@dewtech/dare-cli 3.10.0 → 3.11.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (150) hide show
  1. package/README.md +5 -1
  2. package/dist/__tests__/ci-pr-regression.test.d.ts +2 -0
  3. package/dist/__tests__/ci-pr-regression.test.d.ts.map +1 -0
  4. package/dist/__tests__/ci-pr-regression.test.js +76 -0
  5. package/dist/__tests__/ci-pr-regression.test.js.map +1 -0
  6. package/dist/__tests__/dashboard-front.test.d.ts +2 -0
  7. package/dist/__tests__/dashboard-front.test.d.ts.map +1 -0
  8. package/dist/__tests__/dashboard-front.test.js +37 -0
  9. package/dist/__tests__/dashboard-front.test.js.map +1 -0
  10. package/dist/__tests__/dashboard-regression.test.d.ts +2 -0
  11. package/dist/__tests__/dashboard-regression.test.d.ts.map +1 -0
  12. package/dist/__tests__/dashboard-regression.test.js +68 -0
  13. package/dist/__tests__/dashboard-regression.test.js.map +1 -0
  14. package/dist/__tests__/dynamic-dag-regression.test.d.ts +2 -0
  15. package/dist/__tests__/dynamic-dag-regression.test.d.ts.map +1 -0
  16. package/dist/__tests__/dynamic-dag-regression.test.js +464 -0
  17. package/dist/__tests__/dynamic-dag-regression.test.js.map +1 -0
  18. package/dist/__tests__/ide-command-parity.test.js +1 -0
  19. package/dist/__tests__/ide-command-parity.test.js.map +1 -1
  20. package/dist/bin/dare.js +2 -0
  21. package/dist/bin/dare.js.map +1 -1
  22. package/dist/commands/__tests__/dashboard-command.test.d.ts +2 -0
  23. package/dist/commands/__tests__/dashboard-command.test.d.ts.map +1 -0
  24. package/dist/commands/__tests__/dashboard-command.test.js +62 -0
  25. package/dist/commands/__tests__/dashboard-command.test.js.map +1 -0
  26. package/dist/commands/__tests__/gate-flags.test.d.ts +2 -0
  27. package/dist/commands/__tests__/gate-flags.test.d.ts.map +1 -0
  28. package/dist/commands/__tests__/gate-flags.test.js +58 -0
  29. package/dist/commands/__tests__/gate-flags.test.js.map +1 -0
  30. package/dist/commands/__tests__/persist-viz.test.d.ts +2 -0
  31. package/dist/commands/__tests__/persist-viz.test.d.ts.map +1 -0
  32. package/dist/commands/__tests__/persist-viz.test.js +178 -0
  33. package/dist/commands/__tests__/persist-viz.test.js.map +1 -0
  34. package/dist/commands/__tests__/refine-apply.test.d.ts +2 -0
  35. package/dist/commands/__tests__/refine-apply.test.d.ts.map +1 -0
  36. package/dist/commands/__tests__/refine-apply.test.js +118 -0
  37. package/dist/commands/__tests__/refine-apply.test.js.map +1 -0
  38. package/dist/commands/__tests__/replan-splice.test.d.ts +2 -0
  39. package/dist/commands/__tests__/replan-splice.test.d.ts.map +1 -0
  40. package/dist/commands/__tests__/replan-splice.test.js +295 -0
  41. package/dist/commands/__tests__/replan-splice.test.js.map +1 -0
  42. package/dist/commands/dag.d.ts.map +1 -1
  43. package/dist/commands/dag.js +2 -0
  44. package/dist/commands/dag.js.map +1 -1
  45. package/dist/commands/dashboard.d.ts +17 -0
  46. package/dist/commands/dashboard.d.ts.map +1 -0
  47. package/dist/commands/dashboard.js +77 -0
  48. package/dist/commands/dashboard.js.map +1 -0
  49. package/dist/commands/execute.d.ts.map +1 -1
  50. package/dist/commands/execute.js +108 -2
  51. package/dist/commands/execute.js.map +1 -1
  52. package/dist/commands/graph.d.ts.map +1 -1
  53. package/dist/commands/graph.js +33 -5
  54. package/dist/commands/graph.js.map +1 -1
  55. package/dist/commands/guard.d.ts.map +1 -1
  56. package/dist/commands/guard.js +27 -3
  57. package/dist/commands/guard.js.map +1 -1
  58. package/dist/commands/refine.d.ts +2 -0
  59. package/dist/commands/refine.d.ts.map +1 -1
  60. package/dist/commands/refine.js +71 -20
  61. package/dist/commands/refine.js.map +1 -1
  62. package/dist/commands/review.d.ts.map +1 -1
  63. package/dist/commands/review.js +36 -5
  64. package/dist/commands/review.js.map +1 -1
  65. package/dist/dag-runner/__tests__/maxdepth-config.test.d.ts +2 -0
  66. package/dist/dag-runner/__tests__/maxdepth-config.test.d.ts.map +1 -0
  67. package/dist/dag-runner/__tests__/maxdepth-config.test.js +28 -0
  68. package/dist/dag-runner/__tests__/maxdepth-config.test.js.map +1 -0
  69. package/dist/dag-runner/__tests__/sub-dag.test.d.ts +2 -0
  70. package/dist/dag-runner/__tests__/sub-dag.test.d.ts.map +1 -0
  71. package/dist/dag-runner/__tests__/sub-dag.test.js +127 -0
  72. package/dist/dag-runner/__tests__/sub-dag.test.js.map +1 -0
  73. package/dist/dag-runner/run_dag.d.ts +2 -0
  74. package/dist/dag-runner/run_dag.d.ts.map +1 -1
  75. package/dist/dag-runner/run_dag.js.map +1 -1
  76. package/dist/dag-runner/state-store.d.ts +2 -0
  77. package/dist/dag-runner/state-store.d.ts.map +1 -1
  78. package/dist/dag-runner/state-store.js +44 -8
  79. package/dist/dag-runner/state-store.js.map +1 -1
  80. package/dist/dag-runner/sub-dag.d.ts +23 -0
  81. package/dist/dag-runner/sub-dag.d.ts.map +1 -0
  82. package/dist/dag-runner/sub-dag.js +117 -0
  83. package/dist/dag-runner/sub-dag.js.map +1 -0
  84. package/dist/dashboard/__tests__/dashboard-routes.test.d.ts +2 -0
  85. package/dist/dashboard/__tests__/dashboard-routes.test.d.ts.map +1 -0
  86. package/dist/dashboard/__tests__/dashboard-routes.test.js +102 -0
  87. package/dist/dashboard/__tests__/dashboard-routes.test.js.map +1 -0
  88. package/dist/dashboard/routes.d.ts +8 -0
  89. package/dist/dashboard/routes.d.ts.map +1 -0
  90. package/dist/dashboard/routes.js +70 -0
  91. package/dist/dashboard/routes.js.map +1 -0
  92. package/dist/graphrag/__tests__/hybrid-integration.test.js +1 -1
  93. package/dist/graphrag/__tests__/hybrid-integration.test.js.map +1 -1
  94. package/dist/graphrag/__tests__/no-heavy-dep-in-core.test.js +2 -2
  95. package/dist/graphrag/__tests__/no-heavy-dep-in-core.test.js.map +1 -1
  96. package/dist/graphrag/embeddings.js +1 -1
  97. package/dist/graphrag/embeddings.js.map +1 -1
  98. package/dist/http/__tests__/shared-app.test.d.ts +2 -0
  99. package/dist/http/__tests__/shared-app.test.d.ts.map +1 -0
  100. package/dist/http/__tests__/shared-app.test.js +57 -0
  101. package/dist/http/__tests__/shared-app.test.js.map +1 -0
  102. package/dist/http/app.d.ts +15 -0
  103. package/dist/http/app.d.ts.map +1 -0
  104. package/dist/http/app.js +32 -0
  105. package/dist/http/app.js.map +1 -0
  106. package/dist/mcp-server/server.d.ts.map +1 -1
  107. package/dist/mcp-server/server.js +5 -15
  108. package/dist/mcp-server/server.js.map +1 -1
  109. package/dist/reporters/__tests__/github-reporter.test.d.ts +2 -0
  110. package/dist/reporters/__tests__/github-reporter.test.d.ts.map +1 -0
  111. package/dist/reporters/__tests__/github-reporter.test.js +93 -0
  112. package/dist/reporters/__tests__/github-reporter.test.js.map +1 -0
  113. package/dist/reporters/ci-gate.d.ts +27 -0
  114. package/dist/reporters/ci-gate.d.ts.map +1 -0
  115. package/dist/reporters/ci-gate.js +100 -0
  116. package/dist/reporters/ci-gate.js.map +1 -0
  117. package/dist/reporters/github.d.ts +36 -0
  118. package/dist/reporters/github.d.ts.map +1 -0
  119. package/dist/reporters/github.js +142 -0
  120. package/dist/reporters/github.js.map +1 -0
  121. package/dist/telemetry/__tests__/aggregator.test.d.ts +2 -0
  122. package/dist/telemetry/__tests__/aggregator.test.d.ts.map +1 -0
  123. package/dist/telemetry/__tests__/aggregator.test.js +164 -0
  124. package/dist/telemetry/__tests__/aggregator.test.js.map +1 -0
  125. package/dist/telemetry/aggregator.d.ts +43 -0
  126. package/dist/telemetry/aggregator.d.ts.map +1 -0
  127. package/dist/telemetry/aggregator.js +282 -0
  128. package/dist/telemetry/aggregator.js.map +1 -0
  129. package/dist/utils/excalidraw-renderer.d.ts.map +1 -1
  130. package/dist/utils/excalidraw-renderer.js +1 -0
  131. package/dist/utils/excalidraw-renderer.js.map +1 -1
  132. package/dist/utils/graph-renderer.d.ts +2 -0
  133. package/dist/utils/graph-renderer.d.ts.map +1 -1
  134. package/dist/utils/graph-renderer.js +188 -14
  135. package/dist/utils/graph-renderer.js.map +1 -1
  136. package/dist/verification/__tests__/decay-policy.test.js +1 -0
  137. package/dist/verification/__tests__/decay-policy.test.js.map +1 -1
  138. package/dist/verification/config.d.ts.map +1 -1
  139. package/dist/verification/config.js +2 -0
  140. package/dist/verification/config.js.map +1 -1
  141. package/dist/verification/types.d.ts +2 -0
  142. package/dist/verification/types.d.ts.map +1 -1
  143. package/package.json +2 -2
  144. package/templates/.github/workflows/dare-pr.yml +26 -0
  145. package/templates/dashboard/app.js +184 -0
  146. package/templates/dashboard/index.html +63 -0
  147. package/templates/dashboard/style.css +134 -0
  148. package/templates/ide/antigravity/.agents/skills/dare-dashboard/SKILL.md +18 -0
  149. package/templates/ide/claude/.claude/commands/dare-dashboard.md +18 -0
  150. package/templates/ide/cursor/.cursor/commands/dare-dashboard.md +18 -0
package/README.md CHANGED
@@ -166,8 +166,12 @@ Pick **one** of the two paths per stack:
166
166
 
167
167
  > **v3.8.1–3.8.2 (manutenção):** `dare update` passa a entregar os skills/comandos/config das v3.4→v3.8 a projetos existentes (backfill do `UPDATE-MANIFEST`, 3.8.1). O CI ganha um **gate de cobertura de docs** + **redeploy automático da documentação** a cada release (3.8.2).
168
168
 
169
- > **v3.10.0:** **Drift Gate** — `dare graph drift` (exit **7** com `--strict`). **Local Semantic Search** retrieval híbrido RRF, `graphrag.semantic` opt-in, `@xenova/transformers` optionalDep lazy, `dare graph query --semantic`, indexação incremental por `contentHash`.
169
+ > **v3.11.0:** **Dynamic DAG** — `REPLAN` splice de sub-DAG em runtime (`refine --split` + `spliceSubDag`); `verification.loop.maxDepth` (default **2**, excedeu `ESCALATE`); `dare refine --split --apply` (modo manual); `dare dag viz` agrupa sub-DAGs (`subgraph Sub-DAG: <pai>` em Mermaid/DOT/Excalidraw); estado persiste em `dare-dag.yaml` + `.dare/state.json`.
170
+
171
+ > **v3.10.0:** **Drift Gate** — `dare graph drift` (exit **7** com `--strict`). **Local Semantic Search** — retrieval híbrido RRF, `graphrag.semantic` opt-in, `@huggingface/transformers` optionalDep lazy, `dare graph query --semantic`, indexação incremental por `contentHash`.
172
+
170
173
  > **v3.9.0:** **Secure Autonomous Executor + Agentic-chain Security Gate** — `dare execute --agent` (driver plugável, SDK como `optionalDependency` lazy; `--budget-tokens`, `--require-approval rank|none`, `--on-fail replan|escalate|stop`, `--dry-run`; telemetria de custo no GraphRAG; gate `no-llm-in-core`) **+** `dare guard` (unicode-audit + scan heurístico + proveniência Ed25519/minisign-compat + trust boundaries control/data; exit code **6** em FAIL; pré-flight do `dare execute --agent`; bloco `guard` em `dare.config.json`, opt-in `enabled:false`).
174
+
171
175
  > **v3.8.0:** **Formal Verification Gate** — opt-in strict aspect `verification.formal` (enabled/backend/modules/maxRepairIterations/proofTimeoutSeconds/antiBypass) plus flags `--formal` / `--no-formal` / `--formal-backend <dafny|verus|lean>`. Proves marked critical modules against external Dafny/Verus/Lean toolchain (not an npm dep); exit 5 when toolchain missing on a marked module; anti-bypass rejects `assume(false)`/`ensures true`/leaks even on solver exit 0; telemetry edge `proven_by` → `formal-gate`.
172
176
 
173
177
  > **v3.7.0:** **Brownfield Discovery** — deterministic auto-discovery of codebase patterns/conventions (`dare patterns`, read-only) fed into the dual graph + steering, plus lightweight planning personas (Analyst/PM/Architect) at planning time only (no runtime swarm). Extends `dare reverse`/`dna`.
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=ci-pr-regression.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ci-pr-regression.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/ci-pr-regression.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,76 @@
1
+ import { describe, expect, it, vi } from 'vitest';
2
+ import fs from 'fs-extra';
3
+ import path from 'node:path';
4
+ import { fileURLToPath } from 'node:url';
5
+ import { DARE_REPORT_MARKER, emitAnnotations, sanitizeFindingText, upsertPrComment, } from '../reporters/github.js';
6
+ import { exitCodeForFailOn, parseFailOn } from '../reporters/ci-gate.js';
7
+ const REPO_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..', '..', '..');
8
+ describe('ci-pr regression', () => {
9
+ it('annotations_match_github_workflow_command_format', () => {
10
+ const lines = [];
11
+ vi.spyOn(process.stdout, 'write').mockImplementation((c) => {
12
+ lines.push(String(c));
13
+ return true;
14
+ });
15
+ emitAnnotations([
16
+ {
17
+ severity: 'error',
18
+ file: 'packages/cli/src/foo.ts',
19
+ line: 10,
20
+ rule: 'todo-marker',
21
+ message: 'TODO remove',
22
+ },
23
+ ]);
24
+ expect(lines[0]).toMatch(/^::error file=packages\/cli\/src\/foo\.ts,line=10::/);
25
+ });
26
+ it('upsertPrComment_updates_instead_of_duplicating', async () => {
27
+ let postCount = 0;
28
+ let patchCount = 0;
29
+ const fetchMock = vi.fn(async (_url, init) => {
30
+ if (!init?.method) {
31
+ return new Response(JSON.stringify([{ id: 5, body: `${DARE_REPORT_MARKER}\nold` }]), {
32
+ status: 200,
33
+ });
34
+ }
35
+ if (init.method === 'PATCH') {
36
+ patchCount += 1;
37
+ return new Response('{}', { status: 200 });
38
+ }
39
+ if (init.method === 'POST') {
40
+ postCount += 1;
41
+ return new Response('{}', { status: 201 });
42
+ }
43
+ return new Response('{}', { status: 404 });
44
+ });
45
+ await upsertPrComment({
46
+ repo: 'org/repo',
47
+ prNumber: 1,
48
+ token: 'secret-token-value',
49
+ summary: [{ gate: 'guard', verdict: 'pass', count: 0 }],
50
+ findings: [],
51
+ }, fetchMock);
52
+ expect(patchCount).toBe(1);
53
+ expect(postCount).toBe(0);
54
+ });
55
+ it('fail_on_none_does_not_block', () => {
56
+ expect(parseFailOn('none')).toBe('none');
57
+ expect(exitCodeForFailOn('none', 'fail')).toBe(0);
58
+ });
59
+ it('sanitize_removes_secrets_and_absolute_paths', () => {
60
+ const out = sanitizeFindingText('C:\\Users\\secret\\file.txt leaked ghp_abcdefghijklmnopqrstuvwxyz123456');
61
+ expect(out).not.toContain('C:\\Users');
62
+ expect(out).not.toContain('ghp_abcdefghijklmnopqrstuvwxyz123456');
63
+ });
64
+ it('action_yml_declares_minimal_permissions', async () => {
65
+ const actionYml = await fs.readFile(path.join(REPO_ROOT, 'action.yml'), 'utf8');
66
+ expect(actionYml).toContain('pull-requests: write');
67
+ expect(actionYml).toContain('contents: read');
68
+ expect(actionYml).toContain("default: 'none'");
69
+ });
70
+ it('dare_pr_workflow_template_pins_actions_by_sha', async () => {
71
+ const wf = await fs.readFile(path.join(REPO_ROOT, 'packages/cli/templates/.github/workflows/dare-pr.yml'), 'utf8');
72
+ expect(wf).toMatch(/uses: actions\/checkout@[0-9a-f]{40}/);
73
+ expect(wf).not.toMatch(/@v\d/);
74
+ });
75
+ });
76
+ //# sourceMappingURL=ci-pr-regression.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ci-pr-regression.test.js","sourceRoot":"","sources":["../../src/__tests__/ci-pr-regression.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEzE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAC5B,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,CACL,CAAC;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;YACzD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,eAAe,CAAC;YACd;gBACE,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,yBAAyB;gBAC/B,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,aAAa;aACvB;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,IAAkB,EAAE,EAAE;YACjE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAClB,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,kBAAkB,OAAO,EAAE,CAAC,CAAC,EAAE;oBACnF,MAAM,EAAE,GAAG;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC5B,UAAU,IAAI,CAAC,CAAC;gBAChB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,SAAS,IAAI,CAAC,CAAC;gBACf,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,MAAM,eAAe,CACnB;YACE,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,oBAAoB;YAC3B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACvD,QAAQ,EAAE,EAAE;SACb,EACD,SAAoC,CACrC,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,GAAG,GAAG,mBAAmB,CAC7B,yEAAyE,CAC1E,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QAChF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC9C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,QAAQ,CAC1B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sDAAsD,CAAC,EAC5E,MAAM,CACP,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;QAC3D,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=dashboard-front.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dashboard-front.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/dashboard-front.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,37 @@
1
+ import path from 'node:path';
2
+ import fs from 'fs-extra';
3
+ import { describe, expect, it } from 'vitest';
4
+ import { resolveDashboardTemplateRoot } from '../dashboard/routes.js';
5
+ describe('dashboard front templates', () => {
6
+ const root = resolveDashboardTemplateRoot();
7
+ it('index_html_has_required_panel_selectors', async () => {
8
+ const html = await fs.readFile(path.join(root, 'index.html'), 'utf8');
9
+ for (const id of [
10
+ 'dag-panel',
11
+ 'gates-panel',
12
+ 'cost-panel',
13
+ 'bestof-panel',
14
+ 'guard-panel',
15
+ 'drift-panel',
16
+ 'empty-hints',
17
+ ]) {
18
+ expect(html).toContain(`id="${id}"`);
19
+ }
20
+ expect(html).toContain('/dashboard/assets/app.js');
21
+ expect(html).toContain('/dashboard/assets/style.css');
22
+ });
23
+ it('app_js_fetches_telemetry_api', async () => {
24
+ const js = await fs.readFile(path.join(root, 'app.js'), 'utf8');
25
+ expect(js).toContain("fetch('/api/telemetry')");
26
+ expect(js).toContain('renderDag');
27
+ expect(js).toContain('renderGates');
28
+ expect(js).toContain('renderCost');
29
+ });
30
+ it('style_css_defines_panel_layout', async () => {
31
+ const css = await fs.readFile(path.join(root, 'style.css'), 'utf8');
32
+ expect(css).toContain('.panel');
33
+ expect(css).toContain('.chart');
34
+ expect(css).toContain('.metrics');
35
+ });
36
+ });
37
+ //# sourceMappingURL=dashboard-front.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dashboard-front.test.js","sourceRoot":"","sources":["../../src/__tests__/dashboard-front.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AAEtE,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,MAAM,IAAI,GAAG,4BAA4B,EAAE,CAAC;IAE5C,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QACtE,KAAK,MAAM,EAAE,IAAI;YACf,WAAW;YACX,aAAa;YACb,YAAY;YACZ,cAAc;YACd,aAAa;YACb,aAAa;YACb,aAAa;SACd,EAAE,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAClC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=dashboard-regression.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dashboard-regression.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/dashboard-regression.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,68 @@
1
+ import os from 'node:os';
2
+ import path from 'node:path';
3
+ import fs from 'fs-extra';
4
+ import express from 'express';
5
+ import request from 'supertest';
6
+ import { afterEach, beforeEach, describe, expect, it } from 'vitest';
7
+ import { createDashboardApp } from '../commands/dashboard.js';
8
+ const TOKEN = 'dashboard-regression-token';
9
+ function nonLoopbackApp(app) {
10
+ const wrapper = express();
11
+ wrapper.set('trust proxy', true);
12
+ wrapper.use((req, _res, next) => {
13
+ Object.defineProperty(req, 'ip', { value: '203.0.113.1', configurable: true });
14
+ Object.defineProperty(req.socket, 'remoteAddress', {
15
+ value: '203.0.113.1',
16
+ configurable: true,
17
+ });
18
+ next();
19
+ });
20
+ wrapper.use(app);
21
+ return wrapper;
22
+ }
23
+ describe('dashboard regression', () => {
24
+ let projectRoot;
25
+ beforeEach(async () => {
26
+ projectRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'dare-dash-reg-'));
27
+ await fs.ensureDir(path.join(projectRoot, '.dare'));
28
+ await fs.writeJson(path.join(projectRoot, '.dare', 'state.json'), {
29
+ version: 1,
30
+ updatedAt: '2026-06-11T00:00:00.000Z',
31
+ tasks: {},
32
+ });
33
+ await fs.writeJson(path.join(projectRoot, 'dare-graph.yml'), {
34
+ backend: 'json',
35
+ path: '.dare/graph.json',
36
+ });
37
+ await fs.writeJson(path.join(projectRoot, '.dare', 'graph.json'), { nodes: [], edges: [] });
38
+ });
39
+ afterEach(async () => {
40
+ await fs.remove(projectRoot).catch(() => undefined);
41
+ });
42
+ it('reuses_mcp_auth_401_without_token_off_loopback', async () => {
43
+ const app = nonLoopbackApp(createDashboardApp(projectRoot, TOKEN));
44
+ const res = await request(app).get('/dashboard');
45
+ expect(res.status).toBe(401);
46
+ });
47
+ it('read_only_no_post_put_mutations', async () => {
48
+ const app = createDashboardApp(projectRoot, TOKEN);
49
+ expect((await request(app).post('/api/telemetry').set('Host', '127.0.0.1').send({})).status).toBe(404);
50
+ expect((await request(app).put('/api/telemetry').set('Host', '127.0.0.1').send({})).status).toBe(404);
51
+ expect((await request(app).delete('/dashboard').set('Host', '127.0.0.1')).status).toBe(404);
52
+ });
53
+ it('assets_confined_no_traversal', async () => {
54
+ const app = createDashboardApp(projectRoot, TOKEN);
55
+ const blocked = await request(app)
56
+ .get('/dashboard/assets/..%2f..%2fpackage.json')
57
+ .set('Host', '127.0.0.1');
58
+ expect(blocked.status).toBe(403);
59
+ });
60
+ it('empty_graph_returns_emptyHints', async () => {
61
+ const app = createDashboardApp(projectRoot, TOKEN);
62
+ const res = await request(app).get('/api/telemetry').set('Host', '127.0.0.1');
63
+ expect(res.status).toBe(200);
64
+ expect(res.body.emptyHints).toContain('no tasks — run dare execute');
65
+ expect(res.body.dag.total).toBe(0);
66
+ });
67
+ });
68
+ //# sourceMappingURL=dashboard-regression.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dashboard-regression.test.js","sourceRoot":"","sources":["../../src/__tests__/dashboard-regression.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,MAAM,KAAK,GAAG,4BAA4B,CAAC;AAE3C,SAAS,cAAc,CAAC,GAAoB;IAC1C,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC9B,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACjD,KAAK,EAAE,aAAa;YACpB,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAI,WAAmB,CAAC;IAExB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACzE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE;YAChE,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,0BAA0B;YACrC,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE;YAC3D,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,kBAAkB;SACzB,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,GAAG,GAAG,cAAc,CAAC,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,GAAG,GAAG,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvG,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtG,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,GAAG,GAAG,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;aAC/B,GAAG,CAAC,0CAA0C,CAAC;aAC/C,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC5B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,GAAG,GAAG,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC9E,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=dynamic-dag-regression.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dynamic-dag-regression.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/dynamic-dag-regression.test.ts"],"names":[],"mappings":""}