@de-otio/repo-aegis-core 0.2.0

package/dist/registry.test.js

@@ -0,0 +1,316 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright (C) 2026 Richard Myers and contributors.
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { mkdtempSync, writeFileSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { loadRegistry, isActive, resolveEngagement, MAX_SUPPORTED_REGISTRY_SCHEMA_VERSION, } from "./registry.js";
+import { RegistryNotFoundError, RegistryParseError, RegistryEncryptedError, } from "./exceptions.js";
+let tmp;
+before(() => {
+    tmp = mkdtempSync(join(tmpdir(), "repo-aegis-registry-"));
+});
+after(() => {
+    rmSync(tmp, { recursive: true, force: true });
+});
+function writeYaml(name, body) {
+    const p = join(tmp, name);
+    writeFileSync(p, body);
+    return p;
+}
+describe("loadRegistry", () => {
+    it("loads a minimal valid registry with alwaysBlock", () => {
+        const path = writeYaml("minimal.yaml", `
+always_block:
+  - PROJECT-CODENAME-ALPHA
+
+engagements:
+  - id: customer-a
+    name: Customer A
+    markers:
+      - acme-corp
+`);
+        const reg = loadRegistry(path);
+        assert.equal(reg.engagements.length, 1);
+        assert.equal(reg.engagements[0].id, "customer-a");
+        assert.equal(reg.alwaysBlock.length, 1);
+        assert.equal(reg.alwaysBlock[0], "PROJECT-CODENAME-ALPHA");
+    });
+    it("treats missing always_block as empty", () => {
+        const path = writeYaml("no-always.yaml", `engagements:
+  - id: customer-a
+    name: Customer A
+    markers: [acme]`);
+        const reg = loadRegistry(path);
+        assert.equal(reg.alwaysBlock.length, 0);
+    });
+    it("throws RegistryNotFoundError when file missing", () => {
+        assert.throws(() => loadRegistry(join(tmp, "nonexistent.yaml")), RegistryNotFoundError);
+    });
+    it("throws RegistryEncryptedError when only <path>.age exists", () => {
+        const plain = join(tmp, "encrypted-only.yaml");
+        const cipher = `${plain}.age`;
+        writeFileSync(cipher, "age-encrypted-payload");
+        assert.throws(() => loadRegistry(plain), (err) => err instanceof RegistryEncryptedError &&
+            err.code === "REGISTRY_ENCRYPTED" &&
+            err.path === plain &&
+            err.ciphertextPath === cipher &&
+            /registry decrypt/.test(err.message));
+        rmSync(cipher);
+    });
+    it("prefers RegistryEncryptedError over RegistryNotFoundError when both states would apply", () => {
+        // i.e. plaintext absent + ciphertext present => encrypted error,
+        // not "not found". The agent gets a recoverable signal.
+        const plain = join(tmp, "encrypted-vs-missing.yaml");
+        writeFileSync(`${plain}.age`, "ciphertext");
+        assert.throws(() => loadRegistry(plain), RegistryEncryptedError);
+        rmSync(`${plain}.age`);
+    });
+    it("does not throw RegistryEncryptedError when plaintext exists alongside .age", () => {
+        // Defensive: if for any reason both files coexist, the plaintext
+        // wins (loadRegistry's whole job is to read the plaintext). The
+        // CLI's encrypt/decrypt flow ensures this doesn't happen, but the
+        // load path must not surprise callers.
+        const plain = writeYaml("both-exist.yaml", `engagements:
+  - id: customer-a
+    name: Customer A
+    markers: [foo]`);
+        writeFileSync(`${plain}.age`, "ciphertext");
+        const reg = loadRegistry(plain);
+        assert.equal(reg.engagements.length, 1);
+        rmSync(`${plain}.age`);
+    });
+    it("throws RegistryParseError for invalid YAML", () => {
+        const path = writeYaml("invalid.yaml", "not: valid: yaml: at: all:");
+        assert.throws(() => loadRegistry(path), RegistryParseError);
+    });
+    it("throws when missing top-level engagements key", () => {
+        const path = writeYaml("missing-engagements.yaml", "always_block:\n  - foo");
+        assert.throws(() => loadRegistry(path), RegistryParseError);
+    });
+    it("rejects engagement with id _always (reserved)", () => {
+        const path = writeYaml("reserved-id.yaml", `engagements:
+  - id: _always
+    name: Always
+    markers: [foo]`);
+        assert.throws(() => loadRegistry(path), /reserved/);
+    });
+    it("requires markers to be a list", () => {
+        const path = writeYaml("no-markers.yaml", `engagements:
+  - id: a
+    name: A`);
+        assert.throws(() => loadRegistry(path), /markers/);
+    });
+    it("requires always_block to be a list of strings", () => {
+        const path = writeYaml("bad-always.yaml", `always_block: not_a_list
+engagements: []`);
+        assert.throws(() => loadRegistry(path), RegistryParseError);
+    });
+    it("treats missing schemaVersion as version 1 (legacy)", () => {
+        const path = writeYaml("no-schema-version.yaml", `engagements:
+  - id: customer-a
+    name: Customer A
+    markers: [foo]`);
+        const reg = loadRegistry(path);
+        assert.equal(reg.schemaVersion, 1);
+    });
+    it("accepts schemaVersion: 1", () => {
+        const path = writeYaml("schema-v1.yaml", `schemaVersion: 1
+engagements:
+  - id: customer-a
+    name: Customer A
+    markers: [foo]`);
+        const reg = loadRegistry(path);
+        assert.equal(reg.schemaVersion, 1);
+    });
+    it("rejects schemaVersion greater than max supported with an upgrade message", () => {
+        const path = writeYaml("schema-v99.yaml", `schemaVersion: 99
+engagements:
+  - id: customer-a
+    name: Customer A
+    markers: [foo]`);
+        assert.throws(() => loadRegistry(path), (err) => err instanceof RegistryParseError &&
+            /please upgrade/i.test(err.message) &&
+            /99/.test(err.message));
+    });
+    it("rejects non-numeric schemaVersion", () => {
+        const path = writeYaml("schema-bad.yaml", `schemaVersion: "not-a-number"
+engagements:
+  - id: customer-a
+    name: Customer A
+    markers: [foo]`);
+        assert.throws(() => loadRegistry(path), RegistryParseError);
+    });
+    it("MAX_SUPPORTED_REGISTRY_SCHEMA_VERSION is the current pinned version", () => {
+        // Sanity guard: bumping this constant is intentional and should be
+        // accompanied by a migration plan and updated tests.
+        assert.equal(MAX_SUPPORTED_REGISTRY_SCHEMA_VERSION, 2);
+    });
+    // -- schemaVersion 2: personalOrgs + engagements[*].githubOrgs --
+    it("v1 file (no schemaVersion, no personalOrgs/githubOrgs) loads with empty defaults", () => {
+        const path = writeYaml("v1-defaults.yaml", `engagements:
+  - id: customer-a
+    name: Customer A
+    markers: [foo]`);
+        const reg = loadRegistry(path);
+        assert.equal(reg.schemaVersion, 1);
+        assert.deepEqual(reg.personalOrgs, []);
+        assert.equal(reg.engagements[0].githubOrgs, undefined);
+    });
+    it("loads schemaVersion 2 with personalOrgs and engagements[*].githubOrgs", () => {
+        const path = writeYaml("v2-full.yaml", `schemaVersion: 2
+personalOrgs:
+  - my-handle
+  - my-oss-org
+engagements:
+  - id: foo-corp
+    name: Foo Corp
+    githubOrgs: [foo-corp, foo-corp-archived]
+    markers: [foo]
+  - id: bar-co
+    name: Bar Co
+    githubOrgs: [bar-co]
+    markers: [bar]`);
+        const reg = loadRegistry(path);
+        assert.equal(reg.schemaVersion, 2);
+        assert.deepEqual(reg.personalOrgs, ["my-handle", "my-oss-org"]);
+        assert.deepEqual(reg.engagements[0].githubOrgs, ["foo-corp", "foo-corp-archived"]);
+        assert.deepEqual(reg.engagements[1].githubOrgs, ["bar-co"]);
+    });
+    it("rejects org name with uppercase characters", () => {
+        const path = writeYaml("v2-uppercase.yaml", `schemaVersion: 2
+personalOrgs: [Bad-Org]
+engagements: []`);
+        assert.throws(() => loadRegistry(path), (err) => err instanceof RegistryParseError && /lowercase/i.test(err.message));
+    });
+    it("rejects org name with leading hyphen", () => {
+        const path = writeYaml("v2-leading-hyphen.yaml", `schemaVersion: 2
+engagements:
+  - id: foo
+    name: Foo
+    githubOrgs: ["-bad"]
+    markers: []`);
+        assert.throws(() => loadRegistry(path), RegistryParseError);
+    });
+    it("rejects org name with whitespace", () => {
+        const path = writeYaml("v2-whitespace.yaml", `schemaVersion: 2
+engagements:
+  - id: foo
+    name: Foo
+    githubOrgs: ["bad org"]
+    markers: []`);
+        assert.throws(() => loadRegistry(path), RegistryParseError);
+    });
+    it("rejects empty string in githubOrgs", () => {
+        const path = writeYaml("v2-empty.yaml", `schemaVersion: 2
+engagements:
+  - id: foo
+    name: Foo
+    githubOrgs: [""]
+    markers: []`);
+        assert.throws(() => loadRegistry(path), RegistryParseError);
+    });
+    it("rejects same org appearing in personalOrgs and engagements[*].githubOrgs (disjointness)", () => {
+        const path = writeYaml("v2-overlap.yaml", `schemaVersion: 2
+personalOrgs: [my-handle]
+engagements:
+  - id: foo
+    name: Foo
+    githubOrgs: [my-handle]
+    markers: []`);
+        assert.throws(() => loadRegistry(path), (err) => err instanceof RegistryParseError &&
+            /personalOrgs/.test(err.message) &&
+            /my-handle/.test(err.message) &&
+            /mutually exclusive/.test(err.message));
+    });
+    it("rejects same org listed in two different engagements' githubOrgs (uniqueness)", () => {
+        const path = writeYaml("v2-dup.yaml", `schemaVersion: 2
+engagements:
+  - id: foo
+    name: Foo
+    githubOrgs: [shared-org]
+    markers: []
+  - id: bar
+    name: Bar
+    githubOrgs: [shared-org]
+    markers: []`);
+        assert.throws(() => loadRegistry(path), (err) => err instanceof RegistryParseError &&
+            /shared-org/.test(err.message) &&
+            /at most one engagement/.test(err.message) &&
+            /foo/.test(err.message));
+    });
+    it("rejects duplicate entries inside personalOrgs", () => {
+        const path = writeYaml("v2-personal-dup.yaml", `schemaVersion: 2
+personalOrgs: [me, me]
+engagements: []`);
+        assert.throws(() => loadRegistry(path), (err) => err instanceof RegistryParseError && /duplicate/i.test(err.message));
+    });
+    it("rejects schemaVersion 3 with the existing 'newer than supported' message", () => {
+        const path = writeYaml("v3.yaml", `schemaVersion: 3
+engagements:
+  - id: customer-a
+    name: Customer A
+    markers: [foo]`);
+        assert.throws(() => loadRegistry(path), (err) => err instanceof RegistryParseError &&
+            /please upgrade/i.test(err.message) &&
+            /3/.test(err.message));
+    });
+});
+describe("isActive", () => {
+    it("returns true when ended is null/undefined", () => {
+        assert.equal(isActive({ id: "a", name: "A", markers: [] }), true);
+        assert.equal(isActive({ id: "a", name: "A", ended: null, markers: [] }), true);
+    });
+    it("returns true within retention window", () => {
+        const recent = new Date();
+        recent.setMonth(recent.getMonth() - 6);
+        assert.equal(isActive({ id: "a", name: "A", ended: recent.toISOString().slice(0, 10), markers: [] }, 12), true);
+    });
+    it("returns false past retention window", () => {
+        const old = new Date();
+        old.setFullYear(old.getFullYear() - 2);
+        assert.equal(isActive({ id: "a", name: "A", ended: old.toISOString().slice(0, 10), markers: [] }, 12), false);
+    });
+    it("treats malformed dates as active (conservative)", () => {
+        assert.equal(isActive({ id: "a", name: "A", ended: "not-a-date", markers: [] }), true);
+    });
+});
+describe("resolveEngagement", () => {
+    const reg = {
+        engagements: [
+            { id: "customer-a-2025", name: "Customer A", markers: [] },
+            { id: "customer-b-2024", name: "Customer B", markers: [] },
+            { id: "customer-c", name: "Acme Corp", markers: [] },
+        ],
+        alwaysBlock: [],
+        schemaVersion: 1,
+    };
+    it("matches by exact id", () => {
+        const r = resolveEngagement(reg, "customer-a-2025");
+        assert.equal(r.match?.id, "customer-a-2025");
+    });
+    it("matches by exact name (case-insensitive)", () => {
+        const r = resolveEngagement(reg, "customer a");
+        assert.equal(r.match?.id, "customer-a-2025");
+    });
+    it("matches by fuzzy substring on id", () => {
+        const r = resolveEngagement(reg, "2024");
+        assert.equal(r.match?.id, "customer-b-2024");
+    });
+    it("returns no match with multiple candidates", () => {
+        const r = resolveEngagement(reg, "customer");
+        assert.equal(r.match, null);
+        assert.ok(r.candidates.length >= 2);
+    });
+    it("returns no match and empty candidates when nothing matches", () => {
+        const r = resolveEngagement(reg, "nonexistent");
+        assert.equal(r.match, null);
+        assert.equal(r.candidates.length, 0);
+    });
+    it("matches by name when name is distinct from id", () => {
+        const r = resolveEngagement(reg, "acme corp");
+        assert.equal(r.match?.id, "customer-c");
+    });
+});
+//# sourceMappingURL=registry.test.js.map

package/dist/registry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.test.js","sourceRoot":"","sources":["../src/registry.test.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,qDAAqD;AACrD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,YAAY,EACZ,QAAQ,EACR,iBAAiB,EACjB,qCAAqC,GACtC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,IAAI,GAAW,CAAC;AAEhB,MAAM,CAAC,GAAG,EAAE;IACV,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,KAAK,CAAC,GAAG,EAAE;IACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH,SAAS,SAAS,CAAC,IAAY,EAAE,IAAY;IAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACvB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,IAAI,GAAG,SAAS,CACpB,cAAc,EACd;;;;;;;;;CASL,CACI,CAAC;QACF,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,IAAI,GAAG,SAAS,CACpB,gBAAgB,EAChB;;;oBAGc,CACf,CAAC;QACF,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,CAAC;QAC9B,aAAa,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EACzB,CAAC,GAAY,EAAE,EAAE,CACf,GAAG,YAAY,sBAAsB;YACrC,GAAG,CAAC,IAAI,KAAK,oBAAoB;YACjC,GAAG,CAAC,IAAI,KAAK,KAAK;YAClB,GAAG,CAAC,cAAc,KAAK,MAAM;YAC7B,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CACvC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,iEAAiE;QACjE,wDAAwD;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;QACrD,aAAa,CAAC,GAAG,KAAK,MAAM,EAAE,YAAY,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,sBAAsB,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,iEAAiE;QACjE,gEAAgE;QAChE,kEAAkE;QAClE,uCAAuC;QACvC,MAAM,KAAK,GAAG,SAAS,CACrB,iBAAiB,EACjB;;;mBAGa,CACd,CAAC;QACF,aAAa,CAAC,GAAG,KAAK,MAAM,EAAE,YAAY,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,IAAI,GAAG,SAAS,CAAC,cAAc,EAAE,4BAA4B,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,IAAI,GAAG,SAAS,CAAC,0BAA0B,EAAE,wBAAwB,CAAC,CAAC;QAC7E,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,IAAI,GAAG,SAAS,CACpB,kBAAkB,EAClB;;;mBAGa,CACd,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,IAAI,GAAG,SAAS,CACpB,iBAAiB,EACjB;;YAEM,CACP,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,IAAI,GAAG,SAAS,CACpB,iBAAiB,EACjB;gBACU,CACX,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,GAAG,SAAS,CACpB,wBAAwB,EACxB;;;mBAGa,CACd,CAAC;QACF,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,IAAI,GAAG,SAAS,CACpB,gBAAgB,EAChB;;;;mBAIa,CACd,CAAC;QACF,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,IAAI,GAAG,SAAS,CACpB,iBAAiB,EACjB;;;;mBAIa,CACd,CAAC;QACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EACxB,CAAC,GAAY,EAAE,EAAE,CACf,GAAG,YAAY,kBAAkB;YACjC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CACzB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,IAAI,GAAG,SAAS,CACpB,iBAAiB,EACjB;;;;mBAIa,CACd,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,mEAAmE;QACnE,qDAAqD;QACrD,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAElE,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,IAAI,GAAG,SAAS,CACpB,kBAAkB,EAClB;;;mBAGa,CACd,CAAC;QACF,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,IAAI,GAAG,SAAS,CACpB,cAAc,EACd;;;;;;;;;;;;mBAYa,CACd,CAAC;QACF,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACpF,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,IAAI,GAAG,SAAS,CACpB,mBAAmB,EACnB;;gBAEU,CACX,CAAC;QACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EACxB,CAAC,GAAY,EAAE,EAAE,CACf,GAAG,YAAY,kBAAkB,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CACtE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,IAAI,GAAG,SAAS,CACpB,wBAAwB,EACxB;;;;;gBAKU,CACX,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,IAAI,GAAG,SAAS,CACpB,oBAAoB,EACpB;;;;;gBAKU,CACX,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,IAAI,GAAG,SAAS,CACpB,eAAe,EACf;;;;;gBAKU,CACX,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,MAAM,IAAI,GAAG,SAAS,CACpB,iBAAiB,EACjB;;;;;;gBAMU,CACX,CAAC;QACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EACxB,CAAC,GAAY,EAAE,EAAE,CACf,GAAG,YAAY,kBAAkB;YACjC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAChC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAC7B,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CACzC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,IAAI,GAAG,SAAS,CACpB,aAAa,EACb;;;;;;;;;gBASU,CACX,CAAC;QACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EACxB,CAAC,GAAY,EAAE,EAAE,CACf,GAAG,YAAY,kBAAkB;YACjC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAC9B,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,IAAI,GAAG,SAAS,CACpB,sBAAsB,EACtB;;gBAEU,CACX,CAAC;QACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EACxB,CAAC,GAAY,EAAE,EAAE,CACf,GAAG,YAAY,kBAAkB,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CACtE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,IAAI,GAAG,SAAS,CACpB,SAAS,EACT;;;;mBAIa,CACd,CAAC;QACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EACxB,CAAC,GAAY,EAAE,EAAE,CACf,GAAG,YAAY,kBAAkB;YACjC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YACnC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CACxB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QAC1B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CACV,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAC3F,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CACV,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EACxF,KAAK,CACN,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,MAAM,GAAG,GAAG;QACV,WAAW,EAAE;YACX,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;YAC1D,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;YAC1D,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE;SACrD;QACD,WAAW,EAAE,EAAE;QACf,aAAa,EAAE,CAAC;KACjB,CAAC;IAEF,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,CAAC,GAAG,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,GAAG,iBAAiB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,GAAG,iBAAiB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/remote-url.d.ts

@@ -0,0 +1,18 @@
+export interface ParsedRemote {
+    /** Always `"github.com"` in v1; ssh-alias suffixes are stripped. */
+    host: string;
+    /** Lowercased GitHub org name. */
+    org: string;
+    /** Lowercased GitHub repo name (no `.git` suffix). */
+    repo: string;
+}
+/**
+ * Parse a git remote URL into `{ host, org, repo }`. Returns `null`
+ * for malformed input or non-github hosts. Never throws.
+ *
+ * Org and repo are lowercased in the output. The original casing is
+ * not preserved — callers that need the casing-as-typed must read
+ * the raw remote themselves.
+ */
+export declare function parseRemoteUrl(raw: unknown): ParsedRemote | null;
+//# sourceMappingURL=remote-url.d.ts.map

package/dist/remote-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-url.d.ts","sourceRoot":"","sources":["../src/remote-url.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;CACd;AAgBD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI,CA8BhE"}

package/dist/remote-url.js

@@ -0,0 +1,66 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright (C) 2026 Richard Myers and contributors.
+//
+// Pure parser for git remote URLs. Used by `classify` to derive the
+// engagement (or personal-org) attribution from `git remote get-url
+// origin`.
+//
+// The parser is total: malformed input returns `null` rather than
+// throwing. This is load-bearing — `parseRemoteUrl` runs in the JIT
+// classify path, and a thrown exception there would surface to the
+// agent as a tool-failure rather than the intended `skipped` status.
+//
+// Phase 1 scope: github.com only (including multi-account ssh aliases
+// like `git@github.com-personal:`). Non-github hosts return `null`;
+// extending to gitlab/bitbucket is a deliberate follow-up.
+// SSH form: `git@github.com[-<alias>]:<org>/<repo>[.git][/]`
+// The optional `-<alias>` segment is the multi-account ssh pattern
+// recommended by GitHub for users with multiple accounts on one
+// machine — e.g. `git@github.com-personal:foo/bar.git`. The alias
+// is stripped and the host normalised back to `github.com`.
+const SSH_RE = /^git@github\.com(?:-[a-zA-Z0-9_-]+)?:([a-zA-Z0-9][a-zA-Z0-9-]*)\/([a-zA-Z0-9._-]+?)(?:\.git)?\/?$/;
+// URL forms: `(http|https|ssh)://[user[:pw]@]github.com/<org>/<repo>[.git][/]`
+// Credential prefix (`user@` or `user:pw@`) is stripped. We do not
+// validate password content; the gate path never sees this URL.
+const URL_RE = /^(?:https?|ssh):\/\/(?:[^@/]+@)?github\.com\/([a-zA-Z0-9][a-zA-Z0-9-]*)\/([a-zA-Z0-9._-]+?)(?:\.git)?\/?$/;
+/**
+ * Parse a git remote URL into `{ host, org, repo }`. Returns `null`
+ * for malformed input or non-github hosts. Never throws.
+ *
+ * Org and repo are lowercased in the output. The original casing is
+ * not preserved — callers that need the casing-as-typed must read
+ * the raw remote themselves.
+ */
+export function parseRemoteUrl(raw) {
+    if (typeof raw !== "string")
+        return null;
+    const url = raw.trim();
+    if (url.length === 0)
+        return null;
+    const sshMatch = SSH_RE.exec(url);
+    if (sshMatch) {
+        const org = sshMatch[1];
+        const repo = sshMatch[2];
+        if (org === undefined || repo === undefined)
+            return null;
+        return {
+            host: "github.com",
+            org: org.toLowerCase(),
+            repo: repo.toLowerCase(),
+        };
+    }
+    const urlMatch = URL_RE.exec(url);
+    if (urlMatch) {
+        const org = urlMatch[1];
+        const repo = urlMatch[2];
+        if (org === undefined || repo === undefined)
+            return null;
+        return {
+            host: "github.com",
+            org: org.toLowerCase(),
+            repo: repo.toLowerCase(),
+        };
+    }
+    return null;
+}
+//# sourceMappingURL=remote-url.js.map

package/dist/remote-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-url.js","sourceRoot":"","sources":["../src/remote-url.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,qDAAqD;AACrD,EAAE;AACF,oEAAoE;AACpE,oEAAoE;AACpE,WAAW;AACX,EAAE;AACF,kEAAkE;AAClE,oEAAoE;AACpE,mEAAmE;AACnE,qEAAqE;AACrE,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2DAA2D;AAW3D,6DAA6D;AAC7D,mEAAmE;AACnE,gEAAgE;AAChE,kEAAkE;AAClE,4DAA4D;AAC5D,MAAM,MAAM,GACV,mGAAmG,CAAC;AAEtG,+EAA+E;AAC/E,mEAAmE;AACnE,gEAAgE;AAChE,MAAM,MAAM,GACV,2GAA2G,CAAC;AAE9G;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE;YACtB,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE;SACzB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE;YACtB,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE;SACzB,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/remote-url.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=remote-url.test.d.ts.map

package/dist/remote-url.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-url.test.d.ts","sourceRoot":"","sources":["../src/remote-url.test.ts"],"names":[],"mappings":""}

package/dist/remote-url.test.js

@@ -0,0 +1,116 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright (C) 2026 Richard Myers and contributors.
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+import { parseRemoteUrl } from "./remote-url.js";
+describe("parseRemoteUrl — accepted forms", () => {
+    const cases = [
+        // [input, org, repo]
+        ["https://github.com/foo/bar", "foo", "bar"],
+        ["https://github.com/foo/bar.git", "foo", "bar"],
+        ["https://github.com/foo/bar/", "foo", "bar"],
+        ["http://github.com/foo/bar", "foo", "bar"],
+        ["http://github.com/foo/bar.git", "foo", "bar"],
+        ["git@github.com:foo/bar", "foo", "bar"],
+        ["git@github.com:foo/bar.git", "foo", "bar"],
+        ["git@github.com-personal:foo/bar.git", "foo", "bar"],
+        ["git@github.com-work:foo/bar.git", "foo", "bar"],
+        ["git@github.com-MIXED_alias-1:foo/bar", "foo", "bar"],
+        ["ssh://git@github.com/foo/bar.git", "foo", "bar"],
+        ["ssh://git@github.com/foo/bar", "foo", "bar"],
+        ["https://user@github.com/foo/bar.git", "foo", "bar"],
+        ["https://user:token@github.com/foo/bar.git", "foo", "bar"],
+        // Lowercasing
+        ["https://github.com/Foo-Corp/Bar-Repo.git", "foo-corp", "bar-repo"],
+        ["git@github.com:DELL/UMP.git", "dell", "ump"],
+        // Whitespace trimmed
+        ["  https://github.com/foo/bar.git  \n", "foo", "bar"],
+        // Hyphens, digits, dots in repo names
+        ["https://github.com/foo/bar.baz.git", "foo", "bar.baz"],
+        ["https://github.com/foo/bar_baz", "foo", "bar_baz"],
+        ["https://github.com/foo/bar-123", "foo", "bar-123"],
+    ];
+    for (const [input, org, repo] of cases) {
+        it(`parses ${JSON.stringify(input)}`, () => {
+            const parsed = parseRemoteUrl(input);
+            assert.deepEqual(parsed, { host: "github.com", org, repo });
+        });
+    }
+});
+describe("parseRemoteUrl — rejected forms (return null)", () => {
+    const cases = [
+        // Non-string
+        "",
+        "   ",
+        // Non-github hosts
+        "https://gitlab.com/foo/bar.git",
+        "git@gitlab.com:foo/bar.git",
+        "https://bitbucket.org/foo/bar.git",
+        "https://example.com/foo/bar",
+        "git@example.com:foo/bar.git",
+        // Self-hosted github-like host
+        "https://github.example.com/foo/bar.git",
+        "https://my-github.com/foo/bar.git",
+        // Missing repo
+        "https://github.com/foo",
+        "https://github.com/foo/",
+        "git@github.com:foo",
+        // Missing org
+        "https://github.com//bar",
+        "git@github.com:/bar.git",
+        // Org starting with hyphen
+        "https://github.com/-bad/bar",
+        "git@github.com:-bad/bar.git",
+        // Extra path segments
+        "https://github.com/foo/bar/tree/main",
+        "https://github.com/foo/bar/issues/1",
+        // Garbage
+        "not a url",
+        "://github.com/foo/bar",
+        "github.com/foo/bar",
+        // Empty parts
+        "https://github.com/",
+        "git@github.com:",
+    ];
+    for (const input of cases) {
+        it(`rejects ${JSON.stringify(input)}`, () => {
+            assert.equal(parseRemoteUrl(input), null);
+        });
+    }
+    it("returns null for non-string input (typed)", () => {
+        assert.equal(parseRemoteUrl(undefined), null);
+        assert.equal(parseRemoteUrl(null), null);
+        assert.equal(parseRemoteUrl(42), null);
+        assert.equal(parseRemoteUrl({}), null);
+        assert.equal(parseRemoteUrl([]), null);
+    });
+});
+describe("parseRemoteUrl — fuzz", () => {
+    it("never throws on random ASCII input", () => {
+        const seed = 0xc0ffee;
+        let s = seed;
+        function rand() {
+            // xorshift32 — deterministic
+            s ^= s << 13;
+            s ^= s >>> 17;
+            s ^= s << 5;
+            return Math.abs(s);
+        }
+        for (let i = 0; i < 1000; i++) {
+            const len = rand() % 64;
+            let str = "";
+            for (let j = 0; j < len; j++) {
+                str += String.fromCharCode(0x20 + (rand() % 95));
+            }
+            // Should never throw, regardless of input.
+            const result = parseRemoteUrl(str);
+            // Sanity: result is null or has the expected shape.
+            if (result !== null) {
+                assert.equal(typeof result.host, "string");
+                assert.equal(typeof result.org, "string");
+                assert.equal(typeof result.repo, "string");
+            }
+        }
+    });
+});
+//# sourceMappingURL=remote-url.test.js.map

package/dist/remote-url.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-url.test.js","sourceRoot":"","sources":["../src/remote-url.test.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,qDAAqD;AACrD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,MAAM,KAAK,GAAoC;QAC7C,qBAAqB;QACrB,CAAC,4BAA4B,EAAE,KAAK,EAAE,KAAK,CAAC;QAC5C,CAAC,gCAAgC,EAAE,KAAK,EAAE,KAAK,CAAC;QAChD,CAAC,6BAA6B,EAAE,KAAK,EAAE,KAAK,CAAC;QAC7C,CAAC,2BAA2B,EAAE,KAAK,EAAE,KAAK,CAAC;QAC3C,CAAC,+BAA+B,EAAE,KAAK,EAAE,KAAK,CAAC;QAC/C,CAAC,wBAAwB,EAAE,KAAK,EAAE,KAAK,CAAC;QACxC,CAAC,4BAA4B,EAAE,KAAK,EAAE,KAAK,CAAC;QAC5C,CAAC,qCAAqC,EAAE,KAAK,EAAE,KAAK,CAAC;QACrD,CAAC,iCAAiC,EAAE,KAAK,EAAE,KAAK,CAAC;QACjD,CAAC,sCAAsC,EAAE,KAAK,EAAE,KAAK,CAAC;QACtD,CAAC,kCAAkC,EAAE,KAAK,EAAE,KAAK,CAAC;QAClD,CAAC,8BAA8B,EAAE,KAAK,EAAE,KAAK,CAAC;QAC9C,CAAC,qCAAqC,EAAE,KAAK,EAAE,KAAK,CAAC;QACrD,CAAC,2CAA2C,EAAE,KAAK,EAAE,KAAK,CAAC;QAC3D,cAAc;QACd,CAAC,0CAA0C,EAAE,UAAU,EAAE,UAAU,CAAC;QACpE,CAAC,6BAA6B,EAAE,MAAM,EAAE,KAAK,CAAC;QAC9C,qBAAqB;QACrB,CAAC,sCAAsC,EAAE,KAAK,EAAE,KAAK,CAAC;QACtD,sCAAsC;QACtC,CAAC,oCAAoC,EAAE,KAAK,EAAE,SAAS,CAAC;QACxD,CAAC,gCAAgC,EAAE,KAAK,EAAE,SAAS,CAAC;QACpD,CAAC,gCAAgC,EAAE,KAAK,EAAE,SAAS,CAAC;KACrD,CAAC;IAEF,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QACvC,EAAE,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE;YACzC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,MAAM,KAAK,GAAa;QACtB,aAAa;QACb,EAAE;QACF,KAAK;QACL,mBAAmB;QACnB,gCAAgC;QAChC,4BAA4B;QAC5B,mCAAmC;QACnC,6BAA6B;QAC7B,6BAA6B;QAC7B,+BAA+B;QAC/B,wCAAwC;QACxC,mCAAmC;QACnC,eAAe;QACf,wBAAwB;QACxB,yBAAyB;QACzB,oBAAoB;QACpB,cAAc;QACd,yBAAyB;QACzB,yBAAyB;QACzB,2BAA2B;QAC3B,6BAA6B;QAC7B,6BAA6B;QAC7B,sBAAsB;QACtB,sCAAsC;QACtC,qCAAqC;QACrC,UAAU;QACV,WAAW;QACX,uBAAuB;QACvB,oBAAoB;QACpB,cAAc;QACd,qBAAqB;QACrB,iBAAiB;KAClB,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,EAAE,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE;YAC1C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC;QACtB,IAAI,CAAC,GAAG,IAAI,CAAC;QACb,SAAS,IAAI;YACX,6BAA6B;YAC7B,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACb,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACd,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACZ,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC;YACxB,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC7B,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACnD,CAAC;YACD,2CAA2C;YAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACnC,oDAAoD;YACpD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC3C,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC1C,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/render.d.ts

@@ -0,0 +1,54 @@
+import { type Registry } from "./registry.js";
+/**
+ * Format version of marker files written by {@link renderMarkers}. Emitted
+ * as the second header line (`; repo-aegis-marker-format: <N>`) of every
+ * generated marker file. The deny-set parser ignores `;`-comment lines, so
+ * older readers tolerate the field; future readers can branch on it. Per
+ * design B14: writers must never lower this version.
+ */
+export declare const MARKER_FORMAT_VERSION = 1;
+export interface RenderOptions {
+    dryRun?: boolean;
+    markersDir?: string;
+    flatPath?: string;
+    retentionMonths?: number;
+    /**
+     * If true (default), all marker patterns across the registry are validated
+     * before any file is written. Patterns failing validation cause render to
+     * throw `PatternValidationError` without writing.
+     */
+    validatePatterns?: boolean;
+}
+export interface RenderedFile {
+    path: string;
+    engagementId: string;
+    patternCount: number;
+}
+export interface RenderResult {
+    written: RenderedFile[];
+    removed: string[];
+    flat: string | null;
+    invalidPatterns: {
+        engagementId: string;
+        pattern: string;
+        reason: string;
+    }[];
+}
+/**
+ * Generate per-engagement marker files from the registry.
+ *
+ * Behaviour:
+ * 1. Validate every pattern across all engagements + alwaysBlock. If any
+ *    fail validation, throw `PatternValidationError` and write nothing.
+ * 2. Write `markers/_always.txt` from `reg.alwaysBlock`.
+ * 3. For each engagement where `isActive(e, retentionMonths)` is true,
+ *    write `markers/<id>.txt`.
+ * 4. Compare existing marker files against the new set; delete files
+ *    whose stem is not in the new set.
+ * 5. Write the flat union `markers.txt` for back-compat.
+ *
+ * All files are written with mode 0600. The markers directory is created
+ * with mode 0700.
+ */
+export declare function renderMarkers(reg: Registry, opts?: RenderOptions): RenderResult;
+//# sourceMappingURL=render.d.ts.map

package/dist/render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AASA,OAAO,EAAY,KAAK,QAAQ,EAAmB,MAAM,eAAe,CAAC;AAKzE;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,eAAe,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC9E;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,GAAE,aAAkB,GAAG,YAAY,CAkHnF"}