@momentiq/dark-factory-cli 0.1.0-alpha.4

package/dist/trusted-surface/rebind.js

@@ -0,0 +1,154 @@
+import { existsSync, readFileSync, realpathSync } from "node:fs";
+import { isAbsolute, relative, resolve } from "node:path";
+import { changedFiles, commitDiff, commitMetadata, commitParent, commitStat, currentBranch, diffHash as diffHashFn, gitShowFile, resolveCommit, } from "../git.js";
+import { readQualityGateEvidence } from "../evidence/index.js";
+const DEFAULT_DIFF_BUDGET = 1_500_000;
+export async function buildReviewPacket(loaded, options = {}) {
+    const { config, repoRoot } = loaded;
+    const cwd = options.cwd ?? repoRoot;
+    const ref = options.ref ?? "HEAD";
+    const sha = await resolveCommit(ref, cwd);
+    const parent = await safeParent(sha, cwd);
+    const branch = await currentBranch(cwd);
+    const metadata = await commitMetadata(sha, cwd);
+    const range = parent ? `${parent}..${sha}` : sha;
+    const stat = await commitStat(parent, sha, cwd);
+    const fullDiff = await commitDiff(parent, sha, cwd);
+    const diff = fullDiff.length > DEFAULT_DIFF_BUDGET
+        ? `${fullDiff.slice(0, DEFAULT_DIFF_BUDGET)}\n... [diff truncated at ${DEFAULT_DIFF_BUDGET} bytes]\n`
+        : fullDiff;
+    const diffTruncated = fullDiff.length > DEFAULT_DIFF_BUDGET;
+    const hash = diffHashFn(fullDiff);
+    const files = await changedFiles(parent, sha, cwd, {
+        maxBytes: config.context.maxChangedFileBytes,
+        readContent: config.context.includeFullChangedFiles,
+    });
+    const guidanceFiles = options.trustedSurfaceRef !== undefined
+        ? await readGuidanceFilesFromRef(options.trustedSurfaceRef, config.context.guidanceFiles, cwd)
+        : readGuidanceFiles(repoRoot, config.context.guidanceFiles);
+    const promptFragments = options.trustedSurfaceRef !== undefined
+        ? await readGuidanceFilesFromRef(options.trustedSurfaceRef, config.context.promptFragments, cwd)
+        : readGuidanceFiles(repoRoot, config.context.promptFragments);
+    const validation = await readValidationEvidence(loaded, sha);
+    return {
+        repoRoot,
+        branch,
+        commit: metadata,
+        range,
+        diffHash: hash,
+        stat,
+        diff,
+        diffTruncated,
+        changedFiles: files,
+        guidanceFiles,
+        promptFragments,
+        validation,
+    };
+}
+async function safeParent(sha, cwd) {
+    try {
+        return await commitParent(sha, cwd);
+    }
+    catch {
+        return "";
+    }
+}
+function readGuidanceFiles(repoRoot, paths) {
+    return readContainedFiles(repoRoot, paths);
+}
+// Shared by `context.ts` and `evals.ts` — both build packets that get sent to
+// the Cursor critic prompt (an external API call). `loadAgentReviewConfig`
+// reads `.agent-review/config.json` from HEAD, so untrusted commits can list
+// `/etc/passwd`, `../../.ssh/id_rsa`, or a tracked symlink pointing outside
+// the repo, and exfiltrate workstation files via the prompt. Every load path
+// must go through this helper.
+export function readContainedFiles(repoRoot, paths) {
+    const out = [];
+    for (const rel of paths) {
+        assertContainedPath(repoRoot, rel);
+        const absolute = resolve(repoRoot, rel);
+        if (!existsSync(absolute))
+            continue;
+        // realpath resolves symlinks; if the real target escapes the repo, refuse.
+        // Without this check, a tracked symlink `leak -> /Users/x/.ssh/id_rsa`
+        // would pass the lexical guard above and still leak the target.
+        const realAbsolute = realpathSync(absolute);
+        const realInside = relative(repoRoot, realAbsolute);
+        if (realInside.startsWith("..") || isAbsolute(realInside)) {
+            throw new Error(`agent-review config path resolves (via symlink) outside repo root: ${rel} → ${realAbsolute}`);
+        }
+        const content = readFileSync(realAbsolute, "utf8");
+        out.push({ path: rel, content });
+    }
+    return out;
+}
+// Read guidance files from a specific git ref. Used when the policy
+// baseline (`policy-baseline.ts`) detected self-modification of trusted
+// policy surface — the parent's contents must apply, not the working tree's
+// (which may have been tampered with). Missing files at the ref are treated
+// the same as missing files in the working tree (skipped, not fatal).
+//
+// Path containment is still checked lexically — absolute paths and `..`
+// traversal are rejected even when reading from a ref, since the path comes
+// from the (parent's) config file. Symlink resolution does not apply
+// because git tracks symlinks as their target string, not the resolved
+// path; `git show ref:path` returns the file's literal blob contents.
+async function readGuidanceFilesFromRef(ref, paths, cwd) {
+    const out = [];
+    for (const rel of paths) {
+        if (isAbsolute(rel)) {
+            throw new Error(`agent-review config path must be repo-relative, got absolute: ${rel}`);
+        }
+        if (rel.split("/").some((segment) => segment === "..")) {
+            throw new Error(`agent-review config path escapes repo root: ${rel}`);
+        }
+        const content = await gitShowFile(ref, rel, cwd);
+        if (content === null)
+            continue;
+        out.push({ path: rel, content });
+    }
+    return out;
+}
+// Lexical containment check: rejects absolute paths and `..` traversal.
+// Pair with the realpath check in `readContainedFiles` to also catch
+// symlinks that resolve outside the repo.
+function assertContainedPath(repoRoot, rel) {
+    if (isAbsolute(rel)) {
+        throw new Error(`agent-review config path must be repo-relative, got absolute: ${rel}`);
+    }
+    const resolved = resolve(repoRoot, rel);
+    const inside = relative(repoRoot, resolved);
+    if (inside.startsWith("..") || isAbsolute(inside)) {
+        throw new Error(`agent-review config path escapes repo root: ${rel} → ${resolved}`);
+    }
+}
+async function readValidationEvidence(loaded, sha) {
+    const required = [...loaded.config.validation.requiredQualityGates];
+    const optional = [...loaded.config.validation.optionalQualityGates];
+    const result = {
+        requiredQualityGates: required,
+        optionalQualityGates: optional,
+        evidence: [],
+        missing: [...required],
+        stale: false,
+    };
+    // Delegate to `readQualityGateEvidence` which implements the per-SHA-first
+    // read path with legacy `latest.json` fallback (cycle 318.2 canonical
+    // layout). Prior to issue #1370, this function only read the legacy
+    // `latest.json` directly — so any time that file pointed at a different
+    // commit (multi-commit gate runs, `agent-review-test` test-pollution, etc.)
+    // the packet would falsely report `qualityGateResults: []` and
+    // `qualityGatesMissing: [<all required gates>]` even when valid per-SHA
+    // evidence existed on disk.
+    const read = await readQualityGateEvidence(loaded, sha);
+    if (!read.evidence)
+        return result;
+    if (read.stale) {
+        result.stale = true;
+        return result;
+    }
+    result.evidence = read.evidence.results;
+    result.missing = required.filter((r) => !read.evidence.results.some((e) => e.command === r));
+    return result;
+}
+//# sourceMappingURL=rebind.js.map

package/dist/trusted-surface/rebind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rebind.js","sourceRoot":"","sources":["../../src/trusted-surface/rebind.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAG1D,OAAO,EACL,YAAY,EACZ,UAAU,EACV,cAAc,EACd,YAAY,EACZ,UAAU,EACV,aAAa,EACb,QAAQ,IAAI,UAAU,EACtB,WAAW,EACX,aAAa,GACd,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAmB/D,MAAM,mBAAmB,GAAG,SAAS,CAAC;AAEtC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAoB,EACpB,UAA8B,EAAE;IAEhC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,QAAQ,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC;IAElC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAEjD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,IAAI,GACR,QAAQ,CAAC,MAAM,GAAG,mBAAmB;QACnC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,4BAA4B,mBAAmB,WAAW;QACrG,CAAC,CAAC,QAAQ,CAAC;IACf,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,GAAG,mBAAmB,CAAC;IAC5D,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAElC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE;QACjD,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,mBAAmB;QAC5C,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,uBAAuB;KACpD,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,OAAO,CAAC,iBAAiB,KAAK,SAAS;QAC3D,CAAC,CAAC,MAAM,wBAAwB,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;QAC9F,CAAC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,OAAO,CAAC,iBAAiB,KAAK,SAAS;QAC7D,CAAC,CAAC,MAAM,wBAAwB,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;QAChG,CAAC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE7D,OAAO;QACL,QAAQ;QACR,MAAM;QACN,MAAM,EAAE,QAAQ;QAChB,KAAK;QACL,QAAQ,EAAE,IAAI;QACd,IAAI;QACJ,IAAI;QACJ,aAAa;QACb,YAAY,EAAE,KAAK;QACnB,aAAa;QACb,eAAe;QACf,UAAU;KACX,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,GAAW;IAChD,IAAI,CAAC;QACH,OAAO,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,KAAe;IAC1D,OAAO,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,+BAA+B;AAC/B,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,KAAe;IAClE,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QACpC,2EAA2E;QAC3E,uEAAuE;QACvE,gEAAgE;QAChE,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACpD,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CACb,sEAAsE,GAAG,MAAM,YAAY,EAAE,CAC9F,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oEAAoE;AACpE,wEAAwE;AACxE,4EAA4E;AAC5E,4EAA4E;AAC5E,sEAAsE;AACtE,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,qEAAqE;AACrE,uEAAuE;AACvE,sEAAsE;AACtE,KAAK,UAAU,wBAAwB,CACrC,GAAW,EACX,KAAe,EACf,GAAW;IAEX,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,iEAAiE,GAAG,EAAE,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,+CAA+C,GAAG,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS;QAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wEAAwE;AACxE,qEAAqE;AACrE,0CAA0C;AAC1C,SAAS,mBAAmB,CAAC,QAAgB,EAAE,GAAW;IACxD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,iEAAiE,GAAG,EAAE,CACvE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,+CAA+C,GAAG,MAAM,QAAQ,EAAE,CACnE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,MAAoB,EACpB,GAAW;IAEX,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACpE,MAAM,MAAM,GAA2B;QACrC,oBAAoB,EAAE,QAAQ;QAC9B,oBAAoB,EAAE,QAAQ;QAC9B,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC;QACtB,KAAK,EAAE,KAAK;KACb,CAAC;IAEF,2EAA2E;IAC3E,sEAAsE;IACtE,oEAAoE;IACpE,wEAAwE;IACxE,4EAA4E;IAC5E,+DAA+D;IAC/D,wEAAwE;IACxE,4BAA4B;IAC5B,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;IACxC,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAC5D,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -0,0 +1,78 @@
+{
+  "name": "@momentiq/dark-factory-cli",
+  "version": "0.1.0-alpha.4",
+  "description": "Dark Factory OSS CLI — multi-vendor adversarial critic orchestration (Cursor, Codex, Gemini, Grok) with min-complete-quorum aggregation and trusted-surface rebind",
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./adapters": {
+      "types": "./dist/adapters/index.d.ts",
+      "import": "./dist/adapters/index.js"
+    },
+    "./policy": {
+      "types": "./dist/policy/index.d.ts",
+      "import": "./dist/policy/index.js"
+    },
+    "./trusted-surface": {
+      "types": "./dist/trusted-surface/index.d.ts",
+      "import": "./dist/trusted-surface/index.js"
+    },
+    "./evidence": {
+      "types": "./dist/evidence/index.d.ts",
+      "import": "./dist/evidence/index.js"
+    },
+    "./cycle-doc-validator": {
+      "types": "./dist/cycle-doc-validator/index.d.ts",
+      "import": "./dist/cycle-doc-validator/index.js"
+    },
+    "./branch-protection": {
+      "types": "./dist/branch-protection/index.d.ts",
+      "import": "./dist/branch-protection/index.js"
+    },
+    "./cycle-tracker-sync": {
+      "types": "./dist/cycle-tracker-sync/index.d.ts",
+      "import": "./dist/cycle-tracker-sync/index.js"
+    }
+  },
+  "bin": {
+    "df": "./dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json && node scripts/copy-assets.mjs",
+    "pretest": "npm run build",
+    "test": "vitest run",
+    "test:python": "python3 -m pytest tests/cycle-doc-validator tests/branch-protection tests/cycle-tracker-sync -q",
+    "test:all": "npm run test && npm run test:python",
+    "test:watch": "vitest",
+    "type-check": "tsc -p tsconfig.json --noEmit"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "@cursor/sdk": "^1.0.12",
+    "@google/genai": "^2.2.0",
+    "@momentiq/dark-factory-schemas": "*",
+    "@openai/codex-sdk": "^0.130.0",
+    "openai": "^6.37.0",
+    "zod": "^3.23.0",
+    "zod-to-json-schema": "^3.25.2"
+  },
+  "devDependencies": {
+    "@types/node": "^20.11.0",
+    "@vitest/coverage-v8": "^2.1.9",
+    "typescript": "^5.5.0",
+    "vitest": "^2.1.0"
+  }
+}