@caddis/cli 0.4.25 → 0.4.27

package/bundles/antigravity-plugin/plugin.json

@@ -1,5 +1,5 @@
 {
   "name": "caddis",
-  "version": "1.3.114",
+  "version": "1.3.116",
   "description": "caddis — agent-agnostic dev harness as an Antigravity (agy) plugin: TDD skills + commands, single-sourced with the Claude Code plugin."
 }

package/bundles/antigravity-plugin/skills/adopt-app/SKILL.md

@@ -65,6 +65,10 @@ facts - services, scheduled tasks, web sites - can only be read on the box itsel
   recorded as NOT SCANNED, never as empty, and it prevents later checks from passing.
 - **Neither committed nor ignored.** Folders in this state are the real hazard: one `git add -A`
   puts them in the history for ever. A filename pattern cannot find them - only git can.
+- **COMMITTED versus not committed**, on every row of "what the repository must not carry". Only
+  the committed rows need a history rewrite; the rest need a `.gitignore` line, or already have
+  one. The distinction is per FILE, because one folder is routinely both: committed documents
+  beside ignored output. Read the row's state before planning any work.
 - **Possible credentials.** The heuristics are tuned to be readable rather than exhaustive: they
   skip comments, type declarations, template references and expressions. **Read every file they
   flag yourself.** A credential that was ever committed must be ROTATED, not only deleted.

package/bundles/antigravity-plugin/skills/adopt-app/references/standard.md

@@ -59,12 +59,25 @@ wrong branch before this is answered means CI builds and tests code nobody ships
 
 **Blocking.**
 
-**Decided by:** `GAP` if either of these is true: a top-level folder that IS git-tracked also
+**Decided by:** `GAP` if either of these is true. First, a FILE that git actually tracks also
 matches an excludable content category (dependency, runtime, build-output, cache, db-data,
-archive, data-export, or media - `log` is exempted here) - i.e. something was committed that
-should not have been; or a top-level folder is git-UNTRACKED, is not `.git`, and is at least
-`-UntrackedThresholdMB` (default 10 MB). Otherwise `PASS` - except a `PASS` is downgraded to
-`ASK` if any top-level folder was scanned with `-SkipFolder` (see "Coverage" below).
+archive, data-export or media - `log` is exempt) - something was committed that should not have
+been. Second, a top-level folder is git-untracked, is not `.git`, and is at least
+`-UntrackedThresholdMB` (default 10 MB). Otherwise `PASS` - downgraded to `ASK` if any folder was
+skipped with `-SkipFolder`, or if git could not be run (see "Coverage" below).
+
+**Tracked state is per FILE, and that distinction is the whole check.** An earlier version asked
+git for the state of the FOLDER and applied it to every byte inside. A folder is routinely both
+things at once: on a real app, `reports/` held 40 committed markdown documents beside 1,060 MB of
+correctly-ignored run output, under an ignore rule that already existed. The check reported
+`COMMITTED data-export: reports (1018.47 MB)`. The true figure was 0.01 MB in 4 files - wrong by
+about seven thousand times, and wrong in the expensive direction, because it said "rewrite your
+history" when the answer was "nothing to do". The summary now prints `COMMITTED` or
+`not committed` per row, and only the first kind needs a rewrite.
+
+`git check-ignore` alone cannot make this distinction: by default it does not report a path that
+git tracks, so the same folder answers "not ignored" plainly and "ignored" under `--no-index`.
+Both answers are true. Only a per-file tracked set says which files are which.
 
 **Why it is on the list:** a `.gitignore` added later does not remove what is already committed -
 that needs a history rewrite. And a folder that is neither committed nor ignored is the genuinely

package/bundles/antigravity-plugin/skills/adopt-app/scripts/AdoptCommon.ps1

@@ -146,6 +146,7 @@ $script:AdoptScanBlock = {
         healthHits    = @()
         totalFiles    = 0
         totalMB       = 0.0
+        trackedKnown  = $false
         probed        = 0
         git           = @{ isRepo = $false }
     }
@@ -232,6 +233,22 @@ $script:AdoptScanBlock = {
         else { $g.upstream = $null; $g.unpushed = $null }
     }
 
+    # ---- which files git actually tracks ---------------------------------------------
+    # PER FILE, not per folder. A folder is routinely BOTH: `reports/` carried 40 committed
+    # markdown documents and a gigabyte of correctly-ignored run output, and attributing the
+    # folder's whole size to its folder-level state reported "1018 MB of data exports are
+    # committed" when the real figure was 0.15 MB. That is not a rounding error, it is a
+    # different finding - and it would have sent someone to rewrite history for nothing.
+    $trackedSet = New-Object 'System.Collections.Generic.HashSet[string]' ([StringComparer]::OrdinalIgnoreCase)
+    $trackedKnown = $false
+    if ($result.git.isRepo -and $gitAvailable) {
+        $ls = @(& git -c safe.directory=* -C $root ls-files 2>&1)
+        if ($LASTEXITCODE -eq 0) {
+            $trackedKnown = $true
+            foreach ($f in $ls) { [void]$trackedSet.Add(("$f" -replace '/', '\')) }
+        }
+    }
+
     # ---- one bounded walk per top-level folder --------------------------------------
     $tops = @()
     try { $tops = @(Get-ChildItem -LiteralPath $root -Force -ErrorAction Stop | Where-Object { $_.PSIsContainer }) }
@@ -301,7 +318,7 @@ $script:AdoptScanBlock = {
 
         foreach ($spec in $ExcludableSpecs) {
             if ($rel -match $spec.pattern) {
-                $result.excludable += @{ path = $rel; category = $spec.category; bytes = $file.Length }
+                $result.excludable += @{ path = $rel; category = $spec.category; bytes = $file.Length; tracked = $trackedSet.Contains($rel) }
                 break
             }
         }
@@ -345,7 +362,7 @@ $script:AdoptScanBlock = {
                 if ($rel -notmatch $SkipPattern) { & $classify $k $rel }
                 else {
                     foreach ($spec in $ExcludableSpecs) {
-                        if ($rel -match $spec.pattern) { $result.excludable += @{ path = $rel; category = $spec.category; bytes = $k.Length }; break }
+                        if ($rel -match $spec.pattern) { $result.excludable += @{ path = $rel; category = $spec.category; bytes = $k.Length; tracked = $trackedSet.Contains($rel) }; break }
                     }
                 }
 
@@ -416,6 +433,7 @@ $script:AdoptScanBlock = {
         }
     }
     $result.totalMB = [math]::Round($result.totalMB, 2)
+    $result.trackedKnown = $trackedKnown
     $result.paths = @($detectPaths)
     if ($detectPaths.Count -ge $DetectPathCap) {
         $result.partial = $true

package/bundles/antigravity-plugin/skills/adopt-app/scripts/Get-AppInventory.ps1

@@ -116,17 +116,23 @@ $inventory = [ordered]@{
 
 # Roll the excludable file list up per top folder. A list of 40,000 paths is unreadable and
 # the decision is taken per folder anyway.
+# Grouped by folder, category AND whether git tracks the file. A folder is routinely both:
+# committed documents beside a gigabyte of correctly-ignored output. Rolling those together
+# and labelling the total with the folder's state turned 0.15 MB of committed markdown into
+# a report of "1018 MB of data exports are committed".
 $byFolder = @{}
 foreach ($e in @($scan.excludable)) {
     $top = ($e.path -split '[\\/]')[0]
-    $key = "$top|$($e.category)"
-    if (-not $byFolder.ContainsKey($key)) { $byFolder[$key] = @{ folder = $top; category = $e.category; files = 0; bytes = [long]0 } }
+    $isTracked = [bool](Get-AdoptProp $e 'tracked' $false)
+    $key = "$top|$($e.category)|$isTracked"
+    if (-not $byFolder.ContainsKey($key)) { $byFolder[$key] = @{ folder = $top; category = $e.category; tracked = $isTracked; files = 0; bytes = [long]0 } }
     $byFolder[$key].files++
     $byFolder[$key].bytes += [long]$e.bytes
 }
 $inventory.excludableSummary = @($byFolder.Values |
-        ForEach-Object { [ordered]@{ folder = $_.folder; category = $_.category; files = $_.files; mb = [math]::Round($_.bytes / 1MB, 2) } } |
+        ForEach-Object { [ordered]@{ folder = $_.folder; category = $_.category; tracked = $_.tracked; files = $_.files; mb = [math]::Round($_.bytes / 1MB, 2) } } |
         Sort-Object { -1 * $_.mb })
+$inventory.trackedKnown = [bool](Get-AdoptProp $scan 'trackedKnown' $false)
 
 $out = Write-AdoptArtifact -Dir $dir -FileName 'inventory.json' -Object $inventory
 
@@ -181,8 +187,12 @@ if ($ignoredBig.Count -gt 0) {
 Write-AdoptHeading 'What the repository must not carry'
 if ($inventory.excludableSummary.Count -eq 0) { Write-Host "  nothing found" }
 foreach ($e in @($inventory.excludableSummary | Select-Object -First 15)) {
-    Write-Host ("    {0,10:N1} MB  {1,7} files  {2,-13} {3}" -f $e.mb, $e.files, $e.category, $e.folder)
+    $state = if ($e.tracked) { 'COMMITTED' } else { 'not committed' }
+    $colour = if ($e.tracked) { 'Yellow' } else { 'Gray' }
+    Write-Host ("    {0,10:N1} MB  {1,7} files  {2,-13} {3,-14} {4}" -f $e.mb, $e.files, $e.category, $state, $e.folder) -ForegroundColor $colour
 }
+Write-Host "  Only the COMMITTED rows need a history rewrite. The rest need a .gitignore line," -ForegroundColor DarkGray
+Write-Host "  or already have one." -ForegroundColor DarkGray
 
 Write-AdoptHeading 'Possible credentials'
 if ($inventory.secretsSuspected.Count -eq 0) { Write-Host "  none found by the heuristics - which is not the same as none present" }

package/bundles/antigravity-plugin/skills/adopt-app/scripts/New-AdoptionPlan.ps1

@@ -73,10 +73,8 @@ if ($so -and $so.verdict -eq 'GAP') {
         $lines += "$($f.path) - $($f.mb) MB, neither committed nor ignored: commit it, ignore it, or move it out of the tree"
     }
     foreach ($e in @($inv.excludableSummary | Select-Object -First 10)) {
-        $g = @($inv.size.folders | Where-Object { $_.path -eq $e.folder })
-        if ($g.Count -gt 0 -and $g[0].git -eq 'tracked') {
-            $lines += "$($e.folder) - $($e.mb) MB of $($e.category) is COMMITTED: needs a history rewrite, not a .gitignore line"
-        }
+        if (-not (Get-AdoptProp $e 'tracked' $false)) { continue }
+        $lines += "$($e.folder) - $($e.files) file(s), $($e.mb) MB of $($e.category) is COMMITTED: a .gitignore line does not remove it, only a history rewrite does"
     }
     Add-Step 'content-policy' 'Settle what the repository may hold' @('answers') `
         'A .gitignore added later does not remove what is already committed, and a folder that is neither committed nor ignored is one careless command away from being permanent.' `

package/bundles/antigravity-plugin/skills/adopt-app/scripts/Test-AppConformance.ps1

@@ -72,10 +72,12 @@ $componentProfiles = @($prof.components | ForEach-Object { $_.profile })
 $isBatchOnly = ($componentProfiles.Count -gt 0) -and (@($componentProfiles | Where-Object { $_ -notmatch 'batch' }).Count -eq 0)
 
 $untrackedBig = @($folders | Where-Object { $_.git -eq 'untracked' -and $_.path -ne '.git' -and $_.mb -ge $UntrackedThresholdMB })
+# Per FILE, from git itself - not "this folder is tracked, so all of its bytes are".
 $trackedJunk = @()
 foreach ($e in @($inv.excludableSummary)) {
-    $f = @($folders | Where-Object { $_.path -eq $e.folder })
-    if ($f.Count -gt 0 -and $f[0].git -eq 'tracked' -and $e.category -ne 'log') { $trackedJunk += $e }
+    if (-not (Get-AdoptProp $e 'tracked' $false)) { continue }
+    if ($e.category -eq 'log') { continue }
+    $trackedJunk += $e
 }
 $ignoredHeavy = @($folders | Where-Object { $_.git -eq 'ignored' -and $_.mb -ge 100 })
 

package/bundles/codex/.codex/skills/devops/adopt-app/SKILL.md

@@ -65,6 +65,10 @@ facts - services, scheduled tasks, web sites - can only be read on the box itsel
   recorded as NOT SCANNED, never as empty, and it prevents later checks from passing.
 - **Neither committed nor ignored.** Folders in this state are the real hazard: one `git add -A`
   puts them in the history for ever. A filename pattern cannot find them - only git can.
+- **COMMITTED versus not committed**, on every row of "what the repository must not carry". Only
+  the committed rows need a history rewrite; the rest need a `.gitignore` line, or already have
+  one. The distinction is per FILE, because one folder is routinely both: committed documents
+  beside ignored output. Read the row's state before planning any work.
 - **Possible credentials.** The heuristics are tuned to be readable rather than exhaustive: they
   skip comments, type declarations, template references and expressions. **Read every file they
   flag yourself.** A credential that was ever committed must be ROTATED, not only deleted.

package/bundles/codex/.codex/skills/devops/adopt-app/references/standard.md

@@ -59,12 +59,25 @@ wrong branch before this is answered means CI builds and tests code nobody ships
 
 **Blocking.**
 
-**Decided by:** `GAP` if either of these is true: a top-level folder that IS git-tracked also
+**Decided by:** `GAP` if either of these is true. First, a FILE that git actually tracks also
 matches an excludable content category (dependency, runtime, build-output, cache, db-data,
-archive, data-export, or media - `log` is exempted here) - i.e. something was committed that
-should not have been; or a top-level folder is git-UNTRACKED, is not `.git`, and is at least
-`-UntrackedThresholdMB` (default 10 MB). Otherwise `PASS` - except a `PASS` is downgraded to
-`ASK` if any top-level folder was scanned with `-SkipFolder` (see "Coverage" below).
+archive, data-export or media - `log` is exempt) - something was committed that should not have
+been. Second, a top-level folder is git-untracked, is not `.git`, and is at least
+`-UntrackedThresholdMB` (default 10 MB). Otherwise `PASS` - downgraded to `ASK` if any folder was
+skipped with `-SkipFolder`, or if git could not be run (see "Coverage" below).
+
+**Tracked state is per FILE, and that distinction is the whole check.** An earlier version asked
+git for the state of the FOLDER and applied it to every byte inside. A folder is routinely both
+things at once: on a real app, `reports/` held 40 committed markdown documents beside 1,060 MB of
+correctly-ignored run output, under an ignore rule that already existed. The check reported
+`COMMITTED data-export: reports (1018.47 MB)`. The true figure was 0.01 MB in 4 files - wrong by
+about seven thousand times, and wrong in the expensive direction, because it said "rewrite your
+history" when the answer was "nothing to do". The summary now prints `COMMITTED` or
+`not committed` per row, and only the first kind needs a rewrite.
+
+`git check-ignore` alone cannot make this distinction: by default it does not report a path that
+git tracks, so the same folder answers "not ignored" plainly and "ignored" under `--no-index`.
+Both answers are true. Only a per-file tracked set says which files are which.
 
 **Why it is on the list:** a `.gitignore` added later does not remove what is already committed -
 that needs a history rewrite. And a folder that is neither committed nor ignored is the genuinely

package/bundles/codex/.codex/skills/devops/adopt-app/scripts/AdoptCommon.ps1

@@ -146,6 +146,7 @@ $script:AdoptScanBlock = {
         healthHits    = @()
         totalFiles    = 0
         totalMB       = 0.0
+        trackedKnown  = $false
         probed        = 0
         git           = @{ isRepo = $false }
     }
@@ -232,6 +233,22 @@ $script:AdoptScanBlock = {
         else { $g.upstream = $null; $g.unpushed = $null }
     }
 
+    # ---- which files git actually tracks ---------------------------------------------
+    # PER FILE, not per folder. A folder is routinely BOTH: `reports/` carried 40 committed
+    # markdown documents and a gigabyte of correctly-ignored run output, and attributing the
+    # folder's whole size to its folder-level state reported "1018 MB of data exports are
+    # committed" when the real figure was 0.15 MB. That is not a rounding error, it is a
+    # different finding - and it would have sent someone to rewrite history for nothing.
+    $trackedSet = New-Object 'System.Collections.Generic.HashSet[string]' ([StringComparer]::OrdinalIgnoreCase)
+    $trackedKnown = $false
+    if ($result.git.isRepo -and $gitAvailable) {
+        $ls = @(& git -c safe.directory=* -C $root ls-files 2>&1)
+        if ($LASTEXITCODE -eq 0) {
+            $trackedKnown = $true
+            foreach ($f in $ls) { [void]$trackedSet.Add(("$f" -replace '/', '\')) }
+        }
+    }
+
     # ---- one bounded walk per top-level folder --------------------------------------
     $tops = @()
     try { $tops = @(Get-ChildItem -LiteralPath $root -Force -ErrorAction Stop | Where-Object { $_.PSIsContainer }) }
@@ -301,7 +318,7 @@ $script:AdoptScanBlock = {
 
         foreach ($spec in $ExcludableSpecs) {
             if ($rel -match $spec.pattern) {
-                $result.excludable += @{ path = $rel; category = $spec.category; bytes = $file.Length }
+                $result.excludable += @{ path = $rel; category = $spec.category; bytes = $file.Length; tracked = $trackedSet.Contains($rel) }
                 break
             }
         }
@@ -345,7 +362,7 @@ $script:AdoptScanBlock = {
                 if ($rel -notmatch $SkipPattern) { & $classify $k $rel }
                 else {
                     foreach ($spec in $ExcludableSpecs) {
-                        if ($rel -match $spec.pattern) { $result.excludable += @{ path = $rel; category = $spec.category; bytes = $k.Length }; break }
+                        if ($rel -match $spec.pattern) { $result.excludable += @{ path = $rel; category = $spec.category; bytes = $k.Length; tracked = $trackedSet.Contains($rel) }; break }
                     }
                 }
 
@@ -416,6 +433,7 @@ $script:AdoptScanBlock = {
         }
     }
     $result.totalMB = [math]::Round($result.totalMB, 2)
+    $result.trackedKnown = $trackedKnown
     $result.paths = @($detectPaths)
     if ($detectPaths.Count -ge $DetectPathCap) {
         $result.partial = $true

package/bundles/codex/.codex/skills/devops/adopt-app/scripts/Get-AppInventory.ps1

@@ -116,17 +116,23 @@ $inventory = [ordered]@{
 
 # Roll the excludable file list up per top folder. A list of 40,000 paths is unreadable and
 # the decision is taken per folder anyway.
+# Grouped by folder, category AND whether git tracks the file. A folder is routinely both:
+# committed documents beside a gigabyte of correctly-ignored output. Rolling those together
+# and labelling the total with the folder's state turned 0.15 MB of committed markdown into
+# a report of "1018 MB of data exports are committed".
 $byFolder = @{}
 foreach ($e in @($scan.excludable)) {
     $top = ($e.path -split '[\\/]')[0]
-    $key = "$top|$($e.category)"
-    if (-not $byFolder.ContainsKey($key)) { $byFolder[$key] = @{ folder = $top; category = $e.category; files = 0; bytes = [long]0 } }
+    $isTracked = [bool](Get-AdoptProp $e 'tracked' $false)
+    $key = "$top|$($e.category)|$isTracked"
+    if (-not $byFolder.ContainsKey($key)) { $byFolder[$key] = @{ folder = $top; category = $e.category; tracked = $isTracked; files = 0; bytes = [long]0 } }
     $byFolder[$key].files++
     $byFolder[$key].bytes += [long]$e.bytes
 }
 $inventory.excludableSummary = @($byFolder.Values |
-        ForEach-Object { [ordered]@{ folder = $_.folder; category = $_.category; files = $_.files; mb = [math]::Round($_.bytes / 1MB, 2) } } |
+        ForEach-Object { [ordered]@{ folder = $_.folder; category = $_.category; tracked = $_.tracked; files = $_.files; mb = [math]::Round($_.bytes / 1MB, 2) } } |
         Sort-Object { -1 * $_.mb })
+$inventory.trackedKnown = [bool](Get-AdoptProp $scan 'trackedKnown' $false)
 
 $out = Write-AdoptArtifact -Dir $dir -FileName 'inventory.json' -Object $inventory
 
@@ -181,8 +187,12 @@ if ($ignoredBig.Count -gt 0) {
 Write-AdoptHeading 'What the repository must not carry'
 if ($inventory.excludableSummary.Count -eq 0) { Write-Host "  nothing found" }
 foreach ($e in @($inventory.excludableSummary | Select-Object -First 15)) {
-    Write-Host ("    {0,10:N1} MB  {1,7} files  {2,-13} {3}" -f $e.mb, $e.files, $e.category, $e.folder)
+    $state = if ($e.tracked) { 'COMMITTED' } else { 'not committed' }
+    $colour = if ($e.tracked) { 'Yellow' } else { 'Gray' }
+    Write-Host ("    {0,10:N1} MB  {1,7} files  {2,-13} {3,-14} {4}" -f $e.mb, $e.files, $e.category, $state, $e.folder) -ForegroundColor $colour
 }
+Write-Host "  Only the COMMITTED rows need a history rewrite. The rest need a .gitignore line," -ForegroundColor DarkGray
+Write-Host "  or already have one." -ForegroundColor DarkGray
 
 Write-AdoptHeading 'Possible credentials'
 if ($inventory.secretsSuspected.Count -eq 0) { Write-Host "  none found by the heuristics - which is not the same as none present" }

package/bundles/codex/.codex/skills/devops/adopt-app/scripts/New-AdoptionPlan.ps1

@@ -73,10 +73,8 @@ if ($so -and $so.verdict -eq 'GAP') {
         $lines += "$($f.path) - $($f.mb) MB, neither committed nor ignored: commit it, ignore it, or move it out of the tree"
     }
     foreach ($e in @($inv.excludableSummary | Select-Object -First 10)) {
-        $g = @($inv.size.folders | Where-Object { $_.path -eq $e.folder })
-        if ($g.Count -gt 0 -and $g[0].git -eq 'tracked') {
-            $lines += "$($e.folder) - $($e.mb) MB of $($e.category) is COMMITTED: needs a history rewrite, not a .gitignore line"
-        }
+        if (-not (Get-AdoptProp $e 'tracked' $false)) { continue }
+        $lines += "$($e.folder) - $($e.files) file(s), $($e.mb) MB of $($e.category) is COMMITTED: a .gitignore line does not remove it, only a history rewrite does"
     }
     Add-Step 'content-policy' 'Settle what the repository may hold' @('answers') `
         'A .gitignore added later does not remove what is already committed, and a folder that is neither committed nor ignored is one careless command away from being permanent.' `

package/bundles/codex/.codex/skills/devops/adopt-app/scripts/Test-AppConformance.ps1

@@ -72,10 +72,12 @@ $componentProfiles = @($prof.components | ForEach-Object { $_.profile })
 $isBatchOnly = ($componentProfiles.Count -gt 0) -and (@($componentProfiles | Where-Object { $_ -notmatch 'batch' }).Count -eq 0)
 
 $untrackedBig = @($folders | Where-Object { $_.git -eq 'untracked' -and $_.path -ne '.git' -and $_.mb -ge $UntrackedThresholdMB })
+# Per FILE, from git itself - not "this folder is tracked, so all of its bytes are".
 $trackedJunk = @()
 foreach ($e in @($inv.excludableSummary)) {
-    $f = @($folders | Where-Object { $_.path -eq $e.folder })
-    if ($f.Count -gt 0 -and $f[0].git -eq 'tracked' -and $e.category -ne 'log') { $trackedJunk += $e }
+    if (-not (Get-AdoptProp $e 'tracked' $false)) { continue }
+    if ($e.category -eq 'log') { continue }
+    $trackedJunk += $e
 }
 $ignoredHeavy = @($folders | Where-Object { $_.git -eq 'ignored' -and $_.mb -ge 100 })
 

package/bundles/manifest.json

@@ -1,7 +1,7 @@
 {
-  "poolVersion": "1.3.114",
+  "poolVersion": "1.3.116",
   "bundles": {
-    "antigravity-plugin": "1.3.114",
+    "antigravity-plugin": "1.3.116",
     "antigravity-plugin-extras": "1.3.35",
     "codex": "unknown"
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@caddis/cli",
-  "version": "0.4.25",
+  "version": "0.4.27",
   "description": "Install, update and diagnose the caddis dev harness across every coding agent you use (Claude Code, agy/Antigravity, and more).",
   "keywords": [
     "caddis",