@deftai/directive-core 0.96.0 → 0.97.0

package/dist/triage/bootstrap/gitignore.js

@@ -20,6 +20,9 @@ export const GITIGNORE_EVAL_ENTRIES = [
     "xbrief/.triage-cache/scope-lifecycle.jsonl",
     "xbrief/.triage-cache/decompositions/",
     "xbrief/.triage-cache/doctor-state.json",
+    // Per-clone session state (#3146); selective only — hybrid policy preserved.
+    "xbrief/.triage-cache/staleness-tickler-state.json",
+    "xbrief/.triage-cache/release-availability-state.json",
 ];
 /** Layout-aware gitignore lines for triage working-set files (#1703). */
 export function gitignoreTriageCacheEntries(projectRoot) {
@@ -30,6 +33,9 @@ export function gitignoreTriageCacheEntries(projectRoot) {
         triageCacheRelPath(projectRoot, "scope-lifecycle.jsonl"),
         decomp.endsWith("/") ? decomp : `${decomp}/`,
         triageCacheRelPath(projectRoot, "doctor-state.json"),
+        // Per-clone session state (#3146); selective only — hybrid policy preserved.
+        triageCacheRelPath(projectRoot, "staleness-tickler-state.json"),
+        triageCacheRelPath(projectRoot, "release-availability-state.json"),
     ];
 }
 export function gitattributesTriageCacheGlob(projectRoot) {
@@ -76,6 +82,10 @@ const EVAL_ENTRIES_RATIONALE = "\n# vbrief/.triage-cache/ tracking governance (#
     "#                               throttle state gating the 24h/4h\n" +
     "#                               re-probe window; #1308 / #1464). Local\n" +
     "#                               to each clone; never committed.\n" +
+    "#   - staleness-tickler-state.json -> gitignored (per-clone upgrade\n" +
+    "#                               tickler throttle; #2488 / #3146).\n" +
+    "#   - release-availability-state.json -> gitignored (per-clone npm\n" +
+    "#                               release-availability throttle; #1692 / #3146).\n" +
     "#   - slices.jsonl           -> TRACKED (team-shared cohort records\n" +
     "#                               produced by slicing skills; see\n" +
     "#                               #1132 / D13).\n" +
@@ -104,12 +114,16 @@ committed.
 | \`scope-lifecycle.jsonl\` | No | Local audit trail for scope demotions (\`deft scope:demote\`). Each operator's stream stays on their machine. |
 | \`decompositions/\` | No | Draft story-decomposition scratch. Produced child story xBRIEFs live in lifecycle folders via \`deft scope:decompose\`. |
 | \`doctor-state.json\` | No | Per-clone throttle state for \`deft doctor\` re-probe timing. |
+| \`staleness-tickler-state.json\` | No | Per-clone upgrade-tickler throttle state. |
+| \`release-availability-state.json\` | No | Per-clone release-availability probe throttle state. |
 
 Paths listed as "No" above are added to \`.gitignore\` during bootstrap; anything
 not listed remains committable by default. The selective ignore entries live in
 the repo-root \`.gitignore\` (\`vbrief/.triage-cache/candidates.jsonl\`,
 \`vbrief/.triage-cache/summary-history.jsonl\`, \`vbrief/.triage-cache/scope-lifecycle.jsonl\`,
-\`vbrief/.triage-cache/decompositions/\`, and \`vbrief/.triage-cache/doctor-state.json\`).
+\`vbrief/.triage-cache/decompositions/\`, \`vbrief/.triage-cache/doctor-state.json\`,
+\`vbrief/.triage-cache/staleness-tickler-state.json\`, and
+\`vbrief/.triage-cache/release-availability-state.json\`).
 
 ## Fresh clone
 

package/dist/vbrief-activate/activate.js

@@ -1,6 +1,7 @@
 import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync, unlinkSync, } from "node:fs";
 import { basename, dirname, resolve } from "node:path";
 import { containedWrite } from "../fs/contained-write.js";
+import { assertProjectionContained, ProjectionContainmentError, } from "../fs/projection-containment.js";
 import { utcNowIso } from "../scope/vbrief-json.js";
 import { pythonJsonPretty } from "../vbrief-build/json.js";
 import { ACTIVE_FOLDER, ELIGIBLE_STATUSES_FOR_FLIP, formatEligibleStatusList, SOURCE_FOLDERS, TARGET_STATUS, } from "./constants.js";
@@ -120,6 +121,22 @@ export function activate(vbriefPath, options = {}) {
                 `'${TARGET_STATUS}'.`,
         };
     }
+    // Resolve destination early so containment can refuse before any mutation.
+    // Parity with scope:activate / #2447: projectRoot is parent of the xbrief/ root.
+    const vbriefDir = dirname(dirname(vbriefPath));
+    const projectRoot = dirname(vbriefDir);
+    const activeDir = `${vbriefDir}/${ACTIVE_FOLDER}`;
+    try {
+        // #3147 / #2447: refuse when active/ (or a parent) is a symlink escaping the checkout.
+        // Run before mutating the source payload or unlinking pending so a refusal leaves state intact.
+        assertProjectionContained(projectRoot, activeDir);
+    }
+    catch (err) {
+        if (err instanceof ProjectionContainmentError) {
+            return { exitCode: 1, message: err.message };
+        }
+        throw err;
+    }
     planObj.status = TARGET_STATUS;
     let info = payload.vBRIEFInfo;
     if (info === undefined) {
@@ -133,8 +150,6 @@ export function activate(vbriefPath, options = {}) {
         };
     }
     info.updated = utcNowIso(now);
-    const vbriefDir = dirname(dirname(vbriefPath));
-    const activeDir = `${vbriefDir}/${ACTIVE_FOLDER}`;
     try {
         mkdirSync(activeDir, { recursive: true });
     }
@@ -151,13 +166,14 @@ export function activate(vbriefPath, options = {}) {
                 "collision manually before re-running `task vbrief:activate`.",
         };
     }
-    const tmpBase = `${fileName}.tmp`;
     const tmp = `${dest}.tmp`;
     try {
-        // #2980 wave D: product write sink routes through containedWrite.
+        // #2980 wave D + #3147: product write sink routes through containedWrite with
+        // checkout root as containment root (not resolve(activeDir), which treats an
+        // escaping active/ realpath as "contained" relative to itself).
         containedWrite({
-            root: resolve(activeDir),
-            target: tmpBase,
+            root: resolve(projectRoot),
+            target: resolve(tmp),
             data: pythonJsonPretty(payload),
             mode: "create",
         });

package/dist/xbrief/styles.js

@@ -4,6 +4,19 @@
  * One schema spine (xBRIEF v0.8); markdown is a dense render of the same plan,
  * not a second dialect.
  */
+import { parseMarkdownHeading } from "../text/redos-safe.js";
+/**
+ * Linear frontmatter ``key: value`` parse (no nested quantifiers).
+ * Replaces ``/^key:\s*(.+)\s*$/`` flagged as CodeQL js/polynomial-redos (#3174).
+ */
+function frontmatterField(line, key) {
+    const prefix = `${key}:`;
+    if (!line.startsWith(prefix)) {
+        return null;
+    }
+    const value = line.slice(prefix.length).trim();
+    return value.length > 0 ? value : null;
+}
 /** Required H2 section titles in the markdown form per style. */
 export const MD_REQUIRED_SECTIONS = {
     scope: ["Title", "Status", "Overview", "Items"],
@@ -200,25 +213,28 @@ export function parseMarkdownMeta(md) {
             continue;
         }
         if (inFront) {
-            const idMatch = /^id:\s*(.+)\s*$/.exec(line);
-            if (idMatch?.[1] !== undefined)
-                id = idMatch[1].trim();
-            const styleMatch = /^style:\s*(.+)\s*$/.exec(line);
-            if (styleMatch?.[1] !== undefined)
-                style = styleMatch[1].trim();
+            // Linear field parse — avoids js/polynomial-redos on \s*(.+)\s* (#3174 alerts #84-#85).
+            const idValue = frontmatterField(line, "id");
+            if (idValue !== null)
+                id = idValue;
+            const styleValue = frontmatterField(line, "style");
+            if (styleValue !== null)
+                style = styleValue;
             continue;
         }
-        const h1 = /^#\s+(.+)$/.exec(line);
-        if (h1?.[1] !== undefined && title === null) {
-            title = h1[1].trim();
-        }
-        const h2 = /^##\s+(.+)$/.exec(line);
-        if (h2?.[1] !== undefined) {
-            const name = h2[1].trim();
-            sections.add(name);
-            afterTitleH2 = name === "Title";
-            afterStatusH2 = name === "Status";
-            continue;
+        // Linear ATX heading parse — avoids js/polynomial-redos on ^#+\s+(.+)$ (#3174 alerts #86-#87).
+        const heading = parseMarkdownHeading(line);
+        if (heading !== null) {
+            const name = heading.text.trim();
+            if (heading.hashes === "#" && title === null) {
+                title = name;
+            }
+            else if (heading.hashes === "##") {
+                sections.add(name);
+                afterTitleH2 = name === "Title";
+                afterStatusH2 = name === "Status";
+                continue;
+            }
         }
         if (afterTitleH2 && line.trim().length > 0 && !line.startsWith("#")) {
             // Prefer ## Title body over H1 when present.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deftai/directive-core",
-  "version": "0.96.0",
+  "version": "0.97.0",
   "description": "TypeScript engine core for the Directive framework.",
   "license": "MIT",
   "type": "module",
@@ -251,6 +251,10 @@
       "types": "./dist/parent-turn-shape/index.d.ts",
       "default": "./dist/parent-turn-shape/index.js"
     },
+    "./delivery-attempt": {
+      "types": "./dist/delivery-attempt/index.d.ts",
+      "default": "./dist/delivery-attempt/index.js"
+    },
     "./intake": {
       "types": "./dist/intake/index.d.ts",
       "default": "./dist/intake/index.js"
@@ -350,8 +354,8 @@
     "provenance": true
   },
   "dependencies": {
-    "@deftai/directive-content": "^0.96.0",
-    "@deftai/directive-types": "^0.96.0",
+    "@deftai/directive-content": "^0.97.0",
+    "@deftai/directive-types": "^0.97.0",
     "archiver": "^8.0.0"
   },
   "scripts": {