@mstar-harness/engine 3.6.0-alpha.3 → 3.6.0

package/dist/audit.js

@@ -1368,19 +1368,19 @@ function planFileRel(outDir, planFile) {
   return planFile;
 }
 export {
-  validateAuditStatusBlocks,
-  supplyChainChecks,
-  scanSecrets,
-  scaffoldAuditPlan,
-  redactSecrets,
-  promoteAuditPlans,
-  WHOLE_MATCH_PATTERNS,
-  VALUE_PATTERNS,
-  NEVER_COMMIT_FILENAMES,
-  CI_IAC_LEAK_SHAPES,
-  AUDIT_RISKS,
-  AUDIT_PRIORITIES,
-  AUDIT_EFFORTS,
+  AUDIT_CATEGORIES,
   AUDIT_CONFIDENCES,
-  AUDIT_CATEGORIES
+  AUDIT_EFFORTS,
+  AUDIT_PRIORITIES,
+  AUDIT_RISKS,
+  CI_IAC_LEAK_SHAPES,
+  NEVER_COMMIT_FILENAMES,
+  VALUE_PATTERNS,
+  WHOLE_MATCH_PATTERNS,
+  promoteAuditPlans,
+  redactSecrets,
+  scaffoldAuditPlan,
+  scanSecrets,
+  supplyChainChecks,
+  validateAuditStatusBlocks
 };

package/dist/engine.js

@@ -5905,6 +5905,9 @@ function prReviewSeatPrompt(opts) {
   if (!isAbsolute9(worktreePath)) {
     throw new TypeError(`prReviewSeatPrompt: worktreePath must be an absolute path - got ${JSON.stringify(opts.worktreePath)}`);
   }
+  if (opts.diffFile !== undefined && opts.diffFile !== "" && !isAbsolute9(opts.diffFile)) {
+    throw new TypeError(`prReviewSeatPrompt: diffFile must be an absolute path - got ${JSON.stringify(opts.diffFile)}`);
+  }
   const slug = `${domain}-${seat}`;
   const lines = [];
   lines.push(`# PR review audit seat — Stage ${opts.stage}${opts.securitySeat === true ? " (security)" : ""}`);
@@ -5930,6 +5933,9 @@ function prReviewSeatPrompt(opts) {
   const sections = opts.stage === 1 ? tier === "quick" ? "Scoping, Evidence rules" : "Review pipeline, Worktree isolation, Scoping, Evidence rules" : "Merge class, Attack and vet, Evidence rules, Sizing & change shape";
   lines.push(`1. \`${prReviewRef}\` — read at least these sections: ${sections}.`);
   lines.push(`2. The review worktree: \`${worktreePath}\` — your ONLY working directory this session; read-only (no edits, no fixes, no stash, no commits, no posts).`);
+  if (opts.diffFile) {
+    lines.push(`- Read the pinned diff snapshot FIRST: \`${opts.diffFile}\` — it is the review's diff basis (already computed at setup); read it before opening files.`);
+  }
   if (opts.stage === 2) {
     lines.push(`3. \`${join15(skillRoot, "references", "finding-format.md")}\` — the template every finding follows.`);
     if (opts.securitySeat === true) {
@@ -6102,174 +6108,175 @@ function resolvePrReviewTier(input) {
   return "default";
 }
 export {
-  writeWorkflowSnapshot,
-  writeJson,
-  withStatusWriteLock,
-  verifyPlanExecutionLease,
-  validateWorkflowSnapshot,
-  validateWorkflowEntry,
-  validateStatusV2,
-  validateStatus,
-  validateSchemaYaml,
-  validateRoleMapping,
-  validateRoadmap,
-  validateResidual,
-  validateProjectRegister,
-  validatePrReviewReport,
-  validatePlanRow,
-  validateMstarReviewV1,
-  validateIntegrationMergeLease,
-  validateGitignore,
-  validateFindingDoc,
-  validateExecutionLease,
-  validateDesignTokenFrontmatter,
-  validateCompassFrontmatter,
-  validateAuditStatusBlocks,
-  validateAssignmentFields,
-  unregisterWorkflow,
-  techDebtRollup,
-  taskReportExists,
-  taskBrief,
-  synthesizeReview,
-  supplyChainChecks,
-  stripFrontmatter,
-  singleReviewSnapshot,
-  setArtifactStore,
-  sddWorkspace,
-  scopeGuard,
-  scanSecrets,
-  scaffoldHarness,
-  scaffoldAuditPlan,
-  sameHolderResume,
-  reviewPackage,
-  resolveWorkflowDir,
-  resolveSpecsDir,
-  resolveSkillRoot,
-  resolveSddDir,
-  resolveScaffoldDirs,
-  resolveRepoEnforcement,
-  resolveProjectRoot,
-  resolveProjectDir,
-  resolvePrReviewTier,
-  resolvePlanDir,
-  resolveMstarcEnforcement,
-  resolveKnowledgeDir,
-  resolveIterationDir,
-  resolveHarnessDir,
-  resolveCompassEnforcement,
-  resolveAssetPath,
-  resolveArtifactPath,
-  releaseLease,
-  registerWorkflow,
-  referenceExists,
-  readProgressLedger,
-  readJson,
-  readHarnessVersion,
-  pushCadenceProbe,
-  promoteAuditPlans,
-  preflightChangeset,
-  prReviewSizing,
-  prReviewSeatPrompt,
-  prReviewReportPath,
-  planReviewPost,
-  planQualityBar,
-  planExecutionLeaseLocations,
-  pickReviewBranchName,
-  parseMstarc,
-  parseEnforcementFlag,
-  parseDesignFrontmatter,
-  parseCompassFrontmatterText,
-  parseCompassFrontmatter,
-  parseBranchPolicyDirectOnBranch,
-  parseAssignmentFields,
-  parseAssignmentBranchForms,
-  normalizeSeverity,
-  migrateHarnessTree,
-  loadStoreModule,
-  listProjectReferenceFiles,
-  lintStrategySections,
-  lintSkillFrontmatter,
-  lintLoadOrder,
-  lintSkillFrontmatter as lintFrontmatter,
-  lintFiveQuestion,
-  l2PreDispatchCheck,
-  l1PreDispatchCheck,
-  isReadOnlyAssignmentRole,
-  implementerSessionStickyRules,
-  getArtifactStore,
-  findingsCleanupGate,
-  findTemporaryMarkers,
-  findSimplifyMarkers,
-  findMstarc,
-  findEphemeralCitations,
-  executionModeToN,
-  evaluatePhaseGate,
-  emitGitignoreSnippet,
-  detectHost,
-  detectHarnessKind,
-  createFsStore,
-  computePrTally,
-  compoundRefreshScope,
-  composeDispatchGate,
-  completenessLevel,
-  closeProjectRegisterEntry,
-  claimLease,
-  canSteal,
-  assignmentHeaderRegion,
-  assertTriIdentity,
-  assertSddTddTriple,
-  assertQcAlignment,
-  assertPlanWritingPath,
-  assertLightDarkParity,
-  assertIndexRows,
-  assertIndexRowObligations,
-  assertFsStorePath,
-  assertDefaultBranchProtected,
-  assertControlVsFeaturePath,
-  assertBranchAlignment,
-  assertBaseSha,
-  applyMigratePlan,
-  applyEnforcement,
-  appendProjectRegisterEntries,
-  antiRecursionPrecheck,
-  _DEFAULT_PROJECT,
-  WORKFLOW_TERMINAL_STATUSES,
-  WORKFLOW_SNAPSHOT_FILE,
-  WORKFLOW_LIFECYCLE_TYPES,
-  WORKFLOW_LIFECYCLE_STATUSES,
-  SddScriptError,
-  SHARED_FAMILIES,
-  SEVERITY_ORDER,
-  RUNTIME_HEADING_ALIASES,
-  ROLE_MAPPING,
-  ROADMAP_STATUSES,
-  REVIEW_EMOJI,
-  QC_REVIEWER_PARAMS,
-  PR_VERDICTS,
-  PROJECT_ROADMAP_FILE,
-  PROJECT_REGISTER_FILE,
-  PROJECT_REFERENCES_DIR,
-  NOTES_LEDGER_FILE,
-  MSTARC_WORKFLOW_DIR_KEY,
-  MSTARC_SECTION,
-  MSTARC_PROJECT_DIR_KEY,
-  MSTARC_HARNESS_DIR_KEY,
-  MSTARC_FILE,
-  MIGRATE_STATUS_FILE,
-  MERGE_CLASSES,
-  KNOWLEDGE_SEVERITIES,
-  KNOWLEDGE_RESOLUTION_TYPES,
-  KNOWLEDGE_REQUIRED_FIELDS,
-  KNOWLEDGE_PROBLEM_TYPES,
-  KNOWLEDGE_KNOWLEDGE_PROBLEM_TYPES,
-  KNOWLEDGE_CATEGORY_MAP,
-  KNOWLEDGE_BUG_PROBLEM_TYPES,
-  FIVE_QUESTION_SECTIONS,
-  DEV_TRACK_PARAMS,
-  AUDIT_RISKS,
-  AUDIT_PRIORITIES,
-  AUDIT_EFFORTS,
-  AUDIT_CONFIDENCES,
+  ARCHIVED_STATUS_V1_FILE,
   AUDIT_CATEGORIES,
-  ARCHIVED_STATUS_V1_FILE
+  AUDIT_CONFIDENCES,
+  AUDIT_EFFORTS,
+  AUDIT_PRIORITIES,
+  AUDIT_RISKS,
+  DEV_TRACK_PARAMS,
+  FIVE_QUESTION_SECTIONS,
+  GIT_CAPTURE_MAX_BYTES,
+  KNOWLEDGE_BUG_PROBLEM_TYPES,
+  KNOWLEDGE_CATEGORY_MAP,
+  KNOWLEDGE_KNOWLEDGE_PROBLEM_TYPES,
+  KNOWLEDGE_PROBLEM_TYPES,
+  KNOWLEDGE_REQUIRED_FIELDS,
+  KNOWLEDGE_RESOLUTION_TYPES,
+  KNOWLEDGE_SEVERITIES,
+  MERGE_CLASSES,
+  MIGRATE_STATUS_FILE,
+  MSTARC_FILE,
+  MSTARC_HARNESS_DIR_KEY,
+  MSTARC_PROJECT_DIR_KEY,
+  MSTARC_SECTION,
+  MSTARC_WORKFLOW_DIR_KEY,
+  NOTES_LEDGER_FILE,
+  PROJECT_REFERENCES_DIR,
+  PROJECT_REGISTER_FILE,
+  PROJECT_ROADMAP_FILE,
+  PR_VERDICTS,
+  QC_REVIEWER_PARAMS,
+  REVIEW_EMOJI,
+  ROADMAP_STATUSES,
+  ROLE_MAPPING,
+  RUNTIME_HEADING_ALIASES,
+  SEVERITY_ORDER,
+  SHARED_FAMILIES,
+  SddScriptError,
+  WORKFLOW_LIFECYCLE_STATUSES,
+  WORKFLOW_LIFECYCLE_TYPES,
+  WORKFLOW_SNAPSHOT_FILE,
+  WORKFLOW_TERMINAL_STATUSES,
+  _DEFAULT_PROJECT,
+  antiRecursionPrecheck,
+  appendProjectRegisterEntries,
+  applyEnforcement,
+  applyMigratePlan,
+  assertBaseSha,
+  assertBranchAlignment,
+  assertControlVsFeaturePath,
+  assertDefaultBranchProtected,
+  assertFsStorePath,
+  assertIndexRowObligations,
+  assertIndexRows,
+  assertLightDarkParity,
+  assertPlanWritingPath,
+  assertQcAlignment,
+  assertSddTddTriple,
+  assertTriIdentity,
+  assignmentHeaderRegion,
+  canSteal,
+  claimLease,
+  closeProjectRegisterEntry,
+  completenessLevel,
+  composeDispatchGate,
+  compoundRefreshScope,
+  computePrTally,
+  createFsStore,
+  detectHarnessKind,
+  detectHost,
+  emitGitignoreSnippet,
+  evaluatePhaseGate,
+  executionModeToN,
+  findEphemeralCitations,
+  findMstarc,
+  findSimplifyMarkers,
+  findTemporaryMarkers,
+  findingsCleanupGate,
+  getArtifactStore,
+  implementerSessionStickyRules,
+  isReadOnlyAssignmentRole,
+  l1PreDispatchCheck,
+  l2PreDispatchCheck,
+  lintFiveQuestion,
+  lintSkillFrontmatter as lintFrontmatter,
+  lintLoadOrder,
+  lintSkillFrontmatter,
+  lintStrategySections,
+  listProjectReferenceFiles,
+  loadStoreModule,
+  migrateHarnessTree,
+  normalizeSeverity,
+  parseAssignmentBranchForms,
+  parseAssignmentFields,
+  parseBranchPolicyDirectOnBranch,
+  parseCompassFrontmatter,
+  parseCompassFrontmatterText,
+  parseDesignFrontmatter,
+  parseEnforcementFlag,
+  parseMstarc,
+  pickReviewBranchName,
+  planExecutionLeaseLocations,
+  planQualityBar,
+  planReviewPost,
+  prReviewReportPath,
+  prReviewSeatPrompt,
+  prReviewSizing,
+  preflightChangeset,
+  promoteAuditPlans,
+  pushCadenceProbe,
+  readHarnessVersion,
+  readJson,
+  readProgressLedger,
+  referenceExists,
+  registerWorkflow,
+  releaseLease,
+  resolveArtifactPath,
+  resolveAssetPath,
+  resolveCompassEnforcement,
+  resolveHarnessDir,
+  resolveIterationDir,
+  resolveKnowledgeDir,
+  resolveMstarcEnforcement,
+  resolvePlanDir,
+  resolvePrReviewTier,
+  resolveProjectDir,
+  resolveProjectRoot,
+  resolveRepoEnforcement,
+  resolveScaffoldDirs,
+  resolveSddDir,
+  resolveSkillRoot,
+  resolveSpecsDir,
+  resolveWorkflowDir,
+  reviewPackage,
+  sameHolderResume,
+  scaffoldAuditPlan,
+  scaffoldHarness,
+  scanSecrets,
+  scopeGuard,
+  sddWorkspace,
+  setArtifactStore,
+  singleReviewSnapshot,
+  stripFrontmatter,
+  supplyChainChecks,
+  synthesizeReview,
+  taskBrief,
+  taskReportExists,
+  techDebtRollup,
+  unregisterWorkflow,
+  validateAssignmentFields,
+  validateAuditStatusBlocks,
+  validateCompassFrontmatter,
+  validateDesignTokenFrontmatter,
+  validateExecutionLease,
+  validateFindingDoc,
+  validateGitignore,
+  validateIntegrationMergeLease,
+  validateMstarReviewV1,
+  validatePlanRow,
+  validatePrReviewReport,
+  validateProjectRegister,
+  validateResidual,
+  validateRoadmap,
+  validateRoleMapping,
+  validateSchemaYaml,
+  validateStatus,
+  validateStatusV2,
+  validateWorkflowEntry,
+  validateWorkflowSnapshot,
+  verifyPlanExecutionLease,
+  withStatusWriteLock,
+  writeJson,
+  writeWorkflowSnapshot
 };

package/dist/index.d.ts

@@ -40,7 +40,7 @@ export { antiRecursionPrecheck, assertDefaultBranchProtected, assertTriIdentity,
 export type { BranchProbeOptions, L1PreDispatchInput, L2PreDispatchInput, QcAlignmentAssignment, QcSnapshotAssignment, WorktreeTrack, } from "./worktree.js";
 export { assertBranchAlignment, assertControlVsFeaturePath, assertQcAlignment, l1PreDispatchCheck, l2PreDispatchCheck, singleReviewSnapshot, } from "./worktree.js";
 export type { ImplementerSessionLedger, ReviewPackageOptions, SddWorkspaceOptions, StickyRulesInput, StickyRulesResult, TaskBriefOptions, } from "./sdd.js";
-export { SddScriptError, assertBaseSha, implementerSessionStickyRules, readProgressLedger, reviewPackage, sddWorkspace, taskBrief, taskReportExists, } from "./sdd.js";
+export { GIT_CAPTURE_MAX_BYTES, SddScriptError, assertBaseSha, implementerSessionStickyRules, readProgressLedger, reviewPackage, sddWorkspace, taskBrief, taskReportExists, } from "./sdd.js";
 export type { CompassDoc, PhaseGateOptions, PhaseGateResult, PhaseTransition, } from "./iteration.js";
 export { assertIndexRowObligations, evaluatePhaseGate, parseCompassFrontmatter, parseCompassFrontmatterText, pushCadenceProbe, validateCompassFrontmatter, } from "./iteration.js";
 export type { AppendProjectRegisterEntriesOpts, CloseProjectRegisterEntryOpts, FindingsCleanupMode, ProjectRegisterDoc, ProjectRegisterEntry, RoadmapFrontmatter, RoadmapStatus, RoadmapValidation, TechDebtCheck, TechDebtRollup, TechDebtSummary, } from "./project.js";

package/dist/prreview.d.ts

@@ -314,6 +314,10 @@ export type PrReviewSeatPromptOptions = {
     decidedTradeoffs?: readonly string[];
     securitySeat?: boolean;
     tier?: PrReviewTier;
+    /** Absolute path to the pinned diff snapshot written by `worktree-setup`
+     * (review artifact beside the sidecar). Non-empty → the prompt gains a
+     * read-first ingredient line pointing at it. */
+    diffFile?: string;
 };
 /**
  * Generate the read-only audit-seat prompt for one Stage 1 collect or

package/dist/sdd.d.ts

@@ -27,6 +27,13 @@ export type ReviewPackageOptions = {
     sddDir?: string;
     cwd?: string;
 };
+/**
+ * Git capture ceiling for `gitOut` / `reviewPackage` (qc3 W-2): Node's
+ * default 1 MiB `maxBuffer` ENOBUFS'd on large review ranges. 64 MiB keeps
+ * realistic iteration-close ranges working while bounding memory; captures
+ * beyond that fail as SddScriptError via the CLI.
+ */
+export declare const GIT_CAPTURE_MAX_BYTES: number;
 /**
  * Resolve and ensure `{SDD_DIR}` = `{HARNESS_DIR}/sdd/<plan-id>/` (prints
  * the absolute path). Resolution order:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mstar-harness/engine",
-  "version": "3.6.0-alpha.3",
+  "version": "3.6.0",
   "description": "Morning Star Harness Workflow Engine — deterministic workflow enforcement library (path, status, lease, dispatch, sdd, iteration, lint gates).",
   "license": "MIT",
   "repository": {