Skip to main content

git_policy_cli/
lib.rs

1//! What:
2//!  Internal native cli-git implementation,
3//!  not yet the production executable.
4//! Why:
5//!  The Rust rewrite preserves Git's own argument,
6//!  repository and transaction semantics.
7//!
8//! In TS you'd write (pseudocode):
9//! ```ts
10//! // Internal modules used by the forthcoming native entry point and consumer verification.
11//! ```
12
13/// The decision one invocation ends in:
14///  become Git,
15///  or print and exit.
16pub mod action;
17
18/// Variables added to every real-Git child:
19///  lock PID injection and the forward-target marker.
20pub mod child_environment;
21
22/// The one failure type for rejected configuration content or files.
23pub mod config_error;
24
25/// Repository-root discovery and bounded reading of `cli-git.config.jsonc`.
26pub mod config_file;
27
28/// Lazy configuration loading for known inspection versus mutation/ambiguous commands.
29pub mod config_loading;
30
31/// Whole-document JSONC validation into typed settings.
32pub mod config_parse;
33
34/// Validation of the `policies` section and per-policy options.
35mod config_policies;
36
37/// The `rulesFile` option:
38///  a repository-relative name that stays inside the repository.
39pub mod config_rules_file;
40
41/// Typed settings and their defaults.
42pub mod config_schema;
43
44/// Key-naming typed readers over parsed JSONC values.
45mod config_values;
46
47/// JSONL event rendering for wrapper-made diagnostics.
48pub mod diagnostics;
49
50/// Worktree target classification for worktree-enforcing policies.
51pub mod effective_target;
52
53/// The per-invocation decision the thin executable performs.
54pub mod entry;
55
56/// Spellings of the wrapper-only escape hatches shared by several modules.
57pub mod escape_hatch;
58
59/// Starting real Git with unchanged arguments,
60///  streams and exit status.
61pub mod forwarding;
62
63/// Captured read-only real-Git queries over raw bytes.
64pub mod git_metadata;
65
66/// Git 2.56.0 global-argument boundaries over unchanged operating-system strings.
67pub mod global_arguments;
68
69/// Configuration of the repository one invocation selects.
70pub mod invocation_config;
71
72/// The `git cli-git` decision:
73///  help,
74///  retired commands,
75///  and direct `check`/`fix`.
76pub mod management;
77
78/// The `git cli-git` argument grammar.
79pub mod management_arguments;
80
81/// The fixed registry of shipped policies.
82pub mod policy_registry;
83
84/// PATH resolution of the real Git executable.
85pub mod real_git;
86
87/// Wrapper self-exclusion for one PATH candidate.
88pub mod real_git_candidate;
89
90/// Disposable fixtures shared by unit tests;
91///  never part of the release executable.
92#[cfg(test)]
93mod test_support;
94
95/// Repository and worktree identity as reported by real Git.
96pub mod worktree_identity;
97
98/// Git 2.56.0 `parse-options` tokenization of one command's argument region.
99pub mod command_options;
100
101/// Long-option matching:
102///  exact names,
103///  unique abbreviations and `no-` negation.
104mod command_options_long;
105
106/// Final-state and position questions over a tokenized region.
107pub mod command_options_query;
108
109/// Short-option clusters and their attached or following values.
110mod command_options_short;
111
112/// The shared decision of which bytes are an option's value.
113mod command_options_value;
114
115/// Real-Git fixtures and table oracles for command tests;
116///  never in the release build.
117#[cfg(test)]
118mod command_test_support;
119
120/// Differential harness over `git rev-parse --parseopt`;
121///  never in the release build.
122#[cfg(test)]
123mod command_test_parseopt;
124
125/// Table oracle over `--git-completion-helper-all`;
126///  never in the release build.
127#[cfg(test)]
128mod command_test_completion;
129
130/// Facts about the arguments after `git commit`.
131pub mod command_commit;
132
133/// The complete Git 2.56.0 option table of `git commit`.
134pub mod command_commit_table;
135
136/// The shared result and builder of transforms that add tokens to a command line.
137pub mod rule_argument_rewrite;
138
139/// Pure core of the index-against-`HEAD` check.
140pub mod rule_commit_index;
141
142/// The query and reading of "does this worktree hold uncommitted state?".
143pub mod rule_worktree_dirty;
144
145/// Pure decision of the commit-only transform.
146pub mod rule_commit_only;
147
148/// User-facing diagnostics of the commit-only transform.
149pub mod rule_commit_only_message;
150
151/// Pure core of the merge,
152///  cherry-pick and revert conclusion check.
153pub mod rule_commit_sequencer;
154
155/// The Git 2.56.0 option table of `git push` and its facts.
156pub mod command_push;
157
158/// The Git 2.56.0 option table of `git status`,
159///  its facts and the advice-key reading.
160pub mod command_status;
161
162/// Pure decision of the atomic-push transform.
163pub mod rule_atomic_push;
164
165/// Pure decision of the status-hints transform.
166pub mod rule_status_hints;
167
168/// The Git 2.56.0 option table of `git add` and its bulk-staging facts.
169pub mod command_add;
170
171/// The Git 2.56.0 option table of `git clean` and its deletion facts.
172pub mod command_clean;
173
174/// The Git 2.56.0 option table of `git reset` and its mode.
175pub mod command_reset;
176
177/// `git stash` subcommand dispatch and wrapper-flag positions.
178pub mod command_stash;
179
180/// The commands that can overwrite or delete uncommitted state, read as Git reads them.
181pub mod command_discard;
182
183/// The Git 2.56.0 option tables of every `git stash` subcommand.
184pub mod command_stash_table;
185
186/// Branch-creation facts of `git branch`,
187///  `git checkout` and `git switch`.
188pub mod command_branch_create;
189
190/// Which action a tokenized `git branch` region selects.
191mod command_branch_mode;
192
193/// The complete Git 2.56.0 option table of `git branch`.
194pub mod command_branch_table;
195
196/// Explicit creation and the remote-guess candidate of `git checkout` and `git switch`.
197mod command_branch_target;
198
199/// The complete Git 2.56.0 option tables of `git checkout` and `git switch`.
200pub mod command_checkout_table;
201
202/// The Git 2.56.0 option groups of `git config`.
203pub mod command_config_table;
204
205/// The form and file scope of a `git config` region.
206pub mod command_config;
207
208/// Pure decision of the require-root policy.
209pub mod rule_require_root;
210
211/// Whether a `git worktree` invocation creates or moves a worktree.
212pub mod command_worktree;
213
214/// Wrapper-only control spellings,
215///  their meanings,
216///  and removal before the subcommand.
217pub mod wrapper_controls;
218
219/// Removal of every wrapper control from one invocation,
220///  by position.
221pub mod wrapper_invocation;
222
223/// Lifecycle triggers and the trigger set of every shipped policy.
224pub mod policy_trigger;
225
226/// Policy events and their JSON Lines rendering.
227pub mod policy_events;
228
229/// A pathname as events report it:
230///  text,
231///  plus base64 `pathBytes` when it is not UTF-8.
232pub mod event_path;
233
234/// Exact repository path bytes as the operating system takes them, and as text for messages.
235pub mod path_bytes;
236
237/// Ordered policy execution for one lifecycle point.
238pub mod policy_engine;
239
240/// Slice 6: writes one corrected file into the private commit index as a blob and an index entry.
241pub mod private_index_stage;
242
243/// Slice 6: the commit path's bounded policy convergence over the private index.
244pub mod commit_convergence;
245
246/// The commit transaction in the incumbent's order, up to the settled policies.
247pub mod commit_transaction;
248
249/// The conclusion of a settled commit transaction: preparation, landing and post-landing completion.
250pub mod commit_conclusion;
251
252/// The landing loop with replay, revalidation and the starvation reservation.
253pub mod commit_landing_loop;
254
255/// The landing lock a landing attempt takes, with the recovery every acquisition runs first.
256pub mod commit_landing_lock;
257
258/// Revalidation of a replayed tree outside both landing locks.
259pub mod commit_revalidation;
260
261/// The normalization-only transaction for a correction that removed every change.
262pub mod commit_no_change;
263
264/// The finding for a staged deletion that an explicit-path commit cannot record.
265pub mod commit_staged_deletions;
266
267/// The `git commit` command: the transaction, the settled events, the post-commit gate and the backup.
268pub mod commit_command;
269
270/// The disposable, recoverable workspace of one commit transaction.
271pub mod commit_workspace;
272
273/// Rule facts from the real repository with candidates read from the private index.
274pub mod commit_facts;
275
276/// The worktree completion records of selected corrections and of hook changes.
277pub mod commit_worktree_records;
278
279/// The replay-relevant commit options.
280pub mod commit_replay_options;
281
282/// Slice 9 skeleton: the order around a landed commit and a guarded Git child; not reachable until landing is merged.
283pub mod commit_lifecycle;
284
285/// The bounded loop that repeats a pass after corrections changed candidate content.
286pub mod policy_convergence;
287
288/// The one query for repository identity,
289///  top level and the path below it.
290pub mod repository_location;
291
292/// Lazily fetched repository facts behind one interface,
293///  with the real-Git provider.
294pub mod repository_facts;
295
296/// Pure decision of the linked-worktree-only policy.
297pub mod rule_linked_worktree;
298
299/// The rejection texts of the linked-worktree-only policy.
300pub mod rule_linked_worktree_messages;
301
302/// The append-only record of every command form that can discard uncommitted state.
303pub mod discard_audit;
304
305/// The intent-guessing hint that follows a finding, an engine failure or a notice.
306pub mod event_hints;
307
308/// Pure decision of the branch-worktree-only policy and its one-query remote guess.
309pub mod rule_branch_worktree;
310
311/// Pure decision of the add-explicit policy.
312pub mod rule_add_explicit;
313
314/// The repository content the dependent-version planner reads, and its two failure kinds.
315pub mod dependent_version_content;
316
317/// Which paths the dependent-version planner reads: manifests, configuration, source.
318pub mod dependent_version_paths;
319
320/// Strict JSON reading of a manifest's name, version and dependency names.
321pub mod dependent_version_manifest;
322
323/// Patch bumps of plain release versions and `JSON.stringify` quoting.
324pub mod dependent_version_release;
325
326/// The byte-preserving rewrite of a manifest's top-level version.
327pub mod dependent_version_text;
328
329/// Publishable package names from the generated registry configuration.
330pub mod dependent_version_publishable;
331
332/// Whether source text imports a package.
333pub mod dependent_version_imports;
334
335/// The dependency walk and the plan of dependent bumps.
336pub mod dependent_version_graph;
337
338/// Every workspace manifest at both states, and which versions were raised.
339pub mod dependent_version_states;
340
341/// Which development dependencies each dependent bundles.
342pub mod dependent_version_bundled;
343
344/// The dependent-version plan with exact manifest bytes before and after.
345pub mod dependent_version_plan;
346
347/// The decision and findings of `mono/dependent-version-bump`.
348pub mod dependent_version_policy;
349
350/// The dependent-version planner's view of a prepared candidate state.
351pub mod dependent_version_lifecycle;
352
353/// Whether a direct fix may change a tracked file it did not select.
354pub mod policy_added_path;
355
356/// The `mono/dependent-version-bump` check over a lifecycle's candidate state.
357pub mod policy_dependent_version;
358
359/// An in-memory workspace that records reads; never in the release build.
360#[cfg(test)]
361mod dependent_version_test_support;
362
363/// Differential fixture reading and canonical results; never in the release build.
364#[cfg(test)]
365mod dependent_version_fixture_json;
366
367/// Canonical renderings of the native planner's results; never in the release build.
368#[cfg(test)]
369mod dependent_version_fixture_output;
370
371/// One differential case evaluated by the native planner; never in the release build.
372#[cfg(test)]
373mod dependent_version_fixture_cases;
374
375/// The native planner against the incumbent's recorded results; never in the release build.
376#[cfg(test)]
377mod dependent_version_differential_tests;
378
379/// The shipped policies as checks over rule cores and repository facts.
380pub mod policy_checks;
381
382/// What a lifecycle offers content policies,
383///  and its candidates once prepared.
384pub mod policy_content;
385
386/// The built-in final-newline policy:
387///  canonical final LF,
388///  preserved paths,
389///  findings.
390pub mod policy_final_newline;
391
392/// The optional root-context policy:
393///  no top-level `CONTEXT.md` enters the index.
394pub mod policy_root_context;
395
396/// The optional forbidden-strings policy over the linked scanner,
397///  with redacted findings.
398pub mod policy_forbidden_strings;
399
400/// One child program run with a time bound and output caps,
401///  through files instead of pipes.
402pub mod bounded_child;
403
404/// Where the `markdown/autofix` policy finds `monochromatic-lint`:
405///  absolute PATH entries only.
406pub mod markdown_linter_lookup;
407
408/// What one linter run printed:
409///  the fixed source and the findings left,
410///  or why it is unusable.
411pub mod markdown_linter_output;
412
413/// The one-rule linter configuration and the private temporary file it is written to.
414pub mod markdown_linter_config;
415
416/// The gitignore-syntax `exclude` patterns of `markdown/autofix`,
417///  matched as the linter matches them.
418pub mod markdown_exclude;
419
420/// The `markdown/autofix` policy over candidates,
421///  behind its linter interface.
422pub mod policy_markdown;
423
424/// The executable's linter for that policy:
425///  `monochromatic-lint` on PATH,
426///  bounded,
427///  once per candidate.
428pub mod markdown_linter;
429
430/// The executable's panic hook:
431///  where an internal error happened,
432///  never its message.
433pub mod panic_notice;
434
435/// Installing a direct fix's corrections into the worktree,
436///  all or none.
437pub mod direct_fix_install;
438
439/// The direct fix:
440///  converge corrections in memory,
441///  then install them.
442pub mod direct_fix;
443
444/// The fixed argument transforms of a forwarded command,
445///  in order.
446pub mod policy_transforms;
447
448/// One complete pass:
449///  built-in policies,
450///  fixed transforms,
451///  optional policies.
452pub mod policy_pass;
453
454/// The names of the commands built into Git 2.56.0.
455pub mod git_builtins;
456
457/// The work of the installed cli-git that is not ported,
458///  and the refusal notice.
459pub mod unported;
460
461/// The lifecycle of one wrapped Git command,
462///  from refusals to forwarding.
463pub mod wrapped_command;
464
465/// A scripted repository-facts provider for unit tests;
466///  never in the release build.
467#[cfg(test)]
468mod policy_test_support;
469
470/// The one failure type of the candidate layer and its closed list of causes.
471pub mod candidate_error;
472
473/// Validated Git object names and the file modes a candidate can carry.
474pub mod candidate_object;
475
476/// Pure framing of one `git cat-file --batch` reply.
477pub mod candidate_batch;
478
479/// Pure parsing of raw NUL-delimited changed-path records.
480pub mod candidate_record;
481
482/// The long-lived object reader that answers every blob read of an invocation.
483pub mod candidate_reader;
484
485/// Immutable candidate versions:
486///  identity,
487///  pathname,
488///  mode,
489///  change and object per path.
490pub mod candidate_version;
491
492/// Per-invocation listing,
493///  lazy bytes and invalidation of candidate versions.
494pub mod candidate_store;
495
496/// Pure parsing of `git ls-files --stage` records and the delta between two index states.
497pub mod candidate_stage;
498
499/// The files of a commit's tree with their modes and objects.
500pub mod candidate_tree;
501
502/// A private,
503///  timestamp-preserving copy of the real index,
504///  removed when dropped.
505pub mod candidate_private_index;
506
507/// What `git add` would stage,
508///  and the worktree files a direct command selects.
509pub mod candidate_prediction;
510
511/// The linked forbidden-strings scanner:
512///  one load per invocation,
513///  typed redacted findings.
514pub mod scanner_adapter;
515
516/// Rules-file precedence and which candidates the scanner is given.
517pub mod scanner_selection;
518
519/// One scan pass over a candidate version's exact bytes.
520pub mod scanner_run;
521
522/// Which engine failure code each candidate and scanner failure carries.
523pub mod scanner_failure_code;
524
525/// Process isolation and rule fixtures for scanner controls;
526///  never in the release build.
527#[cfg(test)]
528mod scanner_test_support;
529
530/// Private,
531///  crash-safe file primitives shared by every durable record.
532pub mod private_storage;
533
534/// Compact JSON records read and written with the incumbent's `JSON` semantics.
535pub mod json_record;
536
537/// Random identifiers in the layout of the incumbent's `randomUUID`.
538pub mod random_id;
539
540/// Text operations with the exact semantics of JavaScript's built-ins.
541pub mod js_text;
542
543/// The PID namespace an owner record names, and the rule for owners of another one.
544pub mod pid_namespace;
545
546/// Process-birth identities in the incumbent's exact spelling.
547pub mod process_identity;
548
549/// The owner record inside every owner-lock directory.
550pub mod owner_lock_record;
551
552/// Rename-published owner locks with dead-owner retirement and an unbounded wait.
553pub mod owner_lock;
554
555/// Line-oriented debug and warning diagnostics on standard error.
556pub mod diagnostic_log;
557
558/// The fail-closed failure of reading or recovering durable transaction state.
559pub mod recovery_error;
560
561/// The owner record of one commit-transaction directory and its liveness rule.
562pub mod transaction_owner;
563
564/// The per-worktree registry of commit-transaction directories.
565pub mod transaction_registry;
566
567/// The schema-version-2 journal records of one commit transaction and their filenames.
568pub mod transaction_journal;
569
570/// The exact encoding of every journal record.
571pub mod transaction_journal_encode;
572
573/// Strict parsers of every journal record.
574pub mod transaction_journal_parse;
575
576/// UTC timestamps in the exact form of JavaScript's `toISOString`.
577pub mod iso_time;
578
579/// The filesystem identity recorded with every real `index.lock` a transaction creates.
580pub mod filesystem_identity;
581
582/// Running real Git for transaction,
583///  recovery and landing work.
584pub mod transaction_git;
585
586/// The preparation and landing leases nested wrapper invocations inherit.
587pub mod transaction_lease;
588
589/// The dispatch plan of one commit transaction, its JSON spelling and the config reads it makes.
590pub mod hook_dispatch_plan;
591
592/// The hooks directory of one transaction: its plan and one entry per preparation event.
593pub mod hook_dispatch_entries;
594
595/// The hook dispatcher entered by a transaction's hook entry name, under the hook lock.
596pub mod hook_dispatch;
597
598/// No-follow file operations recovery and landing share.
599pub mod recovery_files;
600
601/// Durable evidence a dead transaction left:
602///  attempt records,
603///  owned locks and Git's PID file.
604pub mod recovery_evidence;
605
606/// The reflog search that proves which commit an interrupted transaction landed.
607pub mod recovery_reflog;
608
609/// Deciding whether a landing landed,
610///  and installing its recorded post-index.
611pub mod recovery_completion;
612
613/// The `.keep` files protecting a landing's migrated pack.
614pub mod pack_keep;
615
616/// Test-only transaction phase markers, compiled into the release executable and armed only by an environment variable.
617pub mod transaction_phase;
618
619/// Landing target comparison, nonce reflog message and compare-and-swap.
620pub mod landing_support;
621
622/// Migration of a prepared commit's shadow objects into a kept pack of the real store.
623pub mod landing_objects;
624
625/// Post-index a landing installs, computed against the real index at landing.
626pub mod landing_index;
627
628/// The check that a landing changed no staged entry outside the paths it committed.
629pub mod landing_invariant;
630
631/// One landing attempt inside the landing critical section, and its outcome.
632pub mod landing_attempt;
633
634/// The `concurrent-commit` finding for a landing that landed nothing.
635pub mod landing_findings;
636
637/// Git commands run against a transaction's shadow repository.
638pub mod shadow_git;
639
640/// Native conclusion cleanup reproduced in the owning worktree.
641pub mod conclusion_cleanup;
642
643/// The per-worktree capture store:
644///  location,
645///  sequence and identity.
646pub mod capture_store;
647
648/// `captured.json`,
649///  landed-capture records,
650///  their recording and pruning.
651pub mod capture_records;
652
653/// Replay: the unified-diff parser of subsumption (`replay_patch`).
654pub mod replay_patch;
655
656/// Replay: the exact strict reverse check of subsumption (`replay_reverse_apply`).
657pub mod replay_reverse_apply;
658
659/// Replay: the one-sided extension of subsumption over zero-context hunks (`replay_containment`).
660pub mod replay_containment;
661
662/// Replay: raw commit objects as bytes, the unsigned rewrite and signed-rebuild inputs (`replay_object`).
663pub mod replay_object;
664
665/// Replay: capture order over the landed first-parent history and the per-path decision (`replay_capture_order`).
666pub mod replay_capture_order;
667
668/// Replay: the starvation reservation of the next landing slot (`replay_reservation`).
669pub mod replay_reservation;
670
671/// Replay: the shadow-repository Git runner that every replay step uses (`replay_shadow`).
672pub mod replay_shadow;
673
674/// Replay: shared paths of the landed history and the prepared commit, with their three entries (`replay_shared_paths`).
675pub mod replay_shared_paths;
676
677/// Replay: the text half of subsumption over index-named blobs and hunks (`replay_subsumption_text`).
678pub mod replay_subsumption_text;
679
680/// Replay: subsumption rules and the synthetic merge base (`replay_subsumption`).
681pub mod replay_subsumption;
682
683/// Replay: capture-order history and the per-path decisions from the transaction's and landed records (`replay_capture_history`).
684pub mod replay_capture_history;
685
686/// Replay: the merge tree, the first conflicting landed commit, and the replayed commit rebuild (`replay_merge`).
687pub mod replay_merge;
688
689/// Replay: the replayed index, the shadow HEAD move, and the pre-commit re-run decision of revalidation (`replay_revalidation`).
690pub mod replay_revalidation;
691
692/// Replay: one replay of a prepared commit onto a moved target, the integrator's replay result (`replay_commit`).
693pub mod replay_commit;
694/// The invocation capture:
695///  repository layout, symbolic `HEAD`, conclusion kind, ref backend and base.
696pub mod capture_invocation;
697
698/// The capture under capture order:
699///  the capture lock, the store identity, the sequence and `captured.json`.
700pub mod capture_order;
701
702/// The shadow repository `config` file and the copied repository format.
703pub mod shadow_config;
704
705/// The shadow repository links to the real shared entries.
706pub mod shadow_links;
707
708/// The shadow ref store: snapshot, private target, symbolic refs and `HEAD`.
709pub mod shadow_refs;
710
711/// The shadow conclusion copies at preparation.
712pub mod conclusion_copy;
713
714/// Argument transforms of native preparation: normalisation, global split, `-a` removal and private arguments.
715pub mod commit_args;
716
717/// The private commit index: copies, selection modes, pathspec files and listings.
718pub mod commit_index;
719
720/// Native `git commit` in the shadow, the prepared commit read back and `prepared.json`.
721pub mod commit_preparation;
722
723/// Creation of the shadow repository of one transaction.
724pub mod shadow_create;
725
726/// Loading many blobs through one `git cat-file --batch`.
727pub mod blob_batch;
728
729/// Bringing added paths' worktree copies to their landed bytes.
730pub mod worktree_completion;
731
732/// Owner inspection of registry entries and the oldest-first order.
733pub mod recovery_inspect;
734
735/// Recovery of one dead-owner transaction.
736pub mod recovery_landing;
737
738/// Disposal of a landed transaction: shadow removal, directory removal, then landed-capture pruning.
739pub mod landed_disposal;
740
741/// The post-commit run after a landing: author environment, hook lock, and the hook runner with inherited streams.
742pub mod post_commit_hook;
743
744/// Post-landing completion of one landed commit: worktree copies, disposal, maintenance, then `post-commit`.
745pub mod post_landing;
746
747/// Recovery across every transaction directory of one worktree.
748pub mod recovery_scan;
749
750/// Startup recovery of interrupted commit transactions.
751pub mod commit_recovery;
752
753/// Startup recovery as a step of a wrapped or direct command.
754pub mod transaction_gate;
755
756/// Process start times for lock owners,
757///  read from `/proc`,
758///  `ps` or the Windows process table.
759pub mod process_start;
760
761/// The Git version check run once before work that depends on Git's behavior.
762pub mod git_version;
763
764/// Processes holding a lock file open,
765///  found by device and inode.
766pub mod index_lock_holders;
767
768/// Parsers of `lsof -F pcDi` records and Restart Manager lines,
769///  matched by device and inode.
770pub mod index_lock_holder_parsers;
771
772/// Evidence about a foreign `index.lock` and the verdict it supports.
773pub mod index_lock_evidence;
774
775/// The Git command a forwarded invocation runs,
776///  after ordinary alias expansion.
777pub mod forwarded_command;
778
779/// Index-writer classification and the commands that coordinate with a landing.
780pub mod index_writer_commands;
781
782/// Waiting for a foreign index.lock under the classification rules and Git's backoff schedule.
783pub mod index_lock_wait;
784
785/// The host side effects of the index-lock wait:
786///  /proc reads,
787///  sleeps,
788///  randomness and standard error.
789pub mod index_lock_wait_host;
790
791/// The landing location a forwarded index writer coordinates with:
792///  the real index and the registry.
793pub mod landing_location;
794
795/// Coordination of a forwarded index writer:
796///  the landing lock,
797///  the wait for a foreign lock and the lease.
798pub mod index_writer_coordination;
799
800/// Running a coordinated forwarded index writer:
801///  the landing lock held while real Git runs as a child.
802pub mod index_writer_forward;
803
804/// The real index.lock a landing creates,
805///  identifies and releases only while it is the same file.
806pub mod real_index_lock;
807/// Automatic maintenance decision: config record parsing and the enable and detach rules.
808pub mod maintenance_decision;
809
810/// Running automatic maintenance after a landing: the config read, then `git maintenance run --auto`.
811pub mod maintenance_run;
812
813/// Catching SIGINT, SIGTERM, SIGHUP and SIGQUIT while a Git child runs, and relaying only process-sent signals.
814pub mod signal_relay;
815
816/// Exact removal of retired hk hook registrations from one explicit Git configuration scope.
817pub mod maintenance_hk_config;
818
819/// The per-branch push coordination file name: a reversible, flat, case-safe key.
820pub mod auto_push_branch_key;
821
822/// The per-branch `last-pushed` record: validation, tolerant reads and atomic publication.
823pub mod auto_push_record;
824
825/// Waiting for a lock a live process holds: a slow-wait notice naming the holder and a configurable backstop.
826pub mod live_lock;
827
828/// Read-only Git queries of the auto-push, each with a deadline and separate output streams.
829pub mod bounded_query;
830
831/// The auto-push's real `git push` with a deadline, its low-speed abort and the lock wait limit derived from it.
832pub mod bounded_push;
833
834/// Single-flight push coordination per branch: owner lock, record joins and the push itself.
835pub mod auto_push_single_flight;
836
837/// Publishing a landed commit that a moved remote branch rejected: the merge is made from objects alone and pushed.
838pub mod auto_push_reconcile;
839
840/// The paths of a dirty worktree and of a fast-forward, and their overlap.
841pub mod auto_push_dirty_paths;
842
843/// Post-commit auto-push of a landed commit: the push argv, the surfaced output and the failure reporting.
844pub mod auto_push;
845
846/// The post-commit gate over a landed commit: its events, its blocking and the backup it allows.
847pub mod post_commit;
848
849/// Authoritative manual-push updates discovered by a private dry-run push and confirmed with ls-remote.
850pub mod manual_push_probe;
851
852/// Published-set and range computation for manual-push scans: which pushed commits a remote does not have.
853pub mod manual_push_range;
854
855/// The manual-push candidate scope of one push: the commits and trees the destination lacks.
856pub mod manual_push_lifecycle;
857/// The one failure type of the linked-worktree ignored-state copy and its diagnostics.
858pub mod worktree_copy_error;
859
860/// Which linked worktrees a worktree-creating Git command registered, before and after it ran.
861pub mod worktree_copy_registry;
862
863/// The ignored source paths a linked-worktree copy selects, and the path validation every selection passes.
864pub mod worktree_copy_selection;
865
866/// The deterministic parent-first manifest of a copy, and the mode application to a staged copy.
867pub mod worktree_copy_manifest;
868
869/// Exact comparison of manifest entries against the filesystem, and the source stability check after staging.
870pub mod worktree_copy_compare;
871
872/// The private, validated stage of one source's ignored state beside a destination worktree.
873pub mod worktree_copy_stage;
874
875/// The exclusive creation of one destination entry from the stage, and the identity captured after it.
876#[cfg(unix)]
877pub mod worktree_copy_install_entry;
878
879/// Installation of a validated stage into a new worktree, with preflight, batches and rollback on failure.
880#[cfg(unix)]
881pub mod worktree_copy_install;
882
883/// Removal of the paths a failed installation created, only where their identity and content still prove them cli-git's own.
884#[cfg(unix)]
885pub mod worktree_copy_rollback;
886
887/// The durable journal of one copy: exact encoding, strict validation, private storage and removal.
888#[cfg(unix)]
889pub mod worktree_copy_journal;
890
891/// The durable claim on a stage container's name, and the removal of stages an interrupted copy left behind.
892#[cfg(unix)]
893pub mod worktree_copy_stage_claim;
894
895/// The append-only install log of one stage: per-batch intents and creations, with resumption.
896#[cfg(unix)]
897pub mod worktree_copy_install_log;
898
899/// One journaled installation to an end, resumption from the log, and synchronization of a created worktree.
900#[cfg(unix)]
901pub mod worktree_copy_transaction;
902
903/// The settlement lock that serializes copy installation and recovery, its owner record, and inherited leases.
904#[cfg(unix)]
905pub mod worktree_copy_lock;
906
907/// Recovery of interrupted copies: registration checks, discards with notices, resumption, and the pending check.
908#[cfg(unix)]
909pub mod worktree_copy_recovery;
910
911/// The linked-worktree ignored-state copy around one forwarded Git invocation: the integrator's entry point.
912#[cfg(unix)]
913pub mod worktree_copy;
914
915/// Which forwarded invocations the copy applies to, and the child run that carries its settlement lease.
916pub mod worktree_copy_forward;