@bli-cockpit/cli 0.1.31 → 0.1.32

package/dist/adapters/attribution-core.js

@@ -1,5 +1,6 @@
 import crypto from "node:crypto";
 import path from "node:path";
+import { normalizeGitOrigin, repoFingerprintFromOrigin, repoLabelFromOrigin, stableWorktreeFingerprint, } from "../repo-identity.js";
 /**
  * Shared deterministic attribution core for agent session transcripts (Codex
  * and Claude Code). Both adapters extract source-shaped signals, normalize them
@@ -73,6 +74,12 @@ export function scoreSignalsAgainstWorktrees(signals, worktrees, options = {}) {
     const secondBestScore = scored[1]?.score ?? 0;
     if (!best || best.score === 0) {
         if (repoPathAbsentFromDisk([...signals.cwds, ...signals.workspaceRoots], options.collectionRoots ?? [])) {
+            const transcriptFallback = fallbackToTranscriptOriginForDeletedRepo({
+                originLabel,
+                signals,
+            });
+            if (transcriptFallback)
+                return transcriptFallback;
             return skipped("repo_not_on_disk");
         }
         const reason = signals.cwds.length > 0 || signals.workspaceRoots.length > 0
@@ -173,6 +180,49 @@ function fallbackToKnownRepoPrimaryWorkContext(options) {
         worktree: primary,
     };
 }
+/**
+ * Reconstructs a repo/worktree identity from transcript origin metadata only
+ * after the caller has already proven a recorded cwd/workspace root sits under
+ * an operator-approved collection root. The origin is never allowed to widen
+ * consent by itself: it only rescues sessions for repos that were once inside
+ * the approved scan boundary but have since been deleted from disk, where the
+ * transcript is still durable enough to carry the normalized remote identity.
+ */
+function fallbackToTranscriptOriginForDeletedRepo(options) {
+    const origins = [
+        ...new Set(options.signals.originUrls
+            .map((origin) => normalizeGitOrigin(origin))
+            .filter(Boolean)),
+    ];
+    if (origins.length === 0)
+        return null;
+    if (origins.length > 1)
+        return skipped("multiple_transcript_origins");
+    const recordedPath = options.signals.workspaceRoots[0] ?? options.signals.cwds[0] ?? null;
+    if (!recordedPath)
+        return null;
+    const resolvedPath = path.resolve(recordedPath);
+    const origin = origins[0] ?? "";
+    return {
+        state: "attributed_fallback",
+        reason: "transcript_origin_fallback",
+        signals: ["transcript_origin_fallback", options.originLabel],
+        attribution_score: clampScore(SCORE_ORIGIN_MATCH),
+        path_score: 0,
+        worktree: {
+            requested_path: resolvedPath,
+            repo_root: resolvedPath,
+            repo_label: repoLabelFromOrigin(origin),
+            repo_fingerprint: repoFingerprintFromOrigin(origin),
+            repo_origin_url: origin,
+            branch: options.signals.branches[0] ?? "unknown",
+            head_sha: options.signals.headShas[0] ?? null,
+            worktree_label: path.basename(resolvedPath),
+            worktree_fingerprint: stableWorktreeFingerprint(resolvedPath),
+            worktree_is_primary: false,
+        },
+    };
+}
 /**
  * For each path signal, the single worktree whose root most specifically
  * contains it (the longest containing root). Returns the set of worktree

package/dist/repo-identity.js

@@ -32,10 +32,9 @@ export async function resolveRepoWorktreeIdentity(repoRoot) {
     const repoLabel = repoOriginUrl
         ? repoLabelFromOrigin(repoOriginUrl)
         : path.basename(resolvedRoot);
-    const repoMaterial = repoOriginUrl
-        ? `origin:${repoOriginUrl}`
-        : `local:${sha256(commonGitDir ?? resolvedRoot)}`;
-    const repoFingerprint = `repo-${sha256(repoMaterial).slice(0, 24)}`;
+    const repoFingerprint = repoOriginUrl
+        ? repoFingerprintFromOrigin(repoOriginUrl)
+        : `repo-${sha256(`local:${sha256(commonGitDir ?? resolvedRoot)}`).slice(0, 24)}`;
     const gitFilePath = path.join(resolvedRoot, ".git");
     const worktreeIsPrimary = await fs.stat(gitFilePath).then((stat) => stat.isDirectory(), () => false);
     return {
@@ -162,6 +161,10 @@ export async function stableWorktreeRoot(repoRoot) {
 export function stableWorktreeFingerprint(repoRoot) {
     return `wt-${sha256(`worktree:${normalizeFingerprintPath(repoRoot)}`).slice(0, 24)}`;
 }
+export function repoFingerprintFromOrigin(origin) {
+    const normalizedOrigin = normalizeGitOrigin(origin);
+    return `repo-${sha256(`origin:${normalizedOrigin}`).slice(0, 24)}`;
+}
 async function resolveBranchFromHead(repoRoot) {
     try {
         const gitPath = path.join(repoRoot, ".git");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/cli",
-  "version": "0.1.31",
+  "version": "0.1.32",
   "private": false,
   "type": "module",
   "bin": {