A bounded

Key features

• Cordis activates it only while both services are available.
• Tool registration is owned by ctx.effect() and disappears on HMR, unload, or uninstall.
• Every call runs one fixed read-only argv: git --no-pager --no-optional-locks -c core.fsmonitor=false -c core.untrackedCache=false -c status.relativePaths=false status --porcelain=v2 --branch -z --untracked-files=all.
• Git runs through ctx.subprocess, never node:child_process, so the selected execution-world provider and its process-tree cleanup remain authoritative.
• The child environment removes every inherited GIT_ value, then sets only GIT_CONFIG_COUNT=0, GIT_OPTIONAL_LOCKS=0, and LC_ALL=C.