@jwilger/pi-development-system 0.20.0 → 0.21.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jwilger/pi-development-system",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "description": "A pi extension package representing a seasoned approach to software development using a full AI SDLC.",
   "keywords": [
     "pi-package"

package/skills/code-review/SKILL.md

@@ -50,8 +50,8 @@ The verdict must agree with the findings.
 - **false-positive**: refuted; ignored.
 
 Jev may raise a finding's severity when it is at least 0.8 confident; it never
-lowers a blocking or should-fix finding (it only suggests, in the reply, and you
-re-check it yourself). A round is clean when it has no blocking or should-fix findings.
+lowers a finding to a severity that does not count (it only suggests, in the
+reply, and you re-check it yourself). A round is clean when it has no blocking or should-fix findings.
 The default is three consecutive clean rounds (`review.required_clean_rounds`).
 Only real findings reset the count; a changed diff alone does not, so a small fix
 commit keeps the clean rounds already earned unless findings come back.

package/src/gates/commit-guard.ts

@@ -119,7 +119,11 @@ async function jevNeeds(
 }
 
 /** While work is in flight, committing needs the slice review satisfied on the diff as it is now. */
-async function reviewNeeds(deps: CommitGuardDeps, ctx: ExtensionContext): Promise<Need[]> {
+async function reviewNeeds(
+  deps: CommitGuardDeps,
+  ctx: ExtensionContext,
+  command: string,
+): Promise<Need[]> {
   const { phase, activeSlice } = deps.state.get();
   if ((phase !== "implementing" && phase !== "reviewing") || activeSlice === undefined) return [];
   const snap = await snapshotDiff(deps.exec, ctx.cwd, "HEAD");
@@ -129,7 +133,45 @@ async function reviewNeeds(deps: CommitGuardDeps, ctx: ExtensionContext): Promis
     activeSlice,
     snap.ok ? { digest: snap.value.digest, files: snap.value.files } : { digest: "unknown" },
   );
-  return gap === undefined ? [] : [{ gate: REVIEW, why: gap }];
+  if (gap !== undefined) return [{ gate: REVIEW, why: gap }];
+  // The review saw the work tree; a plain `git commit` records the index. A file staged and then edited
+  // again would commit the older, unreviewed content.
+  const stale = stagedThenEdited(await changedNames(deps.exec, ctx.cwd), command);
+  return stale.length === 0
+    ? []
+    : [
+        {
+          gate: REVIEW,
+          why: `the staged content of ${stale.join(", ")} differs from the work tree that was reviewed (edited after \`git add\`); stage it again`,
+        },
+      ];
+}
+
+/** Files staged and also changed since staging; empty when the commit stages everything itself. */
+const stagedThenEdited = (
+  names: { staged: readonly string[]; unstaged: readonly string[] } | undefined,
+  command: string,
+): string[] =>
+  names === undefined || stagesEverything(command)
+    ? []
+    : names.staged.filter((name) => names.unstaged.includes(name));
+
+async function changedNames(
+  exec: Exec,
+  cwd: string,
+): Promise<{ staged: string[]; unstaged: string[] } | undefined> {
+  try {
+    const base = ["-c", "core.quotePath=false", "diff", "--no-ext-diff", "--name-only", "-z"];
+    const [staged, unstaged] = await Promise.all([
+      exec("git", [...base, "--cached"], { cwd, timeout: 10_000 }),
+      exec("git", base, { cwd, timeout: 10_000 }),
+    ]);
+    if (staged.code !== 0 || unstaged.code !== 0) return undefined;
+    const split = (text: string) => text.split("\0").filter((n) => n !== "");
+    return { staged: split(staged.stdout), unstaged: split(unstaged.stdout) };
+  } catch {
+    return undefined;
+  }
 }
 
 const reviewReason = (need: Need): string =>
@@ -187,7 +229,7 @@ export function registerCommitGuard(deps: CommitGuardDeps): void {
     if (forbidden.length > 0) return { block: true, reason: forbiddenReason(forbidden) };
 
     const known = messages.flatMap((m) => (m === undefined ? [] : [m]));
-    const all: Need[] = await reviewNeeds(deps, ctx);
+    const all: Need[] = await reviewNeeds(deps, ctx, command);
     // A -F file that cannot be read now (written by this same command, or stdin) cannot be checked.
     if (extractions.some((e, i) => e.kind === "file" && messages[i] === undefined)) {
       all.push({

package/src/review/digest.ts

@@ -1,4 +1,6 @@
 import { createHash } from "node:crypto";
+import { lstat, readlink } from "node:fs/promises";
+import { join } from "node:path";
 import type { Exec } from "../core/exec.ts";
 import { err, ok, type Result } from "../core/result.ts";
 import { splitDiffByFile } from "../core/review-flow.ts";
@@ -35,13 +37,18 @@ export async function snapshotDiff(
     const [diff, stat, others] = await Promise.all([
       exec("git", [...plain, "--full-index", "--no-renames", range], { cwd, timeout: 15_000 }),
       exec("git", [...plain, "--stat", range], { cwd, timeout: 15_000 }),
-      range === "HEAD"
-        ? exec("git", ["ls-files", "--others", "--exclude-standard"], { cwd, timeout: 15_000 })
+      // Any range that ends in the work tree (HEAD, HEAD~1, a branch) leaves untracked files out of git diff.
+      !range.includes("..")
+        ? exec(
+            "git",
+            ["-c", "core.quotePath=false", "ls-files", "-z", "--others", "--exclude-standard"],
+            { cwd, timeout: 15_000 },
+          )
         : Promise.resolve({ code: 0, stdout: "", stderr: "" }),
     ]);
     if (diff.code !== 0) return err(diff.stderr.trim() || `git diff ${range} failed`);
     if (others.code !== 0) return err(others.stderr.trim() || "git ls-files --others failed");
-    const listed = others.stdout.split("\n").filter((p) => p !== "");
+    const listed = others.stdout.split("\0").filter((p) => p !== "");
     // A nested repository is listed as `dir/` and has no blob to hash.
     const nested = listed.filter((p) => p.endsWith("/"));
     const untracked = listed.filter((p) => !p.endsWith("/"));
@@ -58,15 +65,27 @@ export async function snapshotDiff(
       return err("could not read the diff: no per-file sections were found");
     }
     if (untracked.length > 0) {
-      const hashes = await exec("git", ["hash-object", "--", ...untracked], {
-        cwd,
-        timeout: 15_000,
-      });
-      const lines = hashes.stdout.split("\n").filter((l) => l !== "");
-      if (hashes.code !== 0 || lines.length !== untracked.length) {
-        return err(hashes.stderr.trim() || "git hash-object could not hash every untracked file");
+      const links = new Set<string>();
+      for (const path of untracked) {
+        const target = await linkTarget(cwd, path);
+        if (target !== undefined) {
+          files[path] = `new:${blobOf(target)}`;
+          links.add(path);
+        }
+      }
+      // `git hash-object <path>` follows symlinks (and fails on dangling ones), so links are hashed above.
+      const regular = untracked.filter((p) => !links.has(p));
+      if (regular.length > 0) {
+        const hashes = await exec("git", ["hash-object", "--", ...regular], {
+          cwd,
+          timeout: 15_000,
+        });
+        const lines = hashes.stdout.split("\n").filter((l) => l !== "");
+        if (hashes.code !== 0 || lines.length !== regular.length) {
+          return err(hashes.stderr.trim() || "git hash-object could not hash every untracked file");
+        }
+        for (const [i, path] of regular.entries()) files[path] = `new:${lines[i]}`;
       }
-      for (const [i, path] of untracked.entries()) files[path] = `new:${lines[i]}`;
     }
     const names = Object.keys(files).sort();
     const untrackedStat = [
@@ -91,3 +110,20 @@ const fileDigest = (section: string): string => {
   const blob = NEW_FILE.exec(section)?.[1];
   return blob === undefined ? digestOf(section) : `new:${blob}`;
 };
+
+/** The text of a symlink, or undefined when `path` is not one (or cannot be inspected). */
+async function linkTarget(cwd: string, path: string): Promise<string | undefined> {
+  try {
+    const full = join(cwd, path);
+    return (await lstat(full)).isSymbolicLink() ? await readlink(full) : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+/** Git's blob id for some content: what `git add` stores for a symlink is its target text. */
+const blobOf = (content: string): string =>
+  createHash("sha1")
+    .update(`blob ${Buffer.byteLength(content)}\0`)
+    .update(content)
+    .digest("hex");