@dewtech/dare-cli 3.9.0 → 3.11.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (254) hide show
  1. package/README.md +5 -0
  2. package/dist/__tests__/ci-pr-regression.test.d.ts +2 -0
  3. package/dist/__tests__/ci-pr-regression.test.d.ts.map +1 -0
  4. package/dist/__tests__/ci-pr-regression.test.js +76 -0
  5. package/dist/__tests__/ci-pr-regression.test.js.map +1 -0
  6. package/dist/__tests__/dashboard-front.test.d.ts +2 -0
  7. package/dist/__tests__/dashboard-front.test.d.ts.map +1 -0
  8. package/dist/__tests__/dashboard-front.test.js +37 -0
  9. package/dist/__tests__/dashboard-front.test.js.map +1 -0
  10. package/dist/__tests__/dashboard-regression.test.d.ts +2 -0
  11. package/dist/__tests__/dashboard-regression.test.d.ts.map +1 -0
  12. package/dist/__tests__/dashboard-regression.test.js +68 -0
  13. package/dist/__tests__/dashboard-regression.test.js.map +1 -0
  14. package/dist/__tests__/drift-regression.test.d.ts +2 -0
  15. package/dist/__tests__/drift-regression.test.d.ts.map +1 -0
  16. package/dist/__tests__/drift-regression.test.js +118 -0
  17. package/dist/__tests__/drift-regression.test.js.map +1 -0
  18. package/dist/__tests__/dynamic-dag-regression.test.d.ts +2 -0
  19. package/dist/__tests__/dynamic-dag-regression.test.d.ts.map +1 -0
  20. package/dist/__tests__/dynamic-dag-regression.test.js +464 -0
  21. package/dist/__tests__/dynamic-dag-regression.test.js.map +1 -0
  22. package/dist/__tests__/ide-command-parity.test.js +1 -0
  23. package/dist/__tests__/ide-command-parity.test.js.map +1 -1
  24. package/dist/__tests__/project-generator.test.js +10 -1
  25. package/dist/__tests__/project-generator.test.js.map +1 -1
  26. package/dist/__tests__/semantic-regression.test.d.ts +2 -0
  27. package/dist/__tests__/semantic-regression.test.d.ts.map +1 -0
  28. package/dist/__tests__/semantic-regression.test.js +248 -0
  29. package/dist/__tests__/semantic-regression.test.js.map +1 -0
  30. package/dist/bin/dare.js +2 -0
  31. package/dist/bin/dare.js.map +1 -1
  32. package/dist/commands/__tests__/dashboard-command.test.d.ts +2 -0
  33. package/dist/commands/__tests__/dashboard-command.test.d.ts.map +1 -0
  34. package/dist/commands/__tests__/dashboard-command.test.js +62 -0
  35. package/dist/commands/__tests__/dashboard-command.test.js.map +1 -0
  36. package/dist/commands/__tests__/execute.telemetry.spec.js +3 -0
  37. package/dist/commands/__tests__/execute.telemetry.spec.js.map +1 -1
  38. package/dist/commands/__tests__/gate-flags.test.d.ts +2 -0
  39. package/dist/commands/__tests__/gate-flags.test.d.ts.map +1 -0
  40. package/dist/commands/__tests__/gate-flags.test.js +58 -0
  41. package/dist/commands/__tests__/gate-flags.test.js.map +1 -0
  42. package/dist/commands/__tests__/graph-drift.test.d.ts +2 -0
  43. package/dist/commands/__tests__/graph-drift.test.d.ts.map +1 -0
  44. package/dist/commands/__tests__/graph-drift.test.js +169 -0
  45. package/dist/commands/__tests__/graph-drift.test.js.map +1 -0
  46. package/dist/commands/__tests__/persist-viz.test.d.ts +2 -0
  47. package/dist/commands/__tests__/persist-viz.test.d.ts.map +1 -0
  48. package/dist/commands/__tests__/persist-viz.test.js +178 -0
  49. package/dist/commands/__tests__/persist-viz.test.js.map +1 -0
  50. package/dist/commands/__tests__/refine-apply.test.d.ts +2 -0
  51. package/dist/commands/__tests__/refine-apply.test.d.ts.map +1 -0
  52. package/dist/commands/__tests__/refine-apply.test.js +118 -0
  53. package/dist/commands/__tests__/refine-apply.test.js.map +1 -0
  54. package/dist/commands/__tests__/replan-splice.test.d.ts +2 -0
  55. package/dist/commands/__tests__/replan-splice.test.d.ts.map +1 -0
  56. package/dist/commands/__tests__/replan-splice.test.js +295 -0
  57. package/dist/commands/__tests__/replan-splice.test.js.map +1 -0
  58. package/dist/commands/dag.d.ts.map +1 -1
  59. package/dist/commands/dag.js +2 -0
  60. package/dist/commands/dag.js.map +1 -1
  61. package/dist/commands/dashboard.d.ts +17 -0
  62. package/dist/commands/dashboard.d.ts.map +1 -0
  63. package/dist/commands/dashboard.js +77 -0
  64. package/dist/commands/dashboard.js.map +1 -0
  65. package/dist/commands/execute.d.ts.map +1 -1
  66. package/dist/commands/execute.js +117 -2
  67. package/dist/commands/execute.js.map +1 -1
  68. package/dist/commands/graph.d.ts.map +1 -1
  69. package/dist/commands/graph.js +232 -1
  70. package/dist/commands/graph.js.map +1 -1
  71. package/dist/commands/guard.d.ts.map +1 -1
  72. package/dist/commands/guard.js +27 -3
  73. package/dist/commands/guard.js.map +1 -1
  74. package/dist/commands/refine.d.ts +2 -0
  75. package/dist/commands/refine.d.ts.map +1 -1
  76. package/dist/commands/refine.js +71 -20
  77. package/dist/commands/refine.js.map +1 -1
  78. package/dist/commands/review.d.ts.map +1 -1
  79. package/dist/commands/review.js +36 -5
  80. package/dist/commands/review.js.map +1 -1
  81. package/dist/dag-runner/__tests__/maxdepth-config.test.d.ts +2 -0
  82. package/dist/dag-runner/__tests__/maxdepth-config.test.d.ts.map +1 -0
  83. package/dist/dag-runner/__tests__/maxdepth-config.test.js +28 -0
  84. package/dist/dag-runner/__tests__/maxdepth-config.test.js.map +1 -0
  85. package/dist/dag-runner/__tests__/sub-dag.test.d.ts +2 -0
  86. package/dist/dag-runner/__tests__/sub-dag.test.d.ts.map +1 -0
  87. package/dist/dag-runner/__tests__/sub-dag.test.js +127 -0
  88. package/dist/dag-runner/__tests__/sub-dag.test.js.map +1 -0
  89. package/dist/dag-runner/graph-ingest.d.ts.map +1 -1
  90. package/dist/dag-runner/graph-ingest.js +13 -7
  91. package/dist/dag-runner/graph-ingest.js.map +1 -1
  92. package/dist/dag-runner/run_dag.d.ts +2 -0
  93. package/dist/dag-runner/run_dag.d.ts.map +1 -1
  94. package/dist/dag-runner/run_dag.js.map +1 -1
  95. package/dist/dag-runner/state-store.d.ts +2 -0
  96. package/dist/dag-runner/state-store.d.ts.map +1 -1
  97. package/dist/dag-runner/state-store.js +44 -8
  98. package/dist/dag-runner/state-store.js.map +1 -1
  99. package/dist/dag-runner/sub-dag.d.ts +23 -0
  100. package/dist/dag-runner/sub-dag.d.ts.map +1 -0
  101. package/dist/dag-runner/sub-dag.js +117 -0
  102. package/dist/dag-runner/sub-dag.js.map +1 -0
  103. package/dist/dashboard/__tests__/dashboard-routes.test.d.ts +2 -0
  104. package/dist/dashboard/__tests__/dashboard-routes.test.d.ts.map +1 -0
  105. package/dist/dashboard/__tests__/dashboard-routes.test.js +102 -0
  106. package/dist/dashboard/__tests__/dashboard-routes.test.js.map +1 -0
  107. package/dist/dashboard/routes.d.ts +8 -0
  108. package/dist/dashboard/routes.d.ts.map +1 -0
  109. package/dist/dashboard/routes.js +70 -0
  110. package/dist/dashboard/routes.js.map +1 -0
  111. package/dist/graphrag/__tests__/drift-config.test.d.ts +2 -0
  112. package/dist/graphrag/__tests__/drift-config.test.d.ts.map +1 -0
  113. package/dist/graphrag/__tests__/drift-config.test.js +33 -0
  114. package/dist/graphrag/__tests__/drift-config.test.js.map +1 -0
  115. package/dist/graphrag/__tests__/drift.test.d.ts +2 -0
  116. package/dist/graphrag/__tests__/drift.test.d.ts.map +1 -0
  117. package/dist/graphrag/__tests__/drift.test.js +152 -0
  118. package/dist/graphrag/__tests__/drift.test.js.map +1 -0
  119. package/dist/graphrag/__tests__/hybrid-integration.test.d.ts +2 -0
  120. package/dist/graphrag/__tests__/hybrid-integration.test.d.ts.map +1 -0
  121. package/dist/graphrag/__tests__/hybrid-integration.test.js +158 -0
  122. package/dist/graphrag/__tests__/hybrid-integration.test.js.map +1 -0
  123. package/dist/graphrag/__tests__/hybrid.test.d.ts +2 -0
  124. package/dist/graphrag/__tests__/hybrid.test.d.ts.map +1 -0
  125. package/dist/graphrag/__tests__/hybrid.test.js +71 -0
  126. package/dist/graphrag/__tests__/hybrid.test.js.map +1 -0
  127. package/dist/graphrag/__tests__/incremental-index.test.d.ts +2 -0
  128. package/dist/graphrag/__tests__/incremental-index.test.d.ts.map +1 -0
  129. package/dist/graphrag/__tests__/incremental-index.test.js +135 -0
  130. package/dist/graphrag/__tests__/incremental-index.test.js.map +1 -0
  131. package/dist/graphrag/__tests__/no-heavy-dep-in-core.test.d.ts +2 -0
  132. package/dist/graphrag/__tests__/no-heavy-dep-in-core.test.d.ts.map +1 -0
  133. package/dist/graphrag/__tests__/no-heavy-dep-in-core.test.js +48 -0
  134. package/dist/graphrag/__tests__/no-heavy-dep-in-core.test.js.map +1 -0
  135. package/dist/graphrag/__tests__/requirement-hash.test.d.ts +2 -0
  136. package/dist/graphrag/__tests__/requirement-hash.test.d.ts.map +1 -0
  137. package/dist/graphrag/__tests__/requirement-hash.test.js +74 -0
  138. package/dist/graphrag/__tests__/requirement-hash.test.js.map +1 -0
  139. package/dist/graphrag/__tests__/semantic-config.test.d.ts +2 -0
  140. package/dist/graphrag/__tests__/semantic-config.test.d.ts.map +1 -0
  141. package/dist/graphrag/__tests__/semantic-config.test.js +39 -0
  142. package/dist/graphrag/__tests__/semantic-config.test.js.map +1 -0
  143. package/dist/graphrag/__tests__/vector-persistence.test.d.ts +2 -0
  144. package/dist/graphrag/__tests__/vector-persistence.test.d.ts.map +1 -0
  145. package/dist/graphrag/__tests__/vector-persistence.test.js +112 -0
  146. package/dist/graphrag/__tests__/vector-persistence.test.js.map +1 -0
  147. package/dist/graphrag/__tests__/vector-search.test.d.ts +2 -0
  148. package/dist/graphrag/__tests__/vector-search.test.d.ts.map +1 -0
  149. package/dist/graphrag/__tests__/vector-search.test.js +36 -0
  150. package/dist/graphrag/__tests__/vector-search.test.js.map +1 -0
  151. package/dist/graphrag/drift.d.ts +22 -0
  152. package/dist/graphrag/drift.d.ts.map +1 -0
  153. package/dist/graphrag/drift.js +204 -0
  154. package/dist/graphrag/drift.js.map +1 -0
  155. package/dist/graphrag/embeddings.d.ts +15 -0
  156. package/dist/graphrag/embeddings.d.ts.map +1 -0
  157. package/dist/graphrag/embeddings.js +107 -0
  158. package/dist/graphrag/embeddings.js.map +1 -0
  159. package/dist/graphrag/graph-rag.d.ts +17 -1
  160. package/dist/graphrag/graph-rag.d.ts.map +1 -1
  161. package/dist/graphrag/graph-rag.js +170 -2
  162. package/dist/graphrag/graph-rag.js.map +1 -1
  163. package/dist/graphrag/hybrid.d.ts +8 -0
  164. package/dist/graphrag/hybrid.d.ts.map +1 -0
  165. package/dist/graphrag/hybrid.js +203 -0
  166. package/dist/graphrag/hybrid.js.map +1 -0
  167. package/dist/graphrag/incremental-index.d.ts +18 -0
  168. package/dist/graphrag/incremental-index.d.ts.map +1 -0
  169. package/dist/graphrag/incremental-index.js +159 -0
  170. package/dist/graphrag/incremental-index.js.map +1 -0
  171. package/dist/graphrag/index.d.ts +1 -1
  172. package/dist/graphrag/index.d.ts.map +1 -1
  173. package/dist/graphrag/json-graph.d.ts +2 -1
  174. package/dist/graphrag/json-graph.d.ts.map +1 -1
  175. package/dist/graphrag/json-graph.js +14 -0
  176. package/dist/graphrag/json-graph.js.map +1 -1
  177. package/dist/graphrag/knowledge-graph.d.ts +5 -0
  178. package/dist/graphrag/knowledge-graph.d.ts.map +1 -1
  179. package/dist/graphrag/neo4j-graph.d.ts +2 -1
  180. package/dist/graphrag/neo4j-graph.d.ts.map +1 -1
  181. package/dist/graphrag/neo4j-graph.js +40 -5
  182. package/dist/graphrag/neo4j-graph.js.map +1 -1
  183. package/dist/graphrag/requirement-ingest.d.ts +4 -1
  184. package/dist/graphrag/requirement-ingest.d.ts.map +1 -1
  185. package/dist/graphrag/requirement-ingest.js +18 -8
  186. package/dist/graphrag/requirement-ingest.js.map +1 -1
  187. package/dist/graphrag/types.d.ts +1 -0
  188. package/dist/graphrag/types.d.ts.map +1 -1
  189. package/dist/graphrag/vector-search.d.ts +10 -0
  190. package/dist/graphrag/vector-search.d.ts.map +1 -0
  191. package/dist/graphrag/vector-search.js +38 -0
  192. package/dist/graphrag/vector-search.js.map +1 -0
  193. package/dist/http/__tests__/shared-app.test.d.ts +2 -0
  194. package/dist/http/__tests__/shared-app.test.d.ts.map +1 -0
  195. package/dist/http/__tests__/shared-app.test.js +57 -0
  196. package/dist/http/__tests__/shared-app.test.js.map +1 -0
  197. package/dist/http/app.d.ts +15 -0
  198. package/dist/http/app.d.ts.map +1 -0
  199. package/dist/http/app.js +32 -0
  200. package/dist/http/app.js.map +1 -0
  201. package/dist/mcp-server/server.d.ts.map +1 -1
  202. package/dist/mcp-server/server.js +13 -16
  203. package/dist/mcp-server/server.js.map +1 -1
  204. package/dist/reporters/__tests__/github-reporter.test.d.ts +2 -0
  205. package/dist/reporters/__tests__/github-reporter.test.d.ts.map +1 -0
  206. package/dist/reporters/__tests__/github-reporter.test.js +93 -0
  207. package/dist/reporters/__tests__/github-reporter.test.js.map +1 -0
  208. package/dist/reporters/ci-gate.d.ts +27 -0
  209. package/dist/reporters/ci-gate.d.ts.map +1 -0
  210. package/dist/reporters/ci-gate.js +100 -0
  211. package/dist/reporters/ci-gate.js.map +1 -0
  212. package/dist/reporters/github.d.ts +36 -0
  213. package/dist/reporters/github.d.ts.map +1 -0
  214. package/dist/reporters/github.js +142 -0
  215. package/dist/reporters/github.js.map +1 -0
  216. package/dist/telemetry/__tests__/aggregator.test.d.ts +2 -0
  217. package/dist/telemetry/__tests__/aggregator.test.d.ts.map +1 -0
  218. package/dist/telemetry/__tests__/aggregator.test.js +164 -0
  219. package/dist/telemetry/__tests__/aggregator.test.js.map +1 -0
  220. package/dist/telemetry/aggregator.d.ts +43 -0
  221. package/dist/telemetry/aggregator.d.ts.map +1 -0
  222. package/dist/telemetry/aggregator.js +282 -0
  223. package/dist/telemetry/aggregator.js.map +1 -0
  224. package/dist/utils/UpdateApplier.d.ts.map +1 -1
  225. package/dist/utils/UpdateApplier.js +3 -1
  226. package/dist/utils/UpdateApplier.js.map +1 -1
  227. package/dist/utils/excalidraw-renderer.d.ts.map +1 -1
  228. package/dist/utils/excalidraw-renderer.js +1 -0
  229. package/dist/utils/excalidraw-renderer.js.map +1 -1
  230. package/dist/utils/graph-renderer.d.ts +2 -0
  231. package/dist/utils/graph-renderer.d.ts.map +1 -1
  232. package/dist/utils/graph-renderer.js +188 -14
  233. package/dist/utils/graph-renderer.js.map +1 -1
  234. package/dist/utils/project-generator.d.ts.map +1 -1
  235. package/dist/utils/project-generator.js +34 -5
  236. package/dist/utils/project-generator.js.map +1 -1
  237. package/dist/verification/__tests__/decay-policy.test.js +1 -0
  238. package/dist/verification/__tests__/decay-policy.test.js.map +1 -1
  239. package/dist/verification/__tests__/telemetry.test.js +3 -0
  240. package/dist/verification/__tests__/telemetry.test.js.map +1 -1
  241. package/dist/verification/config.d.ts +82 -0
  242. package/dist/verification/config.d.ts.map +1 -1
  243. package/dist/verification/config.js +148 -0
  244. package/dist/verification/config.js.map +1 -1
  245. package/dist/verification/types.d.ts +2 -0
  246. package/dist/verification/types.d.ts.map +1 -1
  247. package/package.json +3 -2
  248. package/templates/.github/workflows/dare-pr.yml +26 -0
  249. package/templates/dashboard/app.js +184 -0
  250. package/templates/dashboard/index.html +63 -0
  251. package/templates/dashboard/style.css +134 -0
  252. package/templates/ide/antigravity/.agents/skills/dare-dashboard/SKILL.md +18 -0
  253. package/templates/ide/claude/.claude/commands/dare-dashboard.md +18 -0
  254. package/templates/ide/cursor/.cursor/commands/dare-dashboard.md +18 -0
package/README.md CHANGED
@@ -166,7 +166,12 @@ Pick **one** of the two paths per stack:
166
166
 
167
167
  > **v3.8.1–3.8.2 (manutenção):** `dare update` passa a entregar os skills/comandos/config das v3.4→v3.8 a projetos existentes (backfill do `UPDATE-MANIFEST`, 3.8.1). O CI ganha um **gate de cobertura de docs** + **redeploy automático da documentação** a cada release (3.8.2).
168
168
 
169
+ > **v3.11.0:** **Dynamic DAG** — `REPLAN` splice de sub-DAG em runtime (`refine --split` + `spliceSubDag`); `verification.loop.maxDepth` (default **2**, excedeu → `ESCALATE`); `dare refine --split --apply` (modo manual); `dare dag viz` agrupa sub-DAGs (`subgraph Sub-DAG: <pai>` em Mermaid/DOT/Excalidraw); estado persiste em `dare-dag.yaml` + `.dare/state.json`.
170
+
171
+ > **v3.10.0:** **Drift Gate** — `dare graph drift` (exit **7** com `--strict`). **Local Semantic Search** — retrieval híbrido RRF, `graphrag.semantic` opt-in, `@huggingface/transformers` optionalDep lazy, `dare graph query --semantic`, indexação incremental por `contentHash`.
172
+
169
173
  > **v3.9.0:** **Secure Autonomous Executor + Agentic-chain Security Gate** — `dare execute --agent` (driver plugável, SDK como `optionalDependency` lazy; `--budget-tokens`, `--require-approval rank|none`, `--on-fail replan|escalate|stop`, `--dry-run`; telemetria de custo no GraphRAG; gate `no-llm-in-core`) **+** `dare guard` (unicode-audit + scan heurístico + proveniência Ed25519/minisign-compat + trust boundaries control/data; exit code **6** em FAIL; pré-flight do `dare execute --agent`; bloco `guard` em `dare.config.json`, opt-in `enabled:false`).
174
+
170
175
  > **v3.8.0:** **Formal Verification Gate** — opt-in strict aspect `verification.formal` (enabled/backend/modules/maxRepairIterations/proofTimeoutSeconds/antiBypass) plus flags `--formal` / `--no-formal` / `--formal-backend <dafny|verus|lean>`. Proves marked critical modules against external Dafny/Verus/Lean toolchain (not an npm dep); exit 5 when toolchain missing on a marked module; anti-bypass rejects `assume(false)`/`ensures true`/leaks even on solver exit 0; telemetry edge `proven_by` → `formal-gate`.
171
176
 
172
177
  > **v3.7.0:** **Brownfield Discovery** — deterministic auto-discovery of codebase patterns/conventions (`dare patterns`, read-only) fed into the dual graph + steering, plus lightweight planning personas (Analyst/PM/Architect) at planning time only (no runtime swarm). Extends `dare reverse`/`dna`.
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=ci-pr-regression.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ci-pr-regression.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/ci-pr-regression.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,76 @@
1
+ import { describe, expect, it, vi } from 'vitest';
2
+ import fs from 'fs-extra';
3
+ import path from 'node:path';
4
+ import { fileURLToPath } from 'node:url';
5
+ import { DARE_REPORT_MARKER, emitAnnotations, sanitizeFindingText, upsertPrComment, } from '../reporters/github.js';
6
+ import { exitCodeForFailOn, parseFailOn } from '../reporters/ci-gate.js';
7
+ const REPO_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..', '..', '..');
8
+ describe('ci-pr regression', () => {
9
+ it('annotations_match_github_workflow_command_format', () => {
10
+ const lines = [];
11
+ vi.spyOn(process.stdout, 'write').mockImplementation((c) => {
12
+ lines.push(String(c));
13
+ return true;
14
+ });
15
+ emitAnnotations([
16
+ {
17
+ severity: 'error',
18
+ file: 'packages/cli/src/foo.ts',
19
+ line: 10,
20
+ rule: 'todo-marker',
21
+ message: 'TODO remove',
22
+ },
23
+ ]);
24
+ expect(lines[0]).toMatch(/^::error file=packages\/cli\/src\/foo\.ts,line=10::/);
25
+ });
26
+ it('upsertPrComment_updates_instead_of_duplicating', async () => {
27
+ let postCount = 0;
28
+ let patchCount = 0;
29
+ const fetchMock = vi.fn(async (_url, init) => {
30
+ if (!init?.method) {
31
+ return new Response(JSON.stringify([{ id: 5, body: `${DARE_REPORT_MARKER}\nold` }]), {
32
+ status: 200,
33
+ });
34
+ }
35
+ if (init.method === 'PATCH') {
36
+ patchCount += 1;
37
+ return new Response('{}', { status: 200 });
38
+ }
39
+ if (init.method === 'POST') {
40
+ postCount += 1;
41
+ return new Response('{}', { status: 201 });
42
+ }
43
+ return new Response('{}', { status: 404 });
44
+ });
45
+ await upsertPrComment({
46
+ repo: 'org/repo',
47
+ prNumber: 1,
48
+ token: 'secret-token-value',
49
+ summary: [{ gate: 'guard', verdict: 'pass', count: 0 }],
50
+ findings: [],
51
+ }, fetchMock);
52
+ expect(patchCount).toBe(1);
53
+ expect(postCount).toBe(0);
54
+ });
55
+ it('fail_on_none_does_not_block', () => {
56
+ expect(parseFailOn('none')).toBe('none');
57
+ expect(exitCodeForFailOn('none', 'fail')).toBe(0);
58
+ });
59
+ it('sanitize_removes_secrets_and_absolute_paths', () => {
60
+ const out = sanitizeFindingText('C:\\Users\\secret\\file.txt leaked ghp_abcdefghijklmnopqrstuvwxyz123456');
61
+ expect(out).not.toContain('C:\\Users');
62
+ expect(out).not.toContain('ghp_abcdefghijklmnopqrstuvwxyz123456');
63
+ });
64
+ it('action_yml_declares_minimal_permissions', async () => {
65
+ const actionYml = await fs.readFile(path.join(REPO_ROOT, 'action.yml'), 'utf8');
66
+ expect(actionYml).toContain('pull-requests: write');
67
+ expect(actionYml).toContain('contents: read');
68
+ expect(actionYml).toContain("default: 'none'");
69
+ });
70
+ it('dare_pr_workflow_template_pins_actions_by_sha', async () => {
71
+ const wf = await fs.readFile(path.join(REPO_ROOT, 'packages/cli/templates/.github/workflows/dare-pr.yml'), 'utf8');
72
+ expect(wf).toMatch(/uses: actions\/checkout@[0-9a-f]{40}/);
73
+ expect(wf).not.toMatch(/@v\d/);
74
+ });
75
+ });
76
+ //# sourceMappingURL=ci-pr-regression.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ci-pr-regression.test.js","sourceRoot":"","sources":["../../src/__tests__/ci-pr-regression.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEzE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAC5B,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,CACL,CAAC;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;YACzD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,eAAe,CAAC;YACd;gBACE,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,yBAAyB;gBAC/B,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,aAAa;aACvB;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,IAAkB,EAAE,EAAE;YACjE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAClB,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,kBAAkB,OAAO,EAAE,CAAC,CAAC,EAAE;oBACnF,MAAM,EAAE,GAAG;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC5B,UAAU,IAAI,CAAC,CAAC;gBAChB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,SAAS,IAAI,CAAC,CAAC;gBACf,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,MAAM,eAAe,CACnB;YACE,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,oBAAoB;YAC3B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACvD,QAAQ,EAAE,EAAE;SACb,EACD,SAAoC,CACrC,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,GAAG,GAAG,mBAAmB,CAC7B,yEAAyE,CAC1E,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QAChF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC9C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,QAAQ,CAC1B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sDAAsD,CAAC,EAC5E,MAAM,CACP,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;QAC3D,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=dashboard-front.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dashboard-front.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/dashboard-front.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,37 @@
1
+ import path from 'node:path';
2
+ import fs from 'fs-extra';
3
+ import { describe, expect, it } from 'vitest';
4
+ import { resolveDashboardTemplateRoot } from '../dashboard/routes.js';
5
+ describe('dashboard front templates', () => {
6
+ const root = resolveDashboardTemplateRoot();
7
+ it('index_html_has_required_panel_selectors', async () => {
8
+ const html = await fs.readFile(path.join(root, 'index.html'), 'utf8');
9
+ for (const id of [
10
+ 'dag-panel',
11
+ 'gates-panel',
12
+ 'cost-panel',
13
+ 'bestof-panel',
14
+ 'guard-panel',
15
+ 'drift-panel',
16
+ 'empty-hints',
17
+ ]) {
18
+ expect(html).toContain(`id="${id}"`);
19
+ }
20
+ expect(html).toContain('/dashboard/assets/app.js');
21
+ expect(html).toContain('/dashboard/assets/style.css');
22
+ });
23
+ it('app_js_fetches_telemetry_api', async () => {
24
+ const js = await fs.readFile(path.join(root, 'app.js'), 'utf8');
25
+ expect(js).toContain("fetch('/api/telemetry')");
26
+ expect(js).toContain('renderDag');
27
+ expect(js).toContain('renderGates');
28
+ expect(js).toContain('renderCost');
29
+ });
30
+ it('style_css_defines_panel_layout', async () => {
31
+ const css = await fs.readFile(path.join(root, 'style.css'), 'utf8');
32
+ expect(css).toContain('.panel');
33
+ expect(css).toContain('.chart');
34
+ expect(css).toContain('.metrics');
35
+ });
36
+ });
37
+ //# sourceMappingURL=dashboard-front.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dashboard-front.test.js","sourceRoot":"","sources":["../../src/__tests__/dashboard-front.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AAEtE,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,MAAM,IAAI,GAAG,4BAA4B,EAAE,CAAC;IAE5C,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QACtE,KAAK,MAAM,EAAE,IAAI;YACf,WAAW;YACX,aAAa;YACb,YAAY;YACZ,cAAc;YACd,aAAa;YACb,aAAa;YACb,aAAa;SACd,EAAE,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAClC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=dashboard-regression.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dashboard-regression.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/dashboard-regression.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,68 @@
1
+ import os from 'node:os';
2
+ import path from 'node:path';
3
+ import fs from 'fs-extra';
4
+ import express from 'express';
5
+ import request from 'supertest';
6
+ import { afterEach, beforeEach, describe, expect, it } from 'vitest';
7
+ import { createDashboardApp } from '../commands/dashboard.js';
8
+ const TOKEN = 'dashboard-regression-token';
9
+ function nonLoopbackApp(app) {
10
+ const wrapper = express();
11
+ wrapper.set('trust proxy', true);
12
+ wrapper.use((req, _res, next) => {
13
+ Object.defineProperty(req, 'ip', { value: '203.0.113.1', configurable: true });
14
+ Object.defineProperty(req.socket, 'remoteAddress', {
15
+ value: '203.0.113.1',
16
+ configurable: true,
17
+ });
18
+ next();
19
+ });
20
+ wrapper.use(app);
21
+ return wrapper;
22
+ }
23
+ describe('dashboard regression', () => {
24
+ let projectRoot;
25
+ beforeEach(async () => {
26
+ projectRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'dare-dash-reg-'));
27
+ await fs.ensureDir(path.join(projectRoot, '.dare'));
28
+ await fs.writeJson(path.join(projectRoot, '.dare', 'state.json'), {
29
+ version: 1,
30
+ updatedAt: '2026-06-11T00:00:00.000Z',
31
+ tasks: {},
32
+ });
33
+ await fs.writeJson(path.join(projectRoot, 'dare-graph.yml'), {
34
+ backend: 'json',
35
+ path: '.dare/graph.json',
36
+ });
37
+ await fs.writeJson(path.join(projectRoot, '.dare', 'graph.json'), { nodes: [], edges: [] });
38
+ });
39
+ afterEach(async () => {
40
+ await fs.remove(projectRoot).catch(() => undefined);
41
+ });
42
+ it('reuses_mcp_auth_401_without_token_off_loopback', async () => {
43
+ const app = nonLoopbackApp(createDashboardApp(projectRoot, TOKEN));
44
+ const res = await request(app).get('/dashboard');
45
+ expect(res.status).toBe(401);
46
+ });
47
+ it('read_only_no_post_put_mutations', async () => {
48
+ const app = createDashboardApp(projectRoot, TOKEN);
49
+ expect((await request(app).post('/api/telemetry').set('Host', '127.0.0.1').send({})).status).toBe(404);
50
+ expect((await request(app).put('/api/telemetry').set('Host', '127.0.0.1').send({})).status).toBe(404);
51
+ expect((await request(app).delete('/dashboard').set('Host', '127.0.0.1')).status).toBe(404);
52
+ });
53
+ it('assets_confined_no_traversal', async () => {
54
+ const app = createDashboardApp(projectRoot, TOKEN);
55
+ const blocked = await request(app)
56
+ .get('/dashboard/assets/..%2f..%2fpackage.json')
57
+ .set('Host', '127.0.0.1');
58
+ expect(blocked.status).toBe(403);
59
+ });
60
+ it('empty_graph_returns_emptyHints', async () => {
61
+ const app = createDashboardApp(projectRoot, TOKEN);
62
+ const res = await request(app).get('/api/telemetry').set('Host', '127.0.0.1');
63
+ expect(res.status).toBe(200);
64
+ expect(res.body.emptyHints).toContain('no tasks — run dare execute');
65
+ expect(res.body.dag.total).toBe(0);
66
+ });
67
+ });
68
+ //# sourceMappingURL=dashboard-regression.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dashboard-regression.test.js","sourceRoot":"","sources":["../../src/__tests__/dashboard-regression.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,MAAM,KAAK,GAAG,4BAA4B,CAAC;AAE3C,SAAS,cAAc,CAAC,GAAoB;IAC1C,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC9B,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACjD,KAAK,EAAE,aAAa;YACpB,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAI,WAAmB,CAAC;IAExB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACzE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE;YAChE,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,0BAA0B;YACrC,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE;YAC3D,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,kBAAkB;SACzB,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,GAAG,GAAG,cAAc,CAAC,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,GAAG,GAAG,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvG,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtG,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,GAAG,GAAG,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;aAC/B,GAAG,CAAC,0CAA0C,CAAC;aAC/C,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC5B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,GAAG,GAAG,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC9E,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=drift-regression.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"drift-regression.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/drift-regression.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,118 @@
1
+ import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
2
+ import fs from 'fs-extra';
3
+ import os from 'node:os';
4
+ import path from 'node:path';
5
+ import { fileURLToPath } from 'node:url';
6
+ import { JsonGraph } from '../graphrag/json-graph.js';
7
+ const TEST_ROOT = path.dirname(fileURLToPath(import.meta.url));
8
+ const SRC_ROOT = path.join(TEST_ROOT, '..');
9
+ const FIXTURE_PATH = path.join(TEST_ROOT, '__fixtures__', 'drift-graph.json');
10
+ const NO_LLM_PATTERN = /openai|anthropic|@google\/generative-ai|langchain/i;
11
+ describe('drift regression audit (task-705)', () => {
12
+ let projectRoot;
13
+ let stdout;
14
+ let stderr;
15
+ let exitCode;
16
+ beforeEach(async () => {
17
+ projectRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'drift-regression-'));
18
+ await fs.ensureDir(path.join(projectRoot, 'DARE'));
19
+ await fs.ensureDir(path.join(projectRoot, '.dare'));
20
+ await fs.writeFile(path.join(projectRoot, 'dare-graph.yml'), 'backend: json\njson:\n path: .dare/graph.json\n');
21
+ await seedFixtureGraph(projectRoot);
22
+ resetCaptured();
23
+ vi.spyOn(process, 'cwd').mockReturnValue(projectRoot);
24
+ vi.spyOn(process, 'exit').mockImplementation((code) => {
25
+ exitCode = code;
26
+ return undefined;
27
+ });
28
+ vi.spyOn(console, 'log').mockImplementation((...args) => {
29
+ stdout += args.map(String).join(' ') + '\n';
30
+ });
31
+ vi.spyOn(console, 'error').mockImplementation((...args) => {
32
+ stderr += args.map(String).join(' ') + '\n';
33
+ });
34
+ });
35
+ afterEach(async () => {
36
+ vi.restoreAllMocks();
37
+ await fs.remove(projectRoot).catch(() => undefined);
38
+ });
39
+ async function seedFixtureGraph(root) {
40
+ const fixture = (await fs.readJson(FIXTURE_PATH));
41
+ const graph = new JsonGraph(path.join(root, '.dare', 'graph.json'));
42
+ await graph.init();
43
+ graph.importFromJson(fixture);
44
+ await Promise.resolve(graph.close());
45
+ }
46
+ function resetCaptured() {
47
+ stdout = '';
48
+ stderr = '';
49
+ exitCode = undefined;
50
+ }
51
+ async function writeDriftConfig(overrides = {}) {
52
+ await fs.writeJson(path.join(projectRoot, 'dare.config.json'), {
53
+ drift: {
54
+ enabled: true,
55
+ maxOrphanReqs: 0,
56
+ maxOrphanCode: 0,
57
+ failOnStale: false,
58
+ ignore: [],
59
+ ...overrides,
60
+ },
61
+ });
62
+ }
63
+ async function runDrift(args) {
64
+ vi.resetModules();
65
+ const { graphCommand } = await import('../commands/graph.js');
66
+ await graphCommand.parseAsync(['node', 'graph', 'drift', ...args]);
67
+ }
68
+ function parseJsonReport() {
69
+ return JSON.parse(stdout.trim());
70
+ }
71
+ it('three_kinds_detected', async () => {
72
+ await writeDriftConfig();
73
+ await runDrift(['--format', 'json']);
74
+ const report = parseJsonReport();
75
+ expect(report.counts['orphan-requirement']).toBe(1);
76
+ expect(report.counts['orphan-code']).toBe(2);
77
+ expect(report.counts.stale).toBe(1);
78
+ expect(report.staleIndeterminate).toBe(1);
79
+ expect(stderr).toBe('');
80
+ });
81
+ it('ignore_allowlist_respected', async () => {
82
+ await writeDriftConfig({ ignore: ['**/generated/**'] });
83
+ await runDrift(['--format', 'json']);
84
+ const report = parseJsonReport();
85
+ expect(report.counts['orphan-code']).toBe(1);
86
+ expect(report.findings.some((finding) => finding.nodeId === 'code_symbol:src/generated/bootstrap.ts::bootstrap')).toBe(false);
87
+ expect(report.findings.some((finding) => finding.nodeId === 'code_symbol:src/inventory/sync.ts::syncInventory')).toBe(true);
88
+ });
89
+ it('stale_degrades_to_warn_without_hash', async () => {
90
+ await writeDriftConfig({ ignore: ['**/generated/**'] });
91
+ await runDrift(['--format', 'json']);
92
+ const report = parseJsonReport();
93
+ const staleNodeIds = report.findings.filter((finding) => finding.kind === 'stale').map((f) => f.nodeId);
94
+ expect(report.staleIndeterminate).toBe(1);
95
+ expect(staleNodeIds).toContain('requirement:RF-STALE');
96
+ expect(staleNodeIds).not.toContain('requirement:RF-NOHASH');
97
+ });
98
+ it('strict_exits_7', async () => {
99
+ await writeDriftConfig({ ignore: ['**/generated/**'] });
100
+ await runDrift(['--format', 'json']);
101
+ expect(exitCode).toBeUndefined();
102
+ resetCaptured();
103
+ await runDrift(['--strict', '--format', 'json']);
104
+ expect(exitCode).toBe(7);
105
+ });
106
+ it('deterministic_no_llm', async () => {
107
+ const deterministicModules = [
108
+ 'commands/graph.ts',
109
+ 'graphrag/drift.ts',
110
+ 'verification/config.ts',
111
+ ];
112
+ for (const rel of deterministicModules) {
113
+ const content = await fs.readFile(path.join(SRC_ROOT, rel), 'utf8');
114
+ expect(content).not.toMatch(NO_LLM_PATTERN);
115
+ }
116
+ });
117
+ });
118
+ //# sourceMappingURL=drift-regression.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"drift-regression.test.js","sourceRoot":"","sources":["../../src/__tests__/drift-regression.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAqBtD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;AAC9E,MAAM,cAAc,GAAG,oDAAoD,CAAC;AAE5E,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,IAAI,WAAmB,CAAC;IACxB,IAAI,MAAc,CAAC;IACnB,IAAI,MAAc,CAAC;IACnB,IAAI,QAA4B,CAAC;IAEjC,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC5E,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,EACxC,kDAAkD,CACnD,CAAC;QAEF,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACpC,aAAa,EAAE,CAAC;QAEhB,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACtD,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,EAAE;YACpD,QAAQ,GAAG,IAAc,CAAC;YAC1B,OAAO,SAAkB,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,IAAe,EAAE,EAAE;YACjE,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAC9C,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,IAAe,EAAE,EAAE;YACnE,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,EAAE,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,gBAAgB,CAAC,IAAY;QAC1C,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAiB,CAAC;QAClE,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QACpE,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC9B,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,SAAS,aAAa;QACpB,MAAM,GAAG,EAAE,CAAC;QACZ,MAAM,GAAG,EAAE,CAAC;QACZ,QAAQ,GAAG,SAAS,CAAC;IACvB,CAAC;IAED,KAAK,UAAU,gBAAgB,CAAC,YAAqC,EAAE;QACrE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE;YAC7D,KAAK,EAAE;gBACL,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,CAAC;gBAChB,aAAa,EAAE,CAAC;gBAChB,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,EAAE;gBACV,GAAG,SAAS;aACb;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,IAAc;QACpC,EAAE,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAC9D,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,SAAS,eAAe;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAgB,CAAC;IAClD,CAAC;IAED,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,gBAAgB,EAAE,CAAC;QACzB,MAAM,QAAQ,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QAErC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,QAAQ,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QAErC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CACJ,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,mDAAmD,CACpF,CACF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,MAAM,CACJ,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,kDAAkD,CACnF,CACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,QAAQ,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QAErC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACvD,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE;QAC9B,MAAM,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAExD,MAAM,QAAQ,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAC;QAEjC,aAAa,EAAE,CAAC;QAChB,MAAM,QAAQ,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,oBAAoB,GAAG;YAC3B,mBAAmB;YACnB,mBAAmB;YACnB,wBAAwB;SACzB,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;YACpE,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=dynamic-dag-regression.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dynamic-dag-regression.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/dynamic-dag-regression.test.ts"],"names":[],"mappings":""}