apex-code 0.0.1-alpha.9 → 0.0.4

package/dist/core/bash-executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bash-executor.d.ts","sourceRoot":"","sources":["../../src/core/bash-executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAOtD,MAAM,WAAW,mBAAmB;IACnC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,mCAAmC;IACnC,MAAM,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IAC1B,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,mDAAmD;IACnD,SAAS,EAAE,OAAO,CAAC;IACnB,uCAAuC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,yFAAyF;IACzF,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAMD;;;GAGG;AACH,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,cAAc,EAC1B,OAAO,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,UAAU,CAAC,CAqGrB","sourcesContent":["/**\n * Bash command execution with streaming support and cancellation.\n *\n * This module provides a unified bash execution implementation used by:\n * - AgentSession.executeBash() for interactive and RPC modes\n * - Direct calls from modes that need bash execution\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { createWriteStream, type WriteStream } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { finished } from \"node:stream/promises\";\nimport { stripAnsi } from \"../utils/ansi.ts\";\nimport { sanitizeBinaryOutput } from \"../utils/shell.ts\";\nimport type { BashOperations } from \"./tools/bash.ts\";\nimport { DEFAULT_MAX_BYTES, truncateTail } from \"./tools/truncate.ts\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface BashExecutorOptions {\n\t/** Callback for streaming output chunks (already sanitized) */\n\tonChunk?: (chunk: string) => void;\n\t/** AbortSignal for cancellation */\n\tsignal?: AbortSignal;\n}\n\nexport interface BashResult {\n\t/** Combined stdout + stderr output (sanitized, possibly truncated) */\n\toutput: string;\n\t/** Process exit code (undefined if killed/cancelled) */\n\texitCode: number | undefined;\n\t/** Whether the command was cancelled via signal */\n\tcancelled: boolean;\n\t/** Whether the output was truncated */\n\ttruncated: boolean;\n\t/** Path to temp file containing full output (if output exceeded truncation threshold) */\n\tfullOutputPath?: string;\n}\n\n// ============================================================================\n// Implementation\n// ============================================================================\n\n/**\n * Execute a bash command using custom BashOperations.\n * Used for remote execution (SSH, containers, etc.).\n */\nexport async function executeBashWithOperations(\n\tcommand: string,\n\tcwd: string,\n\toperations: BashOperations,\n\toptions?: BashExecutorOptions,\n): Promise<BashResult> {\n\tconst outputChunks: string[] = [];\n\tlet outputBytes = 0;\n\tconst maxOutputBytes = DEFAULT_MAX_BYTES * 2;\n\n\tlet tempFilePath: string | undefined;\n\tlet tempFileStream: WriteStream | undefined;\n\tlet totalBytes = 0;\n\n\tconst ensureTempFile = () => {\n\t\tif (tempFilePath) {\n\t\t\treturn;\n\t\t}\n\t\tconst id = randomBytes(8).toString(\"hex\");\n\t\ttempFilePath = join(tmpdir(), `apex-code-bash-${id}.log`);\n\t\ttempFileStream = createWriteStream(tempFilePath);\n\t\tfor (const chunk of outputChunks) {\n\t\t\ttempFileStream.write(chunk);\n\t\t}\n\t};\n\n\tconst decoder = new TextDecoder();\n\n\tconst onData = (data: Buffer) => {\n\t\ttotalBytes += data.length;\n\n\t\t// Sanitize: strip ANSI, replace binary garbage, normalize newlines\n\t\tconst text = sanitizeBinaryOutput(stripAnsi(decoder.decode(data, { stream: true }))).replace(/\\r/g, \"\");\n\n\t\t// Start writing to temp file if exceeds threshold\n\t\tif (totalBytes > DEFAULT_MAX_BYTES) {\n\t\t\tensureTempFile();\n\t\t}\n\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.write(text);\n\t\t}\n\n\t\t// Keep rolling buffer\n\t\toutputChunks.push(text);\n\t\toutputBytes += text.length;\n\t\twhile (outputBytes > maxOutputBytes && outputChunks.length > 1) {\n\t\t\tconst removed = outputChunks.shift()!;\n\t\t\toutputBytes -= removed.length;\n\t\t}\n\n\t\t// Stream to callback\n\t\tif (options?.onChunk) {\n\t\t\toptions.onChunk(text);\n\t\t}\n\t};\n\n\tconst closeTempFile = async () => {\n\t\tif (!tempFileStream) return;\n\t\ttempFileStream.end();\n\t\tawait finished(tempFileStream);\n\t};\n\n\ttry {\n\t\tconst result = await operations.exec(command, cwd, {\n\t\t\tonData,\n\t\t\tsignal: options?.signal,\n\t\t});\n\n\t\tconst fullOutput = outputChunks.join(\"\");\n\t\tconst truncationResult = truncateTail(fullOutput);\n\t\tif (truncationResult.truncated) {\n\t\t\tensureTempFile();\n\t\t}\n\t\tawait closeTempFile();\n\t\tconst cancelled = options?.signal?.aborted ?? false;\n\n\t\treturn {\n\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\texitCode: cancelled ? undefined : (result.exitCode ?? undefined),\n\t\t\tcancelled,\n\t\t\ttruncated: truncationResult.truncated,\n\t\t\tfullOutputPath: tempFilePath,\n\t\t};\n\t} catch (err) {\n\t\t// Check if it was an abort\n\t\tif (options?.signal?.aborted) {\n\t\t\tconst fullOutput = outputChunks.join(\"\");\n\t\t\tconst truncationResult = truncateTail(fullOutput);\n\t\t\tif (truncationResult.truncated) {\n\t\t\t\tensureTempFile();\n\t\t\t}\n\t\t\tawait closeTempFile();\n\t\t\treturn {\n\t\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\t\texitCode: undefined,\n\t\t\t\tcancelled: true,\n\t\t\t\ttruncated: truncationResult.truncated,\n\t\t\t\tfullOutputPath: tempFilePath,\n\t\t\t};\n\t\t}\n\n\t\tawait closeTempFile();\n\n\t\tthrow err;\n\t}\n}\n"]}
+{"version":3,"file":"bash-executor.d.ts","sourceRoot":"","sources":["../../src/core/bash-executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAOtD,MAAM,WAAW,mBAAmB;IACnC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,mCAAmC;IACnC,MAAM,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IAC1B,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,mDAAmD;IACnD,SAAS,EAAE,OAAO,CAAC;IACnB,uCAAuC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,yFAAyF;IACzF,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAMD;;;GAGG;AACH,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,cAAc,EAC1B,OAAO,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,UAAU,CAAC,CA4GrB","sourcesContent":["/**\n * Bash command execution with streaming support and cancellation.\n *\n * This module provides a unified bash execution implementation used by:\n * - AgentSession.executeBash() for interactive and RPC modes\n * - Direct calls from modes that need bash execution\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { createWriteStream, type WriteStream } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { finished } from \"node:stream/promises\";\nimport { stripAnsi } from \"../utils/ansi.ts\";\nimport { sanitizeBinaryOutput } from \"../utils/shell.ts\";\nimport type { BashOperations } from \"./tools/bash.ts\";\nimport { DEFAULT_MAX_BYTES, truncateTail } from \"./tools/truncate.ts\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface BashExecutorOptions {\n\t/** Callback for streaming output chunks (already sanitized) */\n\tonChunk?: (chunk: string) => void;\n\t/** AbortSignal for cancellation */\n\tsignal?: AbortSignal;\n}\n\nexport interface BashResult {\n\t/** Combined stdout + stderr output (sanitized, possibly truncated) */\n\toutput: string;\n\t/** Process exit code (undefined if killed/cancelled) */\n\texitCode: number | undefined;\n\t/** Whether the command was cancelled via signal */\n\tcancelled: boolean;\n\t/** Whether the output was truncated */\n\ttruncated: boolean;\n\t/** Path to temp file containing full output (if output exceeded truncation threshold) */\n\tfullOutputPath?: string;\n}\n\n// ============================================================================\n// Implementation\n// ============================================================================\n\n/**\n * Execute a bash command using custom BashOperations.\n * Used for remote execution (SSH, containers, etc.).\n */\nexport async function executeBashWithOperations(\n\tcommand: string,\n\tcwd: string,\n\toperations: BashOperations,\n\toptions?: BashExecutorOptions,\n): Promise<BashResult> {\n\tconst outputChunks: string[] = [];\n\tlet outputBytes = 0;\n\tconst maxOutputBytes = DEFAULT_MAX_BYTES * 2;\n\n\tlet tempFilePath: string | undefined;\n\tlet tempFileStream: WriteStream | undefined;\n\tlet totalBytes = 0;\n\n\tconst ensureTempFile = () => {\n\t\tif (tempFilePath) {\n\t\t\treturn;\n\t\t}\n\t\tconst id = randomBytes(8).toString(\"hex\");\n\t\ttempFilePath = join(tmpdir(), `apex-code-bash-${id}.log`);\n\t\ttempFileStream = createWriteStream(tempFilePath);\n\t\t// A stream 'error' event (ENOSPC, EACCES) with no listener crashes the\n\t\t// whole process mid-command; full-output capture is best-effort, so\n\t\t// drop the capture and the reported path together.\n\t\ttempFileStream.on(\"error\", () => {\n\t\t\ttempFileStream = undefined;\n\t\t\ttempFilePath = undefined;\n\t\t});\n\t\tfor (const chunk of outputChunks) {\n\t\t\ttempFileStream.write(chunk);\n\t\t}\n\t};\n\n\tconst decoder = new TextDecoder();\n\n\tconst onData = (data: Buffer) => {\n\t\ttotalBytes += data.length;\n\n\t\t// Sanitize: strip ANSI, replace binary garbage, normalize newlines\n\t\tconst text = sanitizeBinaryOutput(stripAnsi(decoder.decode(data, { stream: true }))).replace(/\\r/g, \"\");\n\n\t\t// Start writing to temp file if exceeds threshold\n\t\tif (totalBytes > DEFAULT_MAX_BYTES) {\n\t\t\tensureTempFile();\n\t\t}\n\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.write(text);\n\t\t}\n\n\t\t// Keep rolling buffer\n\t\toutputChunks.push(text);\n\t\toutputBytes += text.length;\n\t\twhile (outputBytes > maxOutputBytes && outputChunks.length > 1) {\n\t\t\tconst removed = outputChunks.shift()!;\n\t\t\toutputBytes -= removed.length;\n\t\t}\n\n\t\t// Stream to callback\n\t\tif (options?.onChunk) {\n\t\t\toptions.onChunk(text);\n\t\t}\n\t};\n\n\tconst closeTempFile = async () => {\n\t\tif (!tempFileStream) return;\n\t\ttempFileStream.end();\n\t\tawait finished(tempFileStream);\n\t};\n\n\ttry {\n\t\tconst result = await operations.exec(command, cwd, {\n\t\t\tonData,\n\t\t\tsignal: options?.signal,\n\t\t});\n\n\t\tconst fullOutput = outputChunks.join(\"\");\n\t\tconst truncationResult = truncateTail(fullOutput);\n\t\tif (truncationResult.truncated) {\n\t\t\tensureTempFile();\n\t\t}\n\t\tawait closeTempFile();\n\t\tconst cancelled = options?.signal?.aborted ?? false;\n\n\t\treturn {\n\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\texitCode: cancelled ? undefined : (result.exitCode ?? undefined),\n\t\t\tcancelled,\n\t\t\ttruncated: truncationResult.truncated,\n\t\t\tfullOutputPath: tempFilePath,\n\t\t};\n\t} catch (err) {\n\t\t// Check if it was an abort\n\t\tif (options?.signal?.aborted) {\n\t\t\tconst fullOutput = outputChunks.join(\"\");\n\t\t\tconst truncationResult = truncateTail(fullOutput);\n\t\t\tif (truncationResult.truncated) {\n\t\t\t\tensureTempFile();\n\t\t\t}\n\t\t\tawait closeTempFile();\n\t\t\treturn {\n\t\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\t\texitCode: undefined,\n\t\t\t\tcancelled: true,\n\t\t\t\ttruncated: truncationResult.truncated,\n\t\t\t\tfullOutputPath: tempFilePath,\n\t\t\t};\n\t\t}\n\n\t\tawait closeTempFile();\n\n\t\tthrow err;\n\t}\n}\n"]}

package/dist/core/bash-executor.js

@@ -34,6 +34,13 @@ export async function executeBashWithOperations(command, cwd, operations, option
         const id = randomBytes(8).toString("hex");
         tempFilePath = join(tmpdir(), `apex-code-bash-${id}.log`);
         tempFileStream = createWriteStream(tempFilePath);
+        // A stream 'error' event (ENOSPC, EACCES) with no listener crashes the
+        // whole process mid-command; full-output capture is best-effort, so
+        // drop the capture and the reported path together.
+        tempFileStream.on("error", () => {
+            tempFileStream = undefined;
+            tempFilePath = undefined;
+        });
         for (const chunk of outputChunks) {
             tempFileStream.write(chunk);
         }

package/dist/core/bash-executor.js.map

@@ -1 +1 @@
-{"version":3,"file":"bash-executor.js","sourceRoot":"","sources":["../../src/core/bash-executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAoB,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AA0BtE,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAAe,EACf,GAAW,EACX,UAA0B,EAC1B,OAA6B,EACP;IACtB,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,cAAc,GAAG,iBAAiB,GAAG,CAAC,CAAC;IAE7C,IAAI,YAAgC,CAAC;IACrC,IAAI,cAAuC,CAAC;IAC5C,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC;QAC5B,IAAI,YAAY,EAAE,CAAC;YAClB,OAAO;QACR,CAAC;QACD,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1C,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAC1D,cAAc,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACjD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YAClC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAElC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC;QAChC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;QAE1B,mEAAmE;QACnE,MAAM,IAAI,GAAG,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAExG,kDAAkD;QAClD,IAAI,UAAU,GAAG,iBAAiB,EAAE,CAAC;YACpC,cAAc,EAAE,CAAC;QAClB,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACpB,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,sBAAsB;QACtB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC;QAC3B,OAAO,WAAW,GAAG,cAAc,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAG,CAAC;YACtC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;QAC/B,CAAC;QAED,qBAAqB;QACrB,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACtB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,cAAc;YAAE,OAAO;QAC5B,cAAc,CAAC,GAAG,EAAE,CAAC;QACrB,MAAM,QAAQ,CAAC,cAAc,CAAC,CAAC;IAAA,CAC/B,CAAC;IAEF,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YAClD,MAAM;YACN,MAAM,EAAE,OAAO,EAAE,MAAM;SACvB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,gBAAgB,CAAC,SAAS,EAAE,CAAC;YAChC,cAAc,EAAE,CAAC;QAClB,CAAC;QACD,MAAM,aAAa,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC;QAEpD,OAAO;YACN,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;YAC1E,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC;YAChE,SAAS;YACT,SAAS,EAAE,gBAAgB,CAAC,SAAS;YACrC,cAAc,EAAE,YAAY;SAC5B,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,2BAA2B;QAC3B,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzC,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,gBAAgB,CAAC,SAAS,EAAE,CAAC;gBAChC,cAAc,EAAE,CAAC;YAClB,CAAC;YACD,MAAM,aAAa,EAAE,CAAC;YACtB,OAAO;gBACN,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;gBAC1E,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,gBAAgB,CAAC,SAAS;gBACrC,cAAc,EAAE,YAAY;aAC5B,CAAC;QACH,CAAC;QAED,MAAM,aAAa,EAAE,CAAC;QAEtB,MAAM,GAAG,CAAC;IACX,CAAC;AAAA,CACD","sourcesContent":["/**\n * Bash command execution with streaming support and cancellation.\n *\n * This module provides a unified bash execution implementation used by:\n * - AgentSession.executeBash() for interactive and RPC modes\n * - Direct calls from modes that need bash execution\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { createWriteStream, type WriteStream } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { finished } from \"node:stream/promises\";\nimport { stripAnsi } from \"../utils/ansi.ts\";\nimport { sanitizeBinaryOutput } from \"../utils/shell.ts\";\nimport type { BashOperations } from \"./tools/bash.ts\";\nimport { DEFAULT_MAX_BYTES, truncateTail } from \"./tools/truncate.ts\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface BashExecutorOptions {\n\t/** Callback for streaming output chunks (already sanitized) */\n\tonChunk?: (chunk: string) => void;\n\t/** AbortSignal for cancellation */\n\tsignal?: AbortSignal;\n}\n\nexport interface BashResult {\n\t/** Combined stdout + stderr output (sanitized, possibly truncated) */\n\toutput: string;\n\t/** Process exit code (undefined if killed/cancelled) */\n\texitCode: number | undefined;\n\t/** Whether the command was cancelled via signal */\n\tcancelled: boolean;\n\t/** Whether the output was truncated */\n\ttruncated: boolean;\n\t/** Path to temp file containing full output (if output exceeded truncation threshold) */\n\tfullOutputPath?: string;\n}\n\n// ============================================================================\n// Implementation\n// ============================================================================\n\n/**\n * Execute a bash command using custom BashOperations.\n * Used for remote execution (SSH, containers, etc.).\n */\nexport async function executeBashWithOperations(\n\tcommand: string,\n\tcwd: string,\n\toperations: BashOperations,\n\toptions?: BashExecutorOptions,\n): Promise<BashResult> {\n\tconst outputChunks: string[] = [];\n\tlet outputBytes = 0;\n\tconst maxOutputBytes = DEFAULT_MAX_BYTES * 2;\n\n\tlet tempFilePath: string | undefined;\n\tlet tempFileStream: WriteStream | undefined;\n\tlet totalBytes = 0;\n\n\tconst ensureTempFile = () => {\n\t\tif (tempFilePath) {\n\t\t\treturn;\n\t\t}\n\t\tconst id = randomBytes(8).toString(\"hex\");\n\t\ttempFilePath = join(tmpdir(), `apex-code-bash-${id}.log`);\n\t\ttempFileStream = createWriteStream(tempFilePath);\n\t\tfor (const chunk of outputChunks) {\n\t\t\ttempFileStream.write(chunk);\n\t\t}\n\t};\n\n\tconst decoder = new TextDecoder();\n\n\tconst onData = (data: Buffer) => {\n\t\ttotalBytes += data.length;\n\n\t\t// Sanitize: strip ANSI, replace binary garbage, normalize newlines\n\t\tconst text = sanitizeBinaryOutput(stripAnsi(decoder.decode(data, { stream: true }))).replace(/\\r/g, \"\");\n\n\t\t// Start writing to temp file if exceeds threshold\n\t\tif (totalBytes > DEFAULT_MAX_BYTES) {\n\t\t\tensureTempFile();\n\t\t}\n\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.write(text);\n\t\t}\n\n\t\t// Keep rolling buffer\n\t\toutputChunks.push(text);\n\t\toutputBytes += text.length;\n\t\twhile (outputBytes > maxOutputBytes && outputChunks.length > 1) {\n\t\t\tconst removed = outputChunks.shift()!;\n\t\t\toutputBytes -= removed.length;\n\t\t}\n\n\t\t// Stream to callback\n\t\tif (options?.onChunk) {\n\t\t\toptions.onChunk(text);\n\t\t}\n\t};\n\n\tconst closeTempFile = async () => {\n\t\tif (!tempFileStream) return;\n\t\ttempFileStream.end();\n\t\tawait finished(tempFileStream);\n\t};\n\n\ttry {\n\t\tconst result = await operations.exec(command, cwd, {\n\t\t\tonData,\n\t\t\tsignal: options?.signal,\n\t\t});\n\n\t\tconst fullOutput = outputChunks.join(\"\");\n\t\tconst truncationResult = truncateTail(fullOutput);\n\t\tif (truncationResult.truncated) {\n\t\t\tensureTempFile();\n\t\t}\n\t\tawait closeTempFile();\n\t\tconst cancelled = options?.signal?.aborted ?? false;\n\n\t\treturn {\n\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\texitCode: cancelled ? undefined : (result.exitCode ?? undefined),\n\t\t\tcancelled,\n\t\t\ttruncated: truncationResult.truncated,\n\t\t\tfullOutputPath: tempFilePath,\n\t\t};\n\t} catch (err) {\n\t\t// Check if it was an abort\n\t\tif (options?.signal?.aborted) {\n\t\t\tconst fullOutput = outputChunks.join(\"\");\n\t\t\tconst truncationResult = truncateTail(fullOutput);\n\t\t\tif (truncationResult.truncated) {\n\t\t\t\tensureTempFile();\n\t\t\t}\n\t\t\tawait closeTempFile();\n\t\t\treturn {\n\t\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\t\texitCode: undefined,\n\t\t\t\tcancelled: true,\n\t\t\t\ttruncated: truncationResult.truncated,\n\t\t\t\tfullOutputPath: tempFilePath,\n\t\t\t};\n\t\t}\n\n\t\tawait closeTempFile();\n\n\t\tthrow err;\n\t}\n}\n"]}
+{"version":3,"file":"bash-executor.js","sourceRoot":"","sources":["../../src/core/bash-executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAoB,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AA0BtE,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAAe,EACf,GAAW,EACX,UAA0B,EAC1B,OAA6B,EACP;IACtB,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,cAAc,GAAG,iBAAiB,GAAG,CAAC,CAAC;IAE7C,IAAI,YAAgC,CAAC;IACrC,IAAI,cAAuC,CAAC;IAC5C,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC;QAC5B,IAAI,YAAY,EAAE,CAAC;YAClB,OAAO;QACR,CAAC;QACD,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1C,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAC1D,cAAc,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACjD,uEAAuE;QACvE,oEAAoE;QACpE,mDAAmD;QACnD,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;YAChC,cAAc,GAAG,SAAS,CAAC;YAC3B,YAAY,GAAG,SAAS,CAAC;QAAA,CACzB,CAAC,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YAClC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAElC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC;QAChC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;QAE1B,mEAAmE;QACnE,MAAM,IAAI,GAAG,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAExG,kDAAkD;QAClD,IAAI,UAAU,GAAG,iBAAiB,EAAE,CAAC;YACpC,cAAc,EAAE,CAAC;QAClB,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACpB,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,sBAAsB;QACtB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC;QAC3B,OAAO,WAAW,GAAG,cAAc,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAG,CAAC;YACtC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;QAC/B,CAAC;QAED,qBAAqB;QACrB,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACtB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,cAAc;YAAE,OAAO;QAC5B,cAAc,CAAC,GAAG,EAAE,CAAC;QACrB,MAAM,QAAQ,CAAC,cAAc,CAAC,CAAC;IAAA,CAC/B,CAAC;IAEF,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YAClD,MAAM;YACN,MAAM,EAAE,OAAO,EAAE,MAAM;SACvB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,gBAAgB,CAAC,SAAS,EAAE,CAAC;YAChC,cAAc,EAAE,CAAC;QAClB,CAAC;QACD,MAAM,aAAa,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC;QAEpD,OAAO;YACN,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;YAC1E,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC;YAChE,SAAS;YACT,SAAS,EAAE,gBAAgB,CAAC,SAAS;YACrC,cAAc,EAAE,YAAY;SAC5B,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,2BAA2B;QAC3B,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzC,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,gBAAgB,CAAC,SAAS,EAAE,CAAC;gBAChC,cAAc,EAAE,CAAC;YAClB,CAAC;YACD,MAAM,aAAa,EAAE,CAAC;YACtB,OAAO;gBACN,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;gBAC1E,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,gBAAgB,CAAC,SAAS;gBACrC,cAAc,EAAE,YAAY;aAC5B,CAAC;QACH,CAAC;QAED,MAAM,aAAa,EAAE,CAAC;QAEtB,MAAM,GAAG,CAAC;IACX,CAAC;AAAA,CACD","sourcesContent":["/**\n * Bash command execution with streaming support and cancellation.\n *\n * This module provides a unified bash execution implementation used by:\n * - AgentSession.executeBash() for interactive and RPC modes\n * - Direct calls from modes that need bash execution\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { createWriteStream, type WriteStream } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { finished } from \"node:stream/promises\";\nimport { stripAnsi } from \"../utils/ansi.ts\";\nimport { sanitizeBinaryOutput } from \"../utils/shell.ts\";\nimport type { BashOperations } from \"./tools/bash.ts\";\nimport { DEFAULT_MAX_BYTES, truncateTail } from \"./tools/truncate.ts\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface BashExecutorOptions {\n\t/** Callback for streaming output chunks (already sanitized) */\n\tonChunk?: (chunk: string) => void;\n\t/** AbortSignal for cancellation */\n\tsignal?: AbortSignal;\n}\n\nexport interface BashResult {\n\t/** Combined stdout + stderr output (sanitized, possibly truncated) */\n\toutput: string;\n\t/** Process exit code (undefined if killed/cancelled) */\n\texitCode: number | undefined;\n\t/** Whether the command was cancelled via signal */\n\tcancelled: boolean;\n\t/** Whether the output was truncated */\n\ttruncated: boolean;\n\t/** Path to temp file containing full output (if output exceeded truncation threshold) */\n\tfullOutputPath?: string;\n}\n\n// ============================================================================\n// Implementation\n// ============================================================================\n\n/**\n * Execute a bash command using custom BashOperations.\n * Used for remote execution (SSH, containers, etc.).\n */\nexport async function executeBashWithOperations(\n\tcommand: string,\n\tcwd: string,\n\toperations: BashOperations,\n\toptions?: BashExecutorOptions,\n): Promise<BashResult> {\n\tconst outputChunks: string[] = [];\n\tlet outputBytes = 0;\n\tconst maxOutputBytes = DEFAULT_MAX_BYTES * 2;\n\n\tlet tempFilePath: string | undefined;\n\tlet tempFileStream: WriteStream | undefined;\n\tlet totalBytes = 0;\n\n\tconst ensureTempFile = () => {\n\t\tif (tempFilePath) {\n\t\t\treturn;\n\t\t}\n\t\tconst id = randomBytes(8).toString(\"hex\");\n\t\ttempFilePath = join(tmpdir(), `apex-code-bash-${id}.log`);\n\t\ttempFileStream = createWriteStream(tempFilePath);\n\t\t// A stream 'error' event (ENOSPC, EACCES) with no listener crashes the\n\t\t// whole process mid-command; full-output capture is best-effort, so\n\t\t// drop the capture and the reported path together.\n\t\ttempFileStream.on(\"error\", () => {\n\t\t\ttempFileStream = undefined;\n\t\t\ttempFilePath = undefined;\n\t\t});\n\t\tfor (const chunk of outputChunks) {\n\t\t\ttempFileStream.write(chunk);\n\t\t}\n\t};\n\n\tconst decoder = new TextDecoder();\n\n\tconst onData = (data: Buffer) => {\n\t\ttotalBytes += data.length;\n\n\t\t// Sanitize: strip ANSI, replace binary garbage, normalize newlines\n\t\tconst text = sanitizeBinaryOutput(stripAnsi(decoder.decode(data, { stream: true }))).replace(/\\r/g, \"\");\n\n\t\t// Start writing to temp file if exceeds threshold\n\t\tif (totalBytes > DEFAULT_MAX_BYTES) {\n\t\t\tensureTempFile();\n\t\t}\n\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.write(text);\n\t\t}\n\n\t\t// Keep rolling buffer\n\t\toutputChunks.push(text);\n\t\toutputBytes += text.length;\n\t\twhile (outputBytes > maxOutputBytes && outputChunks.length > 1) {\n\t\t\tconst removed = outputChunks.shift()!;\n\t\t\toutputBytes -= removed.length;\n\t\t}\n\n\t\t// Stream to callback\n\t\tif (options?.onChunk) {\n\t\t\toptions.onChunk(text);\n\t\t}\n\t};\n\n\tconst closeTempFile = async () => {\n\t\tif (!tempFileStream) return;\n\t\ttempFileStream.end();\n\t\tawait finished(tempFileStream);\n\t};\n\n\ttry {\n\t\tconst result = await operations.exec(command, cwd, {\n\t\t\tonData,\n\t\t\tsignal: options?.signal,\n\t\t});\n\n\t\tconst fullOutput = outputChunks.join(\"\");\n\t\tconst truncationResult = truncateTail(fullOutput);\n\t\tif (truncationResult.truncated) {\n\t\t\tensureTempFile();\n\t\t}\n\t\tawait closeTempFile();\n\t\tconst cancelled = options?.signal?.aborted ?? false;\n\n\t\treturn {\n\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\texitCode: cancelled ? undefined : (result.exitCode ?? undefined),\n\t\t\tcancelled,\n\t\t\ttruncated: truncationResult.truncated,\n\t\t\tfullOutputPath: tempFilePath,\n\t\t};\n\t} catch (err) {\n\t\t// Check if it was an abort\n\t\tif (options?.signal?.aborted) {\n\t\t\tconst fullOutput = outputChunks.join(\"\");\n\t\t\tconst truncationResult = truncateTail(fullOutput);\n\t\t\tif (truncationResult.truncated) {\n\t\t\t\tensureTempFile();\n\t\t\t}\n\t\t\tawait closeTempFile();\n\t\t\treturn {\n\t\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\t\texitCode: undefined,\n\t\t\t\tcancelled: true,\n\t\t\t\ttruncated: truncationResult.truncated,\n\t\t\t\tfullOutputPath: tempFilePath,\n\t\t\t};\n\t\t}\n\n\t\tawait closeTempFile();\n\n\t\tthrow err;\n\t}\n}\n"]}

package/dist/core/checkpoints/git-checkpoints.d.ts

@@ -0,0 +1,39 @@
+/** One captured worktree state, reachable from a ref so garbage collection cannot reap it. */
+export interface GitCheckpoint {
+    readonly entryId: string;
+    readonly commit: string;
+}
+export interface GitCheckpointsOptions {
+    /** Oldest refs beyond this count are deleted on capture. */
+    readonly maxPerSession?: number;
+    /** A capture that exceeds this is abandoned rather than allowed to stall a turn. */
+    readonly timeoutMilliseconds?: number;
+}
+export interface GitCheckpoints {
+    capture(entryId: string): Promise<GitCheckpoint | undefined>;
+    lookup(entryId: string): Promise<GitCheckpoint | undefined>;
+    list(): Promise<readonly GitCheckpoint[]>;
+    /** Returns a checkpoint of the pre-restore state, which restores back through this same call. */
+    restore(checkpoint: GitCheckpoint): Promise<GitCheckpoint | undefined>;
+    /**
+     * True when the current worktree (tracked and untracked, ignored excluded)
+     * is tree-identical to the checkpoint; false when it moved; undefined when
+     * the comparison could not be performed.
+     */
+    matchesWorktree(checkpoint: GitCheckpoint): Promise<boolean | undefined>;
+    /** Deletes every ref this session owns, leaving other sessions' refs alone. */
+    prune(): Promise<void>;
+}
+export declare function createGitCheckpoints(workspace: string, sessionId: string, options?: GitCheckpointsOptions): Promise<GitCheckpoints | undefined>;
+/**
+ * Opt-in configuration for the engine above.
+ *
+ * Absent by default, and an absent key constructs no engine, so an unconfigured session
+ * runs no `git` subprocess and writes no ref.
+ */
+export interface CheckpointSettings {
+    enabled?: boolean;
+    /** Oldest refs beyond this count are deleted on capture. Defaults to 50. */
+    maxPerSession?: number;
+}
+//# sourceMappingURL=git-checkpoints.d.ts.map

package/dist/core/checkpoints/git-checkpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-checkpoints.d.ts","sourceRoot":"","sources":["../../../src/core/checkpoints/git-checkpoints.ts"],"names":[],"mappings":"AAKA,8FAA8F;AAC9F,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACrC,4DAA4D;IAC5D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,oFAAoF;IACpF,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,cAAc;IAC9B,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IAC7D,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IAC5D,IAAI,IAAI,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAAC;IAC1C,iGAAiG;IACjG,OAAO,CAAC,UAAU,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IACvE;;;;OAIG;IACH,eAAe,CAAC,UAAU,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACzE,+EAA+E;IAC/E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAsFD,wBAAsB,oBAAoB,CACzC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC7B,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAkLrC;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB","sourcesContent":["import { spawn } from \"node:child_process\";\nimport { mkdtemp, rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\n\n/** One captured worktree state, reachable from a ref so garbage collection cannot reap it. */\nexport interface GitCheckpoint {\n\treadonly entryId: string;\n\treadonly commit: string;\n}\n\nexport interface GitCheckpointsOptions {\n\t/** Oldest refs beyond this count are deleted on capture. */\n\treadonly maxPerSession?: number;\n\t/** A capture that exceeds this is abandoned rather than allowed to stall a turn. */\n\treadonly timeoutMilliseconds?: number;\n}\n\nexport interface GitCheckpoints {\n\tcapture(entryId: string): Promise<GitCheckpoint | undefined>;\n\tlookup(entryId: string): Promise<GitCheckpoint | undefined>;\n\tlist(): Promise<readonly GitCheckpoint[]>;\n\t/** Returns a checkpoint of the pre-restore state, which restores back through this same call. */\n\trestore(checkpoint: GitCheckpoint): Promise<GitCheckpoint | undefined>;\n\t/**\n\t * True when the current worktree (tracked and untracked, ignored excluded)\n\t * is tree-identical to the checkpoint; false when it moved; undefined when\n\t * the comparison could not be performed.\n\t */\n\tmatchesWorktree(checkpoint: GitCheckpoint): Promise<boolean | undefined>;\n\t/** Deletes every ref this session owns, leaving other sessions' refs alone. */\n\tprune(): Promise<void>;\n}\n\nconst DEFAULT_MAX_PER_SESSION = 50;\nconst DEFAULT_TIMEOUT_MILLISECONDS = 15_000;\n\n/**\n * A fixed identity, never the user's.\n *\n * A checkpoint is harness bookkeeping rather than authorship, and `commit-tree` fails\n * outright when no identity resolves. Depending on the user's config would break exactly\n * where it matters most: a fresh clone, and a CI checkout, both of which configure none.\n */\nconst CHECKPOINT_IDENTITY = {\n\tGIT_AUTHOR_NAME: \"apex-code\",\n\tGIT_AUTHOR_EMAIL: \"checkpoints@apex-code.local\",\n\tGIT_COMMITTER_NAME: \"apex-code\",\n\tGIT_COMMITTER_EMAIL: \"checkpoints@apex-code.local\",\n} as const;\n\nconst SUBJECT_PREFIX = \"apex-code checkpoint\";\n\n/**\n * Applied to every invocation below, which is why it lives here rather than on the two\n * commands that read and write worktree content.\n *\n * `core.autocrlf` is a property of the machine, not of the repository, and it is `true` by\n * default on Windows. Left alone it decides what a checkpoint restores: capture and restore\n * both run content through git's clean and smudge filters, so a file the agent wrote with\n * LF endings comes back with CRLF and a restore silently rewrites line endings across the\n * worktree. Pinning it off makes the round trip byte-exact.\n *\n * `.gitattributes` is deliberately *not* overridden. That is the repository's own declared\n * policy, git applies it to every ordinary checkout, and a restore that ignored it would\n * disagree with `git checkout` on the same files.\n */\nconst IGNORE_MACHINE_EOL_PREFERENCE = [\"-c\", \"core.autocrlf=false\"];\n\ninterface GitResult {\n\treadonly stdout: string;\n\treadonly ok: boolean;\n}\n\nasync function runGit(\n\tcwd: string,\n\targs: string[],\n\tenvironment?: NodeJS.ProcessEnv,\n\ttimeout?: number,\n): Promise<GitResult> {\n\treturn new Promise((resolve) => {\n\t\tconst child = spawn(\"git\", [...IGNORE_MACHINE_EOL_PREFERENCE, ...args], {\n\t\t\tcwd,\n\t\t\tshell: false,\n\t\t\tstdio: [\"ignore\", \"pipe\", \"pipe\"],\n\t\t\tenv: { ...process.env, ...environment },\n\t\t});\n\t\tlet stdout = \"\";\n\t\tlet settled = false;\n\t\tconst finish = (ok: boolean) => {\n\t\t\tif (settled) return;\n\t\t\tsettled = true;\n\t\t\tclearTimeout(timer);\n\t\t\tresolve({ stdout: stdout.trim(), ok });\n\t\t};\n\t\tconst timer = setTimeout(() => {\n\t\t\tchild.kill(\"SIGKILL\");\n\t\t\tfinish(false);\n\t\t}, timeout ?? DEFAULT_TIMEOUT_MILLISECONDS);\n\n\t\tchild.stdout?.on(\"data\", (chunk) => {\n\t\t\tstdout += chunk;\n\t\t});\n\t\tchild.stderr?.resume();\n\t\tchild.on(\"error\", () => finish(false));\n\t\tchild.on(\"close\", (code) => finish(code === 0));\n\t});\n}\n\n/**\n * An entry id reaches this engine from a session file on disk, so it decides a ref name\n * that must not be able to escape the engine's own namespace. An allowlist is the check\n * that stays correct as git's own ref rules grow; a denylist of `..` and friends does not.\n */\nfunction isSafeRefComponent(value: string): boolean {\n\treturn /^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(value) && !value.includes(\"..\") && !value.endsWith(\".lock\");\n}\n\nexport async function createGitCheckpoints(\n\tworkspace: string,\n\tsessionId: string,\n\toptions?: GitCheckpointsOptions,\n): Promise<GitCheckpoints | undefined> {\n\tif (!isSafeRefComponent(sessionId)) return undefined;\n\tif (!(await runGit(workspace, [\"rev-parse\", \"--git-dir\"])).ok) return undefined;\n\n\tconst maxPerSession = Math.max(1, options?.maxPerSession ?? DEFAULT_MAX_PER_SESSION);\n\tconst timeout = options?.timeoutMilliseconds ?? DEFAULT_TIMEOUT_MILLISECONDS;\n\tconst checkpointRef = (entryId: string) => `refs/apex-code/checkpoints/${sessionId}/${entryId}`;\n\tconst preRestoreNamespace = `refs/apex-code/pre-restore/${sessionId}`;\n\n\t/**\n\t * Write the worktree to a commit without touching anything the user can see.\n\t *\n\t * A private index is what makes that true: `add -A` against it stages tracked\n\t * modifications and untracked files, honours `.gitignore`, and leaves the real index\n\t * and the worktree byte-identical. `commit-tree` and `update-ref` are plumbing, so no\n\t * hook runs and the stash is never involved.\n\t */\n\tasync function snapshot(subject: string): Promise<string | undefined> {\n\t\tconst indexDirectory = await mkdtemp(join(tmpdir(), \"apex-checkpoint-index-\"));\n\t\tconst indexFile = join(indexDirectory, \"index\");\n\t\tconst environment = { GIT_INDEX_FILE: indexFile };\n\t\ttry {\n\t\t\t// Fails before the first commit, which is a supported state rather than an error.\n\t\t\tawait runGit(workspace, [\"read-tree\", \"HEAD\"], environment, timeout);\n\t\t\tif (!(await runGit(workspace, [\"add\", \"-A\"], environment, timeout)).ok) return undefined;\n\n\t\t\tconst tree = await runGit(workspace, [\"write-tree\"], environment, timeout);\n\t\t\tif (!tree.ok) return undefined;\n\n\t\t\tconst head = await runGit(workspace, [\"rev-parse\", \"HEAD\"]);\n\t\t\tconst parent = head.ok ? [\"-p\", head.stdout] : [];\n\t\t\tconst commit = await runGit(\n\t\t\t\tworkspace,\n\t\t\t\t[\"commit-tree\", tree.stdout, ...parent, \"-m\", subject],\n\t\t\t\t{ ...CHECKPOINT_IDENTITY, ...environment },\n\t\t\t\ttimeout,\n\t\t\t);\n\t\t\treturn commit.ok ? commit.stdout : undefined;\n\t\t} finally {\n\t\t\tawait rm(indexDirectory, { force: true, recursive: true });\n\t\t}\n\t}\n\n\tasync function refsUnder(namespace: string): Promise<Array<{ ref: string; commit: string; ordinal: number }>> {\n\t\tconst listed = await runGit(workspace, [\n\t\t\t\"for-each-ref\",\n\t\t\t\"--format=%(refname) %(objectname) %(contents:subject)\",\n\t\t\tnamespace,\n\t\t]);\n\t\tif (!listed.ok || listed.stdout === \"\") return [];\n\t\treturn listed.stdout\n\t\t\t.split(\"\\n\")\n\t\t\t.map((line) => {\n\t\t\t\tconst [ref, commit, ...subject] = line.split(\" \");\n\t\t\t\treturn { ref: ref ?? \"\", commit: commit ?? \"\", ordinal: Number(subject.at(-1)) };\n\t\t\t})\n\t\t\t.filter((entry) => entry.ref !== \"\" && Number.isFinite(entry.ordinal))\n\t\t\t.sort((left, right) => left.ordinal - right.ordinal);\n\t}\n\n\t/**\n\t * Refs carry no creation order of their own, and `commit-tree` records a committer date\n\t * only to the second, so two captures inside one second would be indistinguishable.\n\t * The ordinal in the subject is the ordering, and it is derived from what is already on\n\t * disk so it survives a restart the same way the refs do.\n\t */\n\tasync function nextOrdinal(): Promise<number> {\n\t\tconst existing = [\n\t\t\t...(await refsUnder(`refs/apex-code/checkpoints/${sessionId}`)),\n\t\t\t...(await refsUnder(preRestoreNamespace)),\n\t\t];\n\t\t// The maximum across both namespaces, not the tail of the pair. `refsUnder` sorts\n\t\t// each list on its own, and two sorted lists concatenated are not sorted, so a\n\t\t// restore followed by further captures would otherwise reuse an ordinal already in\n\t\t// the other namespace and `bound` would prune by a broken order.\n\t\treturn existing.reduce((highest, entry) => Math.max(highest, entry.ordinal), 0) + 1;\n\t}\n\n\tasync function bound(namespace: string): Promise<void> {\n\t\tconst existing = await refsUnder(namespace);\n\t\tfor (const stale of existing.slice(0, Math.max(0, existing.length - maxPerSession))) {\n\t\t\tawait runGit(workspace, [\"update-ref\", \"-d\", stale.ref]);\n\t\t}\n\t}\n\n\tasync function restoreCommit(commit: string): Promise<boolean> {\n\t\tconst indexDirectory = await mkdtemp(join(tmpdir(), \"apex-checkpoint-restore-\"));\n\t\tconst indexFile = join(indexDirectory, \"index\");\n\t\tconst environment = { GIT_INDEX_FILE: indexFile };\n\t\ttry {\n\t\t\t// Seeding the private index from the *current* worktree is what lets\n\t\t\t// `read-tree -u` remove files created after the checkpoint. Seeded from HEAD\n\t\t\t// instead, those files would be untracked and would survive the restore, which\n\t\t\t// is the merge-not-restore defect this replaces.\n\t\t\tawait runGit(workspace, [\"read-tree\", \"HEAD\"], environment, timeout);\n\t\t\tawait runGit(workspace, [\"add\", \"-A\"], environment, timeout);\n\t\t\tif (!(await runGit(workspace, [\"read-tree\", \"-u\", \"--reset\", commit], environment, timeout)).ok) return false;\n\n\t\t\t// The real index goes back to HEAD without touching the worktree, so the\n\t\t\t// checkpoint's changes read as unstaged, which is the shape they had at capture.\n\t\t\tawait runGit(workspace, [\"read-tree\", \"HEAD\"], undefined, timeout);\n\t\t\treturn true;\n\t\t} finally {\n\t\t\tawait rm(indexDirectory, { force: true, recursive: true });\n\t\t}\n\t}\n\n\treturn {\n\t\tasync capture(entryId) {\n\t\t\tif (!isSafeRefComponent(entryId)) return undefined;\n\t\t\tconst ordinal = await nextOrdinal();\n\t\t\tconst commit = await snapshot(`${SUBJECT_PREFIX} ${ordinal}`);\n\t\t\tif (!commit) return undefined;\n\t\t\tif (!(await runGit(workspace, [\"update-ref\", checkpointRef(entryId), commit])).ok) return undefined;\n\t\t\tawait bound(`refs/apex-code/checkpoints/${sessionId}`);\n\t\t\treturn { entryId, commit };\n\t\t},\n\n\t\tasync lookup(entryId) {\n\t\t\tif (!isSafeRefComponent(entryId)) return undefined;\n\t\t\tconst resolved = await runGit(workspace, [\n\t\t\t\t\"rev-parse\",\n\t\t\t\t\"--verify\",\n\t\t\t\t\"--quiet\",\n\t\t\t\t`${checkpointRef(entryId)}^{commit}`,\n\t\t\t]);\n\t\t\treturn resolved.ok && resolved.stdout !== \"\" ? { entryId, commit: resolved.stdout } : undefined;\n\t\t},\n\n\t\tasync list() {\n\t\t\tconst prefix = `refs/apex-code/checkpoints/${sessionId}/`;\n\t\t\treturn (await refsUnder(`refs/apex-code/checkpoints/${sessionId}`)).map((entry) => ({\n\t\t\t\tentryId: entry.ref.slice(prefix.length),\n\t\t\t\tcommit: entry.commit,\n\t\t\t}));\n\t\t},\n\n\t\tasync matchesWorktree(checkpoint) {\n\t\t\tconst indexDirectory = await mkdtemp(join(tmpdir(), \"apex-checkpoint-compare-\"));\n\t\t\tconst indexFile = join(indexDirectory, \"index\");\n\t\t\tconst environment = { GIT_INDEX_FILE: indexFile };\n\t\t\ttry {\n\t\t\t\tconst commitTree = await runGit(workspace, [\"rev-parse\", `${checkpoint.commit}^{tree}`]);\n\t\t\t\tif (!commitTree.ok) return undefined;\n\t\t\t\tif (!(await runGit(workspace, [\"read-tree\", checkpoint.commit], environment, timeout)).ok) return undefined;\n\t\t\t\tif (!(await runGit(workspace, [\"add\", \"-A\"], environment, timeout)).ok) return undefined;\n\t\t\t\tconst worktreeTree = await runGit(workspace, [\"write-tree\"], environment, timeout);\n\t\t\t\tif (!worktreeTree.ok) return undefined;\n\t\t\t\treturn worktreeTree.stdout.trim() === commitTree.stdout.trim();\n\t\t\t} finally {\n\t\t\t\tawait rm(indexDirectory, { recursive: true, force: true }).catch(() => {});\n\t\t\t}\n\t\t},\n\n\t\tasync restore(checkpoint) {\n\t\t\tconst ordinal = await nextOrdinal();\n\t\t\tconst previous = await snapshot(`${SUBJECT_PREFIX} ${ordinal}`);\n\t\t\tif (!previous) return undefined;\n\t\t\t// Pinned before the restore runs, so an interrupted restore still leaves the\n\t\t\t// pre-restore state reachable rather than orphaned. The write is checked because\n\t\t\t// an unpinned snapshot is unreachable and collectable: proceeding past a failure\n\t\t\t// here would overwrite the worktree with no way back to what it held.\n\t\t\tif (!(await runGit(workspace, [\"update-ref\", `${preRestoreNamespace}/${ordinal}`, previous])).ok) {\n\t\t\t\treturn undefined;\n\t\t\t}\n\t\t\tawait bound(preRestoreNamespace);\n\t\t\tif (!(await restoreCommit(checkpoint.commit))) return undefined;\n\t\t\treturn { entryId: \"pre-restore\", commit: previous };\n\t\t},\n\n\t\tasync prune() {\n\t\t\tfor (const namespace of [`refs/apex-code/checkpoints/${sessionId}`, preRestoreNamespace]) {\n\t\t\t\tfor (const entry of await refsUnder(namespace)) {\n\t\t\t\t\tawait runGit(workspace, [\"update-ref\", \"-d\", entry.ref]);\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t};\n}\n\n/**\n * Opt-in configuration for the engine above.\n *\n * Absent by default, and an absent key constructs no engine, so an unconfigured session\n * runs no `git` subprocess and writes no ref.\n */\nexport interface CheckpointSettings {\n\tenabled?: boolean;\n\t/** Oldest refs beyond this count are deleted on capture. Defaults to 50. */\n\tmaxPerSession?: number;\n}\n"]}

package/dist/core/checkpoints/git-checkpoints.js

@@ -0,0 +1,251 @@
+import { spawn } from "node:child_process";
+import { mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+const DEFAULT_MAX_PER_SESSION = 50;
+const DEFAULT_TIMEOUT_MILLISECONDS = 15_000;
+/**
+ * A fixed identity, never the user's.
+ *
+ * A checkpoint is harness bookkeeping rather than authorship, and `commit-tree` fails
+ * outright when no identity resolves. Depending on the user's config would break exactly
+ * where it matters most: a fresh clone, and a CI checkout, both of which configure none.
+ */
+const CHECKPOINT_IDENTITY = {
+    GIT_AUTHOR_NAME: "apex-code",
+    GIT_AUTHOR_EMAIL: "checkpoints@apex-code.local",
+    GIT_COMMITTER_NAME: "apex-code",
+    GIT_COMMITTER_EMAIL: "checkpoints@apex-code.local",
+};
+const SUBJECT_PREFIX = "apex-code checkpoint";
+/**
+ * Applied to every invocation below, which is why it lives here rather than on the two
+ * commands that read and write worktree content.
+ *
+ * `core.autocrlf` is a property of the machine, not of the repository, and it is `true` by
+ * default on Windows. Left alone it decides what a checkpoint restores: capture and restore
+ * both run content through git's clean and smudge filters, so a file the agent wrote with
+ * LF endings comes back with CRLF and a restore silently rewrites line endings across the
+ * worktree. Pinning it off makes the round trip byte-exact.
+ *
+ * `.gitattributes` is deliberately *not* overridden. That is the repository's own declared
+ * policy, git applies it to every ordinary checkout, and a restore that ignored it would
+ * disagree with `git checkout` on the same files.
+ */
+const IGNORE_MACHINE_EOL_PREFERENCE = ["-c", "core.autocrlf=false"];
+async function runGit(cwd, args, environment, timeout) {
+    return new Promise((resolve) => {
+        const child = spawn("git", [...IGNORE_MACHINE_EOL_PREFERENCE, ...args], {
+            cwd,
+            shell: false,
+            stdio: ["ignore", "pipe", "pipe"],
+            env: { ...process.env, ...environment },
+        });
+        let stdout = "";
+        let settled = false;
+        const finish = (ok) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve({ stdout: stdout.trim(), ok });
+        };
+        const timer = setTimeout(() => {
+            child.kill("SIGKILL");
+            finish(false);
+        }, timeout ?? DEFAULT_TIMEOUT_MILLISECONDS);
+        child.stdout?.on("data", (chunk) => {
+            stdout += chunk;
+        });
+        child.stderr?.resume();
+        child.on("error", () => finish(false));
+        child.on("close", (code) => finish(code === 0));
+    });
+}
+/**
+ * An entry id reaches this engine from a session file on disk, so it decides a ref name
+ * that must not be able to escape the engine's own namespace. An allowlist is the check
+ * that stays correct as git's own ref rules grow; a denylist of `..` and friends does not.
+ */
+function isSafeRefComponent(value) {
+    return /^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(value) && !value.includes("..") && !value.endsWith(".lock");
+}
+export async function createGitCheckpoints(workspace, sessionId, options) {
+    if (!isSafeRefComponent(sessionId))
+        return undefined;
+    if (!(await runGit(workspace, ["rev-parse", "--git-dir"])).ok)
+        return undefined;
+    const maxPerSession = Math.max(1, options?.maxPerSession ?? DEFAULT_MAX_PER_SESSION);
+    const timeout = options?.timeoutMilliseconds ?? DEFAULT_TIMEOUT_MILLISECONDS;
+    const checkpointRef = (entryId) => `refs/apex-code/checkpoints/${sessionId}/${entryId}`;
+    const preRestoreNamespace = `refs/apex-code/pre-restore/${sessionId}`;
+    /**
+     * Write the worktree to a commit without touching anything the user can see.
+     *
+     * A private index is what makes that true: `add -A` against it stages tracked
+     * modifications and untracked files, honours `.gitignore`, and leaves the real index
+     * and the worktree byte-identical. `commit-tree` and `update-ref` are plumbing, so no
+     * hook runs and the stash is never involved.
+     */
+    async function snapshot(subject) {
+        const indexDirectory = await mkdtemp(join(tmpdir(), "apex-checkpoint-index-"));
+        const indexFile = join(indexDirectory, "index");
+        const environment = { GIT_INDEX_FILE: indexFile };
+        try {
+            // Fails before the first commit, which is a supported state rather than an error.
+            await runGit(workspace, ["read-tree", "HEAD"], environment, timeout);
+            if (!(await runGit(workspace, ["add", "-A"], environment, timeout)).ok)
+                return undefined;
+            const tree = await runGit(workspace, ["write-tree"], environment, timeout);
+            if (!tree.ok)
+                return undefined;
+            const head = await runGit(workspace, ["rev-parse", "HEAD"]);
+            const parent = head.ok ? ["-p", head.stdout] : [];
+            const commit = await runGit(workspace, ["commit-tree", tree.stdout, ...parent, "-m", subject], { ...CHECKPOINT_IDENTITY, ...environment }, timeout);
+            return commit.ok ? commit.stdout : undefined;
+        }
+        finally {
+            await rm(indexDirectory, { force: true, recursive: true });
+        }
+    }
+    async function refsUnder(namespace) {
+        const listed = await runGit(workspace, [
+            "for-each-ref",
+            "--format=%(refname) %(objectname) %(contents:subject)",
+            namespace,
+        ]);
+        if (!listed.ok || listed.stdout === "")
+            return [];
+        return listed.stdout
+            .split("\n")
+            .map((line) => {
+            const [ref, commit, ...subject] = line.split(" ");
+            return { ref: ref ?? "", commit: commit ?? "", ordinal: Number(subject.at(-1)) };
+        })
+            .filter((entry) => entry.ref !== "" && Number.isFinite(entry.ordinal))
+            .sort((left, right) => left.ordinal - right.ordinal);
+    }
+    /**
+     * Refs carry no creation order of their own, and `commit-tree` records a committer date
+     * only to the second, so two captures inside one second would be indistinguishable.
+     * The ordinal in the subject is the ordering, and it is derived from what is already on
+     * disk so it survives a restart the same way the refs do.
+     */
+    async function nextOrdinal() {
+        const existing = [
+            ...(await refsUnder(`refs/apex-code/checkpoints/${sessionId}`)),
+            ...(await refsUnder(preRestoreNamespace)),
+        ];
+        // The maximum across both namespaces, not the tail of the pair. `refsUnder` sorts
+        // each list on its own, and two sorted lists concatenated are not sorted, so a
+        // restore followed by further captures would otherwise reuse an ordinal already in
+        // the other namespace and `bound` would prune by a broken order.
+        return existing.reduce((highest, entry) => Math.max(highest, entry.ordinal), 0) + 1;
+    }
+    async function bound(namespace) {
+        const existing = await refsUnder(namespace);
+        for (const stale of existing.slice(0, Math.max(0, existing.length - maxPerSession))) {
+            await runGit(workspace, ["update-ref", "-d", stale.ref]);
+        }
+    }
+    async function restoreCommit(commit) {
+        const indexDirectory = await mkdtemp(join(tmpdir(), "apex-checkpoint-restore-"));
+        const indexFile = join(indexDirectory, "index");
+        const environment = { GIT_INDEX_FILE: indexFile };
+        try {
+            // Seeding the private index from the *current* worktree is what lets
+            // `read-tree -u` remove files created after the checkpoint. Seeded from HEAD
+            // instead, those files would be untracked and would survive the restore, which
+            // is the merge-not-restore defect this replaces.
+            await runGit(workspace, ["read-tree", "HEAD"], environment, timeout);
+            await runGit(workspace, ["add", "-A"], environment, timeout);
+            if (!(await runGit(workspace, ["read-tree", "-u", "--reset", commit], environment, timeout)).ok)
+                return false;
+            // The real index goes back to HEAD without touching the worktree, so the
+            // checkpoint's changes read as unstaged, which is the shape they had at capture.
+            await runGit(workspace, ["read-tree", "HEAD"], undefined, timeout);
+            return true;
+        }
+        finally {
+            await rm(indexDirectory, { force: true, recursive: true });
+        }
+    }
+    return {
+        async capture(entryId) {
+            if (!isSafeRefComponent(entryId))
+                return undefined;
+            const ordinal = await nextOrdinal();
+            const commit = await snapshot(`${SUBJECT_PREFIX} ${ordinal}`);
+            if (!commit)
+                return undefined;
+            if (!(await runGit(workspace, ["update-ref", checkpointRef(entryId), commit])).ok)
+                return undefined;
+            await bound(`refs/apex-code/checkpoints/${sessionId}`);
+            return { entryId, commit };
+        },
+        async lookup(entryId) {
+            if (!isSafeRefComponent(entryId))
+                return undefined;
+            const resolved = await runGit(workspace, [
+                "rev-parse",
+                "--verify",
+                "--quiet",
+                `${checkpointRef(entryId)}^{commit}`,
+            ]);
+            return resolved.ok && resolved.stdout !== "" ? { entryId, commit: resolved.stdout } : undefined;
+        },
+        async list() {
+            const prefix = `refs/apex-code/checkpoints/${sessionId}/`;
+            return (await refsUnder(`refs/apex-code/checkpoints/${sessionId}`)).map((entry) => ({
+                entryId: entry.ref.slice(prefix.length),
+                commit: entry.commit,
+            }));
+        },
+        async matchesWorktree(checkpoint) {
+            const indexDirectory = await mkdtemp(join(tmpdir(), "apex-checkpoint-compare-"));
+            const indexFile = join(indexDirectory, "index");
+            const environment = { GIT_INDEX_FILE: indexFile };
+            try {
+                const commitTree = await runGit(workspace, ["rev-parse", `${checkpoint.commit}^{tree}`]);
+                if (!commitTree.ok)
+                    return undefined;
+                if (!(await runGit(workspace, ["read-tree", checkpoint.commit], environment, timeout)).ok)
+                    return undefined;
+                if (!(await runGit(workspace, ["add", "-A"], environment, timeout)).ok)
+                    return undefined;
+                const worktreeTree = await runGit(workspace, ["write-tree"], environment, timeout);
+                if (!worktreeTree.ok)
+                    return undefined;
+                return worktreeTree.stdout.trim() === commitTree.stdout.trim();
+            }
+            finally {
+                await rm(indexDirectory, { recursive: true, force: true }).catch(() => { });
+            }
+        },
+        async restore(checkpoint) {
+            const ordinal = await nextOrdinal();
+            const previous = await snapshot(`${SUBJECT_PREFIX} ${ordinal}`);
+            if (!previous)
+                return undefined;
+            // Pinned before the restore runs, so an interrupted restore still leaves the
+            // pre-restore state reachable rather than orphaned. The write is checked because
+            // an unpinned snapshot is unreachable and collectable: proceeding past a failure
+            // here would overwrite the worktree with no way back to what it held.
+            if (!(await runGit(workspace, ["update-ref", `${preRestoreNamespace}/${ordinal}`, previous])).ok) {
+                return undefined;
+            }
+            await bound(preRestoreNamespace);
+            if (!(await restoreCommit(checkpoint.commit)))
+                return undefined;
+            return { entryId: "pre-restore", commit: previous };
+        },
+        async prune() {
+            for (const namespace of [`refs/apex-code/checkpoints/${sessionId}`, preRestoreNamespace]) {
+                for (const entry of await refsUnder(namespace)) {
+                    await runGit(workspace, ["update-ref", "-d", entry.ref]);
+                }
+            }
+        },
+    };
+}
+//# sourceMappingURL=git-checkpoints.js.map

package/dist/core/checkpoints/git-checkpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-checkpoints.js","sourceRoot":"","sources":["../../../src/core/checkpoints/git-checkpoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA+BjC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAE5C;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG;IAC3B,eAAe,EAAE,WAAW;IAC5B,gBAAgB,EAAE,6BAA6B;IAC/C,kBAAkB,EAAE,WAAW;IAC/B,mBAAmB,EAAE,6BAA6B;CACzC,CAAC;AAEX,MAAM,cAAc,GAAG,sBAAsB,CAAC;AAE9C;;;;;;;;;;;;;GAaG;AACH,MAAM,6BAA6B,GAAG,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;AAOpE,KAAK,UAAU,MAAM,CACpB,GAAW,EACX,IAAc,EACd,WAA+B,EAC/B,OAAgB,EACK;IACrB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,6BAA6B,EAAE,GAAG,IAAI,CAAC,EAAE;YACvE,GAAG;YACH,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,WAAW,EAAE;SACvC,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,EAAE,CAAC;YAC/B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAAA,CACvC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,KAAK,CAAC,CAAC;QAAA,CACd,EAAE,OAAO,IAAI,4BAA4B,CAAC,CAAC;QAE5C,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC;QAAA,CAChB,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACvB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACvC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;IAAA,CAChD,CAAC,CAAC;AAAA,CACH;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,KAAa,EAAW;IACnD,OAAO,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAAA,CACvG;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,SAAiB,EACjB,SAAiB,EACjB,OAA+B,EACO;IACtC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAEhF,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,IAAI,uBAAuB,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,OAAO,EAAE,mBAAmB,IAAI,4BAA4B,CAAC;IAC7E,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,8BAA8B,SAAS,IAAI,OAAO,EAAE,CAAC;IAChG,MAAM,mBAAmB,GAAG,8BAA8B,SAAS,EAAE,CAAC;IAEtE;;;;;;;OAOG;IACH,KAAK,UAAU,QAAQ,CAAC,OAAe,EAA+B;QACrE,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;QAClD,IAAI,CAAC;YACJ,kFAAkF;YAClF,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YACrE,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,SAAS,CAAC;YAEzF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAC3E,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,SAAS,CAAC;YAE/B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,MAAM,MAAM,CAC1B,SAAS,EACT,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,EACtD,EAAE,GAAG,mBAAmB,EAAE,GAAG,WAAW,EAAE,EAC1C,OAAO,CACP,CAAC;YACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,CAAC;gBAAS,CAAC;YACV,MAAM,EAAE,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;IAAA,CACD;IAED,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAoE;QAC7G,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE;YACtC,cAAc;YACd,uDAAuD;YACvD,SAAS;SACT,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC,MAAM;aAClB,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAAA,CACjF,CAAC;aACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;aACrE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAAA,CACtD;IAED;;;;;OAKG;IACH,KAAK,UAAU,WAAW,GAAoB;QAC7C,MAAM,QAAQ,GAAG;YAChB,GAAG,CAAC,MAAM,SAAS,CAAC,8BAA8B,SAAS,EAAE,CAAC,CAAC;YAC/D,GAAG,CAAC,MAAM,SAAS,CAAC,mBAAmB,CAAC,CAAC;SACzC,CAAC;QACF,kFAAkF;QAClF,+EAA+E;QAC/E,mFAAmF;QACnF,iEAAiE;QACjE,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IAAA,CACpF;IAED,KAAK,UAAU,KAAK,CAAC,SAAiB,EAAiB;QACtD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QAC5C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,CAAC;IAAA,CACD;IAED,KAAK,UAAU,aAAa,CAAC,MAAc,EAAoB;QAC9D,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;QAClD,IAAI,CAAC;YACJ,qEAAqE;YACrE,6EAA6E;YAC7E,+EAA+E;YAC/E,iDAAiD;YACjD,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YACrE,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAC7D,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,KAAK,CAAC;YAE9G,yEAAyE;YACzE,iFAAiF;YACjF,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACb,CAAC;gBAAS,CAAC;YACV,MAAM,EAAE,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;IAAA,CACD;IAED,OAAO;QACN,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE;YACtB,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;gBAAE,OAAO,SAAS,CAAC;YACnD,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,cAAc,IAAI,OAAO,EAAE,CAAC,CAAC;YAC9D,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,SAAS,CAAC;YACpG,MAAM,KAAK,CAAC,8BAA8B,SAAS,EAAE,CAAC,CAAC;YACvD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAA,CAC3B;QAED,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE;YACrB,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;gBAAE,OAAO,SAAS,CAAC;YACnD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE;gBACxC,WAAW;gBACX,UAAU;gBACV,SAAS;gBACT,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW;aACpC,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAAA,CAChG;QAED,KAAK,CAAC,IAAI,GAAG;YACZ,MAAM,MAAM,GAAG,8BAA8B,SAAS,GAAG,CAAC;YAC1D,OAAO,CAAC,MAAM,SAAS,CAAC,8BAA8B,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACnF,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;gBACvC,MAAM,EAAE,KAAK,CAAC,MAAM;aACpB,CAAC,CAAC,CAAC;QAAA,CACJ;QAED,KAAK,CAAC,eAAe,CAAC,UAAU,EAAE;YACjC,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;YACjF,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;YAClD,IAAI,CAAC;gBACJ,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC;gBACzF,IAAI,CAAC,UAAU,CAAC,EAAE;oBAAE,OAAO,SAAS,CAAC;gBACrC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;oBAAE,OAAO,SAAS,CAAC;gBAC5G,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;oBAAE,OAAO,SAAS,CAAC;gBACzF,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;gBACnF,IAAI,CAAC,YAAY,CAAC,EAAE;oBAAE,OAAO,SAAS,CAAC;gBACvC,OAAO,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAChE,CAAC;oBAAS,CAAC;gBACV,MAAM,EAAE,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;YAC5E,CAAC;QAAA,CACD;QAED,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE;YACzB,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,cAAc,IAAI,OAAO,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAChC,6EAA6E;YAC7E,iFAAiF;YACjF,iFAAiF;YACjF,sEAAsE;YACtE,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,GAAG,mBAAmB,IAAI,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBAClG,OAAO,SAAS,CAAC;YAClB,CAAC;YACD,MAAM,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC;YAChE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAAA,CACpD;QAED,KAAK,CAAC,KAAK,GAAG;YACb,KAAK,MAAM,SAAS,IAAI,CAAC,8BAA8B,SAAS,EAAE,EAAE,mBAAmB,CAAC,EAAE,CAAC;gBAC1F,KAAK,MAAM,KAAK,IAAI,MAAM,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChD,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC1D,CAAC;YACF,CAAC;QAAA,CACD;KACD,CAAC;AAAA,CACF","sourcesContent":["import { spawn } from \"node:child_process\";\nimport { mkdtemp, rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\n\n/** One captured worktree state, reachable from a ref so garbage collection cannot reap it. */\nexport interface GitCheckpoint {\n\treadonly entryId: string;\n\treadonly commit: string;\n}\n\nexport interface GitCheckpointsOptions {\n\t/** Oldest refs beyond this count are deleted on capture. */\n\treadonly maxPerSession?: number;\n\t/** A capture that exceeds this is abandoned rather than allowed to stall a turn. */\n\treadonly timeoutMilliseconds?: number;\n}\n\nexport interface GitCheckpoints {\n\tcapture(entryId: string): Promise<GitCheckpoint | undefined>;\n\tlookup(entryId: string): Promise<GitCheckpoint | undefined>;\n\tlist(): Promise<readonly GitCheckpoint[]>;\n\t/** Returns a checkpoint of the pre-restore state, which restores back through this same call. */\n\trestore(checkpoint: GitCheckpoint): Promise<GitCheckpoint | undefined>;\n\t/**\n\t * True when the current worktree (tracked and untracked, ignored excluded)\n\t * is tree-identical to the checkpoint; false when it moved; undefined when\n\t * the comparison could not be performed.\n\t */\n\tmatchesWorktree(checkpoint: GitCheckpoint): Promise<boolean | undefined>;\n\t/** Deletes every ref this session owns, leaving other sessions' refs alone. */\n\tprune(): Promise<void>;\n}\n\nconst DEFAULT_MAX_PER_SESSION = 50;\nconst DEFAULT_TIMEOUT_MILLISECONDS = 15_000;\n\n/**\n * A fixed identity, never the user's.\n *\n * A checkpoint is harness bookkeeping rather than authorship, and `commit-tree` fails\n * outright when no identity resolves. Depending on the user's config would break exactly\n * where it matters most: a fresh clone, and a CI checkout, both of which configure none.\n */\nconst CHECKPOINT_IDENTITY = {\n\tGIT_AUTHOR_NAME: \"apex-code\",\n\tGIT_AUTHOR_EMAIL: \"checkpoints@apex-code.local\",\n\tGIT_COMMITTER_NAME: \"apex-code\",\n\tGIT_COMMITTER_EMAIL: \"checkpoints@apex-code.local\",\n} as const;\n\nconst SUBJECT_PREFIX = \"apex-code checkpoint\";\n\n/**\n * Applied to every invocation below, which is why it lives here rather than on the two\n * commands that read and write worktree content.\n *\n * `core.autocrlf` is a property of the machine, not of the repository, and it is `true` by\n * default on Windows. Left alone it decides what a checkpoint restores: capture and restore\n * both run content through git's clean and smudge filters, so a file the agent wrote with\n * LF endings comes back with CRLF and a restore silently rewrites line endings across the\n * worktree. Pinning it off makes the round trip byte-exact.\n *\n * `.gitattributes` is deliberately *not* overridden. That is the repository's own declared\n * policy, git applies it to every ordinary checkout, and a restore that ignored it would\n * disagree with `git checkout` on the same files.\n */\nconst IGNORE_MACHINE_EOL_PREFERENCE = [\"-c\", \"core.autocrlf=false\"];\n\ninterface GitResult {\n\treadonly stdout: string;\n\treadonly ok: boolean;\n}\n\nasync function runGit(\n\tcwd: string,\n\targs: string[],\n\tenvironment?: NodeJS.ProcessEnv,\n\ttimeout?: number,\n): Promise<GitResult> {\n\treturn new Promise((resolve) => {\n\t\tconst child = spawn(\"git\", [...IGNORE_MACHINE_EOL_PREFERENCE, ...args], {\n\t\t\tcwd,\n\t\t\tshell: false,\n\t\t\tstdio: [\"ignore\", \"pipe\", \"pipe\"],\n\t\t\tenv: { ...process.env, ...environment },\n\t\t});\n\t\tlet stdout = \"\";\n\t\tlet settled = false;\n\t\tconst finish = (ok: boolean) => {\n\t\t\tif (settled) return;\n\t\t\tsettled = true;\n\t\t\tclearTimeout(timer);\n\t\t\tresolve({ stdout: stdout.trim(), ok });\n\t\t};\n\t\tconst timer = setTimeout(() => {\n\t\t\tchild.kill(\"SIGKILL\");\n\t\t\tfinish(false);\n\t\t}, timeout ?? DEFAULT_TIMEOUT_MILLISECONDS);\n\n\t\tchild.stdout?.on(\"data\", (chunk) => {\n\t\t\tstdout += chunk;\n\t\t});\n\t\tchild.stderr?.resume();\n\t\tchild.on(\"error\", () => finish(false));\n\t\tchild.on(\"close\", (code) => finish(code === 0));\n\t});\n}\n\n/**\n * An entry id reaches this engine from a session file on disk, so it decides a ref name\n * that must not be able to escape the engine's own namespace. An allowlist is the check\n * that stays correct as git's own ref rules grow; a denylist of `..` and friends does not.\n */\nfunction isSafeRefComponent(value: string): boolean {\n\treturn /^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(value) && !value.includes(\"..\") && !value.endsWith(\".lock\");\n}\n\nexport async function createGitCheckpoints(\n\tworkspace: string,\n\tsessionId: string,\n\toptions?: GitCheckpointsOptions,\n): Promise<GitCheckpoints | undefined> {\n\tif (!isSafeRefComponent(sessionId)) return undefined;\n\tif (!(await runGit(workspace, [\"rev-parse\", \"--git-dir\"])).ok) return undefined;\n\n\tconst maxPerSession = Math.max(1, options?.maxPerSession ?? DEFAULT_MAX_PER_SESSION);\n\tconst timeout = options?.timeoutMilliseconds ?? DEFAULT_TIMEOUT_MILLISECONDS;\n\tconst checkpointRef = (entryId: string) => `refs/apex-code/checkpoints/${sessionId}/${entryId}`;\n\tconst preRestoreNamespace = `refs/apex-code/pre-restore/${sessionId}`;\n\n\t/**\n\t * Write the worktree to a commit without touching anything the user can see.\n\t *\n\t * A private index is what makes that true: `add -A` against it stages tracked\n\t * modifications and untracked files, honours `.gitignore`, and leaves the real index\n\t * and the worktree byte-identical. `commit-tree` and `update-ref` are plumbing, so no\n\t * hook runs and the stash is never involved.\n\t */\n\tasync function snapshot(subject: string): Promise<string | undefined> {\n\t\tconst indexDirectory = await mkdtemp(join(tmpdir(), \"apex-checkpoint-index-\"));\n\t\tconst indexFile = join(indexDirectory, \"index\");\n\t\tconst environment = { GIT_INDEX_FILE: indexFile };\n\t\ttry {\n\t\t\t// Fails before the first commit, which is a supported state rather than an error.\n\t\t\tawait runGit(workspace, [\"read-tree\", \"HEAD\"], environment, timeout);\n\t\t\tif (!(await runGit(workspace, [\"add\", \"-A\"], environment, timeout)).ok) return undefined;\n\n\t\t\tconst tree = await runGit(workspace, [\"write-tree\"], environment, timeout);\n\t\t\tif (!tree.ok) return undefined;\n\n\t\t\tconst head = await runGit(workspace, [\"rev-parse\", \"HEAD\"]);\n\t\t\tconst parent = head.ok ? [\"-p\", head.stdout] : [];\n\t\t\tconst commit = await runGit(\n\t\t\t\tworkspace,\n\t\t\t\t[\"commit-tree\", tree.stdout, ...parent, \"-m\", subject],\n\t\t\t\t{ ...CHECKPOINT_IDENTITY, ...environment },\n\t\t\t\ttimeout,\n\t\t\t);\n\t\t\treturn commit.ok ? commit.stdout : undefined;\n\t\t} finally {\n\t\t\tawait rm(indexDirectory, { force: true, recursive: true });\n\t\t}\n\t}\n\n\tasync function refsUnder(namespace: string): Promise<Array<{ ref: string; commit: string; ordinal: number }>> {\n\t\tconst listed = await runGit(workspace, [\n\t\t\t\"for-each-ref\",\n\t\t\t\"--format=%(refname) %(objectname) %(contents:subject)\",\n\t\t\tnamespace,\n\t\t]);\n\t\tif (!listed.ok || listed.stdout === \"\") return [];\n\t\treturn listed.stdout\n\t\t\t.split(\"\\n\")\n\t\t\t.map((line) => {\n\t\t\t\tconst [ref, commit, ...subject] = line.split(\" \");\n\t\t\t\treturn { ref: ref ?? \"\", commit: commit ?? \"\", ordinal: Number(subject.at(-1)) };\n\t\t\t})\n\t\t\t.filter((entry) => entry.ref !== \"\" && Number.isFinite(entry.ordinal))\n\t\t\t.sort((left, right) => left.ordinal - right.ordinal);\n\t}\n\n\t/**\n\t * Refs carry no creation order of their own, and `commit-tree` records a committer date\n\t * only to the second, so two captures inside one second would be indistinguishable.\n\t * The ordinal in the subject is the ordering, and it is derived from what is already on\n\t * disk so it survives a restart the same way the refs do.\n\t */\n\tasync function nextOrdinal(): Promise<number> {\n\t\tconst existing = [\n\t\t\t...(await refsUnder(`refs/apex-code/checkpoints/${sessionId}`)),\n\t\t\t...(await refsUnder(preRestoreNamespace)),\n\t\t];\n\t\t// The maximum across both namespaces, not the tail of the pair. `refsUnder` sorts\n\t\t// each list on its own, and two sorted lists concatenated are not sorted, so a\n\t\t// restore followed by further captures would otherwise reuse an ordinal already in\n\t\t// the other namespace and `bound` would prune by a broken order.\n\t\treturn existing.reduce((highest, entry) => Math.max(highest, entry.ordinal), 0) + 1;\n\t}\n\n\tasync function bound(namespace: string): Promise<void> {\n\t\tconst existing = await refsUnder(namespace);\n\t\tfor (const stale of existing.slice(0, Math.max(0, existing.length - maxPerSession))) {\n\t\t\tawait runGit(workspace, [\"update-ref\", \"-d\", stale.ref]);\n\t\t}\n\t}\n\n\tasync function restoreCommit(commit: string): Promise<boolean> {\n\t\tconst indexDirectory = await mkdtemp(join(tmpdir(), \"apex-checkpoint-restore-\"));\n\t\tconst indexFile = join(indexDirectory, \"index\");\n\t\tconst environment = { GIT_INDEX_FILE: indexFile };\n\t\ttry {\n\t\t\t// Seeding the private index from the *current* worktree is what lets\n\t\t\t// `read-tree -u` remove files created after the checkpoint. Seeded from HEAD\n\t\t\t// instead, those files would be untracked and would survive the restore, which\n\t\t\t// is the merge-not-restore defect this replaces.\n\t\t\tawait runGit(workspace, [\"read-tree\", \"HEAD\"], environment, timeout);\n\t\t\tawait runGit(workspace, [\"add\", \"-A\"], environment, timeout);\n\t\t\tif (!(await runGit(workspace, [\"read-tree\", \"-u\", \"--reset\", commit], environment, timeout)).ok) return false;\n\n\t\t\t// The real index goes back to HEAD without touching the worktree, so the\n\t\t\t// checkpoint's changes read as unstaged, which is the shape they had at capture.\n\t\t\tawait runGit(workspace, [\"read-tree\", \"HEAD\"], undefined, timeout);\n\t\t\treturn true;\n\t\t} finally {\n\t\t\tawait rm(indexDirectory, { force: true, recursive: true });\n\t\t}\n\t}\n\n\treturn {\n\t\tasync capture(entryId) {\n\t\t\tif (!isSafeRefComponent(entryId)) return undefined;\n\t\t\tconst ordinal = await nextOrdinal();\n\t\t\tconst commit = await snapshot(`${SUBJECT_PREFIX} ${ordinal}`);\n\t\t\tif (!commit) return undefined;\n\t\t\tif (!(await runGit(workspace, [\"update-ref\", checkpointRef(entryId), commit])).ok) return undefined;\n\t\t\tawait bound(`refs/apex-code/checkpoints/${sessionId}`);\n\t\t\treturn { entryId, commit };\n\t\t},\n\n\t\tasync lookup(entryId) {\n\t\t\tif (!isSafeRefComponent(entryId)) return undefined;\n\t\t\tconst resolved = await runGit(workspace, [\n\t\t\t\t\"rev-parse\",\n\t\t\t\t\"--verify\",\n\t\t\t\t\"--quiet\",\n\t\t\t\t`${checkpointRef(entryId)}^{commit}`,\n\t\t\t]);\n\t\t\treturn resolved.ok && resolved.stdout !== \"\" ? { entryId, commit: resolved.stdout } : undefined;\n\t\t},\n\n\t\tasync list() {\n\t\t\tconst prefix = `refs/apex-code/checkpoints/${sessionId}/`;\n\t\t\treturn (await refsUnder(`refs/apex-code/checkpoints/${sessionId}`)).map((entry) => ({\n\t\t\t\tentryId: entry.ref.slice(prefix.length),\n\t\t\t\tcommit: entry.commit,\n\t\t\t}));\n\t\t},\n\n\t\tasync matchesWorktree(checkpoint) {\n\t\t\tconst indexDirectory = await mkdtemp(join(tmpdir(), \"apex-checkpoint-compare-\"));\n\t\t\tconst indexFile = join(indexDirectory, \"index\");\n\t\t\tconst environment = { GIT_INDEX_FILE: indexFile };\n\t\t\ttry {\n\t\t\t\tconst commitTree = await runGit(workspace, [\"rev-parse\", `${checkpoint.commit}^{tree}`]);\n\t\t\t\tif (!commitTree.ok) return undefined;\n\t\t\t\tif (!(await runGit(workspace, [\"read-tree\", checkpoint.commit], environment, timeout)).ok) return undefined;\n\t\t\t\tif (!(await runGit(workspace, [\"add\", \"-A\"], environment, timeout)).ok) return undefined;\n\t\t\t\tconst worktreeTree = await runGit(workspace, [\"write-tree\"], environment, timeout);\n\t\t\t\tif (!worktreeTree.ok) return undefined;\n\t\t\t\treturn worktreeTree.stdout.trim() === commitTree.stdout.trim();\n\t\t\t} finally {\n\t\t\t\tawait rm(indexDirectory, { recursive: true, force: true }).catch(() => {});\n\t\t\t}\n\t\t},\n\n\t\tasync restore(checkpoint) {\n\t\t\tconst ordinal = await nextOrdinal();\n\t\t\tconst previous = await snapshot(`${SUBJECT_PREFIX} ${ordinal}`);\n\t\t\tif (!previous) return undefined;\n\t\t\t// Pinned before the restore runs, so an interrupted restore still leaves the\n\t\t\t// pre-restore state reachable rather than orphaned. The write is checked because\n\t\t\t// an unpinned snapshot is unreachable and collectable: proceeding past a failure\n\t\t\t// here would overwrite the worktree with no way back to what it held.\n\t\t\tif (!(await runGit(workspace, [\"update-ref\", `${preRestoreNamespace}/${ordinal}`, previous])).ok) {\n\t\t\t\treturn undefined;\n\t\t\t}\n\t\t\tawait bound(preRestoreNamespace);\n\t\t\tif (!(await restoreCommit(checkpoint.commit))) return undefined;\n\t\t\treturn { entryId: \"pre-restore\", commit: previous };\n\t\t},\n\n\t\tasync prune() {\n\t\t\tfor (const namespace of [`refs/apex-code/checkpoints/${sessionId}`, preRestoreNamespace]) {\n\t\t\t\tfor (const entry of await refsUnder(namespace)) {\n\t\t\t\t\tawait runGit(workspace, [\"update-ref\", \"-d\", entry.ref]);\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t};\n}\n\n/**\n * Opt-in configuration for the engine above.\n *\n * Absent by default, and an absent key constructs no engine, so an unconfigured session\n * runs no `git` subprocess and writes no ref.\n */\nexport interface CheckpointSettings {\n\tenabled?: boolean;\n\t/** Oldest refs beyond this count are deleted on capture. Defaults to 50. */\n\tmaxPerSession?: number;\n}\n"]}

package/dist/core/checkpoints/session-checkpoints.d.ts

@@ -0,0 +1,23 @@
+import { type CheckpointSettings, type GitCheckpoint, type GitCheckpoints } from "./git-checkpoints.ts";
+export interface SessionCheckpointsOptions {
+    readonly workspace: string;
+    readonly sessionId: string;
+    readonly settings: CheckpointSettings | undefined;
+}
+export interface SessionCheckpoints {
+    /** Snapshot the worktree against one session entry. Undefined whenever checkpoints are off or unavailable. */
+    capture(entryId: string): Promise<GitCheckpoint | undefined>;
+    /** The engine, once resolved. Undefined until the first capture, and whenever checkpoints are off. */
+    engine(): Promise<GitCheckpoints | undefined>;
+}
+/**
+ * The session's view of the checkpoint engine.
+ *
+ * Resolution is lazy and happens at most once. Two things force that. The engine is
+ * async because it shells out to `git rev-parse` to decide whether a repository is even
+ * there, and session construction is not; and the workspace may not be a repository at
+ * all, which is a supported state rather than an error, so nothing may throw out of here
+ * into a turn.
+ */
+export declare function createSessionCheckpoints(options: SessionCheckpointsOptions): SessionCheckpoints;
+//# sourceMappingURL=session-checkpoints.d.ts.map

package/dist/core/checkpoints/session-checkpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-checkpoints.d.ts","sourceRoot":"","sources":["../../../src/core/checkpoints/session-checkpoints.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,kBAAkB,EAEvB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,GAAG,SAAS,CAAC;CAClD;AAED,MAAM,WAAW,kBAAkB;IAClC,8GAA8G;IAC9G,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IAC7D,sGAAsG;IACtG,MAAM,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;CAC9C;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG,kBAAkB,CAyB/F","sourcesContent":["import {\n\ttype CheckpointSettings,\n\tcreateGitCheckpoints,\n\ttype GitCheckpoint,\n\ttype GitCheckpoints,\n} from \"./git-checkpoints.ts\";\n\nexport interface SessionCheckpointsOptions {\n\treadonly workspace: string;\n\treadonly sessionId: string;\n\treadonly settings: CheckpointSettings | undefined;\n}\n\nexport interface SessionCheckpoints {\n\t/** Snapshot the worktree against one session entry. Undefined whenever checkpoints are off or unavailable. */\n\tcapture(entryId: string): Promise<GitCheckpoint | undefined>;\n\t/** The engine, once resolved. Undefined until the first capture, and whenever checkpoints are off. */\n\tengine(): Promise<GitCheckpoints | undefined>;\n}\n\n/**\n * The session's view of the checkpoint engine.\n *\n * Resolution is lazy and happens at most once. Two things force that. The engine is\n * async because it shells out to `git rev-parse` to decide whether a repository is even\n * there, and session construction is not; and the workspace may not be a repository at\n * all, which is a supported state rather than an error, so nothing may throw out of here\n * into a turn.\n */\nexport function createSessionCheckpoints(options: SessionCheckpointsOptions): SessionCheckpoints {\n\t/**\n\t * Absent settings mean ON (spec 2026-09-01-checkpoints-default-on.md): the\n\t * rewind safety net must not require discovering a settings key. The explicit\n\t * opt-out is `{ enabled: false }`. Outside a git repository the engine\n\t * resolves to undefined -- one swallowed `git rev-parse` at the first capture\n\t * attempt -- so a non-repo workspace stays a supported no-subsystem state.\n\t */\n\tconst enabled = options.settings?.enabled !== false;\n\tlet resolved: Promise<GitCheckpoints | undefined> | undefined;\n\n\tconst engine = (): Promise<GitCheckpoints | undefined> => {\n\t\tif (!enabled) return Promise.resolve(undefined);\n\t\tresolved ??= createGitCheckpoints(options.workspace, options.sessionId, {\n\t\t\tmaxPerSession: options.settings?.maxPerSession,\n\t\t}).catch(() => undefined);\n\t\treturn resolved;\n\t};\n\n\treturn {\n\t\tengine,\n\t\tasync capture(entryId) {\n\t\t\treturn (await engine())?.capture(entryId);\n\t\t},\n\t};\n}\n"]}

package/dist/core/checkpoints/session-checkpoints.js

@@ -0,0 +1,36 @@
+import { createGitCheckpoints, } from "./git-checkpoints.js";
+/**
+ * The session's view of the checkpoint engine.
+ *
+ * Resolution is lazy and happens at most once. Two things force that. The engine is
+ * async because it shells out to `git rev-parse` to decide whether a repository is even
+ * there, and session construction is not; and the workspace may not be a repository at
+ * all, which is a supported state rather than an error, so nothing may throw out of here
+ * into a turn.
+ */
+export function createSessionCheckpoints(options) {
+    /**
+     * Absent settings mean ON (spec 2026-09-01-checkpoints-default-on.md): the
+     * rewind safety net must not require discovering a settings key. The explicit
+     * opt-out is `{ enabled: false }`. Outside a git repository the engine
+     * resolves to undefined -- one swallowed `git rev-parse` at the first capture
+     * attempt -- so a non-repo workspace stays a supported no-subsystem state.
+     */
+    const enabled = options.settings?.enabled !== false;
+    let resolved;
+    const engine = () => {
+        if (!enabled)
+            return Promise.resolve(undefined);
+        resolved ??= createGitCheckpoints(options.workspace, options.sessionId, {
+            maxPerSession: options.settings?.maxPerSession,
+        }).catch(() => undefined);
+        return resolved;
+    };
+    return {
+        engine,
+        async capture(entryId) {
+            return (await engine())?.capture(entryId);
+        },
+    };
+}
+//# sourceMappingURL=session-checkpoints.js.map

package/dist/core/checkpoints/session-checkpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-checkpoints.js","sourceRoot":"","sources":["../../../src/core/checkpoints/session-checkpoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,oBAAoB,GAGpB,MAAM,sBAAsB,CAAC;AAe9B;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAkC,EAAsB;IAChG;;;;;;OAMG;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,KAAK,KAAK,CAAC;IACpD,IAAI,QAAyD,CAAC;IAE9D,MAAM,MAAM,GAAG,GAAwC,EAAE,CAAC;QACzD,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChD,QAAQ,KAAK,oBAAoB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE;YACvE,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa;SAC9C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,QAAQ,CAAC;IAAA,CAChB,CAAC;IAEF,OAAO;QACN,MAAM;QACN,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE;YACtB,OAAO,CAAC,MAAM,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAAA,CAC1C;KACD,CAAC;AAAA,CACF","sourcesContent":["import {\n\ttype CheckpointSettings,\n\tcreateGitCheckpoints,\n\ttype GitCheckpoint,\n\ttype GitCheckpoints,\n} from \"./git-checkpoints.ts\";\n\nexport interface SessionCheckpointsOptions {\n\treadonly workspace: string;\n\treadonly sessionId: string;\n\treadonly settings: CheckpointSettings | undefined;\n}\n\nexport interface SessionCheckpoints {\n\t/** Snapshot the worktree against one session entry. Undefined whenever checkpoints are off or unavailable. */\n\tcapture(entryId: string): Promise<GitCheckpoint | undefined>;\n\t/** The engine, once resolved. Undefined until the first capture, and whenever checkpoints are off. */\n\tengine(): Promise<GitCheckpoints | undefined>;\n}\n\n/**\n * The session's view of the checkpoint engine.\n *\n * Resolution is lazy and happens at most once. Two things force that. The engine is\n * async because it shells out to `git rev-parse` to decide whether a repository is even\n * there, and session construction is not; and the workspace may not be a repository at\n * all, which is a supported state rather than an error, so nothing may throw out of here\n * into a turn.\n */\nexport function createSessionCheckpoints(options: SessionCheckpointsOptions): SessionCheckpoints {\n\t/**\n\t * Absent settings mean ON (spec 2026-09-01-checkpoints-default-on.md): the\n\t * rewind safety net must not require discovering a settings key. The explicit\n\t * opt-out is `{ enabled: false }`. Outside a git repository the engine\n\t * resolves to undefined -- one swallowed `git rev-parse` at the first capture\n\t * attempt -- so a non-repo workspace stays a supported no-subsystem state.\n\t */\n\tconst enabled = options.settings?.enabled !== false;\n\tlet resolved: Promise<GitCheckpoints | undefined> | undefined;\n\n\tconst engine = (): Promise<GitCheckpoints | undefined> => {\n\t\tif (!enabled) return Promise.resolve(undefined);\n\t\tresolved ??= createGitCheckpoints(options.workspace, options.sessionId, {\n\t\t\tmaxPerSession: options.settings?.maxPerSession,\n\t\t}).catch(() => undefined);\n\t\treturn resolved;\n\t};\n\n\treturn {\n\t\tengine,\n\t\tasync capture(entryId) {\n\t\t\treturn (await engine())?.capture(entryId);\n\t\t},\n\t};\n}\n"]}