fix(windows): preserve scoped inventories after case-only renames

[faizan-oai]

Summary

Keep scoped file inventories, file counts, and automatic component planning consistent after case-only directory renames on Windows.

A normal Git branch switch can leave the physical directory spelling different from the index when ignored build output keeps the directory alive. Git reports a clean working tree, but a case-sensitive pathspec can return an empty inventory for that existing scope.

Changes

• Keep ordinary Git inventories scoped with an icase,literal pathspec, then filter candidates using cached filesystem-directory identity checks. Preserve symbolic-link file entries without following them.
• Use samefile rather than path-string equality so case-insensitive macOS aliases and genuinely case-sensitive Windows directories both work.
• Fall back to a root listing for scopes containing case-varying non-ASCII characters, which Git's case matching cannot reliably cover. Non-cased Unicode names retain the scoped fast path.
• Canonicalize regular component-inventory files through the existing target normalizer. Pass absolute candidates so literal ~ filenames are not treated as home-directory syntax.
• Use insertion-ordered set deduplication to avoid quadratic work when normalizing a file inventory.
• Add native Git rename/branch-switch regressions, bounded candidate-list checks, mixed tracked/untracked and ignored-tracked coverage, and existing literal-path/deduplication coverage.

Testing

• bun test --timeout 30000 tests-ts/component-scan.test.ts tests-ts/targets.test.ts tests-ts/workbench-windows-compatibility.test.ts --seed 12345: 50 passed, 2 platform-specific skips, 0 failed.
• bun test --timeout 120000 tests-ts/api.test.ts --test-name-pattern 'keeps requested source paths|passes the workbench snapshot contract|removes scoped target files' --seed 12345: 3 passed, 130 filtered, 0 failed.
• pnpm run types, pnpm run format, pnpm run build, and git diff --check: passed.
• Native built-Node/Python controls: ordinary Git branch switching with ignored build output, scoped/root file counts, automatic planning, and literal ~/app.ts passed on default NTFS. A separate case-sensitive Windows-directory control preserved both differently cased source files and scopes.
• The new case-rename regression failed before the fix with an empty scoped inventory and passed afterward. No model inference was used.
• Final ordinary-NTFS regressions: 2 passed, 20 assertions; case-sensitive-NTFS regressions: 2 passed, 30 assertions. Tests check actual Git candidate counts without timing assertions and retain duplicate/count checks when comparing filesystem identities.
• Initial macOS CI exposed a path-spelling-versus-directory-identity failure. The follow-up changes the identity check and keeps the macOS regression enabled; cross-platform CI and the combined full package run must revalidate this head.

Risk and rollout

Ordinary scoped requests no longer enumerate the whole repository. Case-varying Unicode scopes still use a conservative root-listing fallback, so that less-common path retains the larger-listing cost. Directory identity checks are cached, and normalization deduplication is linear. Missing tracked files remain excluded, and existing target-confinement checks remain in use.

No CLI/API options, stored artifacts, database schema, Git configuration, or runtime dependencies change. The unrelated README setup advice was removed after review.

Public disclosure review

• No customer, partner, prospect, or user identities, data, or identifying details are included.
• No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
• I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-08-24T18:51:34.507599Z	cf49da4	Manual request
🔒 Security Review	✅ Completed 2026-08-24T18:59:22.372108Z	cf49da4	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[faizan-oai]

@mldangelo-oai — could you review this scoped-inventory fix? Native controls cover ordinary case-renamed Git checkouts and genuinely case-sensitive directories. Cross-platform CI is running.

@codex review the current head 0caf7db1fc99f81651d6cfbb3688cdd0175c79fd.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0caf7db1fc

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[faizan-oai]

@codex review the current head cf49da44cbf0afdb762d177147a5675626d6195e.

This follow-up addresses the scoped-query performance comment, uses filesystem directory identity for the macOS case-alias failure, and removes the unrelated README advice. Final focused Windows checks pass; exact-head cross-platform CI is running.

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Breezy!

Reviewed commit: cf49da44cb

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[faizan-oai]

@codex security review the current head cf49da44cbf0afdb762d177147a5675626d6195e after the directory-identity follow-up.

The replacement node-ci workflow passed all 25 jobs on this commit, including both new macOS regressions. The older canceled workflow is being rerun to clear its stale title-gate failures; no source change was needed for those gates.

[kmbroai]

Critical review

Reviewed cf49da44cbf0afdb762d177147a5675626d6195e. This fixes a real inventory-correctness problem. I found no blocking correctness issue in the revised diff.

Necessity and correctness

A case-only directory rename can leave Git's index spelling different from the physical directory spelling without making the checkout dirty. Treating a failed case-sensitive pathspec match as an empty scope can then lose source files and mislead both counts and component planning. That is worth fixing in the inventory path rather than asking users to change Git configuration.

The revision addresses the earlier whole-repository-enumeration concern: ordinary scopes use an icase,literal pathspec, followed by filesystem-identity filtering. The string-keyed prefix cache is deliberate: blindly using case-folded Windows path equality would collapse distinct directories on a genuinely case-sensitive volume. Keeping leaf inspection as lstat() also avoids following symlink files just to normalize the inventory.

The TypeScript change reuses normalizeTarget instead of inventing another canonicalization algorithm. Passing absolute candidates preserves literal ~ names, and insertion-ordered Set deduplication removes the previous repeated linear search while preserving order. These are useful simplifications, not unrelated features.

Remaining tradeoffs

The Unicode fallback still enumerates the repository for a scope containing case-varying non-ASCII characters. That is a documented performance tradeoff, not an unresolved version of the ordinary-scope bug. Keep the fallback narrow; do not simplify this into unconditional root enumeration. If Unicode-heavy, many-component repositories become a real workload, measure that case before adding another cache or filesystem-capability probe.

The added tests have meaningful behavioral coverage: real Git operations, candidate counts rather than wall-clock performance assertions, tracked/untracked files, ignored-but-tracked files, and literal-path handling. I would keep the filesystem-identity comparisons; replacing them with lowercased strings would weaken the case-sensitive-volume coverage.

Verification

Ran the three focused suites with seed 12345: component-scan.test.ts, targets.test.ts, and workbench-windows-compatibility.test.ts: 50 passed, 2 skipped, 0 failed on Bun 1.3.14/Linux with locally available dependencies. An initial sandbox run failed on remapped temporary-directory ownership; the ordinary-environment rerun passed. The skips and this Linux run are not native NTFS/macOS evidence; I did not rerun those platform controls or the full CI matrix.

[faizan-oai]

Current-head verification: Codex code and security reviews reported no findings for cf49da4, and node-ci passed across Linux, macOS, and Windows. Both review threads are addressed and resolved. The macOS run explicitly passed both new regressions (1,669 tests passed overall, 29 skipped, 0 failed).