@fern-api/replay 0.16.1 → 0.16.2

package/dist/index.d.cts

@@ -266,8 +266,9 @@ declare class ReplayDetector {
     private git;
     private lockManager;
     private sdkOutputDir;
+    private fernignorePatterns;
     readonly warnings: string[];
-    constructor(git: GitClient, lockManager: LockfileManager, sdkOutputDir: string);
+    constructor(git: GitClient, lockManager: LockfileManager, sdkOutputDir: string, fernignorePatterns?: readonly string[]);
     /**
      * Derive the previous-generation SHA from git history instead of trusting
      * `lock.current_generation`.
@@ -737,6 +738,19 @@ declare class ReplayService {
      * `applyPreparedReplay` (e.g., `[fern-autoversion]`).
      */
     prepareReplay(options?: ReplayOptions): Promise<ReplayPreparation>;
+    /**
+     * ADR 0002 migration step. Strips `.fernignore`-matched entries from
+     * `patch.files`, `patch.theirs_snapshot` keys, and `diff --git` sections
+     * in `patch.patch_content` for every patch in the lockfile. Patches that
+     * end up with no surviving files are removed entirely.
+     *
+     * Idempotent: a second run is a no-op because the first run already
+     * matches the contract. Per-patch try/catch ensures one bad patch does
+     * not block the rest. Each affected patch emits a warning naming the
+     * stripped paths. `patch_content` is left untouched if no parseable
+     * `diff --git` headers are found (fail-safe for exotic legacy formats).
+     */
+    private cleanseLegacyFernignoreEntries;
     /**
      * Phase 2 of the two-phase replay flow. Applies patches, rebases them against
      * the generation, saves the lockfile, and commits `[fern-replay]` (or stages

package/dist/index.d.ts

@@ -266,8 +266,9 @@ declare class ReplayDetector {
     private git;
     private lockManager;
     private sdkOutputDir;
+    private fernignorePatterns;
     readonly warnings: string[];
-    constructor(git: GitClient, lockManager: LockfileManager, sdkOutputDir: string);
+    constructor(git: GitClient, lockManager: LockfileManager, sdkOutputDir: string, fernignorePatterns?: readonly string[]);
     /**
      * Derive the previous-generation SHA from git history instead of trusting
      * `lock.current_generation`.
@@ -737,6 +738,19 @@ declare class ReplayService {
      * `applyPreparedReplay` (e.g., `[fern-autoversion]`).
      */
     prepareReplay(options?: ReplayOptions): Promise<ReplayPreparation>;
+    /**
+     * ADR 0002 migration step. Strips `.fernignore`-matched entries from
+     * `patch.files`, `patch.theirs_snapshot` keys, and `diff --git` sections
+     * in `patch.patch_content` for every patch in the lockfile. Patches that
+     * end up with no surviving files are removed entirely.
+     *
+     * Idempotent: a second run is a no-op because the first run already
+     * matches the contract. Per-patch try/catch ensures one bad patch does
+     * not block the rest. Each affected patch emits a warning naming the
+     * stripped paths. `patch_content` is left untouched if no parseable
+     * `diff --git` headers are found (fail-safe for exotic legacy formats).
+     */
+    private cleanseLegacyFernignoreEntries;
     /**
      * Phase 2 of the two-phase replay flow. Applies patches, rebases them against
      * the generation, saves the lockfile, and commits `[fern-replay]` (or stages

package/dist/index.js

@@ -746,6 +746,7 @@ var LockfileManager = class {
 
 // src/ReplayDetector.ts
 import { createHash } from "crypto";
+import { minimatch as minimatch2 } from "minimatch";
 
 // src/shared/binary.ts
 import { extname } from "path";
@@ -805,6 +806,15 @@ function isBinaryFile(filePath) {
 
 // src/ReplayDetector.ts
 var INFRASTRUCTURE_FILES = /* @__PURE__ */ new Set([".fernignore"]);
+function matchesFernignorePattern(filePath, patterns) {
+  if (patterns.length === 0) return false;
+  return patterns.some((p) => {
+    if (filePath === p) return true;
+    if (minimatch2(filePath, p)) return true;
+    if (!p.includes("*") && !p.includes("?") && filePath.startsWith(p + "/")) return true;
+    return false;
+  });
+}
 function parsePatchFileHeaders(patchContent) {
   const results = [];
   let currentPath = null;
@@ -845,21 +855,25 @@ async function capturePatchSnapshot(git, files, treeish) {
   }
   return snapshot;
 }
-function filterInfrastructureAndSensitiveFiles(rawFilesOutput) {
+function filterInfrastructureAndSensitiveFiles(rawFilesOutput, fernignorePatterns) {
   const allFiles = rawFilesOutput.trim().split("\n").filter(Boolean).filter((f) => !INFRASTRUCTURE_FILES.has(f)).filter((f) => !f.startsWith(".fern/"));
   const sensitiveFiles = allFiles.filter((f) => isSensitiveFile(f));
-  const files = allFiles.filter((f) => !isSensitiveFile(f));
-  return { files, sensitiveFiles };
+  const nonSensitive = allFiles.filter((f) => !isSensitiveFile(f));
+  const fernignoredFiles = nonSensitive.filter((f) => matchesFernignorePattern(f, fernignorePatterns));
+  const files = nonSensitive.filter((f) => !matchesFernignorePattern(f, fernignorePatterns));
+  return { files, sensitiveFiles, fernignoredFiles };
 }
 var ReplayDetector = class {
   git;
   lockManager;
   sdkOutputDir;
+  fernignorePatterns;
   warnings = [];
-  constructor(git, lockManager, sdkOutputDir) {
+  constructor(git, lockManager, sdkOutputDir, fernignorePatterns = []) {
     this.git = git;
     this.lockManager = lockManager;
     this.sdkOutputDir = sdkOutputDir;
+    this.fernignorePatterns = fernignorePatterns;
   }
   /**
    * Derive the previous-generation SHA from git history instead of trusting
@@ -966,22 +980,30 @@ var ReplayDetector = class {
         continue;
       }
       const filesOutput = await this.git.exec(["diff-tree", "--no-commit-id", "--name-only", "-r", commit.sha]);
-      const { files, sensitiveFiles } = filterInfrastructureAndSensitiveFiles(filesOutput);
+      const { files, sensitiveFiles, fernignoredFiles } = filterInfrastructureAndSensitiveFiles(
+        filesOutput,
+        this.fernignorePatterns
+      );
       if (sensitiveFiles.length > 0) {
         this.warnings.push(
           `Sensitive file(s) excluded from patch for commit ${commit.sha.slice(0, 7)}: ${sensitiveFiles.join(", ")}. These files will not be tracked by replay.`
         );
-        if (files.length > 0) {
-          const parentSha = parents[0];
-          if (parentSha) {
-            try {
-              patchContent = await this.git.exec(["diff", parentSha, commit.sha, "--", ...files]);
-            } catch {
-              continue;
-            }
-            if (!patchContent.trim()) continue;
-            contentHash = this.computeContentHash(patchContent);
+      }
+      if (fernignoredFiles.length > 0) {
+        this.warnings.push(
+          `.fernignore-protected file(s) excluded from patch for commit ${commit.sha.slice(0, 7)}: ${fernignoredFiles.join(", ")}. These files are managed by .fernignore, not Replay.`
+        );
+      }
+      if ((sensitiveFiles.length > 0 || fernignoredFiles.length > 0) && files.length > 0) {
+        const parentSha = parents[0];
+        if (parentSha) {
+          try {
+            patchContent = await this.git.exec(["diff", parentSha, commit.sha, "--", ...files]);
+          } catch {
+            continue;
           }
+          if (!patchContent.trim()) continue;
+          contentHash = this.computeContentHash(patchContent);
         }
       }
       if (files.length === 0) {
@@ -1180,12 +1202,20 @@ var ReplayDetector = class {
       resolvedBaseGeneration = fallback;
     }
     const filesOutput = await this.git.exec(["diff", "--name-only", diffBase, "HEAD"]);
-    const { files, sensitiveFiles } = filterInfrastructureAndSensitiveFiles(filesOutput);
+    const { files, sensitiveFiles, fernignoredFiles } = filterInfrastructureAndSensitiveFiles(
+      filesOutput,
+      this.fernignorePatterns
+    );
     if (sensitiveFiles.length > 0) {
       this.warnings.push(
         `Sensitive file(s) excluded from composite patch: ${sensitiveFiles.join(", ")}. These files will not be tracked by replay.`
       );
     }
+    if (fernignoredFiles.length > 0) {
+      this.warnings.push(
+        `.fernignore-protected file(s) excluded from composite patch: ${fernignoredFiles.join(", ")}. These files are managed by .fernignore, not Replay.`
+      );
+    }
     if (files.length === 0) return { patches: [], revertedPatchIds: [] };
     const diff = await this.git.exec(["diff", diffBase, "HEAD", "--", ...files]);
     if (!diff.trim()) return { patches: [], revertedPatchIds: [] };
@@ -1268,23 +1298,31 @@ var ReplayDetector = class {
         continue;
       }
       const filesOutput = await this.git.exec(["diff-tree", "--no-commit-id", "--name-only", "-r", commit.sha]);
-      const { files, sensitiveFiles } = filterInfrastructureAndSensitiveFiles(filesOutput);
+      const { files, sensitiveFiles, fernignoredFiles } = filterInfrastructureAndSensitiveFiles(
+        filesOutput,
+        this.fernignorePatterns
+      );
       if (sensitiveFiles.length > 0) {
         this.warnings.push(
           `Sensitive file(s) excluded from patch for commit ${commit.sha.slice(0, 7)}: ${sensitiveFiles.join(", ")}. These files will not be tracked by replay.`
         );
-        if (files.length > 0) {
-          if (parents.length === 0) {
-            continue;
-          }
-          try {
-            patchContent = await this.git.exec(["diff", parents[0], commit.sha, "--", ...files]);
-          } catch {
-            continue;
-          }
-          if (!patchContent.trim()) continue;
-          contentHash = this.computeContentHash(patchContent);
+      }
+      if (fernignoredFiles.length > 0) {
+        this.warnings.push(
+          `.fernignore-protected file(s) excluded from patch for commit ${commit.sha.slice(0, 7)}: ${fernignoredFiles.join(", ")}. These files are managed by .fernignore, not Replay.`
+        );
+      }
+      if ((sensitiveFiles.length > 0 || fernignoredFiles.length > 0) && files.length > 0) {
+        if (parents.length === 0) {
+          continue;
         }
+        try {
+          patchContent = await this.git.exec(["diff", parents[0], commit.sha, "--", ...files]);
+        } catch {
+          continue;
+        }
+        if (!patchContent.trim()) continue;
+        contentHash = this.computeContentHash(patchContent);
       }
       if (files.length === 0) {
         continue;
@@ -1520,7 +1558,7 @@ function applyBothPatches(baseLines, oursPatches, theirsPatches) {
 import { mkdir as mkdir2, mkdtemp, readFile as readFile2, rm, unlink, writeFile as writeFile2 } from "fs/promises";
 import { tmpdir } from "os";
 import { dirname as dirname3, join as join3 } from "path";
-import { minimatch as minimatch2 } from "minimatch";
+import { minimatch as minimatch3 } from "minimatch";
 
 // src/accumulator/MergeAccumulator.ts
 var MergeAccumulator = class {
@@ -2236,13 +2274,13 @@ var ReplayApplicator = class {
   isExcluded(patch) {
     const config = this.lockManager.getCustomizationsConfig();
     if (!config.exclude) return false;
-    return patch.files.some((file) => config.exclude.some((pattern) => minimatch2(file, pattern)));
+    return patch.files.some((file) => config.exclude.some((pattern) => minimatch3(file, pattern)));
   }
   async resolveFilePath(filePath, baseTreeHash, currentTreeHash) {
     const config = this.lockManager.getCustomizationsConfig();
     if (config.moves) {
       for (const move of config.moves) {
-        if (minimatch2(filePath, move.from) || filePath === move.from) {
+        if (minimatch3(filePath, move.from) || filePath === move.from) {
           if (filePath === move.from) {
             return move.to;
           }
@@ -2533,7 +2571,7 @@ Patches absorbed by generator (${buckets.absorbed.length}):`;
 import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
 import { readFile as readFileAsync } from "fs/promises";
 import { join as join6 } from "path";
-import { minimatch as minimatch4 } from "minimatch";
+import { minimatch as minimatch5 } from "minimatch";
 init_GitClient();
 
 // src/PatchRegionDiff.ts
@@ -2840,7 +2878,7 @@ function synthesizeDeleteFileDiff(file, content) {
 }
 
 // src/classifier/FileOwnership.ts
-import { minimatch as minimatch3 } from "minimatch";
+import { minimatch as minimatch4 } from "minimatch";
 var FileOwnership = class {
   constructor(git) {
     this.git = git;
@@ -2864,7 +2902,7 @@ var FileOwnership = class {
     const { file, originalFileName, patch, currentGenSha, fernignorePatterns, warnedGens, warnings } = ctx;
     if (patch.user_owned) return true;
     if (file === ".fernignore") return true;
-    if (fernignorePatterns.some((p) => file === p || minimatch3(file, p))) return true;
+    if (fernignorePatterns.some((p) => file === p || minimatch4(file, p))) return true;
     if (fileIsCreationInPatchContent(patch.patch_content, originalFileName ?? file)) {
       return true;
     }
@@ -3370,7 +3408,8 @@ var ReplayService = class {
     this.git = git;
     this.outputDir = outputDir;
     this.lockManager = new LockfileManager(outputDir);
-    this.detector = new ReplayDetector(git, this.lockManager, outputDir);
+    const fernignorePatterns = this.readFernignorePatterns();
+    this.detector = new ReplayDetector(git, this.lockManager, outputDir, fernignorePatterns);
     this.applicator = new ReplayApplicator(git, this.lockManager, outputDir);
     this.committer = new ReplayCommitter(git, outputDir);
     this.fileOwnership = new FileOwnership(git);
@@ -3390,8 +3429,60 @@ var ReplayService = class {
   async prepareReplay(options) {
     this.warnings = [];
     this.detector.warnings.length = 0;
+    this.cleanseLegacyFernignoreEntries();
     return this.selectFlow(options).prepare(options);
   }
+  /**
+   * ADR 0002 migration step. Strips `.fernignore`-matched entries from
+   * `patch.files`, `patch.theirs_snapshot` keys, and `diff --git` sections
+   * in `patch.patch_content` for every patch in the lockfile. Patches that
+   * end up with no surviving files are removed entirely.
+   *
+   * Idempotent: a second run is a no-op because the first run already
+   * matches the contract. Per-patch try/catch ensures one bad patch does
+   * not block the rest. Each affected patch emits a warning naming the
+   * stripped paths. `patch_content` is left untouched if no parseable
+   * `diff --git` headers are found (fail-safe for exotic legacy formats).
+   */
+  cleanseLegacyFernignoreEntries() {
+    const patterns = this.readFernignorePatterns();
+    if (patterns.length === 0) return;
+    if (!this.lockManager.exists()) return;
+    this.lockManager.read();
+    let lockfileMutated = false;
+    const patches = this.lockManager.getPatches();
+    for (const patch of patches) {
+      try {
+        const result = computeLegacyFernignoreCleanse(
+          patch,
+          patterns,
+          (content) => this.detector.computeContentHash(content)
+        );
+        if (result.unchanged) continue;
+        if (result.remove) {
+          this.lockManager.removePatch(patch.id);
+          this.warnings.push(
+            `Cleansed legacy patch ${patch.id}: all referenced files match .fernignore \u2014 patch removed. Customer's on-disk content for those files is preserved by .fernignore. (ADR 0002: .fernignore-protected files are not tracked by Replay.)`
+          );
+        } else {
+          this.lockManager.updatePatch(patch.id, {
+            files: result.files,
+            patch_content: result.patch_content,
+            content_hash: result.content_hash,
+            ...result.theirs_snapshot !== void 0 ? { theirs_snapshot: result.theirs_snapshot } : {}
+          });
+          this.warnings.push(
+            `Cleansed legacy patch ${patch.id}: stripped .fernignore-matched entries (${result.strippedPaths.join(", ")}). Customer's on-disk content for those files is preserved by .fernignore. (ADR 0002.)`
+          );
+        }
+        lockfileMutated = true;
+      } catch {
+      }
+    }
+    if (lockfileMutated) {
+      this.lockManager.save();
+    }
+  }
   /**
    * Phase 2 of the two-phase replay flow. Applies patches, rebases them against
    * the generation, saves the lockfile, and commits `[fern-replay]` (or stages
@@ -3523,7 +3614,7 @@ var ReplayService = class {
           )
         );
         const hasProtectedFiles = patch.files.some(
-          (file) => file === ".fernignore" || fernignorePatterns.some((p) => file === p || minimatch4(file, p))
+          (file) => file === ".fernignore" || fernignorePatterns.some((p) => file === p || minimatch5(file, p))
         );
         const allUserOwned = isUserOwnedPerFile.every(Boolean);
         if (allUserOwned && patch.files.length > 0) {
@@ -3963,7 +4054,7 @@ var ReplayService = class {
             );
             if (snapHasStaleMarkers) continue;
             const isProtectedSnap = patch.files.some(
-              (file) => file === ".fernignore" || fernignorePatterns.some((p) => file === p || minimatch4(file, p))
+              (file) => file === ".fernignore" || fernignorePatterns.some((p) => file === p || minimatch5(file, p))
             );
             if (isProtectedSnap) continue;
             const snapHash = this.detector.computeContentHash(snapshotDiff);
@@ -4003,7 +4094,7 @@ var ReplayService = class {
             continue;
           }
           const isProtected = patch.files.some(
-            (file) => file === ".fernignore" || fernignorePatterns.some((p) => file === p || minimatch4(file, p))
+            (file) => file === ".fernignore" || fernignorePatterns.some((p) => file === p || minimatch5(file, p))
           );
           if (isProtected) {
             continue;
@@ -4167,7 +4258,7 @@ If you want to keep these lines, restore them in a follow-up commit and re-run r
     if (files.length === 0) return;
     const fernignorePatterns = this.readFernignorePatterns();
     for (const file of files) {
-      if (fernignorePatterns.some((pattern) => minimatch4(file, pattern))) continue;
+      if (fernignorePatterns.some((pattern) => minimatch5(file, pattern))) continue;
       try {
         await this.git.exec(["checkout", "HEAD", "--", file]);
       } catch {
@@ -4252,12 +4343,99 @@ function computeCommitBuckets(results, absorbedPatchIds, patchesPassedToCommit)
   }
   return { applied, unresolved, absorbed };
 }
+function computeLegacyFernignoreCleanse(patch, fernignorePatterns, computeContentHash2) {
+  const matchesFernignore = (filePath) => fernignorePatterns.some((p) => {
+    if (filePath === p) return true;
+    if (minimatch5(filePath, p)) return true;
+    if (!p.includes("*") && !p.includes("?") && filePath.startsWith(p + "/")) return true;
+    return false;
+  });
+  const strippedFromFiles = patch.files.filter(matchesFernignore);
+  const survivingFiles = patch.files.filter((f) => !matchesFernignore(f));
+  let survivingSnapshot = void 0;
+  let snapshotChanged = false;
+  if (patch.theirs_snapshot) {
+    survivingSnapshot = {};
+    for (const [key, value] of Object.entries(patch.theirs_snapshot)) {
+      if (matchesFernignore(key)) {
+        snapshotChanged = true;
+      } else {
+        survivingSnapshot[key] = value;
+      }
+    }
+  }
+  const { stripped: patchContentStripped, content: newPatchContent, strippedSectionPaths } = stripFernignoreDiffSections(patch.patch_content, matchesFernignore);
+  const unchanged = strippedFromFiles.length === 0 && !snapshotChanged && !patchContentStripped;
+  if (unchanged) {
+    return {
+      unchanged: true,
+      remove: false,
+      files: patch.files,
+      patch_content: patch.patch_content,
+      content_hash: patch.content_hash,
+      theirs_snapshot: patch.theirs_snapshot,
+      strippedPaths: []
+    };
+  }
+  const strippedPaths = Array.from(/* @__PURE__ */ new Set([...strippedFromFiles, ...strippedSectionPaths]));
+  if (survivingFiles.length === 0 || newPatchContent.trim() === "") {
+    return {
+      unchanged: false,
+      remove: true,
+      files: [],
+      patch_content: "",
+      content_hash: "",
+      strippedPaths
+    };
+  }
+  const newContentHash = patchContentStripped ? computeContentHash2(newPatchContent) : patch.content_hash;
+  return {
+    unchanged: false,
+    remove: false,
+    files: survivingFiles,
+    patch_content: newPatchContent,
+    content_hash: newContentHash,
+    ...survivingSnapshot !== void 0 ? { theirs_snapshot: survivingSnapshot } : {},
+    strippedPaths
+  };
+}
+function stripFernignoreDiffSections(patchContent, matchesFernignore) {
+  const lines = patchContent.split("\n");
+  const sectionStarts = [];
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    if (line.startsWith("diff --git ")) {
+      const match = line.match(/^diff --git a\/(.+?) b\/(.+?)$/);
+      const path = match ? match[2] : null;
+      sectionStarts.push({ idx: i, path });
+    }
+  }
+  if (sectionStarts.length === 0) {
+    return { stripped: false, content: patchContent, strippedSectionPaths: [] };
+  }
+  const preamble = lines.slice(0, sectionStarts[0].idx);
+  const newLines = [...preamble];
+  const strippedSectionPaths = [];
+  let stripped = false;
+  for (let i = 0; i < sectionStarts.length; i++) {
+    const section = sectionStarts[i];
+    const next = sectionStarts[i + 1];
+    const endIdx = next ? next.idx : lines.length;
+    if (section.path !== null && matchesFernignore(section.path)) {
+      stripped = true;
+      strippedSectionPaths.push(section.path);
+      continue;
+    }
+    newLines.push(...lines.slice(section.idx, endIdx));
+  }
+  return { stripped, content: newLines.join("\n"), strippedSectionPaths };
+}
 
 // src/FernignoreMigrator.ts
 import { createHash as createHash2 } from "crypto";
 import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, statSync, writeFileSync as writeFileSync3 } from "fs";
 import { dirname as dirname5, join as join7 } from "path";
-import { minimatch as minimatch5 } from "minimatch";
+import { minimatch as minimatch6 } from "minimatch";
 import { parse as parse2, stringify as stringify2 } from "yaml";
 var FernignoreMigrator = class {
   git;
@@ -4289,7 +4467,7 @@ var FernignoreMigrator = class {
     const commitsOnly = [];
     const syntheticPatches = [];
     for (const pattern of patterns) {
-      const matchingPatch = patches.find((p) => p.files.some((f) => minimatch5(f, pattern) || f === pattern));
+      const matchingPatch = patches.find((p) => p.files.some((f) => minimatch6(f, pattern) || f === pattern));
       if (matchingPatch) {
         trackedByBoth.push({
           file: pattern,
@@ -4362,7 +4540,7 @@ var FernignoreMigrator = class {
       fernignoreOnly.push(...remainingFernignoreOnly);
     }
     for (const patch of patches) {
-      const hasUnprotectedFiles = patch.files.some((f) => !patterns.some((p) => minimatch5(f, p) || f === p));
+      const hasUnprotectedFiles = patch.files.some((f) => !patterns.some((p) => minimatch6(f, p) || f === p));
       if (hasUnprotectedFiles) {
         commitsOnly.push(patch);
       }
@@ -4374,7 +4552,7 @@ var FernignoreMigrator = class {
     const results = [];
     for (const pattern of patterns) {
       const matching = allFiles.filter(
-        (f) => minimatch5(f, pattern) || f === pattern || f.startsWith(pattern + "/")
+        (f) => minimatch6(f, pattern) || f === pattern || f.startsWith(pattern + "/")
       );
       results.push({ pattern, files: matching.length > 0 ? matching : [pattern] });
     }
@@ -4687,7 +4865,7 @@ function computeContentHash(patchContent) {
 }
 
 // src/commands/forget.ts
-import { minimatch as minimatch6 } from "minimatch";
+import { minimatch as minimatch7 } from "minimatch";
 function parseDiffStat(patchContent) {
   let additions = 0;
   let deletions = 0;
@@ -4717,7 +4895,7 @@ function toMatchedPatch(patch) {
 }
 function matchesPatch(patch, pattern) {
   const fileMatch = patch.files.some(
-    (file) => file === pattern || minimatch6(file, pattern)
+    (file) => file === pattern || minimatch7(file, pattern)
   );
   if (fileMatch) return true;
   return patch.original_message.toLowerCase().includes(pattern.toLowerCase());