@paraharness/git 0.0.0-stage → 0.1.0

package/dist/executors/internal/checkpoint-staging-and-integrity.js

@@ -0,0 +1,192 @@
+import { randomUUID } from 'node:crypto';
+import { lstat, readFile, rm } from 'node:fs/promises';
+import path from 'node:path';
+import { computeNodeModulesDigest, copyFileCowOrValue, } from './file-digest-and-globs.js';
+import { readHarnessMeta, runGitCommand } from './git-cli-runner.js';
+/**
+ * Stages tracked dirty files and size-bounded untracked files into a temporary git index to produce `treeSha`.
+ *
+ * Spills untracked (`?`) files exceeding `maxUntrackedBytes` into `<gitdir>/harness-ckpt-blobs/` via CoW/value copy.
+ *
+ * @param {GitWorktreeHandle}      handle            - Active worktree handle.
+ * @param {WorktreeStatusSnapshot} snapshot          - Porcelain v2 status snapshot of the worktree.
+ * @param {number}                 maxUntrackedBytes - Byte threshold above which untracked files spill to `harness-ckpt-blobs/`.
+ *
+ * @returns {Promise<StagedCheckpointTreeResult>} Synthesized tree SHA and spilled blob map.
+ */
+export async function stageCheckpointTreeAndOversizedBlobs(handle, snapshot, maxUntrackedBytes) {
+    const headSha = (await runGitCommand({ cwd: handle.worktreePath, args: ['rev-parse', 'HEAD'] })).stdout.trim();
+    const tmpIndex = path.join(handle.gitDirPath, `harness-ckpt-idx.${process.pid}.${randomUUID()}`);
+    const toAdd = [];
+    const toRemove = [];
+    const oversized = {};
+    try {
+        await runGitCommand({ cwd: handle.worktreePath, args: ['read-tree', headSha], env: { GIT_INDEX_FILE: tmpIndex } });
+        for (const [relPath, digest] of Object.entries(snapshot.statusMap)) {
+            if (digest === 'DELETED') {
+                toRemove.push(relPath);
+                continue;
+            }
+            const absPath = path.join(handle.worktreePath, relPath);
+            const stat = await lstat(absPath);
+            if (snapshot.untrackedPaths.has(relPath) && stat.isFile() && stat.size > maxUntrackedBytes) {
+                const blobKey = `${stat.size}_${Math.trunc(stat.mtimeMs)}_${digest.replace(':', '_')}`;
+                await copyFileCowOrValue(absPath, path.join(handle.gitDirPath, 'harness-ckpt-blobs', blobKey), stat.mode);
+                oversized[relPath] = Object.freeze({ blobKey, mode: stat.mode, size: stat.size });
+            }
+            else {
+                toAdd.push(relPath);
+            }
+        }
+        if (toRemove.length > 0)
+            await runGitCommand({ cwd: handle.worktreePath, args: ['update-index', '--force-remove', '-z', '--stdin'], env: { GIT_INDEX_FILE: tmpIndex }, stdin: `${toRemove.join('\0')}\0` });
+        if (toAdd.length > 0)
+            await runGitCommand({ cwd: handle.worktreePath, args: ['update-index', '--add', '-z', '--stdin'], env: { GIT_INDEX_FILE: tmpIndex }, stdin: `${toAdd.join('\0')}\0` });
+        const treeOutput = await runGitCommand({ cwd: handle.worktreePath, args: ['write-tree'], env: { GIT_INDEX_FILE: tmpIndex } });
+        return Object.freeze({ headSha, treeSha: treeOutput.stdout.trim(), oversizedUntrackedBlobs: Object.freeze(oversized) });
+    }
+    finally {
+        await rm(tmpIndex, { force: true });
+    }
+}
+/**
+ * Compares two `Readonly<Record<string, string>>` maps for exact key and value equality.
+ *
+ * @param {Readonly<Record<string, string>>} left  - First string map.
+ * @param {Readonly<Record<string, string>>} right - Second string map.
+ *
+ * @returns {boolean} `true` when both maps contain the exact same keys and values.
+ */
+function isStringRecordEqual(left, right) {
+    const leftKeys = Object.keys(left);
+    const rightKeys = Object.keys(right);
+    if (leftKeys.length !== rightKeys.length)
+        return false;
+    for (const key of leftKeys) {
+        if (left[key] !== right[key])
+            return false;
+    }
+    return true;
+}
+/**
+ * Compares two `HarnessMetaRecord` instances for structural equality without `JSON.stringify` key-order sensitivity.
+ *
+ * @param {HarnessMetaRecord} left  - Current metadata record read from disk.
+ * @param {HarnessMetaRecord} right - Baseline metadata record stored in the checkpoint.
+ *
+ * @returns {boolean} `true` when both metadata records are structurally identical.
+ */
+function isHarnessMetaEqual(left, right) {
+    if (left.baseRef !== right.baseRef ||
+        left.baseBranch !== right.baseBranch ||
+        left.branchName !== right.branchName ||
+        left.pendingParentHeadSha !== right.pendingParentHeadSha) {
+        return false;
+    }
+    if (!isStringRecordEqual(left.unresolvedConflictPaths, right.unresolvedConflictPaths)) {
+        return false;
+    }
+    if ((left.inFlightMerge === undefined) !== (right.inFlightMerge === undefined)) {
+        return false;
+    }
+    if (left.inFlightMerge !== undefined && right.inFlightMerge !== undefined) {
+        if (left.inFlightMerge.targetHeadSha !== right.inFlightMerge.targetHeadSha ||
+            left.inFlightMerge.mergedTreeSha !== right.inFlightMerge.mergedTreeSha ||
+            left.inFlightMerge.priorTreeSha !== right.inFlightMerge.priorTreeSha ||
+            !isStringRecordEqual(left.inFlightMerge.unresolvedConflictPaths, right.inFlightMerge.unresolvedConflictPaths)) {
+            return false;
+        }
+    }
+    if ((left.inFlightCommitAndPush === undefined) !== (right.inFlightCommitAndPush === undefined)) {
+        return false;
+    }
+    if (left.inFlightCommitAndPush !== undefined && right.inFlightCommitAndPush !== undefined) {
+        return (left.inFlightCommitAndPush.preStepHeadSha === right.inFlightCommitAndPush.preStepHeadSha &&
+            left.inFlightCommitAndPush.preStepBaseRef === right.inFlightCommitAndPush.preStepBaseRef &&
+            left.inFlightCommitAndPush.targetBranch === right.inFlightCommitAndPush.targetBranch);
+    }
+    return true;
+}
+/**
+ * Verifies worktree-local `.git` metadata (`HEAD`, `indexTreeSha`, `info/exclude`, `harness-meta.json`) and `node_modules` integrity.
+ *
+ * Returns `{ intact: false, reason }` if any worktree-local metadata or `node_modules` tree was mutated by a subprocess.
+ *
+ * @param {GitWorktreeHandle}    handle         - Active worktree handle.
+ * @param {GitCheckpointPayload} fromCheckpoint - Parsed baseline checkpoint payload.
+ *
+ * @returns {Promise<WorktreeIntegrityVerdict>} Integrity verification result.
+ */
+export async function verifyWorktreeLocalGitIntegrity(handle, fromCheckpoint) {
+    try {
+        const headRaw = await readFile(path.join(handle.gitDirPath, 'HEAD'), 'utf8');
+        if (headRaw !== fromCheckpoint.headRawContent)
+            return { intact: false, reason: '<gitdir>/HEAD raw content was modified' };
+        const headOutput = await runGitCommand({ cwd: handle.worktreePath, args: ['rev-parse', 'HEAD'], allowNonZeroExit: true });
+        if (headOutput.exitCode !== 0 || headOutput.stdout.trim() !== fromCheckpoint.headSha)
+            return { intact: false, reason: 'HEAD commit SHA was mutated' };
+        const idxTreeOutput = await runGitCommand({ cwd: handle.worktreePath, args: ['write-tree'], allowNonZeroExit: true });
+        if (idxTreeOutput.exitCode !== 0 || idxTreeOutput.stdout.trim() !== fromCheckpoint.indexTreeSha)
+            return { intact: false, reason: '<gitdir>/index was mutated' };
+        const infoExclude = await readFile(path.join(handle.gitDirPath, 'info', 'exclude'), 'utf8').catch(() => null);
+        if (infoExclude !== fromCheckpoint.infoExcludeContent)
+            return { intact: false, reason: '<gitdir>/info/exclude was mutated' };
+        const meta = await readHarnessMeta(handle.gitDirPath);
+        if (!isHarnessMetaEqual(meta, fromCheckpoint.meta))
+            return { intact: false, reason: '<gitdir>/harness-meta.json was mutated' };
+        const nmDigest = await computeNodeModulesDigest(handle.worktreePath);
+        if (nmDigest !== fromCheckpoint.nodeModulesDigest)
+            return { intact: false, reason: 'node_modules tree was mutated' };
+        return { intact: true };
+    }
+    catch (err) {
+        return { intact: false, reason: err instanceof Error ? err.message : String(err) };
+    }
+}
+/**
+ * Lists all repository-relative file paths recorded inside a Git tree object (`git ls-tree -r --name-only -z`).
+ *
+ * Returns a `ReadonlySet<string>` for $O(1)$ membership queries during checkpoint restoration and merge materialization.
+ *
+ * @param {string} worktreePath - Worktree directory path.
+ * @param {string} treeOrCommit - Git tree or commit SHA to list.
+ *
+ * @returns {Promise<ReadonlySet<string>>} Set of repository-relative file paths in `treeOrCommit`.
+ */
+export async function listTreePaths(worktreePath, treeOrCommit) {
+    const lsTreeOutput = await runGitCommand({
+        cwd: worktreePath,
+        args: ['ls-tree', '-r', '--name-only', '-z', treeOrCommit],
+    });
+    const paths = new Set();
+    for (const entry of lsTreeOutput.stdout.split('\0')) {
+        if (entry.length > 0)
+            paths.add(entry);
+    }
+    return paths;
+}
+/**
+ * Computes the sorted symmetric difference of paths whose `${mode}:${sha256}` status changed between two status maps.
+ *
+ * Includes paths added, deleted, modified, or reverted back to clean `HEAD` between `beforeMap` and `afterMap`.
+ *
+ * @param {Readonly<Record<string, string>>} beforeMap - Baseline status map from `fromCheckpoint`.
+ * @param {Readonly<Record<string, string>>} afterMap  - Current worktree status map.
+ *
+ * @returns {readonly string[]} Lexicographically sorted list of changed repository-relative paths.
+ */
+export function computeSymmetricStatusDiff(beforeMap, afterMap) {
+    const changed = new Set();
+    for (const [relPath, digest] of Object.entries(beforeMap)) {
+        if (afterMap[relPath] !== digest)
+            changed.add(relPath);
+    }
+    for (const [relPath, digest] of Object.entries(afterMap)) {
+        if (beforeMap[relPath] !== digest)
+            changed.add(relPath);
+    }
+    const sorted = [...changed];
+    sorted.sort();
+    return Object.freeze(sorted);
+}
+//# sourceMappingURL=checkpoint-staging-and-integrity.js.map

package/dist/executors/internal/checkpoint-staging-and-integrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-staging-and-integrity.js","sourceRoot":"","sources":["../../../src/executors/internal/checkpoint-staging-and-integrity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,IAAI,MAAM,WAAW,CAAC;AAO7B,OAAO,EACL,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAKrE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,MAAyB,EACzB,QAAgC,EAChC,iBAAyB;IAEzB,MAAM,OAAO,GAAG,CAAC,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/G,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,oBAAoB,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;IACjG,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAiD,EAAE,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnH,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACnE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,iBAAiB,EAAE,CAAC;gBAC3F,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBACvF,MAAM,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,oBAAoB,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1G,SAAS,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACpF,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5M,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7L,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9H,OAAO,MAAM,CAAC,MAAM,CAA6B,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACtJ,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAC1B,IAAsC,EACtC,KAAuC;IAEvC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACvD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CACzB,IAAuB,EACvB,KAAwB;IAExB,IACE,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAC9B,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACpC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACpC,IAAI,CAAC,oBAAoB,KAAK,KAAK,CAAC,oBAAoB,EACxD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAC1E,IACE,IAAI,CAAC,aAAa,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,CAAC,aAAa;YACtE,IAAI,CAAC,aAAa,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,CAAC,aAAa;YACtE,IAAI,CAAC,aAAa,CAAC,YAAY,KAAK,KAAK,CAAC,aAAa,CAAC,YAAY;YACpE,CAAC,mBAAmB,CAClB,IAAI,CAAC,aAAa,CAAC,uBAAuB,EAC1C,KAAK,CAAC,aAAa,CAAC,uBAAuB,CAC5C,EACD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,qBAAqB,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,qBAAqB,KAAK,SAAS,CAAC,EAAE,CAAC;QAC/F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,IAAI,KAAK,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAC1F,OAAO,CACL,IAAI,CAAC,qBAAqB,CAAC,cAAc,KAAK,KAAK,CAAC,qBAAqB,CAAC,cAAc;YACxF,IAAI,CAAC,qBAAqB,CAAC,cAAc,KAAK,KAAK,CAAC,qBAAqB,CAAC,cAAc;YACxF,IAAI,CAAC,qBAAqB,CAAC,YAAY,KAAK,KAAK,CAAC,qBAAqB,CAAC,YAAY,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,MAAyB,EACzB,cAAoC;IAEpC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7E,IAAI,OAAO,KAAK,cAAc,CAAC,cAAc;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;QAC1H,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1H,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,cAAc,CAAC,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;QACtJ,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QACtH,IAAI,aAAa,CAAC,QAAQ,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,cAAc,CAAC,YAAY;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QAChK,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC9G,IAAI,WAAW,KAAK,cAAc,CAAC,kBAAkB;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;QAC7H,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;QAC/H,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACrE,IAAI,QAAQ,KAAK,cAAc,CAAC,iBAAiB;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;QACrH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACrF,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,YAAoB,EACpB,YAAoB;IAEpB,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC;QACvC,GAAG,EAAE,YAAY;QACjB,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,CAAC;KAC3D,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,SAA2C,EAC3C,QAA0C;IAE1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAC5B,MAAM,CAAC,IAAI,EAAE,CAAC;IACd,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC"}

package/dist/executors/internal/compute-worktree-status-options.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Options for `computeWorktreeStatusMap` when scanning a worktree via `git status --porcelain=v2 -z`.
+ *
+ * Configures optional user `excludeGlobs`, whether `repo` is `'.'`, and whether `--ignored=matching`
+ * should be enabled to surface newly gitignored files.
+ */
+export interface ComputeWorktreeStatusOptions {
+    /** Optional glob patterns excluded from the status map (except `**\/.gitignore`). */
+    readonly excludeGlobs?: readonly string[];
+    /** Optional paths that were already ignored at checkpoint creation time. */
+    readonly baselineIgnoredPaths?: ReadonlySet<string>;
+    /** When `true`, passes `--ignored=matching` to `git status` to detect files hidden behind `.gitignore` edits. */
+    readonly includeMatchingIgnored?: boolean;
+}
+//# sourceMappingURL=compute-worktree-status-options.d.ts.map

package/dist/executors/internal/compute-worktree-status-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-worktree-status-options.d.ts","sourceRoot":"","sources":["../../../src/executors/internal/compute-worktree-status-options.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,4BAA4B;IAC3C,qFAAqF;IACrF,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,4EAA4E;IAC5E,QAAQ,CAAC,oBAAoB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACpD,iHAAiH;IACjH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAC3C"}

package/dist/executors/internal/compute-worktree-status-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=compute-worktree-status-options.js.map

package/dist/executors/internal/compute-worktree-status-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-worktree-status-options.js","sourceRoot":"","sources":["../../../src/executors/internal/compute-worktree-status-options.ts"],"names":[],"mappings":""}

package/dist/executors/internal/cow-worktree-hydrator.d.ts

@@ -0,0 +1,51 @@
+import type { ASTNode, GitCowWorktreeNode } from '@paraharness/core';
+/**
+ * Recursively clones `srcNodeModules` into `destNodeModules` using hardlinks (`link`) for regular files and `symlink` for links.
+ *
+ * Copies `.prisma` directories by value and skips any paths matching `excludeGlobs`.
+ *
+ * @param {string}                        srcRoot        - Source repository or parent worktree path.
+ * @param {string}                        destRoot       - Destination worktree path.
+ * @param {readonly string[] | undefined} [excludeGlobs] - Optional glob patterns excluded from cloning.
+ *
+ * @returns {Promise<void>} Resolves once `node_modules` is cloned into `destRoot`.
+ */
+export declare function cloneNodeModulesTree(srcRoot: string, destRoot: string, excludeGlobs?: readonly string[]): Promise<void>;
+/**
+ * Evaluates `.lockfileGate(lockfilePath)` between `repoPath` and `worktreePath` and hydrates `node_modules` or runs `setupCommands`.
+ *
+ * On a lockfile hash hit, hardlinks `node_modules` and skips setup; on a miss, unlinks any hardlinked `node_modules` and runs `setupCommands`.
+ *
+ * @param {GitCowWorktreeNode} node         - Worktree scope AST node configuration.
+ * @param {string}             repoPath     - Host repository root path.
+ * @param {string}             worktreePath - Newly created root worktree path.
+ *
+ * @returns {Promise<void>} Resolves once `node_modules` hydration and any required setup commands complete.
+ */
+export declare function hydrateWorktreeDependencies(node: GitCowWorktreeNode, repoPath: string, worktreePath: string): Promise<void>;
+/**
+ * Checks whether the lockfile at `lockfileGatePath` in `worktreePath` matches the host repository's warm `node_modules` cache hash.
+ *
+ * Records the initial host lockfile hash in `<hostGitDir>/harness-warm-lockfile.sha256` when `repoPath/node_modules` is first observed.
+ *
+ * @param {string} repoPath         - Host repository root path.
+ * @param {string} worktreePath     - Target worktree path.
+ * @param {string} lockfileGatePath - Repository-relative path to the lockfile (such as `'pnpm-lock.yaml'`).
+ *
+ * @returns {Promise<boolean>} `true` on a lockfile cache hit, or `false` on a gate miss.
+ */
+export declare function evaluateLockfileGateHit(repoPath: string, worktreePath: string, lockfileGatePath: string): Promise<boolean>;
+/**
+ * Executes a single setup command AST node (`node:command` or `harness:command`) inside `worktreePath`.
+ *
+ * Spawns `argv` with the isolated worktree Git environment when `cmdNode` is a `LocalCommandNode`.
+ *
+ * @param {ASTNode} cmdNode      - Setup command AST node from `GitCowWorktreeNode.setupCommands`.
+ * @param {string}  worktreePath - Target root worktree path.
+ *
+ * @returns {Promise<void>} Resolves once the setup command finishes with exit code `0`.
+ *
+ * @throws {Error} If the setup command exits with a non-zero status code.
+ */
+export declare function executeSetupCommandNode(cmdNode: ASTNode, worktreePath: string): Promise<void>;
+//# sourceMappingURL=cow-worktree-hydrator.d.ts.map

package/dist/executors/internal/cow-worktree-hydrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cow-worktree-hydrator.d.ts","sourceRoot":"","sources":["../../../src/executors/internal/cow-worktree-hydrator.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAwDrE;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,GAC/B,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,kBAAkB,EACxB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,OAAO,CAAC,CAoBlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAsBf"}

package/dist/executors/internal/cow-worktree-hydrator.js

@@ -0,0 +1,174 @@
+import { spawn } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { link, lstat, mkdir, readdir, readFile, readlink, rm, symlink, } from 'node:fs/promises';
+import path from 'node:path';
+import { withFileLock } from '@paraharness/lockfile';
+import writeFileAtomic from 'write-file-atomic';
+import { compileWorktreeExcludeMatcher, copyFileCowOrValue, } from './file-digest-and-globs.js';
+import { buildIsolatedWorktreeGitEnv, runGitCommand } from './git-cli-runner.js';
+/**
+ * Clones a single directory entry inside `node_modules` using symlink recreation, `.prisma` value copy, or hardlinking.
+ *
+ * @param {CloneSingleNodeModulesEntryParams} params - Single `node_modules` entry clone parameters.
+ *
+ * @returns {Promise<void>} Resolves once the entry is cloned or pushed onto `params.stack`.
+ */
+async function cloneSingleNodeModulesEntry(params) {
+    if (params.entry.isDirectory()) {
+        params.stack.push(params.childRel);
+        return;
+    }
+    const srcAbs = path.join(params.srcRoot, params.childRel);
+    const destAbs = path.join(params.destRoot, params.childRel);
+    if (params.entry.isSymbolicLink()) {
+        await mkdir(path.dirname(destAbs), { recursive: true });
+        await rm(destAbs, { force: true });
+        await symlink(await readlink(srcAbs, 'utf8'), destAbs);
+        return;
+    }
+    if (params.childRel.includes('/.prisma/')) {
+        await copyFileCowOrValue(srcAbs, destAbs);
+        return;
+    }
+    await mkdir(path.dirname(destAbs), { recursive: true });
+    await rm(destAbs, { force: true });
+    await link(srcAbs, destAbs).catch(() => copyFileCowOrValue(srcAbs, destAbs));
+}
+/**
+ * Recursively clones `srcNodeModules` into `destNodeModules` using hardlinks (`link`) for regular files and `symlink` for links.
+ *
+ * Copies `.prisma` directories by value and skips any paths matching `excludeGlobs`.
+ *
+ * @param {string}                        srcRoot        - Source repository or parent worktree path.
+ * @param {string}                        destRoot       - Destination worktree path.
+ * @param {readonly string[] | undefined} [excludeGlobs] - Optional glob patterns excluded from cloning.
+ *
+ * @returns {Promise<void>} Resolves once `node_modules` is cloned into `destRoot`.
+ */
+export async function cloneNodeModulesTree(srcRoot, destRoot, excludeGlobs) {
+    const srcNm = path.join(srcRoot, 'node_modules');
+    const stat = await lstat(srcNm).catch(() => null);
+    if (stat === null || !stat.isDirectory())
+        return;
+    const isExcluded = compileWorktreeExcludeMatcher(excludeGlobs);
+    const stack = ['node_modules'];
+    while (stack.length > 0) {
+        const relDir = stack.pop() ?? '';
+        if (isExcluded(relDir))
+            continue;
+        const entries = await readdir(path.join(srcRoot, relDir), { withFileTypes: true });
+        for (const entry of entries) {
+            const childRel = `${relDir}/${entry.name}`;
+            if (isExcluded(childRel))
+                continue;
+            await cloneSingleNodeModulesEntry({
+                entry,
+                childRel,
+                srcRoot,
+                destRoot,
+                stack,
+            });
+        }
+    }
+}
+/**
+ * Evaluates `.lockfileGate(lockfilePath)` between `repoPath` and `worktreePath` and hydrates `node_modules` or runs `setupCommands`.
+ *
+ * On a lockfile hash hit, hardlinks `node_modules` and skips setup; on a miss, unlinks any hardlinked `node_modules` and runs `setupCommands`.
+ *
+ * @param {GitCowWorktreeNode} node         - Worktree scope AST node configuration.
+ * @param {string}             repoPath     - Host repository root path.
+ * @param {string}             worktreePath - Newly created root worktree path.
+ *
+ * @returns {Promise<void>} Resolves once `node_modules` hydration and any required setup commands complete.
+ */
+export async function hydrateWorktreeDependencies(node, repoPath, worktreePath) {
+    await cloneNodeModulesTree(repoPath, worktreePath, node.excludeFromCloneGlobs);
+    if (node.lockfileGatePath !== undefined) {
+        const isHit = await evaluateLockfileGateHit(repoPath, worktreePath, node.lockfileGatePath);
+        if (isHit)
+            return;
+        await rm(path.join(worktreePath, 'node_modules'), { recursive: true, force: true });
+    }
+    else if (node.setupCommands.length > 0) {
+        await rm(path.join(worktreePath, 'node_modules'), { recursive: true, force: true });
+    }
+    for (const cmdNode of node.setupCommands) {
+        await executeSetupCommandNode(cmdNode, worktreePath);
+    }
+}
+/**
+ * Checks whether the lockfile at `lockfileGatePath` in `worktreePath` matches the host repository's warm `node_modules` cache hash.
+ *
+ * Records the initial host lockfile hash in `<hostGitDir>/harness-warm-lockfile.sha256` when `repoPath/node_modules` is first observed.
+ *
+ * @param {string} repoPath         - Host repository root path.
+ * @param {string} worktreePath     - Target worktree path.
+ * @param {string} lockfileGatePath - Repository-relative path to the lockfile (such as `'pnpm-lock.yaml'`).
+ *
+ * @returns {Promise<boolean>} `true` on a lockfile cache hit, or `false` on a gate miss.
+ */
+export async function evaluateLockfileGateHit(repoPath, worktreePath, lockfileGatePath) {
+    const hostNmStat = await lstat(path.join(repoPath, 'node_modules')).catch(() => null);
+    if (hostNmStat === null || !hostNmStat.isDirectory())
+        return false;
+    const wtLockBuf = await readFile(path.join(worktreePath, lockfileGatePath)).catch(() => null);
+    const hostLockBuf = await readFile(path.join(repoPath, lockfileGatePath)).catch(() => null);
+    if (wtLockBuf === null || hostLockBuf === null)
+        return false;
+    const wtHash = createHash('sha256').update(wtLockBuf).digest('hex');
+    const hostHash = createHash('sha256').update(hostLockBuf).digest('hex');
+    const gitCommonOutput = await runGitCommand({ cwd: repoPath, args: ['rev-parse', '--git-common-dir'] });
+    const commonGitDir = path.resolve(repoPath, gitCommonOutput.stdout.trim());
+    const cacheFile = path.join(commonGitDir, 'harness-warm-lockfile.sha256');
+    const lockPath = path.join(commonGitDir, 'harness-warm-lockfile.lock');
+    return withFileLock(lockPath, async () => {
+        const cachedHash = await readFile(cacheFile, 'utf8').catch(() => null);
+        if (cachedHash === null) {
+            await writeFileAtomic(cacheFile, hostHash, { encoding: 'utf8' });
+            return wtHash === hostHash;
+        }
+        return wtHash === cachedHash.trim() && wtHash === hostHash;
+    });
+}
+/**
+ * Executes a single setup command AST node (`node:command` or `harness:command`) inside `worktreePath`.
+ *
+ * Spawns `argv` with the isolated worktree Git environment when `cmdNode` is a `LocalCommandNode`.
+ *
+ * @param {ASTNode} cmdNode      - Setup command AST node from `GitCowWorktreeNode.setupCommands`.
+ * @param {string}  worktreePath - Target root worktree path.
+ *
+ * @returns {Promise<void>} Resolves once the setup command finishes with exit code `0`.
+ *
+ * @throws {Error} If the setup command exits with a non-zero status code.
+ */
+export async function executeSetupCommandNode(cmdNode, worktreePath) {
+    if (!('argv' in cmdNode))
+        return;
+    const rawArgv = typeof cmdNode.argv === 'function' ? cmdNode.argv(undefined) : cmdNode.argv;
+    if (!Array.isArray(rawArgv) || rawArgv.length === 0)
+        return;
+    const argv = rawArgv.map(String);
+    const bin = argv[0];
+    if (bin === undefined)
+        return;
+    const env = buildIsolatedWorktreeGitEnv(worktreePath);
+    await new Promise((resolve, reject) => {
+        const child = spawn(bin, argv.slice(1), { cwd: worktreePath, env, stdio: 'pipe' });
+        const stderrChunks = [];
+        child.stderr.on('data', (chunk) => {
+            stderrChunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk), 'utf8'));
+        });
+        child.on('error', reject);
+        child.on('close', (code) => {
+            const stderrText = Buffer.concat(stderrChunks).toString('utf8').trim();
+            if ((code ?? 1) !== 0)
+                reject(new Error(`Worktree setup command '${argv.join(' ')}' failed (exit ${code ?? 1}): ${stderrText}`));
+            else
+                resolve();
+        });
+        child.stdin.end();
+    });
+}
+//# sourceMappingURL=cow-worktree-hydrator.js.map

package/dist/executors/internal/cow-worktree-hydrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cow-worktree-hydrator.js","sourceRoot":"","sources":["../../../src/executors/internal/cow-worktree-hydrator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,IAAI,EACJ,KAAK,EACL,KAAK,EACL,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,EAAE,EACF,OAAO,GACR,MAAM,kBAAkB,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,EACL,6BAA6B,EAC7B,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,2BAA2B,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAkBjF;;;;;;GAMG;AACH,KAAK,UAAU,2BAA2B,CACxC,MAAyC;IAEzC,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;QAClC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,MAAM,OAAO,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1C,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAe,EACf,QAAgB,EAChB,YAAgC;IAEhC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO;IACjD,MAAM,UAAU,GAAG,6BAA6B,CAAC,YAAY,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAa,CAAC,cAAc,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QACjC,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,SAAS;QACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACnC,MAAM,2BAA2B,CAAC;gBAChC,KAAK;gBACL,QAAQ;gBACR,OAAO;gBACP,QAAQ;gBACR,KAAK;aACN,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAwB,EACxB,QAAgB,EAChB,YAAoB;IAEpB,MAAM,oBAAoB,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC/E,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC3F,IAAI,KAAK;YAAE,OAAO;QAClB,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;SAAM,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACzC,MAAM,uBAAuB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAgB,EAChB,YAAoB,EACpB,gBAAwB;IAExB,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACtF,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;QAAE,OAAO,KAAK,CAAC;IACnE,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9F,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC5F,IAAI,SAAS,KAAK,IAAI,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACxG,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,8BAA8B,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,4BAA4B,CAAC,CAAC;IACvE,OAAO,YAAY,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,OAAO,MAAM,KAAK,QAAQ,CAAC;QAC7B,CAAC;QACD,OAAO,MAAM,KAAK,UAAU,CAAC,IAAI,EAAE,IAAI,MAAM,KAAK,QAAQ,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAgB,EAChB,YAAoB;IAEpB,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC;QAAE,OAAO;IACjC,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAE,OAAO,CAAC,IAAgD,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACzI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO;IAC9B,MAAM,GAAG,GAAG,2BAA2B,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACnF,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,EAAE;YACxC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACvE,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,MAAM,UAAU,EAAE,CAAC,CAAC,CAAC;;gBAC5H,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/executors/internal/file-digest-and-globs.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Computes the `${mode}:${sha256}` digest for a worktree path using `lstat(2)` and `readlink(2)` / `readFile(2)`.
+ *
+ * Returns `'DELETED'` when the path does not exist on disk (`ENOENT`), and hashes symlink target strings
+ * without dereferencing broken or external symlinks.
+ *
+ * @param {string} fullPath - Absolute filesystem path to inspect.
+ *
+ * @returns {Promise<string>} Formatted `${mode}:${sha256}` digest string or `'DELETED'`.
+ */
+export declare function computePathModeAndSha256(fullPath: string): Promise<string>;
+/**
+ * Compiles a reusable predicate testing whether a repository-relative path should be excluded from checkpoints/clones.
+ *
+ * Always returns `false` for `.gitignore` and `**\/.gitignore` so gitignore tampering is never masked.
+ *
+ * @param {readonly string[] | undefined} excludeGlobs - Configured glob patterns to exclude.
+ *
+ * @returns {(relPath: string) => boolean} Synchronous path exclusion predicate.
+ */
+export declare function compileWorktreeExcludeMatcher(excludeGlobs: readonly string[] | undefined): (relPath: string) => boolean;
+/**
+ * Computes a structural SHA-256 digest of `<worktreePath>/node_modules`.
+ *
+ * Walks regular files and symlinks inside `node_modules` (excluding top-level and nested `.cache`, `.vite`, and `.vitest`)
+ * so `diffEffects` and `restoreCheckpoint` can detect `node_modules` tampering without performing backup I/O.
+ *
+ * @param {string} worktreePath - Worktree root directory path.
+ *
+ * @returns {Promise<string>} Hex SHA-256 digest of the `node_modules` tree, or `'ABSENT'` when not present.
+ */
+export declare function computeNodeModulesDigest(worktreePath: string): Promise<string>;
+/**
+ * Mirrors `<worktreePath>/node_modules` into `<backupRootDir>/<digest>` via Copy-on-Write if not already backed up.
+ *
+ * Skips transient `.cache`, `.vite`, and `.vitest` subdirectories and short-circuits when `digest === 'ABSENT'`
+ * or `<backupRootDir>/<digest>` already exists on disk.
+ *
+ * @param {string} worktreePath  - Worktree root directory path.
+ * @param {string} digest        - Precomputed structural SHA-256 digest of `node_modules`.
+ * @param {string} backupRootDir - `<gitdir>/harness-ckpt-nm` backup root directory.
+ *
+ * @returns {Promise<void>} Resolves once the content-addressed backup directory is populated.
+ */
+export declare function snapshotNodeModulesForCheckpoint(worktreePath: string, digest: string, backupRootDir: string): Promise<void>;
+/**
+ * Copies a single file or symbolic link using Copy-on-Write (`COPYFILE_FICLONE`) when supported, falling back to value copy.
+ *
+ * Preserves symbolic links via `readlink` + `symlink` and applies POSIX file permission bits (`mode`) for regular files.
+ *
+ * @param {string} srcPath  - Source file or symlink path.
+ * @param {string} destPath - Destination file or symlink path.
+ * @param {number} [mode]   - Optional POSIX permission mode to apply.
+ *
+ * @returns {Promise<void>} Resolves once the file or symlink is copied.
+ */
+export declare function copyFileCowOrValue(srcPath: string, destPath: string, mode?: number): Promise<void>;
+//# sourceMappingURL=file-digest-and-globs.d.ts.map

package/dist/executors/internal/file-digest-and-globs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-digest-and-globs.d.ts","sourceRoot":"","sources":["../../../src/executors/internal/file-digest-and-globs.ts"],"names":[],"mappings":"AAoBA;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBhF;AAED;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAC1C,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAqB9B;AAsBD;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,CAAC,CAqBjB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gCAAgC,CACpD,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAiBf"}