@feng0531/dsh-code-review 0.29.1 → 0.29.2

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # 变更记录
 
+## 0.29.2
+
+- Git工作副本基线捕获不再全HEAD枚举，仅可审查变更基线路径literal非递归lookup，改名使用oldPath，删除/子模块边界不变。
+- 11000无关文件大树4Shader工作变更及稳定hash/status不改回归，282测试通过；自动上下文tracked索引仍另行有界规划。
+
 ## 0.29.1
 
 - 参考核心selection核实新增凭据路径不可覆盖门禁：.env家族模板例外、.ssh/私钥/包管理凭据纯路径排除。

package/README.md

@@ -4,7 +4,7 @@
 
 ## 当前状态
 
-当前代码版本为 0.29.1
+当前代码版本为 0.29.2
 
 凭据路径硬排除：.env及其后缀（.env.example/.env.sample/.env.template例外）、.ssh目录、SSH私钥及.netrc/_netrc/.npmrc/.pypirc/.dockercfg，大小写无关；显式选择不可绕过，上下文/规则同样拒绝。仅路径策略，不保证普通文件无秘密。
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feng0531/dsh-code-review",
-  "version": "0.29.1",
+  "version": "0.29.2",
   "private": false,
   "license": "SEE LICENSE IN LICENSE",
   "publishConfig": { "access": "public", "registry": "https://registry.npmjs.org/" },

package/src/git.mjs

@@ -22,14 +22,7 @@ export async function captureGit(cwd, options = {}) {
     if (ref.code !== 1) throw new Error('Cannot resolve Git HEAD');
   }
   const base = new Map();
-  if (head) {
-    const tree = text(await git(root, ['ls-tree', '-rz', '--full-tree', head], options));
-    for (const record of tree.split('\0').filter(Boolean)) {
-      const tab = record.indexOf('\t');
-      const [mode, type, oid] = record.slice(0, tab).split(' ');
-      base.set(record.slice(tab + 1), { mode, type, oid });
-    }
-  }
+  // Resolve only reviewable changed baselines below; never enumerate the HEAD tree.
   const records = text(before).split('\0');
   const changes = [];
   for (let i = 0; i < records.length; i++) {
@@ -42,6 +35,18 @@ export async function captureGit(cwd, options = {}) {
   if (changes.length > maxFiles) throw new Error('Change count limit exceeded; narrow repository scope');
   const known = new Set(changes.map(c => c.path));
   if (selectedPaths?.some(p => !known.has(p))) throw new Error('Selected path is not a current change');
+  if (head) {
+    const requested = [...new Set(changes.filter(c => !isSecretPath(c.path) && !isSecretPath(c.oldPath) && (!selectedPaths || selectedPaths.includes(c.path)) && (c.rawStatus !== '??' || selectedPaths?.includes(c.path))).map(c => relativePath(c.oldPath ?? c.path)))];
+    for (const name of requested) {
+      signal?.throwIfAborted();
+      const records = text(await git(root, ['--literal-pathspecs','ls-tree','-z','--full-tree',head,'--',name], options)).split('\0').filter(Boolean);
+      for (const record of records) {
+        const m = /^(\d{6}) (blob|tree|commit) ([a-f0-9]{40}|[a-f0-9]{64})\t([\s\S]+)$/.exec(record);
+        if (!m || m[4] !== name || base.has(name)) throw new Error('Invalid changed baseline lookup');
+        base.set(name,{mode:m[1],type:m[2],oid:m[3]});
+      }
+    }
+  }
   const files = [];
   for (const change of changes) {
     signal?.throwIfAborted();