spec-controller 0.1.0-alpha.4 → 0.1.0-alpha.40

package/README.md

@@ -11,15 +11,17 @@ Requires Node ≥ 22. ESM only.
 ## Install
 
 ```
-npm install -g spec-controller
+npm install -g spec-controller@alpha
 ```
 
 Or without installing anything:
 
 ```
-npx spec-controller balance --help
+npx spec-controller@alpha balance --help
 ```
 
+`@alpha` is not optional until `0.1.0` publishes: a bare install resolves `latest`, which npm set to `0.1.0-alpha.1` on the first publish, and that version has no `--ci-steps` and no scenario code errors.
+
 ## Your first run
 
 Point it at your scenarios and give it nothing else:
@@ -30,6 +32,20 @@ spec-controller balance --features ./features
 
 Every scenario comes back as a row whether or not any evidence exists for it, so on this first run the ones you have supplied no reports for read **missing** and the run comes back out-of-balance. That is the shape of the tool rather than a fault in your repository: the reconciliation starts from what you specified, not from what a tool happened to find, and there is no input for which the right answer is silence.
 
+**`balance` fails your build out of the box.** An out-of-balance run exits `1`, so the first run above reds any pipeline you put it in. That is a deliberate departure from two tools it sits beside: Stryker's `thresholds.break` defaults to `null` (*"never let your build fail"*), and the Sonar scanner exits `0` whatever its quality gate says unless you set `sonar.qualitygate.wait`. Both make you opt in to gating. `balance` makes you opt out.
+
+### Report first, gate later
+
+To bring it into a pipeline you already have without redding it on day one, add `--exit-zero`:
+
+```
+spec-controller balance --features ./features --vitest ./vitest-report.json --exit-zero
+```
+
+The report is byte for byte the one the gate prints: the same rows, the same out-of-balance count, and the same headline naming the code the gate would give. Only the exit status moves. Out-of-balance and scenario code errors (`1`), and pending under `--strict` (`3`), exit `0`. Usage (`2`), unsound (`4`) and nothing to reconcile (`5`) still fail, because each means the run could not give a verdict at all, and a flag that suppresses verdicts does not suppress that.
+
+Work the out-of-balance rows down, then delete `--exit-zero`, and the gate is on. Don't wrap the step in `continue-on-error` or `|| true` instead: those swallow the codes that mean the run could not be trusted, and they leave nothing in the command to say the gate is off.
+
 Now give it the evidence:
 
 ```
@@ -46,7 +62,7 @@ A scenario tagged `@unit` names an obligation — a unit test must exist and pas
 | Exit | What it says |
 | --- | --- |
 | `0` | balanced — every obligation has evidence, and it holds |
-| `1` | out-of-balance — the two records disagree, and the report says where |
+| `1` | out-of-balance — the two records disagree, and the report says where; or a scenario code is misfiled, listed under `## Scenario code errors` |
 | `2` | usage — the invocation was wrong |
 | `3` | balanced, but carrying Pending Items, and you asked for `--strict` |
 | `4` | unsound — a proving suite failed to collect, so the ledger could not be trusted to disagree |
@@ -54,11 +70,23 @@ A scenario tagged `@unit` names an obligation — a unit test must exist and pas
 
 The whole report is written before the code is set, so a failing run still tells you why.
 
+`spec-controller allocate`, which prints the next scenario code for a feature part, reaches no verdict: it exits `0` when it answers and `2` for a usage error or an unknown part. A file or directory it cannot read, whether it reads it itself or through git, is a usage error: it is refused, naming the path and the reason, and no code is given.
+
+`--exit-zero` moves `1` and `3` to `0` and leaves every other code alone: see *Report first, gate later*.
+
+`balance --render-from-json <saved.json>` re-renders a saved report and exits the code its verdict names, from the same table: a saved run that failed fails again when it is read back. A report saved under `--strict` records it, so its re-render exits `3` too, and `--strict` or `--exit-zero` beside the re-render work as they do live. Any other flag beside it is refused at `2`, because a re-render reads no live input and writes only to stdout.
+
 **Node's default is never one of these.** A run that cannot reconcile ends on an enumerated code of
 its own rather than falling out of the process — a crash that exits `1` would be indistinguishable,
 by status, from an honest disagreement. **An input the tool cannot read is part of `2`**: a mistyped
-path, an unparseable report or a corpus the Gherkin parser rejects are all the invocation being
-wrong, never a verdict about your code.
+path, a path it is not permitted to read, a file where a directory belongs or the reverse, an
+unparseable report, a report that parses but is not in the shape its runner writes, a saved
+reconciliation it cannot render, or a corpus the Gherkin parser rejects are all the invocation
+being wrong, never a verdict about your code. The refusal names the input, the path, and what was
+wrong with it. A well-formed report that holds nothing, such as a Vitest run that matched no test
+file, is read, not refused. **So is an output location it cannot write**: a `--format` path that is
+read-only, a directory, under a regular file or in a directory that does not exist, and a
+`--store` root the run directory cannot be created under, are refused at `2`, naming the location and the operating system's reason, before any report is printed.
 
 **The enumeration is open at the top, and that is the one thing to design your pipeline around.** A
 state that is genuinely none of the above gets a **new** code rather than being folded into the
@@ -83,7 +111,7 @@ spec-controller balance --features ./features \
 ## Where to go next
 
 - **Full flags, worked examples and CI wiring** — [`doc/how_to_use.md`](https://github.com/3f-consulting/spec-controller/blob/main/doc/how_to_use.md)
-- **Bringing a check you already have under the reconciliation** — [`doc/converting-a-fitness-check.md`](https://github.com/3f-consulting/spec-controller/blob/main/doc/converting-a-fitness-check.md)
+- **Bringing a check you already have under the reconciliation** — [`doc/adopting-fitness-checks.md`](https://github.com/3f-consulting/spec-controller/blob/main/doc/adopting-fitness-checks.md)
 - **Why `0.x` promises nothing, and what changes at `1.0`** — [`doc/compatibility.md`](https://github.com/3f-consulting/spec-controller/blob/main/doc/compatibility.md)
 - **Building your own tooling on the engine instead of running a command** — [`@3f-consulting/spec-controller-core`](https://www.npmjs.com/package/@3f-consulting/spec-controller-core), the same reconciliation logic as a pure library with no CLI and no I/O.
 

package/dist/cli-allocate/cli.d.ts

@@ -0,0 +1,2 @@
+export declare function runAllocate(argv: string[]): void;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli-allocate/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/cli-allocate/cli.ts"],"names":[],"mappings":"AAcA,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAiBhD"}

package/dist/cli-allocate/cli.js

@@ -0,0 +1,57 @@
+/**
+ * `spec-controller allocate <FFF>` — the next scenario code for a feature part, alone on stdout.
+ */
+import { join } from "node:path";
+import { nextScnCode } from "@3f-consulting/spec-controller-core";
+import { cliRegistry, renderCommandHelp } from "../cli-registry.js";
+import { resolveToolIdentity } from "../run-management/resolveRunInputs.js";
+import { readHeaderCodes } from "./readParts.js";
+import { readRequest } from "./request.js";
+import { readOrRefuse, refusalLine, UnreadableInput } from "./unreadable.js";
+import { historyBoundaryOf, readHistory, repositoryTop } from "./readHistory.js";
+import { readTree, walkTree } from "./readTree.js";
+import { alreadyHeadedNote, highestSeenLine, historyBoundaryLine, unknownPartRefusal } from "./stderr.js";
+export function runAllocate(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        process.stdout.write(renderCommandHelp(cliRegistry, "allocate") + "\n");
+        return;
+    }
+    const request = readRequest(argv, cliRegistry, resolveToolIdentity().toolVersion);
+    if ("usageError" in request) {
+        process.stderr.write(request.usageError + "\n");
+        process.exit(2);
+    }
+    try {
+        answerRequest(request);
+    }
+    catch (err) {
+        if (!(err instanceof UnreadableInput))
+            throw err;
+        process.stderr.write(refusalLine(err) + "\n");
+        process.exit(2);
+    }
+}
+/** Read the tree, its history and its parts, and write the answer to a well-formed request, or its refusal. */
+function answerRequest({ part, isNew }) {
+    const cwd = readOrRefuse("the working directory", "", () => process.cwd());
+    const top = repositoryTop(cwd);
+    const headerCodes = readHeaderCodes(join(top ?? cwd, "features"));
+    const answer = nextScnCode({ part, headerCodes, isNew }, sightingsFrom(cwd, part, top));
+    if (answer.kind === "unknown-part") {
+        process.stderr.write(unknownPartRefusal(answer) + "\n");
+        process.exit(2);
+    }
+    const boundaryLine = historyBoundaryLine(historyBoundaryOf(cwd), answer);
+    if (boundaryLine !== null)
+        process.stderr.write(boundaryLine + "\n");
+    process.stderr.write(highestSeenLine(answer) + "\n");
+    const note = alreadyHeadedNote(answer);
+    if (note !== null)
+        process.stderr.write(note + "\n");
+    process.stdout.write(answer.code + "\n");
+}
+/** The tree and its history through git, or the tree alone by a walk where there is no repository. */
+function sightingsFrom(cwd, part, top) {
+    return top !== null ? [...readTree(top, part), ...readHistory(cwd, part)] : walkTree(cwd, part);
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli-allocate/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/cli-allocate/cli.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAoB,MAAM,qCAAqC,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAwB,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE1G,MAAM,UAAU,WAAW,CAAC,IAAc;IACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,WAAW,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC,WAAW,CAAC,CAAC;IAClF,IAAI,YAAY,IAAI,OAAO,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACH,aAAa,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,eAAe,CAAC;YAAE,MAAM,GAAG,CAAC;QACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,+GAA+G;AAC/G,SAAS,aAAa,CAAC,EAAE,IAAI,EAAE,KAAK,EAAmB;IACrD,MAAM,GAAG,GAAG,YAAY,CAAC,uBAAuB,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACxF,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,YAAY,GAAG,mBAAmB,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACzE,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,sGAAsG;AACtG,SAAS,aAAa,CAAC,GAAW,EAAE,IAAY,EAAE,GAAkB;IAClE,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAClG,CAAC"}

package/dist/cli-allocate/readHistory.d.ts

@@ -0,0 +1,29 @@
+import type { ScnSighting } from "@3f-consulting/spec-controller-core";
+/** How much history the read could see: all of it, none (no repository), or back to a shallow clone's edge. */
+export type HistoryBoundary = {
+    kind: "complete";
+} | {
+    kind: "not-a-repository";
+} | {
+    kind: "shallow";
+    before: string;
+};
+/**
+ * The added and removed lines of every reachable commit whose patch touched `SCN-<part>-`; a refusal
+ * when the refs it starts from, or the history git walks from them, cannot be read.
+ */
+export declare function readHistory(cwd: string, part: string): ScnSighting[];
+/**
+ * The top of the repository `cwd` stands in, or null outside one. A `.git` at or above `cwd` that git
+ * will not open is a repository allocate cannot read, refused naming it, never read as no repository:
+ * that would state "no history was read" about a directory whose history exists. No git to ask at all
+ * is still no repository, a boundary said beside the answer.
+ */
+export declare function repositoryTop(cwd: string): string | null;
+/** Whether `cwd` stands in a git repository. */
+export declare function isGitRepository(cwd: string): boolean;
+/** How far back the history read can see from `cwd`. */
+export declare function historyBoundaryOf(cwd: string): HistoryBoundary;
+/** The added and removed lines of `git log -p` output, each with where it stands. */
+export declare function diffLineSightings(logOutput: string): ScnSighting[];
+//# sourceMappingURL=readHistory.d.ts.map

package/dist/cli-allocate/readHistory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readHistory.d.ts","sourceRoot":"","sources":["../../src/cli-allocate/readHistory.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAIvE,+GAA+G;AAC/G,MAAM,MAAM,eAAe,GAAG;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,kBAAkB,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAQxH;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CAapE;AAQD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOxD;AAWD,gDAAgD;AAChD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,wDAAwD;AACxD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAQ9D;AAaD,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CAQlE"}

package/dist/cli-allocate/readHistory.js

@@ -0,0 +1,136 @@
+/**
+ * The history half of the allocator's read: the added and removed lines of every reachable commit
+ * that touched the part, so a code that was deleted is still counted and never reissued.
+ *
+ * Only diff lines count, never commit messages. History is read so that a deleted scenario's number
+ * is not reissued; a code that only ever appeared in a message was never a scenario, and a message
+ * cannot be unwritten, so one stray mention would move the answer for good. The format asks git for
+ * each commit's abbreviated hash and nothing else, so a sighting can name the commit that carried it.
+ *
+ * Git is handed the part's prefix alone, which holds no regex syntax. Which words on a line are
+ * scenario codes is core's question, answered with the shared grammar, because git's regex dialect
+ * has no `\d` and matches nothing when given one, silently.
+ */
+import { spawnSync } from "node:child_process";
+import { lstatSync, readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { proveRefsReadable } from "./refStore.js";
+import { readOrRefuse, refuse, UnreadableInput } from "./unreadable.js";
+/** A long history's patches can be large; the default buffer would truncate them. */
+const MAX_OUTPUT_BYTES = 1024 * 1024 * 1024;
+/** The marker the format puts before each commit's hash, a byte no patch line starts with. */
+const COMMIT_MARKER = "\u0001";
+/**
+ * The added and removed lines of every reachable commit whose patch touched `SCN-<part>-`; a refusal
+ * when the refs it starts from, or the history git walks from them, cannot be read.
+ */
+export function readHistory(cwd, part) {
+    proveRefsReadable(cwd);
+    const result = spawnSync("git", ["log", "--all", "-p", "-U0", "--no-color", "--no-ext-diff", "--format=%x01%h", "-G", `SCN-${part}-`], { cwd, encoding: "utf8", maxBuffer: MAX_OUTPUT_BYTES });
+    if (result.error !== undefined)
+        refuse("the repository's history", cwd, result.error);
+    if (result.status !== 0) {
+        const said = result.stderr.split("\n")[0] ?? "";
+        throw new UnreadableInput("the repository's history", cwd, `git log exited ${result.status}: ${said}`);
+    }
+    return diffLineSightings(result.stdout);
+}
+/** Git's answer in `cwd`, trimmed, or null when git refuses (outside a repository, or no git at all). */
+function gitAnswer(cwd, args) {
+    const result = spawnSync("git", args, { cwd, encoding: "utf8" });
+    return result.status === 0 ? result.stdout.trim() : null;
+}
+/**
+ * The top of the repository `cwd` stands in, or null outside one. A `.git` at or above `cwd` that git
+ * will not open is a repository allocate cannot read, refused naming it, never read as no repository:
+ * that would state "no history was read" about a directory whose history exists. No git to ask at all
+ * is still no repository, a boundary said beside the answer.
+ */
+export function repositoryTop(cwd) {
+    const result = spawnSync("git", ["rev-parse", "--show-toplevel"], { cwd, encoding: "utf8" });
+    if (result.status === 0)
+        return result.stdout.trim();
+    const gitEntry = result.error === undefined ? gitEntryAtOrAbove(cwd) : null;
+    if (gitEntry === null)
+        return null;
+    const said = result.stderr.split("\n")[0] ?? "";
+    throw new UnreadableInput("the repository", gitEntry, `git rev-parse exited ${result.status}: ${said}`);
+}
+/** The `.git` git's own discovery would find from `dir`: the nearest at or above it, of any kind; else null. */
+function gitEntryAtOrAbove(dir) {
+    for (let at = dir;; at = dirname(at)) {
+        const entry = join(at, ".git");
+        if (lstatSync(entry, { throwIfNoEntry: false }) !== undefined)
+            return entry;
+        if (dirname(at) === at)
+            return null;
+    }
+}
+/** Whether `cwd` stands in a git repository. */
+export function isGitRepository(cwd) {
+    return gitAnswer(cwd, ["rev-parse", "--git-dir"]) !== null;
+}
+/** How far back the history read can see from `cwd`. */
+export function historyBoundaryOf(cwd) {
+    if (!isGitRepository(cwd))
+        return { kind: "not-a-repository" };
+    if (gitAnswer(cwd, ["rev-parse", "--is-shallow-repository"]) !== "true")
+        return { kind: "complete" };
+    const shallowFile = gitAnswer(cwd, ["rev-parse", "--git-path", "shallow"]) ?? "";
+    const shallowPath = shallowFile.startsWith("/") ? shallowFile : `${cwd}/${shallowFile}`;
+    const record = readOrRefuse("the repository's history", shallowPath, () => readFileSync(shallowPath, "utf8"));
+    const edge = record.split("\n")[0] ?? "";
+    return { kind: "shallow", before: gitAnswer(cwd, ["rev-parse", "--short", edge]) ?? edge };
+}
+/** The added and removed lines of `git log -p` output, each with where it stands. */
+export function diffLineSightings(logOutput) {
+    const at = { inFileHeader: false, oldPath: "", newPath: "", oldLine: 0, newLine: 0 };
+    const sightings = [];
+    for (const line of logOutput.split("\n")) {
+        const sighting = readLine(line, at);
+        if (sighting !== undefined)
+            sightings.push(sighting);
+    }
+    return sightings;
+}
+/** Move the position past one line of output, and return the sighting it is, if it is one. */
+function readLine(line, at) {
+    if (line.startsWith(COMMIT_MARKER))
+        at.commit = line.slice(COMMIT_MARKER.length);
+    else if (line.startsWith("diff --git "))
+        at.inFileHeader = true;
+    else if (at.inFileHeader)
+        readFileHeader(line, at);
+    else if (line.startsWith("-"))
+        return sightingAt(line, at.oldPath, at.oldLine++, at.commit);
+    else if (line.startsWith("+"))
+        return sightingAt(line, at.newPath, at.newLine++, at.commit);
+    else if (line.startsWith("@@ "))
+        readHunkHeader(line, at);
+    return undefined;
+}
+/** A file header's lines: `---`/`+++` name the two sides, and the first hunk ends the header. */
+function readFileHeader(line, at) {
+    if (line.startsWith("--- "))
+        at.oldPath = pathOf(line);
+    else if (line.startsWith("+++ "))
+        at.newPath = pathOf(line);
+    else if (line.startsWith("@@ ")) {
+        at.inFileHeader = false;
+        readHunkHeader(line, at);
+    }
+}
+/** The path a `---`/`+++` header names, without git's `a/`/`b/` prefix. */
+function pathOf(header) {
+    return header.slice(4).replace(/^[ab]\//, "");
+}
+/** A hunk header, `@@ -<old>[,n] +<new>[,n] @@`, gives each side's first line. */
+function readHunkHeader(line, at) {
+    const match = /^@@ -(\d+)(?:,\d+)? \+(\d+)/.exec(line);
+    at.oldLine = Number(match?.[1] ?? 0);
+    at.newLine = Number(match?.[2] ?? 0);
+}
+function sightingAt(text, path, line, commit) {
+    return commit === undefined ? { text, path, line } : { text, path, line, commit };
+}
+//# sourceMappingURL=readHistory.js.map

package/dist/cli-allocate/readHistory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readHistory.js","sourceRoot":"","sources":["../../src/cli-allocate/readHistory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAKxE,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAE5C,8FAA8F;AAC9F,MAAM,aAAa,GAAG,QAAQ,CAAC;AAE/B;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,IAAY;IACnD,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,MAAM,GAAG,SAAS,CACtB,KAAK,EACL,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,IAAI,GAAG,CAAC,EACrG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,CACvD,CAAC;IACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,0BAA0B,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACtF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,eAAe,CAAC,0BAA0B,EAAE,GAAG,EAAE,kBAAkB,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,yGAAyG;AACzG,SAAS,SAAS,CAAC,GAAW,EAAE,IAAuB;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,QAAQ,EAAE,wBAAwB,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;AAC1G,CAAC;AAED,gHAAgH;AAChH,SAAS,iBAAiB,CAAC,GAAW;IACpC,KAAK,IAAI,EAAE,GAAG,GAAG,GAAI,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/B,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC5E,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,KAAK,IAAI,CAAC;AAC7D,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC/D,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACrG,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;IACxF,MAAM,MAAM,GAAG,YAAY,CAAC,0BAA0B,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9G,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;AAC7F,CAAC;AAaD,qFAAqF;AACrF,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,MAAM,EAAE,GAAkB,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACpG,MAAM,SAAS,GAAkB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,SAAS;YAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8FAA8F;AAC9F,SAAS,QAAQ,CAAC,IAAY,EAAE,EAAiB;IAC/C,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;SAC5E,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,EAAE,CAAC,YAAY,GAAG,IAAI,CAAC;SAC3D,IAAI,EAAE,CAAC,YAAY;QAAE,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;SAC9C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;SACvF,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;SACvF,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iGAAiG;AACjG,SAAS,cAAc,CAAC,IAAY,EAAE,EAAiB;IACrD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,EAAE,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;SAClD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,EAAE,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;SACvD,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,EAAE,CAAC,YAAY,GAAG,KAAK,CAAC;QACxB,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,kFAAkF;AAClF,SAAS,cAAc,CAAC,IAAY,EAAE,EAAiB;IACrD,MAAM,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,EAAE,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,EAAE,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY,EAAE,MAA0B;IACtF,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACpF,CAAC"}

package/dist/cli-allocate/readParts.d.ts

@@ -0,0 +1,3 @@
+/** The header codes of the feature files in `featuresDir`; none when there is no such directory. */
+export declare function readHeaderCodes(featuresDir: string): string[];
+//# sourceMappingURL=readParts.d.ts.map

package/dist/cli-allocate/readParts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readParts.d.ts","sourceRoot":"","sources":["../../src/cli-allocate/readParts.ts"],"names":[],"mappings":"AASA,oGAAoG;AACpG,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAM7D"}

package/dist/cli-allocate/readParts.js

@@ -0,0 +1,28 @@
+/**
+ * The parts the corpus carries: the header codes of its feature files, read where `balance` reads its
+ * corpus by default. A part only history or a test fixture carries is not one of them.
+ */
+import { readdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { extractFeatureCode } from "../ingest/ingestScenarios.js";
+import { readOrRefuse, refuse } from "./unreadable.js";
+/** The header codes of the feature files in `featuresDir`; none when there is no such directory. */
+export function readHeaderCodes(featuresDir) {
+    return featureFilesIn(featuresDir).flatMap((name) => {
+        const path = join(featuresDir, name);
+        const code = extractFeatureCode(readOrRefuse("a feature file", path, () => readFileSync(path, "utf8")));
+        return code === null ? [] : [code];
+    });
+}
+/** The feature files `dir` lists; none when it is not there, and a refusal when it cannot be listed. */
+function featureFilesIn(dir) {
+    try {
+        return readdirSync(dir).filter((name) => name.endsWith(".feature"));
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return [];
+        return refuse("the feature corpus", dir, err);
+    }
+}
+//# sourceMappingURL=readParts.js.map

package/dist/cli-allocate/readParts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readParts.js","sourceRoot":"","sources":["../../src/cli-allocate/readParts.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEvD,oGAAoG;AACpG,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,OAAO,cAAc,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,kBAAkB,CAAC,YAAY,CAAC,gBAAgB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACxG,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wGAAwG;AACxG,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAChE,OAAO,MAAM,CAAC,oBAAoB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;AACH,CAAC"}

package/dist/cli-allocate/readTree.d.ts

@@ -0,0 +1,16 @@
+import type { ScnSighting } from "@3f-consulting/spec-controller-core";
+/**
+ * Every line in the repository's tree carrying `SCN-<part>-`, with its path from `top`. The tree is
+ * what git lists: tracked files, and untracked files the repository does not ignore, since an author
+ * allocates because they have just written a scenario, and it is not committed yet.
+ */
+export declare function readTree(top: string, part: string): ScnSighting[];
+/**
+ * Whether a walk without git enters a directory: never a package store, never a hidden directory.
+ * An installed package carries its own codes (spec-controller's own dist carries hundreds), which
+ * would retire a consumer's numbers with a package's.
+ */
+export declare function isWalkedDirectory(name: string): boolean;
+/** Every line carrying `SCN-<part>-` in the text files under `root`, found by walking it without git. */
+export declare function walkTree(root: string, part: string): ScnSighting[];
+//# sourceMappingURL=readTree.d.ts.map

package/dist/cli-allocate/readTree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readTree.d.ts","sourceRoot":"","sources":["../../src/cli-allocate/readTree.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AASvE;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CAKjE;AAuDD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,yGAAyG;AACzG,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CAKlE"}

package/dist/cli-allocate/readTree.js

@@ -0,0 +1,106 @@
+/**
+ * The tree half of the allocator's read: every line of every text file that mentions the part.
+ *
+ * In a repository, git says which files are the tree and allocate reads each of them itself. Git
+ * skips a file or directory it cannot read and still exits 0, so a code carried only there would be
+ * handed out again; reading the files here, and listing every directory git had to list, turns each
+ * such path into a refusal instead. Which words on a line are scenario codes is core's question,
+ * answered with the shared grammar.
+ */
+import { spawnSync } from "node:child_process";
+import { accessSync, constants, lstatSync, readdirSync, readFileSync } from "node:fs";
+import { join, relative, sep } from "node:path";
+import { readOrRefuse, refuse, UnreadableInput } from "./unreadable.js";
+/** Git's listing can be large on a big repository; the default buffer would truncate it. */
+const MAX_OUTPUT_BYTES = 1024 * 1024 * 1024;
+/** How far into a file git looks for a NUL before it calls the file binary and searches none of it. */
+const BINARY_PROBE_BYTES = 8000;
+/**
+ * Every line in the repository's tree carrying `SCN-<part>-`, with its path from `top`. The tree is
+ * what git lists: tracked files, and untracked files the repository does not ignore, since an author
+ * allocates because they have just written a scenario, and it is not committed yet.
+ */
+export function readTree(top, part) {
+    const listed = gitListing(top, ["ls-files", "-z", "--cached", "--others", "--exclude-standard"]);
+    const ignored = gitListing(top, ["ls-files", "-z", "--others", "--ignored", "--exclude-standard", "--directory"]);
+    proveListable(top, "", new Set(ignored.filter(isDirectoryEntry).map((entry) => entry.slice(0, -1))));
+    return listed.filter((entry) => !isDirectoryEntry(entry)).flatMap((path) => sightingsInListed(top, path, `SCN-${part}-`));
+}
+/** The paths a `git ls-files -z` run lists, or the refusal when git could not list them. */
+function gitListing(top, args) {
+    const result = spawnSync("git", args, { cwd: top, encoding: "utf8", maxBuffer: MAX_OUTPUT_BYTES });
+    if (result.error !== undefined)
+        refuse("the tree", top, result.error);
+    if (result.status !== 0) {
+        const said = result.stderr.split("\n")[0] ?? "";
+        throw new UnreadableInput("the tree", top, `git ls-files exited ${result.status}: ${said}`);
+    }
+    return result.stdout.split("\0").filter((entry) => entry !== "");
+}
+/** A listed directory rather than a file: a repository nested in the tree, or a wholly ignored one. */
+function isDirectoryEntry(entry) {
+    return entry.endsWith("/");
+}
+/**
+ * Every directory git had to list to answer, listed and entered here too, so one it could not list
+ * is refused rather than skipped. Ignored directories and nested repositories are not the tree.
+ */
+function proveListable(top, dir, ignored) {
+    const path = dir === "" ? top : join(top, dir);
+    const entries = readOrRefuse("a directory in the tree", path, () => listedAndEntered(path));
+    if (dir !== "" && entries.some((entry) => entry.name === ".git"))
+        return;
+    for (const entry of entries) {
+        const child = dir === "" ? entry.name : `${dir}/${entry.name}`;
+        if (entry.isDirectory() && entry.name !== ".git" && !ignored.has(child))
+            proveListable(top, child, ignored);
+    }
+}
+/** A directory's entries, when it may be both listed and entered. */
+function listedAndEntered(path) {
+    accessSync(path, constants.R_OK | constants.X_OK);
+    return readdirSync(path, { withFileTypes: true });
+}
+/** The sightings in one file git lists: none when it has left the working tree or is not a file. */
+function sightingsInListed(top, path, needle) {
+    const file = join(top, path);
+    const kind = readOrRefuse("a file in the tree", file, () => lstatSync(file, { throwIfNoEntry: false }));
+    if (kind === undefined || !kind.isFile())
+        return [];
+    return linesCarrying(path, readOrRefuse("a file in the tree", file, () => readFileSync(file)), needle);
+}
+/** The lines of a file's content that carry `needle`; a binary file, by git's rule, carries none. */
+function linesCarrying(path, content, needle) {
+    if (content.subarray(0, BINARY_PROBE_BYTES).includes(0))
+        return [];
+    return content
+        .toString("utf8")
+        .split("\n")
+        .flatMap((line, i) => (line.includes(needle) ? [{ path, line: i + 1, text: line }] : []));
+}
+/**
+ * Whether a walk without git enters a directory: never a package store, never a hidden directory.
+ * An installed package carries its own codes (spec-controller's own dist carries hundreds), which
+ * would retire a consumer's numbers with a package's.
+ */
+export function isWalkedDirectory(name) {
+    return name !== "node_modules" && !name.startsWith(".");
+}
+/** Every line carrying `SCN-<part>-` in the text files under `root`, found by walking it without git. */
+export function walkTree(root, part) {
+    return filesUnder(root).flatMap((file) => {
+        const content = readOrRefuse("a file in the tree", file, () => readFileSync(file));
+        return linesCarrying(relative(root, file).split(sep).join("/"), content, `SCN-${part}-`);
+    });
+}
+/** Every file under `dir`, entering only the directories a walk enters; a refusal for one it cannot list. */
+function filesUnder(dir) {
+    const entries = readOrRefuse("a directory in the tree", dir, () => readdirSync(dir, { withFileTypes: true }));
+    return entries.flatMap((entry) => {
+        const path = join(dir, entry.name);
+        if (entry.isDirectory())
+            return isWalkedDirectory(entry.name) ? filesUnder(path) : [];
+        return entry.isFile() ? [path] : [];
+    });
+}
+//# sourceMappingURL=readTree.js.map

package/dist/cli-allocate/readTree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readTree.js","sourceRoot":"","sources":["../../src/cli-allocate/readTree.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAe,MAAM,SAAS,CAAC;AACnG,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAExE,4FAA4F;AAC5F,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAE5C,uGAAuG;AACvG,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,IAAY;IAChD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACjG,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAC,CAAC;IAClH,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC;AAC5H,CAAC;AAED,4FAA4F;AAC5F,SAAS,UAAU,CAAC,GAAW,EAAE,IAAuB;IACtD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACnG,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,GAAG,EAAE,uBAAuB,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,uGAAuG;AACvG,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAW,EAAE,GAAW,EAAE,OAA4B;IAC3E,MAAM,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,yBAAyB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5F,IAAI,GAAG,KAAK,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;QAAE,OAAO;IACzE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/D,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,SAAS,gBAAgB,CAAC,IAAY;IACpC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAClD,OAAO,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,oGAAoG;AACpG,SAAS,iBAAiB,CAAC,GAAW,EAAE,IAAY,EAAE,MAAc;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,YAAY,CAAC,oBAAoB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACxG,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,CAAC;IACpD,OAAO,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,oBAAoB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACzG,CAAC;AAED,qGAAqG;AACrG,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe,EAAE,MAAc;IAClE,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACnE,OAAO,OAAO;SACX,QAAQ,CAAC,MAAM,CAAC;SAChB,KAAK,CAAC,IAAI,CAAC;SACX,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,KAAK,cAAc,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY;IACjD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACvC,MAAM,OAAO,GAAG,YAAY,CAAC,oBAAoB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACnF,OAAO,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6GAA6G;AAC7G,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,OAAO,GAAG,YAAY,CAAC,yBAAyB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9G,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli-allocate/refStore.d.ts

@@ -0,0 +1,3 @@
+/** Refuse, as history allocate cannot read, a ref store under the repository at `cwd` it may not read. */
+export declare function proveRefsReadable(cwd: string): void;
+//# sourceMappingURL=refStore.d.ts.map

package/dist/cli-allocate/refStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refStore.d.ts","sourceRoot":"","sources":["../../src/cli-allocate/refStore.ts"],"names":[],"mappings":"AAiBA,0GAA0G;AAC1G,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAInD"}

package/dist/cli-allocate/refStore.js

@@ -0,0 +1,47 @@
+/**
+ * The refs the history read starts from, proved readable before git is asked for the history.
+ *
+ * Git walks history from every ref, and a ref store it cannot read is not an error to git: with
+ * `refs/heads` unreadable, `git log --all` exits 0, writes nothing to stderr, and simply walks from
+ * fewer refs, so a deleted code only an unread branch reaches would be handed out again. Reading the
+ * store here is the only way that case is ever seen. It reads, and never interprets: whether the
+ * store is loose files, `packed-refs` or a reftable, every one of them git would read is read here.
+ */
+import { spawnSync } from "node:child_process";
+import { lstatSync, readdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { readOrRefuse } from "./unreadable.js";
+/** Where each ref store lives under a git directory, whichever format the repository keeps. */
+const REF_STORES = ["refs", "packed-refs", "reftable"];
+/** Refuse, as history allocate cannot read, a ref store under the repository at `cwd` it may not read. */
+export function proveRefsReadable(cwd) {
+    for (const gitDir of gitDirsOf(cwd)) {
+        for (const store of REF_STORES)
+            readEveryEntry(join(gitDir, store));
+    }
+}
+/** The repository's common git directory and its own, which differ only in a linked worktree. */
+function gitDirsOf(cwd) {
+    const result = spawnSync("git", ["rev-parse", "--path-format=absolute", "--git-common-dir", "--git-dir"], {
+        cwd,
+        encoding: "utf8",
+    });
+    if (result.status !== 0)
+        return [];
+    return [...new Set(result.stdout.split("\n").filter((line) => line !== ""))];
+}
+/** Read `path` whole: a file's content, or every entry under a directory; nothing when it is not there. */
+function readEveryEntry(path) {
+    const kind = readOrRefuse("the repository's history", path, () => lstatSync(path, { throwIfNoEntry: false }));
+    if (kind === undefined)
+        return;
+    if (kind.isDirectory()) {
+        const names = readOrRefuse("the repository's history", path, () => readdirSync(path));
+        for (const name of names)
+            readEveryEntry(join(path, name));
+    }
+    else if (kind.isFile()) {
+        readOrRefuse("the repository's history", path, () => readFileSync(path));
+    }
+}
+//# sourceMappingURL=refStore.js.map

package/dist/cli-allocate/refStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refStore.js","sourceRoot":"","sources":["../../src/cli-allocate/refStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,+FAA+F;AAC/F,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,CAAU,CAAC;AAEhE,0GAA0G;AAC1G,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,UAAU;YAAE,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,WAAW,CAAC,EAAE;QACxG,GAAG;QACH,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,2GAA2G;AAC3G,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,YAAY,CAAC,0BAA0B,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC9G,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO;IAC/B,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,YAAY,CAAC,0BAA0B,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QACtF,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACzB,YAAY,CAAC,0BAA0B,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC"}

package/dist/cli-allocate/request.d.ts

@@ -0,0 +1,11 @@
+import type { CliRegistry } from "../cli-registry.js";
+/** A well-formed request: the part, and whether it is asked for as new. */
+export interface AllocateRequest {
+    readonly part: string;
+    readonly isNew: boolean;
+}
+/** The request `argv` makes, or the usage error it is, worded for stderr. */
+export declare function readRequest(argv: readonly string[], registry: CliRegistry, toolVersion: string): AllocateRequest | {
+    readonly usageError: string;
+};
+//# sourceMappingURL=request.d.ts.map

package/dist/cli-allocate/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/cli-allocate/request.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,2EAA2E;AAC3E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED,6EAA6E;AAC7E,wBAAgB,WAAW,CACzB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,QAAQ,EAAE,WAAW,EACrB,WAAW,EAAE,MAAM,GAClB,eAAe,GAAG;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAInD"}