@neurcode-ai/cli 0.9.63 → 0.9.64

package/dist/patch-engine/rollback.js

@@ -0,0 +1,275 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.persistPatchRollbackSnapshot = persistPatchRollbackSnapshot;
+exports.applyPatchRollback = applyPatchRollback;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const transaction_1 = require("./transaction");
+const ROLLBACK_SCHEMA_VERSION = 'neurcode.patch-rollback.v1';
+const DEFAULT_RETENTION = 200;
+function sanitizeSnapshotId(value) {
+    const trimmed = value.trim();
+    if (!trimmed)
+        return null;
+    const base = (0, node_path_1.basename)(trimmed);
+    if (base !== trimmed)
+        return null;
+    if (!/^[A-Za-z0-9._-]+$/.test(base))
+        return null;
+    return base;
+}
+function resolveRollbackPaths(cwd) {
+    const rootDir = (0, node_path_1.resolve)(cwd, '.neurcode/patch-rollbacks');
+    return {
+        rootDir,
+        metadataDir: (0, node_path_1.join)(rootDir, 'metadata'),
+        contentDir: (0, node_path_1.join)(rootDir, 'content'),
+    };
+}
+function ensureRollbackPaths(paths) {
+    (0, node_fs_1.mkdirSync)(paths.metadataDir, { recursive: true });
+    (0, node_fs_1.mkdirSync)(paths.contentDir, { recursive: true });
+}
+function metadataFilePath(paths, snapshotId) {
+    return (0, node_path_1.join)(paths.metadataDir, `${snapshotId}.json`);
+}
+function contentFilePath(paths, snapshotId) {
+    return (0, node_path_1.join)(paths.contentDir, `${snapshotId}.before`);
+}
+function parseSnapshotRecord(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+            return null;
+        const record = parsed;
+        if (record.schemaVersion !== ROLLBACK_SCHEMA_VERSION)
+            return null;
+        if (typeof record.snapshotId !== 'string' || record.snapshotId.trim().length === 0)
+            return null;
+        if (typeof record.transactionId !== 'string' || record.transactionId.trim().length === 0)
+            return null;
+        if (typeof record.transactionHash !== 'string' || record.transactionHash.trim().length === 0)
+            return null;
+        if (typeof record.file !== 'string' || record.file.trim().length === 0)
+            return null;
+        if (typeof record.createdAt !== 'string' || record.createdAt.trim().length === 0)
+            return null;
+        if (record.beforeHash !== null && typeof record.beforeHash !== 'string')
+            return null;
+        if (record.afterHash !== null && typeof record.afterHash !== 'string')
+            return null;
+        if (record.diffHash !== null && typeof record.diffHash !== 'string')
+            return null;
+        if (record.patchHash !== null && typeof record.patchHash !== 'string')
+            return null;
+        if (typeof record.beforeContentPath !== 'string' || record.beforeContentPath.trim().length === 0)
+            return null;
+        return record;
+    }
+    catch {
+        return null;
+    }
+}
+function pruneSnapshots(paths, keepLatest = DEFAULT_RETENTION) {
+    if (!(0, node_fs_1.existsSync)(paths.metadataDir))
+        return;
+    const files = (0, node_fs_1.readdirSync)(paths.metadataDir)
+        .filter((entry) => entry.endsWith('.json'))
+        .map((name) => ({
+        name,
+        path: (0, node_path_1.join)(paths.metadataDir, name),
+        mtimeMs: (() => {
+            try {
+                return (0, node_fs_1.statSync)((0, node_path_1.join)(paths.metadataDir, name)).mtimeMs;
+            }
+            catch {
+                return 0;
+            }
+        })(),
+    }))
+        .sort((left, right) => right.mtimeMs - left.mtimeMs);
+    if (files.length <= keepLatest)
+        return;
+    const stale = files.slice(keepLatest);
+    for (const entry of stale) {
+        try {
+            const parsed = parseSnapshotRecord((0, node_fs_1.readFileSync)(entry.path, 'utf-8'));
+            if (parsed) {
+                const contentPath = (0, node_path_1.join)(paths.rootDir, parsed.beforeContentPath);
+                (0, node_fs_1.rmSync)(contentPath, { force: true });
+            }
+        }
+        catch {
+            // best-effort retention prune
+        }
+        (0, node_fs_1.rmSync)(entry.path, { force: true });
+    }
+}
+function persistPatchRollbackSnapshot(input) {
+    const snapshotId = sanitizeSnapshotId(input.receipt.rollbackSnapshotId || input.receipt.transactionId);
+    if (!snapshotId) {
+        return { saved: false, snapshotId: null, reason: 'invalid_snapshot_id' };
+    }
+    if (!input.receipt.beforeHash || !input.receipt.afterHash) {
+        return { saved: false, snapshotId, reason: 'missing_receipt_hashes' };
+    }
+    if ((0, transaction_1.hashPatchValue)(input.beforeContent) !== input.receipt.beforeHash) {
+        return { saved: false, snapshotId, reason: 'before_hash_mismatch' };
+    }
+    const paths = resolveRollbackPaths(input.cwd);
+    ensureRollbackPaths(paths);
+    const relativeContentPath = `content/${snapshotId}.before`;
+    const absoluteContentPath = contentFilePath(paths, snapshotId);
+    const absoluteMetadataPath = metadataFilePath(paths, snapshotId);
+    const record = {
+        schemaVersion: ROLLBACK_SCHEMA_VERSION,
+        snapshotId,
+        transactionId: input.receipt.transactionId,
+        transactionHash: input.receipt.transactionHash,
+        file: input.file,
+        createdAt: new Date().toISOString(),
+        beforeHash: input.receipt.beforeHash,
+        afterHash: input.receipt.afterHash,
+        diffHash: input.receipt.diffHash,
+        patchHash: input.receipt.patchHash,
+        beforeContentPath: relativeContentPath,
+    };
+    (0, node_fs_1.writeFileSync)(absoluteContentPath, input.beforeContent, { encoding: 'utf-8' });
+    (0, node_fs_1.writeFileSync)(absoluteMetadataPath, `${JSON.stringify(record, null, 2)}\n`, { encoding: 'utf-8' });
+    pruneSnapshots(paths, Number.isFinite(input.retention) ? Math.max(10, Math.floor(input.retention || DEFAULT_RETENTION)) : DEFAULT_RETENTION);
+    return { saved: true, snapshotId, reason: null };
+}
+function loadSnapshot(cwd, snapshotId) {
+    const sanitized = sanitizeSnapshotId(snapshotId);
+    if (!sanitized)
+        return null;
+    const paths = resolveRollbackPaths(cwd);
+    const metadataPath = metadataFilePath(paths, sanitized);
+    if (!(0, node_fs_1.existsSync)(metadataPath))
+        return null;
+    const parsed = parseSnapshotRecord((0, node_fs_1.readFileSync)(metadataPath, 'utf-8'));
+    if (!parsed)
+        return null;
+    const contentPath = (0, node_path_1.join)(paths.rootDir, parsed.beforeContentPath);
+    if (!(0, node_fs_1.existsSync)(contentPath))
+        return null;
+    const beforeContent = (0, node_fs_1.readFileSync)(contentPath, 'utf-8');
+    return { record: parsed, beforeContent };
+}
+function applyPatchRollback(input) {
+    const loaded = loadSnapshot(input.cwd, input.snapshotId);
+    if (!loaded) {
+        return {
+            success: false,
+            file: input.file || '',
+            snapshotId: input.snapshotId,
+            transactionId: input.snapshotId,
+            transactionHash: '',
+            status: 'rollback_rejected',
+            changed: false,
+            staleReason: 'rollback_snapshot_not_found',
+            staleDetails: null,
+            message: 'Rollback rejected: receipt snapshot not found.',
+        };
+    }
+    const { record, beforeContent } = loaded;
+    if (input.file && input.file !== record.file) {
+        return {
+            success: false,
+            file: input.file,
+            snapshotId: record.snapshotId,
+            transactionId: record.transactionId,
+            transactionHash: record.transactionHash,
+            status: 'rollback_rejected',
+            changed: false,
+            staleReason: 'rollback_target_mismatch',
+            staleDetails: {
+                requestedFile: input.file,
+                receiptFile: record.file,
+            },
+            message: 'Rollback rejected: requested file does not match receipt lineage.',
+        };
+    }
+    const absoluteTarget = (0, node_path_1.resolve)(input.cwd, record.file);
+    if (!(0, node_fs_1.existsSync)(absoluteTarget)) {
+        return {
+            success: false,
+            file: record.file,
+            snapshotId: record.snapshotId,
+            transactionId: record.transactionId,
+            transactionHash: record.transactionHash,
+            status: 'rollback_stale',
+            changed: false,
+            staleReason: 'rollback_target_missing',
+            staleDetails: null,
+            message: 'Rollback rejected: target file is missing.',
+        };
+    }
+    const currentContent = (0, node_fs_1.readFileSync)(absoluteTarget, 'utf-8');
+    const currentHash = (0, transaction_1.hashPatchValue)(currentContent);
+    if (record.afterHash && currentHash !== record.afterHash) {
+        return {
+            success: false,
+            file: record.file,
+            snapshotId: record.snapshotId,
+            transactionId: record.transactionId,
+            transactionHash: record.transactionHash,
+            status: 'rollback_stale',
+            changed: false,
+            staleReason: 'filesystem_changed_since_patch',
+            staleDetails: {
+                expectedAfterHash: record.afterHash,
+                currentHash,
+            },
+            message: 'Rollback rejected: filesystem changed since patch was applied.',
+        };
+    }
+    const backupPath = `${absoluteTarget}.neurcode.rollback-backup.${Date.now()}.${process.pid}`;
+    try {
+        (0, node_fs_1.writeFileSync)(backupPath, currentContent, 'utf-8');
+        (0, node_fs_1.writeFileSync)(absoluteTarget, beforeContent, 'utf-8');
+        const verifyContent = (0, node_fs_1.readFileSync)(absoluteTarget, 'utf-8');
+        if (record.beforeHash && (0, transaction_1.hashPatchValue)(verifyContent) !== record.beforeHash) {
+            throw new Error('rollback_write_verification_failed');
+        }
+    }
+    catch (error) {
+        try {
+            if ((0, node_fs_1.existsSync)(backupPath)) {
+                (0, node_fs_1.writeFileSync)(absoluteTarget, (0, node_fs_1.readFileSync)(backupPath, 'utf-8'), 'utf-8');
+            }
+        }
+        catch {
+            // best-effort rollback restore
+        }
+        const message = error instanceof Error ? error.message : 'unknown_error';
+        return {
+            success: false,
+            file: record.file,
+            snapshotId: record.snapshotId,
+            transactionId: record.transactionId,
+            transactionHash: record.transactionHash,
+            status: 'rollback_rejected',
+            changed: false,
+            staleReason: 'rollback_transactional_write_failed',
+            staleDetails: { cause: message },
+            message: `Rollback rejected: transactional rollback write failed (${message}).`,
+        };
+    }
+    finally {
+        (0, node_fs_1.rmSync)(backupPath, { force: true });
+    }
+    return {
+        success: true,
+        file: record.file,
+        snapshotId: record.snapshotId,
+        transactionId: record.transactionId,
+        transactionHash: record.transactionHash,
+        status: 'rollback_applied',
+        changed: true,
+        staleReason: null,
+        staleDetails: null,
+        message: 'Rollback applied successfully.',
+    };
+}
+//# sourceMappingURL=rollback.js.map

package/dist/patch-engine/rollback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollback.js","sourceRoot":"","sources":["../../src/patch-engine/rollback.ts"],"names":[],"mappings":";;AA4IA,oEA4CC;AAkBD,gDAyHC;AAnUD,qCAQiB;AACjB,yCAAoD;AACpD,+CAA6E;AAE7E,MAAM,uBAAuB,GAAG,4BAAqC,CAAC;AACtE,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAyC9B,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAA,oBAAQ,EAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,OAAO,GAAG,IAAA,mBAAO,EAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;IAC1D,OAAO;QACL,OAAO;QACP,WAAW,EAAE,IAAA,gBAAI,EAAC,OAAO,EAAE,UAAU,CAAC;QACtC,UAAU,EAAE,IAAA,gBAAI,EAAC,OAAO,EAAE,SAAS,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAoB;IAC/C,IAAA,mBAAS,EAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,IAAA,mBAAS,EAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAoB,EAAE,UAAkB;IAChE,OAAO,IAAA,gBAAI,EAAC,KAAK,CAAC,WAAW,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,eAAe,CAAC,KAAoB,EAAE,UAAkB;IAC/D,OAAO,IAAA,gBAAI,EAAC,KAAK,CAAC,UAAU,EAAE,GAAG,UAAU,SAAS,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,MAAM,MAAM,GAAG,MAAyC,CAAC;QACzD,IAAI,MAAM,CAAC,aAAa,KAAK,uBAAuB;YAAE,OAAO,IAAI,CAAC;QAClE,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAChG,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtG,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1G,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpF,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9F,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACrF,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnF,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACjF,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnF,IAAI,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ,IAAI,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9G,OAAO,MAAgC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAoB,EAAE,UAAU,GAAG,iBAAiB;IAC1E,IAAI,CAAC,IAAA,oBAAU,EAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO;IAC3C,MAAM,KAAK,GAAG,IAAA,qBAAW,EAAC,KAAK,CAAC,WAAW,CAAC;SACzC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,IAAI;QACJ,IAAI,EAAE,IAAA,gBAAI,EAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC;QACnC,OAAO,EAAE,CAAC,GAAG,EAAE;YACb,IAAI,CAAC;gBACH,OAAO,IAAA,kBAAQ,EAAC,IAAA,gBAAI,EAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC,CAAC,EAAE;KACL,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAEvD,IAAI,KAAK,CAAC,MAAM,IAAI,UAAU;QAAE,OAAO;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YACtE,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAClE,IAAA,gBAAM,EAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QACD,IAAA,gBAAM,EAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAgB,4BAA4B,CAAC,KAM5C;IACC,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACvG,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,IAAA,4BAAc,EAAC,KAAK,CAAC,aAAa,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACrE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAE3B,MAAM,mBAAmB,GAAG,WAAW,UAAU,SAAS,CAAC;IAC3D,MAAM,mBAAmB,GAAG,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC/D,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAEjE,MAAM,MAAM,GAA2B;QACrC,aAAa,EAAE,uBAAuB;QACtC,UAAU;QACV,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa;QAC1C,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,eAAe;QAC9C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;QACpC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAClC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;QAChC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAClC,iBAAiB,EAAE,mBAAmB;KACvC,CAAC;IAEF,IAAA,uBAAa,EAAC,mBAAmB,EAAE,KAAK,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/E,IAAA,uBAAa,EAAC,oBAAoB,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACnG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAE7I,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,UAAkB;IACnD,MAAM,SAAS,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,IAAA,oBAAU,EAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAA,sBAAY,EAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAClE,IAAI,CAAC,IAAA,oBAAU,EAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,aAAa,GAAG,IAAA,sBAAY,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACzD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AAC3C,CAAC;AAED,SAAgB,kBAAkB,CAAC,KAIlC;IACC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,aAAa,EAAE,KAAK,CAAC,UAAU;YAC/B,eAAe,EAAE,EAAE;YACnB,MAAM,EAAE,mBAAmB;YAC3B,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,6BAA6B;YAC1C,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,gDAAgD;SAC1D,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IACzC,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7C,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,MAAM,EAAE,mBAAmB;YAC3B,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,0BAA0B;YACvC,YAAY,EAAE;gBACZ,aAAa,EAAE,KAAK,CAAC,IAAI;gBACzB,WAAW,EAAE,MAAM,CAAC,IAAI;aACzB;YACD,OAAO,EAAE,mEAAmE;SAC7E,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,IAAA,mBAAO,EAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,IAAA,oBAAU,EAAC,cAAc,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,MAAM,EAAE,gBAAgB;YACxB,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,yBAAyB;YACtC,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,4CAA4C;SACtD,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,IAAA,sBAAY,EAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAA,4BAAc,EAAC,cAAc,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,SAAS,IAAI,WAAW,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QACzD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,MAAM,EAAE,gBAAgB;YACxB,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,gCAAgC;YAC7C,YAAY,EAAE;gBACZ,iBAAiB,EAAE,MAAM,CAAC,SAAS;gBACnC,WAAW;aACZ;YACD,OAAO,EAAE,gEAAgE;SAC1E,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,cAAc,6BAA6B,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC7F,IAAI,CAAC;QACH,IAAA,uBAAa,EAAC,UAAU,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QACnD,IAAA,uBAAa,EAAC,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,IAAA,sBAAY,EAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,UAAU,IAAI,IAAA,4BAAc,EAAC,aAAa,CAAC,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,IAAI,IAAA,oBAAU,EAAC,UAAU,CAAC,EAAE,CAAC;gBAC3B,IAAA,uBAAa,EAAC,cAAc,EAAE,IAAA,sBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACzE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,MAAM,EAAE,mBAAmB;YAC3B,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,qCAAqC;YAClD,YAAY,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;YAChC,OAAO,EAAE,2DAA2D,OAAO,IAAI;SAChF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAA,gBAAM,EAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,gCAAgC;KAC1C,CAAC;AACJ,CAAC"}

package/dist/patch-engine/safety.d.ts

@@ -0,0 +1,28 @@
+import type { PatternKind } from './patterns';
+export type PatchConfidence = 'high' | 'medium' | 'low';
+export interface PatchValidationReport {
+    schemaVersion: 'neurcode.patch-validation.v1';
+    safe: boolean;
+    deterministic: boolean;
+    confidence: PatchConfidence;
+    changedLines: number;
+    maxChangedLines: number;
+    checks: {
+        nonEmptyOutput: boolean;
+        diffExists: boolean;
+        changedLinesWithinLimit: boolean;
+        syntaxLikelyValid: boolean;
+        noSecretLikeTokensAdded: boolean;
+        confidenceThresholdMet: boolean;
+    };
+    reasonCodes: string[];
+    diffHash: string;
+}
+export declare function validatePatchCandidate(input: {
+    originalContent: string;
+    updatedContent: string;
+    diff: string;
+    kind: PatternKind;
+    confidence: PatchConfidence;
+}): PatchValidationReport;
+//# sourceMappingURL=safety.d.ts.map

package/dist/patch-engine/safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../src/patch-engine/safety.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAExD,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,8BAA8B,CAAC;IAC9C,IAAI,EAAE,OAAO,CAAC;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,eAAe,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE;QACN,cAAc,EAAE,OAAO,CAAC;QACxB,UAAU,EAAE,OAAO,CAAC;QACpB,uBAAuB,EAAE,OAAO,CAAC;QACjC,iBAAiB,EAAE,OAAO,CAAC;QAC3B,uBAAuB,EAAE,OAAO,CAAC;QACjC,sBAAsB,EAAE,OAAO,CAAC;KACjC,CAAC;IACF,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAiFD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,EAAE,eAAe,CAAC;CAC7B,GAAG,qBAAqB,CAkCxB"}

package/dist/patch-engine/safety.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validatePatchCandidate = validatePatchCandidate;
+const node_crypto_1 = require("node:crypto");
+const SECRET_LIKE_PATTERN = /(api[_-]?key|secret|password|token)\s*[:=]\s*['"`][^'"`]+['"`]/i;
+function countChangedLines(diff) {
+    let changed = 0;
+    for (const line of diff.split('\n')) {
+        if (line.startsWith('---') || line.startsWith('+++') || line.startsWith('@@'))
+            continue;
+        if (line.startsWith('+') || line.startsWith('-'))
+            changed += 1;
+    }
+    return changed;
+}
+function hasBalancedDelimiters(content) {
+    let parens = 0;
+    let braces = 0;
+    let brackets = 0;
+    let inSingle = false;
+    let inDouble = false;
+    let inTemplate = false;
+    let escaped = false;
+    for (const ch of content) {
+        if (escaped) {
+            escaped = false;
+            continue;
+        }
+        if (ch === '\\') {
+            escaped = true;
+            continue;
+        }
+        if (!inDouble && !inTemplate && ch === '\'') {
+            inSingle = !inSingle;
+            continue;
+        }
+        if (!inSingle && !inTemplate && ch === '"') {
+            inDouble = !inDouble;
+            continue;
+        }
+        if (!inSingle && !inDouble && ch === '`') {
+            inTemplate = !inTemplate;
+            continue;
+        }
+        if (inSingle || inDouble || inTemplate)
+            continue;
+        if (ch === '(')
+            parens += 1;
+        else if (ch === ')')
+            parens -= 1;
+        else if (ch === '{')
+            braces += 1;
+        else if (ch === '}')
+            braces -= 1;
+        else if (ch === '[')
+            brackets += 1;
+        else if (ch === ']')
+            brackets -= 1;
+        if (parens < 0 || braces < 0 || brackets < 0)
+            return false;
+    }
+    return parens === 0 && braces === 0 && brackets === 0 && !inSingle && !inDouble && !inTemplate;
+}
+function changedLineBudget(kind) {
+    switch (kind) {
+        case 'missing_validation':
+            return 26;
+        case 'unsafe_fetch_without_retries':
+            return 34;
+        case 'unsafe_file_uploads':
+            return 24;
+        case 'missing_auth_middleware':
+        case 'missing_rate_limiting':
+        case 'missing_token_expiry':
+        case 'missing_timeout_handling':
+        case 'missing_idempotency_keys':
+        case 'unsafe_inner_html_usage':
+            return 10;
+        case 'todo_fixme':
+            return 4;
+        default:
+            return 8;
+    }
+}
+function validatePatchCandidate(input) {
+    const reasonCodes = [];
+    const changedLines = countChangedLines(input.diff);
+    const maxChangedLines = changedLineBudget(input.kind);
+    const checks = {
+        nonEmptyOutput: input.updatedContent.trim().length > 0,
+        diffExists: input.diff.trim().length > 0,
+        changedLinesWithinLimit: changedLines > 0 && changedLines <= maxChangedLines,
+        syntaxLikelyValid: hasBalancedDelimiters(input.updatedContent),
+        noSecretLikeTokensAdded: !SECRET_LIKE_PATTERN.test(input.updatedContent),
+        confidenceThresholdMet: input.confidence === 'high' || input.confidence === 'medium',
+    };
+    if (!checks.nonEmptyOutput)
+        reasonCodes.push('empty_patch_output');
+    if (!checks.diffExists)
+        reasonCodes.push('empty_diff');
+    if (!checks.changedLinesWithinLimit)
+        reasonCodes.push('changed_lines_out_of_bounds');
+    if (!checks.syntaxLikelyValid)
+        reasonCodes.push('syntax_guard_failed');
+    if (!checks.noSecretLikeTokensAdded)
+        reasonCodes.push('potential_secret_introduced');
+    if (!checks.confidenceThresholdMet)
+        reasonCodes.push('confidence_below_threshold');
+    const safe = Object.values(checks).every((value) => value === true);
+    return {
+        schemaVersion: 'neurcode.patch-validation.v1',
+        safe,
+        deterministic: true,
+        confidence: input.confidence,
+        changedLines,
+        maxChangedLines,
+        checks,
+        reasonCodes,
+        diffHash: (0, node_crypto_1.createHash)('sha256').update(input.diff).digest('hex'),
+    };
+}
+//# sourceMappingURL=safety.js.map

package/dist/patch-engine/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/patch-engine/safety.ts"],"names":[],"mappings":";;AAuGA,wDAwCC;AA/ID,6CAAyC;AAwBzC,MAAM,mBAAmB,GAAG,iEAAiE,CAAC;AAE9F,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACxF,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe;IAC5C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,GAAG,KAAK,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QAED,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAC5C,QAAQ,GAAG,CAAC,QAAQ,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC3C,QAAQ,GAAG,CAAC,QAAQ,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACzC,UAAU,GAAG,CAAC,UAAU,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,IAAI,QAAQ,IAAI,UAAU;YAAE,SAAS;QAEjD,IAAI,EAAE,KAAK,GAAG;YAAE,MAAM,IAAI,CAAC,CAAC;aACvB,IAAI,EAAE,KAAK,GAAG;YAAE,MAAM,IAAI,CAAC,CAAC;aAC5B,IAAI,EAAE,KAAK,GAAG;YAAE,MAAM,IAAI,CAAC,CAAC;aAC5B,IAAI,EAAE,KAAK,GAAG;YAAE,MAAM,IAAI,CAAC,CAAC;aAC5B,IAAI,EAAE,KAAK,GAAG;YAAE,QAAQ,IAAI,CAAC,CAAC;aAC9B,IAAI,EAAE,KAAK,GAAG;YAAE,QAAQ,IAAI,CAAC,CAAC;QAEnC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IAC7D,CAAC;IAED,OAAO,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC;AACjG,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAiB;IAC1C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,oBAAoB;YACvB,OAAO,EAAE,CAAC;QACZ,KAAK,8BAA8B;YACjC,OAAO,EAAE,CAAC;QACZ,KAAK,qBAAqB;YACxB,OAAO,EAAE,CAAC;QACZ,KAAK,yBAAyB,CAAC;QAC/B,KAAK,uBAAuB,CAAC;QAC7B,KAAK,sBAAsB,CAAC;QAC5B,KAAK,0BAA0B,CAAC;QAChC,KAAK,0BAA0B,CAAC;QAChC,KAAK,yBAAyB;YAC5B,OAAO,EAAE,CAAC;QACZ,KAAK,YAAY;YACf,OAAO,CAAC,CAAC;QACX;YACE,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAgB,sBAAsB,CAAC,KAMtC;IACC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEtD,MAAM,MAAM,GAAG;QACb,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACtD,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACxC,uBAAuB,EAAE,YAAY,GAAG,CAAC,IAAI,YAAY,IAAI,eAAe;QAC5E,iBAAiB,EAAE,qBAAqB,CAAC,KAAK,CAAC,cAAc,CAAC;QAC9D,uBAAuB,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;QACxE,sBAAsB,EAAE,KAAK,CAAC,UAAU,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ;KACrF,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,cAAc;QAAE,WAAW,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,uBAAuB;QAAE,WAAW,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,CAAC,iBAAiB;QAAE,WAAW,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,uBAAuB;QAAE,WAAW,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,CAAC,sBAAsB;QAAE,WAAW,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAEnF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAEpE,OAAO;QACL,aAAa,EAAE,8BAA8B;QAC7C,IAAI;QACJ,aAAa,EAAE,IAAI;QACnB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY;QACZ,eAAe;QACf,MAAM;QACN,WAAW;QACX,QAAQ,EAAE,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KAChE,CAAC;AACJ,CAAC"}

package/dist/patch-engine/transaction.d.ts

@@ -0,0 +1,52 @@
+import type { PatchConfidence } from './safety';
+export interface PatchPreviewTokenPayload {
+    schemaVersion: 'neurcode.patch-preview-token.v1';
+    file: string;
+    createdAt: string;
+    beforeHash: string;
+    afterHash: string;
+    diffHash: string;
+    patchHash: string;
+    patternKind: string;
+    confidence: PatchConfidence;
+}
+export interface PatchTransactionReceipt {
+    schemaVersion: 'neurcode.patch-receipt.v1';
+    transactionId: string;
+    transactionHash: string;
+    file: string;
+    createdAt: string;
+    beforeHash: string | null;
+    afterHash: string | null;
+    diffHash: string | null;
+    patchHash: string | null;
+    previewTokenUsed: boolean;
+    stalePreviewRejected: boolean;
+    staleReason: string | null;
+    rollbackAvailable: boolean;
+    rollbackSnapshotId: string | null;
+}
+export declare function hashPatchValue(value: string): string;
+export declare function buildPatchHash(input: {
+    file: string;
+    beforeHash: string;
+    afterHash: string;
+    diffHash: string;
+    patternKind: string;
+}): string;
+export declare function createPatchPreviewToken(payload: PatchPreviewTokenPayload): string;
+export declare function parsePatchPreviewToken(token: string): PatchPreviewTokenPayload | null;
+export declare function newPatchReceipt(input: {
+    transactionId?: string;
+    file: string;
+    beforeHash?: string | null;
+    afterHash?: string | null;
+    diffHash?: string | null;
+    patchHash?: string | null;
+    previewTokenUsed?: boolean;
+    stalePreviewRejected?: boolean;
+    staleReason?: string | null;
+    rollbackAvailable?: boolean;
+    rollbackSnapshotId?: string | null;
+}): PatchTransactionReceipt;
+//# sourceMappingURL=transaction.d.ts.map

package/dist/patch-engine/transaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction.d.ts","sourceRoot":"","sources":["../../src/patch-engine/transaction.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAEhD,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,iCAAiC,CAAC;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,eAAe,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,2BAA2B,CAAC;IAC3C,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAUD,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,MAAM,CAET;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG,MAAM,CAKjF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI,CA8BrF;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC,GAAG,uBAAuB,CA2B1B"}

package/dist/patch-engine/transaction.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hashPatchValue = hashPatchValue;
+exports.buildPatchHash = buildPatchHash;
+exports.createPatchPreviewToken = createPatchPreviewToken;
+exports.parsePatchPreviewToken = parsePatchPreviewToken;
+exports.newPatchReceipt = newPatchReceipt;
+const node_crypto_1 = require("node:crypto");
+function base64UrlEncode(value) {
+    return Buffer.from(value, 'utf-8').toString('base64url');
+}
+function base64UrlDecode(value) {
+    return Buffer.from(value, 'base64url').toString('utf-8');
+}
+function hashPatchValue(value) {
+    return (0, node_crypto_1.createHash)('sha256').update(value).digest('hex');
+}
+function buildPatchHash(input) {
+    return hashPatchValue(JSON.stringify(input));
+}
+function createPatchPreviewToken(payload) {
+    const rawPayload = JSON.stringify(payload);
+    const encodedPayload = base64UrlEncode(rawPayload);
+    const signature = hashPatchValue(rawPayload);
+    return `${encodedPayload}.${signature}`;
+}
+function parsePatchPreviewToken(token) {
+    const trimmed = token.trim();
+    if (trimmed.length === 0)
+        return null;
+    const [encodedPayload, signature] = trimmed.split('.');
+    if (!encodedPayload || !signature)
+        return null;
+    try {
+        const rawPayload = base64UrlDecode(encodedPayload);
+        const expectedSignature = hashPatchValue(rawPayload);
+        if (expectedSignature !== signature)
+            return null;
+        const parsed = JSON.parse(rawPayload);
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+            return null;
+        const payload = parsed;
+        if (payload.schemaVersion !== 'neurcode.patch-preview-token.v1')
+            return null;
+        if (typeof payload.file !== 'string' || payload.file.trim().length === 0)
+            return null;
+        if (typeof payload.createdAt !== 'string' || payload.createdAt.trim().length === 0)
+            return null;
+        if (typeof payload.beforeHash !== 'string' || payload.beforeHash.length === 0)
+            return null;
+        if (typeof payload.afterHash !== 'string' || payload.afterHash.length === 0)
+            return null;
+        if (typeof payload.diffHash !== 'string' || payload.diffHash.length === 0)
+            return null;
+        if (typeof payload.patchHash !== 'string' || payload.patchHash.length === 0)
+            return null;
+        if (typeof payload.patternKind !== 'string' || payload.patternKind.length === 0)
+            return null;
+        if (payload.confidence !== 'high' && payload.confidence !== 'medium' && payload.confidence !== 'low')
+            return null;
+        return payload;
+    }
+    catch {
+        return null;
+    }
+}
+function newPatchReceipt(input) {
+    const transactionId = input.transactionId && input.transactionId.trim().length > 0
+        ? input.transactionId.trim()
+        : `patch_${(0, node_crypto_1.randomUUID)()}`;
+    const createdAt = new Date().toISOString();
+    const receiptWithoutHash = {
+        schemaVersion: 'neurcode.patch-receipt.v1',
+        transactionId,
+        file: input.file,
+        createdAt,
+        beforeHash: input.beforeHash ?? null,
+        afterHash: input.afterHash ?? null,
+        diffHash: input.diffHash ?? null,
+        patchHash: input.patchHash ?? null,
+        previewTokenUsed: input.previewTokenUsed === true,
+        stalePreviewRejected: input.stalePreviewRejected === true,
+        staleReason: input.staleReason ?? null,
+        rollbackAvailable: input.rollbackAvailable === true,
+        rollbackSnapshotId: input.rollbackSnapshotId ?? null,
+    };
+    const transactionHash = hashPatchValue(JSON.stringify(receiptWithoutHash));
+    return {
+        ...receiptWithoutHash,
+        transactionHash,
+    };
+}
+//# sourceMappingURL=transaction.js.map

package/dist/patch-engine/transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction.js","sourceRoot":"","sources":["../../src/patch-engine/transaction.ts"],"names":[],"mappings":";;AAwCA,wCAEC;AAED,wCAQC;AAED,0DAKC;AAED,wDA8BC;AAED,0CAuCC;AApID,6CAAqD;AAgCrD,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED,SAAgB,cAAc,CAAC,KAAa;IAC1C,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAgB,cAAc,CAAC,KAM9B;IACC,OAAO,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,uBAAuB,CAAC,OAAiC;IACvE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,cAAc,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,GAAG,cAAc,IAAI,SAAS,EAAE,CAAC;AAC1C,CAAC;AAED,SAAgB,sBAAsB,CAAC,KAAa;IAClD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE/C,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,iBAAiB,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,iBAAiB,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAEjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAY,CAAC;QACjD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAEhF,MAAM,OAAO,GAAG,MAA2C,CAAC;QAC5D,IAAI,OAAO,CAAC,aAAa,KAAK,iCAAiC;YAAE,OAAO,IAAI,CAAC;QAC7E,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtF,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAChG,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3F,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACzF,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvF,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACzF,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7F,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAElH,OAAO,OAAmC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,eAAe,CAAC,KAY/B;IACC,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAChF,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE;QAC5B,CAAC,CAAC,SAAS,IAAA,wBAAU,GAAE,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE3C,MAAM,kBAAkB,GAAqD;QAC3E,aAAa,EAAE,2BAA2B;QAC1C,aAAa;QACb,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS;QACT,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QAClC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,KAAK,IAAI;QACjD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,KAAK,IAAI;QACzD,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;QACtC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,KAAK,IAAI;QACnD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;KACrD,CAAC;IAEF,MAAM,eAAe,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC3E,OAAO;QACL,GAAG,kBAAkB;QACrB,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/dist/utils/advisory-signals.d.ts

@@ -6,6 +6,11 @@ export interface AdvisorySignal {
     title: string;
     detail: string;
     files: string[];
+    advisoryOnly: true;
+    confidence: 'low' | 'medium';
+    evidence: string[];
+    uncertainty: string;
+    structuralCoverageGap: string;
 }
 interface AdvisoryInput {
     diffFiles: DiffFile[];

package/dist/utils/advisory-signals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"advisory-signals.d.ts","sourceRoot":"","sources":["../../src/utils/advisory-signals.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAEzD,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,cAAc;IAC7B,IAAI,EACA,uBAAuB,GACvB,4BAA4B,GAC5B,sBAAsB,GACtB,2BAA2B,GAC3B,qBAAqB,GACrB,0BAA0B,CAAC;IAC/B,QAAQ,EAAE,sBAAsB,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,UAAU,aAAa;IACrB,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE;QACR,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAkFD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,aAAa,GAAG,cAAc,EAAE,CAwH9E"}
+{"version":3,"file":"advisory-signals.d.ts","sourceRoot":"","sources":["../../src/utils/advisory-signals.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAEzD,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,cAAc;IAC7B,IAAI,EACA,uBAAuB,GACvB,4BAA4B,GAC5B,sBAAsB,GACtB,2BAA2B,GAC3B,qBAAqB,GACrB,0BAA0B,CAAC;IAC/B,QAAQ,EAAE,sBAAsB,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,YAAY,EAAE,IAAI,CAAC;IACnB,UAAU,EAAE,KAAK,GAAG,QAAQ,CAAC;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,UAAU,aAAa;IACrB,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE;QACR,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AA2GD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,aAAa,GAAG,cAAc,EAAE,CAgJ9E"}