opencode-swarm 7.200.0 → 7.200.1

package/dist/cli/{snapshot-coordination-init-74x3psxc.js → snapshot-coordination-init-b4kmrgh7.js}

@@ -8,77 +8,77 @@ import {
   markSnapshotCoordinationClosing,
   retrySnapshotCoordinationInitialization,
   startSnapshotCoordinationInitialization
-} from "./index-hg4qa0aq.js";
-import"./index-nq3zcrhm.js";
-import"./index-8rrs1nc0.js";
-import"./index-md2180vx.js";
-import"./index-yss701b3.js";
-import"./index-0wg5q595.js";
+} from "./index-2hnnkj64.js";
+import"./index-s3w41p1x.js";
+import"./index-qzakbjcg.js";
+import"./index-c9g3hkjz.js";
+import"./index-pe77h482.js";
+import"./index-5snwc3dz.js";
 import"./index-axqyjreb.js";
 import"./index-txdagbh7.js";
-import"./index-qnabg1wp.js";
-import"./index-vqtca3xv.js";
+import"./index-dgyddtje.js";
+import"./index-z9mysg5m.js";
 import"./index-rdec0y3z.js";
-import"./index-qnst0jwc.js";
-import"./index-71bqn1nn.js";
-import"./index-e8m8bb1r.js";
-import"./index-bp476gwc.js";
-import"./index-8a3aasag.js";
+import"./index-12h2rtdj.js";
+import"./index-qaqyq25k.js";
+import"./index-th667k1y.js";
+import"./index-1v277wxc.js";
+import"./index-wgf1780e.js";
 import"./index-x5jwegqw.js";
-import"./index-r02aqt0a.js";
-import"./index-rfvnq6wd.js";
-import"./index-8mrentmw.js";
+import"./index-b4kdms7x.js";
+import"./index-0tygsk8b.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-22atsy06.js";
-import"./index-35tf03js.js";
+import"./index-rzkmg02a.js";
+import"./index-w2bhrp6z.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-9nmrw7ek.js";
+import"./index-vtkgg2qn.js";
 import"./index-v3bmwmqw.js";
-import"./index-sk1rva12.js";
-import"./index-58cr1xg0.js";
-import"./index-m9j9varx.js";
+import"./index-8mrentmw.js";
+import"./index-3zspah3v.js";
+import"./index-sva5swrs.js";
+import"./index-3exe6k66.js";
 import"./index-spggmr30.js";
-import"./index-1rfgzsaw.js";
-import"./index-x25rhkmk.js";
+import"./index-0ptf66x5.js";
+import"./index-parkaa70.js";
 import"./index-m9zzj4ee.js";
-import"./index-x1z5d5kj.js";
-import"./index-p5m71yph.js";
-import"./index-jy0mgzjq.js";
+import"./index-xyvsdn07.js";
+import"./index-sz67z90q.js";
+import"./index-v1h70r3y.js";
 import"./index-rtry5xyf.js";
-import"./index-hxp5jgd8.js";
+import"./index-51dw4bjc.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-pyv8vzkx.js";
-import"./index-99zt998b.js";
-import"./index-7v74n9a1.js";
-import"./index-vmevv6my.js";
-import"./index-d083d1q7.js";
+import"./index-2m740hyt.js";
+import"./index-s9y49avf.js";
+import"./index-s8eac99p.js";
+import"./index-na6ph1fp.js";
+import"./index-ves1rtqt.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
-import"./index-wr0n2w3z.js";
+import"./index-nzfq1ms2.js";
 import"./index-7pmbnjvj.js";
 import"./index-9rwhas09.js";
-import"./index-1tpz99db.js";
-import"./index-n5k81wym.js";
+import"./index-ypxq0x7r.js";
+import"./index-bn3aa5q1.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-dng8z8me.js";
-import"./index-ac8vdmgv.js";
+import"./index-g57p8p1k.js";
+import"./index-traz987v.js";
 import"./index-q8vfw61p.js";
 import"./index-t7hmqgjy.js";
 import"./index-c2k7q723.js";
 import"./index-te9hq2f4.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-q1x73nnd.js";
+import"./index-epzadpmm.js";
 import"./index-3t46mez1.js";
-import"./index-gwc7jahh.js";
+import"./index-3020n6d9.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-yvv0my1a.js";
+import"./index-p6v544jn.js";
 import"./index-xfzkq1k4.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{speckit-checkoff-9t6cdn4a.js → speckit-checkoff-1v02b2dt.js}

@@ -7,15 +7,15 @@ import {
   parseSpeckitTasksContent,
   propagateSpeckitCheckoff,
   writeSpeckitCheckoffLedger
-} from "./index-sk1rva12.js";
+} from "./index-3zspah3v.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-q1x73nnd.js";
-import"./index-gwc7jahh.js";
+import"./index-epzadpmm.js";
+import"./index-3020n6d9.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-yvv0my1a.js";
+import"./index-p6v544jn.js";
 import"./index-xfzkq1k4.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/cli/{workspace-snapshot-afqvh9bq.js → workspace-snapshot-93gzfac2.js}

@@ -52,10 +52,10 @@ import {
   shouldSkipSnapshot,
   switchPrFeedbackTrackingCandidateAsync,
   workspaceSnapshotMatches
-} from "./index-bp476gwc.js";
-import"./index-x1z5d5kj.js";
+} from "./index-1v277wxc.js";
+import"./index-xyvsdn07.js";
 import"./index-te9hq2f4.js";
-import"./index-q1x73nnd.js";
+import"./index-epzadpmm.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{worktree-collision-ownership-7a1n1f9j.js → worktree-collision-ownership-84m9f5an.js}

@@ -6,28 +6,28 @@ import {
   WORKTREE_PROVISIONING_OWNER_LEASE_MS,
   removeWorktreeProvisioningOwner,
   scanWorktreeProvisioningOwnersForRecovery
-} from "./index-r02aqt0a.js";
+} from "./index-b4kdms7x.js";
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-rfvnq6wd.js";
+} from "./index-0tygsk8b.js";
 import {
   scanWorktreeMergeFailuresForRecovery
 } from "./index-v3bmwmqw.js";
-import"./index-x1z5d5kj.js";
-import"./index-99zt998b.js";
-import"./index-vmevv6my.js";
-import"./index-d083d1q7.js";
+import"./index-xyvsdn07.js";
+import"./index-s9y49avf.js";
+import"./index-na6ph1fp.js";
+import"./index-ves1rtqt.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
-import"./index-wr0n2w3z.js";
+import"./index-nzfq1ms2.js";
 import"./index-7pmbnjvj.js";
-import"./index-1tpz99db.js";
-import"./index-n5k81wym.js";
+import"./index-ypxq0x7r.js";
+import"./index-bn3aa5q1.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-dng8z8me.js";
-import"./index-ac8vdmgv.js";
+import"./index-g57p8p1k.js";
+import"./index-traz987v.js";
 import"./index-q8vfw61p.js";
 import"./index-t7hmqgjy.js";
 import"./index-c2k7q723.js";
@@ -36,7 +36,7 @@ import {
 } from "./index-te9hq2f4.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-q1x73nnd.js";
+import"./index-epzadpmm.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";

package/dist/cli/{worktree-isolation-8snw7w34.js → worktree-isolation-xwbszhja.js}

@@ -25,79 +25,79 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-hg4qa0aq.js";
-import"./index-nq3zcrhm.js";
-import"./index-8rrs1nc0.js";
-import"./index-md2180vx.js";
-import"./index-yss701b3.js";
-import"./index-0wg5q595.js";
+} from "./index-2hnnkj64.js";
+import"./index-s3w41p1x.js";
+import"./index-qzakbjcg.js";
+import"./index-c9g3hkjz.js";
+import"./index-pe77h482.js";
+import"./index-5snwc3dz.js";
 import"./index-axqyjreb.js";
 import"./index-txdagbh7.js";
-import"./index-qnabg1wp.js";
-import"./index-vqtca3xv.js";
+import"./index-dgyddtje.js";
+import"./index-z9mysg5m.js";
 import"./index-rdec0y3z.js";
-import"./index-qnst0jwc.js";
-import"./index-71bqn1nn.js";
-import"./index-e8m8bb1r.js";
-import"./index-bp476gwc.js";
-import"./index-8a3aasag.js";
+import"./index-12h2rtdj.js";
+import"./index-qaqyq25k.js";
+import"./index-th667k1y.js";
+import"./index-1v277wxc.js";
+import"./index-wgf1780e.js";
 import"./index-x5jwegqw.js";
-import"./index-r02aqt0a.js";
-import"./index-rfvnq6wd.js";
-import"./index-8mrentmw.js";
+import"./index-b4kdms7x.js";
+import"./index-0tygsk8b.js";
 import"./index-pt7h91zc.js";
 import"./index-q7sjgr1y.js";
-import"./index-22atsy06.js";
-import"./index-35tf03js.js";
+import"./index-rzkmg02a.js";
+import"./index-w2bhrp6z.js";
 import"./index-6b295cas.js";
 import"./index-9nyqt3kb.js";
-import"./index-9nmrw7ek.js";
+import"./index-vtkgg2qn.js";
 import"./index-v3bmwmqw.js";
-import"./index-sk1rva12.js";
-import"./index-58cr1xg0.js";
-import"./index-m9j9varx.js";
+import"./index-8mrentmw.js";
+import"./index-3zspah3v.js";
+import"./index-sva5swrs.js";
+import"./index-3exe6k66.js";
 import"./index-spggmr30.js";
-import"./index-1rfgzsaw.js";
-import"./index-x25rhkmk.js";
+import"./index-0ptf66x5.js";
+import"./index-parkaa70.js";
 import"./index-m9zzj4ee.js";
-import"./index-x1z5d5kj.js";
-import"./index-p5m71yph.js";
-import"./index-jy0mgzjq.js";
+import"./index-xyvsdn07.js";
+import"./index-sz67z90q.js";
+import"./index-v1h70r3y.js";
 import"./index-rtry5xyf.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-hxp5jgd8.js";
+} from "./index-51dw4bjc.js";
 import"./index-g22dps7x.js";
 import"./index-0725jpp7.js";
-import"./index-pyv8vzkx.js";
-import"./index-99zt998b.js";
-import"./index-7v74n9a1.js";
-import"./index-vmevv6my.js";
-import"./index-d083d1q7.js";
+import"./index-2m740hyt.js";
+import"./index-s9y49avf.js";
+import"./index-s8eac99p.js";
+import"./index-na6ph1fp.js";
+import"./index-ves1rtqt.js";
 import"./index-ry16d01s.js";
 import"./index-rdm3px0g.js";
-import"./index-wr0n2w3z.js";
+import"./index-nzfq1ms2.js";
 import"./index-7pmbnjvj.js";
 import"./index-9rwhas09.js";
-import"./index-1tpz99db.js";
-import"./index-n5k81wym.js";
+import"./index-ypxq0x7r.js";
+import"./index-bn3aa5q1.js";
 import"./index-vzm6zre7.js";
 import"./index-ae75rja9.js";
-import"./index-dng8z8me.js";
-import"./index-ac8vdmgv.js";
+import"./index-g57p8p1k.js";
+import"./index-traz987v.js";
 import"./index-q8vfw61p.js";
 import"./index-t7hmqgjy.js";
 import"./index-c2k7q723.js";
 import"./index-te9hq2f4.js";
 import"./index-ejhxgyvm.js";
 import"./index-7g4c7s5r.js";
-import"./index-q1x73nnd.js";
+import"./index-epzadpmm.js";
 import"./index-3t46mez1.js";
-import"./index-gwc7jahh.js";
+import"./index-3020n6d9.js";
 import"./index-sp2cxpaq.js";
 import"./index-qbxk2rn6.js";
 import"./index-zgwm4ryv.js";
-import"./index-yvv0my1a.js";
+import"./index-p6v544jn.js";
 import"./index-xfzkq1k4.js";
 import"./index-bk5tah7q.js";
 import"./index-gknz3bv1.js";

package/dist/commands/close/internals.d.ts

@@ -26,7 +26,7 @@ export declare const _internals: {
     CLOSE_REFLECTION_TIMEOUT_MS: number;
     detectFullAuto: typeof import("./orchestrator.js").detectFullAuto;
     guaranteeAllPlansComplete: typeof import("./finalize-stage.js").guaranteeAllPlansComplete;
-    getGitRepositoryStatus: typeof import("../../git/branch.js").getGitRepositoryStatus;
+    getGitRepositoryStatus: typeof import("../../commands/git-status-read.js").readGitRepositoryStatusDetailedAsync;
     resetToMainAfterMerge: (cwd: string, options?: import("./align-stage.js").GuardedResetToMainOptions) => Promise<import("./align-stage.js").GuardedResetToMainResult>;
     resetToRemoteBranch: typeof import("../../git/branch.js").resetToRemoteBranch;
     copyDirRecursive: typeof import("./fs-helpers.js").copyDirRecursive;

package/dist/commands/close/orchestrator.d.ts

@@ -36,6 +36,13 @@ export interface ClosePurgeGate {
         status: number | null;
         stderrTail: string;
     };
+    /**
+     * #3434: porcelain records whose path normalized outside the project
+     * root — excluded from `dirtyPaths`/`candidates` (and therefore from the
+     * confirm-token digest) and surfaced as a bounded warning instead of
+     * being joined into the scope unvalidated.
+     */
+    excludedOutOfRoot: string[];
 }
 /** Test seam for the #2508 gate (simulate git-status read failures). The
  * default routes through the #3317 async reader; legacy sync stubs returning

package/dist/commands/destructive-purge.d.ts

@@ -84,6 +84,18 @@ export declare const GIT_STATUS_ARGS: readonly ["--no-optional-locks", "status",
  * `src/commands/rollback-gate.ts` exports a same-named parser for
  * NUL-terminated `--porcelain -z` output (J1/#2946); the two are deliberately
  * not consolidated in this PR.
+ *
+ * #3434: `../`-bearing (or absolute) records are excluded from the dirty
+ * set and recorded in `excludedOutOfRoot` — the legacy `string[]` export
+ * below returns only the in-root paths. The containment predicate itself is
+ * the rollback-gate module's `isOutOfRootRelativePath` (single shared
+ * definition; the parsers stay separate by design).
+ */
+export declare function parseTrackedDirtyPathsWithExclusions(statusOutput: string): import('./rollback-gate.js').TrackedDirtyParseResult;
+/**
+ * Legacy `string[]` view of the newline-form parser (in-root paths only) —
+ * the export existing suites pin. New consumers that need the exclusion
+ * diagnostic use `parseTrackedDirtyPathsWithExclusions`.
  */
 export declare function parseTrackedDirtyPaths(statusOutput: string): string[];
 /**
@@ -94,10 +106,13 @@ export declare function parseTrackedDirtyPaths(statusOutput: string): string[];
  * helper, so its existing #2508 fail-closed tests keep their injection point.
  * #3317: async — the read is bounded and killable, and legacy sync stubs
  * keep working (awaiting a plain value is a no-op).
+ * #3434: the ok arm carries `excludedOutOfRoot` so the #2953 re-check
+ * compares against the SAME filtered set the operator confirmed.
  */
 export declare function readTrackedDirtyPaths(directory: string): Promise<{
     ok: true;
     dirtyPaths: string[];
+    excludedOutOfRoot: string[];
 } | {
     ok: false;
     /** Structured cause when the reader could tell (absent for legacy `null` stubs). */

package/dist/commands/git-status-read.d.ts

@@ -74,3 +74,26 @@ export declare function readGitStatusAsync(args: readonly string[], cwd: string,
  * non-blocking preview, with no transient-retry chain.
  */
 export declare function readGitRepositoryStatusAsync(cwd: string): Promise<boolean>;
+/**
+ * Detailed twin of `readGitRepositoryStatusAsync` (issue #3427): the same
+ * single-attempt `rev-parse --git-dir` read, mapped to the SAME
+ * `GitRepositoryStatus` vocabulary the sync `branch.getGitRepositoryStatus`
+ * produces — `{isRepo:true}` / `not_git_repo` / `git_unavailable` /
+ * `git_error` with a message — so the finalize align stage can move off the
+ * blocking sync probe without losing its reason-specific skip diagnostics.
+ *
+ * Classification parity with `src/git/branch.ts`:
+ * - ENOENT goes through the shared #2236 `classifySpawnFailure` split — a
+ *   cwd fault is `git_error` NAMING the cwd (never `git_unavailable`);
+ *   binary-missing keeps the full `gitBinaryMissingMessage` remediation text.
+ * - A nonzero child exit is `not_git_repo` only when the bounded stderr
+ *   matches the shared `isNotGitRepositoryMessage` vocabulary; every other
+ *   nonzero exit is `git_error` carrying the status.
+ * - Spawn-class failures (ETIMEDOUT/ESIGNAL/…) are `git_error` with the
+ *   failure code ALWAYS carried in the message — empty stderr never
+ *   discards the class.
+ *
+ * `ignoreOutput` is deliberately NOT set: the bounded stderr feeds the
+ * repo-detection classification.
+ */
+export declare function readGitRepositoryStatusDetailedAsync(cwd: string): Promise<import('../git/branch.js').GitRepositoryStatus>;

package/dist/commands/registry.d.ts

@@ -1077,7 +1077,7 @@ export declare const COMMAND_REGISTRY: {
     readonly 'reset-session': {
         readonly handler: (ctx: CommandContext) => Promise<string>;
         readonly description: "Clear session state while preserving plan, evidence, and knowledge";
-        readonly details: "Deletes only .swarm/session/state.json and other session files. Clears in-memory agent sessions, delegation chains, and active-agent mappings. Preserves plan, evidence, and knowledge. Also releases this session's pending knowledge-gate obligations (#2398) and recovers stale coder settlements so dispatches cannot wedge on CODER_DISPATCH_IN_PROGRESS (#2268). Auto-backs up removed files to .swarm/reset-backups/ (newest 5 kept).";
+        readonly details: "Deletes .swarm/session/state.json plus other session files; clears in-memory sessions, chains, and active-agent maps. Preserves plan, evidence, and knowledge; releases this session's pending knowledge-gate obligations (#2398); recovers coder settlements wedged on CODER_DISPATCH_IN_PROGRESS (#2268); backs up to .swarm/reset-backups/ (newest 5 kept). If a cleanup step fails, the closing guard stays closed by design, writes pause (an advisory says why), and a reset re-run or restart recovers.";
         readonly args: "--confirm=<token> (purge dirty/live lanes)";
         readonly category: "utility";
         readonly toolPolicy: "restricted";

package/dist/commands/rollback-gate.d.ts

@@ -23,6 +23,18 @@ export declare const _rollbackGateInternals: {
  * repositories; git tracks nothing there.
  */
 export declare function isRealGitRepository(directory: string): boolean;
+/** #3434: a parsed porcelain record whose path normalizes outside the repo root. */
+export declare function isOutOfRootRelativePath(rel: string): boolean;
+/**
+ * The NUL-form parser's result contract (#3434): the in-root dirty paths that
+ * feed the destroy scope, plus any records whose path normalized outside the
+ * project root — excluded from the scope and surfaced for the diagnostic
+ * instead of being joined into the confirm-token digest unvalidated.
+ */
+export interface TrackedDirtyParseResult {
+    dirtyPaths: string[];
+    excludedOutOfRoot: string[];
+}
 /**
  * Parse `git status --porcelain -z` output into repo-relative tracked-dirty
  * paths. The -z form is NUL-terminated and NEVER quotes paths (core.quotepath
@@ -36,6 +48,16 @@ export declare function isRealGitRepository(directory: string): boolean;
  * (intent-to-add) — so the test must not anchor to the first column, or the
  * ORIG_PATH token of an R/C-initial file (README.md, CHANGELOG.md, …) is
  * misread as the start of a new record and swallows the next real entry.
+ *
+ * #3434: `../`-bearing (or absolute) records are excluded from the dirty
+ * set and recorded in `excludedOutOfRoot` — the legacy `string[]` export
+ * below returns only the in-root paths.
+ */
+export declare function parseTrackedDirtyPathsWithExclusions(statusOutput: string): TrackedDirtyParseResult;
+/**
+ * Legacy `string[]` view of the NUL-form parser (in-root paths only) — the
+ * export existing suites pin. New consumers that need the exclusion
+ * diagnostic use `parseTrackedDirtyPathsWithExclusions`.
  */
 export declare function parseTrackedDirtyPaths(statusOutput: string): string[];
 /**
@@ -43,11 +65,23 @@ export declare function parseTrackedDirtyPaths(statusOutput: string): string[];
  * index while a file sits on disk at that path. `git reset --hard` silently
  * overwrites exactly these untracked (or since-ignored) files when it
  * materializes the target tree, so they belong in the destruction scope
- * alongside tracked-dirty paths (#2976 review F-1). Returns [] when either
- * listing cannot be read — the tracked-dirty gate above still applies, and
- * the caller's unreadable-status refusal covers real-repo failures.
+ * alongside tracked-dirty paths (#2976 review F-1).
+ *
+ * #3434 fail-closed contract: `failure` is set when either listing cannot
+ * be read, carrying the reader's structured cause when it could tell. The
+ * caller must REFUSE on it — an unreadable enumeration may not read as a
+ * measured "nothing in the way" (the same class #3317 closed for the status
+ * reads). A non-git or bare-marker root returns empty paths with NO failure:
+ * nothing tracked can be in the way there (#2127 convention).
  */
-export declare function untrackedPathsInTargetTree(directory: string, targetSha: string): Promise<string[]>;
+export declare function untrackedPathsInTargetTree(directory: string, targetSha: string): Promise<{
+    paths: string[];
+    failure: {
+        code: string | null;
+        status: number | null;
+        stderrTail: string;
+    } | null;
+}>;
 /**
  * The git-kind candidate set: the absolute paths of tracked-dirty files that
  * `git reset --hard` would destroy. This is the ONLY derivation for
@@ -63,30 +97,63 @@ export declare function swarmOverwriteCandidates(directory: string, overwriteRel
 /**
  * #3317: cause-matched wording for an unreadable destruction measurement —
  * single source shared by the /swarm rollback command and the checkpoint
- * tool sink so the two refusal texts cannot drift.
+ * tool sink so the two refusal texts cannot drift. `source` (#3434
+ * feedback round) names WHICH read failed: the default 'status' keeps the
+ * historical wording BYTE-IDENTICAL (pinned by the #3317 round-2 trace
+ * suite checkpoint-restore-cause-3275); 'enumeration' rewords the arms to
+ * name the ls-tree/ls-files listing so the operator is pointed at the read
+ * that actually failed.
  */
 export declare function describeUnreadableCause(measurement: {
     code?: string | null;
     status?: number | null;
     stderrTail?: string;
-}): string;
+}, source?: 'status' | 'enumeration'): string;
+/**
+ * Sanitize a repo-controlled porcelain record for operator/agent-facing
+ * diagnostic text (#3434 feedback round): collapse control characters
+ * (ANSI/CR/LF/NUL cannot smuggle terminal escapes or forged lines) and
+ * bound the excerpt — the same house discipline as the reader's
+ * `stderrTail` and `excerptProbeOutput`. Excluded records never enter the
+ * scope digest, so the digest's own NUL/newline rejection does not cover
+ * the one place their bytes are rendered.
+ */
+export declare function formatExcludedRecord(rel: string): string;
 /**
  * Measure the destruction scope for a git checkpoint restore. When
  * `targetSha` is provided, files that are untracked (or since-ignored) on
  * disk but tracked in the TARGET tree are included: `git reset --hard`
  * overwrites them silently, so they are part of the destruction set
- * (#2976 review F-1). `unreadable` means git status could not be read
- * inside a real repository — callers must fail closed on it (never treat
- * it as a clean tree). A non-git or bare-marker root returns an empty
- * dirty set: nothing tracked to destroy.
+ * (#2976 review F-1). `unreadable` means git status — or, #3434, the
+ * ls-tree/ls-files enumeration of the target tree — could not be read
+ * inside a real repository; callers must fail closed on it (never treat it
+ * as a clean tree, and never let a failed enumeration shrink the measured
+ * scope). A non-git or bare-marker root returns an empty dirty set: nothing
+ * tracked to destroy. `excludedOutOfRoot` carries porcelain records whose
+ * path normalized outside the project root (#3434) — excluded from the
+ * scope and surfaced for the preview diagnostic.
  */
 export declare function measureGitDestruction(directory: string, targetSha?: string): Promise<{
     kind: 'ok';
     dirtyRelPaths: string[];
+    /** #3434: out-of-root porcelain records excluded from the scope. */
+    excludedOutOfRoot: string[];
 } | {
     kind: 'unreadable';
     /** #3317: why the read failed, when the async reader could tell. */
     code?: string | null;
     status?: number | null;
     stderrTail?: string;
+    /**
+     * #3434 feedback: WHICH read failed — the status read or the
+     * ls-tree/ls-files enumeration. Consumers word the refusal
+     * accordingly instead of always blaming git status.
+     */
+    source: 'status' | 'enumeration';
+    /**
+     * Out-of-root records already parsed from a SUCCESSFUL status
+     * read before the enumeration failed — carried so the refusal
+     * can still disclose them instead of dropping them silently.
+     */
+    excludedOutOfRoot?: string[];
 }>;

package/dist/git/branch.d.ts

@@ -7,6 +7,13 @@ export type GitRepositoryStatus = {
     reason: 'not_git_repo' | 'git_unavailable' | 'git_error';
     message: string;
 };
+/**
+ * Repo-detection vocabulary shared with the async detailed reader
+ * (`src/commands/git-status-read.ts`, #3427): the same case-folded phrases
+ * classify a nonzero `rev-parse` exit as `not_git_repo` on the sync and
+ * async probe paths alike, so the two probes cannot drift apart.
+ */
+export declare function isNotGitRepositoryMessage(message: string): boolean;
 /**
  * Seam that calls child_process.spawnSync dynamically.
  * Uses getChildProcessSpawnSync() to resolve at call time, allowing
@@ -71,6 +78,21 @@ declare const __spawnSyncSeam: {
  * looks sufficient but is not — that gap is exactly what #2263 reported.
  */
 export declare function readLaneEnvFileFromDiskSync(worktreePath: string, laneIndex: number): Record<string, string>;
+/**
+ * Issue #2236 F5: builds the *actionable* "git is not available" message.
+ *
+ * `describeGitResolution()` (src/utils/git-executable.ts) is the production
+ * source of truth for what the resolver actually tried — every candidate path,
+ * its source (`override`/`platform`/`path`), and why each was rejected. A bare
+ * "git executable is not available on PATH" is what sent the original report
+ * down a four-day PATH investigation while git was present the whole time, so
+ * the thrown message names the candidates and the override escape hatch.
+ *
+ * `cwd` is named too: reaching this function means the cwd was positively
+ * classified as present-and-a-directory, which is the fact that rules the
+ * #2236 misdiagnosis out rather than leaving it implied.
+ */
+export declare function gitBinaryMissingMessage(cwd: string): string;
 declare function gitExec(args: string[], cwd: string, laneEnv?: Record<string, string>, laneIndex?: number): string;
 export declare function getGitRepositoryStatus(cwd: string): GitRepositoryStatus;
 /**