@dewtech/dare-cli 3.4.0 → 3.6.0

package/dist/graphrag/traverse.js

@@ -0,0 +1,139 @@
+import { assertRelativeSafe } from '../utils/path-safety.js';
+const QN_RE = /^[\w./-]+::\w+$/;
+const SUPPORTED_EXT = /\.(ts|tsx|js|jsx|mjs|cjs|py|go|rs|php|rb|java|kt|cs)$/i;
+function findByQualifiedName(graph, qn) {
+    const directId = qn.startsWith('code_symbol:') ? qn : `code_symbol:${qn}`;
+    const direct = graph.getNode(directId);
+    if (direct)
+        return direct;
+    const { nodes } = graph.exportToJson();
+    return (nodes.find((n) => n.type === 'code_symbol' &&
+        (n.metadata?.qualifiedName === qn || n.id === directId)) ?? null);
+}
+function isPathLike(seed) {
+    return seed.includes('/') || seed.includes('::') || SUPPORTED_EXT.test(seed);
+}
+function pathPartFromSeed(seed) {
+    if (seed.includes('::'))
+        return seed.split('::')[0];
+    return seed;
+}
+export function traverse(graph, opts) {
+    const maxHops = Math.min(opts.maxHops ?? 3, 5);
+    const maxFanout = Math.min(opts.maxFanout ?? 50, 200);
+    const direction = opts.direction ?? 'both';
+    const edgeFilter = opts.edgeTypes ? new Set(opts.edgeTypes) : null;
+    const nodeFilter = opts.nodeTypes ? new Set(opts.nodeTypes) : null;
+    const visitedNodes = new Map();
+    const visitedEdges = new Map();
+    for (const seedId of opts.seedNodeIds) {
+        const seed = graph.getNode(seedId);
+        if (seed)
+            visitedNodes.set(seedId, seed);
+    }
+    let frontier = opts.seedNodeIds.filter((id) => graph.getNode(id));
+    let hopsReached = 0;
+    for (let depth = 0; depth < maxHops && frontier.length > 0; depth++) {
+        const nextFrontier = [];
+        hopsReached = depth + 1;
+        for (const nodeId of frontier) {
+            let edges = graph.getEdges(nodeId, direction);
+            edges = edges.sort((a, b) => a.id.localeCompare(b.id)).slice(0, maxFanout);
+            if (edgeFilter)
+                edges = edges.filter((e) => edgeFilter.has(e.type));
+            for (const edge of edges) {
+                visitedEdges.set(edge.id, edge);
+                const neighborId = edge.sourceId === nodeId ? edge.targetId : edge.sourceId;
+                if (visitedNodes.has(neighborId))
+                    continue;
+                const node = graph.getNode(neighborId);
+                if (!node)
+                    continue;
+                if (nodeFilter && !nodeFilter.has(node.type))
+                    continue;
+                visitedNodes.set(neighborId, node);
+                nextFrontier.push(neighborId);
+            }
+        }
+        frontier = nextFrontier;
+    }
+    return {
+        nodes: [...visitedNodes.values()].sort((a, b) => a.id.localeCompare(b.id)),
+        edges: [...visitedEdges.values()].sort((a, b) => a.id.localeCompare(b.id)),
+        hops: hopsReached,
+    };
+}
+export function locate(graph, seedQuery, opts = {}) {
+    const hops = Math.min(opts.hops ?? 3, 5);
+    const limit = Math.min(opts.limit ?? 10, 50);
+    const edgeTypes = opts.edgeTypes ?? ['implements', 'contains', 'depends_on'];
+    const nodeTypes = opts.nodeTypes ?? ['code_symbol', 'file', 'task'];
+    if (isPathLike(seedQuery)) {
+        assertRelativeSafe(pathPartFromSeed(seedQuery));
+    }
+    const seeds = [];
+    if (QN_RE.test(seedQuery)) {
+        const node = findByQualifiedName(graph, seedQuery);
+        if (node)
+            seeds.push({ node, score: 1.0, path: [node.id] });
+    }
+    else if (isPathLike(seedQuery) && !seedQuery.includes('::')) {
+        const prefix = seedQuery.replace(/\\/g, '/');
+        const { nodes } = graph.exportToJson();
+        for (const n of nodes) {
+            if (n.type !== 'file' && n.type !== 'code_symbol')
+                continue;
+            const p = String(n.metadata?.path ?? n.metadata?.qualifiedName ?? '');
+            if (p.startsWith(prefix) || n.id.includes(prefix)) {
+                seeds.push({ node: n, score: 1.0, path: [n.id] });
+            }
+        }
+    }
+    else {
+        for (const hit of graph.searchNodes(seedQuery, 5)) {
+            seeds.push({ node: hit.node, score: 0.7, path: [hit.node.id] });
+        }
+    }
+    const candidates = new Map();
+    for (const seed of seeds) {
+        const key = seed.node.id;
+        const existing = candidates.get(key);
+        if (!existing || seed.score > existing.score) {
+            candidates.set(key, seed);
+        }
+        const walked = traverse(graph, {
+            seedNodeIds: [seed.node.id],
+            maxHops: hops,
+            edgeTypes,
+            nodeTypes,
+            direction: 'both',
+        });
+        for (const node of walked.nodes) {
+            const hopDist = walked.edges.length > 0 ? 1 : 0;
+            let score = seed.score - hopDist * 0.15;
+            if (node.type === 'code_symbol')
+                score += 0.1;
+            const prev = candidates.get(node.id);
+            if (!prev || score > prev.score) {
+                candidates.set(node.id, {
+                    node,
+                    score,
+                    path: [seed.node.id, node.id],
+                });
+            }
+        }
+    }
+    const sorted = [...candidates.values()].sort((a, b) => {
+        if (b.score !== a.score)
+            return b.score - a.score;
+        return a.node.id.localeCompare(b.node.id);
+    });
+    return {
+        candidates: sorted.slice(0, limit).map((c) => ({
+            node: c.node,
+            score: c.score,
+            path: c.path,
+        })),
+    };
+}
+//# sourceMappingURL=traverse.js.map

package/dist/graphrag/traverse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"traverse.js","sourceRoot":"","sources":["../../src/graphrag/traverse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAW7D,MAAM,KAAK,GAAG,iBAAiB,CAAC;AAChC,MAAM,aAAa,GAAG,wDAAwD,CAAC;AAE/E,SAAS,mBAAmB,CAAC,KAAqB,EAAE,EAAU;IAC5D,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC;IAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;IACvC,OAAO,CACL,KAAK,CAAC,IAAI,CACR,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,aAAa;QACxB,CAAC,CAAC,CAAC,QAAQ,EAAE,aAAa,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAC1D,IAAI,IAAI,CACV,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAqB,EAAE,IAAqB;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAqB,CAAC;IAClD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAqB,CAAC;IAElD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,IAAI;YAAE,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACpE,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC;QAExB,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC9C,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YAC3E,IAAI,UAAU;gBAAE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAEpE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBAChC,MAAM,UAAU,GACd,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAC3D,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;oBAAE,SAAS;gBAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACvC,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACvD,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBACnC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,QAAQ,GAAG,YAAY,CAAC;IAC1B,CAAC;IAED,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1E,KAAK,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1E,IAAI,EAAE,WAAW;KAClB,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,MAAM,CACpB,KAAqB,EACrB,SAAiB,EACjB,OAAsB,EAAE;IAExB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpE,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,kBAAkB,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,KAAK,GAAsB,EAAE,CAAC;IAEpC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACnD,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;SAAM,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa;gBAAE,SAAS;YAC5D,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;YACtE,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC;YAClD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEtD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;YAC7C,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE;YAC7B,WAAW,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,IAAI;YACb,SAAS;YACT,SAAS;YACT,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,OAAO,GAAG,IAAI,CAAC;YACxC,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa;gBAAE,KAAK,IAAI,GAAG,CAAC;YAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE;oBACtB,IAAI;oBACJ,KAAK;oBACL,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;iBAC9B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpD,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;QAClD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7C,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,IAAI,EAAE,CAAC,CAAC,IAAI;SACb,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}

package/dist/graphrag/types.d.ts

@@ -1,5 +1,13 @@
-export type NodeType = 'task' | 'file' | 'schema' | 'endpoint' | 'component' | 'entity' | 'concept' | 'gate';
-export type EdgeType = 'depends_on' | 'implements' | 'uses' | 'references' | 'related_to' | 'contains' | 'extends' | 'verified_by';
+export type NodeType = 'task' | 'file' | 'schema' | 'endpoint' | 'component' | 'entity' | 'concept' | 'gate' | 'code_symbol' | 'requirement';
+export type EdgeType = 'depends_on' | 'implements' | 'uses' | 'references' | 'related_to' | 'contains' | 'extends' | 'verified_by' | 'affects' | 'derives_from';
+/** All members of {@link NodeType} — use for zero-initialized statistics (RNF-05). */
+export declare const ALL_NODE_TYPES: readonly ["task", "file", "schema", "endpoint", "component", "entity", "concept", "gate", "code_symbol", "requirement"];
+/** All members of {@link EdgeType} — use for zero-initialized statistics (RNF-05). */
+export declare const ALL_EDGE_TYPES: readonly ["depends_on", "implements", "uses", "references", "related_to", "contains", "extends", "verified_by", "affects", "derives_from"];
+/** Zero-filled `nodesByType` — absent types stay `0`, never `NaN` (RNF-05). */
+export declare function emptyNodesByType(): Record<NodeType, number>;
+/** Zero-filled `edgesByType` — absent types stay `0`, never `NaN` (RNF-05). */
+export declare function emptyEdgesByType(): Record<EdgeType, number>;
 export interface GraphNode {
     id: string;
     type: NodeType;
@@ -45,6 +53,56 @@ export interface ComponentNode extends GraphNode {
     framework?: string;
     props?: string[];
 }
+export type CodeSymbolKind = 'function' | 'class' | 'method';
+/**
+ * Canonical id: `code_symbol:{qualifiedName}` — e.g. `code_symbol:src/math.ts::add`
+ */
+export interface CodeSymbolNode extends GraphNode {
+    type: 'code_symbol';
+    path: string;
+    symbol: string;
+    kind: CodeSymbolKind;
+    qualifiedName: string;
+    line?: number;
+}
+/**
+ * Canonical id: `requirement:{reqId}` — e.g. `requirement:RF-01`
+ * (`task:{taskId}` e `file:{posixPath}` permanecem inalterados.)
+ */
+export interface RequirementNode extends GraphNode {
+    type: 'requirement';
+    reqId: string;
+    source: 'design' | 'blueprint' | 'tasks' | 'dag';
+    title: string;
+    priority?: 'MUST' | 'SHOULD' | 'COULD';
+}
+export interface TraverseOptions {
+    readonly seedNodeIds: readonly string[];
+    readonly maxHops?: number;
+    readonly maxFanout?: number;
+    readonly nodeTypes?: readonly NodeType[];
+    readonly edgeTypes?: readonly EdgeType[];
+    readonly direction?: 'out' | 'in' | 'both';
+}
+export interface TraverseResult {
+    readonly nodes: readonly GraphNode[];
+    readonly edges: readonly GraphEdge[];
+    readonly hops: number;
+}
+export interface LocateOptions {
+    readonly hops?: number;
+    readonly nodeTypes?: readonly NodeType[];
+    readonly edgeTypes?: readonly EdgeType[];
+    readonly limit?: number;
+}
+export interface LocateCandidate {
+    readonly node: GraphNode;
+    readonly score: number;
+    readonly path: readonly string[];
+}
+export interface LocateResult {
+    readonly candidates: ReadonlyArray<LocateCandidate>;
+}
 export interface SearchResult {
     node: GraphNode;
     score: number;

package/dist/graphrag/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/graphrag/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAChB,MAAM,GACN,MAAM,GACN,QAAQ,GACR,UAAU,GACV,WAAW,GACX,QAAQ,GACR,SAAS,GACT,MAAM,CAAC;AACX,MAAM,MAAM,QAAQ,GAChB,YAAY,GACZ,YAAY,GACZ,MAAM,GACN,YAAY,GACZ,YAAY,GACZ,UAAU,GACV,SAAS,GACT,aAAa,CAAC;AAElB,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,QAAS,SAAQ,SAAS;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;IAClE,UAAU,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,QAAS,SAAQ,SAAS;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAW,SAAQ,SAAS;IAC3C,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAc,SAAQ,SAAS;IAC9C,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;CACvC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/graphrag/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAChB,MAAM,GACN,MAAM,GACN,QAAQ,GACR,UAAU,GACV,WAAW,GACX,QAAQ,GACR,SAAS,GACT,MAAM,GACN,aAAa,GACb,aAAa,CAAC;AAElB,MAAM,MAAM,QAAQ,GAChB,YAAY,GACZ,YAAY,GACZ,MAAM,GACN,YAAY,GACZ,YAAY,GACZ,UAAU,GACV,SAAS,GACT,aAAa,GACb,SAAS,GACT,cAAc,CAAC;AAEnB,sFAAsF;AACtF,eAAO,MAAM,cAAc,yHAWa,CAAC;AAEzC,sFAAsF;AACtF,eAAO,MAAM,cAAc,4IAWa,CAAC;AAEzC,+EAA+E;AAC/E,wBAAgB,gBAAgB,IAAI,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAE3D;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,IAAI,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAE3D;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,QAAS,SAAQ,SAAS;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;IAClE,UAAU,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,QAAS,SAAQ,SAAS;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAW,SAAQ,SAAS;IAC3C,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAc,SAAQ,SAAS;IAC9C,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE7D;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,SAAS;IAC/C,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,cAAc,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,GAAG,KAAK,CAAC;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;CACxC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,MAAM,CAAC;CAC5C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;CACvC"}

package/dist/graphrag/types.js

@@ -1,2 +1,35 @@
-export {};
+/** All members of {@link NodeType} — use for zero-initialized statistics (RNF-05). */
+export const ALL_NODE_TYPES = [
+    'task',
+    'file',
+    'schema',
+    'endpoint',
+    'component',
+    'entity',
+    'concept',
+    'gate',
+    'code_symbol',
+    'requirement',
+];
+/** All members of {@link EdgeType} — use for zero-initialized statistics (RNF-05). */
+export const ALL_EDGE_TYPES = [
+    'depends_on',
+    'implements',
+    'uses',
+    'references',
+    'related_to',
+    'contains',
+    'extends',
+    'verified_by',
+    'affects',
+    'derives_from',
+];
+/** Zero-filled `nodesByType` — absent types stay `0`, never `NaN` (RNF-05). */
+export function emptyNodesByType() {
+    return Object.fromEntries(ALL_NODE_TYPES.map((t) => [t, 0]));
+}
+/** Zero-filled `edgesByType` — absent types stay `0`, never `NaN` (RNF-05). */
+export function emptyEdgesByType() {
+    return Object.fromEntries(ALL_EDGE_TYPES.map((t) => [t, 0]));
+}
 //# sourceMappingURL=types.js.map

package/dist/graphrag/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/graphrag/types.ts"],"names":[],"mappings":""}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/graphrag/types.ts"],"names":[],"mappings":"AAwBA,sFAAsF;AACtF,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;IACV,WAAW;IACX,QAAQ;IACR,SAAS;IACT,MAAM;IACN,aAAa;IACb,aAAa;CACyB,CAAC;AAEzC,sFAAsF;AACtF,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY;IACZ,YAAY;IACZ,MAAM;IACN,YAAY;IACZ,YAAY;IACZ,UAAU;IACV,SAAS;IACT,aAAa;IACb,SAAS;IACT,cAAc;CACwB,CAAC;AAEzC,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB;IAC9B,OAAO,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAA6B,CAAC;AAC3F,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB;IAC9B,OAAO,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAA6B,CAAC;AAC3F,CAAC"}

package/dist/hooks/__tests__/allowlist.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=allowlist.test.d.ts.map

package/dist/hooks/__tests__/allowlist.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.test.d.ts","sourceRoot":"","sources":["../../../src/hooks/__tests__/allowlist.test.ts"],"names":[],"mappings":""}

package/dist/hooks/__tests__/allowlist.test.js

@@ -0,0 +1,29 @@
+import { describe, it, expect } from 'vitest';
+import { resolveAction, ActionNotAllowedError } from '../allowlist.js';
+describe('hooks allowlist', () => {
+    it('resolves dare-validate', () => {
+        expect(resolveAction('dare-validate', { event: 'pre-commit' }, {})).toEqual({
+            cmd: 'dare',
+            argv: ['validate', '--strict'],
+        });
+    });
+    it('resolves dare-review with taskId as argv element', () => {
+        const resolved = resolveAction('dare-review', { event: 'on-task-complete', taskId: 'task-101' }, {});
+        expect(resolved.argv).toContain('task-101');
+        expect(resolved.argv).toEqual(['review', 'task-101', '--strict', '--format', 'json']);
+    });
+    it('resolves lint from stack command', () => {
+        expect(resolveAction('lint', { event: 'on-save' }, { lint: 'npm run lint' })).toEqual({
+            cmd: 'npm',
+            argv: ['run', 'lint'],
+        });
+    });
+    it('rejects unknown action keys', () => {
+        expect(() => resolveAction('rm-rf', { event: 'on-save' }, {})).toThrow(ActionNotAllowedError);
+        expect(() => resolveAction('rm-rf', { event: 'on-save' }, {})).toThrow("Hook action 'rm-rf' is not in the allowlist");
+    });
+    it('rejects dare-review without taskId', () => {
+        expect(() => resolveAction('dare-review', { event: 'on-task-complete' }, {})).toThrow(ActionNotAllowedError);
+    });
+});
+//# sourceMappingURL=allowlist.test.js.map

package/dist/hooks/__tests__/allowlist.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.test.js","sourceRoot":"","sources":["../../../src/hooks/__tests__/allowlist.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAGvE,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,aAAa,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1E,GAAG,EAAE,MAAM;YACX,IAAI,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,QAAQ,GAAG,aAAa,CAC5B,aAAa,EACb,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,UAAU,EAAE,EACjD,EAAE,CACH,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACpF,GAAG,EAAE,KAAK;YACV,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,EAAE,CACV,aAAa,CAAC,OAA2B,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CACrE,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,EAAE,CACV,aAAa,CAAC,OAA2B,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CACrE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,EAAE,CACV,aAAa,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC,CAChE,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/hooks/__tests__/config.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=config.test.d.ts.map

package/dist/hooks/__tests__/config.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.test.d.ts","sourceRoot":"","sources":["../../../src/hooks/__tests__/config.test.ts"],"names":[],"mappings":""}

package/dist/hooks/__tests__/config.test.js

@@ -0,0 +1,57 @@
+import { describe, it, expect } from 'vitest';
+import { HOOK_DEFAULTS, parseHookConfig, HookConfigError, seedHooksDefaultsIfAbsent, } from '../config.js';
+describe('parseHookConfig', () => {
+    it('returns inert defaults when hooks block is absent', () => {
+        expect(parseHookConfig({})).toEqual({ on: {}, trusted: false });
+        expect(parseHookConfig({ verification: { enabled: false } })).toEqual({
+            on: {},
+            trusted: false,
+        });
+        expect(parseHookConfig(undefined)).toEqual({ on: {}, trusted: false });
+    });
+    it('parses valid hooks block', () => {
+        const cfg = parseHookConfig({
+            hooks: {
+                on: { 'on-save': [{ action: 'lint' }] },
+                trusted: true,
+            },
+        });
+        expect(cfg.trusted).toBe(true);
+        expect(cfg.on['on-save']).toEqual([{ action: 'lint' }]);
+    });
+    it('rejects invalid hook event', () => {
+        expect(() => parseHookConfig({ hooks: { on: { 'on-deploy': [] } } })).toThrow(HookConfigError);
+        try {
+            parseHookConfig({ hooks: { on: { 'on-deploy': [] } } });
+        }
+        catch (err) {
+            expect(err).toBeInstanceOf(HookConfigError);
+            const issues = err.issues;
+            expect(issues.some((i) => i.path.includes('on-deploy'))).toBe(true);
+            expect(err.message).toMatch(/^Invalid hooks config:/);
+        }
+    });
+    it('rejects invalid action key', () => {
+        expect(() => parseHookConfig({
+            hooks: { on: { 'on-save': [{ action: 'rm-rf' }] } },
+        })).toThrow(HookConfigError);
+    });
+    it('rejects path-escape args', () => {
+        expect(() => parseHookConfig({
+            hooks: {
+                on: {
+                    'on-save': [{ action: 'lint', args: ['../../etc/passwd'] }],
+                },
+            },
+        })).toThrow();
+    });
+});
+describe('seedHooksDefaultsIfAbsent', () => {
+    it('inserts inert block when absent', () => {
+        const cfg = {};
+        expect(seedHooksDefaultsIfAbsent(cfg)).toBe(true);
+        expect(cfg.hooks).toEqual(HOOK_DEFAULTS);
+        expect(seedHooksDefaultsIfAbsent(cfg)).toBe(false);
+    });
+});
+//# sourceMappingURL=config.test.js.map

package/dist/hooks/__tests__/config.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../../../src/hooks/__tests__/config.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,aAAa,EACb,eAAe,EACf,eAAe,EACf,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AAEtB,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,eAAe,CAAC,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACpE,EAAE,EAAE,EAAE;YACN,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,GAAG,GAAG,eAAe,CAAC;YAC1B,KAAK,EAAE;gBACL,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE;gBACvC,OAAO,EAAE,IAAI;aACd;SACF,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CACxD,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAE3B,IAAI,CAAC;YACH,eAAe,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAI,GAAuB,CAAC,MAAM,CAAC;YAC/C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpE,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC;YACd,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;SACpD,CAAC,CACH,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC;YACd,KAAK,EAAE;gBACL,EAAE,EAAE;oBACF,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC;iBAC5D;aACF;SACF,CAAC,CACH,CAAC,OAAO,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,MAAM,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACzC,MAAM,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/hooks/__tests__/dispatcher.security.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dispatcher.security.test.d.ts.map

package/dist/hooks/__tests__/dispatcher.security.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher.security.test.d.ts","sourceRoot":"","sources":["../../../src/hooks/__tests__/dispatcher.security.test.ts"],"names":[],"mappings":""}

package/dist/hooks/__tests__/dispatcher.security.test.js

@@ -0,0 +1,86 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import fs from 'fs-extra';
+import os from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { readFileSync } from 'node:fs';
+import { dispatchHook, TrustRequiredError, PathEscapeError, } from '../dispatcher.js';
+import { ActionNotAllowedError } from '../allowlist.js';
+const spawnMock = vi.fn();
+vi.mock('../../exec/safe-spawn.js', () => ({
+    safeSpawn: (...args) => spawnMock(...args),
+}));
+const HOOKS_SRC = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const STEERING_SRC = path.resolve(HOOKS_SRC, '..', 'steering');
+describe('hooks dispatcher security', () => {
+    let projectRoot;
+    beforeEach(async () => {
+        spawnMock.mockReset();
+        spawnMock.mockResolvedValue({ code: 0, stdout: '', stderr: '', timedOut: false });
+        projectRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'hook-sec-'));
+        await fs.writeJson(path.join(projectRoot, 'dare.config.json'), {
+            structure: 'mcp-server',
+            mcpLanguage: 'node-ts',
+        });
+        await fs.writeFile(path.join(projectRoot, 'dare-graph.yml'), 'backend: json\njson:\n  path: .dare/graph.json\n');
+    });
+    afterEach(async () => {
+        await fs.remove(projectRoot).catch(() => undefined);
+    });
+    const trustedConfig = {
+        on: { 'on-save': [{ action: 'dare-validate' }] },
+        trusted: true,
+    };
+    it('rejects path traversal before spawn', async () => {
+        await expect(dispatchHook(trustedConfig, { event: 'on-save', file: '../../etc/passwd' }, { projectRoot })).rejects.toThrow(PathEscapeError);
+        expect(spawnMock).not.toHaveBeenCalled();
+    });
+    it('rejects absolute paths before spawn', async () => {
+        await expect(dispatchHook(trustedConfig, { event: 'on-save', file: '/etc/passwd' }, { projectRoot })).rejects.toThrow(PathEscapeError);
+        expect(spawnMock).not.toHaveBeenCalled();
+    });
+    it('passes shell-metacharacters as literal argv (shell:false)', async () => {
+        const malicious = "'; rm -rf / #";
+        await dispatchHook({
+            on: { 'on-file-create': [{ action: 'dare-validate' }] },
+            trusted: true,
+        }, { event: 'on-file-create', file: malicious }, { projectRoot });
+        expect(spawnMock).toHaveBeenCalled();
+        const [, argv, opts] = spawnMock.mock.calls[0];
+        expect(argv).not.toContain(undefined);
+        expect(opts).toMatchObject({ cwd: projectRoot });
+        expect(JSON.stringify(spawnMock.mock.calls)).not.toContain('shell":true');
+    });
+    it('enforces trust gate before spawn (RS-05)', async () => {
+        await expect(dispatchHook({ on: { 'on-save': [{ action: 'dare-validate' }] }, trusted: false }, { event: 'on-save' }, { projectRoot })).rejects.toThrow(TrustRequiredError);
+        expect(spawnMock).not.toHaveBeenCalled();
+    });
+    it('allows dispatch with trustOverride', async () => {
+        await dispatchHook({ on: { 'on-save': [{ action: 'dare-validate' }] }, trusted: false }, { event: 'on-save' }, { projectRoot, trustOverride: true });
+        expect(spawnMock).toHaveBeenCalled();
+    });
+    it('rejects actions outside allowlist', async () => {
+        await expect(dispatchHook({
+            on: { 'on-save': [{ action: 'rm-rf' }] },
+            trusted: true,
+        }, { event: 'on-save' }, { projectRoot })).rejects.toThrow(ActionNotAllowedError);
+        expect(spawnMock).not.toHaveBeenCalled();
+    });
+    it('has zero shell:true in hooks/ and steering/ sources', () => {
+        const files = [
+            path.join(HOOKS_SRC, 'dispatcher.ts'),
+            path.join(HOOKS_SRC, 'allowlist.ts'),
+            path.join(HOOKS_SRC, 'config.ts'),
+            path.join(STEERING_SRC, 'resolver.ts'),
+            path.join(STEERING_SRC, 'loader.ts'),
+        ];
+        const hits = [];
+        for (const file of files) {
+            const src = readFileSync(file, 'utf-8');
+            if (/shell:\s*true/.test(src))
+                hits.push(path.basename(file));
+        }
+        expect(hits).toEqual([]);
+    });
+});
+//# sourceMappingURL=dispatcher.security.test.js.map

package/dist/hooks/__tests__/dispatcher.security.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher.security.test.js","sourceRoot":"","sources":["../../../src/hooks/__tests__/dispatcher.security.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAE1B,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,SAAS,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;CACtD,CAAC,CAAC,CAAC;AAEJ,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAC5B,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,IAAI,CACL,CAAC;AACF,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AAE/D,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,IAAI,WAAmB,CAAC;IAExB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,SAAS,CAAC,SAAS,EAAE,CAAC;QACtB,SAAS,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAElF,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;QACpE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE;YAC7D,SAAS,EAAE,YAAY;YACvB,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,EACxC,kDAAkD,CACnD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG;QACpB,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,eAAwB,EAAE,CAAC,EAAE;QACzD,OAAO,EAAE,IAAI;KACd,CAAC;IAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,CACV,YAAY,CACV,aAAa,EACb,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAC9C,EAAE,WAAW,EAAE,CAChB,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACnC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,CACV,YAAY,CACV,aAAa,EACb,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,EACzC,EAAE,WAAW,EAAE,CAChB,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACnC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,SAAS,GAAG,eAAe,CAAC;QAClC,MAAM,YAAY,CAChB;YACE,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,EAAE;YACvD,OAAO,EAAE,IAAI;SACd,EACD,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,EAC5C,EAAE,WAAW,EAAE,CAChB,CAAC;QAEF,MAAM,CAAC,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACrC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,MAAM,CACV,YAAY,CACV,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EACpE,EAAE,KAAK,EAAE,SAAS,EAAE,EACpB,EAAE,WAAW,EAAE,CAChB,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACtC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,YAAY,CAChB,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EACpE,EAAE,KAAK,EAAE,SAAS,EAAE,EACpB,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,CACrC,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,MAAM,CACV,YAAY,CACV;YACE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,OAAiB,EAAE,CAAC,EAAE;YAClD,OAAO,EAAE,IAAI;SACd,EACD,EAAE,KAAK,EAAE,SAAS,EAAE,EACpB,EAAE,WAAW,EAAE,CAChB,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACzC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,KAAK,GAAG;YACZ,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC;SACrC,CAAC;QACF,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACxC,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/hooks/__tests__/dispatcher.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dispatcher.test.d.ts.map

package/dist/hooks/__tests__/dispatcher.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher.test.d.ts","sourceRoot":"","sources":["../../../src/hooks/__tests__/dispatcher.test.ts"],"names":[],"mappings":""}

package/dist/hooks/__tests__/dispatcher.test.js

@@ -0,0 +1,69 @@
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import fs from 'fs-extra';
+import os from 'node:os';
+import path from 'node:path';
+import { dispatchHook, TrustRequiredError, ActionNotAllowedError, } from '../dispatcher.js';
+const spawnMock = vi.fn();
+vi.mock('../../exec/safe-spawn.js', () => ({
+    safeSpawn: (...args) => spawnMock(...args),
+}));
+describe('hooks dispatcher', () => {
+    let projectRoot;
+    beforeEach(async () => {
+        spawnMock.mockReset();
+        spawnMock.mockResolvedValue({ code: 0, stdout: '', stderr: '', timedOut: false });
+        projectRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'hook-dispatch-'));
+        await fs.writeJson(path.join(projectRoot, 'dare.config.json'), {
+            structure: 'mcp-server',
+            mcpLanguage: 'node-ts',
+        });
+        await fs.writeFile(path.join(projectRoot, 'dare-graph.yml'), 'backend: json\njson:\n  path: .dare/graph.json\n');
+    });
+    afterEach(async () => {
+        await fs.remove(projectRoot).catch(() => undefined);
+    });
+    it('rejects untrusted config without trustOverride', async () => {
+        await expect(dispatchHook({ on: { 'on-save': [{ action: 'lint' }] }, trusted: false }, { event: 'on-save' }, { projectRoot })).rejects.toThrow(TrustRequiredError);
+        expect(spawnMock).not.toHaveBeenCalled();
+    });
+    it('dispatches dare-review via safeSpawn with argv (shell:false path)', async () => {
+        const results = await dispatchHook({
+            on: { 'on-task-complete': [{ action: 'dare-review' }] },
+            trusted: true,
+        }, { event: 'on-task-complete', taskId: 'task-101' }, { projectRoot });
+        expect(spawnMock).toHaveBeenCalledTimes(1);
+        const [cmd, argv, opts] = spawnMock.mock.calls[0];
+        expect(cmd).toBe('dare');
+        expect(argv).toEqual(['review', 'task-101', '--strict', '--format', 'json']);
+        expect(opts).toMatchObject({ cwd: projectRoot, timeoutSeconds: 600 });
+        expect(results[0]).toMatchObject({
+            action: 'dare-review',
+            exitCode: 0,
+            skipped: false,
+            verdict: 'pass',
+        });
+    });
+    it('skips duplicate dispatch via idempotency', async () => {
+        const config = {
+            on: { 'on-save': [{ action: 'dare-validate' }] },
+            trusted: true,
+        };
+        const payload = { event: 'on-save' };
+        await dispatchHook(config, payload, { projectRoot });
+        const second = await dispatchHook(config, payload, { projectRoot });
+        expect(spawnMock).toHaveBeenCalledTimes(1);
+        expect(second[0]?.skipped).toBe(true);
+    });
+    it('rejects disallowed action keys at resolve time', async () => {
+        await expect(dispatchHook({
+            on: { 'on-save': [{ action: 'rm-rf' }] },
+            trusted: true,
+        }, { event: 'on-save' }, { projectRoot })).rejects.toThrow(ActionNotAllowedError);
+    });
+    it('returns empty array when no actions configured', async () => {
+        const results = await dispatchHook({ on: {}, trusted: true }, { event: 'pre-commit' }, { projectRoot });
+        expect(results).toEqual([]);
+        expect(spawnMock).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=dispatcher.test.js.map

package/dist/hooks/__tests__/dispatcher.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher.test.js","sourceRoot":"","sources":["../../../src/hooks/__tests__/dispatcher.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAE1B,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,SAAS,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;CACtD,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,IAAI,WAAmB,CAAC;IAExB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,SAAS,CAAC,SAAS,EAAE,CAAC;QACtB,SAAS,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAElF,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACzE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE;YAC7D,SAAS,EAAE,YAAY;YACvB,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,EACxC,kDAAkD,CACnD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,CACV,YAAY,CACV,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAC3D,EAAE,KAAK,EAAE,SAAS,EAAE,EACpB,EAAE,WAAW,EAAE,CAChB,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACtC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,OAAO,GAAG,MAAM,YAAY,CAChC;YACE,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE;YACvD,OAAO,EAAE,IAAI;SACd,EACD,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,UAAU,EAAE,EACjD,EAAE,WAAW,EAAE,CAChB,CAAC;QAEF,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7E,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC/B,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,MAAM,GAAG;YACb,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,eAAwB,EAAE,CAAC,EAAE;YACzD,OAAO,EAAE,IAAI;SACd,CAAC;QACF,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAkB,EAAE,CAAC;QAE9C,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAEpE,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,CACV,YAAY,CACV;YACE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,OAAiB,EAAE,CAAC,EAAE;YAClD,OAAO,EAAE,IAAI;SACd,EACD,EAAE,KAAK,EAAE,SAAS,EAAE,EACpB,EAAE,WAAW,EAAE,CAChB,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,OAAO,GAAG,MAAM,YAAY,CAChC,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EACzB,EAAE,KAAK,EAAE,YAAY,EAAE,EACvB,EAAE,WAAW,EAAE,CAChB,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/hooks/__tests__/idempotency.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=idempotency.test.d.ts.map

package/dist/hooks/__tests__/idempotency.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.test.d.ts","sourceRoot":"","sources":["../../../src/hooks/__tests__/idempotency.test.ts"],"names":[],"mappings":""}