@deftai/directive-core 0.79.2 → 0.79.4

package/dist/triage/bootstrap/index.js

@@ -1,13 +1,13 @@
-import { execFile, execFileSync } from "node:child_process";
+import { execFileSync } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
-import { promisify } from "node:util";
 import { hasArtifactSuffix, resolveLifecycleRoot } from "../../layout/resolve.js";
-import { SUBPROCESS_MAX_BUFFER } from "../../subprocess/max-buffer.js";
 import { resolveCandidatesLogPath } from "../cache-path.js";
+import { loadDefaultCacheModule } from "./cache-module.js";
 import { stepEnsureGitignoreEntry, stepEnsureGitignoreEvalEntries, stepSeedCandidatesLog, } from "./gitignore.js";
 import { PROGRESS_DEFAULT } from "./types.js";
+export * from "./cache-module.js";
 export * from "./gitignore.js";
 export * from "./types.js";
 export const CACHE_DIR_NAME = ".deft-cache";
@@ -21,7 +21,6 @@ const TOTAL_STEPS = 5;
 const GIT_ORIGIN_RE = /^(?:https?:\/\/(?:[^@/]+@)?github\.com\/|git@github\.com:|ssh:\/\/git@github\.com[:/])([A-Za-z0-9][A-Za-z0-9._-]*)\/([A-Za-z0-9][A-Za-z0-9._-]*?)(?:\.git)?\/?\s*$/;
 const REPO_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*\/[A-Za-z0-9][A-Za-z0-9._-]*$/;
 const RUNNER_UNSET = Symbol("runner-unset");
-const execFileAsync = promisify(execFile);
 function defaultWhich(name) {
     const locator = process.platform === "win32" ? "where" : "which";
     try {
@@ -126,81 +125,6 @@ export async function runWithTimeout(func, timeoutS) {
         error: boxError,
     };
 }
-function resolveDeftRoot(explicit) {
-    if (explicit !== undefined && explicit.length > 0)
-        return resolve(explicit);
-    if (process.env.DEFT_ROOT !== undefined && process.env.DEFT_ROOT.length > 0) {
-        return resolve(process.env.DEFT_ROOT);
-    }
-    return resolve(process.cwd());
-}
-function cacheModulePresent(deftRoot) {
-    return existsSync(join(deftRoot, "scripts", "cache.py"));
-}
-async function invokePythonCacheFetchAll(deftRoot, kwargs) {
-    const payload = JSON.stringify({
-        source: kwargs.source,
-        repo: kwargs.repo,
-        cache_root: kwargs.cacheRoot,
-        batch_size: kwargs.batchSize ?? null,
-        delay_ms: kwargs.delayMs ?? null,
-        state: kwargs.state ?? null,
-        limit: kwargs.limit ?? null,
-        labels: kwargs.labels ?? null,
-        author: kwargs.author ?? null,
-    });
-    const script = `
-import json, sys
-sys.path.insert(0, ${JSON.stringify(join(deftRoot, "scripts"))})
-from cache import cache_fetch_all
-raw = json.loads(sys.argv[1])
-kwargs = {
-    "source": raw["source"],
-    "repo": raw["repo"],
-    "cache_root": raw["cache_root"],
-}
-for key in ("batch_size", "delay_ms", "state", "limit", "author"):
-    if raw[key] is not None:
-        kwargs[key] = raw[key]
-if raw["labels"]:
-    kwargs["labels"] = tuple(raw["labels"])
-report = cache_fetch_all(**kwargs)
-out = {
-    "succeeded": getattr(report, "succeeded", None),
-    "failed": getattr(report, "failed", None),
-    "skipped": getattr(report, "skipped", None),
-}
-summary_line = getattr(report, "summary_line", None)
-if callable(summary_line):
-    try:
-        out["summary_message"] = summary_line(source=raw["source"], repo=raw["repo"])
-    except TypeError:
-        pass
-print(json.dumps(out))
-`;
-    const { stdout } = await execFileAsync("uv", ["run", "python", "-c", script, payload], {
-        cwd: deftRoot,
-        encoding: "utf8",
-        maxBuffer: SUBPROCESS_MAX_BUFFER,
-    });
-    const parsed = JSON.parse(String(stdout).trim());
-    const summaryMessage = parsed.summary_message;
-    return {
-        succeeded: parsed.succeeded,
-        failed: parsed.failed,
-        skipped: parsed.skipped,
-        summaryLine: typeof summaryMessage === "string" ? () => summaryMessage : null,
-    };
-}
-function loadDefaultCacheModule(deftRoot) {
-    if (!cacheModulePresent(deftRoot))
-        return null;
-    return {
-        cacheFetchAll(kwargs) {
-            return invokePythonCacheFetchAll(deftRoot, kwargs);
-        },
-    };
-}
 function nowIsoDefault() {
     return new Date().toISOString().replace(/\.\d{3}Z$/, "Z");
 }
@@ -219,10 +143,11 @@ export async function stepPopulateCache(projectRoot, repo, options = {}) {
     if (!REPO_RE.test(effectiveRepo)) {
         return stepOutcome("populate_cache", false, `invalid --repo '${effectiveRepo}'`, {}, "repo must be 'owner/name' (alphanumerics, '.', '_', '-' only)");
     }
-    const deftRoot = resolveDeftRoot(options.deftRoot);
-    const cacheMod = options.cacheModule ?? loadDefaultCacheModule(deftRoot);
+    // #2684: default is TypeScript cacheFetchAll — never gate on scripts/cache.py.
+    // Explicit null still skips populate (tests / callers that inject empty cache).
+    const cacheMod = options.cacheModule !== undefined ? options.cacheModule : loadDefaultCacheModule();
     if (cacheMod === null) {
-        return stepOutcome("populate_cache", true, "deferred (scripts/cache.py not present on this branch; re-run after rebase to populate via task cache:fetch-all)", { deferred: "cache-module-missing", repo: effectiveRepo });
+        return stepOutcome("populate_cache", true, "deferred (cache module explicitly disabled; pass a cacheModule or omit the override to populate via cache:fetch-all)", { deferred: "cache-module-disabled", repo: effectiveRepo });
     }
     const kwargs = {
         source: CACHE_SOURCE,

package/dist/xbrief-migrate/agents-header.d.ts

@@ -1,14 +1,3 @@
-/**
- * Bounded, ordered set of legacy crossover tokens rewritten in the UNMANAGED
- * region of a consumer AGENTS.md after `migrate:xbrief` (#2154 / Option A).
- *
- * Each entry is a mechanical path / verb literal — NOT freeform prose. The
- * casing-only `vBRIEF format` product-description token from the issue table is
- * intentionally excluded so freeform prose survives untouched. The tokens are
- * disjoint substrings (`.vbrief.json` has no trailing slash, `vbrief:preflight`
- * uses a colon, `vbrief/` requires a slash), so replacement order does not
- * change the result and a second pass is a guaranteed no-op (idempotent).
- */
 export declare const LEGACY_HEADER_TOKENS: ReadonlyArray<{
     readonly legacy: string;
     readonly migrated: string;

package/dist/xbrief-migrate/agents-header.js

@@ -1,5 +1,6 @@
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
+import { assertProjectionContained } from "../fs/projection-containment.js";
 import { iterManagedSections } from "../platform/agents-md.js";
 import { MIGRATED_ARTIFACT_DIR } from "./constants.js";
 import { isDirectory } from "./fs-helpers.js";
@@ -14,6 +15,12 @@ import { isDirectory } from "./fs-helpers.js";
  * uses a colon, `vbrief/` requires a slash), so replacement order does not
  * change the result and a second pass is a guaranteed no-op (idempotent).
  */
+/** Refuse migrate header writes that escape via repo-controlled symlinks (#2668). */
+function projectionTarget(projectDir, ...relSegments) {
+    const target = join(projectDir, ...relSegments);
+    assertProjectionContained(projectDir, target);
+    return target;
+}
 export const LEGACY_HEADER_TOKENS = [
     { legacy: ".vbrief.json", migrated: ".xbrief.json" },
     { legacy: "vbrief:preflight", migrated: "xbrief:preflight" },
@@ -94,6 +101,7 @@ export function patchAgentsMdHeader(projectRoot, seams = {}) {
             }
         });
     const writeText = seams.writeText ?? ((path, text) => writeFileSync(path, text, "utf8"));
+    const usingWriteSeam = seams.writeText !== undefined;
     const existing = readText(agentsPath);
     if (existing === null) {
         return { kind: "absent", path: agentsPath, replacements: [] };
@@ -103,7 +111,8 @@ export function patchAgentsMdHeader(projectRoot, seams = {}) {
         return { kind: "clean", path: agentsPath, replacements: [] };
     }
     try {
-        writeText(agentsPath, result.content);
+        const writePath = usingWriteSeam ? agentsPath : projectionTarget(projectRoot, "AGENTS.md");
+        writeText(writePath, result.content);
     }
     catch (err) {
         return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deftai/directive-core",
-  "version": "0.79.2",
+  "version": "0.79.4",
   "description": "TypeScript engine core for the Directive framework.",
   "type": "module",
   "main": "./dist/index.js",
@@ -242,6 +242,10 @@
       "types": "./dist/swarm/index.d.ts",
       "default": "./dist/swarm/index.js"
     },
+    "./review-monitor": {
+      "types": "./dist/review-monitor/index.d.ts",
+      "default": "./dist/review-monitor/index.js"
+    },
     "./platform": {
       "types": "./dist/platform/index.d.ts",
       "default": "./dist/platform/index.js"
@@ -305,8 +309,8 @@
     "provenance": true
   },
   "dependencies": {
-    "@deftai/directive-content": "^0.79.2",
-    "@deftai/directive-types": "^0.79.2",
+    "@deftai/directive-content": "^0.79.4",
+    "@deftai/directive-types": "^0.79.4",
     "archiver": "^8.0.0"
   },
   "scripts": {