@prestyj/cli 5.23.0 → 5.25.0

package/dist/core/ui-registry.js

@@ -0,0 +1,291 @@
+import { createHash } from "node:crypto";
+import { z } from "zod";
+import { checkUrlPolicy } from "./network-guard.js";
+export const UI_PROVIDERS = {
+    bklit: {
+        repo: "bklit/bklit-ui",
+        revision: "0dfdfc57ca068470ccfb93c4501cebc555c9054d",
+        manifest: "packages/ui/registry.json",
+        root: "https://ui.bklit.com/r/",
+    },
+    kokonut: {
+        repo: "kokonut-labs/kokonutui",
+        revision: "83eec6d982d400a18438001a8efdbac1f159dd43",
+        manifest: "registry.json",
+        root: "https://kokonutui.com/r/",
+    },
+};
+const slug = z.string().regex(/^[a-z0-9][a-z0-9-]{0,99}$/);
+const fileSchema = z
+    .object({
+    path: z.string().max(240),
+    type: z.string().optional(),
+    target: z.string().max(240).optional(),
+    content: z.string().max(500000).optional(),
+})
+    .strict();
+const itemSchema = z
+    .object({
+    name: slug,
+    type: z.enum([
+        "registry:component",
+        "registry:block",
+        "registry:example",
+        "registry:hook",
+        "registry:lib",
+        "registry:ui",
+        "registry:style",
+        "registry:theme",
+        "registry:file",
+    ]),
+    title: z.string().optional(),
+    description: z.string().optional(),
+    files: z.array(fileSchema).max(150),
+    dependencies: z.array(z.string().max(300)).max(100).optional(),
+    devDependencies: z.array(z.string().max(300)).max(100).optional(),
+    registryDependencies: z.array(z.string().max(300)).max(100).optional(),
+    css: z.record(z.string(), z.unknown()).optional(),
+    cssVars: z.record(z.string(), z.unknown()).optional(),
+    meta: z.record(z.string(), z.unknown()).optional(),
+    categories: z.array(z.string()).optional(),
+    docs: z.string().optional(),
+    author: z.string().optional(),
+    $schema: z.string().optional(),
+    tailwind: z.record(z.string(), z.unknown()).optional(),
+})
+    .strict();
+export const payloadHash = (text) => createHash("sha256").update(text).digest("hex");
+export function registryPath(value) {
+    // A leading slash in hosted source paths is a registry convention, not an absolute target.
+    const normalized = value.replace(/^\//, "");
+    if (!normalized ||
+        !/^(?:[a-zA-Z0-9_@().-]+\/)*[a-zA-Z0-9_@().-]+$/.test(normalized) ||
+        normalized.split("/").some((p) => p === "." || p === ".."))
+        throw new Error("Invalid registry path");
+    return normalized;
+}
+export function registryUrl(value) {
+    const url = new URL(value);
+    if (url.protocol !== "https:" ||
+        url.port ||
+        url.username ||
+        url.password ||
+        url.search ||
+        url.hash ||
+        /%|\\/.test(value))
+        throw new Error("Blocked registry URL");
+    const allowed = Object.values(UI_PROVIDERS).some((p) => url.href === `https://raw.githubusercontent.com/${p.repo}/${p.revision}/${p.manifest}` ||
+        url.href === `https://raw.githubusercontent.com/${p.repo}/${p.revision}/LICENSE` ||
+        (url.href.startsWith(p.root) && /^[a-z0-9-]+\.json$/.test(url.href.slice(p.root.length))));
+    if (!allowed &&
+        !(url.hostname === "ui.shadcn.com" &&
+            /^\/r\/styles\/new-york\/[a-z0-9-]+\.json$/.test(url.pathname)))
+        throw new Error("Blocked registry host/path");
+    return url;
+}
+export function registryKey(value) {
+    if (/^(bklit|kokonut|shadcn):/.test(value)) {
+        const [provider, name, extra] = value.split(":");
+        if (extra !== undefined)
+            throw new Error("Invalid item ID");
+        return `${provider}:${slug.parse(name)}`;
+    }
+    if (value.startsWith("@bklit/"))
+        return `bklit:${slug.parse(value.slice(7))}`;
+    if (value.startsWith("@kokonutui/"))
+        return `kokonut:${slug.parse(value.slice(11))}`;
+    if (value.startsWith("https://")) {
+        const url = registryUrl(value);
+        for (const [provider, p] of Object.entries(UI_PROVIDERS)) {
+            if (url.href.startsWith(p.root))
+                return `${provider}:${slug.parse(url.pathname.slice(3, -5))}`;
+        }
+        if (url.hostname === "ui.shadcn.com")
+            return `shadcn:${slug.parse(url.pathname.split("/").at(-1).slice(0, -5))}`;
+        throw new Error("Not an item URL");
+    }
+    return `shadcn:${slug.parse(value)}`;
+}
+export function validateRegistryItem(input, source = false) {
+    const item = itemSchema.parse(input);
+    const seen = new Set();
+    for (const file of item.files) {
+        const key = registryPath(file.path);
+        if (seen.has(key))
+            throw new Error("Duplicate registry source path");
+        seen.add(key);
+        if (file.target)
+            registryPath(file.target);
+        if (source && (file.content === undefined || Buffer.byteLength(file.content) > 500000))
+            throw new Error("Missing or oversized registry source");
+    }
+    return item;
+}
+export function resolveRegistryFile(source, selector) {
+    const matches = source.item.files.filter((file, index) => selector === `${source.id}#${index}` ||
+        registryPath(file.path) === selector.replace(/^\//, "") ||
+        (file.target && registryPath(file.target) === selector.replace(/^\//, "")));
+    if (matches.length !== 1)
+        throw new Error(`File selector matched ${matches.length} files; use a stable item#file-index ID`);
+    return matches[0];
+}
+export const MOTION_GUIDANCE = {
+    kind: "animation-api",
+    package: "motion",
+    import: "motion/react",
+    documentation: "https://motion.dev/docs/react",
+    guidance: "Use motion elements for declarative animation, AnimatePresence for exit transitions, useReducedMotion for user preferences, and useAnimate for scoped imperative animation. Hooks need real consumers. Preserve callbacks, keyboard semantics and teardown; do not mix competing animation owners. Check installed version before selecting APIs. Motion+ paid assets are excluded.",
+    families: [
+        "animate",
+        "exit",
+        "layout",
+        "gestures",
+        "scroll",
+        "drag",
+        "variants",
+        "spring",
+        "motion-values",
+        "transforms",
+        "reduced-motion",
+        "imperative",
+        "presence",
+    ],
+};
+/** Lazy, bounded per-session cache; every fetch and redirect respects current network policy. */
+export class UiRegistry {
+    getNetworkPolicy;
+    fetcher;
+    cache = new Map();
+    cacheBytes = 0;
+    constructor(getNetworkPolicy, fetcher = fetch) {
+        this.getNetworkPolicy = getNetworkPolicy;
+        this.fetcher = fetcher;
+    }
+    async fetchText(value, signal) {
+        let url = registryUrl(value);
+        const combined = AbortSignal.any([AbortSignal.timeout(20000), ...(signal ? [signal] : [])]);
+        for (let redirects = 0; redirects < 4; redirects++) {
+            combined.throwIfAborted();
+            const blocked = checkUrlPolicy(url.href, this.getNetworkPolicy);
+            if (blocked)
+                throw new Error(blocked);
+            const cached = this.cache.get(url.href);
+            if (cached)
+                return cached;
+            const response = await this.fetcher(url, { redirect: "manual", signal: combined });
+            if ([301, 302, 303, 307, 308].includes(response.status)) {
+                await response.body?.cancel();
+                const location = response.headers.get("location");
+                if (!location)
+                    throw new Error("Registry redirect missing location");
+                url = registryUrl(new URL(location, url).href);
+                continue;
+            }
+            if (!response.ok || !response.body) {
+                await response.body?.cancel();
+                throw new Error(`Registry HTTP ${response.status}`);
+            }
+            const reader = response.body.getReader();
+            const chunks = [];
+            let size = 0;
+            try {
+                for (;;) {
+                    combined.throwIfAborted();
+                    const { value: chunk, done } = await reader.read();
+                    if (done)
+                        break;
+                    size += chunk.byteLength;
+                    if (size > 3000000)
+                        throw new Error("Registry payload exceeds 3 MB");
+                    chunks.push(chunk);
+                }
+            }
+            finally {
+                await reader.cancel();
+                reader.releaseLock();
+            }
+            const text = Buffer.concat(chunks).toString("utf8");
+            const result = { text, url: url.href, hash: payloadHash(text) };
+            while (this.cache.size >= 32 || this.cacheBytes + size > 12000000) {
+                const oldest = this.cache.keys().next().value;
+                if (!oldest)
+                    break;
+                this.cacheBytes -= Buffer.byteLength(this.cache.get(oldest).text);
+                this.cache.delete(oldest);
+            }
+            this.cache.set(url.href, result);
+            this.cacheBytes += Buffer.byteLength(text);
+            return result;
+        }
+        throw new Error("Registry redirect limit");
+    }
+    async search(query = "", signal) {
+        const results = [];
+        for (const [provider, p] of Object.entries(UI_PROVIDERS)) {
+            const raw = await this.fetchText(`https://raw.githubusercontent.com/${p.repo}/${p.revision}/${p.manifest}`, signal);
+            const manifest = JSON.parse(raw.text);
+            const parsed = z.object({ items: z.array(z.unknown()).max(220) }).parse(manifest);
+            for (const value of parsed.items) {
+                const item = validateRegistryItem(value);
+                if (`${item.name} ${item.title ?? ""} ${item.description ?? ""}`
+                    .toLowerCase()
+                    .includes(query.toLowerCase())) {
+                    results.push({
+                        id: `${provider}:${item.name}`,
+                        name: item.name,
+                        description: item.description,
+                        type: item.type,
+                    });
+                }
+            }
+        }
+        return results;
+    }
+    async inspect(value, signal) {
+        const id = registryKey(value);
+        const [provider, name] = id.split(":");
+        const p = UI_PROVIDERS[provider];
+        const url = p
+            ? `${p.root}${name}.json`
+            : `https://ui.shadcn.com/r/styles/new-york/${name}.json`;
+        const raw = await this.fetchText(url, signal);
+        const item = validateRegistryItem(JSON.parse(raw.text), true);
+        if (item.name !== name)
+            throw new Error("Registry name mismatch");
+        return {
+            id,
+            item,
+            url: raw.url,
+            payloadHash: raw.hash,
+            inventoryRevision: p?.revision,
+            hostedMatchesRevision: "not-verified",
+            dependencies: (item.registryDependencies ?? []).map(registryKey),
+            attribution: p
+                ? `Public ${provider} source: https://github.com/${p.repo}; preserve notices. License: https://raw.githubusercontent.com/${p.repo}/${p.revision}/LICENSE. Review dependency licenses separately (including Iconists); public availability is not a license grant. Paid assets excluded.`
+                : "shadcn/ui supporting registry source; preserve notices and verify dependency licenses.",
+        };
+    }
+    async closure(value, signal) {
+        const result = [];
+        const active = new Set();
+        const seen = new Set();
+        const visit = async (id, depth) => {
+            if (active.has(id))
+                throw new Error("Registry dependency cycle");
+            if (seen.has(id))
+                return;
+            if (depth > 16 || seen.size >= 180)
+                throw new Error("Registry graph limit");
+            seen.add(id);
+            active.add(id);
+            const source = await this.inspect(id, signal);
+            for (const dependency of source.dependencies)
+                await visit(dependency, depth + 1);
+            active.delete(id);
+            result.push(source);
+        };
+        await visit(registryKey(value), 0);
+        return result;
+    }
+}
+//# sourceMappingURL=ui-registry.js.map

package/dist/core/ui-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-registry.js","sourceRoot":"","sources":["../../src/core/ui-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAyB,MAAM,oBAAoB,CAAC;AAE3E,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,KAAK,EAAE;QACL,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,0CAA0C;QACpD,QAAQ,EAAE,2BAA2B;QACrC,IAAI,EAAE,yBAAyB;KAChC;IACD,OAAO,EAAE;QACP,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,0CAA0C;QACpD,QAAQ,EAAE,eAAe;QACzB,IAAI,EAAE,0BAA0B;KACjC;CACO,CAAC;AACX,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAC3D,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AACZ,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QACX,oBAAoB;QACpB,gBAAgB;QAChB,kBAAkB;QAClB,eAAe;QACf,cAAc;QACd,aAAa;QACb,gBAAgB;QAChB,gBAAgB;QAChB,eAAe;KAChB,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC9D,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACjE,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC;KACD,MAAM,EAAE,CAAC;AAYZ,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAClD,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAElD,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,2FAA2F;IAC3F,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5C,IACE,CAAC,UAAU;QACX,CAAC,+CAA+C,CAAC,IAAI,CAAC,UAAU,CAAC;QACjE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC;QAE1D,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,GAAG,CAAC,IAAI;QACR,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,MAAM;QACV,GAAG,CAAC,IAAI;QACR,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAElB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAC9C,CAAC,CAAC,EAAE,EAAE,CACJ,GAAG,CAAC,IAAI,KAAK,qCAAqC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE;QACtF,GAAG,CAAC,IAAI,KAAK,qCAAqC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,UAAU;QAChF,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAC5F,CAAC;IACF,IACE,CAAC,OAAO;QACR,CAAC,CACC,GAAG,CAAC,QAAQ,KAAK,eAAe;YAChC,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC/D;QAED,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC5D,OAAO,GAAG,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,WAAW,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACrF,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC7B,OAAO,GAAG,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,eAAe;YAClC,OAAO,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,UAAU,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,MAAM,GAAG,KAAK;IACjE,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,IAAI,CAAC,MAAM;YAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAsB,EAAE,QAAgB;IAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CACtC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,QAAQ,KAAK,GAAG,MAAM,CAAC,EAAE,IAAI,KAAK,EAAE;QACpC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACvD,CAAC,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAC7E,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,yBAAyB,OAAO,CAAC,MAAM,yCAAyC,CACjF,CAAC;IACJ,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,QAAQ;IACjB,MAAM,EAAE,cAAc;IACtB,aAAa,EAAE,+BAA+B;IAC9C,QAAQ,EACN,qXAAqX;IACvX,QAAQ,EAAE;QACR,SAAS;QACT,MAAM;QACN,QAAQ;QACR,UAAU;QACV,QAAQ;QACR,MAAM;QACN,UAAU;QACV,QAAQ;QACR,eAAe;QACf,YAAY;QACZ,gBAAgB;QAChB,YAAY;QACZ,UAAU;KACX;CACF,CAAC;AAEF,iGAAiG;AACjG,MAAM,OAAO,UAAU;IAIX;IACA;IAJF,KAAK,GAAG,IAAI,GAAG,EAAuD,CAAC;IACvE,UAAU,GAAG,CAAC,CAAC;IACvB,YACU,gBAAmC,EACnC,UAAwB,KAAK;QAD7B,qBAAgB,GAAhB,gBAAgB,CAAmB;QACnC,YAAO,GAAP,OAAO,CAAsB;IACpC,CAAC;IAEJ,KAAK,CAAC,SAAS,CACb,KAAa,EACb,MAAoB;QAEpB,IAAI,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5F,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC;YACnD,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAChE,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YAC1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnF,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAClD,IAAI,CAAC,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACrE,GAAG,GAAG,WAAW,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC/C,SAAS;YACX,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,iBAAiB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;YAChC,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,IAAI,CAAC;gBACH,SAAS,CAAC;oBACR,QAAQ,CAAC,cAAc,EAAE,CAAC;oBAC1B,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBACnD,IAAI,IAAI;wBAAE,MAAM;oBAChB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;oBACzB,IAAI,IAAI,GAAG,OAAO;wBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;oBACrE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,QAAQ,EAAE,CAAC;gBAClE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;gBAC9C,IAAI,CAAC,MAAM;oBAAE,MAAM;gBACnB,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,IAAI,CAAC,CAAC;gBACnE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACjC,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC3C,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,MAAoB;QAC3C,MAAM,OAAO,GAA4E,EAAE,CAAC;QAC5F,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAC9B,qCAAqC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE,EACzE,MAAM,CACP,CAAC;YACF,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;gBACzC,IACE,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE;qBACzD,WAAW,EAAE;qBACb,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAChC,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC;wBACX,EAAE,EAAE,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE;wBAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;qBAChB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,MAAoB;QAC/C,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,YAAY,CAAC,QAAqC,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,CAAC;YACX,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,IAAI,OAAO;YACzB,CAAC,CAAC,2CAA2C,IAAI,OAAO,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9D,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAClE,OAAO;YACL,EAAE;YACF,IAAI;YACJ,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,WAAW,EAAE,GAAG,CAAC,IAAI;YACrB,iBAAiB,EAAE,CAAC,EAAE,QAAQ;YAC9B,qBAAqB,EAAE,cAAc;YACrC,YAAY,EAAE,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;YAChE,WAAW,EAAE,CAAC;gBACZ,CAAC,CAAC,UAAU,QAAQ,+BAA+B,CAAC,CAAC,IAAI,kEAAkE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,yIAAyI;gBACxR,CAAC,CAAC,wFAAwF;SAC7F,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,MAAoB;QAC/C,MAAM,MAAM,GAAqB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,KAAK,GAAG,KAAK,EAAE,EAAU,EAAE,KAAa,EAAiB,EAAE;YAC/D,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACjE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,OAAO;YACzB,IAAI,KAAK,GAAG,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC5E,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC9C,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,YAAY;gBAAE,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACjF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/core/workspace-guard.js

@@ -2,6 +2,7 @@ import { realpathSync } from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { getAppPaths } from "../config.js";
+import { getTempRoots } from "./temp-paths.js";
 /** True when `target` is `root` or contained within it. */
 function isWithin(root, target) {
     const relative = path.relative(root, target);
@@ -66,7 +67,7 @@ export function resolveWriteGuard(cwd, resolvedPath, settings) {
     const allowedRoots = [
         realResolve(cwd),
         ...extraRoots,
-        realResolve(os.tmpdir()),
+        ...getTempRoots().map(realResolve),
         realResolve(getAppPaths().agentDir),
     ];
     for (const root of allowedRoots) {

package/dist/core/workspace-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-guard.js","sourceRoot":"","sources":["../../src/core/workspace-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AA2B3C,2DAA2D;AAC3D,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,WAAW,CAAC,MAAc;IACjC,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,SAAS,CAAC;QACR,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,yEAAyE;YACzE,yEAAyE;YACzE,IAAI,MAAM,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACpD,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YACzC,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,YAAoB,EACpB,QAA6B;IAE7B,IAAI,QAAQ,EAAE,2BAA2B;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAEpE,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACtF,MAAM,YAAY,GAAG;QACnB,WAAW,CAAC,GAAG,CAAC;QAChB,GAAG,UAAU;QACb,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;QACxB,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC;KACpC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,qEAAqE;IACrE,6EAA6E;IAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,oCAAoC,CAAC;IACvF,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EACJ,YAAY,MAAM,8BAA8B,cAAc,IAAI,GAAG,IAAI;YACzE,kFAAkF;YAClF,8DAA8D;KACjE,CAAC;AACJ,CAAC;AAED,8DAA8D;AAE9D,uEAAuE;AACvE,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IACE,OAAO,CAAC,MAAM,IAAI,CAAC;QACnB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjD,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EACrD,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;+DAC+D;AAC/D,SAAS,2BAA2B,CAAC,SAAiB,EAAE,GAAW;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChG,oDAAoD;IACpD,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,8DAA8D;IAC9D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;IACvE,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,GAAW;IAChE,MAAM,WAAW,GACf,2EAA2E;QAC3E,gFAAgF;QAChF,iBAAiB,CAAC;IAEpB,yCAAyC;IACzC,MAAM,OAAO,GAAG,+DAA+D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9F,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,SAAS,GAAG,yDAAyD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxF,MAAM,KAAK,GAAG,qDAAqD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChF,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1F,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,2BAA2B,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC7C,OAAO,8CAA8C,OAAO,CAAC,MAAM,CAAC,KAAK,WAAW,EAAE,CAAC;gBACzF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,MAAM,OAAO,GAAG,oDAAoD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnF,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1F,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,2BAA2B,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC7C,OAAO,yCAAyC,OAAO,CAAC,MAAM,CAAC,KAAK,WAAW,EAAE,CAAC;YACpF,CAAC;QACH,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,IACE,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1C,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAC5B,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EACpC,CAAC;QACD,OAAO,wEAAwE,WAAW,EAAE,CAAC;IAC/F,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"workspace-guard.js","sourceRoot":"","sources":["../../src/core/workspace-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AA2B/C,2DAA2D;AAC3D,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,WAAW,CAAC,MAAc;IACjC,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,SAAS,CAAC;QACR,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,yEAAyE;YACzE,yEAAyE;YACzE,IAAI,MAAM,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACpD,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YACzC,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,YAAoB,EACpB,QAA6B;IAE7B,IAAI,QAAQ,EAAE,2BAA2B;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAEpE,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACtF,MAAM,YAAY,GAAG;QACnB,WAAW,CAAC,GAAG,CAAC;QAChB,GAAG,UAAU;QACb,GAAG,YAAY,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC;QAClC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC;KACpC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,qEAAqE;IACrE,6EAA6E;IAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,oCAAoC,CAAC;IACvF,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EACJ,YAAY,MAAM,8BAA8B,cAAc,IAAI,GAAG,IAAI;YACzE,kFAAkF;YAClF,8DAA8D;KACjE,CAAC;AACJ,CAAC;AAED,8DAA8D;AAE9D,uEAAuE;AACvE,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IACE,OAAO,CAAC,MAAM,IAAI,CAAC;QACnB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjD,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EACrD,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;+DAC+D;AAC/D,SAAS,2BAA2B,CAAC,SAAiB,EAAE,GAAW;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChG,oDAAoD;IACpD,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,8DAA8D;IAC9D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;IACvE,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,GAAW;IAChE,MAAM,WAAW,GACf,2EAA2E;QAC3E,gFAAgF;QAChF,iBAAiB,CAAC;IAEpB,yCAAyC;IACzC,MAAM,OAAO,GAAG,+DAA+D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9F,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,SAAS,GAAG,yDAAyD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxF,MAAM,KAAK,GAAG,qDAAqD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChF,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1F,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,2BAA2B,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC7C,OAAO,8CAA8C,OAAO,CAAC,MAAM,CAAC,KAAK,WAAW,EAAE,CAAC;gBACzF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,MAAM,OAAO,GAAG,oDAAoD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnF,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1F,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,2BAA2B,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC7C,OAAO,yCAAyC,OAAO,CAAC,MAAM,CAAC,KAAK,WAAW,EAAE,CAAC;YACpF,CAAC;QACH,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,IACE,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1C,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAC5B,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EACpC,CAAC;QACD,OAAO,wEAAwE,WAAW,EAAE,CAAC;IAC/F,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/worktree-setup.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Copy allowlisted ignored config from the main checkout into a fresh worktree.
+ * Returns the repo-relative paths actually copied.
+ *
+ * Never throws: a worktree that exists but lacks its `.env` is still a worktree,
+ * and failing the creation over a copy would be a worse outcome than reporting
+ * what is missing.
+ */
+export declare function carryIgnoredConfig(mainRoot: string, worktreePath: string): Promise<string[]>;
+export interface InstallCommand {
+    command: string;
+    args: string[];
+}
+/** Human-readable form, for logs and for telling the user what ran. */
+export declare function formatCommand(cmd: InstallCommand): string;
+/**
+ * The install command(s) this project uses, chosen by lockfile.
+ *
+ * Lockfile over `packageManager` field or heuristics: the lockfile is what the
+ * project actually installs with, and picking the wrong package manager in a
+ * copy produces a second lockfile as an unexplained diff.
+ *
+ * `install` rather than `ci`/`--frozen-lockfile`: this is a private copy of a
+ * tree the user is mid-edit on, where a lockfile that no longer matches
+ * `package.json` is normal. A frozen install would hard-fail on exactly that.
+ */
+export declare function detectInstallCommands(dir: string): Promise<InstallCommand[]>;
+export interface InstallResult {
+    command: string;
+    ok: boolean;
+    /** Why it failed, trimmed to the tail that names the cause. Set when !ok. */
+    message?: string;
+}
+export interface WorktreePreparation {
+    /** Repo-relative ignored config files copied into the copy. */
+    carried: string[];
+    /** One entry per install command attempted, in order. */
+    installs: InstallResult[];
+    /** Everything attempted succeeded. False when any install failed. */
+    ok: boolean;
+}
+export interface PrepareWorktreeOptions {
+    mainRoot: string;
+    worktreePath: string;
+    /** Skip the install step (carry only). */
+    skipInstall?: boolean;
+    /** Per-command cap. Default 10 minutes — a cold monorepo install is slow. */
+    timeoutMs?: number;
+}
+/**
+ * Carry ignored config, then install dependencies, so the new copy can build
+ * and test without the user setting it up by hand.
+ *
+ * Never throws and never undoes the worktree: a copy with a failed install is
+ * still a copy the user can fix, and reporting the failure beats destroying the
+ * branch it sits on. Callers surface `installs[].message` rather than treating
+ * it as an error.
+ */
+export declare function prepareWorktree(opts: PrepareWorktreeOptions): Promise<WorktreePreparation>;

package/dist/core/worktree-setup.js

@@ -0,0 +1,224 @@
+import { execFile } from "node:child_process";
+import fs from "node:fs/promises";
+import path from "node:path";
+import { promisify } from "node:util";
+import { log } from "./logger.js";
+const exec = promisify(execFile);
+/**
+ * Make a fresh worktree usable, not merely present.
+ *
+ * `git worktree add` checks out TRACKED files only, so a new copy is missing
+ * exactly the things a repo deliberately keeps out of git: `.env`, registry
+ * credentials, installed packages. The copy looks fine and then nothing runs in
+ * it — which, for an agent working unattended in that copy, reads as a broken
+ * project rather than a missing setup step.
+ *
+ * Two steps close that gap: carry a small allowlist of ignored CONFIG files
+ * across, then run the project's own install command.
+ */
+/** Cap on a carried file. Config is tiny; anything larger is data, not config. */
+const CARRY_MAX_BYTES = 64 * 1024;
+/**
+ * Basenames worth carrying, matched against ignored files only.
+ *
+ * Deliberately an allowlist. The inverse — "copy every ignored file under some
+ * size" — sweeps up local databases, key material, scratch notes and editor
+ * state, and silently multiplies copies of whatever secret happens to sit in
+ * the repo. These are the files whose ABSENCE breaks a build:
+ *   - `.env` and friends: the app's own configuration.
+ *   - `.npmrc` / `.yarnrc`: private-registry auth, needed BY the install below,
+ *     which is why the carry runs first.
+ */
+const CARRY_PATTERNS = [
+    /^\.env($|\.)/i, // .env, .env.local, .env.development…
+    /\.env$/i, // local.env, test.env…
+    /^\.npmrc$/i,
+    /^\.yarnrc(\.yml)?$/i,
+];
+function isCarryable(basename) {
+    return CARRY_PATTERNS.some((re) => re.test(basename));
+}
+/**
+ * Pure: is `candidate` inside `root`? Same reasoning as the worktree module's
+ * containment check — `path.relative`, never `startsWith`.
+ */
+function isInside(root, candidate) {
+    const rel = path.relative(path.resolve(root), path.resolve(candidate));
+    return Boolean(rel) && !rel.startsWith("..") && !path.isAbsolute(rel);
+}
+/**
+ * Ignored files git knows about, as repo-relative paths.
+ *
+ * `--directory` collapses a wholly-ignored directory to a single `dir/` entry
+ * instead of listing its contents, which is what keeps `node_modules` from
+ * arriving here as 40,000 paths. Entries ending in `/` are those directories
+ * and are dropped: package trees get installed below, not copied.
+ */
+async function listIgnoredFiles(mainRoot) {
+    const { stdout } = await exec("git", ["ls-files", "--others", "--ignored", "--exclude-standard", "--directory", "-z"], {
+        cwd: mainRoot,
+        timeout: 15_000,
+        maxBuffer: 8 * 1024 * 1024,
+        env: { ...process.env, GIT_OPTIONAL_LOCKS: "0" },
+    });
+    return stdout.split("\0").filter((entry) => entry && !entry.endsWith("/"));
+}
+/**
+ * Copy allowlisted ignored config from the main checkout into a fresh worktree.
+ * Returns the repo-relative paths actually copied.
+ *
+ * Never throws: a worktree that exists but lacks its `.env` is still a worktree,
+ * and failing the creation over a copy would be a worse outcome than reporting
+ * what is missing.
+ */
+export async function carryIgnoredConfig(mainRoot, worktreePath) {
+    let entries;
+    try {
+        entries = await listIgnoredFiles(mainRoot);
+    }
+    catch (err) {
+        log("INFO", "worktree-setup", "could not list ignored files", { message: messageOf(err) });
+        return [];
+    }
+    const carried = [];
+    for (const rel of entries) {
+        if (!isCarryable(path.basename(rel)))
+            continue;
+        // git reports paths relative to the repo root, but a path arriving from a
+        // subprocess is still input: a `..` segment or an absolute entry must not
+        // be able to read outside the checkout or write outside the worktree.
+        const from = path.resolve(mainRoot, rel);
+        const to = path.resolve(worktreePath, rel);
+        if (!isInside(mainRoot, from) || !isInside(worktreePath, to))
+            continue;
+        try {
+            // lstat, not stat: a symlink is followed by copyFile, so a link pointing
+            // at /etc/passwd or a 2GB file would be copied as its target. Only real,
+            // small, regular files qualify.
+            const stat = await fs.lstat(from);
+            if (!stat.isFile() || stat.size > CARRY_MAX_BYTES)
+                continue;
+            await fs.mkdir(path.dirname(to), { recursive: true });
+            // COPYFILE_EXCL: never clobber a file the checkout already produced.
+            await fs.copyFile(from, to, fs.constants.COPYFILE_EXCL);
+            carried.push(rel);
+        }
+        catch (err) {
+            log("INFO", "worktree-setup", "could not carry file", { rel, message: messageOf(err) });
+        }
+    }
+    return carried;
+}
+/** Human-readable form, for logs and for telling the user what ran. */
+export function formatCommand(cmd) {
+    return [cmd.command, ...cmd.args].join(" ");
+}
+async function exists(p) {
+    try {
+        await fs.lstat(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The install command(s) this project uses, chosen by lockfile.
+ *
+ * Lockfile over `packageManager` field or heuristics: the lockfile is what the
+ * project actually installs with, and picking the wrong package manager in a
+ * copy produces a second lockfile as an unexplained diff.
+ *
+ * `install` rather than `ci`/`--frozen-lockfile`: this is a private copy of a
+ * tree the user is mid-edit on, where a lockfile that no longer matches
+ * `package.json` is normal. A frozen install would hard-fail on exactly that.
+ */
+export async function detectInstallCommands(dir) {
+    const cmds = [];
+    const has = (name) => exists(path.join(dir, name));
+    if (await has("pnpm-lock.yaml"))
+        cmds.push({ command: "pnpm", args: ["install"] });
+    else if (await has("yarn.lock"))
+        cmds.push({ command: "yarn", args: ["install"] });
+    else if ((await has("bun.lockb")) || (await has("bun.lock")))
+        cmds.push({ command: "bun", args: ["install"] });
+    else if ((await has("package-lock.json")) || (await has("package.json")))
+        cmds.push({ command: "npm", args: ["install"] });
+    // Python projects whose environment lives in an ignored directory have the
+    // same problem as node_modules. Cargo and Go are absent on purpose: they
+    // fetch on first build, so there is nothing useful to pre-run.
+    if (await has("uv.lock"))
+        cmds.push({ command: "uv", args: ["sync"] });
+    else if (await has("poetry.lock"))
+        cmds.push({ command: "poetry", args: ["install"] });
+    return cmds;
+}
+/** Last `limit` characters of the output that actually says what went wrong. */
+function tail(text, limit = 600) {
+    const trimmed = text.trim();
+    return trimmed.length <= limit ? trimmed : `…${trimmed.slice(-limit)}`;
+}
+function messageOf(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+/**
+ * Run one install in `dir`. Argument array, never a shell string: the command
+ * is chosen from a fixed table above, and keeping it unparsed means a repo path
+ * containing shell metacharacters stays a path.
+ */
+async function runInstall(dir, cmd, timeoutMs) {
+    const label = formatCommand(cmd);
+    try {
+        await exec(cmd.command, cmd.args, {
+            cwd: dir,
+            timeout: timeoutMs,
+            maxBuffer: 16 * 1024 * 1024,
+            // Inherit the enriched PATH the sidecar builds at startup, otherwise a
+            // GUI-launched app cannot find pnpm/uv at all.
+            env: process.env,
+        });
+        return { command: label, ok: true };
+    }
+    catch (err) {
+        const stderr = err.stderr ?? "";
+        const stdout = err.stdout ?? "";
+        const killed = err.killed === true;
+        const detail = killed
+            ? `it did not finish within ${Math.round(timeoutMs / 1000)}s`
+            : tail(stderr || stdout || messageOf(err));
+        return { command: label, ok: false, message: detail };
+    }
+}
+/**
+ * Carry ignored config, then install dependencies, so the new copy can build
+ * and test without the user setting it up by hand.
+ *
+ * Never throws and never undoes the worktree: a copy with a failed install is
+ * still a copy the user can fix, and reporting the failure beats destroying the
+ * branch it sits on. Callers surface `installs[].message` rather than treating
+ * it as an error.
+ */
+export async function prepareWorktree(opts) {
+    const { mainRoot, worktreePath } = opts;
+    const timeoutMs = opts.timeoutMs ?? 10 * 60_000;
+    const carried = await carryIgnoredConfig(mainRoot, worktreePath);
+    if (opts.skipInstall)
+        return { carried, installs: [], ok: true };
+    const installs = [];
+    for (const cmd of await detectInstallCommands(worktreePath)) {
+        const result = await runInstall(worktreePath, cmd, timeoutMs);
+        installs.push(result);
+        // Stop at the first failure: a later command in the same copy will almost
+        // always fail for the same reason, and one clear message beats three.
+        if (!result.ok)
+            break;
+    }
+    const ok = installs.every((r) => r.ok);
+    log(ok ? "INFO" : "WARN", "worktree-setup", "prepared worktree", {
+        worktreePath,
+        carried: carried.length,
+        installs: installs.map((r) => `${r.command}${r.ok ? "" : " (failed)"}`),
+    });
+    return { carried, installs, ok };
+}
+//# sourceMappingURL=worktree-setup.js.map

package/dist/core/worktree-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-setup.js","sourceRoot":"","sources":["../../src/core/worktree-setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEjC;;;;;;;;;;;GAWG;AAEH,kFAAkF;AAClF,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAElC;;;;;;;;;;GAUG;AACH,MAAM,cAAc,GAAsB;IACxC,eAAe,EAAE,sCAAsC;IACvD,SAAS,EAAE,uBAAuB;IAClC,YAAY;IACZ,qBAAqB;CACtB,CAAC;AAEF,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAiB;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAC3B,KAAK,EACL,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,oBAAoB,EAAE,aAAa,EAAE,IAAI,CAAC,EAChF;QACE,GAAG,EAAE,QAAQ;QACb,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;QAC1B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE;KACjD,CACF,CAAC;IACF,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,YAAoB;IAEpB,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,8BAA8B,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3F,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,SAAS;QAE/C,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;YAAE,SAAS;QAEvE,IAAI,CAAC;YACH,yEAAyE;YACzE,yEAAyE;YACzE,gCAAgC;YAChC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,eAAe;gBAAE,SAAS;YAE5D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,qEAAqE;YACrE,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAOD,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAC,GAAmB;IAC/C,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,CAAS;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW;IACrD,MAAM,IAAI,GAAqB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAoB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAE7E,IAAI,MAAM,GAAG,CAAC,gBAAgB,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;SAC9E,IAAI,MAAM,GAAG,CAAC,WAAW,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;SAC9E,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;SAC9C,IAAI,CAAC,MAAM,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,cAAc,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAEnD,2EAA2E;IAC3E,yEAAyE;IACzE,+DAA+D;IAC/D,IAAI,MAAM,GAAG,CAAC,SAAS,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;SAClE,IAAI,MAAM,GAAG,CAAC,aAAa,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAEvF,OAAO,IAAI,CAAC;AACd,CAAC;AASD,gFAAgF;AAChF,SAAS,IAAI,CAAC,IAAY,EAAE,KAAK,GAAG,GAAG;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,OAAO,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,UAAU,CACvB,GAAW,EACX,GAAmB,EACnB,SAAiB;IAEjB,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE;YAChC,GAAG,EAAE,GAAG;YACR,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;YAC3B,uEAAuE;YACvE,+CAA+C;YAC/C,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAI,GAA2B,CAAC,MAAM,IAAI,EAAE,CAAC;QACzD,MAAM,MAAM,GAAI,GAA2B,CAAC,MAAM,IAAI,EAAE,CAAC;QACzD,MAAM,MAAM,GAAI,GAA4B,CAAC,MAAM,KAAK,IAAI,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM;YACnB,CAAC,CAAC,4BAA4B,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG;YAC7D,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACxD,CAAC;AACH,CAAC;AAoBD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAA4B;IAChE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,GAAG,MAAM,CAAC;IAEhD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACjE,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAEjE,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,MAAM,qBAAqB,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAC9D,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,0EAA0E;QAC1E,sEAAsE;QACtE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM;IACxB,CAAC;IAED,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,gBAAgB,EAAE,mBAAmB,EAAE;QAC/D,YAAY;QACZ,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;KACxE,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACnC,CAAC"}