@dewtech/dare-cli 3.5.0 → 3.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (125) hide show
  1. package/dist/__tests__/ide-adapters.test.d.ts +2 -0
  2. package/dist/__tests__/ide-adapters.test.d.ts.map +1 -0
  3. package/dist/__tests__/ide-adapters.test.js +39 -0
  4. package/dist/__tests__/ide-adapters.test.js.map +1 -0
  5. package/dist/__tests__/ide-command-parity.test.js +2 -0
  6. package/dist/__tests__/ide-command-parity.test.js.map +1 -1
  7. package/dist/bin/dare.js +4 -0
  8. package/dist/bin/dare.js.map +1 -1
  9. package/dist/commands/__tests__/hooks.test.d.ts +2 -0
  10. package/dist/commands/__tests__/hooks.test.d.ts.map +1 -0
  11. package/dist/commands/__tests__/hooks.test.js +109 -0
  12. package/dist/commands/__tests__/hooks.test.js.map +1 -0
  13. package/dist/commands/__tests__/steering.test.d.ts +2 -0
  14. package/dist/commands/__tests__/steering.test.d.ts.map +1 -0
  15. package/dist/commands/__tests__/steering.test.js +69 -0
  16. package/dist/commands/__tests__/steering.test.js.map +1 -0
  17. package/dist/commands/hooks.d.ts +3 -0
  18. package/dist/commands/hooks.d.ts.map +1 -0
  19. package/dist/commands/hooks.js +163 -0
  20. package/dist/commands/hooks.js.map +1 -0
  21. package/dist/commands/steering.d.ts +3 -0
  22. package/dist/commands/steering.d.ts.map +1 -0
  23. package/dist/commands/steering.js +70 -0
  24. package/dist/commands/steering.js.map +1 -0
  25. package/dist/hooks/__tests__/allowlist.test.d.ts +2 -0
  26. package/dist/hooks/__tests__/allowlist.test.d.ts.map +1 -0
  27. package/dist/hooks/__tests__/allowlist.test.js +29 -0
  28. package/dist/hooks/__tests__/allowlist.test.js.map +1 -0
  29. package/dist/hooks/__tests__/config.test.d.ts +2 -0
  30. package/dist/hooks/__tests__/config.test.d.ts.map +1 -0
  31. package/dist/hooks/__tests__/config.test.js +57 -0
  32. package/dist/hooks/__tests__/config.test.js.map +1 -0
  33. package/dist/hooks/__tests__/dispatcher.security.test.d.ts +2 -0
  34. package/dist/hooks/__tests__/dispatcher.security.test.d.ts.map +1 -0
  35. package/dist/hooks/__tests__/dispatcher.security.test.js +86 -0
  36. package/dist/hooks/__tests__/dispatcher.security.test.js.map +1 -0
  37. package/dist/hooks/__tests__/dispatcher.test.d.ts +2 -0
  38. package/dist/hooks/__tests__/dispatcher.test.d.ts.map +1 -0
  39. package/dist/hooks/__tests__/dispatcher.test.js +69 -0
  40. package/dist/hooks/__tests__/dispatcher.test.js.map +1 -0
  41. package/dist/hooks/__tests__/idempotency.test.d.ts +2 -0
  42. package/dist/hooks/__tests__/idempotency.test.d.ts.map +1 -0
  43. package/dist/hooks/__tests__/idempotency.test.js +45 -0
  44. package/dist/hooks/__tests__/idempotency.test.js.map +1 -0
  45. package/dist/hooks/__tests__/telemetry.test.d.ts +2 -0
  46. package/dist/hooks/__tests__/telemetry.test.d.ts.map +1 -0
  47. package/dist/hooks/__tests__/telemetry.test.js +52 -0
  48. package/dist/hooks/__tests__/telemetry.test.js.map +1 -0
  49. package/dist/hooks/allowlist.d.ts +24 -0
  50. package/dist/hooks/allowlist.d.ts.map +1 -0
  51. package/dist/hooks/allowlist.js +61 -0
  52. package/dist/hooks/allowlist.js.map +1 -0
  53. package/dist/hooks/config.d.ts +24 -0
  54. package/dist/hooks/config.d.ts.map +1 -0
  55. package/dist/hooks/config.js +82 -0
  56. package/dist/hooks/config.js.map +1 -0
  57. package/dist/hooks/dispatcher.d.ts +17 -0
  58. package/dist/hooks/dispatcher.d.ts.map +1 -0
  59. package/dist/hooks/dispatcher.js +157 -0
  60. package/dist/hooks/dispatcher.js.map +1 -0
  61. package/dist/hooks/idempotency.d.ts +14 -0
  62. package/dist/hooks/idempotency.d.ts.map +1 -0
  63. package/dist/hooks/idempotency.js +64 -0
  64. package/dist/hooks/idempotency.js.map +1 -0
  65. package/dist/hooks/telemetry.d.ts +12 -0
  66. package/dist/hooks/telemetry.d.ts.map +1 -0
  67. package/dist/hooks/telemetry.js +66 -0
  68. package/dist/hooks/telemetry.js.map +1 -0
  69. package/dist/hooks/types.d.ts +36 -0
  70. package/dist/hooks/types.d.ts.map +1 -0
  71. package/dist/hooks/types.js +7 -0
  72. package/dist/hooks/types.js.map +1 -0
  73. package/dist/index.d.ts +2 -0
  74. package/dist/index.d.ts.map +1 -1
  75. package/dist/index.js +2 -0
  76. package/dist/index.js.map +1 -1
  77. package/dist/mcp-server/__tests__/mcp-steering.test.d.ts +2 -0
  78. package/dist/mcp-server/__tests__/mcp-steering.test.d.ts.map +1 -0
  79. package/dist/mcp-server/__tests__/mcp-steering.test.js +90 -0
  80. package/dist/mcp-server/__tests__/mcp-steering.test.js.map +1 -0
  81. package/dist/mcp-server/server.d.ts.map +1 -1
  82. package/dist/mcp-server/server.js +30 -0
  83. package/dist/mcp-server/server.js.map +1 -1
  84. package/dist/steering/__tests__/loader.test.d.ts +2 -0
  85. package/dist/steering/__tests__/loader.test.d.ts.map +1 -0
  86. package/dist/steering/__tests__/loader.test.js +80 -0
  87. package/dist/steering/__tests__/loader.test.js.map +1 -0
  88. package/dist/steering/__tests__/resolver.security.test.d.ts +2 -0
  89. package/dist/steering/__tests__/resolver.security.test.d.ts.map +1 -0
  90. package/dist/steering/__tests__/resolver.security.test.js +42 -0
  91. package/dist/steering/__tests__/resolver.security.test.js.map +1 -0
  92. package/dist/steering/__tests__/resolver.test.d.ts +2 -0
  93. package/dist/steering/__tests__/resolver.test.d.ts.map +1 -0
  94. package/dist/steering/__tests__/resolver.test.js +75 -0
  95. package/dist/steering/__tests__/resolver.test.js.map +1 -0
  96. package/dist/steering/loader.d.ts +8 -0
  97. package/dist/steering/loader.d.ts.map +1 -0
  98. package/dist/steering/loader.js +98 -0
  99. package/dist/steering/loader.js.map +1 -0
  100. package/dist/steering/resolver.d.ts +6 -0
  101. package/dist/steering/resolver.d.ts.map +1 -0
  102. package/dist/steering/resolver.js +59 -0
  103. package/dist/steering/resolver.js.map +1 -0
  104. package/dist/steering/types.d.ts +22 -0
  105. package/dist/steering/types.d.ts.map +1 -0
  106. package/dist/steering/types.js +2 -0
  107. package/dist/steering/types.js.map +1 -0
  108. package/dist/utils/UpdateApplier.d.ts.map +1 -1
  109. package/dist/utils/UpdateApplier.js +2 -0
  110. package/dist/utils/UpdateApplier.js.map +1 -1
  111. package/dist/utils/project-generator.d.ts.map +1 -1
  112. package/dist/utils/project-generator.js +2 -0
  113. package/dist/utils/project-generator.js.map +1 -1
  114. package/package.json +1 -1
  115. package/templates/hooks/dare.config.hooks.example.json +12 -0
  116. package/templates/hooks/pre-commit-dare-validate +2 -2
  117. package/templates/ide/antigravity/.agents/skills/dare-hooks/SKILL.md +13 -0
  118. package/templates/ide/antigravity/.agents/skills/dare-steering/SKILL.md +15 -0
  119. package/templates/ide/antigravity/templates/HOOKS-ADAPTER.md +14 -0
  120. package/templates/ide/claude/.claude/commands/dare-hooks.md +17 -0
  121. package/templates/ide/claude/.claude/commands/dare-steering.md +19 -0
  122. package/templates/ide/claude/.claude/settings.example.json +1 -1
  123. package/templates/ide/cursor/.cursor/commands/dare-hooks.md +17 -0
  124. package/templates/ide/cursor/.cursor/commands/dare-steering.md +19 -0
  125. package/templates/ide/cursor/templates/HOOKS-ADAPTER.md +14 -0
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dispatcher.d.ts","sourceRoot":"","sources":["../../src/hooks/dispatcher.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,qBAAqB,EAEtB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAAsB,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE9E,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAa,MAAM,YAAY,CAAC;AAWtF,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAG,gBAAgB,CAAU;gBAC9B,OAAO,SAAyC;CAI7D;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAG,oBAAoB,CAAU;gBAClC,KAAK,EAAE,MAAM;CAI1B;AAyDD,wBAAsB,YAAY,CAChC,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,gBAAgB,EACzB,GAAG,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACpD,OAAO,CAAC,UAAU,EAAE,CAAC,CAuGvB;AAED,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,CAAC"}
@@ -0,0 +1,157 @@
1
+ import pino from 'pino';
2
+ import { safeSpawn } from '../exec/safe-spawn.js';
3
+ import { resolveAction, ActionNotAllowedError, INTERNAL_ACTIONS, } from './allowlist.js';
4
+ import { shouldSkip, markSeen } from './idempotency.js';
5
+ import { recordHookTrigger } from './telemetry.js';
6
+ import { assertRelativeSafe, PathEscapeError } from '../utils/path-safety.js';
7
+ import { HOOK_EVENTS } from './types.js';
8
+ import { gatesFor, resolveStackFromConfig, formatGateCommand, } from '../dag-runner/ralph-loop.js';
9
+ import { createGraph, loadGraphConfig } from '../graphrag/index.js';
10
+ const logger = pino({ level: process.env.DARE_HOOKS_LOG_LEVEL ?? 'info' });
11
+ export class TrustRequiredError extends Error {
12
+ constructor(message = 'hooks are untrusted for this project') {
13
+ super(message);
14
+ this.code = 'TRUST_REQUIRED';
15
+ this.name = 'TrustRequiredError';
16
+ }
17
+ }
18
+ export class InvalidHookEventError extends Error {
19
+ constructor(event) {
20
+ super(`Invalid hook event: ${event}`);
21
+ this.code = 'INVALID_HOOK_EVENT';
22
+ this.name = 'InvalidHookEventError';
23
+ }
24
+ }
25
+ const TASK_ID_RE = /^task-[0-9a-z-]+$/;
26
+ const VERDICT_ACTIONS = new Set([
27
+ 'dare-validate',
28
+ 'dare-review',
29
+ 'lint',
30
+ 'test',
31
+ ]);
32
+ function isHookEvent(value) {
33
+ return HOOK_EVENTS.includes(value);
34
+ }
35
+ async function resolveHookStack(projectRoot) {
36
+ try {
37
+ const stack = await resolveStackFromConfig(projectRoot);
38
+ const gates = gatesFor(stack, projectRoot);
39
+ const lintGate = gates.find((g) => g.name === 'lint');
40
+ const testGate = gates.find((g) => g.name === 'test');
41
+ return {
42
+ lint: lintGate ? formatGateCommand(lintGate) : undefined,
43
+ test: testGate ? formatGateCommand(testGate) : undefined,
44
+ };
45
+ }
46
+ catch {
47
+ return {};
48
+ }
49
+ }
50
+ async function withProjectGraph(projectRoot, fn) {
51
+ const config = await loadGraphConfig({ cwd: projectRoot });
52
+ const graph = await createGraph(config, { cwd: projectRoot });
53
+ try {
54
+ return await fn(graph);
55
+ }
56
+ finally {
57
+ await Promise.resolve(graph.close());
58
+ }
59
+ }
60
+ function verdictFor(action, exitCode) {
61
+ if (!VERDICT_ACTIONS.has(action))
62
+ return undefined;
63
+ return exitCode === 0 ? 'pass' : 'fail';
64
+ }
65
+ function isInternalAction(action) {
66
+ return INTERNAL_ACTIONS.includes(action);
67
+ }
68
+ export async function dispatchHook(config, payload, ctx) {
69
+ if (config.trusted !== true && ctx.trustOverride !== true) {
70
+ throw new TrustRequiredError();
71
+ }
72
+ if (!isHookEvent(payload.event)) {
73
+ throw new InvalidHookEventError(String(payload.event));
74
+ }
75
+ if (payload.file) {
76
+ try {
77
+ assertRelativeSafe(payload.file);
78
+ }
79
+ catch {
80
+ throw new PathEscapeError();
81
+ }
82
+ }
83
+ if (payload.taskId && !TASK_ID_RE.test(payload.taskId)) {
84
+ throw new Error(`Invalid taskId: ${payload.taskId}`);
85
+ }
86
+ const actions = config.on[payload.event] ?? [];
87
+ if (actions.length === 0) {
88
+ return [];
89
+ }
90
+ const stack = await resolveHookStack(ctx.projectRoot);
91
+ const results = [];
92
+ await withProjectGraph(ctx.projectRoot, async (graph) => {
93
+ for (const hookAction of actions) {
94
+ const action = hookAction.action;
95
+ const start = performance.now();
96
+ if (await shouldSkip(payload.event, action, payload, {
97
+ projectRoot: ctx.projectRoot,
98
+ })) {
99
+ const durationMs = Math.round(performance.now() - start);
100
+ results.push({
101
+ event: payload.event,
102
+ action,
103
+ exitCode: 0,
104
+ skipped: true,
105
+ durationMs,
106
+ });
107
+ continue;
108
+ }
109
+ const { cmd, argv } = resolveAction(action, payload, stack);
110
+ const triggeredAt = new Date().toISOString();
111
+ let exitCode = 0;
112
+ let skipped = false;
113
+ if (isInternalAction(action)) {
114
+ recordHookTrigger(graph, {
115
+ event: payload.event,
116
+ action,
117
+ exitCode: 0,
118
+ skipped: false,
119
+ triggeredAt,
120
+ });
121
+ }
122
+ else {
123
+ const res = await safeSpawn(cmd, [...argv, ...(hookAction.args ?? [])], {
124
+ cwd: ctx.projectRoot,
125
+ timeoutSeconds: 600,
126
+ });
127
+ exitCode = res.code;
128
+ const verdict = verdictFor(action, exitCode);
129
+ recordHookTrigger(graph, {
130
+ event: payload.event,
131
+ action,
132
+ exitCode,
133
+ skipped: false,
134
+ verdict,
135
+ triggeredAt,
136
+ });
137
+ }
138
+ await markSeen(payload.event, action, payload, {
139
+ projectRoot: ctx.projectRoot,
140
+ });
141
+ const durationMs = Math.round(performance.now() - start);
142
+ const verdict = verdictFor(action, exitCode);
143
+ logger.info({ event: payload.event, action, exitCode, durationMs, skipped }, 'hook dispatched');
144
+ results.push({
145
+ event: payload.event,
146
+ action,
147
+ exitCode,
148
+ skipped,
149
+ verdict,
150
+ durationMs,
151
+ });
152
+ }
153
+ });
154
+ return results;
155
+ }
156
+ export { ActionNotAllowedError, PathEscapeError };
157
+ //# sourceMappingURL=dispatcher.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dispatcher.js","sourceRoot":"","sources":["../../src/hooks/dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EACL,QAAQ,EACR,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGpE,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,EAAE,CAAC,CAAC;AAE3E,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAE3C,YAAY,OAAO,GAAG,sCAAsC;QAC1D,KAAK,CAAC,OAAO,CAAC,CAAC;QAFR,SAAI,GAAG,gBAAyB,CAAC;QAGxC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAE9C,YAAY,KAAa;QACvB,KAAK,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;QAF/B,SAAI,GAAG,oBAA6B,CAAC;QAG5C,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAEvC,MAAM,eAAe,GAAkC,IAAI,GAAG,CAAC;IAC7D,eAAe;IACf,aAAa;IACb,MAAM;IACN,MAAM;CACP,CAAC,CAAC;AAEH,SAAS,WAAW,CAAC,KAAa;IAChC,OAAQ,WAAiC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QACtD,OAAO;YACL,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;YACxD,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;SACzD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,WAAmB,EACnB,EAAyC;IAEzC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CACjB,MAAwB,EACxB,QAAgB;IAEhB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1C,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAwB;IAChD,OAAQ,gBAAgD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAkB,EAClB,OAAyB,EACzB,GAAqD;IAErD,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAC1D,MAAM,IAAI,kBAAkB,EAAE,CAAC;IACjC,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,MAAM,gBAAgB,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACtD,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;YACjC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAEhC,IACE,MAAM,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;gBAC/C,WAAW,EAAE,GAAG,CAAC,WAAW;aAC7B,CAAC,EACF,CAAC;gBACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;gBACzD,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,MAAM;oBACN,QAAQ,EAAE,CAAC;oBACX,OAAO,EAAE,IAAI;oBACb,UAAU;iBACX,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5D,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC7C,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,iBAAiB,CAAC,KAAK,EAAE;oBACvB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,MAAM;oBACN,QAAQ,EAAE,CAAC;oBACX,OAAO,EAAE,KAAK;oBACd,WAAW;iBACZ,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE;oBACtE,GAAG,EAAE,GAAG,CAAC,WAAW;oBACpB,cAAc,EAAE,GAAG;iBACpB,CAAC,CAAC;gBACH,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC;gBACpB,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAC7C,iBAAiB,CAAC,KAAK,EAAE;oBACvB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,MAAM;oBACN,QAAQ;oBACR,OAAO,EAAE,KAAK;oBACd,OAAO;oBACP,WAAW;iBACZ,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;gBAC7C,WAAW,EAAE,GAAG,CAAC,WAAW;aAC7B,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAE7C,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,EAC/D,iBAAiB,CAClB,CAAC;YAEF,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM;gBACN,QAAQ;gBACR,OAAO;gBACP,OAAO;gBACP,UAAU;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,CAAC"}
@@ -0,0 +1,14 @@
1
+ import type { HookEvent, HookEventPayload } from './types.js';
2
+ import type { AllowedActionKey } from './allowlist.js';
3
+ export interface IdempotencyContext {
4
+ readonly projectRoot: string;
5
+ readonly statePath?: string;
6
+ /** For on-task-complete: touched files (sorted internally for hashing). */
7
+ readonly touchedFiles?: readonly string[];
8
+ }
9
+ export declare function stateKey(event: HookEvent, action: AllowedActionKey, payload: HookEventPayload, opts?: {
10
+ touchedFiles?: readonly string[];
11
+ }): string;
12
+ export declare function shouldSkip(event: HookEvent, action: AllowedActionKey, payload: HookEventPayload, ctx: IdempotencyContext): Promise<boolean>;
13
+ export declare function markSeen(event: HookEvent, action: AllowedActionKey, payload: HookEventPayload, ctx: IdempotencyContext): Promise<void>;
14
+ //# sourceMappingURL=idempotency.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"idempotency.d.ts","sourceRoot":"","sources":["../../src/hooks/idempotency.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAyCD,wBAAgB,QAAQ,CACtB,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,gBAAgB,EACzB,IAAI,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAC1C,MAAM,CAGR;AAiBD,wBAAsB,UAAU,CAC9B,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,gBAAgB,EACzB,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC,OAAO,CAAC,CAIlB;AAED,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,gBAAgB,EACzB,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC,IAAI,CAAC,CAMf"}
@@ -0,0 +1,64 @@
1
+ import crypto from 'node:crypto';
2
+ import fs from 'fs-extra';
3
+ import path from 'node:path';
4
+ import { assertRelativeSafe, resolveSafePath } from '../utils/path-safety.js';
5
+ function normalizeFile(file) {
6
+ assertRelativeSafe(file);
7
+ return file.replace(/\\/g, '/');
8
+ }
9
+ function hashMaterial(material) {
10
+ return crypto.createHash('sha256').update(material).digest('hex');
11
+ }
12
+ function materialForPayload(event, payload, touchedFiles) {
13
+ switch (event) {
14
+ case 'on-file-create':
15
+ case 'on-save': {
16
+ if (!payload.file)
17
+ return '';
18
+ return normalizeFile(payload.file);
19
+ }
20
+ case 'on-task-complete': {
21
+ const taskId = payload.taskId ?? '';
22
+ const files = (touchedFiles ?? [])
23
+ .map((f) => normalizeFile(f))
24
+ .sort();
25
+ const filesHash = hashMaterial(files.join('\n'));
26
+ return `${taskId}|${filesHash}`;
27
+ }
28
+ case 'pre-commit':
29
+ return payload.taskId ?? '';
30
+ default:
31
+ return '';
32
+ }
33
+ }
34
+ export function stateKey(event, action, payload, opts) {
35
+ const material = materialForPayload(event, payload, opts?.touchedFiles);
36
+ return hashMaterial(`${event}|${action}|${material}`);
37
+ }
38
+ async function readState(ctx) {
39
+ const stateFile = resolveSafePath(ctx.projectRoot, ctx.statePath ?? '.dare/hooks-state.json');
40
+ await fs.ensureDir(path.dirname(stateFile));
41
+ if (!(await fs.pathExists(stateFile))) {
42
+ return { seen: {} };
43
+ }
44
+ const data = (await fs.readJson(stateFile));
45
+ return { seen: data.seen ?? {} };
46
+ }
47
+ async function writeState(ctx, state) {
48
+ const stateFile = resolveSafePath(ctx.projectRoot, ctx.statePath ?? '.dare/hooks-state.json');
49
+ await fs.writeJson(stateFile, state, { spaces: 2 });
50
+ }
51
+ export async function shouldSkip(event, action, payload, ctx) {
52
+ const key = stateKey(event, action, payload, { touchedFiles: ctx.touchedFiles });
53
+ const state = await readState(ctx);
54
+ return key in state.seen;
55
+ }
56
+ export async function markSeen(event, action, payload, ctx) {
57
+ const key = stateKey(event, action, payload, { touchedFiles: ctx.touchedFiles });
58
+ const state = await readState(ctx);
59
+ if (state.seen[key])
60
+ return;
61
+ state.seen[key] = new Date().toISOString();
62
+ await writeState(ctx, state);
63
+ }
64
+ //# sourceMappingURL=idempotency.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../../src/hooks/idempotency.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAe9E,SAAS,aAAa,CAAC,IAAY;IACjC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAgB,EAChB,OAAyB,EACzB,YAAgC;IAEhC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,gBAAgB,CAAC;QACtB,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,IAAI;gBAAE,OAAO,EAAE,CAAC;YAC7B,OAAO,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;iBAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;iBAC5B,IAAI,EAAE,CAAC;YACV,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACjD,OAAO,GAAG,MAAM,IAAI,SAAS,EAAE,CAAC;QAClC,CAAC;QACD,KAAK,YAAY;YACf,OAAO,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9B;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,KAAgB,EAChB,MAAwB,EACxB,OAAyB,EACzB,IAA2C;IAE3C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IACxE,OAAO,YAAY,CAAC,GAAG,KAAK,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAuB;IAC9C,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,IAAI,wBAAwB,CAAC,CAAC;IAC9F,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACtB,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAmB,CAAC;IAC9D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAuB,EAAE,KAAqB;IACtE,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,IAAI,wBAAwB,CAAC,CAAC;IAC9F,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAgB,EAChB,MAAwB,EACxB,OAAyB,EACzB,GAAuB;IAEvB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAgB,EAChB,MAAwB,EACxB,OAAyB,EACzB,GAAuB;IAEvB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAC/B,CAAC"}
@@ -0,0 +1,12 @@
1
+ import type { KnowledgeGraph } from '../graphrag/knowledge-graph.js';
2
+ import type { HookResult } from './types.js';
3
+ export interface HookTelemetryRecord {
4
+ readonly event: HookResult['event'];
5
+ readonly action: HookResult['action'];
6
+ readonly exitCode: number;
7
+ readonly skipped: boolean;
8
+ readonly verdict?: 'pass' | 'fail';
9
+ readonly triggeredAt: string;
10
+ }
11
+ export declare function recordHookTrigger(graph: KnowledgeGraph, record: HookTelemetryRecord): void;
12
+ //# sourceMappingURL=telemetry.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/hooks/telemetry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAI7C,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAcD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,mBAAmB,GAAG,IAAI,CA6D1F"}
@@ -0,0 +1,66 @@
1
+ import pino from 'pino';
2
+ const logger = pino({ level: process.env.DARE_HOOKS_LOG_LEVEL ?? 'info' });
3
+ function hookNodeId(event, action, triggeredAt) {
4
+ return `concept:hook:${event}:${action}:${triggeredAt}`;
5
+ }
6
+ function eventNodeId(event) {
7
+ return `concept:event:${event}`;
8
+ }
9
+ function verdictNodeId(verdict) {
10
+ return `concept:verdict:${verdict}`;
11
+ }
12
+ export function recordHookTrigger(graph, record) {
13
+ const hookId = hookNodeId(record.event, record.action, record.triggeredAt);
14
+ const eventId = eventNodeId(record.event);
15
+ graph.addNode({
16
+ id: hookId,
17
+ type: 'concept',
18
+ label: `hook:${record.event}:${record.action}`,
19
+ metadata: {
20
+ kind: 'hook',
21
+ event: record.event,
22
+ action: record.action,
23
+ verdict: record.verdict,
24
+ exitCode: record.exitCode,
25
+ skipped: record.skipped,
26
+ triggeredAt: record.triggeredAt,
27
+ },
28
+ });
29
+ graph.addNode({
30
+ id: eventId,
31
+ type: 'concept',
32
+ label: record.event,
33
+ metadata: { kind: 'hook_event', event: record.event },
34
+ });
35
+ graph.addEdge({
36
+ id: `references:${hookId}->${eventId}`,
37
+ sourceId: hookId,
38
+ targetId: eventId,
39
+ type: 'references',
40
+ metadata: { relation: 'triggered_by' },
41
+ });
42
+ if (record.verdict) {
43
+ const verdictId = verdictNodeId(record.verdict);
44
+ graph.addNode({
45
+ id: verdictId,
46
+ type: 'concept',
47
+ label: record.verdict,
48
+ metadata: { kind: 'hook_verdict', verdict: record.verdict },
49
+ });
50
+ graph.addEdge({
51
+ id: `related_to:${hookId}->${verdictId}`,
52
+ sourceId: hookId,
53
+ targetId: verdictId,
54
+ type: 'related_to',
55
+ metadata: { relation: 'produced' },
56
+ });
57
+ }
58
+ logger.info({
59
+ event: record.event,
60
+ action: record.action,
61
+ exitCode: record.exitCode,
62
+ skipped: record.skipped,
63
+ verdict: record.verdict,
64
+ }, 'hook telemetry recorded');
65
+ }
66
+ //# sourceMappingURL=telemetry.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/hooks/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAIxB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,EAAE,CAAC,CAAC;AAW3E,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc,EAAE,WAAmB;IACpE,OAAO,gBAAgB,KAAK,IAAI,MAAM,IAAI,WAAW,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,iBAAiB,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,OAAwB;IAC7C,OAAO,mBAAmB,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAqB,EAAE,MAA2B;IAClF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE1C,KAAK,CAAC,OAAO,CAAC;QACZ,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,QAAQ,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE;QAC9C,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC;KACF,CAAC,CAAC;IAEH,KAAK,CAAC,OAAO,CAAC;QACZ,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;KACtD,CAAC,CAAC;IAEH,KAAK,CAAC,OAAO,CAAC;QACZ,EAAE,EAAE,cAAc,MAAM,KAAK,OAAO,EAAE;QACtC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;KACvC,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,KAAK,CAAC,OAAO,CAAC;YACZ,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,MAAM,CAAC,OAAO;YACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;SAC5D,CAAC,CAAC;QACH,KAAK,CAAC,OAAO,CAAC;YACZ,EAAE,EAAE,cAAc,MAAM,KAAK,SAAS,EAAE;YACxC,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;SACnC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,IAAI,CACT;QACE,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,EACD,yBAAyB,CAC1B,CAAC;AACJ,CAAC"}
@@ -0,0 +1,36 @@
1
+ import type { AllowedActionKey } from './allowlist.js';
2
+ /** Conjunto FECHADO de eventos na v1 (A-2 / RF-02). Eventos fora disto são rejeitados. */
3
+ export type HookEvent = 'on-save' | 'on-file-create' | 'on-task-complete' | 'pre-commit';
4
+ export declare const HOOK_EVENTS: readonly HookEvent[];
5
+ /** Ação resolvida — sempre um item da allowlist canônica (RS-01). Nunca string de shell. */
6
+ export interface HookAction {
7
+ readonly action: AllowedActionKey;
8
+ /** Args adicionais; concatenados como argv, NUNCA interpolados em shell (RS-02). */
9
+ readonly args?: readonly string[];
10
+ }
11
+ export interface HookConfig {
12
+ /** Eventos → lista de ações. Ausente ⇒ zero hooks (RNF-03 / opt-in). */
13
+ readonly on: Partial<Record<HookEvent, readonly HookAction[]>>;
14
+ /**
15
+ * Confiança explícita (RS-05). false (default) ⇒ hooks NÃO auto-executam;
16
+ * `dare hooks run` falha com TRUST_REQUIRED até trusted:true ou --trust.
17
+ */
18
+ readonly trusted: boolean;
19
+ }
20
+ /** Payload passado ao dispatcher por evento. Validado antes do spawn. */
21
+ export interface HookEventPayload {
22
+ readonly event: HookEvent;
23
+ /** Arquivo relativo (on-save/on-file-create); validado com assertRelativeSafe. */
24
+ readonly file?: string;
25
+ /** Task id (on-task-complete); valida contra /^task-[0-9a-z-]+$/. */
26
+ readonly taskId?: string;
27
+ }
28
+ export interface HookResult {
29
+ readonly event: HookEvent;
30
+ readonly action: AllowedActionKey;
31
+ readonly exitCode: number;
32
+ readonly skipped: boolean;
33
+ readonly verdict?: 'pass' | 'fail';
34
+ readonly durationMs: number;
35
+ }
36
+ //# sourceMappingURL=types.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/hooks/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,0FAA0F;AAC1F,MAAM,MAAM,SAAS,GACjB,SAAS,GACT,gBAAgB,GAChB,kBAAkB,GAClB,YAAY,CAAC;AAEjB,eAAO,MAAM,WAAW,EAAE,SAAS,SAAS,EAKlC,CAAC;AAEX,4FAA4F;AAC5F,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,oFAAoF;IACpF,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,UAAU;IACzB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,UAAU,EAAE,CAAC,CAAC,CAAC;IAC/D;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,kFAAkF;IAClF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B"}
@@ -0,0 +1,7 @@
1
+ export const HOOK_EVENTS = [
2
+ 'on-save',
3
+ 'on-file-create',
4
+ 'on-task-complete',
5
+ 'pre-commit',
6
+ ];
7
+ //# sourceMappingURL=types.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/hooks/types.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,MAAM,WAAW,GAAyB;IAC/C,SAAS;IACT,gBAAgB;IAChB,kBAAkB;IAClB,YAAY;CACJ,CAAC"}
package/dist/index.d.ts CHANGED
@@ -15,6 +15,8 @@ export { designCommand } from './commands/design.js';
15
15
  export { blueprintCommand } from './commands/blueprint.js';
16
16
  export { executeCommand } from './commands/execute.js';
17
17
  export { graphCommand } from './commands/graph.js';
18
+ export { steeringCommand } from './commands/steering.js';
19
+ export { hooksCommand } from './commands/hooks.js';
18
20
  export { dagCommand, renderDagMermaid, renderDagDot } from './commands/dag.js';
19
21
  export { validateCommand } from './commands/validate.js';
20
22
  export { infoCommand } from './commands/info.js';
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,GACb,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,YAAY,EACZ,aAAa,EACb,WAAW,GACZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,QAAQ,EACR,sBAAsB,EACtB,YAAY,GACb,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,QAAQ,EACR,aAAa,EACb,eAAe,EACf,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,GAAG,EACH,OAAO,EACP,SAAS,EACT,WAAW,EACX,SAAS,EACT,UAAU,EACV,UAAU,EACV,UAAU,IAAI,aAAa,EAC3B,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAG9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAGlE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACxF,YAAY,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,SAAS,EACT,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,GACb,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,YAAY,EACZ,aAAa,EACb,WAAW,GACZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,QAAQ,EACR,sBAAsB,EACtB,YAAY,GACb,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,QAAQ,EACR,aAAa,EACb,eAAe,EACf,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,GAAG,EACH,OAAO,EACP,SAAS,EACT,WAAW,EACX,SAAS,EACT,UAAU,EACV,UAAU,EACV,UAAU,IAAI,aAAa,EAC3B,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAG9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAGlE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACxF,YAAY,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,SAAS,EACT,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC"}
package/dist/index.js CHANGED
@@ -16,6 +16,8 @@ export { designCommand } from './commands/design.js';
16
16
  export { blueprintCommand } from './commands/blueprint.js';
17
17
  export { executeCommand } from './commands/execute.js';
18
18
  export { graphCommand } from './commands/graph.js';
19
+ export { steeringCommand } from './commands/steering.js';
20
+ export { hooksCommand } from './commands/hooks.js';
19
21
  export { dagCommand, renderDagMermaid, renderDagDot } from './commands/dag.js';
20
22
  export { validateCommand } from './commands/validate.js';
21
23
  export { infoCommand } from './commands/info.js';
package/dist/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,WAAW;AACX,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,+BAA+B;AAC/B,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,GACb,MAAM,4BAA4B,CAAC;AAMpC,OAAO,EACL,QAAQ,EACR,sBAAsB,EACtB,YAAY,GACb,MAAM,4BAA4B,CAAC;AAQpC,6BAA6B;AAC7B,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AAYjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE9E,qBAAqB;AACrB,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAGxE,yBAAyB;AACzB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAkBxF,aAAa;AACb,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,WAAW;AACX,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,+BAA+B;AAC/B,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,GACb,MAAM,4BAA4B,CAAC;AAMpC,OAAO,EACL,QAAQ,EACR,sBAAsB,EACtB,YAAY,GACb,MAAM,4BAA4B,CAAC;AAQpC,6BAA6B;AAC7B,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AAYjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE9E,qBAAqB;AACrB,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAGxE,yBAAyB;AACzB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAkBxF,aAAa;AACb,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=mcp-steering.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"mcp-steering.test.d.ts","sourceRoot":"","sources":["../../../src/mcp-server/__tests__/mcp-steering.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,90 @@
1
+ import { describe, it, expect, beforeEach, afterEach } from 'vitest';
2
+ import express from 'express';
3
+ import fs from 'fs-extra';
4
+ import os from 'node:os';
5
+ import path from 'node:path';
6
+ import request from 'supertest';
7
+ import { createMcpServer } from '../server.js';
8
+ import { createAuthMiddleware } from '../middleware/auth.js';
9
+ const TOKEN = 'steering-test-token';
10
+ describe('MCP GET /steering', () => {
11
+ let projectRoot;
12
+ beforeEach(async () => {
13
+ projectRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'mcp-steering-'));
14
+ await fs.ensureDir(path.join(projectRoot, 'DARE'));
15
+ await fs.writeFile(path.join(projectRoot, 'DARE', 'PROJECT-DNA.md'), '# DNA\nBase steering.');
16
+ await fs.writeJson(path.join(projectRoot, 'dare.config.json'), { name: 'steering-mcp' });
17
+ const dir = path.join(projectRoot, '.dare', 'steering');
18
+ await fs.ensureDir(dir);
19
+ await fs.writeFile(path.join(dir, 'auth.md'), `---
20
+ scope: glob
21
+ glob: src/auth/**
22
+ priority: 5
23
+ ---
24
+ # Auth
25
+ `);
26
+ });
27
+ afterEach(async () => {
28
+ await fs.remove(projectRoot).catch(() => undefined);
29
+ });
30
+ function app() {
31
+ return createMcpServer(projectRoot, {
32
+ authToken: TOKEN,
33
+ allowLoopbackWithoutToken: true,
34
+ });
35
+ }
36
+ it('lists get_steering in GET /tools', async () => {
37
+ const res = await request(app()).get('/tools');
38
+ const names = res.body.tools.map((t) => t.name);
39
+ expect(names).toContain('get_steering');
40
+ });
41
+ it('returns resolved blocks for matching file', async () => {
42
+ const res = await request(app())
43
+ .get('/steering')
44
+ .query({ file: 'src/auth/login.ts' });
45
+ expect(res.status).toBe(200);
46
+ expect(res.body.success).toBe(true);
47
+ expect(res.body.file).toBe('src/auth/login.ts');
48
+ expect(res.body.blocks[0]?.isBase).toBe(true);
49
+ expect(res.body.blocks.some((b) => b.source.includes('auth.md'))).toBe(true);
50
+ });
51
+ it('rejects missing file param', async () => {
52
+ const res = await request(app()).get('/steering');
53
+ expect(res.status).toBe(400);
54
+ expect(res.body.error).toBe('file is required');
55
+ });
56
+ it('rejects file param over 200 chars', async () => {
57
+ const res = await request(app())
58
+ .get('/steering')
59
+ .query({ file: 'a'.repeat(201) });
60
+ expect(res.status).toBe(400);
61
+ expect(res.body.error).toBe('file too long');
62
+ });
63
+ it('rejects path escape with 403', async () => {
64
+ const res = await request(app())
65
+ .get('/steering')
66
+ .query({ file: '../etc/passwd' });
67
+ expect(res.status).toBe(403);
68
+ expect(res.body.error).toBe('Forbidden');
69
+ });
70
+ it('regression: non-loopback without token is unauthorized', async () => {
71
+ const base = express();
72
+ base.set('trust proxy', true);
73
+ base.use((req, _res, next) => {
74
+ Object.defineProperty(req, 'ip', { value: '203.0.113.1', configurable: true });
75
+ Object.defineProperty(req.socket, 'remoteAddress', {
76
+ value: '203.0.113.1',
77
+ configurable: true,
78
+ });
79
+ next();
80
+ });
81
+ base.use(createAuthMiddleware({ token: TOKEN, allowLoopbackWithoutToken: true }));
82
+ base.use(createMcpServer(projectRoot, { authToken: TOKEN, allowLoopbackWithoutToken: true }));
83
+ const res = await request(base)
84
+ .get('/steering')
85
+ .query({ file: 'src/foo.ts' });
86
+ expect(res.status).toBe(401);
87
+ expect(res.body.error).toBe('Unauthorized');
88
+ });
89
+ });
90
+ //# sourceMappingURL=mcp-steering.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"mcp-steering.test.js","sourceRoot":"","sources":["../../../src/mcp-server/__tests__/mcp-steering.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,KAAK,GAAG,qBAAqB,CAAC;AAEpC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,IAAI,WAAmB,CAAC;IAExB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QACxE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAChD,uBAAuB,CACxB,CAAC;QACF,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACzF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACxD,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACxB,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EACzB;;;;;;CAML,CACI,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,SAAS,GAAG;QACV,OAAO,eAAe,CAAC,WAAW,EAAE;YAClC,SAAS,EAAE,KAAK;YAChB,yBAAyB,EAAE,IAAI;SAChC,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAI,GAAG,CAAC,IAAI,CAAC,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC;aAC7B,GAAG,CAAC,WAAW,CAAC;aAChB,KAAK,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CACxF,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC;aAC7B,GAAG,CAAC,WAAW,CAAC;aAChB,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC;aAC7B,GAAG,CAAC,WAAW,CAAC;aAChB,KAAK,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;gBACjD,KAAK,EAAE,aAAa;gBACpB,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YACH,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAE9F,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;aAC5B,GAAG,CAAC,WAAW,CAAC;aAChB,KAAK,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp-server/server.ts"],"names":[],"mappings":"AAEA,OAAgB,EAAE,KAAK,OAAO,EAAkD,MAAM,SAAS,CAAC;AAiBhG,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,GAAG,cAAc,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;IAClE,SAAS,EAAE,MAAM,CAAC;CACnB;AAuBD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACrC;AA0DD,wBAAgB,eAAe,CAC7B,WAAW,GAAE,MAAuD,EACpE,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAkWT"}
1
+ {"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp-server/server.ts"],"names":[],"mappings":"AAEA,OAAgB,EAAE,KAAK,OAAO,EAAkD,MAAM,SAAS,CAAC;AAmBhG,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,GAAG,cAAc,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;IAClE,SAAS,EAAE,MAAM,CAAC;CACnB;AAuBD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACrC;AA0DD,wBAAgB,eAAe,CAC7B,WAAW,GAAE,MAAuD,EACpE,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAgYT"}
@@ -9,6 +9,8 @@ import { createGraph, loadGraphConfig } from '../graphrag/index.js';
9
9
  import { createAuthMiddleware } from './middleware/auth.js';
10
10
  import { createCorsMiddleware } from './middleware/cors.js';
11
11
  import { createErrorHandler } from './middleware/error-handler.js';
12
+ import { loadSteeringFiles } from '../steering/loader.js';
13
+ import { resolveSteeringForFile } from '../steering/resolver.js';
12
14
  const require = createRequire(import.meta.url);
13
15
  const { version: pkgVersion } = require('../../package.json');
14
16
  const logger = pino({ transport: { target: 'pino-pretty' } });
@@ -118,6 +120,7 @@ export function createMcpServer(projectRoot = process.env.DARE_PROJECT_PATH || p
118
120
  { name: 'graph_locate', description: 'Locate code symbols from a seed query' },
119
121
  { name: 'graph_map_requirement', description: 'Map a requirement/task to symbols and tasks' },
120
122
  { name: 'graph_traverse', description: 'Traverse the knowledge graph from seed nodes' },
123
+ { name: 'get_steering', description: 'Get resolved steering for a file' },
121
124
  ],
122
125
  });
123
126
  });
@@ -377,6 +380,33 @@ export function createMcpServer(projectRoot = process.env.DARE_PROJECT_PATH || p
377
380
  res.json(config);
378
381
  });
379
382
  });
383
+ app.get('/steering', (req, res, next) => {
384
+ runSafe(res, next, async () => {
385
+ const file = typeof req.query.file === 'string' ? req.query.file : '';
386
+ if (!file || file.trim() === '') {
387
+ res.status(400).json({ error: 'file is required' });
388
+ return;
389
+ }
390
+ if (file.length > 200) {
391
+ res.status(400).json({ error: 'file too long' });
392
+ return;
393
+ }
394
+ const files = loadSteeringFiles(projectRoot);
395
+ const resolution = resolveSteeringForFile(files, file);
396
+ res.json({
397
+ success: true,
398
+ file: resolution.file,
399
+ blocks: resolution.blocks.map((b) => ({
400
+ source: b.path,
401
+ scope: b.frontMatter.scope,
402
+ priority: b.frontMatter.priority ?? 0,
403
+ isBase: b.isBase,
404
+ ...(b.frontMatter.glob ? { glob: b.frontMatter.glob } : {}),
405
+ body: b.body,
406
+ })),
407
+ });
408
+ });
409
+ });
380
410
  app.use(createErrorHandler(logger));
381
411
  return app;
382
412
  }