@intutic/sync-daemon 2.1.0 → 2.3.0

package/dist/hashReporter.d.ts

@@ -1,33 +0,0 @@
-/**
- * hashReporter.ts — SHA-256 hash computation + integrity comparison.
- *
- * Computes SHA-256 hashes of local harness config files and compares
- * them against canonical hashes from the control plane. This enables
- * SOP drift detection: if a developer manually edits a governed file,
- * the daemon flags it as drifted in the next sync report.
- *
- * HLD §3.14 — SOP Integrity Verification
- * LLD #8 — Sync Daemon / CLI
- *
- * @module
- */
-import type { HarnessType, SopFileHash } from '@intutic/shared-types';
-/**
- * Compute SHA-256 hashes for all harness config files and compare
- * against canonical hashes from the control plane.
- *
- * @param workspaceRoot - Absolute path to the workspace root.
- * @param harnesses - Harness types detected in the workspace.
- * @param canonicalHashes - Expected hashes from last sync (filePath → SHA-256).
- * @returns Array of SopFileHash entries with drift detection flags.
- */
-export declare function computeFileHashes(workspaceRoot: string, harnesses: HarnessType[], canonicalHashes: Record<string, string>): Promise<SopFileHash[]>;
-/**
- * Compute the SHA-256 hex digest of a file's contents.
- *
- * @param filePath - Absolute path to the file.
- * @returns 64-character lowercase hex SHA-256 hash.
- * @throws If the file does not exist or is not readable.
- */
-export declare function hashFile(filePath: string): Promise<string>;
-//# sourceMappingURL=hashReporter.d.ts.map

package/dist/hashReporter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hashReporter.d.ts","sourceRoot":"","sources":["../src/hashReporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGrE;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,WAAW,EAAE,EACxB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACtC,OAAO,CAAC,WAAW,EAAE,CAAC,CAiCxB;AAED;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGhE"}

package/dist/hashReporter.js

@@ -1,69 +0,0 @@
-/**
- * hashReporter.ts — SHA-256 hash computation + integrity comparison.
- *
- * Computes SHA-256 hashes of local harness config files and compares
- * them against canonical hashes from the control plane. This enables
- * SOP drift detection: if a developer manually edits a governed file,
- * the daemon flags it as drifted in the next sync report.
- *
- * HLD §3.14 — SOP Integrity Verification
- * LLD #8 — Sync Daemon / CLI
- *
- * @module
- */
-import { createHash } from 'node:crypto';
-import * as node_fs from 'node:fs/promises';
-import * as node_path from 'node:path';
-import { HARNESS_FILES } from './configWriter.js';
-/**
- * Compute SHA-256 hashes for all harness config files and compare
- * against canonical hashes from the control plane.
- *
- * @param workspaceRoot - Absolute path to the workspace root.
- * @param harnesses - Harness types detected in the workspace.
- * @param canonicalHashes - Expected hashes from last sync (filePath → SHA-256).
- * @returns Array of SopFileHash entries with drift detection flags.
- */
-export async function computeFileHashes(workspaceRoot, harnesses, canonicalHashes) {
-    const results = [];
-    for (const harness of harnesses) {
-        const filename = HARNESS_FILES[harness];
-        if (!filename)
-            continue; // Phase 2 deferred
-        const configPath = node_path.join(workspaceRoot, filename);
-        const relativePath = filename;
-        try {
-            const localHash = await hashFile(configPath);
-            const canonical = canonicalHashes[relativePath] ?? '';
-            const drifted = canonical !== '' && localHash !== canonical;
-            results.push({
-                filePath: relativePath,
-                localHash,
-                canonicalHash: canonical,
-                drifted,
-            });
-        }
-        catch {
-            // File doesn't exist or isn't readable — report empty hash, not drifted
-            results.push({
-                filePath: relativePath,
-                localHash: '',
-                canonicalHash: canonicalHashes[relativePath] ?? '',
-                drifted: false,
-            });
-        }
-    }
-    return results;
-}
-/**
- * Compute the SHA-256 hex digest of a file's contents.
- *
- * @param filePath - Absolute path to the file.
- * @returns 64-character lowercase hex SHA-256 hash.
- * @throws If the file does not exist or is not readable.
- */
-export async function hashFile(filePath) {
-    const content = await node_fs.readFile(filePath, 'utf-8');
-    return createHash('sha256').update(content, 'utf-8').digest('hex');
-}
-//# sourceMappingURL=hashReporter.js.map

package/dist/hashReporter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hashReporter.js","sourceRoot":"","sources":["../src/hashReporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAA;AAC3C,OAAO,KAAK,SAAS,MAAM,WAAW,CAAA;AAEtC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEjD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,aAAqB,EACrB,SAAwB,EACxB,eAAuC;IAEvC,MAAM,OAAO,GAAkB,EAAE,CAAA;IAEjC,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,CAAC,QAAQ;YAAE,SAAQ,CAAC,mBAAmB;QAE3C,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;QAC1D,MAAM,YAAY,GAAG,QAAQ,CAAA;QAE7B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAA;YAC5C,MAAM,SAAS,GAAG,eAAe,CAAC,YAAY,CAAC,IAAI,EAAE,CAAA;YACrD,MAAM,OAAO,GAAG,SAAS,KAAK,EAAE,IAAI,SAAS,KAAK,SAAS,CAAA;YAE3D,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,YAAY;gBACtB,SAAS;gBACT,aAAa,EAAE,SAAS;gBACxB,OAAO;aACR,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,YAAY;gBACtB,SAAS,EAAE,EAAE;gBACb,aAAa,EAAE,eAAe,CAAC,YAAY,CAAC,IAAI,EAAE;gBAClD,OAAO,EAAE,KAAK;aACf,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,QAAgB;IAC7C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IACzD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACpE,CAAC"}

package/dist/integrityStore.d.ts

@@ -1,35 +0,0 @@
-/**
- * integrityStore.ts — Local .intutic/integrity.json manager.
- *
- * Maintains a per-workspace integrity store that tracks the last sync
- * timestamp, config version, and canonical file hashes. This allows
- * the daemon to skip redundant syncs when the config version hasn't
- * changed and to detect local drift between sync cycles.
- *
- * HLD §3.14 — Real-Time State Mirroring
- * LLD #8 — Sync Daemon / CLI
- *
- * @module
- */
-import type { IntegrityStore } from '@intutic/shared-types';
-/**
- * Load the local integrity store from `.intutic/integrity.json`.
- *
- * Returns `null` if the file doesn't exist (first sync) or is
- * corrupted (will be overwritten on next save).
- *
- * @param workspaceRoot - Absolute path to the workspace root.
- * @returns The parsed IntegrityStore, or null if not found.
- */
-export declare function loadIntegrity(workspaceRoot: string): Promise<IntegrityStore | null>;
-/**
- * Save the integrity store to `.intutic/integrity.json`.
- *
- * Creates the `.intutic/` directory if it doesn't exist.
- * Uses atomic write (tmp → rename) to prevent corruption.
- *
- * @param workspaceRoot - Absolute path to the workspace root.
- * @param store - The IntegrityStore to persist.
- */
-export declare function saveIntegrity(workspaceRoot: string, store: IntegrityStore): Promise<void>;
-//# sourceMappingURL=integrityStore.d.ts.map

package/dist/integrityStore.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"integrityStore.d.ts","sourceRoot":"","sources":["../src/integrityStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAQ3D;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAqBhC;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,IAAI,CAAC,CAUf"}

package/dist/integrityStore.js

@@ -1,71 +0,0 @@
-/**
- * integrityStore.ts — Local .intutic/integrity.json manager.
- *
- * Maintains a per-workspace integrity store that tracks the last sync
- * timestamp, config version, and canonical file hashes. This allows
- * the daemon to skip redundant syncs when the config version hasn't
- * changed and to detect local drift between sync cycles.
- *
- * HLD §3.14 — Real-Time State Mirroring
- * LLD #8 — Sync Daemon / CLI
- *
- * @module
- */
-import * as node_fs from 'node:fs/promises';
-import * as node_path from 'node:path';
-/** Filename for the integrity store within the `.intutic/` directory. */
-const INTEGRITY_FILE = 'integrity.json';
-/** Directory name for Intutic local state. */
-const INTUTIC_DIR = '.intutic';
-/**
- * Load the local integrity store from `.intutic/integrity.json`.
- *
- * Returns `null` if the file doesn't exist (first sync) or is
- * corrupted (will be overwritten on next save).
- *
- * @param workspaceRoot - Absolute path to the workspace root.
- * @returns The parsed IntegrityStore, or null if not found.
- */
-export async function loadIntegrity(workspaceRoot) {
-    const filePath = node_path.join(workspaceRoot, INTUTIC_DIR, INTEGRITY_FILE);
-    try {
-        const raw = await node_fs.readFile(filePath, 'utf-8');
-        const parsed = JSON.parse(raw);
-        // Basic shape validation
-        if (typeof parsed.lastSyncAt !== 'string' ||
-            typeof parsed.configVersion !== 'number' ||
-            typeof parsed.files !== 'object') {
-            return null;
-        }
-        return parsed;
-    }
-    catch {
-        // File doesn't exist or is corrupted
-        return null;
-    }
-}
-/**
- * Save the integrity store to `.intutic/integrity.json`.
- *
- * Creates the `.intutic/` directory if it doesn't exist.
- * Uses atomic write (tmp → rename) to prevent corruption.
- *
- * @param workspaceRoot - Absolute path to the workspace root.
- * @param store - The IntegrityStore to persist.
- */
-export async function saveIntegrity(workspaceRoot, store) {
-    const dir = node_path.join(workspaceRoot, INTUTIC_DIR);
-    await node_fs.mkdir(dir, { recursive: true });
-    const filePath = node_path.join(dir, INTEGRITY_FILE);
-    const tmpPath = `${filePath}.tmp`;
-    const content = JSON.stringify(store, null, 2) + '\n';
-    await node_fs.writeFile(tmpPath, content, 'utf-8');
-    await node_fs.rename(tmpPath, filePath);
-}
-// `loadContextIntegrity` / `saveContextIntegrity` were removed on 2026-07-30. They
-// had no callers in either repo — not even tests — while
-// `.intutic/context_integrity.json` sat in three harness hook denylists as a
-// protected path. The file was never created, so those hooks guarded nothing. The
-// config integrity store above already hashes every governed file `syncLoop` writes,
-// which is what the second store would have duplicated.
-//# sourceMappingURL=integrityStore.js.map

package/dist/integrityStore.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"integrityStore.js","sourceRoot":"","sources":["../src/integrityStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAA;AAC3C,OAAO,KAAK,SAAS,MAAM,WAAW,CAAA;AAGtC,yEAAyE;AACzE,MAAM,cAAc,GAAG,gBAAgB,CAAA;AAEvC,8CAA8C;AAC9C,MAAM,WAAW,GAAG,UAAU,CAAA;AAE9B;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,aAAqB;IAErB,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,cAAc,CAAC,CAAA;IAE3E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAA;QAEhD,yBAAyB;QACzB,IACE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YACrC,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;YACxC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAChC,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;QACrC,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,aAAqB,EACrB,KAAqB;IAErB,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IACtD,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE7C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IACpD,MAAM,OAAO,GAAG,GAAG,QAAQ,MAAM,CAAA;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAA;IAErD,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IAClD,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;AACzC,CAAC;AAGD,mFAAmF;AACnF,yDAAyD;AACzD,6EAA6E;AAC7E,kFAAkF;AAClF,qFAAqF;AACrF,wDAAwD"}

package/dist/lib/gitWorktrees.d.ts

@@ -1,140 +0,0 @@
-/**
- * gitWorktrees.ts — discovers every `git worktree` checkout of a repo the
- * sync daemon is watching, so project-tier governance files can be written
- * into each one, not just the main checkout.
- *
- * # The gap this closes
- *
- * `git worktree add <path>` creates a second, fully independent WORKING
- * TREE that shares the main checkout's `.git` object store (via a `.git`
- * FILE pointing back at `<main>/.git/worktrees/<name>`) but has its own
- * untracked files. Every project-tier governance file this product writes
- * — `.claude/settings.json`, `.cursor/hooks.json`, `.intutic/hooks/*`,
- * `AGENTS.md`'s sibling hook registrations, the wrapped `.mcp.json` entries,
- * etc. — is untracked by convention (SOP content is workspace-specific and
- * synced from the control plane, not committed). That means none of it
- * exists in a worktree's working tree by default: `writeConfigFiles`/
- * `injectMcpServer` running against only the main checkout's `workspaceRoot`
- * leaves every OTHER worktree of that same repo completely ungoverned,
- * regardless of what the main checkout has configured.
- *
- * This was already true for any hand-rolled `git worktree` workflow before
- * this module existed — Xirp (an orchestrator that spawns CLI agents each
- * inside its own tmux session + git worktree, see `tools/cli/src/harness/
- * xirp.ts`) is what surfaced it, but the fix here is general: it benefits
- * ANY worktree-based workflow, Xirp-managed or not. See TD-390.
- *
- * # Verifying the mechanics for real
- *
- * Confirmed against a real throwaway repo during this module's development
- * (not asserted from memory of git's docs): an untracked file written into
- * a main checkout is NOT visible from a `git worktree add`-created sibling
- * checkout's directory. `git worktree list --porcelain`'s block format,
- * including `locked`/`prunable`/`bare`/`detached` fields, was captured from
- * a real `git worktree list --porcelain` run (this module's own test suite
- * builds the same kind of fixture, in an isolated temp directory, rather
- * than relying on this description alone).
- *
- * @module
- */
-/** One block of `git worktree list --porcelain` output, parsed. */
-export interface WorktreeInfo {
-    /** Absolute path to this worktree's working directory. */
-    path: string;
-    /** Commit the worktree's HEAD points at, or null if not reported (bare). */
-    head: string | null;
-    /** Branch ref this worktree has checked out (e.g. `refs/heads/main`), or
-     *  null when detached or bare. */
-    branch: string | null;
-    /** True if this worktree's HEAD is detached (no branch checked out). */
-    detached: boolean;
-    /** True for the bare-repository worktree entry — the repo root itself
-     *  when it has no working tree of its own files (only ever the first
-     *  entry, and only for a bare repo). */
-    bare: boolean;
-    /** True if this worktree is locked (`git worktree lock`) — git will not
-     *  prune it even if its directory looks gone. Locking does not restrict
-     *  reading or writing ordinary files in it, so this does not by itself
-     *  change whether `discoverWorktrees` includes the path. */
-    locked: boolean;
-    /** Reason string passed to `git worktree lock --reason`, if any. */
-    lockedReason: string | null;
-    /** True if git has flagged this worktree's directory as missing/invalid
-     *  and a candidate for `git worktree prune`. */
-    prunable: boolean;
-    /** Reason string git reports for why this worktree is prunable, if any. */
-    prunableReason: string | null;
-}
-/**
- * Parses `git worktree list --porcelain` output.
- *
- * Real format (verified against a live `git worktree list --porcelain` run,
- * git 2.x): one block per worktree, separated by a blank line, each line a
- * bare keyword or `<keyword> <value>`:
- *
- * ```
- * worktree /path/to/main
- * HEAD 56bdba0a04f83da4e821a0a3e7a6208d43fcaec5
- * branch refs/heads/master
- *
- * worktree /path/to/locked-wt
- * HEAD 56bdba0a04f83da4e821a0a3e7a6208d43fcaec5
- * branch refs/heads/feature2
- * locked testing lock
- *
- * worktree /path/to/detached-wt
- * HEAD 56bdba0a04f83da4e821a0a3e7a6208d43fcaec5
- * detached
- * ```
- *
- * Deliberately implemented with plain string methods (`startsWith`/`slice`)
- * rather than a line-matching regex — this parses `git`-controlled, not
- * attacker-controlled, input, but a sibling Wave 1 phase shipped a
- * CodeQL-flagged polynomial-regex bug from exactly this kind of "just trim
- * a path" text handling, so the same class of construct is avoided here on
- * principle even though the input source differs.
- */
-export declare function parseWorktreeListPorcelain(output: string): WorktreeInfo[];
-/**
- * Discovers every worktree of the git repository containing `repoRoot`,
- * returning the absolute paths that should be treated as additional
- * project-tier workspace roots.
- *
- * Filtering decisions, made explicit rather than left implicit:
- *
- * - **The main checkout is included.** `git worktree list` always lists it
- *   first (confirmed against a live run) — it needs no special-casing by
- *   callers; a caller that already writes to `repoRoot` directly can simply
- *   skip a returned path equal to `repoRoot` if it wants to avoid a
- *   redundant duplicate write, but the list is uniformly correct either way.
- * - **Locked worktrees are included.** `git worktree lock` only prevents
- *   git's own pruning of a worktree it cannot otherwise verify still
- *   exists (e.g. on removable storage) — it says nothing about whether the
- *   directory is currently present and writable, which it normally is.
- *   Excluding locked worktrees would silently under-cover a workflow (like
- *   Xirp's) that locks worktrees deliberately to protect them from being
- *   pruned out from under a long-running session — exactly the worktrees
- *   most worth covering.
- * - **Prunable worktrees are EXCLUDED.** `prunable` means git itself has
- *   flagged the worktree's directory as missing or otherwise administratively
- *   invalid. Writing into that path would either fail or (via this
- *   codebase's `mkdir(dir, { recursive: true })` write convention) silently
- *   RECREATE a directory git considers gone — resurrecting a deleted
- *   worktree's folder with governance files nobody asked for. Skipping it
- *   is what "don't write into a directory git says isn't really there"
- *   means in practice.
- * - **Bare-repository entries are EXCLUDED.** A bare repo's own `worktree`
- *   porcelain entry names its root path but has no working tree of ordinary
- *   files to write project-tier config into.
- *
- * Best-effort by design: returns `[]` (never throws) if `repoRoot` is not
- * inside a git repository, if `git` is not on `PATH`, or on any other
- * failure — this is additive coverage on top of the existing single-root
- * write path, so a git failure here must not break the sync cycle that
- * already succeeds for the main `workspaceRoot`. This also means a
- * non-worktree, single-checkout project (the common case) is a harmless
- * no-extra-work path: `git worktree list` still runs, still succeeds, and
- * returns exactly one entry (the main checkout itself).
- */
-export declare function discoverWorktrees(repoRoot: string): Promise<string[]>;
-//# sourceMappingURL=gitWorktrees.d.ts.map

package/dist/lib/gitWorktrees.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gitWorktrees.d.ts","sourceRoot":"","sources":["../../src/lib/gitWorktrees.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAOH,mEAAmE;AACnE,MAAM,WAAW,YAAY;IAC3B,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAA;IACZ,4EAA4E;IAC5E,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB;sCACkC;IAClC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,wEAAwE;IACxE,QAAQ,EAAE,OAAO,CAAA;IACjB;;4CAEwC;IACxC,IAAI,EAAE,OAAO,CAAA;IACb;;;gEAG4D;IAC5D,MAAM,EAAE,OAAO,CAAA;IACf,oEAAoE;IACpE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B;oDACgD;IAChD,QAAQ,EAAE,OAAO,CAAA;IACjB,2EAA2E;IAC3E,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,EAAE,CAuDzE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAgB3E"}

package/dist/lib/gitWorktrees.js

@@ -1,191 +0,0 @@
-/**
- * gitWorktrees.ts — discovers every `git worktree` checkout of a repo the
- * sync daemon is watching, so project-tier governance files can be written
- * into each one, not just the main checkout.
- *
- * # The gap this closes
- *
- * `git worktree add <path>` creates a second, fully independent WORKING
- * TREE that shares the main checkout's `.git` object store (via a `.git`
- * FILE pointing back at `<main>/.git/worktrees/<name>`) but has its own
- * untracked files. Every project-tier governance file this product writes
- * — `.claude/settings.json`, `.cursor/hooks.json`, `.intutic/hooks/*`,
- * `AGENTS.md`'s sibling hook registrations, the wrapped `.mcp.json` entries,
- * etc. — is untracked by convention (SOP content is workspace-specific and
- * synced from the control plane, not committed). That means none of it
- * exists in a worktree's working tree by default: `writeConfigFiles`/
- * `injectMcpServer` running against only the main checkout's `workspaceRoot`
- * leaves every OTHER worktree of that same repo completely ungoverned,
- * regardless of what the main checkout has configured.
- *
- * This was already true for any hand-rolled `git worktree` workflow before
- * this module existed — Xirp (an orchestrator that spawns CLI agents each
- * inside its own tmux session + git worktree, see `tools/cli/src/harness/
- * xirp.ts`) is what surfaced it, but the fix here is general: it benefits
- * ANY worktree-based workflow, Xirp-managed or not. See TD-390.
- *
- * # Verifying the mechanics for real
- *
- * Confirmed against a real throwaway repo during this module's development
- * (not asserted from memory of git's docs): an untracked file written into
- * a main checkout is NOT visible from a `git worktree add`-created sibling
- * checkout's directory. `git worktree list --porcelain`'s block format,
- * including `locked`/`prunable`/`bare`/`detached` fields, was captured from
- * a real `git worktree list --porcelain` run (this module's own test suite
- * builds the same kind of fixture, in an isolated temp directory, rather
- * than relying on this description alone).
- *
- * @module
- */
-import { execFile as _execFile } from 'node:child_process';
-import { promisify } from 'node:util';
-const execFile = promisify(_execFile);
-/**
- * Parses `git worktree list --porcelain` output.
- *
- * Real format (verified against a live `git worktree list --porcelain` run,
- * git 2.x): one block per worktree, separated by a blank line, each line a
- * bare keyword or `<keyword> <value>`:
- *
- * ```
- * worktree /path/to/main
- * HEAD 56bdba0a04f83da4e821a0a3e7a6208d43fcaec5
- * branch refs/heads/master
- *
- * worktree /path/to/locked-wt
- * HEAD 56bdba0a04f83da4e821a0a3e7a6208d43fcaec5
- * branch refs/heads/feature2
- * locked testing lock
- *
- * worktree /path/to/detached-wt
- * HEAD 56bdba0a04f83da4e821a0a3e7a6208d43fcaec5
- * detached
- * ```
- *
- * Deliberately implemented with plain string methods (`startsWith`/`slice`)
- * rather than a line-matching regex — this parses `git`-controlled, not
- * attacker-controlled, input, but a sibling Wave 1 phase shipped a
- * CodeQL-flagged polynomial-regex bug from exactly this kind of "just trim
- * a path" text handling, so the same class of construct is avoided here on
- * principle even though the input source differs.
- */
-export function parseWorktreeListPorcelain(output) {
-    const blocks = output.split('\n\n');
-    const worktrees = [];
-    for (const block of blocks) {
-        const trimmedBlock = block.trim();
-        if (!trimmedBlock)
-            continue;
-        let path = '';
-        let head = null;
-        let branch = null;
-        let detached = false;
-        let bare = false;
-        let locked = false;
-        let lockedReason = null;
-        let prunable = false;
-        let prunableReason = null;
-        for (const rawLine of trimmedBlock.split('\n')) {
-            const line = rawLine.trim();
-            if (!line)
-                continue;
-            if (line === 'bare') {
-                bare = true;
-            }
-            else if (line === 'detached') {
-                detached = true;
-            }
-            else if (line.startsWith('worktree ')) {
-                path = line.slice('worktree '.length).trim();
-            }
-            else if (line.startsWith('HEAD ')) {
-                head = line.slice('HEAD '.length).trim();
-            }
-            else if (line.startsWith('branch ')) {
-                branch = line.slice('branch '.length).trim();
-            }
-            else if (line === 'locked') {
-                locked = true;
-            }
-            else if (line.startsWith('locked ')) {
-                locked = true;
-                lockedReason = line.slice('locked '.length).trim() || null;
-            }
-            else if (line === 'prunable') {
-                prunable = true;
-            }
-            else if (line.startsWith('prunable ')) {
-                prunable = true;
-                prunableReason = line.slice('prunable '.length).trim() || null;
-            }
-            // Any other line is a porcelain field this parser does not know about
-            // yet (git has added a few over the years) — ignored rather than
-            // treated as an error, so a future git version adding a new field
-            // degrades gracefully instead of breaking discovery entirely.
-        }
-        if (path) {
-            worktrees.push({ path, head, branch, detached, bare, locked, lockedReason, prunable, prunableReason });
-        }
-    }
-    return worktrees;
-}
-/**
- * Discovers every worktree of the git repository containing `repoRoot`,
- * returning the absolute paths that should be treated as additional
- * project-tier workspace roots.
- *
- * Filtering decisions, made explicit rather than left implicit:
- *
- * - **The main checkout is included.** `git worktree list` always lists it
- *   first (confirmed against a live run) — it needs no special-casing by
- *   callers; a caller that already writes to `repoRoot` directly can simply
- *   skip a returned path equal to `repoRoot` if it wants to avoid a
- *   redundant duplicate write, but the list is uniformly correct either way.
- * - **Locked worktrees are included.** `git worktree lock` only prevents
- *   git's own pruning of a worktree it cannot otherwise verify still
- *   exists (e.g. on removable storage) — it says nothing about whether the
- *   directory is currently present and writable, which it normally is.
- *   Excluding locked worktrees would silently under-cover a workflow (like
- *   Xirp's) that locks worktrees deliberately to protect them from being
- *   pruned out from under a long-running session — exactly the worktrees
- *   most worth covering.
- * - **Prunable worktrees are EXCLUDED.** `prunable` means git itself has
- *   flagged the worktree's directory as missing or otherwise administratively
- *   invalid. Writing into that path would either fail or (via this
- *   codebase's `mkdir(dir, { recursive: true })` write convention) silently
- *   RECREATE a directory git considers gone — resurrecting a deleted
- *   worktree's folder with governance files nobody asked for. Skipping it
- *   is what "don't write into a directory git says isn't really there"
- *   means in practice.
- * - **Bare-repository entries are EXCLUDED.** A bare repo's own `worktree`
- *   porcelain entry names its root path but has no working tree of ordinary
- *   files to write project-tier config into.
- *
- * Best-effort by design: returns `[]` (never throws) if `repoRoot` is not
- * inside a git repository, if `git` is not on `PATH`, or on any other
- * failure — this is additive coverage on top of the existing single-root
- * write path, so a git failure here must not break the sync cycle that
- * already succeeds for the main `workspaceRoot`. This also means a
- * non-worktree, single-checkout project (the common case) is a harmless
- * no-extra-work path: `git worktree list` still runs, still succeeds, and
- * returns exactly one entry (the main checkout itself).
- */
-export async function discoverWorktrees(repoRoot) {
-    try {
-        const { stdout } = await execFile('git', ['worktree', 'list', '--porcelain'], {
-            cwd: repoRoot,
-            encoding: 'utf-8',
-            timeout: 5000,
-        });
-        return parseWorktreeListPorcelain(stdout)
-            .filter((wt) => !wt.bare && !wt.prunable)
-            .map((wt) => wt.path);
-    }
-    catch {
-        // Not a git repo, git not installed, or a transient failure — additive
-        // coverage, so this degrades to "no extra worktrees found", not a
-        // thrown error the caller must handle.
-        return [];
-    }
-}
-//# sourceMappingURL=gitWorktrees.js.map

package/dist/lib/gitWorktrees.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gitWorktrees.js","sourceRoot":"","sources":["../../src/lib/gitWorktrees.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAE,QAAQ,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAErC,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;AA+BrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAc;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACnC,MAAM,SAAS,GAAmB,EAAE,CAAA;IAEpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QACjC,IAAI,CAAC,YAAY;YAAE,SAAQ;QAE3B,IAAI,IAAI,GAAG,EAAE,CAAA;QACb,IAAI,IAAI,GAAkB,IAAI,CAAA;QAC9B,IAAI,MAAM,GAAkB,IAAI,CAAA;QAChC,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,IAAI,IAAI,GAAG,KAAK,CAAA;QAChB,IAAI,MAAM,GAAG,KAAK,CAAA;QAClB,IAAI,YAAY,GAAkB,IAAI,CAAA;QACtC,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,IAAI,cAAc,GAAkB,IAAI,CAAA;QAExC,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;YAC3B,IAAI,CAAC,IAAI;gBAAE,SAAQ;YAEnB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,IAAI,GAAG,IAAI,CAAA;YACb,CAAC;iBAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,QAAQ,GAAG,IAAI,CAAA;YACjB,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;YAC9C,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;YAC1C,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;YAC9C,CAAC;iBAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,GAAG,IAAI,CAAA;YACf,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtC,MAAM,GAAG,IAAI,CAAA;gBACb,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAA;YAC5D,CAAC;iBAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,QAAQ,GAAG,IAAI,CAAA;YACjB,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxC,QAAQ,GAAG,IAAI,CAAA;gBACf,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAA;YAChE,CAAC;YACD,sEAAsE;YACtE,iEAAiE;YACjE,kEAAkE;YAClE,8DAA8D;QAChE,CAAC;QAED,IAAI,IAAI,EAAE,CAAC;YACT,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAA;QACxG,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IACtD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE;YAC5E,GAAG,EAAE,QAAQ;YACb,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;SACd,CAAC,CAAA;QACF,OAAO,0BAA0B,CAAC,MAAM,CAAC;aACtC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC;aACxC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,kEAAkE;QAClE,uCAAuC;QACvC,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC"}