Module target 

The typed repository boundary (0036 RW8, 0037 DC1b): every Git request names the machine its worktree lives on. A local workdir is openable with libgit2 and local git; a remote workdir is bytes on another host and only bounded remote git commands can read it; a container workdir is bytes inside a running container and only bounded docker exec runs can read it. Keeping the three in one enum — instead of a bare path that could mean any of them — makes “treated a non-local path as local” a type error instead of a bug.

The same boundary carries provenance through the memory surfaces: a log row’s dive, a commit’s file list and a delta’s ]f step all replay the RepoTarget they were launched with, so a remote or container surface can never answer from the local cwd.

Enums

RepoTarget

Where a Git query runs. Exactly three real backends exist (0036, 0037); there is deliberately no provider trait behind them.