agenticreplay 0.1.0 → 0.1.2

package/node_modules/@agenticreplay/fs-capture/dist/capture.js

@@ -0,0 +1,147 @@
+import { realpath } from 'node:fs/promises';
+import { isAbsolute, join, relative, sep } from 'node:path';
+import { runGit } from './git.js';
+import { ShadowIndex } from './shadow.js';
+/**
+ * Turn-level workspace capture for a run.
+ *
+ * One snapshot per model turn rather than a filesystem watcher: a watcher races the agent and
+ * loses writes it never saw, while a snapshot is whatever the tree actually was at the point the
+ * turn ended.
+ */
+export class FsCapture {
+    runDir;
+    cwd;
+    shadow;
+    previousTree;
+    lastTurn = -1;
+    constructor(runDir, cwd, shadow) {
+        this.runDir = runDir;
+        this.cwd = cwd;
+        this.shadow = shadow;
+    }
+    /** Spec §1: the shadow object store lives at `<run_dir>/fs`. */
+    static async start(opts) {
+        const shadow = await ShadowIndex.create({
+            gitDir: join(opts.runDir, 'fs'),
+            workTree: opts.cwd,
+            ...(opts.forced === undefined ? {} : { forced: opts.forced }),
+        });
+        return new FsCapture(opts.runDir, opts.cwd, shadow);
+    }
+    static async isAvailable() {
+        return ShadowIndex.isAvailable();
+    }
+    async snapshotTurn(turn) {
+        if (!Number.isInteger(turn) || turn < 0) {
+            throw new Error(`turn must be a non-negative integer, got ${turn}`);
+        }
+        if (turn < this.lastTurn) {
+            throw new Error(`turn ${turn} is before the last snapshotted turn ${this.lastTurn}`);
+        }
+        const tree = await this.shadow.snapshot();
+        const previous = this.previousTree;
+        const changes = previous === undefined ? [] : await this.shadow.diff(previous, tree);
+        this.previousTree = tree;
+        this.lastTurn = turn;
+        const skipped = this.shadow.skippedGitlinks;
+        const uncommitted = this.shadow.uncommittedNested;
+        const inside = this.shadow.forcedInsideNested;
+        return {
+            tree,
+            changes,
+            firstSnapshot: previous === undefined,
+            ...(skipped.length === 0 ? {} : { skippedGitlinks: skipped }),
+            ...(uncommitted.length === 0 ? {} : { uncommittedNested: uncommitted }),
+            ...(inside.length === 0 ? {} : { forcedInsideNested: inside }),
+        };
+    }
+    currentTree() {
+        return this.previousTree;
+    }
+    async restore(tree, destDir, opts) {
+        await this.shadow.materialize(tree, destDir, opts);
+    }
+    /** See {@link ShadowIndex.gitlinks}: what a restore of this tree would refuse, asked up front. */
+    async gitlinks(tree) {
+        return this.shadow.gitlinks(tree);
+    }
+    /** See {@link ShadowIndex.uncommittedNested}: what no snapshot of this work tree can hold. */
+    get uncommittedNested() {
+        return this.shadow.uncommittedNested;
+    }
+    /** See {@link ShadowIndex.forcedInsideNested}: declared paths no snapshot here can hold. */
+    get forcedInsideNested() {
+        return this.shadow.forcedInsideNested;
+    }
+    /** See {@link ShadowIndex.has}: whether a restore of this tree has anything to restore from. */
+    async hasTree(tree) {
+        return this.shadow.has(tree);
+    }
+    /** See {@link ShadowIndex.files}: the files a restore of this tree would write. */
+    async files(tree) {
+        return this.shadow.files(tree);
+    }
+    /** See {@link ShadowIndex.uncaptured}: what the last snapshot left behind under these paths. */
+    async uncaptured(paths) {
+        return this.shadow.uncaptured(paths);
+    }
+    /**
+     * Provenance for the manifest, read from the *user's* repository rather than the shadow store.
+     * Returns `{}` for anything that is not a readable git repo; a missing head is not an error.
+     */
+    async gitInfo(cwd = this.cwd) {
+        const inside = await runGit(['rev-parse', '--is-inside-work-tree'], { cwd });
+        if (inside.code !== 0 || inside.stdout.trim() !== 'true')
+            return {};
+        const info = {};
+        const head = await runGit(['rev-parse', 'HEAD'], { cwd });
+        if (head.code === 0 && head.stdout.trim() !== '')
+            info.head = head.stdout.trim();
+        // symbolic-ref, not `rev-parse --abbrev-ref`: it reports the branch of an unborn HEAD and
+        // exits non-zero when detached, instead of printing the literal string "HEAD".
+        const branch = await runGit(['symbolic-ref', '--short', '-q', 'HEAD'], { cwd });
+        if (branch.code === 0 && branch.stdout.trim() !== '')
+            info.branch = branch.stdout.trim();
+        const status = await runGit(['status', '--porcelain', ...(await this.statusPathspec(cwd))], {
+            cwd,
+        });
+        if (status.code === 0)
+            info.dirty = status.stdout.trim() !== '';
+        return info;
+    }
+    /**
+     * The run dir usually sits inside the workspace, so without this every run in a clean checkout
+     * would report `dirty: true` because of agenticreplay's own files.
+     *
+     * The whole `.agenticreplay` directory is excluded, not just this run's own directory inside it.
+     * Excluding one run left every *earlier* run counting as an untracked change, so the second
+     * recording in a workspace reported the user's tree dirty — the same failure this exists to
+     * prevent, one run later, and almost nobody records only once.
+     */
+    async statusPathspec(cwd) {
+        const top = await runGit(['rev-parse', '--show-toplevel'], { cwd });
+        if (top.code !== 0)
+            return [];
+        const root = await resolvePath(top.stdout.trim());
+        const run = await resolvePath(this.runDir);
+        const rel = relative(root, run);
+        if (rel === '' || rel.startsWith('..') || isAbsolute(rel))
+            return [];
+        // Cut the path back to its `.agenticreplay` segment rather than assuming a depth, so this keeps working
+        // if the layout under `.agenticreplay` ever changes. No such segment: exclude the run dir alone.
+        const parts = rel.split(sep);
+        const agenticreplayAt = parts.indexOf('.agenticreplay');
+        const exclude = (agenticreplayAt === -1 ? parts : parts.slice(0, agenticreplayAt + 1)).join('/');
+        return ['--', ':/', `:(top,exclude,literal)${exclude}`];
+    }
+}
+async function resolvePath(path) {
+    try {
+        return await realpath(path);
+    }
+    catch {
+        return path;
+    }
+}
+//# sourceMappingURL=capture.js.map

package/node_modules/@agenticreplay/fs-capture/dist/capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.js","sourceRoot":"","sources":["../src/capture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE5D,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAqC1C;;;;;;GAMG;AACH,MAAM,OAAO,SAAS;IAKT;IACA;IACQ;IANX,YAAY,CAAqB;IACjC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAEtB,YACW,MAAc,EACd,GAAW,EACH,MAAmB;QAF3B,WAAM,GAAN,MAAM,CAAQ;QACd,QAAG,GAAH,GAAG,CAAQ;QACH,WAAM,GAAN,MAAM,CAAa;IACnC,CAAC;IAEJ,gEAAgE;IAChE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAsB;QACvC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC;YACtC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;YAC/B,QAAQ,EAAE,IAAI,CAAC,GAAG;YAClB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,WAAW;QACtB,OAAO,WAAW,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,wCAAwC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrF,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAC9C,OAAO;YACL,IAAI;YACJ,OAAO;YACP,aAAa,EAAE,QAAQ,KAAK,SAAS;YACrC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;YAC7D,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC;YACvE,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC;SAC/D,CAAC;IACJ,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,OAAe,EAAE,IAAyB;QACpE,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,8FAA8F;IAC9F,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;IACvC,CAAC;IAED,4FAA4F;IAC5F,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;IACxC,CAAC;IAED,gGAAgG;IAChG,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,KAAK,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,gGAAgG;IAChG,KAAK,CAAC,UAAU,CAAC,KAAwB;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,MAAc,IAAI,CAAC,GAAG;QAClC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7E,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM;YAAE,OAAO,EAAE,CAAC;QAEpE,MAAM,IAAI,GAAY,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjF,0FAA0F;QAC1F,+EAA+E;QAC/E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAChF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACzF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YAC1F,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,cAAc,CAAC,GAAW;QACtC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACpE,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChC,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAErE,wGAAwG;QACxG,iGAAiG;QACjG,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,CAAC,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CACzF,GAAG,CACJ,CAAC;QACF,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,yBAAyB,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;CACF;AAED,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/node_modules/@agenticreplay/fs-capture/dist/git.d.ts

@@ -0,0 +1,25 @@
+export interface GitOptions {
+    gitDir?: string;
+    workTree?: string;
+    cwd?: string;
+    indexFile?: string;
+    input?: string | Uint8Array;
+}
+export interface GitResult {
+    stdout: string;
+    stderr: string;
+    code: number;
+}
+export interface GitRawResult {
+    stdout: Buffer;
+    stderr: string;
+    code: number;
+}
+/** Exit code convention for "the binary could not be run at all". */
+export declare const GIT_NOT_EXECUTABLE = 127;
+/** Like {@link runGit} but leaves stdout as bytes, for blob contents that are not text. */
+export declare function runGitRaw(args: string[], opts?: GitOptions): Promise<GitRawResult>;
+/** Runs git and reports the exit code. Never throws on a non-zero exit; callers decide. */
+export declare function runGit(args: string[], opts?: GitOptions): Promise<GitResult>;
+export declare function gitAvailable(): Promise<boolean>;
+//# sourceMappingURL=git.d.ts.map

package/node_modules/@agenticreplay/fs-capture/dist/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAQD,qEAAqE;AACrE,eAAO,MAAM,kBAAkB,MAAM,CAAC;AA4DtC,2FAA2F;AAC3F,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,YAAY,CAAC,CA6BtF;AAED,2FAA2F;AAC3F,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAGtF;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,CAGrD"}

package/node_modules/@agenticreplay/fs-capture/dist/git.js

@@ -0,0 +1,108 @@
+import { spawn } from 'node:child_process';
+/**
+ * `--upload-pack`/`--receive-pack` name a command for git to execute. A workspace path that
+ * reaches an argument array unquoted would otherwise be arbitrary code execution.
+ */
+const UNSAFE_ARG_PREFIXES = ['--upload-pack', '--receive-pack'];
+/** Exit code convention for "the binary could not be run at all". */
+export const GIT_NOT_EXECUTABLE = 127;
+function assertSafeArgs(args) {
+    for (const arg of args) {
+        for (const prefix of UNSAFE_ARG_PREFIXES) {
+            if (arg.startsWith(prefix)) {
+                throw new Error(`refusing to run git: argument "${arg}" can execute an arbitrary command`);
+            }
+        }
+    }
+}
+/**
+ * Variables that redirect git at another repository, reinterpret a pathspec, or inject config.
+ * AgenticReplay can be launched from inside a hook or another git process, and any of these would change
+ * what a snapshot means: GIT_DIR retargets the store, GIT_LITERAL_PATHSPECS would turn the
+ * `:(exclude)` guards into ordinary filenames, and GIT_CONFIG_* can set any option at all.
+ * Anything else git puts in the environment (GIT_EXEC_PATH, for one) belongs to the installation
+ * and is left alone.
+ */
+const HOSTILE_ENV_VARS = [
+    'GIT_DIR',
+    'GIT_WORK_TREE',
+    'GIT_INDEX_FILE',
+    'GIT_INDEX_VERSION',
+    'GIT_OBJECT_DIRECTORY',
+    'GIT_ALTERNATE_OBJECT_DIRECTORIES',
+    'GIT_COMMON_DIR',
+    'GIT_NAMESPACE',
+    'GIT_CEILING_DIRECTORIES',
+    'GIT_DISCOVERY_ACROSS_FILESYSTEM',
+    'GIT_PREFIX',
+    'GIT_LITERAL_PATHSPECS',
+    'GIT_GLOB_PATHSPECS',
+    'GIT_NOGLOB_PATHSPECS',
+    'GIT_ICASE_PATHSPECS',
+    'GIT_ATTR_NOSYSTEM',
+];
+/** System and global config are dropped so a snapshot depends only on the workspace. */
+function childEnv(opts) {
+    const env = { ...process.env };
+    for (const key of Object.keys(env)) {
+        if (HOSTILE_ENV_VARS.includes(key) || key.startsWith('GIT_CONFIG'))
+            delete env[key];
+    }
+    env.GIT_CONFIG_NOSYSTEM = '1';
+    env.GIT_CONFIG_GLOBAL = '/dev/null';
+    env.GIT_TERMINAL_PROMPT = '0';
+    env.LC_ALL = 'C';
+    if (opts.indexFile !== undefined)
+        env.GIT_INDEX_FILE = opts.indexFile;
+    return env;
+}
+function prefixArgs(opts) {
+    const args = [];
+    if (opts.gitDir !== undefined)
+        args.push(`--git-dir=${opts.gitDir}`);
+    if (opts.workTree !== undefined)
+        args.push(`--work-tree=${opts.workTree}`);
+    return args;
+}
+/** Like {@link runGit} but leaves stdout as bytes, for blob contents that are not text. */
+export function runGitRaw(args, opts = {}) {
+    assertSafeArgs(args);
+    const full = [...prefixArgs(opts), ...args];
+    return new Promise((resolve) => {
+        const child = spawn('git', full, {
+            cwd: opts.cwd,
+            env: childEnv(opts),
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        const out = [];
+        const err = [];
+        let settled = false;
+        const settle = (code, extra) => {
+            if (settled)
+                return;
+            settled = true;
+            const stderr = Buffer.concat(err).toString('utf8') + (extra ?? '');
+            resolve({ stdout: Buffer.concat(out), stderr, code });
+        };
+        child.stdout.on('data', (chunk) => out.push(chunk));
+        child.stderr.on('data', (chunk) => err.push(chunk));
+        child.on('error', (error) => settle(GIT_NOT_EXECUTABLE, `failed to run git: ${error.message}`));
+        child.on('close', (code, signal) => settle(code ?? (signal ? GIT_NOT_EXECUTABLE : 0)));
+        // A git subcommand may exit before draining stdin; that EPIPE is not our problem.
+        child.stdin.on('error', () => { });
+        if (opts.input !== undefined)
+            child.stdin.end(opts.input);
+        else
+            child.stdin.end();
+    });
+}
+/** Runs git and reports the exit code. Never throws on a non-zero exit; callers decide. */
+export async function runGit(args, opts = {}) {
+    const raw = await runGitRaw(args, opts);
+    return { stdout: raw.stdout.toString('utf8'), stderr: raw.stderr, code: raw.code };
+}
+export async function gitAvailable() {
+    const res = await runGit(['--version']);
+    return res.code === 0 && res.stdout.startsWith('git version');
+}
+//# sourceMappingURL=git.js.map

package/node_modules/@agenticreplay/fs-capture/dist/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAsB3C;;;GAGG;AACH,MAAM,mBAAmB,GAAG,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;AAEhE,qEAAqE;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC,SAAS,cAAc,CAAC,IAAuB;IAC7C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,CAAC;YACzC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,oCAAoC,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,gBAAgB,GAAG;IACvB,SAAS;IACT,eAAe;IACf,gBAAgB;IAChB,mBAAmB;IACnB,sBAAsB;IACtB,kCAAkC;IAClC,gBAAgB;IAChB,eAAe;IACf,yBAAyB;IACzB,iCAAiC;IACjC,YAAY;IACZ,uBAAuB;IACvB,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,mBAAmB;CACpB,CAAC;AAEF,wFAAwF;AACxF,SAAS,QAAQ,CAAC,IAAgB;IAChC,MAAM,GAAG,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAClD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IACtF,CAAC;IACD,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;IAC9B,GAAG,CAAC,iBAAiB,GAAG,WAAW,CAAC;IACpC,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;IAC9B,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;IACjB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB;IAClC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,SAAS,CAAC,IAAc,EAAE,OAAmB,EAAE;IAC7D,cAAc,CAAC,IAAI,CAAC,CAAC;IACrB,MAAM,IAAI,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QACH,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,KAAc,EAAQ,EAAE;YACpD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACnE,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE,CACjC,MAAM,CAAC,kBAAkB,EAAE,sBAAsB,KAAK,CAAC,OAAO,EAAE,CAAC,CAClE,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,kFAAkF;QAClF,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YACrD,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc,EAAE,OAAmB,EAAE;IAChE,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAChE,CAAC"}

package/node_modules/@agenticreplay/fs-capture/dist/index.d.ts

@@ -0,0 +1,4 @@
+export * from './git.js';
+export * from './shadow.js';
+export * from './capture.js';
+//# sourceMappingURL=index.d.ts.map

package/node_modules/@agenticreplay/fs-capture/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC"}

package/node_modules/@agenticreplay/fs-capture/dist/index.js

@@ -0,0 +1,4 @@
+export * from './git.js';
+export * from './shadow.js';
+export * from './capture.js';
+//# sourceMappingURL=index.js.map

package/node_modules/@agenticreplay/fs-capture/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC"}

package/node_modules/@agenticreplay/fs-capture/dist/shadow.d.ts

@@ -0,0 +1,271 @@
+/** git's hardcoded id for a tree with no entries; always resolvable, even in a fresh store. */
+export declare const EMPTY_TREE = "4b825dc642cb6eb9a060e54bf8d69288fbee4904";
+export type FileStatus = 'added' | 'modified' | 'deleted' | 'renamed';
+export interface FileChange {
+    path: string;
+    status: FileStatus;
+    oldPath?: string;
+    insertions: number;
+    deletions: number;
+    /**
+     * True when the file's only change is its line endings.
+     *
+     * The shadow store keeps the bytes that were on disk, with no end-of-line normalisation — which
+     * is the right choice for a record of what happened, and produces a startling report on Windows.
+     * A tool that rewrites a CRLF file with LF changes every line as far as git is concerned, so a
+     * one-character fix comes back as `+42 −42`. The counts stay honest; this says why they are
+     * what they are.
+     */
+    eolOnly?: boolean;
+}
+export interface ShadowIndexOptions {
+    gitDir: string;
+    workTree: string;
+    /**
+     * Paths to stage even though the workspace's own ignore rules exclude them.
+     *
+     * See {@link ShadowIndex.snapshot}. The sensitive pathspecs still apply, so this widens what a
+     * snapshot covers without widening what it may ever contain.
+     */
+    forced?: readonly string[];
+}
+export interface MaterializeOptions {
+    /** Proceed even though part of the tree cannot be reproduced. See {@link ShadowIndex.materialize}. */
+    allowIncomplete?: boolean;
+}
+export declare const GIT_MISSING_MESSAGE = "git is required for filesystem capture; install git or run with --no-fs";
+/**
+ * Paths never captured, in .gitignore syntax. Secrets first, then noise that would bloat every
+ * snapshot, then `.agenticreplay/` so a run never records its own trace.
+ */
+export declare const SENSITIVE_PATTERNS: readonly [".env*", ".ssh/", ".aws/", ".netrc", "*.pem", "*.key", "id_rsa*", "id_ed25519*", ".agenticreplay/", "node_modules/", ".git/"];
+/** A declared artifact path, and the nested repository it sits inside. */
+export interface ForcedInsideNested {
+    path: string;
+    repository: string;
+}
+/** One file of a tree: where it goes, and the id of the bytes it holds. */
+export interface TreeFile {
+    path: string;
+    oid: string;
+}
+/**
+ * A workspace snapshotted into a git object store that is not the workspace's own repository.
+ *
+ * Every operation names `--git-dir` and `--work-tree` explicitly, so nothing here can write to a
+ * real `.git`, and the workspace never learns it is being recorded.
+ */
+export declare class ShadowIndex {
+    readonly gitDir: string;
+    readonly workTree: string;
+    /** See {@link ShadowIndexOptions.forced}. Empty for every ordinary workspace. */
+    readonly forced: readonly string[];
+    private constructor();
+    /** Named once each, however many snapshots a run takes. See {@link dropForcedGitlinks}. */
+    private reportedGitlinks;
+    private skipped;
+    /** The same, for the ones git could not index at all. See {@link addAll}. */
+    private reportedUncommitted;
+    private uncommitted;
+    /** The same, for declared paths inside a nested repository. See {@link addForced}. */
+    private reportedInside;
+    private inside;
+    /**
+     * Nested repositories the last snapshot dropped from a declared artifact path, the first time
+     * each is seen. Empty on every ordinary snapshot.
+     */
+    get skippedGitlinks(): readonly string[];
+    /**
+     * Nested repositories the last snapshot could not hold at all, the first time each is seen —
+     * they have no commit, so git has no id to record them by. See {@link addAll}.
+     *
+     * Reported for the same reason {@link gitlinks} is: this store holds nothing of what is inside
+     * them, so a restore puts nothing back there, and whoever is about to run an agent over this
+     * directory needs to know that before it starts rather than afterwards.
+     */
+    get uncommittedNested(): readonly string[];
+    /**
+     * Declared artifact paths the last snapshot could not hold because each sits inside a nested
+     * repository, with the repository, the first time each path is seen. Empty on every ordinary
+     * snapshot; see `enclosingRepository` for why git cannot be asked.
+     *
+     * The repository matters as much as the path: it is the thing a reset reaching inside it would
+     * destroy with no copy anywhere, since this store holds nothing of what a nested repository
+     * holds — see {@link uncommittedNested}, which says the same of the ones git could not name.
+     */
+    get forcedInsideNested(): readonly ForcedInsideNested[];
+    static isAvailable(): Promise<boolean>;
+    static create(opts: ShadowIndexOptions): Promise<ShadowIndex>;
+    private opts;
+    private run;
+    /**
+     * Stages the whole work tree and returns the resulting tree id. No commit is created.
+     *
+     * A second `add -f` covers the paths an adapter declared, and only those. `-f` is what overrides
+     * the workspace's `.gitignore`, which is otherwise honoured — right for a coding agent, where
+     * the ignored paths are build output, and wrong for a pipeline, where the ignored directory is
+     * the whole product. IndexRAG's first three ignore lines are `vector_store/`, `cache/` and
+     * `dataset/`; without this a recording of an indexing run holds every call that built the index
+     * and not one byte of the index.
+     *
+     * `SENSITIVE_PATHSPECS` is repeated on the forced add deliberately: a pathspec exclusion is
+     * applied by `git add` itself and no `-f` overrides it, so an adapter that declares `.` to try
+     * to sweep a secret in still cannot stage `.env`. That is what makes this safe to hand to
+     * third-party plugin code.
+     */
+    snapshot(): Promise<string>;
+    /**
+     * One `git add`, retried past every nested repository git cannot index at all.
+     *
+     * A NESTED REPOSITORY WITH NO COMMIT STOPS `git add` DEAD. Git stores an embedded repository as
+     * a gitlink, which is the id of its HEAD commit; one that has never been committed to has no
+     * HEAD, so git answers `error: '<path>/' does not have a commit checked out` and then
+     * `fatal: adding files failed` — exit 128, the whole add abandoned, and the index left empty.
+     * That shape is not exotic: it is what `git init` in a subdirectory leaves behind, which is what
+     * anyone starting a second project inside their workspace has until they make the first commit.
+     *
+     * Measured on agenticreplay before this, both times it can happen:
+     *
+     *   - there while recording — every turn's snapshot threw, so the trace held no `fs.snapshot`
+     *     at all, and the replay then read that absence as `--no-fs` and told the operator the run
+     *     was "recorded with --no-fs" when nobody had passed it
+     *   - appearing before a replay — the SAFETY snapshot threw, so `agenticreplay replay` exited 1 with
+     *     git's own sentence about a commit checked out, having already made its `agenticreplay-safety-*`
+     *     scratch directory, which nothing then removed and nothing printed the path of
+     *
+     * Left out and named, which is what git already does with a nested repository that HAS a commit:
+     * that one is stored as a gitlink whose contents this store never holds, and everything
+     * downstream — `replay.nested_kept`, `assertRestorable`, the restore's own note — exists to say
+     * so. One without a commit is the same fact about the same directory, so it is reported the same
+     * way rather than made a fatal error. See {@link uncommittedNested}.
+     *
+     * ONE AT A TIME, because git names one and stops: with three of them the first add named only
+     * the first, and excluding it made the next add fail on the second. So this re-adds until git is
+     * satisfied, and gives up the moment a failure names nothing new — every other failure comes
+     * back to the caller with git's own words, to be judged exactly as before.
+     *
+     * `:(exclude,literal)` rather than a bare `:(exclude)`: the path arrives from git's message as
+     * whatever the operator called the directory, and a pathspec without `literal` is a pattern.
+     * Measured beside a workspace holding `ab/` and `ax/`: `:(exclude)a*` took both out of the add,
+     * while `:(exclude,literal)a*` took out only a path named exactly that. So a nested repository
+     * called `a*` — a legal name on POSIX, not on Windows — would quietly drop its neighbours from
+     * the snapshot. A name holding `[` does not, as it happens: git compares the leading directory
+     * literally before it ever wildmatches, so `my [new] project` excludes only itself either way.
+     * `literal` is used for every one of them because which characters a name holds is not this
+     * code's to know.
+     */
+    private addSkippingCommitless;
+    private addAll;
+    /**
+     * Remember which of these are new to this store, so a run names each once however many snapshots
+     * it takes, and accumulate within one snapshot — the ordinary add and the forced add can each
+     * meet one the other cannot see.
+     */
+    private noteUncommitted;
+    /**
+     * Stage the declared paths, tolerating the ones that do not exist yet — and only those.
+     *
+     * `git add` refuses a pathspec that matches nothing — "did not match any files" — and every
+     * run's snapshot 0 is taken before the harness has written anything, so one missing directory
+     * would fail the whole add and lose the paths that *were* there. One call in the ordinary case;
+     * the retry only runs while the product is still being built.
+     *
+     * Every *other* non-zero exit is a real failure, and telling the two apart is the whole reason
+     * to read the retry's result rather than discard it. A file inside the ignored directory that
+     * git cannot open — the harness still writing `cache/`, an editor or a scanner holding it,
+     * EACCES, a path too long on Windows — exits non-zero for an unrelated reason, and `runGit`
+     * resolves rather than throws, so nothing upstream could notice. What that produced was a
+     * snapshot silently missing the paths the adapter declared: a trace holding every call that
+     * built an index and no byte of the index, with no warning anywhere. Worse on the replay side,
+     * where the same hole lands in the safety snapshot `resetArtifacts` depends on — agenticreplay may delete
+     * only what it took a copy of first, so a failure it cannot account for stops the snapshot here.
+     *
+     * Stopping is safe at both call sites: `snapshotWithRetry` turns a throw during recording into
+     * one skipped checkpoint and an `fs.snapshot_failed` warning, and `replayWorkspace` takes its
+     * safety snapshot before anything destructive has happened.
+     */
+    private addForced;
+    /** Named once each, however many snapshots a run takes, and keyed by the declared path. */
+    private noteInside;
+    /**
+     * Unstage any nested repository the forced add just recorded as a gitlink.
+     *
+     * `-f` reaches paths the workspace ignores, and an ignored directory is exactly where a cloned
+     * corpus sits — `dataset/` is one of IndexRAG's declared paths and the ordinary place to
+     * `git clone` a corpus into. `git add` stores such a directory as a gitlink whose contents live
+     * nowhere in this store, and {@link materialize} refuses a tree holding one rather than checking
+     * out an empty directory in its place. Before the forced add those paths were never staged, so
+     * the restore worked; leaving them staged makes every restore of that workspace fail — including
+     * the one `agenticreplay replay` performs *after* deleting the artifacts it could then no longer put back.
+     *
+     * Dropped rather than refused, because the other declared paths are still worth capturing and a
+     * recording missing a cloned corpus is a far smaller loss than one that cannot be replayed at
+     * all. {@link skippedGitlinks} names them, once each, so a run can say so rather than quietly
+     * omit them — which is the failure the rest of this method exists to stop repeating.
+     */
+    private dropForcedGitlinks;
+    diff(fromTree: string, toTree: string): Promise<FileChange[]>;
+    /**
+     * Paths that still differ once a trailing carriage return is not counted as a difference, or
+     * undefined when this git cannot answer — in which case nothing is annotated, which is better
+     * than claiming a real edit was only line endings.
+     */
+    private changedIgnoringEol;
+    patch(fromTree: string, toTree: string, path?: string): Promise<string>;
+    readFileAt(tree: string, path: string): Promise<Uint8Array>;
+    /**
+     * Writes the whole tree into `destDir`, which should be fresh: files already there that the tree
+     * does not name are left where they are. Fork replay debugs whatever this produces, so it refuses
+     * a tree holding a nested repository: `git add` records those as a gitlink whose contents were
+     * never stored, and checkout would silently leave an empty directory in their place.
+     */
+    /**
+     * What is on disk under `paths` that the last snapshot did not take a copy of.
+     *
+     * Asked of the index the snapshot wrote, so it answers for that snapshot exactly: anything git
+     * calls "other" under these paths is a file in the work tree with no entry in it. Two rules put
+     * things there and both are deliberate — `SENSITIVE_PATHSPECS` keeps credentials out of a trace
+     * however an adapter declares its paths, and {@link dropForcedGitlinks} removes a nested
+     * repository whose contents no snapshot can hold — which is precisely why the answer has to be
+     * available to a caller about to delete these paths on the strength of that copy.
+     *
+     * A nested repository comes back as the directory, with a trailing slash, because git will not
+     * look inside one. That is the honest shape of the answer: what is missing is everything under
+     * it.
+     */
+    uncaptured(paths: readonly string[]): Promise<string[]>;
+    /**
+     * The nested repositories a tree records as gitlinks, whose contents this store never held.
+     *
+     * {@link materialize} refuses such a tree; this answers the same question without writing a
+     * byte, so a caller about to do something irreversible can find out *before* doing it rather
+     * than from the exception afterwards. See `replayWorkspace`, where the reset the restore is
+     * supposed to undo runs before the restore.
+     */
+    gitlinks(tree: string): Promise<string[]>;
+    /**
+     * Is this tree actually in the store?
+     *
+     * Same posture as {@link gitlinks}: ask before doing something that would otherwise fail from
+     * inside git, with a message about object names that says nothing about the cause.
+     *
+     * The cause worth naming is a run whose store is not all there: one pulled from a gateway it was
+     * pushed to without `--fs` — the archive then carries manifest.json, events.jsonl,
+     * redactions.json and blobs/, not this store — or one whose store `agenticreplay scrub --drop-fs`
+     * deleted. Either way its `fs.snapshot` events name trees whose objects are not here.
+     * {@link materialize} on one of those dies in `read-tree`, and the caller has no way to tell
+     * that from a corrupt store.
+     */
+    has(tree: string): Promise<boolean>;
+    /**
+     * The files a tree records — blobs only, so a nested repository's gitlink is not among them —
+     * each with the id of the bytes it holds.
+     *
+     * What a {@link materialize} of the tree will write, asked without writing it: a caller about to
+     * restore a tree over a directory can check each path against the copy it took first, and can
+     * tell afterwards whether what stands at a path is still what the tree put there.
+     */
+    files(tree: string): Promise<TreeFile[]>;
+    materialize(tree: string, destDir: string, opts?: MaterializeOptions): Promise<void>;
+}
+//# sourceMappingURL=shadow.d.ts.map

package/node_modules/@agenticreplay/fs-capture/dist/shadow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shadow.d.ts","sourceRoot":"","sources":["../src/shadow.ts"],"names":[],"mappings":"AAMA,+FAA+F;AAC/F,eAAO,MAAM,UAAU,6CAA6C,CAAC;AAErE,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AAEtE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,sGAAsG;IACtG,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,eAAO,MAAM,mBAAmB,4EAC2C,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,kBAAkB,yIAYrB,CAAC;AA6IX,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,2EAA2E;AAC3E,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAQD;;;;;GAKG;AACH,qBAAa,WAAW;IAEpB,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE;IAJpC,OAAO;IAOP,2FAA2F;IAC3F,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,OAAO,CAAC,OAAO,CAAyB;IAExC,6EAA6E;IAC7E,OAAO,CAAC,mBAAmB,CAAqB;IAChD,OAAO,CAAC,WAAW,CAAyB;IAE5C,sFAAsF;IACtF,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,MAAM,CAAqC;IAEnD;;;OAGG;IACH,IAAI,eAAe,IAAI,SAAS,MAAM,EAAE,CAEvC;IAED;;;;;;;OAOG;IACH,IAAI,iBAAiB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;;;;;;;OAQG;IACH,IAAI,kBAAkB,IAAI,SAAS,kBAAkB,EAAE,CAEtD;WAEY,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;WAI/B,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC;IAuBnE,OAAO,CAAC,IAAI;YAUE,GAAG;IAQjB;;;;;;;;;;;;;;OAcG;IACG,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;IASjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuCG;YACW,qBAAqB;YAgBrB,MAAM;IAMpB;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAMvB;;;;;;;;;;;;;;;;;;;;;OAqBG;YACW,SAAS;IAsCvB,2FAA2F;IAC3F,OAAO,CAAC,UAAU;IAMlB;;;;;;;;;;;;;;;OAeG;YACW,kBAAkB;IAW1B,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAgFnE;;;;OAIG;YACW,kBAAkB;IA6B1B,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAMvE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAQjE;;;;;OAKG;IACH;;;;;;;;;;;;;OAaG;IACG,UAAU,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAM7D;;;;;;;OAOG;IACG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAU/C;;;;;;;;;;;;OAYG;IACG,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKzC;;;;;;;OAOG;IACG,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAWxC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;CAsB/F"}