@mmnto/cli 1.5.9 → 1.5.11

package/dist/exemptions/exemption-engine.js

@@ -0,0 +1,193 @@
+import * as crypto from 'node:crypto';
+import { PROMOTION_THRESHOLD } from './exemption-schema.js';
+// ─── Stopwords ──────────────────────────────────────────
+const STOPWORDS = new Set([
+    'a',
+    'an',
+    'the',
+    'is',
+    'are',
+    'was',
+    'were',
+    'be',
+    'been',
+    'being',
+    'have',
+    'has',
+    'had',
+    'do',
+    'does',
+    'did',
+    'will',
+    'would',
+    'shall',
+    'should',
+    'may',
+    'might',
+    'must',
+    'can',
+    'could',
+    'to',
+    'of',
+    'in',
+    'for',
+    'on',
+    'with',
+    'at',
+    'by',
+    'from',
+    'as',
+    'or',
+    'and',
+    'but',
+    'not',
+    'this',
+    'that',
+    'it',
+    'its',
+    'no',
+    'if',
+    'so',
+    'up',
+    'out',
+    'about',
+]);
+function extractKeywords(message) {
+    return message
+        .toLowerCase()
+        .replace(/[^a-z0-9\s]/g, ' ')
+        .split(/\s+/)
+        .filter((w) => w.length >= 3 && !STOPWORDS.has(w))
+        .sort();
+}
+export function computePatternId(message) {
+    const keywords = extractKeywords(message);
+    const source = keywords.length > 0 ? keywords.join(':') : message.toLowerCase().trim();
+    const hash = crypto.createHash('sha256').update(source).digest('hex');
+    return `shield:${hash}`;
+}
+export function recordFalsePositive(local, patternId, source, message) {
+    const existing = local.patterns[patternId] ?? {
+        count: 0,
+        sources: [],
+        lastSeenAt: new Date().toISOString(),
+        sampleMessages: [],
+    };
+    const count = existing.count + 1;
+    const sources = existing.sources.includes(source)
+        ? existing.sources
+        : [...existing.sources, source];
+    const sampleMessages = existing.sampleMessages.length < 3
+        ? [...existing.sampleMessages, message]
+        : existing.sampleMessages;
+    const updated = {
+        count,
+        sources,
+        lastSeenAt: new Date().toISOString(),
+        sampleMessages,
+    };
+    const updatedLocal = {
+        patterns: { ...local.patterns, [patternId]: updated },
+    };
+    return { updatedLocal, promoted: count === PROMOTION_THRESHOLD };
+}
+export function promoteToShared(shared, patternId, localPattern) {
+    if (shared.exemptions.some((e) => e.patternId === patternId)) {
+        return shared;
+    }
+    const keywords = localPattern.sampleMessages[0]
+        ? extractKeywords(localPattern.sampleMessages[0]).slice(0, 5).join(' ')
+        : '';
+    const label = keywords || patternId;
+    const entry = {
+        patternId,
+        label,
+        reason: `Auto-promoted after ${localPattern.count} false positives`,
+        promotedAt: new Date().toISOString(),
+        promotedBy: 'auto',
+        sampleMessages: localPattern.sampleMessages,
+    };
+    return {
+        ...shared,
+        exemptions: [...shared.exemptions, entry],
+    };
+}
+function escapeRegExp(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+function buildManualLabelMatchers(shared) {
+    return shared.exemptions
+        .filter((e) => e.patternId.startsWith('manual:'))
+        .map((e) => new RegExp('\\b' + escapeRegExp(e.label.toLowerCase()) + '\\b', 'i'));
+}
+export function filterExemptedFindings(findings, shared) {
+    const autoExemptedIds = new Set(shared.exemptions.filter((e) => !e.patternId.startsWith('manual:')).map((e) => e.patternId));
+    const manualLabelPatterns = buildManualLabelMatchers(shared);
+    const filtered = [];
+    const exempted = [];
+    for (const finding of findings) {
+        const pid = computePatternId(finding.message);
+        const matchesAuto = autoExemptedIds.has(pid);
+        const matchesManual = manualLabelPatterns.some((re) => re.test(finding.message));
+        if (matchesAuto || matchesManual) {
+            exempted.push({ ...finding, severity: 'INFO' });
+        }
+        else {
+            filtered.push(finding);
+        }
+    }
+    return { filtered, exempted };
+}
+export function isExempted(patternId, exemptions) {
+    return exemptions.exemptions.some((e) => e.patternId === patternId);
+}
+export function addManualSuppression(shared, label, reason) {
+    const trimmed = label.trim();
+    if (!trimmed)
+        return shared;
+    const patternId = `manual:${trimmed}`;
+    if (shared.exemptions.some((e) => e.patternId === patternId)) {
+        return shared;
+    }
+    const entry = {
+        patternId,
+        label: trimmed,
+        reason,
+        promotedAt: new Date().toISOString(),
+        promotedBy: 'manual',
+        sampleMessages: [],
+    };
+    return {
+        ...shared,
+        exemptions: [...shared.exemptions, entry],
+    };
+}
+/**
+ * Track false positives for a batch of findings. Returns updated local/shared
+ * state and a list of promoted pattern messages (for logging).
+ */
+export function trackFalsePositives(findings, source, local, shared) {
+    let currentLocal = local;
+    let currentShared = shared;
+    const promoted = [];
+    const seenPatternIds = new Set();
+    const manualPatterns = buildManualLabelMatchers(shared);
+    for (const finding of findings) {
+        const pid = computePatternId(finding.message);
+        if (seenPatternIds.has(pid))
+            continue;
+        seenPatternIds.add(pid);
+        if (isExempted(pid, currentShared))
+            continue;
+        if (manualPatterns.some((re) => re.test(finding.message)))
+            continue;
+        const { updatedLocal, promoted: didPromote } = recordFalsePositive(currentLocal, pid, source, finding.message);
+        currentLocal = updatedLocal;
+        if (didPromote) {
+            currentShared = promoteToShared(currentShared, pid, updatedLocal.patterns[pid]);
+            promoted.push(finding.message.slice(0, 80));
+        }
+    }
+    return { local: currentLocal, shared: currentShared, promoted };
+}
+//# sourceMappingURL=exemption-engine.js.map

package/dist/exemptions/exemption-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exemption-engine.js","sourceRoot":"","sources":["../../src/exemptions/exemption-engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAStC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,2DAA2D;AAE3D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,GAAG;IACH,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;IACL,KAAK;IACL,MAAM;IACN,IAAI;IACJ,MAAM;IACN,OAAO;IACP,MAAM;IACN,KAAK;IACL,KAAK;IACL,IAAI;IACJ,MAAM;IACN,KAAK;IACL,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;IACR,KAAK;IACL,OAAO;IACP,MAAM;IACN,KAAK;IACL,OAAO;IACP,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,OAAO;CACR,CAAC,CAAC;AAEH,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,OAAO;SACX,WAAW,EAAE;SACb,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC;SAC5B,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACjD,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACvF,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,OAAO,UAAU,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAqB,EACrB,SAAiB,EACjB,MAAwB,EACxB,OAAe;IAEf,MAAM,QAAQ,GAAqB,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI;QAC9D,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,EAAE;QACX,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,cAAc,EAAE,EAAE;KACnB,CAAC;IAEF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC/C,CAAC,CAAC,QAAQ,CAAC,OAAO;QAClB,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,cAAc,GAClB,QAAQ,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;QAChC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;QACvC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;IAE9B,MAAM,OAAO,GAAqB;QAChC,KAAK;QACL,OAAO;QACP,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,cAAc;KACf,CAAC;IAEF,MAAM,YAAY,GAAmB;QACnC,QAAQ,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE;KACtD,CAAC;IAEF,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,KAAK,mBAAmB,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAAuB,EACvB,SAAiB,EACjB,YAA8B;IAE9B,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC;QAC7C,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACvE,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,KAAK,GAAG,QAAQ,IAAI,SAAS,CAAC;IAEpC,MAAM,KAAK,GAAyB;QAClC,SAAS;QACT,KAAK;QACL,MAAM,EAAE,uBAAuB,YAAY,CAAC,KAAK,kBAAkB;QACnE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,UAAU,EAAE,MAAM;QAClB,cAAc,EAAE,YAAY,CAAC,cAAc;KAC5C,CAAC;IAEF,OAAO;QACL,GAAG,MAAM;QACT,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAuB;IACvD,OAAO,MAAM,CAAC,UAAU;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;SAChD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,QAAyB,EACzB,MAAuB;IAEvB,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAC5F,CAAC;IACF,MAAM,mBAAmB,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAE7D,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,aAAa,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAEjF,IAAI,WAAW,IAAI,aAAa,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,UAA2B;IACvE,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAuB,EACvB,KAAa,EACb,MAAc;IAEd,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAC5B,MAAM,SAAS,GAAG,UAAU,OAAO,EAAE,CAAC;IAEtC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,KAAK,GAAyB;QAClC,SAAS;QACT,KAAK,EAAE,OAAO;QACd,MAAM;QACN,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,EAAE;KACnB,CAAC;IAEF,OAAO;QACL,GAAG,MAAM;QACT,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC;KAC1C,CAAC;AACJ,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAoC,EACpC,MAAwB,EACxB,KAAqB,EACrB,MAAuB;IAEvB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,aAAa,GAAG,MAAM,CAAC;IAC3B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,MAAM,cAAc,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAExD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACtC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,UAAU,CAAC,GAAG,EAAE,aAAa,CAAC;YAAE,SAAS;QAC7C,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAAE,SAAS;QACpE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAChE,YAAY,EACZ,GAAG,EACH,MAAM,EACN,OAAO,CAAC,OAAO,CAChB,CAAC;QACF,YAAY,GAAG,YAAY,CAAC;QAC5B,IAAI,UAAU,EAAE,CAAC;YACf,aAAa,GAAG,eAAe,CAAC,aAAa,EAAE,GAAG,EAAE,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAE,CAAC,CAAC;YACjF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;AAClE,CAAC"}

package/dist/exemptions/exemption-schema.d.ts

@@ -0,0 +1,127 @@
+import { z } from 'zod';
+declare const ExemptionPatternSchema: z.ZodObject<{
+    count: z.ZodNumber;
+    sources: z.ZodArray<z.ZodEnum<["shield", "bot"]>, "many">;
+    lastSeenAt: z.ZodString;
+    sampleMessages: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    count: number;
+    sources: ("shield" | "bot")[];
+    lastSeenAt: string;
+    sampleMessages: string[];
+}, {
+    count: number;
+    sources: ("shield" | "bot")[];
+    lastSeenAt: string;
+    sampleMessages: string[];
+}>;
+export declare const ExemptionLocalSchema: z.ZodObject<{
+    patterns: z.ZodRecord<z.ZodString, z.ZodObject<{
+        count: z.ZodNumber;
+        sources: z.ZodArray<z.ZodEnum<["shield", "bot"]>, "many">;
+        lastSeenAt: z.ZodString;
+        sampleMessages: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        count: number;
+        sources: ("shield" | "bot")[];
+        lastSeenAt: string;
+        sampleMessages: string[];
+    }, {
+        count: number;
+        sources: ("shield" | "bot")[];
+        lastSeenAt: string;
+        sampleMessages: string[];
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    patterns: Record<string, {
+        count: number;
+        sources: ("shield" | "bot")[];
+        lastSeenAt: string;
+        sampleMessages: string[];
+    }>;
+}, {
+    patterns: Record<string, {
+        count: number;
+        sources: ("shield" | "bot")[];
+        lastSeenAt: string;
+        sampleMessages: string[];
+    }>;
+}>;
+export type ExemptionLocal = z.infer<typeof ExemptionLocalSchema>;
+export type ExemptionPattern = z.infer<typeof ExemptionPatternSchema>;
+declare const SharedExemptionEntrySchema: z.ZodObject<{
+    patternId: z.ZodString;
+    label: z.ZodString;
+    reason: z.ZodString;
+    promotedAt: z.ZodString;
+    promotedBy: z.ZodEnum<["auto", "manual"]>;
+    sampleMessages: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    sampleMessages: string[];
+    patternId: string;
+    label: string;
+    reason: string;
+    promotedAt: string;
+    promotedBy: "auto" | "manual";
+}, {
+    sampleMessages: string[];
+    patternId: string;
+    label: string;
+    reason: string;
+    promotedAt: string;
+    promotedBy: "auto" | "manual";
+}>;
+export declare const ExemptionSharedSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    exemptions: z.ZodArray<z.ZodObject<{
+        patternId: z.ZodString;
+        label: z.ZodString;
+        reason: z.ZodString;
+        promotedAt: z.ZodString;
+        promotedBy: z.ZodEnum<["auto", "manual"]>;
+        sampleMessages: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        sampleMessages: string[];
+        patternId: string;
+        label: string;
+        reason: string;
+        promotedAt: string;
+        promotedBy: "auto" | "manual";
+    }, {
+        sampleMessages: string[];
+        patternId: string;
+        label: string;
+        reason: string;
+        promotedAt: string;
+        promotedBy: "auto" | "manual";
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    version: 1;
+    exemptions: {
+        sampleMessages: string[];
+        patternId: string;
+        label: string;
+        reason: string;
+        promotedAt: string;
+        promotedBy: "auto" | "manual";
+    }[];
+}, {
+    version: 1;
+    exemptions: {
+        sampleMessages: string[];
+        patternId: string;
+        label: string;
+        reason: string;
+        promotedAt: string;
+        promotedBy: "auto" | "manual";
+    }[];
+}>;
+export type ExemptionShared = z.infer<typeof ExemptionSharedSchema>;
+export type SharedExemptionEntry = z.infer<typeof SharedExemptionEntrySchema>;
+export declare const EMPTY_LOCAL: ExemptionLocal;
+export declare const EMPTY_SHARED: ExemptionShared;
+export declare const PROMOTION_THRESHOLD = 3;
+export declare const LOCAL_FILE = "exemption-local.json";
+export declare const SHARED_FILE = "exemptions.json";
+export {};
+//# sourceMappingURL=exemption-schema.d.ts.map

package/dist/exemptions/exemption-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exemption-schema.d.ts","sourceRoot":"","sources":["../../src/exemptions/exemption-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,QAAA,MAAM,sBAAsB;;;;;;;;;;;;;;;EAK1B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAE/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAItE,QAAA,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;EAO9B,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAI9E,eAAO,MAAM,WAAW,EAAE,cAAiC,CAAC;AAC5D,eAAO,MAAM,YAAY,EAAE,eAAgD,CAAC;AAI5E,eAAO,MAAM,mBAAmB,IAAI,CAAC;AACrC,eAAO,MAAM,UAAU,yBAAyB,CAAC;AACjD,eAAO,MAAM,WAAW,oBAAoB,CAAC"}

package/dist/exemptions/exemption-schema.js

@@ -0,0 +1,32 @@
+import { z } from 'zod';
+// ─── Local: per-developer FP tracking (gitignored) ─────
+const ExemptionPatternSchema = z.object({
+    count: z.number().int().nonnegative(),
+    sources: z.array(z.enum(['shield', 'bot'])),
+    lastSeenAt: z.string().datetime(),
+    sampleMessages: z.array(z.string()).max(3),
+});
+export const ExemptionLocalSchema = z.object({
+    patterns: z.record(z.string(), ExemptionPatternSchema),
+});
+// ─── Shared: committed team-wide exemptions ─────────────
+const SharedExemptionEntrySchema = z.object({
+    patternId: z.string().min(1),
+    label: z.string().min(1),
+    reason: z.string(),
+    promotedAt: z.string().datetime(),
+    promotedBy: z.enum(['auto', 'manual']),
+    sampleMessages: z.array(z.string()).max(3),
+});
+export const ExemptionSharedSchema = z.object({
+    version: z.literal(1),
+    exemptions: z.array(SharedExemptionEntrySchema),
+});
+// ─── Defaults ───────────────────────────────────────────
+export const EMPTY_LOCAL = { patterns: {} };
+export const EMPTY_SHARED = { version: 1, exemptions: [] };
+// ─── Constants ──────────────────────────────────────────
+export const PROMOTION_THRESHOLD = 3;
+export const LOCAL_FILE = 'exemption-local.json';
+export const SHARED_FILE = 'exemptions.json';
+//# sourceMappingURL=exemption-schema.js.map

package/dist/exemptions/exemption-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exemption-schema.js","sourceRoot":"","sources":["../../src/exemptions/exemption-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,0DAA0D;AAE1D,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC;CACvD,CAAC,CAAC;AAKH,2DAA2D;AAE3D,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC;CAChD,CAAC,CAAC;AAKH,2DAA2D;AAE3D,MAAM,CAAC,MAAM,WAAW,GAAmB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC5D,MAAM,CAAC,MAAM,YAAY,GAAoB,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AAE5E,2DAA2D;AAE3D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,UAAU,GAAG,sBAAsB,CAAC;AACjD,MAAM,CAAC,MAAM,WAAW,GAAG,iBAAiB,CAAC"}

package/dist/exemptions/exemption-store.d.ts

@@ -0,0 +1,22 @@
+import type { ExemptionLocal, ExemptionShared } from './exemption-schema.js';
+/**
+ * Read local exemption tracking state from .totem/cache/exemption-local.json.
+ * Returns EMPTY_LOCAL if missing, corrupt, or unreadable.
+ */
+export declare function readLocalExemptions(cacheDir: string, onWarn?: (msg: string) => void): ExemptionLocal;
+/**
+ * Write local exemption tracking state.
+ * Creates cache directory if needed. Fire-and-forget on failure.
+ */
+export declare function writeLocalExemptions(cacheDir: string, data: ExemptionLocal, onWarn?: (msg: string) => void): void;
+/**
+ * Read shared exemptions from .totem/exemptions.json (committed, team-wide).
+ * Returns EMPTY_SHARED if missing or invalid.
+ */
+export declare function readSharedExemptions(totemDir: string, onWarn?: (msg: string) => void): ExemptionShared;
+/**
+ * Write shared exemptions file.
+ * Creates directory if needed. Fire-and-forget on failure.
+ */
+export declare function writeSharedExemptions(totemDir: string, data: ExemptionShared, onWarn?: (msg: string) => void): void;
+//# sourceMappingURL=exemption-store.d.ts.map

package/dist/exemptions/exemption-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exemption-store.d.ts","sourceRoot":"","sources":["../../src/exemptions/exemption-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAU7E;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC7B,cAAc,CAgBhB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,cAAc,EACpB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC7B,IAAI,CASN;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC7B,eAAe,CAgBjB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,eAAe,EACrB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC7B,IAAI,CASN"}

package/dist/exemptions/exemption-store.js

@@ -0,0 +1,80 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { EMPTY_LOCAL, EMPTY_SHARED, ExemptionLocalSchema, ExemptionSharedSchema, LOCAL_FILE, SHARED_FILE, } from './exemption-schema.js';
+/**
+ * Read local exemption tracking state from .totem/cache/exemption-local.json.
+ * Returns EMPTY_LOCAL if missing, corrupt, or unreadable.
+ */
+export function readLocalExemptions(cacheDir, onWarn) {
+    const filePath = path.join(cacheDir, LOCAL_FILE);
+    try {
+        const raw = fs.readFileSync(filePath, 'utf-8');
+        const parsed = JSON.parse(raw);
+        const result = ExemptionLocalSchema.safeParse(parsed);
+        if (result.success)
+            return result.data;
+        onWarn?.(`Corrupt exemption-local.json — resetting to empty state`);
+        return { ...EMPTY_LOCAL };
+    }
+    catch (err) {
+        if (err.code !== 'ENOENT') {
+            const msg = err instanceof Error ? err.message : String(err);
+            onWarn?.(`Failed to read exemption-local.json: ${msg}`);
+        }
+        return { ...EMPTY_LOCAL };
+    }
+}
+/**
+ * Write local exemption tracking state.
+ * Creates cache directory if needed. Fire-and-forget on failure.
+ */
+export function writeLocalExemptions(cacheDir, data, onWarn) {
+    try {
+        fs.mkdirSync(cacheDir, { recursive: true });
+        const filePath = path.join(cacheDir, LOCAL_FILE);
+        fs.writeFileSync(filePath, JSON.stringify(data, null, 2) + '\n', 'utf-8');
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        onWarn?.(`Failed to write exemption-local.json: ${msg}`);
+    }
+}
+/**
+ * Read shared exemptions from .totem/exemptions.json (committed, team-wide).
+ * Returns EMPTY_SHARED if missing or invalid.
+ */
+export function readSharedExemptions(totemDir, onWarn) {
+    const filePath = path.join(totemDir, SHARED_FILE);
+    try {
+        const raw = fs.readFileSync(filePath, 'utf-8');
+        const parsed = JSON.parse(raw);
+        const result = ExemptionSharedSchema.safeParse(parsed);
+        if (result.success)
+            return result.data;
+        onWarn?.(`Corrupt exemptions.json — treating as empty`);
+        return { ...EMPTY_SHARED };
+    }
+    catch (err) {
+        if (err.code !== 'ENOENT') {
+            const msg = err instanceof Error ? err.message : String(err);
+            onWarn?.(`Failed to read exemptions.json: ${msg}`);
+        }
+        return { ...EMPTY_SHARED };
+    }
+}
+/**
+ * Write shared exemptions file.
+ * Creates directory if needed. Fire-and-forget on failure.
+ */
+export function writeSharedExemptions(totemDir, data, onWarn) {
+    try {
+        fs.mkdirSync(totemDir, { recursive: true });
+        const filePath = path.join(totemDir, SHARED_FILE);
+        fs.writeFileSync(filePath, JSON.stringify(data, null, 2) + '\n', 'utf-8');
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        onWarn?.(`Failed to write exemptions.json: ${msg}`);
+    }
+}
+//# sourceMappingURL=exemption-store.js.map

package/dist/exemptions/exemption-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exemption-store.js","sourceRoot":"","sources":["../../src/exemptions/exemption-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EACL,WAAW,EACX,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EACrB,UAAU,EACV,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAE/B;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,MAA8B;IAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QACvC,MAAM,EAAE,CAAC,yDAAyD,CAAC,CAAC;QACpE,OAAO,EAAE,GAAG,WAAW,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,EAAE,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,EAAE,GAAG,WAAW,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,IAAoB,EACpB,MAA8B;IAE9B,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACjD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,EAAE,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,MAA8B;IAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QACvC,MAAM,EAAE,CAAC,6CAA6C,CAAC,CAAC;QACxD,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,EAAE,CAAC,mCAAmC,GAAG,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,IAAqB,EACrB,MAA8B;IAE9B,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAClD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,EAAE,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/git.d.ts

@@ -1,4 +1,29 @@
 export { extractChangedFiles, filterDiffByPatterns, getDefaultBranch, getGitBranch, getGitBranchDiff, getGitDiff, getGitDiffStat, getGitLogSince, getGitStatus, getLatestTag, getTagDate, isFileDirty, resolveGitRoot, } from '@mmnto/totem';
+/**
+ * Check if `base` is an ancestor of `head` (or HEAD if omitted).
+ * Returns true if `git merge-base --is-ancestor` exits 0.
+ */
+export declare function isAncestor(cwd: string, base: string, head?: string): boolean;
+/**
+ * Get shortstat between two refs. Returns parsed line counts.
+ */
+export declare function getShortstat(cwd: string, base: string, head?: string): {
+    files: number;
+    insertions: number;
+    deletions: number;
+};
+/**
+ * Get file statuses between two refs. Returns array of { status, file }.
+ * Status is 'A' (added), 'M' (modified), 'D' (deleted), etc.
+ */
+export declare function getNameStatus(cwd: string, base: string, head?: string): Array<{
+    status: string;
+    file: string;
+}>;
+/**
+ * Get the diff between two refs.
+ */
+export declare function getDiffBetween(cwd: string, base: string, head?: string): string;
 export interface DiffForReviewOptions {
     staged?: boolean;
 }

package/dist/git.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,cAAc,EACd,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,WAAW,EACX,cAAc,GACf,MAAM,cAAc,CAAC;AAItB,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,oBAAoB,EAC7B,MAAM,EAAE,mBAAmB,EAC3B,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CA8BrC"}
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,cAAc,EACd,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,WAAW,EACX,cAAc,GACf,MAAM,cAAc,CAAC;AAMtB;;;GAGG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAO5E;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,GACZ;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAU1D;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,GACZ,KAAK,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAazC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAM/E;AAID,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,oBAAoB,EAC7B,MAAM,EAAE,mBAAmB,EAC3B,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CA8BrC"}

package/dist/git.js

@@ -1,5 +1,65 @@
 // Pure git utilities — delegated to core, re-exported for backward compatibility
 export { extractChangedFiles, filterDiffByPatterns, getDefaultBranch, getGitBranch, getGitBranchDiff, getGitDiff, getGitDiffStat, getGitLogSince, getGitStatus, getLatestTag, getTagDate, isFileDirty, resolveGitRoot, } from '@mmnto/totem';
+import { safeExec } from '@mmnto/totem';
+// ─── Incremental shield helpers (#1010) ─────────────────
+/**
+ * Check if `base` is an ancestor of `head` (or HEAD if omitted).
+ * Returns true if `git merge-base --is-ancestor` exits 0.
+ */
+export function isAncestor(cwd, base, head) {
+    try {
+        safeExec('git', ['merge-base', '--is-ancestor', base, head ?? 'HEAD'], { cwd });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Get shortstat between two refs. Returns parsed line counts.
+ */
+export function getShortstat(cwd, base, head) {
+    try {
+        const output = safeExec('git', ['diff', '--shortstat', base, head ?? 'HEAD'], { cwd });
+        const files = parseInt(output.match(/(\d+) file/)?.[1] ?? '0', 10);
+        const insertions = parseInt(output.match(/(\d+) insertion/)?.[1] ?? '0', 10);
+        const deletions = parseInt(output.match(/(\d+) deletion/)?.[1] ?? '0', 10);
+        return { files, insertions, deletions };
+    }
+    catch {
+        return { files: 0, insertions: 0, deletions: 0 };
+    }
+}
+/**
+ * Get file statuses between two refs. Returns array of { status, file }.
+ * Status is 'A' (added), 'M' (modified), 'D' (deleted), etc.
+ */
+export function getNameStatus(cwd, base, head) {
+    try {
+        const output = safeExec('git', ['diff', '--name-status', base, head ?? 'HEAD'], { cwd });
+        return output
+            .split('\n')
+            .filter(Boolean)
+            .map((line) => {
+            const [status, ...rest] = line.split('\t');
+            return { status: status ?? '', file: rest.join('\t') };
+        });
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Get the diff between two refs.
+ */
+export function getDiffBetween(cwd, base, head) {
+    try {
+        return safeExec('git', ['diff', base, head ?? 'HEAD'], { cwd, maxBuffer: 10 * 1024 * 1024 });
+    }
+    catch {
+        return '';
+    }
+}
 /**
  * Shared diff-fetching logic used by both `shield` and `lint` commands.
  *

package/dist/git.js.map

@@ -1 +1 @@
-{"version":3,"file":"git.js","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,cAAc,EACd,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,WAAW,EACX,cAAc,GACf,MAAM,cAAc,CAAC;AAkBtB;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAA6B,EAC7B,MAA2B,EAC3B,GAAW,EACX,GAAW;IAEX,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,EACJ,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,GACX,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAEjC,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/C,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,UAAU,CAAC,CAAC;IACjF,IAAI,IAAI,GAAG,oBAAoB,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;IAElE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACnC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,qDAAqD,IAAI,aAAa,CAAC,CAAC;QACrF,IAAI,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,yCAAyC,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC/C,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,YAAY,CAAC,MAAM,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEpF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AAChC,CAAC"}
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,cAAc,EACd,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,WAAW,EACX,cAAc,GACf,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,2DAA2D;AAE3D;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,IAAY,EAAE,IAAa;IACjE,IAAI,CAAC;QACH,QAAQ,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,GAAW,EACX,IAAY,EACZ,IAAa;IAEb,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7E,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAC3E,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACnD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,IAAY,EACZ,IAAa;IAEb,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACzF,OAAO,MAAM;aACV,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,IAAY,EAAE,IAAa;IACrE,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAkBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAA6B,EAC7B,MAA2B,EAC3B,GAAW,EACX,GAAW;IAEX,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,EACJ,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,GACX,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAEjC,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/C,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,UAAU,CAAC,CAAC;IACjF,IAAI,IAAI,GAAG,oBAAoB,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;IAElE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACnC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,qDAAqD,IAAI,aAAa,CAAC,CAAC;QACrF,IAAI,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,yCAAyC,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC/C,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,YAAY,CAAC,MAAM,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEpF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AAChC,CAAC"}