@cleocode/caamp 2026.4.15 → 2026.4.16

package/dist/{chunk-VD2JJXE7.js → chunk-K7AO3SE7.js}

@@ -895,9 +895,24 @@ ${MARKER_END}`;
    * `spawnCommand` so callers see configuration errors early rather
    * than at child-exit time.
    *
+   * **Worktree isolation (T380/ADR-041 §D2)** — Pass a
+   * {@link SubagentSpawnOptions.worktree} handle to bind the spawned
+   * process to a physical git worktree. When set, this method:
+   * - Uses `worktree.path` as the child cwd.
+   * - Injects `CLEO_WORKTREE_ROOT`, `CLEO_WORKTREE_BRANCH`, and
+   *   `CLEO_PROJECT_HASH` env vars so the child's path resolvers
+   *   (including `getProjectRoot()` via `worktreeScope`) direct DB I/O
+   *   to the correct worktree directory.
+   *
+   * The spawned worker MUST run the worktree guard defined in
+   * `packages/agents/cleo-subagent/AGENT.md §WORKTREE GUARD` as its
+   * first Bash call. That guard verifies the cwd binding was applied
+   * correctly before any file I/O occurs.
+   *
    * @param task - Subagent task specification.
-   * @param opts - Per-call streaming and cleanup overrides.
+   * @param opts - Per-call streaming, cleanup, and worktree overrides.
    * @returns A live subagent handle.
+   * @task T380
    */
   async spawnSubagent(task, opts = {}) {
     const cmd = this.provider.capabilities.spawn.spawnCommand;
@@ -934,12 +949,19 @@ ${MARKER_END}`;
     }
     const startedAt = /* @__PURE__ */ new Date();
     const startedAtIso = startedAt.toISOString();
+    const worktreeCwd = opts.worktree?.path;
+    const worktreeEnv = opts.worktree !== void 0 ? {
+      CLEO_WORKTREE_ROOT: opts.worktree.path,
+      CLEO_WORKTREE_BRANCH: opts.worktree.branch,
+      CLEO_PROJECT_HASH: opts.worktree.projectHash
+    } : {};
+    const resolvedCwd = worktreeCwd ?? opts.cwd ?? task.cwd ?? process.cwd();
     const sessionHeader = {
       type: "session",
       version: 3,
       id: subagentId,
       timestamp: startedAtIso,
-      cwd: opts.cwd ?? task.cwd ?? process.cwd(),
+      cwd: resolvedCwd,
       parentSession: task.parentSessionId ?? null,
       taskId,
       childSessionPath
@@ -949,8 +971,8 @@ ${MARKER_END}`;
     const baseArgs = cmd.slice(1);
     const args = [...baseArgs, task.prompt];
     const child = spawn(program, args, {
-      cwd: opts.cwd ?? task.cwd,
-      env: { ...process.env, ...task.env, ...opts.env },
+      cwd: worktreeCwd ?? opts.cwd ?? task.cwd,
+      env: { ...process.env, ...worktreeEnv, ...task.env, ...opts.env },
       stdio: ["ignore", "pipe", "pipe"]
     });
     let stdoutAccum = "";
@@ -4693,4 +4715,4 @@ export {
   discoverSkillsMulti,
   validateSkill
 };
-//# sourceMappingURL=chunk-VD2JJXE7.js.map
+//# sourceMappingURL=chunk-K7AO3SE7.js.map