@telora/daemon 0.22.245 → 0.22.290

package/dist/worktree/worktree-hooks.js

@@ -0,0 +1,522 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/templates/read-only-deny-overlay.test.ts,
+//   packages/daemon/src/worktree/commit-msg-trailer-hook.test.ts,
+//   packages/daemon/src/worktree/hook-scoping-per-worktree.test.ts,
+//   packages/daemon/src/worktree/hookspath-no-shared-fallback.test.ts,
+//   packages/daemon/src/worktree/repo-hook-enforcement-state.test.ts,
+//   packages/daemon/src/worktree/safety-commit-under-guard.test.ts,
+//   packages/daemon/src/worktree/stale-hookspath-migration.test.ts
+// PINNED-BY-END
+/**
+ * Per-worktree git-hook management.
+ *
+ * Two hooks live in a worktree's `.telora-hooks/` directory (a single
+ * `core.hooksPath`):
+ *   - a `commit-msg` hook installed on EVERY writable execution worktree that
+ *     refuses commits lacking a well-formed `Telora-Delivery: <uuid>` trailer
+ *     (`installDeliveryTrailerCommitMsgHook`); and
+ *   - a `pre-commit` hook installed only for read-only audit sessions that
+ *     blocks all commits (`installAuditPreCommitHook`), alongside the Claude
+ *     write-deny + Codex read-only overlays.
+ *
+ * `installExecutionWorktreeGuards` is the single entry point that applies the
+ * right set for a worktree given its read-only flag.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { basename, isAbsolute, join, resolve } from 'node:path';
+import { runGitSync } from '../git/index.js';
+import { NON_DELIVERY_SENTINEL, UNATTRIBUTED_CAPTURE_SENTINEL } from '../git/delivery-trailer.js';
+import { buildClaudeSettings, mergeClaudeSettings } from '../templates/claude-settings.js';
+import { ensureCodexConfigIgnoredInWorktree } from './provision.js';
+import { createLogger } from '../log/daemon-log.js';
+const log = createLogger({ module: 'audit-hooks' });
+const CODEX_READ_ONLY_BLOCK_START = '# BEGIN TELORA CODEX READ-ONLY';
+const CODEX_READ_ONLY_BLOCK_END = '# END TELORA CODEX READ-ONLY';
+/**
+ * Point THIS worktree's git hooks at its own `.telora-hooks/` dir, scoped so it
+ * cannot depend on -- or govern -- any OTHER worktree of the same repository.
+ *
+ * A plain `git config core.hooksPath ...` writes the SHARED `.git/config`
+ * (verified 2026-08-18 on git 2.47.3: a value set from a linked worktree reads
+ * back from the main checkout), so one focus's ephemeral worktree would govern
+ * hook execution for the whole repo -- and when that worktree is removed, git
+ * runs NO hooks anywhere and the attribution guard silently disappears. Instead
+ * we enable `extensions.worktreeConfig` (repo-global, idempotent) and write
+ * core.hooksPath with `git config --worktree`, so each worktree carries its own
+ * hooksPath and another worktree's create/reuse/removal cannot touch it.
+ *
+ * We NEVER write a shared `core.hooksPath` -- not even as a fallback. That write
+ * is the exact defect the migration/verification siblings exist to undo, and a
+ * fallback here would let the next provisioning cycle re-damage a repo the
+ * migration just repaired. So this fails CLOSED: if per-worktree scoping cannot
+ * be established (worktreeConfig will not enable, or the `--worktree` write
+ * fails), the repo's shared config is left untouched and this worktree simply
+ * runs WITHOUT the attribution guard.
+ *
+ * The enforcement self-check runs on EVERY path (there is no early return before
+ * it): on a failed path it finds the guard is not in effect and logs the loud
+ * "failing OPEN" WARN, which is how an unguarded worktree is reported.
+ */
+export function configureWorktreeHooksPath(worktreePath, hooksDir, runGit) {
+    // extensions.worktreeConfig must be enabled before `git config --worktree`
+    // will accept a write; enabling it is repo-global and idempotent.
+    const enable = runGit(['config', 'extensions.worktreeConfig', 'true'], worktreePath);
+    if (!enable.success) {
+        log.warn(`[audit-hooks] Could not enable extensions.worktreeConfig for ${worktreePath}: ` +
+            `${enable.error}. NOT writing a shared core.hooksPath (that would leak across ` +
+            `worktrees and undo the stale-value migration); this worktree will run WITHOUT ` +
+            `the attribution guard. Shared config left untouched.`);
+    }
+    else {
+        const set = runGit(['config', '--worktree', 'core.hooksPath', hooksDir], worktreePath);
+        if (!set.success) {
+            log.warn(`[audit-hooks] Could not set per-worktree core.hooksPath for ${worktreePath}: ` +
+                `${set.error}. NOT falling back to a shared core.hooksPath; this worktree will ` +
+                `run WITHOUT the attribution guard. Shared config left untouched.`);
+        }
+    }
+    verifyHookEnforcementInEffect(worktreePath, hooksDir, runGit);
+}
+/**
+ * Confirm the commit-msg guard is actually in force for a worktree: its resolved
+ * core.hooksPath points at the expected dir and an executable commit-msg hook
+ * exists there. When enforcement is EXPECTED but not in effect, log a loud WARN
+ * -- the guard must not fail open unnoticed.
+ */
+function verifyHookEnforcementInEffect(worktreePath, hooksDir, runGit) {
+    const resolved = runGit(['config', '--get', 'core.hooksPath'], worktreePath);
+    const resolvedPath = resolved.success ? resolved.output.trim() : '';
+    const hookFile = join(hooksDir, 'commit-msg');
+    const hookPresent = existsSync(hookFile);
+    if (resolvedPath !== hooksDir || !hookPresent) {
+        log.warn(`[audit-hooks] Hook enforcement is NOT in effect for ${worktreePath}: ` +
+            `resolved core.hooksPath='${resolvedPath}' (expected '${hooksDir}'), ` +
+            `commit-msg present=${hookPresent}. The attribution guard is failing OPEN -- ` +
+            `commits in this worktree are not being checked.`);
+    }
+}
+/**
+ * Migrate away a stale, daemon-written SHARED `core.hooksPath` that a pre-0.21.62
+ * daemon wrote pointing into a daemon worktree's `.telora-hooks` dir -- an
+ * ephemeral agent worktree under `.telora/worktrees/`, or the persistent merge
+ * worktree under `.telora/merge-worktree/`.
+ *
+ * `f629f3e63` (2026-08-18) switched new writes to per-worktree config
+ * (`git config --worktree`, see configureWorktreeHooksPath), fixing the CAUSE but
+ * leaving every already-damaged repo damaged: nothing unsets the stale shared
+ * value. That value is the single cause of both faces of the defect --
+ *   - while the worktree it names still exists, the guard is wrongly enforced in
+ *     the MAIN checkout (where it was never meant to apply); and
+ *   - once that worktree is deleted, git resolves a dangling hooksPath and runs
+ *     NO hooks anywhere, so the attribution guard silently disappears.
+ * Removing the stale shared value resolves both.
+ *
+ * Conservative about ownership. We read the SHARED value SPECIFICALLY via
+ * `git config --local --get core.hooksPath` (which reads `.git/config` and
+ * EXCLUDES the per-worktree `config.worktree` scope) -- NOT the plain
+ * `git config --get`, which layers worktree config on top and could report (and
+ * then delete) a live per-worktree value. We act only when that shared value
+ * carries the daemon's own hooks-dir SIGNATURE -- a `.telora-hooks` directory
+ * inside this repo's `.telora/` tree (under `.telora/worktrees/` for an ephemeral
+ * agent worktree, or `.telora/merge-worktree/` for the persistent merge worktree).
+ * Recognising by that signature, not by an agent-worktree path prefix, is what
+ * reaches the persistent merge worktree's value. A `core.hooksPath` pointing
+ * anywhere else (husky, lefthook, a hand-rolled setup, or a non-hooks path under
+ * `.telora/`) is left strictly alone; we err toward leaving it.
+ *
+ * The unset applies whether or not the pointed-at directory still exists: an
+ * alive-but-stale path is exactly the wrongful-enforcement face and must also be
+ * cleared. Per-worktree (`--worktree`) values the current code writes are never
+ * touched -- `--local` does not read or write that scope. Idempotent: a repo with
+ * no matching shared value is a no-op.
+ *
+ * Returns the removed value (for logging/tests) or null when nothing was cleared.
+ */
+export function migrateStaleSharedHooksPath(repoPath) {
+    // Read the SHARED value only. `--local` targets `.git/config` and never the
+    // per-worktree `config.worktree`, so a live `--worktree` value cannot be seen
+    // (or clobbered) here.
+    const read = runGitSync(['config', '--local', '--get', 'core.hooksPath'], repoPath);
+    if (!read.success) {
+        // Not set in the shared scope (git exits non-zero) -- nothing to migrate.
+        return { removed: null };
+    }
+    const value = read.output.trim();
+    if (!value)
+        return { removed: null };
+    // Resolve the value to an absolute path (git may have stored a relative one)
+    // and require it to carry the daemon's own hooks-dir SIGNATURE: a `.telora-hooks`
+    // directory inside THIS repo's `.telora/` tree. That recognises a daemon write
+    // wherever the worktree lives -- an ephemeral agent worktree
+    // (`.telora/worktrees/<name>/.telora-hooks`) OR the persistent merge worktree
+    // (`.telora/merge-worktree/.telora-hooks`), which the daemon configures the same
+    // way. Matching the `.telora-hooks` signature rather than the `.telora/worktrees/`
+    // path PREFIX is what reaches the merge-worktree value; because that worktree
+    // persists, its stale shared value would otherwise never resolve itself.
+    // Anything else is foreign (husky, lefthook, a hand-rolled setup, or a non-hooks
+    // path under `.telora/`); leave it alone.
+    const resolvedValue = isAbsolute(value) ? resolve(value) : resolve(repoPath, value);
+    const teloraRoot = resolve(repoPath, '.telora');
+    const underTelora = resolvedValue === teloraRoot || resolvedValue.startsWith(teloraRoot + '/');
+    const isDaemonHooksDir = underTelora && basename(resolvedValue) === '.telora-hooks';
+    if (!isDaemonHooksDir) {
+        return { removed: null };
+    }
+    const unset = runGitSync(['config', '--local', '--unset', 'core.hooksPath'], repoPath);
+    if (!unset.success) {
+        log.warn(`[audit-hooks] Failed to unset stale shared core.hooksPath='${value}' in ${repoPath}: ` +
+            `${unset.error}. The stale value remains and the guard may still misfire in the main checkout.`);
+        return { removed: null };
+    }
+    log.info(`[audit-hooks] Unset stale shared core.hooksPath='${value}' in ${repoPath}: it pointed inside ` +
+        `.telora/worktrees/ (a pre-0.21.62 daemon write). The main checkout no longer inherits a ` +
+        `dangling/leaked hooks path.`);
+    return { removed: value };
+}
+/**
+ * Classify the git-hook enforcement state a repo is actually IN, evaluated from
+ * the checkout `repoPath` names -- not the state just written at worktree
+ * provisioning (that is `verifyHookEnforcementInEffect`).
+ *
+ * This closes the blind spot that let a silent fail-open survive the fix written
+ * to prevent silent fail-open: `verifyHookEnforcementInEffect` only ever inspects
+ * a worktree the daemon just configured, so the one place enforcement is silently
+ * absent -- the main checkout that inherited a stale shared value -- is the one
+ * place it never looks.
+ *
+ * Reads the EFFECTIVE value with `git config --get core.hooksPath` (worktree
+ * config layered over shared -- what git will actually use in this directory), so
+ * it must be run in the directory whose state you want to judge (the main
+ * checkout, to see what the main checkout inherits).
+ *
+ *   - unset     -> no core.hooksPath configured. This is the CORRECT steady state
+ *                  for a main checkout after the stale-value migration; NOT a
+ *                  fault, no warning.
+ *   - dangling  -> configured but the directory does not exist. git runs NO hooks
+ *                  here: the attribution guard is failing OPEN. Logged as a loud
+ *                  WARN naming the repo, the resolved path, and the consequence.
+ *   - enforced  -> configured and the directory exists (live enforcement). Fine.
+ *
+ * Files NO escalation for any state: this is observable repo state the daemon
+ * resolves itself via migrateStaleSharedHooksPath (config gaps are state, not
+ * escalations).
+ */
+export function checkRepoHookEnforcementState(repoPath) {
+    const resolved = runGitSync(['config', '--get', 'core.hooksPath'], repoPath);
+    const resolvedPath = resolved.success ? resolved.output.trim() : '';
+    if (!resolvedPath) {
+        return 'unset';
+    }
+    const absPath = isAbsolute(resolvedPath) ? resolvedPath : resolve(repoPath, resolvedPath);
+    if (!existsSync(absPath)) {
+        log.warn(`[audit-hooks] Hook enforcement is failing OPEN in ${repoPath}: resolved ` +
+            `core.hooksPath='${resolvedPath}' points at a directory that does not exist, so git runs ` +
+            `NO hooks here and the attribution guard is not running. ` +
+            `(The stale-shared-value migration clears this when the value points inside .telora/worktrees/.)`);
+        return 'dangling';
+    }
+    return 'enforced';
+}
+/**
+ * Install a pre-commit hook in a worktree that blocks all commits.
+ * Used for read-only audit sessions.
+ */
+export function installAuditPreCommitHook(worktreePath) {
+    // Create a custom hooks directory inside the worktree
+    const hooksDir = join(worktreePath, '.telora-hooks');
+    if (!existsSync(hooksDir)) {
+        mkdirSync(hooksDir, { recursive: true });
+    }
+    const hookScript = [
+        '#!/bin/bash',
+        'echo ""',
+        'echo "========================================================"',
+        'echo "  READ-ONLY AUDIT SESSION"',
+        'echo "========================================================"',
+        'echo ""',
+        'echo "  Commits are blocked. This session operates in"',
+        'echo "  read-only audit mode by design."',
+        'echo ""',
+        'echo "  Your job is discovery only:"',
+        'echo "  - Log findings as issues via MCP tools"',
+        'echo "  - Create remediation deliveries for fixes"',
+        'echo "  - Do NOT modify or commit code changes"',
+        'echo ""',
+        'echo "========================================================"',
+        'echo ""',
+        'exit 1',
+        '',
+    ].join('\n');
+    const hookPath = join(hooksDir, 'pre-commit');
+    writeFileSync(hookPath, hookScript, { mode: 0o755 });
+    // Point this worktree's git config at the custom hooks directory, scoped to
+    // THIS worktree so it cannot govern another worktree's hooks (see
+    // configureWorktreeHooksPath).
+    configureWorktreeHooksPath(worktreePath, hooksDir, runGitSync);
+}
+/**
+ * Write (or merge into) the worktree's `.claude/settings.json` a write-deny
+ * overlay so a read-only audit team physically cannot Write/Edit or run
+ * write-shaped Bash.
+ *
+ * The daemon spawns agents with `--dangerously-skip-permissions
+ * --setting-sources project,local`, which reads the worktree's
+ * `.claude/settings.json` (project source). Two properties make this deny
+ * overlay the tool-layer enforcement of read-only mode:
+ *   - `--dangerously-skip-permissions` only auto-approves the *ask* tier;
+ *     explicit `permissions.deny` entries are still enforced.
+ *   - Crucially, `deny` is honored even in an UNTRUSTED worktree -- the case
+ *     that actually matters, because a daemon-created worktree is a fresh path
+ *     and untrusted by default. In an untrusted worktree `permissions.allow` is
+ *     DISCARDED ("this workspace has not been trusted"), so it would be wrong to
+ *     assume `deny` shares that fate: `deny` is a restriction, not a grant, so
+ *     honoring it from an untrusted project is safe, and Claude Code does.
+ *
+ * This is not assumed -- it is verified. See
+ * `templates/read-only-deny-enforcement-evidence.test.ts` for the reproduction
+ * (untrusted worktree + deny overlay -> the Write tool is removed from the
+ * session and no file is written; the same untrusted worktree WITHOUT deny ->
+ * Write is available and succeeds while the allow list is ignored), measured
+ * against Claude Code 2.1.221 on 2026-08-04. Re-run that reproduction when
+ * bumping the Claude CLI.
+ *
+ * The pre-commit hook (installAuditPreCommitHook) and the completion-side
+ * revert are retained as defense-in-depth ON TOP of this tool-layer guard --
+ * not as the only guards.
+ *
+ * Idempotent: re-running merges the deny list, deduplicated, producing no diff.
+ * MUST only be called for read-only focuses -- a writable focus's settings
+ * must never carry a `deny` key.
+ */
+export function writeReadOnlyDenyOverlay(worktreePath) {
+    const dir = join(worktreePath, '.claude');
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true });
+    }
+    const settingsPath = join(dir, 'settings.json');
+    let existing = null;
+    if (existsSync(settingsPath)) {
+        try {
+            const parsed = JSON.parse(readFileSync(settingsPath, 'utf-8'));
+            if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+                existing = parsed;
+            }
+        }
+        catch (err) {
+            // Corrupt settings file -- log and overwrite with the deny overlay rather
+            // than leave a read-only worktree without enforcement.
+            log.warn(`[audit-hooks] Existing ${settingsPath} is not valid JSON, overwriting with read-only overlay: ` +
+                `${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    const merged = mergeClaudeSettings(existing, buildClaudeSettings({ readOnly: true }));
+    writeFileSync(settingsPath, JSON.stringify(merged, null, 2) + '\n');
+}
+/**
+ * Write Codex's read-only audit overlay into the worktree-local project config.
+ *
+ * Codex project config is a durable record for the worktree; spawn-time `-c`
+ * overrides still select `default_permissions="telora_read_only"` so read-only
+ * enforcement does not depend on project trust. The profile itself is kept here
+ * for parity, inspection, and trusted-project runs.
+ */
+export function writeCodexReadOnlyOverlay(worktreePath) {
+    ensureCodexConfigIgnoredInWorktree(worktreePath);
+    const dir = join(worktreePath, '.codex');
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+    const configPath = join(dir, 'config.toml');
+    const existing = existsSync(configPath) ? readFileSync(configPath, 'utf-8') : '';
+    const block = [
+        CODEX_READ_ONLY_BLOCK_START,
+        '# Generated by Telora for read-only Codex audit execution.',
+        '# Spawn-time overrides select this permission profile.',
+        '',
+        '[permissions.telora_read_only.filesystem]',
+        '":minimal" = "read"',
+        '":workspace_roots" = { "." = "read" }',
+        '',
+        '[permissions.telora_read_only.network]',
+        'enabled = false',
+        CODEX_READ_ONLY_BLOCK_END,
+    ].join('\n');
+    const markerPattern = new RegExp(`${CODEX_READ_ONLY_BLOCK_START}[\\s\\S]*?${CODEX_READ_ONLY_BLOCK_END}\\n?`, 'm');
+    const withoutOldBlock = existing.replace(markerPattern, '').trimEnd();
+    const separator = withoutOldBlock ? '\n\n' : '';
+    writeFileSync(configPath, `${withoutOldBlock}${separator}${block}\n`, { mode: 0o600 });
+}
+/**
+ * Install all read-only audit enforcement in a worktree: the commit-blocking
+ * pre-commit hook, Claude's write-deny settings overlay, and Codex's
+ * read-only permission profile. Single entry point so every read-only
+ * worktree-setup site gets identical coverage.
+ */
+export function installReadOnlyAuditGuards(worktreePath) {
+    installAuditPreCommitHook(worktreePath);
+    writeReadOnlyDenyOverlay(worktreePath);
+    writeCodexReadOnlyOverlay(worktreePath);
+}
+/**
+ * Install a `commit-msg` hook in a worktree that REFUSES any commit whose
+ * message lacks a well-formed `Telora-Delivery: <uuid>` trailer.
+ *
+ * The trailer is the one durable per-commit fact every delivery-attribution
+ * read rests on (`readDeliveryTrailer` in resolvers/shared/git-diff.ts reads it
+ * via `git show -s --format=%(trailers:key=Telora-Delivery,valueonly)`). Prose
+ * in the execution prompt + agent CLAUDE.md asks agents to stamp it, but prose
+ * has already failed silently once (2026-08-13: the daemon's own recommended
+ * `-m` form voided the trailer when `Co-Authored-By` was appended). This hook
+ * makes the mandate mechanical at commit time.
+ *
+ * The hook validates SHAPE via git's OWN trailer parse, not a substring match:
+ *   - It uses `git interpret-trailers --parse` on the message file, so the value
+ *     it reads is exactly what the read side reads. A `Telora-Delivery:` line
+ *     sitting in the commit BODY (separated from the trailer block by a blank
+ *     line) is VOIDED by git and does not parse -- the read side rejects it, so
+ *     the hook must too. A naive `grep 'Telora-Delivery'` on the raw message
+ *     would wrongly PASS such a voided commit; this does not.
+ *   - A trailing `Co-Authored-By:` (or any other trailer) in the same block
+ *     still parses, so the commit PASSES -- the 2026-08-13 failure mode.
+ *   - The value must be a well-formed UUID (8-4-4-4-12 hex) OR the explicit
+ *     non-delivery sentinel `Telora-Delivery: none` (NON_DELIVERY_SENTINEL,
+ *     matched case-insensitively), or the daemon's unattributed-capture marker
+ *     `Telora-Delivery: unattributed` (UNATTRIBUTED_CAPTURE_SENTINEL, stamped on
+ *     a capture of delivery work whose delivery it could not determine); a
+ *     malformed or truncated id FAILS, and a sentinel voided into the body FAILS
+ *     like any other voided value. The refusal text does not advertise the
+ *     capture marker: an agent attributes its own work, or declares `none`.
+ *
+ * The sentinel lets a genuinely delivery-less commit (daemon housekeeping, or
+ * any commit an agent cannot attribute to a delivery) declare itself as such
+ * rather than being forced to borrow a real delivery id -- which would falsely
+ * attribute that work to the borrowed delivery's verify evidence. It is a
+ * trailer VALUE, not a bypass: a sentinel commit is still labelled, so the
+ * verify gate's partition stays total (see NON_DELIVERY_SENTINEL in git-diff).
+ *
+ * The failure message names the missing trailer, the sentinel escape for a
+ * non-delivery commit, and the exact `git commit --trailer` forms, so an agent
+ * self-corrects without escalating or borrowing an id.
+ *
+ * The hook lives in the SAME `.telora-hooks/` directory as any audit
+ * `pre-commit` hook, because `core.hooksPath` is a single value -- git runs
+ * every hook file in that one dir by name. So this coexists with the read-only
+ * audit pre-commit block (which runs first and blocks the commit outright)
+ * without weakening it.
+ */
+export function installDeliveryTrailerCommitMsgHook(worktreePath) {
+    const hooksDir = join(worktreePath, '.telora-hooks');
+    if (!existsSync(hooksDir)) {
+        mkdirSync(hooksDir, { recursive: true });
+    }
+    const hookScript = [
+        '#!/bin/bash',
+        '# Telora delivery-attribution guard. Every commit must carry a well-formed',
+        '# `Telora-Delivery: <uuid>` git trailer so the verify gate can recover its',
+        '# changed-work evidence from the commit object itself. See worktree/worktree-hooks.ts.',
+        '#',
+        '# No `set -e`/`pipefail`: a grep that finds no trailer (the reject case) exits',
+        '# non-zero, and we MUST fall through to print the guidance rather than abort.',
+        'msg_file="$1"',
+        '',
+        '# Merge-commit exemption, decided from the commit\'s OWN SHAPE, never the',
+        '# message text: while git is finishing a real merge it has MERGE_HEAD set.',
+        '# A merge is not delivery work and has no single deliveryId -- the per-delivery',
+        '# evidence already lives in the merged commits, each carrying its own trailer.',
+        '# The daemon\'s integration merge-back (git merge --no-ff) is exactly this case.',
+        '# An ordinary commit that merely imitates a merge subject line has no',
+        '# MERGE_HEAD, so it cannot claim the exemption and is still held to the trailer.',
+        'if git rev-parse -q --verify MERGE_HEAD >/dev/null 2>&1; then',
+        '  exit 0',
+        'fi',
+        '',
+        '# Read the trailer through git\'s own parser (--parse == --only-trailers',
+        '# --only-input --unfold), so a BODY-paragraph line that git voids does not',
+        '# count and a trailing Co-Authored-By in the same block does not break it.',
+        'value="$(git interpret-trailers --parse "$msg_file" 2>/dev/null \\',
+        '  | grep -i \'^Telora-Delivery:\' | head -n1 | sed \'s/^[^:]*:[[:space:]]*//\' | tr -d \'[:space:]\')"',
+        '',
+        'uuid_re=\'^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$\'',
+        `sentinel_lc='${NON_DELIVERY_SENTINEL.toLowerCase()}'`,
+        `capture_lc='${UNATTRIBUTED_CAPTURE_SENTINEL.toLowerCase()}'`,
+        '',
+        '# Accept either a well-formed delivery UUID or the explicit non-delivery',
+        '# sentinel (`Telora-Delivery: none`, matched case-insensitively like the',
+        '# trailer key). A sentinel commit declares itself delivery-less but is still',
+        "# a LABELLED commit git's trailer parser reads back, so the verify gate's",
+        '# partition stays total. The daemon stamps `Telora-Delivery: unattributed` on',
+        '# a capture of delivery work whose delivery it could not determine; that is',
+        '# accepted too. Everything else is refused -- including a sentinel',
+        '# voided into the commit BODY, which git does not parse, so $value is empty.',
+        'value_lc="$(printf %s "$value" | tr \'[:upper:]\' \'[:lower:]\')"',
+        'if [[ "$value" =~ $uuid_re || "$value_lc" == "$sentinel_lc" || "$value_lc" == "$capture_lc" ]]; then',
+        '  exit 0',
+        'fi',
+        '',
+        'echo "" >&2',
+        'echo "========================================================" >&2',
+        'echo "  COMMIT REFUSED: missing Telora-Delivery trailer" >&2',
+        'echo "========================================================" >&2',
+        'echo "" >&2',
+        'echo "  Every commit must carry a well-formed delivery trailer:" >&2',
+        'echo "" >&2',
+        'echo "      Telora-Delivery: <deliveryId>" >&2',
+        'echo "" >&2',
+        'echo "  Add it as a git TRAILER (not a body line) so an appended" >&2',
+        'echo "  Co-Authored-By cannot void it:" >&2',
+        'echo "" >&2',
+        'echo "      git commit --trailer \\"Telora-Delivery: <deliveryId>\\" -m \\"<subject>\\"" >&2',
+        'echo "" >&2',
+        'echo "  To fix the commit you just attempted:" >&2',
+        'echo "" >&2',
+        'echo "      git commit --amend --no-edit --trailer \\"Telora-Delivery: <deliveryId>\\"" >&2',
+        'echo "" >&2',
+        'echo "  If this commit genuinely belongs to NO delivery (daemon" >&2',
+        'echo "  housekeeping, or work you cannot attribute to one), do NOT" >&2',
+        'echo "  borrow a real delivery id: that FALSELY ATTRIBUTES this work to" >&2',
+        'echo "  that delivery, partitioning its verify-gate evidence to include" >&2',
+        'echo "  commits that are not its own. Declare it delivery-less instead:" >&2',
+        'echo "" >&2',
+        `echo "      git commit --trailer \\"Telora-Delivery: ${NON_DELIVERY_SENTINEL}\\" -m \\"<subject>\\"" >&2`,
+        'echo "" >&2',
+        'echo "  (Merge commits are exempt by shape and need no trailer.)" >&2',
+        'echo "" >&2',
+        'echo "========================================================" >&2',
+        'echo "" >&2',
+        'exit 1',
+        '',
+    ].join('\n');
+    const hookPath = join(hooksDir, 'commit-msg');
+    writeFileSync(hookPath, hookScript, { mode: 0o755 });
+    // Point this worktree's git config at the custom hooks directory, scoped to
+    // THIS worktree (git config --worktree) so it cannot govern the whole repo.
+    // Same dir as the audit pre-commit hook -- core.hooksPath is a single value,
+    // so both hook files coexist here.
+    configureWorktreeHooksPath(worktreePath, hooksDir, runGitSync);
+}
+/**
+ * Install the execution-worktree git guards: the delivery-trailer `commit-msg`
+ * hook on EVERY writable worktree, plus -- when the focus is read-only -- the
+ * full audit guard set (commit-blocking pre-commit hook + Claude/Codex
+ * read-only overlays). Single entry point so every worktree create/reuse site
+ * gets identical, idempotent coverage.
+ *
+ * The hook FILES live under the worktree's `.telora-hooks/` (not tracked tree
+ * content) and `core.hooksPath` is set PER-WORKTREE via `git config --worktree`
+ * (backed by repo-global `extensions.worktreeConfig=true`), so this must be
+ * RE-ASSERTED on every reuse/spawn (it is idempotent -- re-running produces the
+ * same files + config). Per-worktree scoping is deliberate: a plain
+ * `git config core.hooksPath` writes the SHARED `.git/config` and would let one
+ * worktree govern -- and, on removal, silently disable -- hook enforcement for
+ * every checkout of the repo (the 2026-08-17 wedge). A read-only worktree still
+ * gets the trailer hook, but its pre-commit block runs first and refuses the
+ * commit outright, so the two coexist without the trailer hook weakening the
+ * read-only guarantee.
+ */
+export function installExecutionWorktreeGuards(worktreePath, readOnly) {
+    installDeliveryTrailerCommitMsgHook(worktreePath);
+    if (readOnly) {
+        installReadOnlyAuditGuards(worktreePath);
+    }
+}
+//# sourceMappingURL=worktree-hooks.js.map

package/dist/worktree/worktree-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-hooks.js","sourceRoot":"","sources":["../../src/worktree/worktree-hooks.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,2EAA2E;AAC3E,kEAAkE;AAClE,oEAAoE;AACpE,uEAAuE;AACvE,sEAAsE;AACtE,oEAAoE;AACpE,mEAAmE;AACnE,gBAAgB;AAEhB;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,OAAO,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAClG,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,kCAAkC,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AAGpD,MAAM,2BAA2B,GAAG,gCAAgC,CAAC;AACrE,MAAM,yBAAyB,GAAG,8BAA8B,CAAC;AAWjE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAAoB,EACpB,QAAgB,EAChB,MAAiB;IAEjB,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,2BAA2B,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,IAAI,CACN,gEAAgE,YAAY,IAAI;YAC9E,GAAG,MAAM,CAAC,KAAK,gEAAgE;YAC/E,gFAAgF;YAChF,sDAAsD,CACzD,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;QACvF,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,GAAG,CAAC,IAAI,CACN,+DAA+D,YAAY,IAAI;gBAC7E,GAAG,GAAG,CAAC,KAAK,oEAAoE;gBAChF,kEAAkE,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,6BAA6B,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,SAAS,6BAA6B,CACpC,YAAoB,EACpB,QAAgB,EAChB,MAAiB;IAEjB,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,YAAY,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,YAAY,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QAC9C,GAAG,CAAC,IAAI,CACN,uDAAuD,YAAY,IAAI;YACrE,4BAA4B,YAAY,gBAAgB,QAAQ,MAAM;YACtE,sBAAsB,WAAW,6CAA6C;YAC9E,iDAAiD,CACpD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,UAAU,2BAA2B,CAAC,QAAgB;IAC1D,4EAA4E;IAC5E,8EAA8E;IAC9E,uBAAuB;IACvB,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,0EAA0E;QAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAErC,6EAA6E;IAC7E,kFAAkF;IAClF,+EAA+E;IAC/E,6DAA6D;IAC7D,8EAA8E;IAC9E,iFAAiF;IACjF,mFAAmF;IACnF,8EAA8E;IAC9E,yEAAyE;IACzE,iFAAiF;IACjF,0CAA0C;IAC1C,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpF,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,WAAW,GACf,aAAa,KAAK,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;IAC7E,MAAM,gBAAgB,GAAG,WAAW,IAAI,QAAQ,CAAC,aAAa,CAAC,KAAK,eAAe,CAAC;IACpF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACvF,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CACN,8DAA8D,KAAK,QAAQ,QAAQ,IAAI;YACrF,GAAG,KAAK,CAAC,KAAK,iFAAiF,CAClG,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,GAAG,CAAC,IAAI,CACN,oDAAoD,KAAK,QAAQ,QAAQ,sBAAsB;QAC7F,0FAA0F;QAC1F,6BAA6B,CAChC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAKD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,6BAA6B,CAAC,QAAgB;IAC5D,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC1F,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CACN,qDAAqD,QAAQ,aAAa;YACxE,mBAAmB,YAAY,2DAA2D;YAC1F,0DAA0D;YAC1D,iGAAiG,CACpG,CAAC;QACF,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,YAAoB;IAC5D,sDAAsD;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,aAAa;QACb,SAAS;QACT,iEAAiE;QACjE,kCAAkC;QAClC,iEAAiE;QACjE,SAAS;QACT,wDAAwD;QACxD,0CAA0C;QAC1C,SAAS;QACT,sCAAsC;QACtC,iDAAiD;QACjD,oDAAoD;QACpD,iDAAiD;QACjD,SAAS;QACT,iEAAiE;QACjE,SAAS;QACT,QAAQ;QACR,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC9C,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAErD,4EAA4E;IAC5E,kEAAkE;IAClE,+BAA+B;IAC/B,0BAA0B,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,wBAAwB,CAAC,YAAoB;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAEhD,IAAI,QAAQ,GAAmC,IAAI,CAAC;IACpD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,QAAQ,GAAG,MAAiC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,0EAA0E;YAC1E,uDAAuD;YACvD,GAAG,CAAC,IAAI,CACN,0BAA0B,YAAY,0DAA0D;gBAC9F,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,mBAAmB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,YAAoB;IAC5D,kCAAkC,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,MAAM,KAAK,GAAG;QACZ,2BAA2B;QAC3B,4DAA4D;QAC5D,wDAAwD;QACxD,EAAE;QACF,2CAA2C;QAC3C,qBAAqB;QACrB,uCAAuC;QACvC,EAAE;QACF,wCAAwC;QACxC,iBAAiB;QACjB,yBAAyB;KAC1B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,aAAa,GAAG,IAAI,MAAM,CAC9B,GAAG,2BAA2B,aAAa,yBAAyB,MAAM,EAC1E,GAAG,CACJ,CAAC;IACF,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACtE,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,aAAa,CAAC,UAAU,EAAE,GAAG,eAAe,GAAG,SAAS,GAAG,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACzF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,YAAoB;IAC7D,yBAAyB,CAAC,YAAY,CAAC,CAAC;IACxC,wBAAwB,CAAC,YAAY,CAAC,CAAC;IACvC,yBAAyB,CAAC,YAAY,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,MAAM,UAAU,mCAAmC,CAAC,YAAoB;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,aAAa;QACb,4EAA4E;QAC5E,4EAA4E;QAC5E,wFAAwF;QACxF,GAAG;QACH,gFAAgF;QAChF,+EAA+E;QAC/E,eAAe;QACf,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,iFAAiF;QACjF,gFAAgF;QAChF,kFAAkF;QAClF,uEAAuE;QACvE,kFAAkF;QAClF,+DAA+D;QAC/D,UAAU;QACV,IAAI;QACJ,EAAE;QACF,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,oEAAoE;QACpE,wGAAwG;QACxG,EAAE;QACF,2FAA2F;QAC3F,gBAAgB,qBAAqB,CAAC,WAAW,EAAE,GAAG;QACtD,eAAe,6BAA6B,CAAC,WAAW,EAAE,GAAG;QAC7D,EAAE;QACF,0EAA0E;QAC1E,0EAA0E;QAC1E,8EAA8E;QAC9E,2EAA2E;QAC3E,+EAA+E;QAC/E,6EAA6E;QAC7E,oEAAoE;QACpE,8EAA8E;QAC9E,mEAAmE;QACnE,sGAAsG;QACtG,UAAU;QACV,IAAI;QACJ,EAAE;QACF,aAAa;QACb,qEAAqE;QACrE,8DAA8D;QAC9D,qEAAqE;QACrE,aAAa;QACb,sEAAsE;QACtE,aAAa;QACb,gDAAgD;QAChD,aAAa;QACb,uEAAuE;QACvE,6CAA6C;QAC7C,aAAa;QACb,8FAA8F;QAC9F,aAAa;QACb,oDAAoD;QACpD,aAAa;QACb,6FAA6F;QAC7F,aAAa;QACb,sEAAsE;QACtE,yEAAyE;QACzE,8EAA8E;QAC9E,8EAA8E;QAC9E,8EAA8E;QAC9E,aAAa;QACb,wDAAwD,qBAAqB,6BAA6B;QAC1G,aAAa;QACb,uEAAuE;QACvE,aAAa;QACb,qEAAqE;QACrE,aAAa;QACb,QAAQ;QACR,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC9C,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAErD,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,mCAAmC;IACnC,0BAA0B,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,8BAA8B,CAAC,YAAoB,EAAE,QAAiB;IACpF,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,QAAQ,EAAE,CAAC;QACb,0BAA0B,CAAC,YAAY,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC"}

package/dist/worktree/worktree-package-provisioning.d.ts

@@ -1,5 +1,5 @@
-/** Git result slice discovery reads (structural over runGitSync). */
-type GitRun = (args: string[], cwd: string) => {
+/** Git result slice discovery reads (structural over git/types.ts runGitSync). */
+export type GitRun = (args: string[], cwd: string) => {
     success: boolean;
     output: string;
     error?: string;
@@ -13,11 +13,17 @@ export type PackageInstallOutcome = {
 };
 /** The install seam: install `packageDir` (absolute) from its lockfile within `timeoutMs`. Never real npm in tests. */
 export type PackageInstaller = (packageDir: string, timeoutMs: number) => Promise<PackageInstallOutcome>;
+/**
+ * Provisioning's collaborators, bound at the composition root
+ * (composition/execution-worktree-context.ts worktreeProvisioningDeps): the git
+ * the tracked tree is listed through, the installer, the verify-interlock probe
+ * and the clock. The two bounds are values; absent, the module constants apply.
+ */
 export interface WorktreeProvisioningDeps {
-    runGit?: GitRun;
-    install?: PackageInstaller;
-    isWorktreeUnderVerify?: (worktreePath: string) => boolean;
-    now?: () => number;
+    runGit: GitRun;
+    install: PackageInstaller;
+    isWorktreeUnderVerify: (worktreePath: string) => boolean;
+    now: () => number;
     timeoutMs?: number;
     retryBackoffMs?: number;
 }
@@ -40,22 +46,22 @@ export declare const PROVISIONED_MARKER = ".telora-provisioned.json";
  * discovery rule). [] when the path does not exist (nothing to provision); null
  * when git cannot list an existing worktree -- the caller fails closed.
  */
-export declare function discoverProvisionedPackages(worktreePath: string, runGit?: GitRun): string[] | null;
+export declare function discoverProvisionedPackages(worktreePath: string, runGit: GitRun): string[] | null;
 /**
  * The install-input fingerprint of package `rel` in `worktreePath` (module doc):
  * null when it has no lockfile; throws when git cannot list the worktree or an
  * input cannot be read.
  */
-export declare function packageFingerprint(worktreePath: string, rel: string, runGit?: GitRun): string | null;
+export declare function packageFingerprint(worktreePath: string, rel: string, runGit: GitRun): string | null;
 /** True when package `rel`'s marker records its current install-input fingerprint (never when git cannot list the worktree). */
-export declare function isPackageProvisioned(worktreePath: string, rel: string, runGit?: GitRun): boolean;
+export declare function isPackageProvisioned(worktreePath: string, rel: string, runGit: GitRun): boolean;
 /**
  * Start provisioning `worktreePath` when a package is stale and not in backoff.
  * Never awaited by the poll loop: returns the in-flight job (existing or new), or
  * null when there is nothing to do, a verify holds the worktree, or git cannot
  * list it.
  */
-export declare function provisionWorktreePackages(worktreePath: string, deps?: WorktreeProvisioningDeps): Promise<void> | null;
+export declare function provisionWorktreePackages(worktreePath: string, deps: WorktreeProvisioningDeps): Promise<void> | null;
 /**
  * May a deterministic verify run against `worktreePath`'s installed packages?
  * Not ready while an install is in flight, a package failed its install, or a
@@ -63,7 +69,7 @@ export declare function provisionWorktreePackages(worktreePath: string, deps?: W
  * when git cannot list the worktree (fail closed). The verify reports a
  * not-ready status as checkoutUnavailable: retried next tick, never a verdict.
  */
-export declare function readWorktreeProvisioning(worktreePath: string, deps?: WorktreeProvisioningDeps): WorktreeProvisioningStatus;
+export declare function readWorktreeProvisioning(worktreePath: string, deps: WorktreeProvisioningDeps): WorktreeProvisioningStatus;
 /**
  * The real installer: `npm ci --include=dev` in the package dir, in its own
  * process group so a timeout kills npm's children too.
@@ -71,5 +77,4 @@ export declare function readWorktreeProvisioning(worktreePath: string, deps?: Wo
 export declare const npmCiInstaller: PackageInstaller;
 /** Test-only: forget in-flight jobs, failures and logged statuses. */
 export declare function __resetWorktreeProvisioningForTests(): void;
-export {};
 //# sourceMappingURL=worktree-package-provisioning.d.ts.map

package/dist/worktree/worktree-package-provisioning.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worktree-package-provisioning.d.ts","sourceRoot":"","sources":["../../src/worktree/worktree-package-provisioning.ts"],"names":[],"mappings":"AA0EA,qEAAqE;AACrE,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpG,8DAA8D;AAC9D,MAAM,MAAM,qBAAqB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhF,uHAAuH;AACvH,MAAM,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAEzG,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,qBAAqB,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;IAC1D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qFAAqF;AACrF,MAAM,MAAM,0BAA0B,GAClC;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GACf;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,YAAY,GAAG,QAAQ,GAAG,UAAU,GAAG,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjG,mGAAmG;AACnG,eAAO,MAAM,0BAA0B,QAAiB,CAAC;AACzD,oFAAoF;AACpF,eAAO,MAAM,gCAAgC,QAAgB,CAAC;AAC9D,iHAAiH;AACjH,eAAO,MAAM,kBAAkB,6BAA6B,CAAC;AA2E7D;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,GAAE,MAAmB,GAAG,MAAM,EAAE,GAAG,IAAI,CAE9G;AAoBD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,MAAmB,GAAG,MAAM,GAAG,IAAI,CAIhH;AAED,gIAAgI;AAChI,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,MAAmB,GAAG,OAAO,CAG5G;AAsDD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,GAAE,wBAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAmBzH;AAWD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,GAAE,wBAA6B,GAAG,0BAA0B,CAsB9H;AAOD;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,gBA4B3B,CAAC;AAEH,sEAAsE;AACtE,wBAAgB,mCAAmC,IAAI,IAAI,CAK1D"}
+{"version":3,"file":"worktree-package-provisioning.d.ts","sourceRoot":"","sources":["../../src/worktree/worktree-package-provisioning.ts"],"names":[],"mappings":"AA0EA,kFAAkF;AAClF,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3G,8DAA8D;AAC9D,MAAM,MAAM,qBAAqB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhF,uHAAuH;AACvH,MAAM,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAEzG;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,gBAAgB,CAAC;IAC1B,qBAAqB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;IACzD,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qFAAqF;AACrF,MAAM,MAAM,0BAA0B,GAClC;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GACf;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,YAAY,GAAG,QAAQ,GAAG,UAAU,GAAG,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjG,mGAAmG;AACnG,eAAO,MAAM,0BAA0B,QAAiB,CAAC;AACzD,oFAAoF;AACpF,eAAO,MAAM,gCAAgC,QAAgB,CAAC;AAC9D,iHAAiH;AACjH,eAAO,MAAM,kBAAkB,6BAA6B,CAAC;AA2E7D;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAEjG;AAoBD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAInG;AAED,gIAAgI;AAChI,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAG/F;AAsDD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAmBpH;AAWD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,GAAG,0BAA0B,CAsBzH;AAOD;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,gBA4B3B,CAAC;AAEH,sEAAsE;AACtE,wBAAgB,mCAAmC,IAAI,IAAI,CAK1D"}