teamshare-bridge 0.26.22 → 0.26.23

package/dist/lib/workspace/state-root.d.ts

@@ -0,0 +1,44 @@
+/** Stable key for a linked folder. Never throws. */
+export declare function workspaceKeyFor(folder: string): string;
+/** The workspace root for a linked folder. Creates it. */
+export declare function workspaceRootFor(folder: string): string;
+/** All workspace roots (for sweeps). Empty when the base does not exist. */
+export declare function allWorkspaceRoots(): string[];
+/**
+ * Scratch dir for transient run files (briefs, post.json, plan prompts).
+ * Created on call. MUST be disposed with disposeDir() on TERMINAL run end
+ * only (completed / failed / cancelled) - never on a pause or an idle kill,
+ * because a question resume reuses the same files.
+ */
+export declare function scratchDirFor(folder: string, kind: 'research' | 'blog' | 'plans' | 'planner' | 'workflow' | 'insight' | 'misc', id: string): string;
+/** Headless scratch (no linked folder - blog generations without a project). */
+export declare function headlessScratchDir(kind: string, id: string): string;
+/** Staging dir for files built for upload / attachFile. */
+export declare function stagingDirFor(folder: string, runId: string): string;
+/**
+ * Worktree root for isolation mirrors. This is `<workspaceRoot>`'s OWN
+ * `.teamshare-worktrees` directory - the NAME is the safety boundary:
+ * `removeWorktreeSafeAsync` refuses to delete anything outside a
+ * `.teamshare-worktrees` root, and that data-loss guard must keep working
+ * unchanged. What changed is only the PARENT: outside every tracked folder
+ * instead of `<folder>/..`.
+ */
+export declare function worktreeRootFor(folder: string): string;
+/** Legacy sibling worktree root. Read-only - for sweeps and migration. */
+export declare function legacyWorktreeRootFor(folder: string): string;
+/** --separate-git-dir target for a non-repo linked folder. */
+export declare function containerGitDirFor(folder: string): string;
+/** True unless TEAMSHARE_KEEP_SCRATCH=1 (local debugging). */
+export declare function shouldDisposeScratch(): boolean;
+/**
+ * Remove a scratch/staging dir. Links-first is unnecessary here (no junctions
+ * to the project), but we still never follow symlinks into the project:
+ * entries that are symlinks are unlinked, never traversed.
+ */
+export declare function disposeDir(dir: string): void;
+/**
+ * Reap crash-leftover scratch dirs older than `maxAgeMs` (default 7 days -
+ * the same horizon run secrets live). Never touches a dir younger than the
+ * horizon: a paused run (question wait, idle kill) resumes with its files.
+ */
+export declare function sweepStaleScratch(maxAgeMs?: number): string[];

package/dist/lib/workspace/state-root.js

@@ -0,0 +1,266 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.workspaceKeyFor = workspaceKeyFor;
+exports.workspaceRootFor = workspaceRootFor;
+exports.allWorkspaceRoots = allWorkspaceRoots;
+exports.scratchDirFor = scratchDirFor;
+exports.headlessScratchDir = headlessScratchDir;
+exports.stagingDirFor = stagingDirFor;
+exports.worktreeRootFor = worktreeRootFor;
+exports.legacyWorktreeRootFor = legacyWorktreeRootFor;
+exports.containerGitDirFor = containerGitDirFor;
+exports.shouldDisposeScratch = shouldDisposeScratch;
+exports.disposeDir = disposeDir;
+exports.sweepStaleScratch = sweepStaleScratch;
+/**
+ * Bridge workspace state root (2026-10).
+ *
+ * INVARIANT: the bridge creates zero entries inside a linked folder except
+ * the agent's own edits to real files. Everything the bridge owns -
+ * isolation mirrors, run scopes' backing data, scratch (briefs, post.json,
+ * plan prompts), staging, container gitdirs - lives under ONE per-machine
+ * root:
+ *
+ *   ~/.teamshare/workspace/<key>/
+ *     worktrees/taskrun-<uuid>/  isolation mirrors (were the sibling .teamshare-worktrees dir)
+ *     scope/<runId>/            (reserved - run scopes stay in-folder transiently, see run-scope.ts)
+ *     scratch/<kind>/<id>/      briefs, post.json, plan prompts - deleted on terminal end
+ *     staging/<runId>/          files built for upload / attachFile
+ *     container-git/            --separate-git-dir for non-repo linked folders
+ *     bare-repos/               (legacy location stays - not moved)
+ *
+ * Key derivation: <sanitized-basename>-<8 hex of sha256(resolved absolute path)>.
+ * A rename orphans the old key (reaped by the sweeper); it never collides.
+ *
+ * Env overrides:
+ *   TEAMSHARE_WORKSPACE_DIR - whole-root override (tests).
+ *   TEAMSHARE_KEEP_SCRATCH=1 - never delete scratch (local debugging).
+ */
+const node_crypto_1 = require("node:crypto");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const node_fs_1 = require("node:fs");
+function rootBase() {
+    const override = process.env.TEAMSHARE_WORKSPACE_DIR?.trim();
+    if (override)
+        return override;
+    return (0, node_path_1.join)((0, node_os_1.homedir)(), '.teamshare', 'workspace');
+}
+/** Filesystem-safe basename, max 40 chars. */
+function safeBase(folder) {
+    const base = (0, node_path_1.basename)((0, node_path_1.resolve)(folder))
+        .replace(/[^a-zA-Z0-9._-]+/g, '-')
+        .slice(0, 40);
+    return base || 'project';
+}
+/** Stable key for a linked folder. Never throws. */
+function workspaceKeyFor(folder) {
+    try {
+        const abs = (0, node_path_1.resolve)(folder);
+        const hash = (0, node_crypto_1.createHash)('sha256').update(abs).digest('hex').slice(0, 8);
+        return `${safeBase(abs)}-${hash}`;
+    }
+    catch {
+        return `${safeBase(folder)}-unknown`;
+    }
+}
+/** The workspace root for a linked folder. Creates it. */
+function workspaceRootFor(folder) {
+    const dir = (0, node_path_1.join)(rootBase(), workspaceKeyFor(folder));
+    try {
+        (0, node_fs_1.mkdirSync)(dir, { recursive: true });
+    }
+    catch {
+        /* best-effort - callers tolerate a missing dir */
+    }
+    return dir;
+}
+/** All workspace roots (for sweeps). Empty when the base does not exist. */
+function allWorkspaceRoots() {
+    try {
+        const { readdirSync } = require('node:fs');
+        const base = rootBase();
+        if (!(0, node_fs_1.existsSync)(base))
+            return [];
+        return readdirSync(base, { withFileTypes: true })
+            .filter((e) => e.isDirectory())
+            .map((e) => (0, node_path_1.join)(base, e.name));
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Scratch dir for transient run files (briefs, post.json, plan prompts).
+ * Created on call. MUST be disposed with disposeDir() on TERMINAL run end
+ * only (completed / failed / cancelled) - never on a pause or an idle kill,
+ * because a question resume reuses the same files.
+ */
+function scratchDirFor(folder, kind, id) {
+    const clean = String(id)
+        .replace(/[^a-zA-Z0-9._-]+/g, '-')
+        .slice(0, 80) || 'run';
+    const dir = (0, node_path_1.join)(workspaceRootFor(folder), 'scratch', kind, clean);
+    (0, node_fs_1.mkdirSync)(dir, { recursive: true });
+    return dir;
+}
+/** Headless scratch (no linked folder - blog generations without a project). */
+function headlessScratchDir(kind, id) {
+    const clean = String(id)
+        .replace(/[^a-zA-Z0-9._-]+/g, '-')
+        .slice(0, 80) || 'run';
+    const dir = (0, node_path_1.join)(rootBase(), 'headless', kind, clean);
+    (0, node_fs_1.mkdirSync)(dir, { recursive: true });
+    return dir;
+}
+/** Staging dir for files built for upload / attachFile. */
+function stagingDirFor(folder, runId) {
+    const clean = String(runId)
+        .replace(/[^a-zA-Z0-9._-]+/g, '-')
+        .slice(0, 80) || 'run';
+    const dir = (0, node_path_1.join)(workspaceRootFor(folder), 'staging', clean);
+    (0, node_fs_1.mkdirSync)(dir, { recursive: true });
+    return dir;
+}
+/**
+ * Worktree root for isolation mirrors. This is `<workspaceRoot>`'s OWN
+ * `.teamshare-worktrees` directory - the NAME is the safety boundary:
+ * `removeWorktreeSafeAsync` refuses to delete anything outside a
+ * `.teamshare-worktrees` root, and that data-loss guard must keep working
+ * unchanged. What changed is only the PARENT: outside every tracked folder
+ * instead of `<folder>/..`.
+ */
+function worktreeRootFor(folder) {
+    const dir = (0, node_path_1.join)(workspaceRootFor(folder), '.teamshare-worktrees');
+    try {
+        (0, node_fs_1.mkdirSync)(dir, { recursive: true });
+    }
+    catch {
+        /* best-effort */
+    }
+    return dir;
+}
+/** Legacy sibling worktree root. Read-only - for sweeps and migration. */
+function legacyWorktreeRootFor(folder) {
+    return (0, node_path_1.join)((0, node_path_1.resolve)(folder, '..'), '.teamshare-worktrees');
+}
+/** --separate-git-dir target for a non-repo linked folder. */
+function containerGitDirFor(folder) {
+    const dir = (0, node_path_1.join)(workspaceRootFor(folder), 'container-git');
+    try {
+        (0, node_fs_1.mkdirSync)(dir, { recursive: true });
+    }
+    catch {
+        /* best-effort */
+    }
+    return dir;
+}
+/** True unless TEAMSHARE_KEEP_SCRATCH=1 (local debugging). */
+function shouldDisposeScratch() {
+    return process.env.TEAMSHARE_KEEP_SCRATCH !== '1';
+}
+/**
+ * Remove a scratch/staging dir. Links-first is unnecessary here (no junctions
+ * to the project), but we still never follow symlinks into the project:
+ * entries that are symlinks are unlinked, never traversed.
+ */
+function disposeDir(dir) {
+    if (!shouldDisposeScratch())
+        return;
+    if (!dir)
+        return;
+    try {
+        const { lstatSync, readdirSync, unlinkSync, rmdirSync } = require('node:fs');
+        if (!(0, node_fs_1.existsSync)(dir))
+            return;
+        for (const entry of readdirSync(dir)) {
+            const p = (0, node_path_1.join)(dir, entry);
+            try {
+                const st = lstatSync(p);
+                if (st.isSymbolicLink())
+                    unlinkSync(p);
+                else if (st.isDirectory())
+                    (0, node_fs_1.rmSync)(p, { recursive: true, force: true });
+                else
+                    unlinkSync(p);
+            }
+            catch {
+                /* best-effort per entry */
+            }
+        }
+        rmdirSync(dir, { recursive: true });
+    }
+    catch {
+        /* best-effort: a leftover is reaped by the sweeper */
+    }
+}
+/**
+ * Reap crash-leftover scratch dirs older than `maxAgeMs` (default 7 days -
+ * the same horizon run secrets live). Never touches a dir younger than the
+ * horizon: a paused run (question wait, idle kill) resumes with its files.
+ */
+function sweepStaleScratch(maxAgeMs = 7 * 24 * 3600_000) {
+    const removed = [];
+    const now = Date.now();
+    let bases = [];
+    try {
+        const base = rootBase();
+        const { readdirSync: rs, statSync: ss } = require('node:fs');
+        if (!(0, node_fs_1.existsSync)(base))
+            return removed;
+        bases = rs(base, { withFileTypes: true })
+            .filter((e) => e.isDirectory())
+            .map((e) => (0, node_path_1.join)(base, e.name));
+        void ss;
+    }
+    catch {
+        return removed;
+    }
+    const visit = (dir) => {
+        let entries = [];
+        try {
+            const { readdirSync: rs2 } = require('node:fs');
+            entries = rs2(dir);
+        }
+        catch {
+            return;
+        }
+        for (const name of entries) {
+            const p = (0, node_path_1.join)(dir, name);
+            try {
+                const { statSync: ss2 } = require('node:fs');
+                const st = ss2(p);
+                if (!st.isDirectory())
+                    continue;
+                if (now - st.mtimeMs > maxAgeMs) {
+                    disposeDir(p);
+                    if (!(0, node_fs_1.existsSync)(p))
+                        removed.push(p);
+                }
+            }
+            catch {
+                /* best-effort per dir */
+            }
+        }
+    };
+    for (const key of bases) {
+        // <key>/scratch/<kind>/<id> + headless trees
+        for (const sub of ['scratch', 'headless']) {
+            const subDir = (0, node_path_1.join)(key, sub);
+            if (!(0, node_fs_1.existsSync)(subDir))
+                continue;
+            let kinds = [];
+            try {
+                const { readdirSync: rs3 } = require('node:fs');
+                kinds = rs3(subDir);
+            }
+            catch {
+                continue;
+            }
+            for (const kind of kinds)
+                visit((0, node_path_1.join)(subDir, kind));
+        }
+    }
+    return removed;
+}
+//# sourceMappingURL=state-root.js.map

package/dist/lib/workspace/state-root.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-root.js","sourceRoot":"","sources":["../../../src/lib/workspace/state-root.ts"],"names":[],"mappings":";;AA4CA,0CAQC;AAGD,4CAQC;AAGD,8CAWC;AAQD,sCAaC;AAGD,gDAQC;AAGD,sCAQC;AAUD,0CAQC;AAGD,sDAEC;AAGD,gDAQC;AAGD,oDAEC;AAOD,gCAsBC;AAOD,8CA0DC;AA7PD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,6CAAyC;AACzC,qCAAkC;AAClC,yCAAoD;AACpD,qCAAwD;AAExD,SAAS,QAAQ;IACf,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC;IAC7D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;AACpD,CAAC;AAED,8CAA8C;AAC9C,SAAS,QAAQ,CAAC,MAAc;IAC9B,MAAM,IAAI,GAAG,IAAA,oBAAQ,EAAC,IAAA,mBAAO,EAAC,MAAM,CAAC,CAAC;SACnC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC;SACjC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,IAAI,IAAI,SAAS,CAAC;AAC3B,CAAC;AAED,oDAAoD;AACpD,SAAgB,eAAe,CAAC,MAAc;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxE,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;IACvC,CAAC;AACH,CAAC;AAED,0DAA0D;AAC1D,SAAgB,gBAAgB,CAAC,MAAc;IAC7C,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,QAAQ,EAAE,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,IAAA,mBAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,SAAgB,iBAAiB;IAC/B,IAAI,CAAC;QACH,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,SAAS,CAA6B,CAAC;QACvE,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,OAAO,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAC9C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,aAAa,CAC3B,MAAc,EACd,IAC6E,EAC7E,EAAU;IAEV,MAAM,KAAK,GACT,MAAM,CAAC,EAAE,CAAC;SACP,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC;SACjC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACnE,IAAA,mBAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,SAAgB,kBAAkB,CAAC,IAAY,EAAE,EAAU;IACzD,MAAM,KAAK,GACT,MAAM,CAAC,EAAE,CAAC;SACP,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC;SACjC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACtD,IAAA,mBAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2DAA2D;AAC3D,SAAgB,aAAa,CAAC,MAAc,EAAE,KAAa;IACzD,MAAM,KAAK,GACT,MAAM,CAAC,KAAK,CAAC;SACV,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC;SACjC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAA,mBAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,eAAe,CAAC,MAAc;IAC5C,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,IAAA,mBAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0EAA0E;AAC1E,SAAgB,qBAAqB,CAAC,MAAc;IAClD,OAAO,IAAA,gBAAI,EAAC,IAAA,mBAAO,EAAC,MAAM,EAAE,IAAI,CAAC,EAAE,sBAAsB,CAAC,CAAC;AAC7D,CAAC;AAED,8DAA8D;AAC9D,SAAgB,kBAAkB,CAAC,MAAc;IAC/C,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,IAAA,mBAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8DAA8D;AAC9D,SAAgB,oBAAoB;IAClC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,GAAG,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,SAAgB,UAAU,CAAC,GAAW;IACpC,IAAI,CAAC,oBAAoB,EAAE;QAAE,OAAO;IACpC,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GACrD,OAAO,CAAC,SAAS,CAA6B,CAAC;QACjD,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;YAAE,OAAO;QAC7B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;gBACxB,IAAI,EAAE,CAAC,cAAc,EAAE;oBAAE,UAAU,CAAC,CAAC,CAAC,CAAC;qBAClC,IAAI,EAAE,CAAC,WAAW,EAAE;oBAAE,IAAA,gBAAM,EAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;;oBAClE,UAAU,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC;QACD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;IACxD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,QAAQ,GAAG,CAAC,GAAG,EAAE,GAAG,QAAQ;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;QACxB,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,GACrC,OAAO,CAAC,SAAS,CAA6B,CAAC;QACjD,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC;QACtC,KAAK,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aACtC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,KAAK,EAAE,CAAC;IACV,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,GAAW,EAAQ,EAAE;QAClC,IAAI,OAAO,GAAa,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,GACxB,OAAO,CAAC,SAAS,CAA6B,CAAC;YACjD,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GACrB,OAAO,CAAC,SAAS,CAA6B,CAAC;gBACjD,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;gBAClB,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE;oBAAE,SAAS;gBAChC,IAAI,GAAG,GAAG,EAAE,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;oBAChC,UAAU,CAAC,CAAC,CAAC,CAAC;oBACd,IAAI,CAAC,IAAA,oBAAU,EAAC,CAAC,CAAC;wBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,6CAA6C;QAC7C,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAA,oBAAU,EAAC,MAAM,CAAC;gBAAE,SAAS;YAClC,IAAI,KAAK,GAAa,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,GACxB,OAAO,CAAC,SAAS,CAA6B,CAAC;gBACjD,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/workspace/workspace-audit.d.ts

@@ -0,0 +1,20 @@
+export interface WorkspaceFinding {
+    kind: 'legacy-scratch-file' | 'leftover-scope' | 'legacy-worktree' | 'exclude-block';
+    path: string;
+    detail?: string;
+    /** True when `--apply` will remove this (worktrees are never auto-removed). */
+    removable: boolean;
+}
+export interface WorkspaceAudit {
+    folders: number;
+    findings: WorkspaceFinding[];
+    truncated: boolean;
+}
+export declare function auditWorkspaceState(): WorkspaceAudit;
+export interface WorkspaceCleanupResult {
+    removed: number;
+    kept: number;
+    keptReason: string;
+    errors: string[];
+}
+export declare function applyWorkspaceStateCleanup(report: WorkspaceAudit): WorkspaceCleanupResult;

package/dist/lib/workspace/workspace-audit.js

@@ -0,0 +1,339 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.auditWorkspaceState = auditWorkspaceState;
+exports.applyWorkspaceStateCleanup = applyWorkspaceStateCleanup;
+/**
+ * Workspace-state audit (2026-10-27): report (and optionally remove) every
+ * bridge-owned entry left INSIDE linked folders.
+ *
+ * The invariant is that the bridge creates zero entries in a linked folder
+ * except the agent's own edits. These findings are all pre-migration
+ * leftovers or crash survivors:
+ *   - legacy-scratch-file: `<folder>/teamshare/...` (research/blog/plan mirrors)
+ *   - leftover-scope:      `<folder>/.teamshare-runs/<runId>/` (transient scope)
+ *   - legacy-worktree:     `<folder>/../.teamshare-worktrees/*` (pre-migration mirrors)
+ *   - exclude-block:       auto-added `.git/info/exclude` lines
+ *
+ * Removal policy (`--apply`): scopes go through the live-guarded sweep
+ * (a scope claimed by a live/resumable run is kept); scratch files are
+ * deleted only under the three bridge-owned subdirs
+ * (`research/`, `blog/`, `plans/`); exclude cleanup strips only lines the
+ * bridge wrote; sibling worktrees are NEVER removed here (the 6h sweep owns
+ * them with rescue-first) and are reported as kept.
+ */
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const node_os_1 = require("node:os");
+const config_1 = require("../config");
+const MAX_FILES_PER_TREE = 2000;
+/** Scope dirs still claimed by a live/resumable harness run. */
+function liveScopeDirs() {
+    const live = new Set();
+    try {
+        const sessionsDir = (0, node_path_1.join)((0, node_os_1.homedir)(), '.teamshare', 'sessions');
+        if (!(0, node_fs_1.existsSync)(sessionsDir))
+            return live;
+        for (const name of (0, node_fs_1.readdirSync)(sessionsDir)) {
+            if (!name.startsWith('harness-') || !name.endsWith('.json'))
+                continue;
+            try {
+                const rec = JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(sessionsDir, name), 'utf8'));
+                if (rec?.scopeDir)
+                    live.add(rec.scopeDir.replace(/\\/g, '/').toLowerCase());
+            }
+            catch {
+                /* corrupt record - ignore */
+            }
+        }
+    }
+    catch {
+        /* best-effort */
+    }
+    return live;
+}
+function walkFiles(root, out) {
+    const stack = [root];
+    while (stack.length && out.length < MAX_FILES_PER_TREE) {
+        const dir = stack.pop();
+        let entries;
+        try {
+            entries = (0, node_fs_1.readdirSync)(dir);
+        }
+        catch {
+            continue;
+        }
+        for (const name of entries) {
+            if (out.length >= MAX_FILES_PER_TREE)
+                break;
+            const p = (0, node_path_1.join)(dir, name);
+            try {
+                const st = (0, node_fs_1.statSync)(p);
+                if (st.isDirectory())
+                    stack.push(p);
+                else if (st.isFile())
+                    out.push(p);
+            }
+            catch {
+                /* best-effort per entry */
+            }
+        }
+    }
+}
+/** Lines the bridge ever auto-added to an exclude file (exact trimmed match). */
+const BRIDGE_EXCLUDE_LINES = new Set([
+    'teamshare/',
+    '.teamshare-runs/',
+    '# TeamShare local scratch (research/tool outputs) - added automatically',
+    '# TeamShare run scopes (per-run opencode projects) - added automatically',
+    '# teamshare isolation (auto) - do not edit',
+    '# >>> TeamShare run scope (auto, transient) - do not edit',
+    '# <<< TeamShare run scope (auto, transient)',
+]);
+function excludeFileFor(folder) {
+    try {
+        const { execFileSync } = require('node:child_process');
+        const { envWithoutShims } = require('./shims');
+        const out = execFileSync('git', ['rev-parse', '--git-path', 'info/exclude'], {
+            cwd: folder,
+            encoding: 'utf-8',
+            timeout: 5_000,
+            stdio: ['pipe', 'pipe', 'pipe'],
+            env: envWithoutShims(),
+        })
+            .toString()
+            .trim();
+        if (!out)
+            return null;
+        const path = require('node:path');
+        return path.isAbsolute(out) ? out : (0, node_path_1.resolve)(folder, out);
+    }
+    catch {
+        return null;
+    }
+}
+function auditWorkspaceState() {
+    const findings = [];
+    let truncated = false;
+    let folders = 0;
+    let links = {};
+    try {
+        links = ((0, config_1.loadConfig)().projects ?? {});
+    }
+    catch {
+        return { folders: 0, findings, truncated };
+    }
+    const live = liveScopeDirs();
+    for (const link of Object.values(links)) {
+        const folder = link?.path;
+        if (!folder || !(0, node_fs_1.existsSync)(folder))
+            continue;
+        folders++;
+        // 1. Legacy in-folder scratch.
+        const scratchRoot = (0, node_path_1.join)(folder, 'teamshare');
+        if ((0, node_fs_1.existsSync)(scratchRoot)) {
+            const files = [];
+            try {
+                walkFiles(scratchRoot, files);
+            }
+            catch {
+                /* best-effort */
+            }
+            for (const f of files) {
+                const rel = f.slice(scratchRoot.length + 1).replace(/\\/g, '/');
+                const top = rel.split('/')[0];
+                findings.push({
+                    kind: 'legacy-scratch-file',
+                    path: f,
+                    detail: 'legacy in-folder scratch (bridge mirror)',
+                    removable: top === 'research' || top === 'blog' || top === 'plans',
+                });
+            }
+            if (files.length >= MAX_FILES_PER_TREE)
+                truncated = true;
+        }
+        // 2. Leftover run scopes.
+        const scopeBase = (0, node_path_1.join)(folder, '.teamshare-runs');
+        if ((0, node_fs_1.existsSync)(scopeBase)) {
+            let names = [];
+            try {
+                names = (0, node_fs_1.readdirSync)(scopeBase);
+            }
+            catch {
+                names = [];
+            }
+            for (const name of names) {
+                const dir = (0, node_path_1.join)(scopeBase, name);
+                try {
+                    if (!(0, node_fs_1.lstatSync)(dir).isDirectory() && !(0, node_fs_1.lstatSync)(dir).isSymbolicLink())
+                        continue;
+                }
+                catch {
+                    continue;
+                }
+                const isLive = live.has(dir.replace(/\\/g, '/').toLowerCase());
+                findings.push({
+                    kind: 'leftover-scope',
+                    path: dir,
+                    detail: isLive ? 'claimed by a live/resumable run - kept' : undefined,
+                    removable: !isLive,
+                });
+            }
+        }
+        // 3. Legacy sibling worktrees (report-only).
+        let legacy = '';
+        try {
+            const { legacyWorktreeRootFor } = require('./state-root');
+            legacy = legacyWorktreeRootFor(folder);
+        }
+        catch {
+            legacy = (0, node_path_1.join)((0, node_path_1.resolve)(folder, '..'), '.teamshare-worktrees');
+        }
+        if ((0, node_fs_1.existsSync)(legacy)) {
+            let names = [];
+            try {
+                names = (0, node_fs_1.readdirSync)(legacy);
+            }
+            catch {
+                names = [];
+            }
+            for (const name of names) {
+                findings.push({
+                    kind: 'legacy-worktree',
+                    path: (0, node_path_1.join)(legacy, name),
+                    detail: 'pre-migration mirror - owned by the 6h sweep (rescue-first), never removed here',
+                    removable: false,
+                });
+            }
+        }
+        // 4. Auto-added exclude lines.
+        try {
+            const file = excludeFileFor(folder);
+            if (file && (0, node_fs_1.existsSync)(file)) {
+                const lines = (0, node_fs_1.readFileSync)(file, 'utf8').split('\n');
+                const hits = lines.filter((l) => BRIDGE_EXCLUDE_LINES.has(l.trim()));
+                if (hits.length) {
+                    findings.push({
+                        kind: 'exclude-block',
+                        path: file,
+                        detail: `${hits.length} auto-added line(s): ${hits
+                            .map((h) => h.trim())
+                            .slice(0, 4)
+                            .join(' | ')}${hits.length > 4 ? ' …' : ''}`,
+                        removable: true,
+                    });
+                }
+            }
+        }
+        catch {
+            /* best-effort */
+        }
+    }
+    return { folders, findings, truncated };
+}
+function removeEmptyDirsUp(root, start) {
+    let dir = start;
+    while (dir.startsWith(root) && dir !== root) {
+        try {
+            if ((0, node_fs_1.existsSync)(dir) && (0, node_fs_1.readdirSync)(dir).length === 0)
+                (0, node_fs_1.rmdirSync)(dir);
+            else
+                break;
+        }
+        catch {
+            break;
+        }
+        const path = require('node:path');
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+}
+function applyWorkspaceStateCleanup(report) {
+    const res = {
+        removed: 0,
+        kept: 0,
+        keptReason: '',
+        errors: [],
+    };
+    const keptNotes = [];
+    for (const f of report.findings) {
+        try {
+            if (f.kind === 'leftover-scope') {
+                // Counted in bulk below: scopes go through the live-guarded sweep.
+                continue;
+            }
+            if (f.kind === 'legacy-worktree') {
+                res.kept++;
+                keptNotes.push('sibling worktrees (6h sweep owns them)');
+                continue;
+            }
+            if (f.kind === 'legacy-scratch-file') {
+                if (!f.removable) {
+                    res.kept++;
+                    keptNotes.push('unknown files under teamshare/');
+                    continue;
+                }
+                (0, node_fs_1.rmSync)(f.path, { force: true });
+                if (!(0, node_fs_1.existsSync)(f.path)) {
+                    res.removed++;
+                    // Prune newly-empty parents up to (and including, when empty) the
+                    // `teamshare/` root. Located by the LAST `/teamshare/` segment so a
+                    // project folder that itself contains "teamshare" still resolves.
+                    const norm = f.path.replace(/\\/g, '/');
+                    const idx = norm.toLowerCase().lastIndexOf('/teamshare/');
+                    if (idx !== -1) {
+                        const path = require('node:path');
+                        const root = f.path.slice(0, idx + '/teamshare'.length);
+                        removeEmptyDirsUp(root, path.dirname(f.path));
+                    }
+                }
+                else {
+                    res.errors.push(`could not remove ${f.path}`);
+                }
+                continue;
+            }
+            if (f.kind === 'exclude-block') {
+                const lines = (0, node_fs_1.readFileSync)(f.path, 'utf8').split('\n');
+                const keptLines = lines.filter((l) => !BRIDGE_EXCLUDE_LINES.has(l.trim()));
+                // Drop a leftover blank line the append introduced, never other content.
+                const cleaned = keptLines.join('\n').replace(/\n{3,}/g, '\n\n');
+                (0, node_fs_1.writeFileSync)(f.path, cleaned, 'utf8');
+                res.removed++;
+                continue;
+            }
+        }
+        catch (err) {
+            res.errors.push(`${f.path}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    // Scopes go through the live-guarded sweep in bulk (one pass per folder set
+    // is cheaper and the guard is authoritative there).
+    try {
+        const scopeFindings = report.findings.filter((f) => f.kind === 'leftover-scope' && f.removable);
+        if (scopeFindings.length) {
+            const { sweepStaleScopes } = require('../harness/run-scope');
+            const links = ((0, config_1.loadConfig)().projects ?? {});
+            const folders = Object.values(links)
+                .map((l) => l?.path)
+                .filter((p) => typeof p === 'string' && p.length > 0);
+            const swept = sweepStaleScopes(folders);
+            res.removed += swept.length;
+            res.kept += Math.max(0, scopeFindings.length - swept.length);
+            if (scopeFindings.length - swept.length > 0)
+                keptNotes.push('scopes still claimed or locked');
+        }
+        else if (report.findings.some((f) => f.kind === 'leftover-scope')) {
+            res.kept += report.findings.filter((f) => f.kind === 'leftover-scope').length;
+            keptNotes.push('live/resumable scopes');
+        }
+    }
+    catch (err) {
+        res.errors.push(`scope sweep: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    res.keptReason = keptNotes.length
+        ? [...new Set(keptNotes)].join('; ')
+        : 'none';
+    return res;
+}
+//# sourceMappingURL=workspace-audit.js.map