@nurix/etna 0.20.30 → 0.20.31

package/data/harness-index.json

@@ -1,5 +1,5 @@
 {
-    "fingerprint": "687486a21483",
+    "fingerprint": "1ced34191650",
     "harnesses": {
         "code": {
             "plugin": "code",

package/data/harnesses/code/harness.json

@@ -1,7 +1,7 @@
 {
   "harness": "code",
   "name": "code",
-  "version": "3.20.1",
+  "version": "3.20.2",
   "files": [
     ".prettierignore",
     ".prettierrc.json",
@@ -29,5 +29,5 @@
     "origin": "https://cdn.nustack.io",
     "track": "latest"
   },
-  "digest": "f52d24285ab6"
+  "digest": "535a7aa34dfe"
 }

package/data/harnesses/code/hooks/mount.mjs

@@ -206,7 +206,7 @@ function removeEmptyParents(projectDir, rel) {
   }
 }
 
-// Writes the manifest's mounted files that differ on disk, then deletes owned names the manifest omits.
+// Fetches the manifest's mounted files that differ on disk, writes them deepest path first, then deletes owned names the manifest omits.
 async function mountFromManifest({ projectDir, manifest, origin, cacheDir, fetchImpl, timeoutMs, priorOwned }) {
   const all = mountedEntries(manifest);
   const entries = admittedEntries(projectDir, all);
@@ -218,14 +218,28 @@ async function mountFromManifest({ projectDir, manifest, origin, cacheDir, fetch
     const dest = join(projectDir, entry.path);
     return !(existsSync(dest) && sha256Of(readFileSync(dest)) === entry.sha256);
   });
+  // Booby trap: every live session in the checkout runs these hooks while the mount rewrites them.
+  // Writing as each fetch lands let `hooks/compliance.mjs` arrive seconds before a new `hooks/lib/`
+  // module it imports, and every hook call in that window died with ERR_MODULE_NOT_FOUND (3.20.1
+  // rollout, 2026-10-05). Fetch everything, then write locally, imports (deeper paths) before importers.
+  const fetched = [];
   await eachLimited(stale, async (entry) => {
     try {
-      writeAtomic(join(projectDir, entry.path), await readObject({ origin, entry, cacheDir, fetchImpl, timeoutMs }));
-      written.push(entry.path);
+      fetched.push({ entry, bytes: await readObject({ origin, entry, cacheDir, fetchImpl, timeoutMs }) });
     } catch {
       failed.push(entry.path);
     }
   });
+  const depth = (path) => path.split('/').length;
+  fetched.sort((a, b) => depth(b.entry.path) - depth(a.entry.path) || a.entry.path.localeCompare(b.entry.path));
+  for (const { entry, bytes } of fetched) {
+    try {
+      writeAtomic(join(projectDir, entry.path), bytes);
+      written.push(entry.path);
+    } catch {
+      failed.push(entry.path);
+    }
+  }
   for (const rel of prunableFiles(projectDir, unionOwned(manifest.owned, priorOwned))) {
     if (listed.has(rel)) continue;
     rmSync(join(projectDir, rel), { force: true });

package/lib/install/mount.mjs

@@ -204,7 +204,7 @@ function removeEmptyParents(projectDir, rel) {
   }
 }
 
-// Writes the manifest's mounted files that differ on disk, then deletes owned names the manifest omits.
+// Fetches the manifest's mounted files that differ on disk, writes them deepest path first, then deletes owned names the manifest omits.
 async function mountFromManifest({ projectDir, manifest, origin, cacheDir, fetchImpl, timeoutMs, priorOwned }) {
   const all = mountedEntries(manifest);
   const entries = admittedEntries(projectDir, all);
@@ -216,14 +216,28 @@ async function mountFromManifest({ projectDir, manifest, origin, cacheDir, fetch
     const dest = join(projectDir, entry.path);
     return !(existsSync(dest) && sha256Of(readFileSync(dest)) === entry.sha256);
   });
+  // Booby trap: every live session in the checkout runs these hooks while the mount rewrites them.
+  // Writing as each fetch lands let `hooks/compliance.mjs` arrive seconds before a new `hooks/lib/`
+  // module it imports, and every hook call in that window died with ERR_MODULE_NOT_FOUND (3.20.1
+  // rollout, 2026-10-05). Fetch everything, then write locally, imports (deeper paths) before importers.
+  const fetched = [];
   await eachLimited(stale, async (entry) => {
     try {
-      writeAtomic(join(projectDir, entry.path), await readObject({ origin, entry, cacheDir, fetchImpl, timeoutMs }));
-      written.push(entry.path);
+      fetched.push({ entry, bytes: await readObject({ origin, entry, cacheDir, fetchImpl, timeoutMs }) });
     } catch {
       failed.push(entry.path);
     }
   });
+  const depth = (path) => path.split('/').length;
+  fetched.sort((a, b) => depth(b.entry.path) - depth(a.entry.path) || a.entry.path.localeCompare(b.entry.path));
+  for (const { entry, bytes } of fetched) {
+    try {
+      writeAtomic(join(projectDir, entry.path), bytes);
+      written.push(entry.path);
+    } catch {
+      failed.push(entry.path);
+    }
+  }
   for (const rel of prunableFiles(projectDir, unionOwned(manifest.owned, priorOwned))) {
     if (listed.has(rel)) continue;
     rmSync(join(projectDir, rel), { force: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nurix/etna",
-  "version": "0.20.30",
+  "version": "0.20.31",
   "description": "Bootstrap a project with a Nurix harness — writes the committed contract (CLAUDE.md, AGENTS.md, .claude/harness.json, settings.json, the mount hook) and mounts the harness itself, gitignored, from a bundled payload; sessions keep it current from the CDN.",
   "type": "module",
   "bin": {
@@ -46,5 +46,5 @@
     "agent",
     "plugin"
   ],
-  "etnaFingerprint": "687486a21483"
+  "etnaFingerprint": "1ced34191650"
 }