toolroll 0.9.88 → 0.9.89

package/dist/teardown-git.js

@@ -20,6 +20,7 @@ import { basename, delimiter, dirname, isAbsolute, join, resolve } from "node:pa
 import { run } from "./exec.js";
 import { ENV, ENV_ALLOWLIST } from "./remote-main.js";
 import { WORKTREE_TIMEOUT_MS } from "./worktree.js";
+import { FOLDER_DIDNT_ANSWER, folderAnswers } from "./folder-gate.js";
 /** Fixed on every teardown command, ahead of its own arguments. */
 export const TEARDOWN_FLAGS = [
     "--no-optional-locks", "-c", "core.hooksPath=/dev/null", "-c", "core.fsmonitor=false", "-c", "protocol.ext.allow=never",
@@ -346,8 +347,16 @@ function gitDirsOf(checkout) {
     catch {
         return null;
     }
+    // Where the checkout's own files point (a build can write both): read, in the console, only while that folder
+    // answered a look lately, and never vouched for by the checkout pool's spelling (folder-gate.ts). Held back: not one
+    // git would read the same way, so every caller refuses.
+    if (gitdir !== join(checkout, ".git") && !folderAnswers(gitdir, true))
+        return null;
     const named = regularFile(join(gitdir, "commondir"))?.trim();
-    return { gitdir, common: named === undefined || named === "" ? gitdir : resolve(gitdir, named) };
+    const common = named === undefined || named === "" ? gitdir : resolve(gitdir, named);
+    if (common !== gitdir && !folderAnswers(common, true))
+        return null;
+    return { gitdir, common };
 }
 /** What includeIn answers when Git didn't finish parsing the file in time: still a refusal, named as what it is. */
 export const INCLUDE_PARSE_TIMED_OUT = "Git didn't finish reading it in time";
@@ -1062,6 +1071,9 @@ export function checkoutGit(inner = run, mode = "build", binding = {}) {
         if (file !== "git")
             return inner(file, args, options);
         const cwd = options?.cwd;
+        // In the console, a checkout whose folder hasn't answered a look lately is not read on its thread (folder-gate.ts).
+        if (cwd !== undefined && !folderAnswers(cwd))
+            return refused(FOLDER_DIDNT_ANSWER);
         if (cwd === undefined || checkoutIncludes(cwd))
             return refused("the checkout's git config includes another file, or couldn't be read as a plain file");
         // git-lfs also reads .lfsconfig from the checkout: one that names an extension (a command it would run) is refused.
@@ -1158,6 +1170,9 @@ export function viewedGitSync(cwd, args, options = {}) {
     const expire = () => { if (limit !== undefined && limit() <= 0)
         throw new Error("the read's deadline passed"); };
     expire();
+    // In the console, a checkout whose folder hasn't answered a look lately is not read on its thread (folder-gate.ts).
+    if (!folderAnswers(cwd))
+        throw new Error(FOLDER_DIDNT_ANSWER);
     if (checkoutIncludes(cwd, gitFile, limit))
         throw new Error("the checkout's git config includes another file, or couldn't be read as a plain file");
     expire();

package/dist/youiyoux-intake.js

@@ -74,6 +74,7 @@ import { noteAssignmentStatus } from "./assignment-status.js";
 import { completionProblem } from "./landed-cleanup.js";
 import { COMPLETION_ACTION, LANDED_ACTOR } from "./result-completion.js";
 import { optionsProblem, PROPOSAL_ID, proposalFileOf, proposalIdOf, readYouiyouxProposal, readYouiyouxRequest, readYouiyouxRequestTask, YOUIYOUX_CARD_KIND, YOUIYOUX_FILED_VIA, YOUIYOUX_HOME_PATH } from "./contracts/youiyoux-request.js";
+import { FolderUnavailable } from "./folder-gate.js";
 export { YOUIYOUX_FILED_VIA };
 /** Who files the tasks: an automation, like a flow trigger. */
 export const YOUIYOUX_ACTOR = "youiyoux";
@@ -605,7 +606,16 @@ function intake(store, given, now, io, options) {
     const pass = NOTHING();
     const none = { pass, repo: null };
     // The project as Toolroll recorded it, resolved: a folder that isn't one of its projects is never read.
-    const repo = canonicalProject(given);
+    let repo;
+    // A folder the console's gate holds back (folder-gate.ts) isn't read this pass.
+    try {
+        repo = canonicalProject(given);
+    }
+    catch (error) {
+        if (error instanceof FolderUnavailable)
+            return none;
+        throw error;
+    }
     if (repo === null || !store.listProjects().some(one => one.path === repo))
         return none;
     const row = intakeRow(store, repo);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolroll",
-  "version": "0.9.88",
+  "version": "0.9.89",
   "description": "A control plane for unattended coding agents — queue tasks, walk away, come back to pull requests. Agents build in leased worktrees, never touch your default branch, and interrupt you only for decisions that need a human.",
   "directories": {
     "doc": "docs"