@riddledc/riddle-proof 0.5.6 → 0.5.8

package/README.md

@@ -78,6 +78,19 @@ way to a ready PR after proof and CI; `leave_draft: true` is only an explicit
 debug or user-request escape hatch. The notification adapter is where a host
 updates Discord, OpenClaw, GitHub, or another integration.
 
+## Runtime Scratch Space
+
+The packaged proof-run setup uses isolated git worktrees for before and after
+states. By default those worktrees now live under
+`/tmp/.riddle-proof-worktrees`, with dependency caches under the matching local
+temp root. This keeps repeated `node_modules` cache materialization on local
+scratch storage instead of walking large dependency trees on EFS or other shared
+workspace filesystems.
+
+Set `RIDDLE_PROOF_WORKTREE_ROOT` to choose an explicit location. Set
+`RIDDLE_PROOF_USE_WORKSPACE_WORKTREE_ROOT=1` to keep the previous behavior of
+placing proof worktrees next to the active repository.
+
 ## Capture Diagnostics
 
 `@riddledc/riddle-proof/diagnostics` standardizes the evidence contract around

package/lib/workspace-core.mjs

@@ -7,8 +7,8 @@ import {
   mkdirSync,
   readFileSync,
   renameSync,
+  realpathSync,
   rmSync,
-  symlinkSync,
   unlinkSync,
   writeFileSync,
 } from "node:fs";
@@ -356,10 +356,27 @@ function copyDependencyInputs(sourceDir, targetDir) {
   }
 }
 
-function linkNodeModules(projectDir, sourceModules) {
+function materializeNodeModules(projectDir, sourceModules) {
   const projectModules = path.join(projectDir, "node_modules");
   removePath(projectModules);
-  symlinkSync(sourceModules, projectModules, "dir");
+  const resolvedSource = realpathSync(sourceModules);
+  const hardlinkResult = runSafe(
+    `cp -al ${shellQuote(resolvedSource)} ${shellQuote(projectModules)}`,
+    undefined,
+    dependencyInstallTimeoutMs(),
+  );
+  if (hardlinkResult.ok && existsSync(projectModules)) return "hardlinked";
+
+  removePath(projectModules);
+  const copyResult = runSafe(
+    `cp -a ${shellQuote(resolvedSource)} ${shellQuote(projectModules)}`,
+    undefined,
+    dependencyInstallTimeoutMs(),
+  );
+  if (!copyResult.ok || !existsSync(projectModules)) {
+    throw new Error(`dependency materialization failed in ${projectDir}: ${copyResult.output.slice(0, 300)}`);
+  }
+  return "copied";
 }
 
 function tryEnsureCachedDeps({ projectDir, fingerprint, installCmd }) {
@@ -370,7 +387,7 @@ function tryEnsureCachedDeps({ projectDir, fingerprint, installCmd }) {
   const cacheModules = path.join(cacheDir, "node_modules");
   const cacheManifest = readDepsManifest(cacheDir);
   if (cacheManifest.fingerprint === fingerprint && cacheManifest.install_cmd === installCmd && existsSync(cacheModules)) {
-    linkNodeModules(projectDir, cacheModules);
+    materializeNodeModules(projectDir, cacheModules);
     return `reused_cache:${cacheDir}`;
   }
 
@@ -399,7 +416,7 @@ function tryEnsureCachedDeps({ projectDir, fingerprint, installCmd }) {
 
     const finalManifest = readDepsManifest(cacheDir);
     if (finalManifest.fingerprint === fingerprint && finalManifest.install_cmd === installCmd && existsSync(cacheModules)) {
-      linkNodeModules(projectDir, cacheModules);
+      materializeNodeModules(projectDir, cacheModules);
       return `cached:${installCmd}`;
     }
   } catch {
@@ -427,7 +444,7 @@ export function ensureDeps({ projectDir, reuseFrom = "" } = {}) {
     const sourceManifest = readDepsManifest(reuseFrom);
     const sourceModules = path.join(reuseFrom, "node_modules");
     if (sourceFingerprint === fingerprint && sourceManifest.fingerprint === fingerprint && existsSync(sourceModules)) {
-      linkNodeModules(projectDir, sourceModules);
+      materializeNodeModules(projectDir, sourceModules);
       return `reused_from:${reuseFrom}`;
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riddledc/riddle-proof",
-  "version": "0.5.6",
+  "version": "0.5.8",
   "description": "Reusable Riddle Proof contracts and helpers for evidence-backed agent changes.",
   "license": "MIT",
   "author": "RiddleDC",

package/runtime/lib/setup.py

@@ -1,12 +1,12 @@
 """Setup: create worktrees, install deps, validate args, write state.
 
 Idempotent — safe to re-run. Creates per-run worktrees under the active
-workspace root by default:
-  <workspace>/.riddle-proof-worktrees/riddle-proof-<run_id>-before
-  <workspace>/.riddle-proof-worktrees/riddle-proof-<run_id>-after
+local temp storage by default:
+  /tmp/.riddle-proof-worktrees/riddle-proof-<run_id>-before
+  /tmp/.riddle-proof-worktrees/riddle-proof-<run_id>-after
 """
 
-import json, subprocess as sp, os, sys, shutil, time
+import json, subprocess as sp, os, sys, shutil, time, tempfile
 sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 from util import load_state, save_state, git, shell_quote
 
@@ -160,8 +160,14 @@ def resolve_worktree_root(repo_dir):
     configured = (s.get('worktree_root') or os.environ.get('RIDDLE_PROOF_WORKTREE_ROOT') or '').strip()
     if configured:
         return os.path.abspath(os.path.expanduser(configured))
-    repo_parent = os.path.dirname(os.path.abspath(repo_dir))
-    return os.path.join(repo_parent, '.riddle-proof-worktrees')
+    if os.environ.get('RIDDLE_PROOF_USE_WORKSPACE_WORKTREE_ROOT', '').strip().lower() in ('1', 'true', 'yes'):
+        repo_parent = os.path.dirname(os.path.abspath(repo_dir))
+        return os.path.join(repo_parent, '.riddle-proof-worktrees')
+
+    # Proof worktrees are scratch data. Keep them on local temp storage by
+    # default so dependency cache materialization does not crawl across EFS or
+    # other shared workspace filesystems.
+    return os.path.join(tempfile.gettempdir(), '.riddle-proof-worktrees')
 
 
 def cleanup_legacy_branch_worktrees(repo_dir, branch_name):