@mmnto/cli 1.5.10 → 1.6.0

package/dist/services/fix-dispatcher.js

@@ -0,0 +1,100 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { safeExec } from '@mmnto/totem';
+const FIX_SYSTEM_PROMPT = `You are a code fix agent. Given a file and a review finding, produce the COMPLETE fixed file content.
+
+Rules:
+- Output ONLY the fixed file content inside a single code block
+- Do NOT add explanations before or after the code block
+- Make the MINIMAL change needed to address the finding
+- Do NOT refactor surrounding code or add features
+- Preserve all existing formatting, comments, and structure`;
+/**
+ * Apply a fix for a single finding: read file, LLM patch, write, commit, return SHA.
+ * Sequential — no concurrency concerns.
+ */
+export async function dispatchFix(opts) {
+    const { filePath, line, findingBody, findingTool, cwd, onLog } = opts;
+    // 1. Validate and read the target file
+    const absPath = path.resolve(cwd, filePath);
+    if (!absPath.startsWith(path.resolve(cwd))) {
+        return { applied: false, reason: `Path traversal blocked: ${filePath}` };
+    }
+    let originalContent;
+    try {
+        originalContent = fs.readFileSync(absPath, 'utf-8');
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return { applied: false, reason: `Cannot read ${filePath}: ${msg}` };
+    }
+    // 2. Build prompt
+    const lineContext = line != null ? `The finding is at line ${line}.` : '';
+    const prompt = [
+        FIX_SYSTEM_PROMPT,
+        '',
+        `=== FILE: ${filePath} ===`,
+        '```',
+        originalContent,
+        '```',
+        '',
+        `=== FINDING (${findingTool}) ===`,
+        lineContext,
+        findingBody,
+        '',
+        `Output the complete fixed file content in a single code block.`,
+    ].join('\n');
+    // 3. Call LLM
+    onLog?.(`Generating fix for ${filePath}...`);
+    let response;
+    try {
+        response = await opts.runOrchestrator(prompt);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return { applied: false, reason: `LLM call failed: ${msg}` };
+    }
+    if (!response) {
+        return { applied: false, reason: 'No response from LLM' };
+    }
+    // 4. Extract code block from response
+    const codeMatch = response.match(/```(?:\w+)?\s*\n([\s\S]*?)```/);
+    if (!codeMatch?.[1]) {
+        return { applied: false, reason: 'Could not extract code block from LLM response' };
+    }
+    const fixedContent = codeMatch[1];
+    // 5. Check if content actually changed
+    if (fixedContent.trim() === originalContent.trim()) {
+        onLog?.(`No changes needed for ${filePath}`);
+        return { applied: false, reason: 'LLM returned unchanged content' };
+    }
+    // 6. Write fixed file
+    fs.writeFileSync(absPath, fixedContent, 'utf-8');
+    // 7. Commit (rollback file on failure)
+    const summaryLine = findingBody
+        .split('\n')
+        .find((l) => l.trim())
+        ?.replace(/^[#*>\-\s]+/, '')
+        .slice(0, 60) ?? 'bot review fix';
+    const commitMsg = `fix: ${summaryLine}\n\nFinding: ${findingTool} on ${filePath}${line != null ? `:${line}` : ''}`;
+    try {
+        safeExec('git', ['add', filePath], { cwd });
+        safeExec('git', ['commit', '-m', commitMsg], { cwd });
+        const sha = safeExec('git', ['rev-parse', '--short', 'HEAD'], { cwd }).trim();
+        onLog?.(`Committed fix: ${sha}`);
+        return { applied: true, commitSha: sha };
+    }
+    catch (err) {
+        // Rollback: restore original content and unstage
+        try {
+            fs.writeFileSync(absPath, originalContent, 'utf-8');
+            safeExec('git', ['reset', 'HEAD', '--', filePath], { cwd });
+        }
+        catch {
+            // Best-effort rollback
+        }
+        const msg = err instanceof Error ? err.message : String(err);
+        return { applied: false, reason: `Git commit failed (rolled back): ${msg}` };
+    }
+}
+//# sourceMappingURL=fix-dispatcher.js.map

package/dist/services/fix-dispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix-dispatcher.js","sourceRoot":"","sources":["../../src/services/fix-dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,MAAM,iBAAiB,GAAG;;;;;;;4DAOkC,CAAC;AAQ7D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAQjC;IACC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAEtE,uCAAuC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,QAAQ,EAAE,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,QAAQ,KAAK,GAAG,EAAE,EAAE,CAAC;IACvE,CAAC;IAED,kBAAkB;IAClB,MAAM,WAAW,GAAG,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,0BAA0B,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,MAAM,GAAG;QACb,iBAAiB;QACjB,EAAE;QACF,aAAa,QAAQ,MAAM;QAC3B,KAAK;QACL,eAAe;QACf,KAAK;QACL,EAAE;QACF,gBAAgB,WAAW,OAAO;QAClC,WAAW;QACX,WAAW;QACX,EAAE;QACF,gEAAgE;KACjE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,cAAc;IACd,KAAK,EAAE,CAAC,sBAAsB,QAAQ,KAAK,CAAC,CAAC;IAC7C,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,GAAG,EAAE,EAAE,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAC5D,CAAC;IAED,sCAAsC;IACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAClE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;IACtF,CAAC;IAED,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAElC,uCAAuC;IACvC,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC;QACnD,KAAK,EAAE,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACtE,CAAC;IAED,sBAAsB;IACtB,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAEjD,uCAAuC;IACvC,MAAM,WAAW,GACf,WAAW;SACR,KAAK,CAAC,IAAI,CAAC;SACX,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtB,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC3B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC;IACtC,MAAM,SAAS,GAAG,QAAQ,WAAW,gBAAgB,WAAW,OAAO,QAAQ,GAAG,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAEnH,IAAI,CAAC;QACH,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5C,QAAQ,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9E,KAAK,EAAE,CAAC,kBAAkB,GAAG,EAAE,CAAC,CAAC;QACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iDAAiD;QACjD,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;YACpD,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,GAAG,EAAE,EAAE,CAAC;IAC/E,CAAC;AACH,CAAC"}

package/dist/utils/__tests__/milestone-inference.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=milestone-inference.test.d.ts.map

package/dist/utils/__tests__/milestone-inference.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"milestone-inference.test.d.ts","sourceRoot":"","sources":["../../../src/utils/__tests__/milestone-inference.test.ts"],"names":[],"mappings":""}

package/dist/utils/__tests__/milestone-inference.test.js

@@ -0,0 +1,35 @@
+import { describe, expect, it } from 'vitest';
+import { inferNextMilestone } from '../milestone-inference.js';
+describe('inferNextMilestone', () => {
+    it('bumps minor version: 1.6.0 → 1.7.0', () => {
+        expect(inferNextMilestone('1.6.0')).toBe('1.7.0');
+    });
+    it('preserves v prefix: v1.6.0 → v1.7.0', () => {
+        expect(inferNextMilestone('v1.6.0')).toBe('v1.7.0');
+    });
+    it('strips title suffix: 1.6.0 — Pipeline Maturity → 1.7.0', () => {
+        expect(inferNextMilestone('1.6.0 — Pipeline Maturity')).toBe('1.7.0');
+    });
+    it('bumps major milestone: v2.0.0 → v2.1.0', () => {
+        expect(inferNextMilestone('v2.0.0')).toBe('v2.1.0');
+    });
+    it('bumps from 0.0.1 → 0.1.0', () => {
+        expect(inferNextMilestone('0.0.1')).toBe('0.1.0');
+    });
+    it('returns undefined for non-semver string: Sprint 4', () => {
+        expect(inferNextMilestone('Sprint 4')).toBeUndefined();
+    });
+    it('returns undefined for non-semver string: MVP', () => {
+        expect(inferNextMilestone('MVP')).toBeUndefined();
+    });
+    it('returns undefined for undefined input', () => {
+        expect(inferNextMilestone(undefined)).toBeUndefined();
+    });
+    it('returns undefined for null input', () => {
+        expect(inferNextMilestone(null)).toBeUndefined();
+    });
+    it('returns undefined for empty string', () => {
+        expect(inferNextMilestone('')).toBeUndefined();
+    });
+});
+//# sourceMappingURL=milestone-inference.test.js.map

package/dist/utils/__tests__/milestone-inference.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"milestone-inference.test.js","sourceRoot":"","sources":["../../../src/utils/__tests__/milestone-inference.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/milestone-inference.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Infer the next milestone from the current one by bumping the minor version.
+ * Returns undefined for non-semver strings.
+ */
+export declare function inferNextMilestone(current: string | undefined | null): string | undefined;
+//# sourceMappingURL=milestone-inference.d.ts.map

package/dist/utils/milestone-inference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"milestone-inference.d.ts","sourceRoot":"","sources":["../../src/utils/milestone-inference.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAOzF"}

package/dist/utils/milestone-inference.js

@@ -0,0 +1,15 @@
+/**
+ * Infer the next milestone from the current one by bumping the minor version.
+ * Returns undefined for non-semver strings.
+ */
+export function inferNextMilestone(current) {
+    if (!current)
+        return undefined;
+    // Match milestone titles like "1.6.0", "v1.6.0", "1.6.0 — Pipeline Maturity"
+    const match = current.match(/^(v?)(\d+)\.(\d+)\.(\d+)/);
+    if (!match)
+        return undefined;
+    const [, prefix, major, minor, _patch] = match;
+    return `${prefix}${major}.${Number(minor) + 1}.0`;
+}
+//# sourceMappingURL=milestone-inference.js.map

package/dist/utils/milestone-inference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"milestone-inference.js","sourceRoot":"","sources":["../../src/utils/milestone-inference.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAkC;IACnE,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,6EAA6E;IAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;IAC/C,OAAO,GAAG,MAAM,GAAG,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;AACpD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mmnto/cli",
-  "version": "1.5.10",
+  "version": "1.6.0",
   "description": "CLI for Totem — AI persistent memory and context layer",
   "type": "module",
   "bin": {
@@ -23,7 +23,7 @@
     "smol-toml": "^1.6.1",
     "yaml": "^2.4.0",
     "zod": "^3.24.0",
-    "@mmnto/totem": "1.5.10"
+    "@mmnto/totem": "1.6.0"
   },
   "devDependencies": {
     "@anthropic-ai/sdk": "^0.78.0",