@claudexor/workspace 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 joi-lab
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,7 @@
+# @claudexor/workspace
+
+Internal package of [Claudexor](https://github.com/razzant/claudexor) — WorkspaceEnvelope manager: git worktree + scoped HOME/harness-config isolation + dirty policy.
+
+Published as part of the Claudexor toolchain; it follows the monorepo's
+lockstep version and has no separate semver contract. Use the `claudexor`
+CLI (or `@claudexor/cli`) as the supported entry point.

package/dist/artifact-paths.d.ts

@@ -0,0 +1,40 @@
+export declare const CLAUDEXOR_ARTIFACT_DIRS: readonly [".claudexor", ".claudexor-review-evidence"];
+/** True when the RELATIVE path is inside one of Claudexor's artifact dirs. */
+export declare function isClaudexorArtifactPath(rel: string): boolean;
+/**
+ * TRACKED files under the artifact dirs are USER STATE, not artifacts: a
+ * project may VERSION `.claudexor/config.yaml` / `review-panel.yaml` (this
+ * repo does), and a candidate legitimately editing a tracked config must not
+ * have that edit silently dropped from status/snapshots/patches (that would
+ * be silent truncation of user work). Runtime artifacts are, by
+ * construction, never tracked. Returns a predicate: true = artifact
+ * (filterable), false = user state.
+ */
+export declare function claudexorArtifactPredicate(repo: string): Promise<(rel: string) => boolean>;
+/**
+ * User-state paths under the artifact dirs = INDEX ∪ HEAD. Index alone
+ * misses a deletion the user already STAGED (`git rm .claudexor/config.yaml`
+ * removes the index entry — the path must still count as user state so the
+ * staged deletion survives dirty checks and snapshots); HEAD alone misses a
+ * user-`git add`ed new config that is not yet committed.
+ */
+export declare function trackedArtifactDirPaths(repo: string): Promise<Set<string>>;
+/**
+ * `git status --porcelain` minus Claudexor artifact paths: the honest
+ * "is the USER's tree dirty" check. Never uses `:(exclude)` pathspecs — a
+ * pathspec that names a gitignored path makes git hard-error in exactly the
+ * repos Claudexor itself initializes (it seeds `.claudexor/` into
+ * .gitignore).
+ */
+export declare function statusPorcelainMeaningful(repo: string): Promise<string[]>;
+/**
+ * Stage EVERYTHING except Claudexor artifacts, loudly. Bare `git add -A`
+ * (honors .gitignore) followed by unstaging the artifact dirs from the
+ * index — the same recipe the snapshot scratch-index uses, because it is
+ * the only one that works whether or not `.claudexor` is gitignored.
+ * THROWS on failure: a silent staging error turns into "nothing to commit"
+ * AFTER the patch already mutated the tree (the audit's half-delivered
+ * state).
+ */
+export declare function stageAllExcludingArtifacts(repo: string): Promise<void>;
+//# sourceMappingURL=artifact-paths.d.ts.map

package/dist/artifact-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-paths.d.ts","sourceRoot":"","sources":["../src/artifact-paths.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,uBAAuB,uDAAwD,CAAC;AAE7F,8EAA8E;AAC9E,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAG5D;AAED;;;;;;;;GAQG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,CAMhG;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAoBhF;AAOD;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAQ/E;AAED;;;;;;;;GAQG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgC5E"}

package/dist/artifact-paths.js

@@ -0,0 +1,128 @@
+/**
+ * The ONE owner of "Claudexor's own artifact dirs are not user tree state".
+ * Eight call sites used five different mechanisms — `:(exclude)`
+ * pathspecs (which HARD-ERROR when the project gitignores `.claudexor`),
+ * prefix filters (which over-match `.claudexorfoo`), skip-sets, and
+ * hardcoded name pairs. They converge here.
+ */
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { runCaptureRaw } from "@claudexor/core";
+import { WorkspaceError } from "@claudexor/core";
+export const CLAUDEXOR_ARTIFACT_DIRS = [".claudexor", ".claudexor-review-evidence"];
+/** True when the RELATIVE path is inside one of Claudexor's artifact dirs. */
+export function isClaudexorArtifactPath(rel) {
+    const clean = rel.replace(/^"|"$/g, "");
+    return CLAUDEXOR_ARTIFACT_DIRS.some((dir) => clean === dir || clean.startsWith(`${dir}/`));
+}
+/**
+ * TRACKED files under the artifact dirs are USER STATE, not artifacts: a
+ * project may VERSION `.claudexor/config.yaml` / `review-panel.yaml` (this
+ * repo does), and a candidate legitimately editing a tracked config must not
+ * have that edit silently dropped from status/snapshots/patches (that would
+ * be silent truncation of user work). Runtime artifacts are, by
+ * construction, never tracked. Returns a predicate: true = artifact
+ * (filterable), false = user state.
+ */
+export async function claudexorArtifactPredicate(repo) {
+    const tracked = await trackedArtifactDirPaths(repo);
+    return (rel) => {
+        const clean = rel.replace(/^"|"$/g, "");
+        return isClaudexorArtifactPath(clean) && !tracked.has(clean);
+    };
+}
+/**
+ * User-state paths under the artifact dirs = INDEX ∪ HEAD. Index alone
+ * misses a deletion the user already STAGED (`git rm .claudexor/config.yaml`
+ * removes the index entry — the path must still count as user state so the
+ * staged deletion survives dirty checks and snapshots); HEAD alone misses a
+ * user-`git add`ed new config that is not yet committed.
+ */
+export async function trackedArtifactDirPaths(repo) {
+    const tracked = new Set();
+    // -z output is EXACT (NUL-delimited, no quoting): never trim — a legal
+    // filename may carry leading/trailing whitespace and a mangled key would
+    // silently reclassify it as an artifact.
+    const index = await git(repo, ["ls-files", "-z", "--", ...CLAUDEXOR_ARTIFACT_DIRS]);
+    if (index.code === 0) {
+        for (const p of index.stdout.split("\0")) {
+            if (p)
+                tracked.add(p);
+        }
+    }
+    // HEAD may not exist yet (fresh repo) — tolerated: nothing can be
+    // HEAD-tracked before the first commit, so the index alone IS complete.
+    const head = await git(repo, ["ls-tree", "-r", "--name-only", "-z", "HEAD", "--", ...CLAUDEXOR_ARTIFACT_DIRS]);
+    if (head.code === 0) {
+        for (const p of head.stdout.split("\0")) {
+            if (p)
+                tracked.add(p);
+        }
+    }
+    return tracked;
+}
+async function git(repo, args) {
+    const r = await runCaptureRaw("git", ["-C", repo, ...args], { timeoutMs: 60_000 });
+    return { code: r.code, stdout: r.stdout, stderr: r.stderr };
+}
+/**
+ * `git status --porcelain` minus Claudexor artifact paths: the honest
+ * "is the USER's tree dirty" check. Never uses `:(exclude)` pathspecs — a
+ * pathspec that names a gitignored path makes git hard-error in exactly the
+ * repos Claudexor itself initializes (it seeds `.claudexor/` into
+ * .gitignore).
+ */
+export async function statusPorcelainMeaningful(repo) {
+    const r = await git(repo, ["status", "--porcelain"]);
+    if (r.code !== 0)
+        throw new WorkspaceError(`git status failed: ${r.stderr.trim()}`);
+    const isArtifact = await claudexorArtifactPredicate(repo);
+    return r.stdout
+        .split("\n")
+        .filter((line) => line.trim().length > 0)
+        .filter((line) => !isArtifact(line.slice(3).trim()));
+}
+/**
+ * Stage EVERYTHING except Claudexor artifacts, loudly. Bare `git add -A`
+ * (honors .gitignore) followed by unstaging the artifact dirs from the
+ * index — the same recipe the snapshot scratch-index uses, because it is
+ * the only one that works whether or not `.claudexor` is gitignored.
+ * THROWS on failure: a silent staging error turns into "nothing to commit"
+ * AFTER the patch already mutated the tree (the audit's half-delivered
+ * state).
+ */
+export async function stageAllExcludingArtifacts(repo) {
+    // TRACKED files under the artifact dirs are user state (versioned config);
+    // capture their paths BEFORE `git add -A` (afterwards freshly-staged
+    // runtime artifacts would also read as index-tracked), then restore them
+    // into the index after the bulk unstage — dropping a tracked-config edit
+    // from the patch would be silent truncation of the candidate's work.
+    const tracked = [...(await trackedArtifactDirPaths(repo))];
+    const add = await git(repo, ["add", "-A"]);
+    if (add.code !== 0)
+        throw new WorkspaceError(`git add -A failed during staging: ${add.stderr.trim()}`);
+    const unstage = await git(repo, [
+        "rm",
+        "-r",
+        "--cached",
+        "--quiet",
+        "--ignore-unmatch",
+        ...CLAUDEXOR_ARTIFACT_DIRS,
+    ]);
+    if (unstage.code !== 0) {
+        throw new WorkspaceError(`unstaging Claudexor artifacts failed: ${unstage.stderr.trim()}`);
+    }
+    // Re-add only paths still PRESENT in the worktree: a tracked file the
+    // user DELETED needs no re-add — the bulk unstage already leaves the
+    // index without it, which IS the staged deletion (add on a path absent
+    // from both worktree and index hard-errors). -f covers the seeded-
+    // gitignore case where the whole dir is ignore-listed.
+    const present = tracked.filter((p) => existsSync(join(repo, p)));
+    if (present.length > 0) {
+        const readd = await git(repo, ["add", "-f", "--", ...present]);
+        if (readd.code !== 0) {
+            throw new WorkspaceError(`re-staging tracked artifact-dir user files failed: ${readd.stderr.trim()}`);
+        }
+    }
+}
+//# sourceMappingURL=artifact-paths.js.map

package/dist/artifact-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-paths.js","sourceRoot":"","sources":["../src/artifact-paths.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,YAAY,EAAE,4BAA4B,CAAU,CAAC;AAE7F,8EAA8E;AAC9E,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxC,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAY;IAC3D,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACpD,OAAO,CAAC,GAAW,EAAE,EAAE;QACrB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACxC,OAAO,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAY;IACxD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,uEAAuE;IACvE,yEAAyE;IACzE,yCAAyC;IACzC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,uBAAuB,CAAC,CAAC,CAAC;IACpF,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,kEAAkE;IAClE,wEAAwE;IACxE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,uBAAuB,CAAC,CAAC,CAAC;IAC/G,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAAY,EAAE,IAAc;IAC7C,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAY;IAC1D,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpF,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAC1D,OAAO,CAAC,CAAC,MAAM;SACZ,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SACxC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAY;IAC3D,2EAA2E;IAC3E,qEAAqE;IACrE,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3C,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,qCAAqC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvG,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE;QAC9B,IAAI;QACJ,IAAI;QACJ,UAAU;QACV,SAAS;QACT,kBAAkB;QAClB,GAAG,uBAAuB;KAC3B,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,cAAc,CAAC,yCAAyC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,sEAAsE;IACtE,qEAAqE;IACrE,uEAAuE;IACvE,mEAAmE;IACnE,uDAAuD;IACvD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,cAAc,CAAC,sDAAsD,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/git.d.ts

@@ -0,0 +1,110 @@
+/** BYTE-FAITHFUL git capture: raw buffers, never readline — CR
+ * bytes in CRLF diff content survive, and no trailing newline is fabricated
+ * (trim-based consumers like revParse are unaffected: git ends its own
+ * output with \n). */
+export declare function git(repo: string, args: string[], input?: string): Promise<{
+    code: number | null;
+    stdout: string;
+    stderr: string;
+}>;
+export declare function isGitRepo(repo: string): Promise<boolean>;
+export declare function revParse(repo: string, ref: string): Promise<string>;
+export interface EnsureGitRepositoryResult {
+    /** True when `git init` ran (the folder was not a repository). */
+    initialized: boolean;
+    /** True when a baseline commit was created (fresh repo or unborn HEAD). */
+    baselineCommitted: boolean;
+    /** True when `.claudexor/` was added to (or created in) .gitignore. */
+    gitignoreSeeded: boolean;
+    /** HEAD sha after the call. */
+    headSha: string;
+}
+/**
+ * Make a project folder usable as a git boundary for write-mode runs.
+ *
+ * Comparator note: Codex CLI refuses to run outside a git repo (its official
+ * quick start is `mkdir && git init && codex`); Claudexor goes one step
+ * further and creates the boundary itself, announced via the
+ * `project.git.initialized` run event. The baseline commit makes worktree
+ * diffs honest from the very first run; `.claudexor/` is seeded into
+ * .gitignore FIRST so run artifacts never enter the baseline.
+ *
+ * The baseline commit is authored as "Claudexor" deterministically — it is a
+ * tool-created commit and must not depend on (or pollute) user git identity.
+ */
+export declare function ensureGitRepository(repo: string): Promise<EnsureGitRepositoryResult>;
+export declare function statusPorcelain(repo: string): Promise<string>;
+/**
+ * Capture the full dirty working tree (tracked AND untracked) as a dangling
+ * commit; null if clean. Plain `git stash create` captures only TRACKED
+ * changes, silently dropping the user's new-but-unstaged files from the run's
+ * base. We instead seed a scratch index from HEAD, `add -A` into it (which
+ * respects .gitignore, so run artifacts stay out), and commit-tree the result.
+ */
+export declare function stashCreate(repo: string): Promise<string | null>;
+/**
+ * Capture the CURRENT working-tree state (tracked + untracked, minus `.claudexor`)
+ * as a commit sha — always returns one. Dirty trees become a dangling snapshot
+ * commit (via `stashCreate`); a clean tree resolves to HEAD. This is the per-turn
+ * diff base for in-place threads: snapshot at turn start, snapshot at turn end,
+ * `diffTrees(base, end)` yields exactly that turn's net change (pre-existing dirty
+ * state is folded into `base`, so the reviewer never sees prior turns' edits).
+ */
+export declare function snapshotTree(repo: string): Promise<string>;
+/** Net diff between two tree-ish shas (used for in-place per-turn diffs).
+ * `--binary`: binary changes carry an APPLYABLE payload instead of
+ * degrading to a "Binary files differ" stub that silently loses the work. */
+export declare function diffTrees(repo: string, baseSha: string, endSha: string): Promise<string>;
+export interface RevertResult {
+    reverted: boolean;
+    /** Turn-added files removed to restore the pre-turn state (`.claudexor` preserved). */
+    removed: string[];
+    reason?: string;
+}
+/**
+ * Server-owned in-place revert: restore the live working tree to a recorded
+ * pre-turn snapshot, but ONLY when the tree still matches the recorded post-turn
+ * snapshot (i.e. the user hasn't edited since) — otherwise it fails loudly and
+ * touches nothing. Reverts tracked modifications/deletions AND removes files the
+ * turn added; `.claudexor` (run artifacts) is always preserved.
+ */
+export declare function revertWorkingTreeTo(repo: string, preTurnSha: string, expectedPostSha: string): Promise<RevertResult>;
+export declare function worktreeAdd(repo: string, path: string, branch: string, baseSha: string): Promise<void>;
+/** Recreate a worktree for an EXISTING branch (recovery: dir lost, branch survived). */
+export declare function worktreeAddExisting(repo: string, path: string, branch: string): Promise<void>;
+export declare function worktreeRemove(repo: string, path: string): Promise<void>;
+/**
+ * Apply a unified diff to a tree with a 3-way merge (race-winner adoption into
+ * the live in-place tree). Throws loudly on conflict so the caller can disclose
+ * `adopted:false` and offer a manual apply — the work is never silently lost.
+ */
+export interface ProtectedApplyResult {
+    ok: boolean;
+    /** True when the tree does NOT match its pre-apply state (restore failed). */
+    treeMutated: boolean;
+    detail?: string;
+}
+/**
+ * The PROTECTED apply path: `git apply --check` first (clean typed
+ * refusal, tree untouched), then `--3way`; if 3way still fails (race with a
+ * concurrent edit), RESTORE — `checkout -- .` for tracked content plus
+ * removal of files the partial apply CREATED (from the shared diff parser's
+ * added-paths) — and verify with `status --porcelain`. `ok:false,
+ * treeMutated:false` is a GUARANTEE the tree is byte-identical (INV-114);
+ * a failed restoration reports `treeMutated:true` honestly instead.
+ */
+export declare function applyPatchProtected(repo: string, diff: string): Promise<ProtectedApplyResult>;
+export declare function worktreePrune(repo: string): Promise<void>;
+/** Delete a local branch (best-effort GC of per-attempt claudexor/* branches). */
+export declare function branchDelete(repo: string, branch: string): Promise<void>;
+/**
+ * Stage everything (so untracked files appear) and return the diff vs the
+ * recorded BASE sha — NOT the worktree HEAD. A harness that commits inside the
+ * worktree (Claude Code does this routinely) advances HEAD; diffing vs HEAD
+ * would then hide the committed work and report an empty no-op diff, silently
+ * losing the candidate's real output. Diffing the staged tree vs base_sha
+ * captures all net change since the run started regardless of intermediate
+ * commits. Git op failures throw loudly instead of masquerading as "no changes".
+ */
+export declare function diffStaged(worktreePath: string, baseSha?: string): Promise<string>;
+//# sourceMappingURL=git.d.ts.map

package/dist/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAMA;;;sBAGsB;AACtB,wBAAsB,GAAG,CACvB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAGlE;AAYD,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG9D;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIzE;AAED,MAAM,WAAW,yBAAyB;IACxC,kEAAkE;IAClE,WAAW,EAAE,OAAO,CAAC;IACrB,2EAA2E;IAC3E,iBAAiB,EAAE,OAAO,CAAC;IAC3B,uEAAuE;IACvE,eAAe,EAAE,OAAO,CAAC;IACzB,+BAA+B;IAC/B,OAAO,EAAE,MAAM,CAAC;CACjB;AAID;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CA+C1F;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAEnE;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA2EtE;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGhE;AAED;;6EAE6E;AAC7E,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO9F;AAwBD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,uFAAuF;IACvF,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,YAAY,CAAC,CAiDvB;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG5G;AAED,wFAAwF;AACxF,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKnG;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9E;AAED;;;;GAIG;AAEH,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,8EAA8E;IAC9E,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA8BnG;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/D;AAED,kFAAkF;AAClF,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9E;AAED;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAaxF"}