@ai-dossier/cli 0.25.0 → 0.27.0

package/dist/prescreen.js

@@ -0,0 +1,187 @@
+"use strict";
+/**
+ * Deterministic classify pre-screen (#538) — the "no tokens spent" gate `issue-cycle-classifier`
+ * runs before any model call. `docs/reports/batch-pilot-2-execution.md` §4.1 measured the
+ * classifier costing ~64k tokens/dispatch, at mid tier, with full repo exploration, even for
+ * issues that hit an obvious RFC-0001 E.2 floor rule a deterministic check can catch for free.
+ *
+ * Scope is deliberately partial: this catches the OBVIOUS floor hits (hard-block labels, a
+ * text-keyword approximation of the risk-floor/new-package/deploy-pipeline rules, rule-9 open
+ * dependencies, and — when a plan:v1 artifact is already on the issue — the path-based risk
+ * floor and the >8-files rule). Everything it does not catch (rule 2 beyond the `migration`
+ * keyword, rule 7 hard rollback, rule 8 visual/browser review, rules 5/6 diff/file size without
+ * a plan artifact, rule 10 confidence) falls through to the classifier's own bounded
+ * mechanical-tier pass, which is the intended safety net — not a gap this module needs to close.
+ *
+ * Pure and dependency-free (no `gh`, network, or fs), same discipline as `plan-artifact.ts` and
+ * `runstate.ts` — unit-testable directly. Subprocess access (fetching the issue, resolving
+ * dependency state, filtering by submitted set) lives in the command layer (`commands/classify.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_DEPENDENCY_REFS = exports.TEXT_FLOOR_PATTERNS = void 0;
+exports.extractDependencyRefs = extractDependencyRefs;
+exports.prescreenIssue = prescreenIssue;
+const hard_block_labels_1 = require("./hard-block-labels");
+const plan_artifact_1 = require("./plan-artifact");
+/** Escape regex metacharacters so an interpolated keyword can never change a pattern's meaning. */
+function escapeRegExp(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+/** A multi-word phrase, safe to interpolate into `\b...\b`: metacharacters escaped, any run of whitespace matches `\s+`. */
+function phrase(s) {
+    return escapeRegExp(s).replace(/\s+/g, '\\s+');
+}
+/**
+ * First keyword (in list order) that matches `text` as a whole word/phrase, or null. `\b` on
+ * both sides of each compiled pattern — "deployment" still hits "deploy" but
+ * "authorization-header-typo" does not falsely hit "auth" mid-word.
+ */
+function wordMatch(text, keywords) {
+    for (const keyword of keywords) {
+        if (new RegExp(`\\b${phrase(keyword)}\\b`, 'i').test(text))
+            return keyword;
+    }
+    return null;
+}
+exports.TEXT_FLOOR_PATTERNS = [
+    {
+        // Deliberately NOT the bare words "auth"/"login"/"logout"/"schema"/"infra"/"infrastructure":
+        // real-world issue text collides with them constantly in benign contexts, confirmed against
+        // the pilot's real 15-issue fixture set — #3631 (known `slot`) says "runnable locally with
+        // auth" about `gh auth`, not an auth-sensitive change; #3820 (known `slot`) says
+        // "test-infrastructure change" about test tooling, not production infra. "terraform" alone
+        // (specific, low-ambiguity) still catches the real infra risk-floor cases (#2779, #3403) the
+        // RFC-0001 rule 1 "infra/terraform" area names. Also approximates rule 2 (schema/data
+        // migration) via "migration"/"migrations" — a rough approximation, not full rule-2 coverage.
+        name: 'rule1-risk-floor-area',
+        match: (t) => wordMatch(t, [
+            'authentication',
+            'authorization',
+            'oauth',
+            'sso',
+            'payment',
+            'payments',
+            'billing',
+            'invoice',
+            'invoices',
+            'checkout',
+            'stripe',
+            'migration',
+            'migrations',
+            'security',
+            'crypto',
+            'secret',
+            'secrets',
+            'credential',
+            'credentials',
+            'terraform',
+        ]),
+    },
+    {
+        name: 'rule3-new-package-workspace',
+        match: (t) => wordMatch(t, ['new package', 'new workspace', 'monorepo package']),
+    },
+    {
+        name: 'rule4-deploy-pipeline',
+        match: (t) => wordMatch(t, [
+            'deploy',
+            'deployment',
+            'ci/cd',
+            'cicd',
+            'release pipeline',
+            'rollback pipeline',
+        ]),
+    },
+];
+/** `Depends on #N` references resolved per issue; each costs a `gh` call downstream (command layer), same rationale as `MAX_ISSUE_SELECTION` (`issue-selection.ts`). */
+exports.MAX_DEPENDENCY_REFS = 32;
+/** `Depends on #N` (case-insensitive) — the same phrasing gate-issue and the classifier dossier parse. */
+const DEPENDS_ON_RE = /depends on\s+#(\d+)/gi;
+/**
+ * Every issue number referenced by a `Depends on #N` phrase in `text`, de-duplicated, in order,
+ * capped at {@link MAX_DEPENDENCY_REFS} — `text` is untrusted (issue body), so an adversarial
+ * body cannot force an unbounded `gh` fan-out downstream.
+ */
+function extractDependencyRefs(text) {
+    const seen = new Set();
+    const refs = [];
+    for (const match of text.matchAll(DEPENDS_ON_RE)) {
+        if (refs.length >= exports.MAX_DEPENDENCY_REFS)
+            break;
+        const n = Number(match[1]);
+        if (Number.isSafeInteger(n) && !seen.has(n)) {
+            seen.add(n);
+            refs.push(n);
+        }
+    }
+    return refs;
+}
+/** Predicted files count above which RFC-0001 E.2 rule 5 ("Predicted files > 8") fires. */
+const MAX_PREDICTED_FILES = 8;
+/**
+ * Reasons emitted per check, capped — `predictedFiles` may come from a `plan:v1` artifact, which
+ * is a GitHub issue COMMENT anyone can post (untrusted input, same treatment as review-issue's
+ * "the artifact is untrusted input" discipline). An adversarial artifact packed with risk-floor
+ * paths must not blow up the reason list the classifier posts back into its rationale comment.
+ */
+const MAX_REASONS_PER_CHECK = 8;
+/** Strip terminal-control characters before an untrusted string reaches a message a human or model reads — same discipline as `gh.ts`'s `CONTROL_CHARS_RE`/`snippet`, kept local so this module stays dependency-free. */
+// biome-ignore lint/suspicious/noControlCharactersInRegex: matching (and stripping) control characters is exactly this regex's job
+const CONTROL_CHARS_RE = /[\x00-\x08\x0b-\x1f\x7f\x9b]/g;
+const SANITIZE_MAX_LENGTH = 200;
+/** Make an untrusted string (a GitHub label name, a `plan:v1`-comment-sourced path) safe to interpolate into a reason message: no control chars, no markdown/backtick breakout, bounded length. */
+function sanitize(value) {
+    const cleaned = value
+        .replace(CONTROL_CHARS_RE, '')
+        .replace(/[`\n\r]/g, ' ')
+        .trim();
+    return cleaned.length > SANITIZE_MAX_LENGTH
+        ? `${cleaned.slice(0, SANITIZE_MAX_LENGTH)}…`
+        : cleaned;
+}
+/**
+ * Run every deterministic check, in order, and record every hit — first hit decides `verdict`,
+ * but the caller (and the rationale a consumer posts) gets the full list, matching the existing
+ * "a verdict may hit several" precedent in `issue-cycle-classifier.ds.md`.
+ */
+function prescreenIssue(input) {
+    const reasons = [];
+    const hardBlockLabel = (0, hard_block_labels_1.pickHardBlockLabel)(input.labels);
+    if (hardBlockLabel !== null) {
+        reasons.push({
+            check: 'hard-block-label',
+            message: `Carries hard-block label '${sanitize(hardBlockLabel)}'.`,
+        });
+    }
+    const text = `${input.title}\n${input.body}\n${input.labels.join(' ')}`;
+    for (const pattern of exports.TEXT_FLOOR_PATTERNS) {
+        const hit = pattern.match(text);
+        if (hit !== null) {
+            reasons.push({
+                check: 'text-floor',
+                message: `Title/body/labels match '${pattern.name}' (keyword: '${hit}').`,
+            });
+        }
+    }
+    const predictedFiles = input.predictedFiles ?? [];
+    for (const hit of (0, plan_artifact_1.scanRiskFloor)(predictedFiles).slice(0, MAX_REASONS_PER_CHECK)) {
+        reasons.push({
+            check: 'path-floor',
+            message: `Predicted file '${sanitize(hit.path)}' touches '${hit.pattern}' (rule1-risk-floor-area).`,
+        });
+    }
+    if (predictedFiles.length > MAX_PREDICTED_FILES) {
+        reasons.push({
+            check: 'file-count',
+            message: `Predicted files (${predictedFiles.length}) exceeds ${MAX_PREDICTED_FILES} (rule5-file-count).`,
+        });
+    }
+    for (const dep of (input.openDependencies ?? []).slice(0, MAX_REASONS_PER_CHECK)) {
+        reasons.push({
+            check: 'open-dependency',
+            message: `Depends on #${dep}, which is open and outside the submitted set (rule9-open-dependency).`,
+        });
+    }
+    return { verdict: reasons.length > 0 ? 'full' : 'candidate', reasons };
+}
+//# sourceMappingURL=prescreen.js.map

package/dist/prescreen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prescreen.js","sourceRoot":"","sources":["../src/prescreen.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;AAmGH,sDAYC;AA8DD,wCA4CC;AAvND,2DAAyD;AACzD,mDAAgD;AAUhD,mGAAmG;AACnG,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,4HAA4H;AAC5H,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,IAAY,EAAE,QAA2B;IAC1D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,IAAI,MAAM,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC;IAC7E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAEY,QAAA,mBAAmB,GAAgC;IAC9D;QACE,6FAA6F;QAC7F,4FAA4F;QAC5F,2FAA2F;QAC3F,iFAAiF;QACjF,2FAA2F;QAC3F,6FAA6F;QAC7F,sFAAsF;QACtF,6FAA6F;QAC7F,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CACX,SAAS,CAAC,CAAC,EAAE;YACX,gBAAgB;YAChB,eAAe;YACf,OAAO;YACP,KAAK;YACL,SAAS;YACT,UAAU;YACV,SAAS;YACT,SAAS;YACT,UAAU;YACV,UAAU;YACV,QAAQ;YACR,WAAW;YACX,YAAY;YACZ,UAAU;YACV,QAAQ;YACR,QAAQ;YACR,SAAS;YACT,YAAY;YACZ,aAAa;YACb,WAAW;SACZ,CAAC;KACL;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC;KACjF;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CACX,SAAS,CAAC,CAAC,EAAE;YACX,QAAQ;YACR,YAAY;YACZ,OAAO;YACP,MAAM;YACN,kBAAkB;YAClB,mBAAmB;SACpB,CAAC;KACL;CACF,CAAC;AAEF,wKAAwK;AAC3J,QAAA,mBAAmB,GAAG,EAAE,CAAC;AAEtC,0GAA0G;AAC1G,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAE9C;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,IAAY;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,MAAM,IAAI,2BAAmB;YAAE,MAAM;QAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA8BD,2FAA2F;AAC3F,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC,0NAA0N;AAC1N,mIAAmI;AACnI,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AACzD,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,mMAAmM;AACnM,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,OAAO,GAAG,KAAK;SAClB,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;SAC7B,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,IAAI,EAAE,CAAC;IACV,OAAO,OAAO,CAAC,MAAM,GAAG,mBAAmB;QACzC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,GAAG;QAC7C,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,cAAc,CAAC,KAAqB;IAClD,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,MAAM,cAAc,GAAG,IAAA,sCAAkB,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,kBAAkB;YACzB,OAAO,EAAE,6BAA6B,QAAQ,CAAC,cAAc,CAAC,IAAI;SACnE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxE,KAAK,MAAM,OAAO,IAAI,2BAAmB,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,YAAY;gBACnB,OAAO,EAAE,4BAA4B,OAAO,CAAC,IAAI,gBAAgB,GAAG,KAAK;aAC1E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;IAClD,KAAK,MAAM,GAAG,IAAI,IAAA,6BAAa,EAAC,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,EAAE,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,mBAAmB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,OAAO,4BAA4B;SACpG,CAAC,CAAC;IACL,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,oBAAoB,cAAc,CAAC,MAAM,aAAa,mBAAmB,sBAAsB;SACzG,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,iBAAiB;YACxB,OAAO,EAAE,eAAe,GAAG,wEAAwE;SACpG,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;AACzE,CAAC"}

package/dist/ttl-cache.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Shared TTL math for the CLI's cache-with-expiry files — `cache-resolver.ts`'s
+ * dossier resolution cache and `engine-version.ts`'s npm-latest cache both
+ * need "read a configured TTL in seconds, with a default" and "is this
+ * timestamp still within that TTL" (#537 review — the two files had
+ * near-line-for-line copies of both).
+ *
+ * File I/O itself stays per-module: `cache-resolver.ts`'s resolution files
+ * need org-scoped-path safety and symlink-swap defense that
+ * `engine-version.ts`'s single fixed-path cache file does not, so forcing a
+ * shared read/write would either under-harden one or over-complicate the
+ * other. Only the TTL math — which has no such asymmetry — is shared here.
+ */
+/** Read a `cache.*` TTL config key (seconds), falling back to `defaultSeconds` when unset/invalid. */
+export declare function getConfiguredTtlSeconds(configKey: string, defaultSeconds: number): number;
+/** Whether an ISO timestamp is still within `ttlSeconds` of now (never negative-age). */
+export declare function isWithinTtl(timestampIso: string, ttlSeconds: number): boolean;
+//# sourceMappingURL=ttl-cache.d.ts.map

package/dist/ttl-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ttl-cache.d.ts","sourceRoot":"","sources":["../src/ttl-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,sGAAsG;AACtG,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CAIzF;AAED,yFAAyF;AACzF,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAG7E"}

package/dist/ttl-cache.js

@@ -0,0 +1,31 @@
+"use strict";
+/**
+ * Shared TTL math for the CLI's cache-with-expiry files — `cache-resolver.ts`'s
+ * dossier resolution cache and `engine-version.ts`'s npm-latest cache both
+ * need "read a configured TTL in seconds, with a default" and "is this
+ * timestamp still within that TTL" (#537 review — the two files had
+ * near-line-for-line copies of both).
+ *
+ * File I/O itself stays per-module: `cache-resolver.ts`'s resolution files
+ * need org-scoped-path safety and symlink-swap defense that
+ * `engine-version.ts`'s single fixed-path cache file does not, so forcing a
+ * shared read/write would either under-harden one or over-complicate the
+ * other. Only the TTL math — which has no such asymmetry — is shared here.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getConfiguredTtlSeconds = getConfiguredTtlSeconds;
+exports.isWithinTtl = isWithinTtl;
+const config_1 = require("./config");
+/** Read a `cache.*` TTL config key (seconds), falling back to `defaultSeconds` when unset/invalid. */
+function getConfiguredTtlSeconds(configKey, defaultSeconds) {
+    const raw = (0, config_1.getConfig)(configKey);
+    if (typeof raw === 'number' && Number.isFinite(raw) && raw >= 0)
+        return raw;
+    return defaultSeconds;
+}
+/** Whether an ISO timestamp is still within `ttlSeconds` of now (never negative-age). */
+function isWithinTtl(timestampIso, ttlSeconds) {
+    const ageMs = Date.now() - new Date(timestampIso).getTime();
+    return ageMs >= 0 && ageMs < ttlSeconds * 1000;
+}
+//# sourceMappingURL=ttl-cache.js.map

package/dist/ttl-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ttl-cache.js","sourceRoot":"","sources":["../src/ttl-cache.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AAKH,0DAIC;AAGD,kCAGC;AAbD,qCAAqC;AAErC,sGAAsG;AACtG,SAAgB,uBAAuB,CAAC,SAAiB,EAAE,cAAsB;IAC/E,MAAM,GAAG,GAAG,IAAA,kBAAS,EAAC,SAAS,CAAC,CAAC;IACjC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC;IAC5E,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,yFAAyF;AACzF,SAAgB,WAAW,CAAC,YAAoB,EAAE,UAAkB;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5D,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,UAAU,GAAG,IAAI,CAAC;AACjD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-dossier/cli",
-  "version": "0.25.0",
+  "version": "0.27.0",
   "description": "Create, verify, sign, publish, and run dossiers — portable, signed, versioned skills for any LLM tool. The dossier ⇄ Claude Code skill bridge (install-skill / skill-export).",
   "main": "dist/cli.js",
   "bin": {
@@ -54,7 +54,7 @@
   },
   "dependencies": {
     "@ai-dossier/core": "^1.5.0",
-    "@ai-dossier/sched": "^0.12.0",
+    "@ai-dossier/sched": "^0.13.0",
     "commander": "^12.1.0",
     "yaml": "^2.8.3"
   },