@amityco/social-plus-vise 0.11.0 → 0.12.2

package/dist/tools/ast.js

@@ -67,13 +67,38 @@ function getParser(language) {
     }
     return parser;
 }
+// node-tree-sitter's native parser rejects sufficiently large inputs with a
+// native "Invalid argument" error (~32KB string limit). It IS catchable, but an
+// unguarded caller would otherwise abort the whole validate run. We short-circuit
+// before the native call so callers get a clean, documented, catchable error and
+// can degrade to regex-only for that file. Real codebases routinely have files
+// past this size (1000+ line activities/view controllers).
+export const MAX_PARSE_BYTES = 30000;
 /**
  * Parse source content into a tree-sitter syntax tree.
+ * Throws on oversized input (see MAX_PARSE_BYTES) — callers that want graceful
+ * degradation should use tryParse or wrap this in try/catch.
  */
 export function parse(language, source) {
+    if (Buffer.byteLength(source, "utf8") > MAX_PARSE_BYTES) {
+        throw new Error(`source exceeds tree-sitter parse limit (${Buffer.byteLength(source, "utf8")} bytes > ${MAX_PARSE_BYTES})`);
+    }
     const parser = getParser(language);
     return parser.parse(source);
 }
+/**
+ * Parse, returning null instead of throwing when the source can't be parsed
+ * (oversized input, native parser error). Lets validators skip AST analysis for
+ * one file and fall back to regex without aborting the run.
+ */
+export function tryParse(language, source) {
+    try {
+        return parse(language, source);
+    }
+    catch {
+        return null;
+    }
+}
 /**
  * Find all call expressions in the tree whose callee matches a pattern.
  * Returns normalised callee strings and argument nodes.

package/dist/tools/compliance.js

@@ -2,9 +2,11 @@ import { createHash, randomUUID } from "node:crypto";
 import { mkdir, readdir, readFile, rm, stat, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { assessProjectCompleteness } from "../capabilities.js";
 import { classifyOutcome } from "../outcomes.js";
 import { objectInput, optionalStringField, stringField, textResult } from "../types.js";
 import { packageVersion } from "../version.js";
+import { readDesignContract } from "./design.js";
 import { inspectProject, validateSetup } from "./project.js";
 const complianceDirName = "sp-vise";
 const attestationsDirName = "attestations";
@@ -230,6 +232,7 @@ export async function initCompliance(repoPath, request, surfacePath) {
     const refs = rules.map(ruleRef); // minimal shape — stable digest input
     const fileRefs = rules.map(ruleRefForFile); // adds title for human/agent readers
     const engagement = await readEngagement(repoRoot);
+    const designContract = await readDesignContract(repoRoot);
     const compliance = {
         schema_version: schemaVersion,
         foundry_version: packageVersion,
@@ -240,6 +243,15 @@ export async function initCompliance(repoPath, request, surfacePath) {
         engagement_id: engagement?.engagement_id,
         surface: inspection.selectedSurface ? { path: inspection.selectedSurface.path, platforms: inspection.selectedSurface.platforms } : undefined,
         rules: fileRefs, // file carries titles
+        design_contract: designContract
+            ? {
+                digest: designContract.digest,
+                strength: designContract.stats.strength,
+                source_kind: designContract.source.kind,
+                declared_tokens: designContract.stats.declared_tokens,
+                inferred_tokens: designContract.stats.inferred_tokens,
+            }
+            : undefined,
     };
     await mkdir(attestationsDir(repoRoot), { recursive: true });
     await writeJson(compliancePath(repoRoot), compliance);
@@ -267,6 +279,7 @@ export async function initCompliance(repoPath, request, surfacePath) {
         surfacePath: inspection.selectedSurface?.path,
         rules: refs.length,
         engagement_id: engagement?.engagement_id,
+        ...(compliance.design_contract && { design_contract: compliance.design_contract }),
         ...(warnings.length > 0 && { warnings }),
         nextStep: "Run vise check, then implement until rules pass deterministically or are attested.",
     };
@@ -426,6 +439,10 @@ export async function checkCompliance(repoPath) {
     const needsAttestation = results.some((result) => result.status === "attestation-needed" || result.status === "stale");
     // Precedence: blocked (exit 3) > deterministic-failures (2) > needs-attestation (1) > green (0).
     // Contract drift (exit 4) is handled earlier and short-circuits the loop.
+    // Advisory feature-completeness — surfaced but NEVER part of status/exitCode
+    // (completeness is a "this is missing" claim, structurally FP-prone; see the
+    // validation-boundaries principle). Failure to assess is silently ignored.
+    const completeness = (await assessProjectCompleteness(inspection.effectiveRoot, compliance.outcome).catch(() => null)) ?? undefined;
     // Blocked wins because the agent cannot proceed without customer input;
     // surfacing a smaller failure first would distract from the real blocker.
     return {
@@ -441,6 +458,7 @@ export async function checkCompliance(repoPath) {
         surfacePath: compliance.surface?.path,
         summary,
         rules: results,
+        ...(completeness && (completeness.missing.length > 0 || completeness.optedOut.length > 0 || completeness.present.length > 0) ? { completeness } : {}),
     };
 }
 export async function syncCompliance(repoPath) {
@@ -537,12 +555,14 @@ export async function statusCompliance(repoPath) {
     const repoRoot = path.resolve(repoPath);
     const check = await checkCompliance(repoPath);
     const engagement = await readEngagement(repoRoot);
+    const compliance = await readCompliance(repoRoot).catch(() => null);
     return {
         status: check.status,
         exitCode: check.exitCode,
         outcome: check.outcome,
         surfacePath: check.surfacePath,
         summary: check.summary,
+        ...(compliance?.design_contract && { design_contract: compliance.design_contract }),
         ...(engagement && {
             engagement: {
                 engagement_id: engagement.engagement_id,