@gitroll/tacitt-cli 0.6.11 → 0.6.13

package/dist/preview-worker.mjs

@@ -1,4 +1,4 @@
-import { n as assertPreviewHeap, o as previewInputSchema, t as runPreview } from "./run-CaPktPhH.mjs";
+import { n as assertPreviewHeap, o as previewInputSchema, t as runPreview } from "./run-Dod7Vykp.mjs";
 import { parentPort, workerData } from "node:worker_threads";
 //#region packages/harnesses/src/preview/worker/index.ts
 function notify(message) {

package/dist/privacy-validator.mjs

@@ -1,32 +1,52 @@
-import { Mt as privacyTermKey, Ot as decisionCardInputSchema, jt as privacyResolveSchema, r as reviewReadPages, t as locateTerms } from "./locate-Cx52Zqxv.mjs";
+import { At as decisionCardInputSchema, Nt as privacyResolveSchema, Pt as privacyTermKey, a as reviewReadPages, t as locateTerms } from "./locate-PLEyLYW-.mjs";
 import { z } from "zod";
 //#region apps/cli/src/skill-install/privacy-validator.ts
 const sourceReferenceSchema = z.object({
 	chunkId: z.uuid(),
-	start: z.number().int().nonnegative(),
-	end: z.number().int().positive()
+	start: z.number().int(),
+	end: z.number().int()
 }).strict();
 /** Resolve sensitive spans locally against the projected, assigned core text. */
 function resolvePrivacySources(raw, batches) {
 	if (!Array.isArray(raw)) throw new Error("INVALID_FINDING");
 	if (!raw.some((term) => typeof term === "object" && term !== null && "source" in term)) return raw;
 	const chunks = new Map(batches.flatMap(({ chunks }) => chunks.map((chunk) => [chunk.id, chunk])));
-	return raw.map((term, index) => {
+	const diagnostics = [];
+	let invalidCount = 0;
+	const resolved = raw.map((term, index) => {
 		if (typeof term !== "object" || term === null || !("source" in term)) return term;
+		const invalid = (reason) => {
+			invalidCount++;
+			if (diagnostics.length < 32) diagnostics.push(`draft.terms[${index}].source: ${reason}`);
+		};
 		const reference = sourceReferenceSchema.safeParse(term.source);
-		const invalid = () => new Error("INVALID_REVIEW_SPAN", { cause: [`draft.terms[${index}].source`] });
-		if (!reference.success || "value" in term) throw invalid();
+		if (!reference.success || "value" in term) return invalid("use only a chunkId and integer start/end offsets for the source");
 		const { chunkId, start, end } = reference.data;
 		const chunk = chunks.get(chunkId);
-		if (!chunk?.core || end <= start || end > chunk.text.length || end - start > 8e3 || chunk.displayMasks?.some((range) => range.start < end && start < range.end)) throw invalid();
+		if (!chunk?.core) return invalid("select an assigned core chunk");
+		if (start < 0 || end <= start || end > chunk.text.length) return invalid("check chunk-relative UTF-16 bounds");
+		if (end - start > 8e3) return invalid("span exceeds the length limit");
+		if (chunk.displayMasks?.some((range) => range.start < end && start < range.end)) return invalid("span intersects masked text");
 		const value = chunk.text.slice(start, end);
-		if (!value.isWellFormed() || value.includes("█") || !value.trim() || Array.from(value).length > 4e3) throw invalid();
+		if (!value.isWellFormed()) {
+			if ((chunk.text.codePointAt(start - 1) ?? 0) > 65535 || (chunk.text.codePointAt(end - 1) ?? 0) > 65535) return invalid("offset splits a UTF-16 surrogate pair");
+			return invalid("span contains invalid UTF-16");
+		}
+		if (value.includes("█")) return invalid("span intersects masked text");
+		if (!value.trim()) return invalid("span contains only whitespace");
+		if (Array.from(value).length > 4e3) return invalid("span exceeds the length limit");
 		const { source: _source, ...rest } = term;
 		return {
 			...rest,
 			value
 		};
 	});
+	if (invalidCount) {
+		const remaining = invalidCount - diagnostics.length;
+		if (remaining) diagnostics.push(`${remaining} additional invalid source references`);
+		throw new Error("INVALID_REVIEW_SPAN", { cause: diagnostics });
+	}
+	return resolved;
 }
 const suppliedTerms = z.array(z.object({
 	key: z.string(),