@fern-api/replay 0.17.4 → 0.19.0

package/dist/index.js

@@ -40,6 +40,11 @@ var init_GitClient = __esm({
           proc.stderr.on("data", (data) => {
             stderr += data.toString();
           });
+          proc.on("error", (err) => {
+            reject(new Error(`git ${args.join(" ")} failed to spawn: ${err.message}`));
+          });
+          proc.stdin.on("error", () => {
+          });
           proc.on("close", (code) => {
             if (code === 0) {
               resolve2(stdout);
@@ -402,18 +407,18 @@ __export(PatchApplyTheirs_exports, {
 });
 import { mkdtemp as mkdtemp3, mkdir as mkdir3, writeFile as writeFile4, readFile as readFile3, rm as rm3 } from "fs/promises";
 import { tmpdir as tmpdir3 } from "os";
-import { dirname as dirname4, join as join5 } from "path";
+import { dirname as dirname4, join as join6 } from "path";
 async function applyPatchToContent(base, patchContent, filePath) {
   const fileDiff = extractFileDiff(patchContent, filePath);
   if (!fileDiff) return null;
-  const tempDir = await mkdtemp3(join5(tmpdir3(), "replay-migrate-"));
+  const tempDir = await mkdtemp3(join6(tmpdir3(), "replay-migrate-"));
   const tempGit = new GitClient(tempDir);
   try {
     await tempGit.exec(["init"]);
     await tempGit.exec(["config", "user.email", "migrate@fern.com"]);
     await tempGit.exec(["config", "user.name", "Fern Replay Migration"]);
     await tempGit.exec(["config", "commit.gpgSign", "false"]);
-    const tempFilePath = join5(tempDir, filePath);
+    const tempFilePath = join6(tempDir, filePath);
     await mkdir3(dirname4(tempFilePath), { recursive: true });
     await writeFile4(tempFilePath, base);
     await tempGit.exec(["add", filePath]);
@@ -690,6 +695,22 @@ var LockfileManager = class {
       this.lock.forgotten_hashes.push(hash);
     }
   }
+  /**
+   * Record a dismissed customization: visibility metadata in `dismissals`
+   * plus a tombstone in `forgotten_hashes` for every content hash.
+   * `forgotten_hashes` stays the only list the detector consults; the
+   * metadata exists so `status` can show what was dismissed.
+   */
+  addDismissal(record) {
+    this.ensureLoaded();
+    if (!this.lock.dismissals) {
+      this.lock.dismissals = [];
+    }
+    this.lock.dismissals.push(record);
+    for (const hash of record.content_hashes) {
+      this.addForgottenHash(hash);
+    }
+  }
   getUnresolvedPatches() {
     this.ensureLoaded();
     return this.lock.patches.filter((p) => p.status === "unresolved");
@@ -808,7 +829,8 @@ function isBinaryFile(filePath) {
 var INFRASTRUCTURE_FILES = /* @__PURE__ */ new Set([".fernignore"]);
 function matchesFernignorePattern(filePath, patterns) {
   if (patterns.length === 0) return false;
-  return patterns.some((p) => {
+  return patterns.some((rawPattern) => {
+    const p = rawPattern.endsWith("/") ? rawPattern.slice(0, -1) : rawPattern;
     if (filePath === p) return true;
     if (minimatch2(filePath, p)) return true;
     if (!p.includes("*") && !p.includes("?") && filePath.startsWith(p + "/")) return true;
@@ -856,12 +878,14 @@ async function capturePatchSnapshot(git, files, treeish) {
   return snapshot;
 }
 function filterInfrastructureAndSensitiveFiles(rawFilesOutput, fernignorePatterns) {
-  const allFiles = rawFilesOutput.trim().split("\n").filter(Boolean).filter((f) => !INFRASTRUCTURE_FILES.has(f)).filter((f) => !f.startsWith(".fern/"));
+  const rawFiles = rawFilesOutput.trim().split("\n").filter(Boolean);
+  const infrastructureFiles = rawFiles.filter((f) => INFRASTRUCTURE_FILES.has(f) || f.startsWith(".fern/"));
+  const allFiles = rawFiles.filter((f) => !INFRASTRUCTURE_FILES.has(f) && !f.startsWith(".fern/"));
   const sensitiveFiles = allFiles.filter((f) => isSensitiveFile(f));
   const nonSensitive = allFiles.filter((f) => !isSensitiveFile(f));
   const fernignoredFiles = nonSensitive.filter((f) => matchesFernignorePattern(f, fernignorePatterns));
   const files = nonSensitive.filter((f) => !matchesFernignorePattern(f, fernignorePatterns));
-  return { files, sensitiveFiles, fernignoredFiles };
+  return { files, sensitiveFiles, fernignoredFiles, infrastructureFiles };
 }
 var ReplayDetector = class {
   git;
@@ -869,6 +893,15 @@ var ReplayDetector = class {
   sdkOutputDir;
   fernignorePatterns;
   warnings = [];
+  /**
+   * Structured degraded-state channel, mirroring `warnings`. Populated when
+   * detection cannot guarantee customizations were carried forward (baseline
+   * unreachable in this clone). Cleared per-run by `ReplayService.prepareReplay`
+   * alongside `warnings`. Merged into `ReplayReport.degradedReasons` by each
+   * flow handler. Degraded is observability only: detection results are
+   * unchanged.
+   */
+  degradedReasons = [];
   constructor(git, lockManager, sdkOutputDir, fernignorePatterns = []) {
     this.git = git;
     this.lockManager = lockManager;
@@ -939,6 +972,10 @@ var ReplayDetector = class {
         this.warnings.push(
           `No generation boundary found in git history and the lockfile's recorded generation (${lock.current_generation.slice(0, 7)}) matches no entry in its generation records. Customer customizations may differ from the last known generation and could be lost on the next regeneration. Run \`fern-replay bootstrap --force\` to re-initialize tracking.`
         );
+        this.degradedReasons.push({
+          code: "baseline-unresolvable",
+          message: `The previous generation recorded in the lockfile (${lock.current_generation.slice(0, 7)}) could not be resolved to any reachable baseline during this run. Customizations may not have been carried forward \u2014 review the result before merging.`
+        });
       }
       return { patches: [], revertedPatchIds: [] };
     }
@@ -947,6 +984,12 @@ var ReplayDetector = class {
       this.warnings.push(
         `Generation commit ${lastGen.commit_sha.slice(0, 7)} not found in git history. Falling back to tree-diff detection (likely a shallow clone).`
       );
+      if (lock.patches.length > 0) {
+        this.degradedReasons.push({
+          code: "generation-anchor-unreachable",
+          message: `The previous generation (${lastGen.commit_sha.slice(0, 7)}) was not reachable during this run, and ${lock.patches.length} tracked customization(s) could not be verified against it. Customizations may not have been carried forward \u2014 review the result before merging.`
+        });
+      }
       return this.detectPatchesViaTreeDiff(
         lastGen,
         /* commitKnownMissing */
@@ -986,48 +1029,28 @@ var ReplayDetector = class {
       if (lock.patches.find((p) => p.original_commit === commit.sha)) {
         continue;
       }
-      const parents = await this.git.getCommitParents(commit.sha);
-      let patchContent;
-      try {
-        patchContent = await this.git.formatPatch(commit.sha);
-      } catch {
+      const materialized = await this.materializeCommitPatch(commit.sha);
+      if (materialized.sensitiveFiles.length > 0) {
         this.warnings.push(
-          `Could not generate patch for commit ${commit.sha.slice(0, 7)} \u2014 it may be unreachable in a shallow clone. Skipping.`
+          `Sensitive file(s) excluded from patch for commit ${commit.sha.slice(0, 7)}: ${materialized.sensitiveFiles.join(", ")}. These files will not be tracked by replay.`
         );
-        continue;
-      }
-      let contentHash = this.computeContentHash(patchContent);
-      if (lock.patches.find((p) => p.content_hash === contentHash) || forgottenHashes.has(contentHash)) {
-        continue;
       }
-      const filesOutput = await this.git.exec(["diff-tree", "--no-commit-id", "--name-only", "-r", commit.sha]);
-      const { files, sensitiveFiles, fernignoredFiles } = filterInfrastructureAndSensitiveFiles(
-        filesOutput,
-        this.fernignorePatterns
-      );
-      if (sensitiveFiles.length > 0) {
+      if (materialized.fernignoredFiles.length > 0) {
         this.warnings.push(
-          `Sensitive file(s) excluded from patch for commit ${commit.sha.slice(0, 7)}: ${sensitiveFiles.join(", ")}. These files will not be tracked by replay.`
+          `.fernignore-protected file(s) excluded from patch for commit ${commit.sha.slice(0, 7)}: ${materialized.fernignoredFiles.join(", ")}. These files are managed by .fernignore, not Replay.`
         );
       }
-      if (fernignoredFiles.length > 0) {
+      if (materialized.status === "unreachable") {
         this.warnings.push(
-          `.fernignore-protected file(s) excluded from patch for commit ${commit.sha.slice(0, 7)}: ${fernignoredFiles.join(", ")}. These files are managed by .fernignore, not Replay.`
+          `Could not generate patch for commit ${commit.sha.slice(0, 7)} \u2014 it may be unreachable in a shallow clone. Skipping.`
         );
+        continue;
       }
-      if ((sensitiveFiles.length > 0 || fernignoredFiles.length > 0) && files.length > 0) {
-        const parentSha = parents[0];
-        if (parentSha) {
-          try {
-            patchContent = await this.git.exec(["diff", parentSha, commit.sha, "--", ...files]);
-          } catch {
-            continue;
-          }
-          if (!patchContent.trim()) continue;
-          contentHash = this.computeContentHash(patchContent);
-        }
+      if (materialized.status === "empty") {
+        continue;
       }
-      if (files.length === 0) {
+      const { files, patchContent, contentHash } = materialized;
+      if (lock.patches.find((p) => p.content_hash === contentHash) || forgottenHashes.has(contentHash)) {
         continue;
       }
       const theirsSnapshot = await capturePatchSnapshot(this.git, files, commit.sha);
@@ -1103,6 +1126,63 @@ var ReplayDetector = class {
     const filteredPatches = survivingPatches.filter((_, i) => !revertIndicesToRemove.has(i));
     return { patches: filteredPatches, revertedPatchIds: [...revertedPatchIdSet] };
   }
+  /**
+   * Materialize a commit into patch content exactly as detection does.
+   *
+   * Pipeline: `diff-tree --name-only` → filter infrastructure / sensitive /
+   * `.fernignore`d files → scoped `git diff` when files were stripped,
+   * otherwise full `git format-patch` → content hash.
+   *
+   * This is THE definition of a commit's re-emission identity: the content
+   * hash this method returns is what `detectPatchesInRange` will compute if
+   * the commit re-enters the scan range (e.g. after a regen PR is merged
+   * with a merge commit). Callers that tombstone a dismissed patch must use
+   * this hash — the stored `content_hash` drifts every time the patch is
+   * carried forward, so it does not identify the commit on re-detection.
+   *
+   * Never throws; failures are reported through the `status` discriminant.
+   */
+  async materializeCommitPatch(sha) {
+    let parents;
+    let filesOutput;
+    try {
+      parents = await this.git.getCommitParents(sha);
+      filesOutput = await this.git.exec(["diff-tree", "--no-commit-id", "--name-only", "-r", sha]);
+    } catch {
+      return { status: "unreachable", sensitiveFiles: [], fernignoredFiles: [] };
+    }
+    const { files, sensitiveFiles, fernignoredFiles, infrastructureFiles } = filterInfrastructureAndSensitiveFiles(filesOutput, this.fernignorePatterns);
+    if (files.length === 0) {
+      return { status: "empty", sensitiveFiles, fernignoredFiles };
+    }
+    const wasFiltered = sensitiveFiles.length > 0 || fernignoredFiles.length > 0 || infrastructureFiles.length > 0;
+    const parentSha = parents[0];
+    let patchContent;
+    if (wasFiltered && parentSha) {
+      try {
+        patchContent = await this.git.exec(["diff", parentSha, sha, "--", ...files]);
+      } catch {
+        return { status: "empty", sensitiveFiles, fernignoredFiles };
+      }
+      if (!patchContent.trim()) {
+        return { status: "empty", sensitiveFiles, fernignoredFiles };
+      }
+    } else {
+      try {
+        patchContent = await this.git.formatPatch(sha);
+      } catch {
+        return { status: "unreachable", sensitiveFiles, fernignoredFiles };
+      }
+    }
+    return {
+      status: "ok",
+      files,
+      sensitiveFiles,
+      fernignoredFiles,
+      patchContent,
+      contentHash: this.computeContentHash(patchContent)
+    };
+  }
   /**
    * Compute content hash for deduplication.
    *
@@ -1207,6 +1287,13 @@ var ReplayDetector = class {
   async detectPatchesViaTreeDiff(lastGen, commitKnownMissing) {
     const diffBase = await this.resolveDiffBase(lastGen, commitKnownMissing);
     if (!diffBase) {
+      this.warnings.push(
+        `Neither the previous generation's commit (${lastGen.commit_sha.slice(0, 7)}) nor its recorded tree was reachable during this run. Falling back to a bounded commit scan, which cannot see customizations older than the clone window. Widen the clone window (e.g. \`git fetch --unshallow\`) and re-run replay to verify customizations were carried forward.`
+      );
+      this.degradedReasons.push({
+        code: "generation-tree-unreachable",
+        message: `The previous generation (${lastGen.commit_sha.slice(0, 7)}) was not reachable during this run \u2014 neither its commit nor its recorded tree. Customizations may not have been carried forward \u2014 review the result before merging, or widen the clone window and re-run replay.`
+      });
       return this.detectPatchesViaCommitScan();
     }
     const lockForGuard = this.lockManager.read();
@@ -1319,10 +1406,7 @@ var ReplayDetector = class {
         continue;
       }
       const filesOutput = await this.git.exec(["diff-tree", "--no-commit-id", "--name-only", "-r", commit.sha]);
-      const { files, sensitiveFiles, fernignoredFiles } = filterInfrastructureAndSensitiveFiles(
-        filesOutput,
-        this.fernignorePatterns
-      );
+      const { files, sensitiveFiles, fernignoredFiles, infrastructureFiles } = filterInfrastructureAndSensitiveFiles(filesOutput, this.fernignorePatterns);
       if (sensitiveFiles.length > 0) {
         this.warnings.push(
           `Sensitive file(s) excluded from patch for commit ${commit.sha.slice(0, 7)}: ${sensitiveFiles.join(", ")}. These files will not be tracked by replay.`
@@ -1333,7 +1417,8 @@ var ReplayDetector = class {
           `.fernignore-protected file(s) excluded from patch for commit ${commit.sha.slice(0, 7)}: ${fernignoredFiles.join(", ")}. These files are managed by .fernignore, not Replay.`
         );
       }
-      if ((sensitiveFiles.length > 0 || fernignoredFiles.length > 0) && files.length > 0) {
+      const wasFiltered = sensitiveFiles.length > 0 || fernignoredFiles.length > 0 || infrastructureFiles.length > 0;
+      if (wasFiltered && files.length > 0) {
         if (parents.length === 0) {
           continue;
         }
@@ -2603,17 +2688,26 @@ Patches absorbed by generator (${buckets.absorbed.length}):`;
 };
 
 // src/ReplayService.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
 import { readFile as readFileAsync } from "fs/promises";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 import { minimatch as minimatch5 } from "minimatch";
 init_GitClient();
 
+// src/shared/fernignore.ts
+import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
+import { join as join4 } from "path";
+function readFernignorePatterns(outputDir) {
+  const fernignorePath = join4(outputDir, ".fernignore");
+  if (!existsSync2(fernignorePath)) return [];
+  return readFileSync2(fernignorePath, "utf-8").split("\n").map((line) => line.trim()).filter((line) => line && !line.startsWith("#"));
+}
+
 // src/PatchRegionDiff.ts
 init_HybridReconstruction();
 import { mkdtemp as mkdtemp2, writeFile as writeFile3, rm as rm2 } from "fs/promises";
 import { tmpdir as tmpdir2 } from "os";
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 import { spawn } from "child_process";
 function normalizeHunkBody(hunk) {
   let contextC = 0;
@@ -2830,10 +2924,10 @@ function overlayRegions(currentGenLines, locInCurrentGen, workingTreeLines, locI
 }
 async function unifiedDiff(beforeContent, afterContent, filePath) {
   if (beforeContent === afterContent) return "";
-  const tmp = await mkdtemp2(join4(tmpdir2(), "fern-replay-pp-"));
+  const tmp = await mkdtemp2(join5(tmpdir2(), "fern-replay-pp-"));
   try {
-    const beforePath = join4(tmp, "before");
-    const afterPath = join4(tmp, "after");
+    const beforePath = join5(tmp, "before");
+    const afterPath = join5(tmp, "after");
     await writeFile3(beforePath, beforeContent, "utf-8");
     await writeFile3(afterPath, afterContent, "utf-8");
     const raw = await runGitDiffNoIndex(beforePath, afterPath);
@@ -3009,6 +3103,7 @@ var FirstGenerationFlow = class {
         patchesToApply: [],
         newPatchIds: /* @__PURE__ */ new Set(),
         detectorWarnings: [],
+        detectorDegraded: [],
         revertedCount: 0,
         genSha: genRecord.commit_sha,
         optionsSnapshot: options
@@ -3068,6 +3163,7 @@ var SkipApplicationFlow = class {
         patchesToApply: [],
         newPatchIds: /* @__PURE__ */ new Set(),
         detectorWarnings: [],
+        detectorDegraded: [],
         revertedCount: 0,
         genSha: genRecord.commit_sha,
         optionsSnapshot: options
@@ -3105,8 +3201,10 @@ var NoPatchesFlow = class {
     const previousGenerationSha = preLock.current_generation ?? null;
     let { patches: newPatches, revertedPatchIds } = await this.service.detector.detectNewPatches();
     const detectorWarnings = [...this.service.detector.warnings];
+    const detectorDegraded = [...this.service.detector.degradedReasons];
     if (options?.dryRun) {
       const dryRunWarnings = [...detectorWarnings, ...this.service.warnings];
+      const dryRunDegraded = dedupeDegradedReasons([...detectorDegraded, ...this.service.degradedReasons]);
       const preparedReport = {
         flow: "no-patches",
         patchesDetected: newPatches.length,
@@ -3116,7 +3214,9 @@ var NoPatchesFlow = class {
         patchesReverted: revertedPatchIds.length,
         conflicts: [],
         wouldApply: newPatches,
-        warnings: dryRunWarnings.length > 0 ? dryRunWarnings : void 0
+        warnings: dryRunWarnings.length > 0 ? dryRunWarnings : void 0,
+        degraded: dryRunDegraded.length > 0 ? true : void 0,
+        degradedReasons: dryRunDegraded.length > 0 ? dryRunDegraded : void 0
       };
       const headSha = await this.service.git.exec(["rev-parse", "HEAD"]).then((s) => s.trim()).catch(() => "");
       return {
@@ -3170,6 +3270,7 @@ var NoPatchesFlow = class {
         patchesToApply: newPatches,
         newPatchIds: new Set(newPatches.map((p) => p.id)),
         detectorWarnings,
+        detectorDegraded,
         revertedCount: revertedPatchIds.length,
         genSha: genRecord.commit_sha,
         optionsSnapshot: options
@@ -3213,6 +3314,7 @@ var NoPatchesFlow = class {
       }
     }
     const warnings = [...detectorWarnings, ...this.service.warnings];
+    const degradedReasons = [...prep._prepared.detectorDegraded, ...this.service.degradedReasons];
     return this.service.buildReport(
       "no-patches",
       newPatches,
@@ -3221,7 +3323,8 @@ var NoPatchesFlow = class {
       warnings,
       rebaseCounts,
       void 0,
-      prep._prepared.revertedCount
+      prep._prepared.revertedCount,
+      degradedReasons
     );
   }
 };
@@ -3238,6 +3341,10 @@ var NormalRegenerationFlow = class {
       const existingPatches2 = this.service.lockManager.getPatches();
       const { patches: newPatches2, revertedPatchIds: dryRunReverted } = await this.service.detector.detectNewPatches();
       const warnings = [...this.service.detector.warnings, ...this.service.warnings];
+      const dryRunDegraded = dedupeDegradedReasons([
+        ...this.service.detector.degradedReasons,
+        ...this.service.degradedReasons
+      ]);
       const allPatches2 = [...existingPatches2, ...newPatches2];
       const preparedReport = {
         flow: "normal-regeneration",
@@ -3248,7 +3355,9 @@ var NormalRegenerationFlow = class {
         patchesReverted: dryRunReverted.length,
         conflicts: [],
         wouldApply: allPatches2,
-        warnings: warnings.length > 0 ? warnings : void 0
+        warnings: warnings.length > 0 ? warnings : void 0,
+        degraded: dryRunDegraded.length > 0 ? true : void 0,
+        degradedReasons: dryRunDegraded.length > 0 ? dryRunDegraded : void 0
       };
       const headSha = await this.service.git.exec(["rev-parse", "HEAD"]).then((s) => s.trim()).catch(() => "");
       return {
@@ -3287,6 +3396,7 @@ var NormalRegenerationFlow = class {
     existingPatches = this.service.lockManager.getPatches();
     let { patches: newPatches, revertedPatchIds } = await this.service.detector.detectNewPatches();
     const detectorWarnings = [...this.service.detector.warnings];
+    const detectorDegraded = [...this.service.detector.degradedReasons];
     if (removedByPreRebase.length > 0) {
       const removedOriginalCommits = new Set(removedByPreRebase.map((p) => p.original_commit));
       const removedOriginalMessages = new Set(removedByPreRebase.map((p) => p.original_message));
@@ -3327,6 +3437,7 @@ var NormalRegenerationFlow = class {
         newPatchIds: new Set(newPatches.map((p) => p.id)),
         preRebaseCounts,
         detectorWarnings,
+        detectorDegraded,
         revertedCount: revertedPatchIds.length,
         genSha: genRecord.commit_sha,
         optionsSnapshot: options
@@ -3375,6 +3486,7 @@ var NormalRegenerationFlow = class {
       await this.service.committer.commitReplay(appliedCount, allPatches, void 0, { buckets });
     }
     const warnings = [...detectorWarnings, ...this.service.warnings];
+    const degradedReasons = [...prep._prepared.detectorDegraded, ...this.service.degradedReasons];
     return this.service.buildReport(
       "normal-regeneration",
       allPatches,
@@ -3383,7 +3495,8 @@ var NormalRegenerationFlow = class {
       warnings,
       rebaseCounts,
       prep._prepared.preRebaseCounts,
-      prep._prepared.revertedCount
+      prep._prepared.revertedCount,
+      degradedReasons
     );
   }
 };
@@ -3423,6 +3536,16 @@ var ReplayService = class {
    * @internal Used by Flow implementations in `src/flows/`.
    */
   warnings = [];
+  /**
+   * Service-level structured degraded reasons, mirroring `warnings`.
+   * Populated at apply time (e.g. `recordUnreachableBaseWarnings` when a
+   * patch's base-generation tree is unreachable). Merged with
+   * `detector.degradedReasons` into `ReplayReport.degradedReasons` by each
+   * flow handler. Cleared at the top of `prepareReplay()`.
+   *
+   * @internal Used by Flow implementations in `src/flows/`.
+   */
+  degradedReasons = [];
   /**
    * @internal Test-only accessor.
    * Returns the ReplayApplicator instance used for the last run. Tests use this
@@ -3466,7 +3589,10 @@ var ReplayService = class {
   async prepareReplay(options) {
     this.warnings = [];
     this.detector.warnings.length = 0;
+    this.degradedReasons = [];
+    this.detector.degradedReasons.length = 0;
     this.cleanseLegacyFernignoreEntries();
+    this.cleanseInfrastructureFileEntries();
     return this.selectFlow(options).prepare(options);
   }
   /**
@@ -3520,6 +3646,50 @@ var ReplayService = class {
       this.lockManager.save();
     }
   }
+  /**
+   * Migration step: strips infrastructure file diffs (`.fernignore`, `.fern/*`)
+   * from existing patches' `patch_content`. These diffs were bundled by older
+   * detection logic that did not scope `git diff` when only infrastructure files
+   * were stripped. Patches that end up with no surviving diff sections are
+   * removed entirely.
+   *
+   * Idempotent: a second run is a no-op because the first run already removed
+   * all infrastructure sections. Per-patch try/catch ensures isolation.
+   */
+  cleanseInfrastructureFileEntries() {
+    if (!this.lockManager.exists()) return;
+    this.lockManager.read();
+    let lockfileMutated = false;
+    const patches = this.lockManager.getPatches();
+    for (const patch of patches) {
+      try {
+        const result = computeInfrastructureFileCleanse(
+          patch,
+          (content) => this.detector.computeContentHash(content)
+        );
+        if (result.unchanged) continue;
+        if (result.remove) {
+          this.lockManager.removePatch(patch.id);
+          this.warnings.push(
+            `Stripped infrastructure file diffs from patch ${patch.id}: patch contained only infrastructure file changes (${result.strippedPaths.join(", ")}) \u2014 removed.`
+          );
+        } else {
+          this.lockManager.updatePatch(patch.id, {
+            patch_content: result.patch_content,
+            content_hash: result.content_hash
+          });
+          this.warnings.push(
+            `Stripped infrastructure file diffs from patch ${patch.id}: removed bundled diffs for ${result.strippedPaths.join(", ")}.`
+          );
+        }
+        lockfileMutated = true;
+      } catch {
+      }
+    }
+    if (lockfileMutated) {
+      this.lockManager.save();
+    }
+  }
   /**
    * Phase 2 of the two-phase replay flow. Applies patches, rebases them against
    * the generation, saves the lockfile, and commits `[fern-replay]` (or stages
@@ -3775,7 +3945,7 @@ var ReplayService = class {
     for (const file of files) {
       if (isBinaryFile(file)) continue;
       try {
-        const content = await readFileAsync(join6(this.outputDir, file), "utf-8");
+        const content = await readFileAsync(join7(this.outputDir, file), "utf-8");
         snapshot[file] = content;
       } catch {
       }
@@ -4292,6 +4462,12 @@ If you want to keep these lines, restore them in a follow-up commit and re-run r
         );
       }
     }
+    if (warned.size > 0) {
+      this.degradedReasons.push({
+        code: "patch-base-unreachable",
+        message: `${warned.size} customization file(s) could not be checked against the generation they were made on because that generation's tree was not reachable during this run. Customizations may not have been carried forward \u2014 review the result before merging, or widen the clone window and re-run replay.`
+      });
+    }
   }
   /**
    * After applyPatches(), strip conflict markers from conflicting files
@@ -4303,9 +4479,9 @@ If you want to keep these lines, restore them in a follow-up commit and re-run r
       if (result.status !== "conflict" || !result.fileResults) continue;
       for (const fileResult of result.fileResults) {
         if (fileResult.status !== "conflict") continue;
-        const filePath = join6(this.outputDir, fileResult.file);
+        const filePath = join7(this.outputDir, fileResult.file);
         try {
-          const content = readFileSync2(filePath, "utf-8");
+          const content = readFileSync3(filePath, "utf-8");
           const stripped = stripConflictMarkers(content);
           writeFileSync2(filePath, stripped);
         } catch {
@@ -4335,12 +4511,11 @@ If you want to keep these lines, restore them in a follow-up commit and re-run r
   }
   /** @internal Used by Flow implementations in `src/flows/`. */
   readFernignorePatterns() {
-    const fernignorePath = join6(this.outputDir, ".fernignore");
-    if (!existsSync2(fernignorePath)) return [];
-    return readFileSync2(fernignorePath, "utf-8").split("\n").map((line) => line.trim()).filter((line) => line && !line.startsWith("#"));
+    return readFernignorePatterns(this.outputDir);
   }
   /** @internal Used by Flow implementations in `src/flows/`. */
-  buildReport(flow, patches, results, options, warnings, rebaseCounts, preRebaseCounts, patchesReverted) {
+  buildReport(flow, patches, results, options, warnings, rebaseCounts, preRebaseCounts, patchesReverted, degradedReasons) {
+    const degraded = dedupeDegradedReasons(degradedReasons ?? []);
     const conflictResults = results.filter((r) => r.status === "conflict");
     const conflictDetails = conflictResults.map((r) => {
       const conflictFiles = r.fileResults?.filter((f) => f.status === "conflict") ?? [];
@@ -4380,10 +4555,23 @@ If you want to keep these lines, restore them in a follow-up commit and re-run r
         conflictDetails: r.fileResults?.filter((f) => f.status === "conflict") ?? []
       })) : void 0,
       wouldApply: options?.dryRun ? patches : void 0,
-      warnings: warnings && warnings.length > 0 ? warnings : void 0
+      warnings: warnings && warnings.length > 0 ? warnings : void 0,
+      degraded: degraded.length > 0 ? true : void 0,
+      degradedReasons: degraded.length > 0 ? degraded : void 0
     };
   }
 };
+function dedupeDegradedReasons(reasons) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const reason of reasons) {
+    const key = `${reason.code}\0${reason.message}`;
+    if (seen.has(key)) continue;
+    seen.add(key);
+    out.push(reason);
+  }
+  return out;
+}
 function computeCommitBuckets(results, absorbedPatchIds, patchesPassedToCommit) {
   const resultByPatchId = /* @__PURE__ */ new Map();
   for (const r of results) resultByPatchId.set(r.patch.id, r);
@@ -4432,7 +4620,7 @@ function computeLegacyFernignoreCleanse(patch, fernignorePatterns, computeConten
       }
     }
   }
-  const { stripped: patchContentStripped, content: newPatchContent, strippedSectionPaths } = stripFernignoreDiffSections(patch.patch_content, matchesFernignore);
+  const { stripped: patchContentStripped, content: newPatchContent, strippedSectionPaths } = stripDiffSectionsByPredicate(patch.patch_content, matchesFernignore);
   const unchanged = strippedFromFiles.length === 0 && !snapshotChanged && !patchContentStripped;
   if (unchanged) {
     return {
@@ -4467,7 +4655,38 @@ function computeLegacyFernignoreCleanse(patch, fernignorePatterns, computeConten
     strippedPaths
   };
 }
-function stripFernignoreDiffSections(patchContent, matchesFernignore) {
+function isInfrastructureFile(filePath) {
+  return filePath === ".fernignore" || filePath.startsWith(".fern/");
+}
+function computeInfrastructureFileCleanse(patch, computeContentHash2) {
+  const { stripped, content: newPatchContent, strippedSectionPaths } = stripDiffSectionsByPredicate(patch.patch_content, isInfrastructureFile);
+  if (!stripped) {
+    return {
+      unchanged: true,
+      remove: false,
+      patch_content: patch.patch_content,
+      content_hash: patch.content_hash,
+      strippedPaths: []
+    };
+  }
+  if (newPatchContent.trim() === "" || patch.files.length === 0) {
+    return {
+      unchanged: false,
+      remove: true,
+      patch_content: "",
+      content_hash: "",
+      strippedPaths: strippedSectionPaths
+    };
+  }
+  return {
+    unchanged: false,
+    remove: false,
+    patch_content: newPatchContent,
+    content_hash: computeContentHash2(newPatchContent),
+    strippedPaths: strippedSectionPaths
+  };
+}
+function stripDiffSectionsByPredicate(patchContent, shouldStrip) {
   const lines = patchContent.split("\n");
   const sectionStarts = [];
   for (let i = 0; i < lines.length; i++) {
@@ -4489,7 +4708,7 @@ function stripFernignoreDiffSections(patchContent, matchesFernignore) {
     const section = sectionStarts[i];
     const next = sectionStarts[i + 1];
     const endIdx = next ? next.idx : lines.length;
-    if (section.path !== null && matchesFernignore(section.path)) {
+    if (section.path !== null && shouldStrip(section.path)) {
       stripped = true;
       strippedSectionPaths.push(section.path);
       continue;
@@ -4501,8 +4720,8 @@ function stripFernignoreDiffSections(patchContent, matchesFernignore) {
 
 // src/FernignoreMigrator.ts
 import { createHash as createHash2 } from "crypto";
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, statSync, writeFileSync as writeFileSync3 } from "fs";
-import { dirname as dirname5, join as join7 } from "path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync4, statSync, writeFileSync as writeFileSync3 } from "fs";
+import { dirname as dirname5, join as join8 } from "path";
 import { minimatch as minimatch6 } from "minimatch";
 import { parse as parse2, stringify as stringify2 } from "yaml";
 var FernignoreMigrator = class {
@@ -4515,14 +4734,14 @@ var FernignoreMigrator = class {
     this.outputDir = outputDir;
   }
   fernignoreExists() {
-    return existsSync3(join7(this.outputDir, ".fernignore"));
+    return existsSync3(join8(this.outputDir, ".fernignore"));
   }
   readFernignorePatterns() {
-    const fernignorePath = join7(this.outputDir, ".fernignore");
+    const fernignorePath = join8(this.outputDir, ".fernignore");
     if (!existsSync3(fernignorePath)) {
       return [];
     }
-    const content = readFileSync3(fernignorePath, "utf-8");
+    const content = readFileSync4(fernignorePath, "utf-8");
     return content.split("\n").map((line) => line.trim()).filter((line) => line && !line.startsWith("#"));
   }
   /** Analyze .fernignore patterns vs git history. Creates synthetic patches for files differing from pristine generation. */
@@ -4627,7 +4846,7 @@ var FernignoreMigrator = class {
     return results;
   }
   readFileContent(filePath) {
-    const fullPath = join7(this.outputDir, filePath);
+    const fullPath = join8(this.outputDir, filePath);
     if (!existsSync3(fullPath)) {
       return null;
     }
@@ -4636,7 +4855,7 @@ var FernignoreMigrator = class {
       if (stat.isDirectory()) {
         return null;
       }
-      return readFileSync3(fullPath, "utf-8");
+      return readFileSync4(fullPath, "utf-8");
     } catch {
       return null;
     }
@@ -4692,10 +4911,10 @@ var FernignoreMigrator = class {
     };
   }
   movePatternsToReplayYml(patterns) {
-    const replayYmlPath = join7(this.outputDir, ".fern", "replay.yml");
+    const replayYmlPath = join8(this.outputDir, ".fern", "replay.yml");
     let config = {};
     if (existsSync3(replayYmlPath)) {
-      const content = readFileSync3(replayYmlPath, "utf-8");
+      const content = readFileSync4(replayYmlPath, "utf-8");
       config = parse2(content) ?? {};
     }
     const existing = config.exclude ?? [];
@@ -4711,8 +4930,8 @@ var FernignoreMigrator = class {
 
 // src/commands/bootstrap.ts
 import { createHash as createHash3 } from "crypto";
-import { existsSync as existsSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
-import { join as join8 } from "path";
+import { existsSync as existsSync4, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "fs";
+import { join as join9 } from "path";
 init_GitClient();
 async function bootstrap(outputDir, options) {
   const git = new GitClient(outputDir);
@@ -4879,10 +5098,10 @@ function parseGitLog(log) {
 }
 var REPLAY_FERNIGNORE_ENTRIES = [".fern/replay.lock", ".fern/replay.yml", ".gitattributes"];
 function ensureFernignoreEntries(outputDir) {
-  const fernignorePath = join8(outputDir, ".fernignore");
+  const fernignorePath = join9(outputDir, ".fernignore");
   let content = "";
   if (existsSync4(fernignorePath)) {
-    content = readFileSync4(fernignorePath, "utf-8");
+    content = readFileSync5(fernignorePath, "utf-8");
   }
   const lines = content.split("\n");
   const toAdd = [];
@@ -4903,10 +5122,10 @@ function ensureFernignoreEntries(outputDir) {
 }
 var GITATTRIBUTES_ENTRIES = [".fern/replay.lock linguist-generated=true"];
 function ensureGitattributesEntries(outputDir) {
-  const gitattributesPath = join8(outputDir, ".gitattributes");
+  const gitattributesPath = join9(outputDir, ".gitattributes");
   let content = "";
   if (existsSync4(gitattributesPath)) {
-    content = readFileSync4(gitattributesPath, "utf-8");
+    content = readFileSync5(gitattributesPath, "utf-8");
   }
   const lines = content.split("\n");
   const toAdd = [];
@@ -4933,6 +5152,7 @@ function computeContentHash(patchContent) {
 }
 
 // src/commands/forget.ts
+init_GitClient();
 import { minimatch as minimatch7 } from "minimatch";
 function parseDiffStat(patchContent) {
   let additions = 0;
@@ -4992,7 +5212,28 @@ var EMPTY_RESULT = {
   totalPatches: 0,
   warnings: []
 };
-function forget(outputDir, options) {
+async function dismissPatches(outputDir, lockManager, patches) {
+  const git = new GitClient(outputDir);
+  const detector = new ReplayDetector(git, lockManager, outputDir, readFernignorePatterns(outputDir));
+  for (const patch of patches) {
+    const hashes = [patch.content_hash];
+    if (patch.original_commit) {
+      const materialized = await detector.materializeCommitPatch(patch.original_commit);
+      if (materialized.status === "ok" && !hashes.includes(materialized.contentHash)) {
+        hashes.push(materialized.contentHash);
+      }
+    }
+    lockManager.addDismissal({
+      patch_id: patch.id,
+      original_commit: patch.original_commit,
+      original_message: patch.original_message,
+      content_hashes: hashes,
+      dismissed_at: (/* @__PURE__ */ new Date()).toISOString(),
+      via: "forget"
+    });
+  }
+}
+async function forget(outputDir, options) {
   const lockManager = new LockfileManager(outputDir);
   if (!lockManager.exists()) {
     return { ...EMPTY_RESULT };
@@ -5003,9 +5244,7 @@ function forget(outputDir, options) {
     const removed = lock.patches.map(toMatchedPatch);
     const warnings = buildWarnings(lock.patches);
     if (!options.dryRun) {
-      for (const patch of lock.patches) {
-        lockManager.addForgottenHash(patch.content_hash);
-      }
+      await dismissPatches(outputDir, lockManager, lock.patches);
       lockManager.clearPatches();
       lockManager.save();
     }
@@ -5034,8 +5273,8 @@ function forget(outputDir, options) {
     }
     const warnings = buildWarnings(patchesToRemove);
     if (!options.dryRun) {
+      await dismissPatches(outputDir, lockManager, patchesToRemove);
       for (const patch of patchesToRemove) {
-        lockManager.addForgottenHash(patch.content_hash);
         lockManager.removePatch(patch.id);
       }
       lockManager.save();
@@ -5103,7 +5342,7 @@ function reset(outputDir, options) {
 // src/commands/resolve.ts
 init_GitClient();
 import { readFile as readFile4 } from "fs/promises";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 async function resolve(outputDir, options) {
   const lockManager = new LockfileManager(outputDir);
   if (!lockManager.exists()) {
@@ -5143,15 +5382,16 @@ async function resolve(outputDir, options) {
   const patchesToCommit = [...resolvingPatches, ...unresolvedPatches];
   if (patchesToCommit.length > 0) {
     const currentGen = lock.current_generation;
-    const detector = new ReplayDetector(git, lockManager, outputDir);
+    const detector = new ReplayDetector(git, lockManager, outputDir, readFernignorePatterns(outputDir));
     const warnings = [];
+    const patchesDismissed = [];
     let patchesResolved = 0;
     const pass1 = [];
     for (const patch of patchesToCommit) {
       const result = await computePerPatchDiffWithFallback(
         patch,
         (f) => git.showFile(currentGen, f),
-        (f) => readFile4(join9(outputDir, f), "utf-8").catch(() => null),
+        (f) => readFile4(join10(outputDir, f), "utf-8").catch(() => null),
         (files) => git.exec(["diff", currentGen, "--", ...files]).catch(() => null)
       );
       if (result === null) {
@@ -5185,7 +5425,27 @@ async function resolve(outputDir, options) {
       const r = pass1[i];
       if (r.kind === "skip") continue;
       if (r.kind === "revert") {
+        const hashes = [patch.content_hash];
+        if (patch.original_commit) {
+          const materialized = await detector.materializeCommitPatch(patch.original_commit);
+          if (materialized.status === "ok" && !hashes.includes(materialized.contentHash)) {
+            hashes.push(materialized.contentHash);
+          } else if (materialized.status === "unreachable") {
+            warnings.push(
+              `Patch ${patch.id}: original commit ${patch.original_commit.slice(0, 7)} is unreachable; dismissed using the stored content hash only. If this commit reappears in history, the customization may be re-detected once.`
+            );
+          }
+        }
+        lockManager.addDismissal({
+          patch_id: patch.id,
+          original_commit: patch.original_commit,
+          original_message: patch.original_message,
+          content_hashes: hashes,
+          dismissed_at: (/* @__PURE__ */ new Date()).toISOString(),
+          via: "resolve"
+        });
         lockManager.removePatch(patch.id);
+        patchesDismissed.push({ id: patch.id, message: patch.original_message });
         continue;
       }
       if (lastIndexByHash.get(r.hash) !== i) {
@@ -5207,7 +5467,7 @@ async function resolve(outputDir, options) {
       const theirsSnapshot = {};
       for (const file of filesForSnapshot) {
         if (isBinaryFile(file)) continue;
-        const content = await readFile4(join9(outputDir, file), "utf-8").catch(() => null);
+        const content = await readFile4(join10(outputDir, file), "utf-8").catch(() => null);
         if (content != null) {
           theirsSnapshot[file] = content;
         }
@@ -5234,6 +5494,7 @@ async function resolve(outputDir, options) {
       commitSha: commitSha2,
       phase: "committed",
       patchesResolved,
+      patchesDismissed: patchesDismissed.length > 0 ? patchesDismissed : void 0,
       warnings: warnings.length > 0 ? warnings : void 0
     };
   }
@@ -5281,7 +5542,9 @@ function status(outputDir) {
       lastGeneration: void 0,
       patches: [],
       unresolvedCount: 0,
-      excludePatterns: []
+      excludePatterns: [],
+      dismissed: [],
+      legacyDismissedCount: 0
     };
   }
   const lock = lockManager.read();
@@ -5310,13 +5573,24 @@ function status(outputDir) {
   }
   const config = lockManager.getCustomizationsConfig();
   const excludePatterns = config.exclude ?? [];
+  const dismissals = lock.dismissals ?? [];
+  const dismissed = dismissals.map((d) => ({
+    message: d.original_message,
+    sha: d.original_commit.slice(0, 7),
+    via: d.via,
+    dismissedAt: d.dismissed_at
+  }));
+  const coveredHashes = new Set(dismissals.flatMap((d) => d.content_hashes));
+  const legacyDismissedCount = (lock.forgotten_hashes ?? []).filter((h) => !coveredHashes.has(h)).length;
   return {
     initialized: true,
     generationCount: lock.generations.length,
     lastGeneration,
     patches,
     unresolvedCount,
-    excludePatterns
+    excludePatterns,
+    dismissed,
+    legacyDismissedCount
   };
 }
 export {