and
+ * deletes the shadow however `use` ends.
+ *
+ * @category utilities
+ * @since 1.0.0
+ */
+const withShadow = (root, use) => Effect.gen(function* () {
+    const repository = typeof root === "string" ? yield* open(root) : root;
+    const path = `${temporaryRoot()}/smithers-git-${globalThis.crypto.randomUUID()}`;
+    return yield* Effect.acquireUseRelease(Effect.succeed(path), () => Effect.gen(function* () {
+        const created = yield* run("git", ["init", "--quiet", "--bare", "--template=", `--object-format=${repository.objectFormat}`, path], isolated);
+        if (created.exitCode !== 0) {
+            return yield* Effect.fail(failed(`Could not create a shadow repository: ${created.stderr.trim()}`));
+        }
+        return yield* use(shadowOf(repository, path));
+    }), () => remove(path).pipe(Effect.catch((error) => Effect.logWarning("could not remove a shadow repository").pipe(Effect.annotateLogs({ path, reason: error.message })))));
+});
+/** `to` relative to `from`, both absolute POSIX paths. */
+const relative = (from, to) => {
+    const source = from.split("/").filter((part) => part !== "");
+    const target = to.split("/").filter((part) => part !== "");
+    let shared = 0;
+    while (shared < source.length && shared < target.length && source[shared] === target[shared])
+        shared++;
+    return [...source.slice(shared).map(() => ".."), ...target.slice(shared)].join("/") || ".";
+};
+/**
+ * The config of a checkout's own `.git`, for the container's git.
+ *
+ * Only {@link dataSettings}, already restricted to bare words, reach it.
+ */
+const checkoutConfig = (repository) => {
+    const sha1 = repository.objectFormat === "sha1";
+    const lines = [
+        "[core]",
+        `\trepositoryformatversion = ${sha1 ? 0 : 1}`,
+        "\tbare = false",
+        ...repository.settings.filter((_, index) => index % 2 === 1).map((setting) => {
+            const [key, value] = setting.split("=");
+            return `\t${key?.slice("core.".length)} = ${value}`;
+        }),
+        ...(sha1 ? [] : ["[extensions]", `\tobjectformat = ${repository.objectFormat}`])
+    ];
+    return `${lines.join("\n")}\n`;
+};
+/** Fails with `message` and the command's stderr unless it exited 0. */
+const succeeded = (result, message) => result.exitCode === 0 ? Effect.void : Effect.fail(failed(`${message}: ${result.stderr.trim()}`));
+/**
+ * Measures which staging directory shares the filesystem of the checkout's
+ * parent `$1`: the shadow `$2`, the workspace root's parent `$3`, or the host
+ * cache directory `$4`. Prints one line each for the parent, the shadow, the
+ * root's parent (`unwritable` when the host user cannot create a stage there)
+ * and the cache (empty unless both others missed and it could be created).
+ * `stat -c` is GNU and BusyBox, `stat -f` is BSD; an empty line means neither
+ * answered.
+ */
+const measure = [
+    "set -e",
+    "mkdir -p -- \"$1\"",
+    "dev() { stat -c %d -- \"$1\" 2>/dev/null || stat -f %d -- \"$1\" 2>/dev/null || echo; }",
+    "t=$(dev \"$1\")",
+    "s=$(dev \"$2\")",
+    "if [ -w \"$3\" ]; then b=$(dev \"$3\"); else b=unwritable; fi",
+    "c=",
+    "if [ -n \"$t\" ] && [ \"$t\" != \"$s\" ] && [ \"$t\" != \"$b\" ] && [ -n \"$4\" ] && mkdir -p -m 700 -- \"$4\" 2>/dev/null; then c=$(dev \"$4\"); fi",
+    "printf '%s\\n' \"$t\" \"$s\" \"$b\" \"$c\""
+].join("; ");
+/**
+ * The host user's cache directory for checkout stages: `$XDG_CACHE_HOME`, or
+ * `~/.cache`, under `smithers`. Empty when neither is an absolute path.
+ */
+const cacheRoot = () => {
+    const env = globalThis.process?.env;
+    const xdg = env?.XDG_CACHE_HOME?.replace(/\/+$/, "");
+    if (xdg !== undefined && xdg.startsWith("/"))
+        return `${xdg}/smithers`;
+    const home = env?.HOME?.replace(/\/+$/, "");
+    return home !== undefined && home.startsWith("/") ? `${home}/.cache/smithers` : "";
+};
+/**
+ * Moves the staged checkout `$1` into the directory `$2` under the name `$3`
+ * in one `rename`, then proves the directory there is the one that was staged.
+ * The staging directory is on the same filesystem, so `mv` renames and never
+ * copies.
+ *
+ * The shell first enters `$2` by its physical path and refuses unless that
+ * lies under the real path of the workspace root `$4`. The rename then names
+ * the target relative to that directory, so a parent the agent swaps for a
+ * symlink, before or after the check, cannot carry the checkout out of the
+ * workspace.
+ */
+const publish = [
+    "set -e",
+    "root=$(cd -P -- \"$4\" && pwd -P)",
+    "cd -P -- \"$2\"",
+    "here=$(pwd -P)",
+    "case \"$here\" in \"$root\"|\"$root\"/*) ;; *) echo \"$2 resolves to $here, outside the workspace $root\" >&2; exit 1 ;; esac",
+    "if [ -e \"./$3\" ] || [ -L \"./$3\" ]; then echo \"$2/$3 already exists\" >&2; exit 1; fi",
+    "staged=$(ls -di -- \"$1\" | awk '{print $1}')",
+    "mv -- \"$1\" \"./$3\"",
+    "if [ -L \"./$3\" ] || [ ! -d \"./$3\" ]; then echo \"$2/$3 was replaced while it was written\" >&2; exit 1; fi",
+    "moved=$(ls -di -- \"./$3\" | awk '{print $1}')",
+    "if [ \"$staged\" != \"$moved\" ]; then echo \"$2/$3 was replaced while it was written\" >&2; exit 1; fi"
+].join("; ");
+/**
+ * Checks `commit`'s tree out at the new directory `host`, with a standalone
+ * `.git` the container's git can use.
+ *
+ * Host git never writes into an agent-writable directory. The tree and its
+ * `.git` are written into a staging directory the agent cannot reach: inside
+ * the shadow, or, when the host's temporary directory is another filesystem,
+ * beside the workspace root or under the host user's cache directory. One
+ * `rename` then gives the finished directory its name under the workspace. A
+ * path the agent swaps for a symlink cannot redirect a write: a symlink at
+ * `host` fails the call before the rename, and a parent that resolves outside
+ * the workspace root fails it before the rename too.
+ */
+const checkout = (shadow, host, commit) => Effect.gen(function* () {
+    const repository = shadow.repository;
+    const parent = host.slice(0, host.lastIndexOf("/"));
+    const name = host.slice(host.lastIndexOf("/") + 1);
+    const beside = repository.root.slice(0, repository.root.lastIndexOf("/")) || "/";
+    const cache = cacheRoot();
+    const stage = `checkout-${globalThis.crypto.randomUUID()}`;
+    const besideStage = `${beside.replace(/\/+$/, "")}/.smithers-${stage}`;
+    const cacheStage = `${cache}/${stage}`;
+    const measured = yield* run("sh", ["-c", measure, "sh", parent, shadow.path, beside, cache]);
+    yield* succeeded(measured, `Could not check out ${commit}`);
+    const [target, inShadow, besideRoot, inCache] = measured.stdout.split("\n").map((line) => line.trim());
+    const scratch = target === undefined || target === "" || target === inShadow
+        ? undefined
+        : target === besideRoot
+            ? besideStage
+            : target === inCache
+                ? cacheStage
+                : undefined;
+    const base = target === undefined || target === ""
+        ? undefined
+        : target === inShadow
+            ? shadow.path
+            : scratch;
+    if (base === undefined) {
+        const unwritable = besideRoot === "unwritable" ? " (not writable by this user)" : "";
+        return yield* Effect.fail(failed(`Could not check out ${commit}: neither ${shadow.path} nor ${beside}${unwritable} nor ${cache === "" ? "a cache directory" : cache} is on the filesystem of ${parent}`));
+    }
+    const staged = `${base}/${name}`;
+    const objects = relative(`${repository.toplevel}${host.slice(repository.root.length)}/.git/objects`, `${repository.common}/objects`);
+    const write = Effect.gen(function* () {
+        const prepared = yield* run("sh", [
+            "-c",
+            [
+                "set -eC",
+                ...(scratch !== undefined ? ["mkdir -m 700 -- \"$1\""] : []),
+                "mkdir -- \"$2\" \"$2/.git\" \"$2/.git/objects\" \"$2/.git/objects/info\" \"$2/.git/refs\"",
+                "printf '%s\\n' \"$3\" > \"$2/.git/HEAD\"",
+                "printf '%s\\n' \"$4\" > \"$2/.git/objects/info/alternates\"",
+                "printf '%s' \"$5\" > \"$2/.git/config\""
+            ].join("; "),
+            "sh",
+            base,
+            staged,
+            commit,
+            objects,
+            checkoutConfig(repository)
+        ]);
+        yield* succeeded(prepared, `Could not check out ${commit}`);
+        const written = yield* shadow.git(["read-tree", "--reset", "-u", commit], staged);
+        yield* succeeded(written, `Could not check out ${commit}`);
+        const indexed = yield* run("sh", [
+            "-c",
+            "set -C; cat -- \"$1\" > \"$2\"",
+            "sh",
+            `${shadow.path}/index`,
+            `${staged}/.git/index`
+        ]);
+        yield* succeeded(indexed, `Could not check out ${commit}`);
+        const moved = yield* run("sh", ["-c", publish, "sh", staged, parent, name, repository.root]);
+        yield* succeeded(moved, `Could not check out ${commit}`);
+    });
+    return yield* scratch !== undefined
+        ? write.pipe(Effect.ensuring(remove(scratch).pipe(Effect.ignore)))
+        : write;
+});
+const withDetachedWorktree = (repository, prefix, commit, use) => Effect.gen(function* () {
+    // Allocate on execution, including when the same Effect is run twice.
+    // Never remove an existing checkout: another call may still be using it.
+    const host = `${repository.root}/${prefix}-${globalThis.crypto.randomUUID()}`;
+    return yield* Effect.acquireUseRelease(Effect.succeed(host), () => Effect.gen(function* () {
+        yield* withShadow(repository, (shadow) => checkout(shadow, host, commit));
+        return yield* use(host);
+    }), 
+    // A checkout left behind is a stale copy of the repository inside the
+    // workspace. Walks prune it, but the operator must still hear about it.
+    () => remove(host).pipe(Effect.catch((error) => Effect.logWarning("could not remove a scratch checkout").pipe(Effect.annotateLogs({ path: host, reason: error.message })))));
+});
+/**
+ * Internal Git operations used by both checkpoint and baseline leases.
+ *
+ * @category utilities
+ * @since 1.0.0
+ */
+export const GitWorktree = { config, git, open, resolveCommit, withDetachedWorktree, withShadow };
+//# sourceMappingURL=GitWorktree.js.map

package/dist/esm/internal/GitWorktree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitWorktree.js","sourceRoot":"","sources":["../../../src/internal/GitWorktree.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAC1C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,OAAsB,gBAAgB,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;AAEpH;;;;GAIG;AACH,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,sBAAsB,CAAU,CAAA;AAEjG,qFAAqF;AACrF,MAAM,QAAQ,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,iBAAiB,EAAE,WAAW,EAAW,CAAA;AAEtF;;;;GAIG;AACH,MAAM,YAAY,GAAG,gFAAgF,CAAA;AAErG,oFAAoF;AACpF,MAAM,QAAQ,GAAG,kBAAkB,CAAA;AAEnC,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,IAA2B,EAAE,GAAsC,EAAE,EAAE,CACnG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CACtE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,OAAO,mBAAmB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CACjF,CAAA;AAEH;;;;;GAKG;AACH,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAA2B,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;AAEhH,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,IAA2B,EAAE,EAAE,CAClE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC,CAAA;QACxF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;QACnC,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;IACpE,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,2BAA2B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,WAAW,CAAC,CAAC,CAAA;AAC5G,CAAC,CAAC,CAAA;AAuBJ;;;;;;;;GAQG;AACH,MAAM,MAAM,GAAG,CAAC,UAAsC,EAAE,IAA2B,EAAE,EAAE,CACrF,GAAG,CAAC,KAAK,EAAE,CAAC,qBAAqB,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC,MAAM,SAAS,EAAE,GAAG,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAA;AAE3G,MAAM,IAAI,GAAG,CAAC,IAAY,EAAqE,EAAE,CAC/F,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;QAClC,WAAW;QACX,wBAAwB;QACxB,iBAAiB;QACjB,kBAAkB;QAClB,YAAY;QACZ,OAAO;QACP,sBAAsB;KACvB,CAAC,CAAA;IACF,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IACpG,IACE,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;QAC3G,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,EACjG,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,QAAQ,4BAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;IAClG,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,cAAc,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,CAAC;QACnC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC1C,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAC7C,OAAO,GAAG,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;gBAC/F,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;gBAC3B,CAAC,CAAC,EAAE,CAAA;QACR,CAAC,CAAC;QACF,CAAC,CAAC,EAAE,CAAA;IACN,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAA;AAC5E,CAAC,CAAC,CAAA;AAEJ,MAAM,aAAa,GAAG,GAAW,EAAE;IACjC,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACvE,OAAO,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAA;AAC5E,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAC9B,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CACjC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAC/G,CAAA;AA8BH,+EAA+E;AAC/E,MAAM,gBAAgB,GAAG;IACvB,QAAQ;IACR,kBAAkB;IAClB,oIAAoI;IACpI,IAAI;CACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAEZ,MAAM,QAAQ,GAAG,CAAC,UAAsB,EAAE,IAAY,EAAU,EAAE,CAAC,CAAC;IAClE,IAAI;IACJ,UAAU;IACV,GAAG,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CACtB,GAAG,CACD,KAAK,EACL;QACE,aAAa,IAAI,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,QAAQ,EAAE,CAAC,CAAC;QAC9D,GAAG,eAAe;QAClB,GAAG,UAAU,CAAC,QAAQ;QACtB,GAAG,IAAI;KACR,EACD,EAAE,GAAG,QAAQ,EAAE,oBAAoB,EAAE,GAAG,UAAU,CAAC,MAAM,UAAU,EAAE,CACtE;IACH,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE;QACpB,IAAI;QACJ,gBAAgB;QAChB,IAAI;QACJ,UAAU,CAAC,KAAK;QAChB,GAAG,IAAI,QAAQ;KAChB,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,MAAM,CAAC,QAAQ,KAAK,CAAC;QACnB,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,uCAAuC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CACvF,CACF;CACF,CAAC,CAAA;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CACjB,IAAyB,EACzB,GAA+C,EACmB,EAAE,CACpE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtE,MAAM,IAAI,GAAG,GAAG,aAAa,EAAE,iBAAiB,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAA;IAChF,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,iBAAiB,CACpC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EACpB,GAAG,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CACxB,KAAK,EACL,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,mBAAmB,UAAU,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,EAChG,QAAQ,CACT,CAAA;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,yCAAyC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;QACrG,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAA;IAC/C,CAAC,CAAC,EACJ,GAAG,EAAE,CACH,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CACf,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACrB,MAAM,CAAC,UAAU,CAAC,sCAAsC,CAAC,CAAC,IAAI,CAC5D,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CACrD,CACF,CACF,CACJ,CAAA;AACH,CAAC,CAAC,CAAA;AAEJ,0DAA0D;AAC1D,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAU,EAAU,EAAE;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAA;IAC1D,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,EAAE,CAAA;IACtG,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAA;AAC5F,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,cAAc,GAAG,CAAC,UAAsB,EAAU,EAAE;IACxD,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,KAAK,MAAM,CAAA;IAC/C,MAAM,KAAK,GAAG;QACZ,QAAQ;QACR,+BAA+B,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;QAC7C,gBAAgB;QAChB,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;YAC3E,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACvC,OAAO,KAAK,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,EAAE,CAAA;QACrD,CAAC,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,oBAAoB,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;KACjF,CAAA;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAA;AAChC,CAAC,CAAA;AAED,wEAAwE;AACxE,MAAM,SAAS,GAAG,CAAC,MAAuB,EAAE,OAAe,EAAE,EAAE,CAC7D,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;AAElG;;;;;;;;GAQG;AACH,MAAM,OAAO,GAAG;IACd,QAAQ;IACR,oBAAoB;IACpB,yFAAyF;IACzF,iBAAiB;IACjB,iBAAiB;IACjB,+DAA+D;IAC/D,IAAI;IACJ,sJAAsJ;IACtJ,4CAA4C;CAC7C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAEZ;;;GAGG;AACH,MAAM,SAAS,GAAG,GAAW,EAAE;IAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,CAAA;IACnC,MAAM,GAAG,GAAG,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACpD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,GAAG,WAAW,CAAA;IACtE,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC3C,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAA;AACpF,CAAC,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,GAAG;IACd,QAAQ;IACR,mCAAmC;IACnC,iBAAiB;IACjB,gBAAgB;IAChB,+HAA+H;IAC/H,2FAA2F;IAC3F,+CAA+C;IAC/C,uBAAuB;IACvB,gHAAgH;IAChH,gDAAgD;IAChD,yGAAyG;CAC1G,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAEZ;;;;;;;;;;;;GAYG;AACH,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,MAAc,EAAE,EAAE,CAChE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAClD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAA;IAChF,MAAM,KAAK,GAAG,SAAS,EAAE,CAAA;IACzB,MAAM,KAAK,GAAG,YAAY,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAA;IAC1D,MAAM,WAAW,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,KAAK,EAAE,CAAA;IACtE,MAAM,UAAU,GAAG,GAAG,KAAK,IAAI,KAAK,EAAE,CAAA;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;IAC5F,KAAK,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,uBAAuB,MAAM,EAAE,CAAC,CAAA;IAC3D,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IACtG,MAAM,OAAO,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,QAAQ;QAC1E,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,KAAK,UAAU;YACvB,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,MAAM,KAAK,OAAO;gBACpB,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;QAChD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,KAAK,QAAQ;YACrB,CAAC,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC,OAAO,CAAA;IACX,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,UAAU,KAAK,YAAY,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,EAAE,CAAA;QACpF,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CACJ,uBAAuB,MAAM,aAAa,MAAM,CAAC,IAAI,QAAQ,MAAM,GAAG,UAAU,QAC9E,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,KACvC,4BAA4B,MAAM,EAAE,CACrC,CACF,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,IAAI,EAAE,CAAA;IAChC,MAAM,OAAO,GAAG,QAAQ,CACtB,GAAG,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAC1E,GAAG,UAAU,CAAC,MAAM,UAAU,CAC/B,CAAA;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE;YAChC,IAAI;YACJ;gBACE,SAAS;gBACT,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,2FAA2F;gBAC3F,0CAA0C;gBAC1C,6DAA6D;gBAC7D,yCAAyC;aAC1C,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,IAAI;YACJ,IAAI;YACJ,MAAM;YACN,MAAM;YACN,OAAO;YACP,cAAc,CAAC,UAAU,CAAC;SAC3B,CAAC,CAAA;QACF,KAAK,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,uBAAuB,MAAM,EAAE,CAAC,CAAA;QAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;QACjF,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,uBAAuB,MAAM,EAAE,CAAC,CAAA;QAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE;YAC/B,IAAI;YACJ,gCAAgC;YAChC,IAAI;YACJ,GAAG,MAAM,CAAC,IAAI,QAAQ;YACtB,GAAG,MAAM,aAAa;SACvB,CAAC,CAAA;QACF,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,uBAAuB,MAAM,EAAE,CAAC,CAAA;QAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;QAC5F,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,uBAAuB,MAAM,EAAE,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IACF,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK,SAAS;QACjC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,KAAK,CAAA;AACX,CAAC,CAAC,CAAA;AAEJ,MAAM,oBAAoB,GAAG,CAC3B,UAAsB,EACtB,MAAc,EACd,MAAc,EACd,GAA6C,EACqB,EAAE,CACpE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,sEAAsE;IACtE,yEAAyE;IACzE,MAAM,IAAI,GAAG,GAAG,UAAU,CAAC,IAAI,IAAI,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAA;IAC7E,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,iBAAiB,CACpC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EACpB,GAAG,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;QACzE,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC,CAAC;IACJ,sEAAsE;IACtE,wEAAwE;IACxE,GAAG,EAAE,CACH,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CACf,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACrB,MAAM,CAAC,UAAU,CAAC,qCAAqC,CAAC,CAAC,IAAI,CAC3D,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAC3D,CACF,CACF,CACJ,CAAA;AACH,CAAC,CAAC,CAAA;AAEJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAA","sourcesContent":["/**\n * Detached checkouts shared by checkpoint reads and baseline test runs.\n *\n * ## Host git never reads a file the agent can write that names a program\n *\n * The repository is the workspace's, and an agent can write its `.git`: a\n * containerised agent writes it through the bind mount. Git reads programs out\n * of that directory in more places than any list of `-c` overrides can close.\n * Hooks and `core.fsmonitor` can be overridden, but a filter driver\n * (`filter.<name>.clean`/`.smudge` in `.git/config`, selected by\n * `.git/info/attributes`) cannot: git has no switch that ignores repository\n * config or `$GIT_DIR/info/attributes`, and overriding each driver by name\n * races an agent that keeps rewriting the file.\n *\n * So the git that records and checks out trees runs against a **shadow**\n * `GIT_DIR`: a bare repository this module creates under the host's temporary\n * directory for one operation and deletes afterwards. Its config, hooks and\n * `info/attributes` are the ones `git init --template=` writes, which is none.\n * `GIT_CONFIG_NOSYSTEM` and `GIT_CONFIG_GLOBAL=/dev/null` drop the host's own\n * config files too, so the only settings are the ones on the command line.\n * `GIT_OBJECT_DIRECTORY` points at the workspace's object store, because objects\n * are data: git hashes and inflates them and never runs anything they say.\n *\n * What still touches the workspace repository is plain data:\n *\n * - `rev-parse` in the workspace, which resolves refs and paths and runs no\n *   hook, filter, fsmonitor or other configured program;\n * - `git config --file <workspace config>`, which reads or writes that one file\n *   and follows no `include`;\n * - a copy of the workspace index into the shadow, so the recorded tree holds\n *   what the agent staged without the harness writing the agent's index; and\n * - a handful of `core.*` settings that change how bytes are hashed\n *   ({@link dataSettings}), each accepted only as a bare word.\n *\n * A materialized checkout gets its own standalone `.git`, written by this\n * module as files, so a container can still run git in it: `HEAD` names the\n * commit, `objects/info/alternates` points back at the workspace's objects by a\n * relative path, and `index` is the one the checkout was written from. Host git\n * never uses that directory; it is the container's.\n *\n * @since 1.0.0\n */\n\nimport type { ChildProcessSpawner } from \"@smthrs/kernel/ChildProcessSpawner\"\nimport { Effect } from \"effect\"\nimport * as StdError from \"../StdError.ts\"\nimport * as Exec from \"./Exec.ts\"\n\nconst failed = (message: string, code: StdError.Code = \"command_failed\") => new StdError.StdError({ code, message })\n\n/**\n * Settings that stop the workspace repository from naming a program for the\n * `rev-parse` this module runs in it. `rev-parse` runs none of them; these keep\n * that true if a later call is added beside it.\n */\nconst hostGitSettings = [\"-c\", \"core.hooksPath=/dev/null\", \"-c\", \"core.fsmonitor=false\"] as const\n\n/** Host config files git would otherwise read, removed from every shadow command. */\nconst isolated = { GIT_CONFIG_NOSYSTEM: \"1\", GIT_CONFIG_GLOBAL: \"/dev/null\" } as const\n\n/**\n * Workspace settings that change how a tree is hashed or compared, carried\n * onto the shadow so a checkpoint records what the agent's own git would.\n * None of them names a program.\n */\nconst dataSettings = /^core\\.(autocrlf|eol|safecrlf|filemode|symlinks|ignorecase|precomposeunicode)$/\n\n/** A setting value this module will repeat to git: a bare word, never a command. */\nconst bareWord = /^[A-Za-z0-9_-]+$/\n\nconst run = (command: string, args: ReadonlyArray<string>, env?: Readonly<Record<string, string>>) =>\n  Exec.exec(command, { args, ...(env === undefined ? {} : { env }) }).pipe(\n    Effect.mapError((error) => failed(`${command} could not run: ${error.message}`))\n  )\n\n/**\n * Runs host git in the workspace at `root`, for `rev-parse` only.\n *\n * @category utilities\n * @since 1.0.0\n */\nconst git = (root: string, args: ReadonlyArray<string>) => run(\"git\", [...hostGitSettings, \"-C\", root, ...args])\n\nconst resolveCommit = (root: string, refs: ReadonlyArray<string>) =>\n  Effect.gen(function*() {\n    for (const ref of refs) {\n      const answer = yield* git(root, [\"rev-parse\", \"--verify\", \"--quiet\", `${ref}^{commit}`])\n      const commit = answer.stdout.trim()\n      if (answer.exitCode === 0 && commit !== \"\") return { ref, commit }\n    }\n    return yield* Effect.fail(failed(`No commit resolves from ${refs.join(\" or \")} in ${root}.`, \"not_found\"))\n  })\n\n/**\n * Where one workspace repository keeps what the shadow needs, as its own git\n * reports it.\n *\n * @category models\n * @since 1.0.0\n */\nexport interface Repository {\n  /** The root the caller named, without a trailing slash. */\n  readonly root: string\n  /** The same directory, as git canonicalizes it. */\n  readonly toplevel: string\n  /** The common git directory, which holds config and objects. */\n  readonly common: string\n  /** The workspace index. */\n  readonly index: string\n  readonly objectFormat: string\n  /** {@link dataSettings} as `-c` arguments. */\n  readonly settings: ReadonlyArray<string>\n}\n\n/**\n * Reads or writes the workspace's config file as a file, never as a repository.\n *\n * `--git-dir=/dev/null` stops git discovering any repository around the host's\n * working directory, and `--file` reads the one file without `include`s.\n *\n * @category utilities\n * @since 1.0.0\n */\nconst config = (repository: Pick<Repository, \"common\">, args: ReadonlyArray<string>) =>\n  run(\"git\", [\"--git-dir=/dev/null\", \"config\", \"--file\", `${repository.common}/config`, ...args], isolated)\n\nconst open = (root: string): Effect.Effect<Repository, StdError.StdError, ChildProcessSpawner> =>\n  Effect.gen(function*() {\n    const stripped = root.replace(/\\/+$/, \"\")\n    const answer = yield* git(stripped, [\n      \"rev-parse\",\n      \"--path-format=absolute\",\n      \"--show-toplevel\",\n      \"--git-common-dir\",\n      \"--git-path\",\n      \"index\",\n      \"--show-object-format\"\n    ])\n    const [toplevel, common, index, objectFormat] = answer.stdout.split(\"\\n\").map((line) => line.trim())\n    if (\n      answer.exitCode !== 0 || toplevel === undefined || toplevel === \"\" || common === undefined || common === \"\" ||\n      index === undefined || index === \"\" || objectFormat === undefined || !bareWord.test(objectFormat)\n    ) {\n      return yield* Effect.fail(failed(`${stripped} is not a git work tree: ${answer.stderr.trim()}`))\n    }\n    const found = yield* config({ common }, [\"--get-regexp\", dataSettings.source])\n    const settings = found.exitCode === 0\n      ? found.stdout.split(\"\\n\").flatMap((line) => {\n        const [key, value] = line.trim().split(/\\s+/)\n        return key !== undefined && value !== undefined && dataSettings.test(key) && bareWord.test(value)\n          ? [\"-c\", `${key}=${value}`]\n          : []\n      })\n      : []\n    return { root: stripped, toplevel, common, index, objectFormat, settings }\n  })\n\nconst temporaryRoot = (): string => {\n  const configured = globalThis.process?.env?.TMPDIR?.replace(/\\/+$/, \"\")\n  return configured === undefined || configured === \"\" ? \"/tmp\" : configured\n}\n\nconst remove = (path: string) =>\n  run(\"rm\", [\"-rf\", \"--\", path]).pipe(\n    Effect.flatMap((removed) => removed.exitCode === 0 ? Effect.void : Effect.fail(failed(removed.stderr.trim())))\n  )\n\n/**\n * A harness-owned `GIT_DIR` over one workspace's objects.\n *\n * @category models\n * @since 1.0.0\n */\nexport interface Shadow {\n  readonly path: string\n  readonly repository: Repository\n  /** Runs host git with the shadow as `GIT_DIR`, and `workTree` as its work tree when given. */\n  readonly git: (\n    args: ReadonlyArray<string>,\n    workTree?: string\n  ) => Effect.Effect<Exec.ExecResult, StdError.StdError, ChildProcessSpawner>\n  /**\n   * Copies the workspace index into the shadow, with its modification time, so\n   * the shadow never writes the agent's own.\n   *\n   * The time is part of what git reads. It trusts an entry's recorded stat\n   * unless the entry is at least as new as the index file, in whole seconds;\n   * a copy stamped at the moment of copying made every entry look older, and a\n   * same-size edit from the second the index was written was recorded as the\n   * committed bytes (#3431). The time is taken before the bytes are read, so\n   * an index rewritten meanwhile leaves the copy looking older, never newer.\n   */\n  readonly adoptIndex: Effect.Effect<void, StdError.StdError, ChildProcessSpawner>\n}\n\n/** The `adoptIndex` script: `$1` is the workspace index, `$2` the shadow's. */\nconst adoptIndexScript = [\n  \"set -C\",\n  \"if [ -e \\\"$1\\\" ]\",\n  \"then : > \\\"$2.at\\\" && touch -r \\\"$1\\\" -- \\\"$2.at\\\" && cat -- \\\"$1\\\" > \\\"$2\\\" && touch -r \\\"$2.at\\\" -- \\\"$2\\\" && rm -f -- \\\"$2.at\\\"\",\n  \"fi\"\n].join(\"; \")\n\nconst shadowOf = (repository: Repository, path: string): Shadow => ({\n  path,\n  repository,\n  git: (args, workTree) =>\n    run(\n      \"git\",\n      [\n        `--git-dir=${path}`,\n        ...(workTree === undefined ? [] : [`--work-tree=${workTree}`]),\n        ...hostGitSettings,\n        ...repository.settings,\n        ...args\n      ],\n      { ...isolated, GIT_OBJECT_DIRECTORY: `${repository.common}/objects` }\n    ),\n  adoptIndex: run(\"sh\", [\n    \"-c\",\n    adoptIndexScript,\n    \"sh\",\n    repository.index,\n    `${path}/index`\n  ]).pipe(\n    Effect.flatMap((copied) =>\n      copied.exitCode === 0\n        ? Effect.void\n        : Effect.fail(failed(`Could not read the workspace index: ${copied.stderr.trim()}`))\n    )\n  )\n})\n\n/**\n * Runs `use` with a fresh {@link Shadow} over the repository at `root`, and\n * deletes the shadow however `use` ends.\n *\n * @category utilities\n * @since 1.0.0\n */\nconst withShadow = <A, E, R>(\n  root: string | Repository,\n  use: (shadow: Shadow) => Effect.Effect<A, E, R>\n): Effect.Effect<A, E | StdError.StdError, R | ChildProcessSpawner> =>\n  Effect.gen(function*() {\n    const repository = typeof root === \"string\" ? yield* open(root) : root\n    const path = `${temporaryRoot()}/smithers-git-${globalThis.crypto.randomUUID()}`\n    return yield* Effect.acquireUseRelease(\n      Effect.succeed(path),\n      () =>\n        Effect.gen(function*() {\n          const created = yield* run(\n            \"git\",\n            [\"init\", \"--quiet\", \"--bare\", \"--template=\", `--object-format=${repository.objectFormat}`, path],\n            isolated\n          )\n          if (created.exitCode !== 0) {\n            return yield* Effect.fail(failed(`Could not create a shadow repository: ${created.stderr.trim()}`))\n          }\n          return yield* use(shadowOf(repository, path))\n        }),\n      () =>\n        remove(path).pipe(\n          Effect.catch((error) =>\n            Effect.logWarning(\"could not remove a shadow repository\").pipe(\n              Effect.annotateLogs({ path, reason: error.message })\n            )\n          )\n        )\n    )\n  })\n\n/** `to` relative to `from`, both absolute POSIX paths. */\nconst relative = (from: string, to: string): string => {\n  const source = from.split(\"/\").filter((part) => part !== \"\")\n  const target = to.split(\"/\").filter((part) => part !== \"\")\n  let shared = 0\n  while (shared < source.length && shared < target.length && source[shared] === target[shared]) shared++\n  return [...source.slice(shared).map(() => \"..\"), ...target.slice(shared)].join(\"/\") || \".\"\n}\n\n/**\n * The config of a checkout's own `.git`, for the container's git.\n *\n * Only {@link dataSettings}, already restricted to bare words, reach it.\n */\nconst checkoutConfig = (repository: Repository): string => {\n  const sha1 = repository.objectFormat === \"sha1\"\n  const lines = [\n    \"[core]\",\n    `\\trepositoryformatversion = ${sha1 ? 0 : 1}`,\n    \"\\tbare = false\",\n    ...repository.settings.filter((_, index) => index % 2 === 1).map((setting) => {\n      const [key, value] = setting.split(\"=\")\n      return `\\t${key?.slice(\"core.\".length)} = ${value}`\n    }),\n    ...(sha1 ? [] : [\"[extensions]\", `\\tobjectformat = ${repository.objectFormat}`])\n  ]\n  return `${lines.join(\"\\n\")}\\n`\n}\n\n/** Fails with `message` and the command's stderr unless it exited 0. */\nconst succeeded = (result: Exec.ExecResult, message: string) =>\n  result.exitCode === 0 ? Effect.void : Effect.fail(failed(`${message}: ${result.stderr.trim()}`))\n\n/**\n * Measures which staging directory shares the filesystem of the checkout's\n * parent `$1`: the shadow `$2`, the workspace root's parent `$3`, or the host\n * cache directory `$4`. Prints one line each for the parent, the shadow, the\n * root's parent (`unwritable` when the host user cannot create a stage there)\n * and the cache (empty unless both others missed and it could be created).\n * `stat -c` is GNU and BusyBox, `stat -f` is BSD; an empty line means neither\n * answered.\n */\nconst measure = [\n  \"set -e\",\n  \"mkdir -p -- \\\"$1\\\"\",\n  \"dev() { stat -c %d -- \\\"$1\\\" 2>/dev/null || stat -f %d -- \\\"$1\\\" 2>/dev/null || echo; }\",\n  \"t=$(dev \\\"$1\\\")\",\n  \"s=$(dev \\\"$2\\\")\",\n  \"if [ -w \\\"$3\\\" ]; then b=$(dev \\\"$3\\\"); else b=unwritable; fi\",\n  \"c=\",\n  \"if [ -n \\\"$t\\\" ] && [ \\\"$t\\\" != \\\"$s\\\" ] && [ \\\"$t\\\" != \\\"$b\\\" ] && [ -n \\\"$4\\\" ] && mkdir -p -m 700 -- \\\"$4\\\" 2>/dev/null; then c=$(dev \\\"$4\\\"); fi\",\n  \"printf '%s\\\\n' \\\"$t\\\" \\\"$s\\\" \\\"$b\\\" \\\"$c\\\"\"\n].join(\"; \")\n\n/**\n * The host user's cache directory for checkout stages: `$XDG_CACHE_HOME`, or\n * `~/.cache`, under `smithers`. Empty when neither is an absolute path.\n */\nconst cacheRoot = (): string => {\n  const env = globalThis.process?.env\n  const xdg = env?.XDG_CACHE_HOME?.replace(/\\/+$/, \"\")\n  if (xdg !== undefined && xdg.startsWith(\"/\")) return `${xdg}/smithers`\n  const home = env?.HOME?.replace(/\\/+$/, \"\")\n  return home !== undefined && home.startsWith(\"/\") ? `${home}/.cache/smithers` : \"\"\n}\n\n/**\n * Moves the staged checkout `$1` into the directory `$2` under the name `$3`\n * in one `rename`, then proves the directory there is the one that was staged.\n * The staging directory is on the same filesystem, so `mv` renames and never\n * copies.\n *\n * The shell first enters `$2` by its physical path and refuses unless that\n * lies under the real path of the workspace root `$4`. The rename then names\n * the target relative to that directory, so a parent the agent swaps for a\n * symlink, before or after the check, cannot carry the checkout out of the\n * workspace.\n */\nconst publish = [\n  \"set -e\",\n  \"root=$(cd -P -- \\\"$4\\\" && pwd -P)\",\n  \"cd -P -- \\\"$2\\\"\",\n  \"here=$(pwd -P)\",\n  \"case \\\"$here\\\" in \\\"$root\\\"|\\\"$root\\\"/*) ;; *) echo \\\"$2 resolves to $here, outside the workspace $root\\\" >&2; exit 1 ;; esac\",\n  \"if [ -e \\\"./$3\\\" ] || [ -L \\\"./$3\\\" ]; then echo \\\"$2/$3 already exists\\\" >&2; exit 1; fi\",\n  \"staged=$(ls -di -- \\\"$1\\\" | awk '{print $1}')\",\n  \"mv -- \\\"$1\\\" \\\"./$3\\\"\",\n  \"if [ -L \\\"./$3\\\" ] || [ ! -d \\\"./$3\\\" ]; then echo \\\"$2/$3 was replaced while it was written\\\" >&2; exit 1; fi\",\n  \"moved=$(ls -di -- \\\"./$3\\\" | awk '{print $1}')\",\n  \"if [ \\\"$staged\\\" != \\\"$moved\\\" ]; then echo \\\"$2/$3 was replaced while it was written\\\" >&2; exit 1; fi\"\n].join(\"; \")\n\n/**\n * Checks `commit`'s tree out at the new directory `host`, with a standalone\n * `.git` the container's git can use.\n *\n * Host git never writes into an agent-writable directory. The tree and its\n * `.git` are written into a staging directory the agent cannot reach: inside\n * the shadow, or, when the host's temporary directory is another filesystem,\n * beside the workspace root or under the host user's cache directory. One\n * `rename` then gives the finished directory its name under the workspace. A\n * path the agent swaps for a symlink cannot redirect a write: a symlink at\n * `host` fails the call before the rename, and a parent that resolves outside\n * the workspace root fails it before the rename too.\n */\nconst checkout = (shadow: Shadow, host: string, commit: string) =>\n  Effect.gen(function*() {\n    const repository = shadow.repository\n    const parent = host.slice(0, host.lastIndexOf(\"/\"))\n    const name = host.slice(host.lastIndexOf(\"/\") + 1)\n    const beside = repository.root.slice(0, repository.root.lastIndexOf(\"/\")) || \"/\"\n    const cache = cacheRoot()\n    const stage = `checkout-${globalThis.crypto.randomUUID()}`\n    const besideStage = `${beside.replace(/\\/+$/, \"\")}/.smithers-${stage}`\n    const cacheStage = `${cache}/${stage}`\n    const measured = yield* run(\"sh\", [\"-c\", measure, \"sh\", parent, shadow.path, beside, cache])\n    yield* succeeded(measured, `Could not check out ${commit}`)\n    const [target, inShadow, besideRoot, inCache] = measured.stdout.split(\"\\n\").map((line) => line.trim())\n    const scratch = target === undefined || target === \"\" || target === inShadow\n      ? undefined\n      : target === besideRoot\n      ? besideStage\n      : target === inCache\n      ? cacheStage\n      : undefined\n    const base = target === undefined || target === \"\"\n      ? undefined\n      : target === inShadow\n      ? shadow.path\n      : scratch\n    if (base === undefined) {\n      const unwritable = besideRoot === \"unwritable\" ? \" (not writable by this user)\" : \"\"\n      return yield* Effect.fail(\n        failed(\n          `Could not check out ${commit}: neither ${shadow.path} nor ${beside}${unwritable} nor ${\n            cache === \"\" ? \"a cache directory\" : cache\n          } is on the filesystem of ${parent}`\n        )\n      )\n    }\n    const staged = `${base}/${name}`\n    const objects = relative(\n      `${repository.toplevel}${host.slice(repository.root.length)}/.git/objects`,\n      `${repository.common}/objects`\n    )\n    const write = Effect.gen(function*() {\n      const prepared = yield* run(\"sh\", [\n        \"-c\",\n        [\n          \"set -eC\",\n          ...(scratch !== undefined ? [\"mkdir -m 700 -- \\\"$1\\\"\"] : []),\n          \"mkdir -- \\\"$2\\\" \\\"$2/.git\\\" \\\"$2/.git/objects\\\" \\\"$2/.git/objects/info\\\" \\\"$2/.git/refs\\\"\",\n          \"printf '%s\\\\n' \\\"$3\\\" > \\\"$2/.git/HEAD\\\"\",\n          \"printf '%s\\\\n' \\\"$4\\\" > \\\"$2/.git/objects/info/alternates\\\"\",\n          \"printf '%s' \\\"$5\\\" > \\\"$2/.git/config\\\"\"\n        ].join(\"; \"),\n        \"sh\",\n        base,\n        staged,\n        commit,\n        objects,\n        checkoutConfig(repository)\n      ])\n      yield* succeeded(prepared, `Could not check out ${commit}`)\n      const written = yield* shadow.git([\"read-tree\", \"--reset\", \"-u\", commit], staged)\n      yield* succeeded(written, `Could not check out ${commit}`)\n      const indexed = yield* run(\"sh\", [\n        \"-c\",\n        \"set -C; cat -- \\\"$1\\\" > \\\"$2\\\"\",\n        \"sh\",\n        `${shadow.path}/index`,\n        `${staged}/.git/index`\n      ])\n      yield* succeeded(indexed, `Could not check out ${commit}`)\n      const moved = yield* run(\"sh\", [\"-c\", publish, \"sh\", staged, parent, name, repository.root])\n      yield* succeeded(moved, `Could not check out ${commit}`)\n    })\n    return yield* scratch !== undefined\n      ? write.pipe(Effect.ensuring(remove(scratch).pipe(Effect.ignore)))\n      : write\n  })\n\nconst withDetachedWorktree = <A, E, R>(\n  repository: Repository,\n  prefix: string,\n  commit: string,\n  use: (host: string) => Effect.Effect<A, E, R>\n): Effect.Effect<A, E | StdError.StdError, R | ChildProcessSpawner> =>\n  Effect.gen(function*() {\n    // Allocate on execution, including when the same Effect is run twice.\n    // Never remove an existing checkout: another call may still be using it.\n    const host = `${repository.root}/${prefix}-${globalThis.crypto.randomUUID()}`\n    return yield* Effect.acquireUseRelease(\n      Effect.succeed(host),\n      () =>\n        Effect.gen(function*() {\n          yield* withShadow(repository, (shadow) => checkout(shadow, host, commit))\n          return yield* use(host)\n        }),\n      // A checkout left behind is a stale copy of the repository inside the\n      // workspace. Walks prune it, but the operator must still hear about it.\n      () =>\n        remove(host).pipe(\n          Effect.catch((error) =>\n            Effect.logWarning(\"could not remove a scratch checkout\").pipe(\n              Effect.annotateLogs({ path: host, reason: error.message })\n            )\n          )\n        )\n    )\n  })\n\n/**\n * Internal Git operations used by both checkpoint and baseline leases.\n *\n * @category utilities\n * @since 1.0.0\n */\nexport const GitWorktree = { config, git, open, resolveCommit, withDetachedWorktree, withShadow }\n"]}