@paths.design/caws-cli 11.1.6 → 11.1.8

package/dist/shell/push-range/classify-range.d.ts

@@ -0,0 +1,99 @@
+/** One spec the classifier may attribute commits to. */
+export interface ClassifierSpec {
+    readonly specId: string;
+    /** scope.in entries (repo-root-relative paths / globs). */
+    readonly scopeIn: readonly string[];
+    /** Lifecycle state — only 'active' and 'closed' are considered. */
+    readonly lifecycleState: string;
+}
+/** One outgoing commit with the facts the classifier needs. */
+export interface OutgoingCommit {
+    readonly sha: string;
+    readonly subject: string;
+    /** Repo-root-relative paths the commit touched. */
+    readonly touchedFiles: readonly string[];
+    /**
+     * Optional: the worktree name this commit originates from, when the
+     * caller could determine it (e.g. from `git branch --contains` against
+     * the registry). Used for foreign-worktree escalation.
+     */
+    readonly originWorktree?: string;
+}
+/** A foreign physical worktree the caller observed. */
+export interface ForeignWorktree {
+    readonly name: string;
+    readonly path: string;
+    readonly branch?: string;
+    /** True if the branch is absent from .caws/worktrees.json. */
+    readonly unregistered: boolean;
+    /** True if the branch is not merged into the push base. */
+    readonly unmerged: boolean;
+}
+export interface ClassifyRangeInput {
+    /** Outgoing commits, base..HEAD order (oldest first or newest — order
+     *  is preserved in the report but not relied on for decisions). */
+    readonly commits: readonly OutgoingCommit[];
+    /** Active + recently-closed specs available for attribution. */
+    readonly specs: readonly ClassifierSpec[];
+    /** The current session's active spec id, if known. Commits attributed
+     *  to it are current_slice_match: true. */
+    readonly currentSpecId?: string;
+    /** Foreign physical worktrees observed during preflight. */
+    readonly foreignWorktrees?: readonly ForeignWorktree[];
+    /** SHAs the operator explicitly acknowledged (per-SHA, ADR Q3). */
+    readonly ackedShas?: readonly string[];
+    /** The base ref the range was computed against (e.g. 'origin/main').
+     *  Reported for transparency. */
+    readonly baseRef: string;
+    /** The push target ('origin main' is full posture; feature branches get
+     *  weakened foreign-worktree escalation per ADR Q5). */
+    readonly target: PushTarget;
+}
+export interface PushTarget {
+    readonly remote: string;
+    readonly branch: string;
+}
+export type ProvenanceSource = 'file_touch' | 'commit_subject' | 'file_touch+commit_subject' | 'none';
+export interface CommitClassification {
+    readonly sha: string;
+    readonly subject: string;
+    readonly touchedFiles: readonly string[];
+    /** Every spec id this commit is attributed to (multi-match reported). */
+    readonly inferredSpecIds: readonly string[];
+    /** True iff currentSpecId is in inferredSpecIds. */
+    readonly currentSliceMatch: boolean;
+    readonly provenanceSource: ProvenanceSource;
+    /** True when no spec matched by file-touch and no known spec named in
+     *  the subject — operator review needed. */
+    readonly ambiguous: boolean;
+    /** Foreign worktree this commit originates from, if the caller tagged it. */
+    readonly originWorktree?: string;
+    /** True when this commit is acknowledged by the operator. */
+    readonly acknowledged: boolean;
+}
+export type Severity = 'INFO' | 'WARN' | 'ERROR';
+export interface ForeignWorktreeFinding {
+    readonly name: string;
+    readonly path: string;
+    readonly branch?: string;
+    readonly severity: Severity;
+    /** Which OR-condition(s) (ADR Q4) drove the severity. */
+    readonly reasons: readonly string[];
+}
+export interface PushRangeReport {
+    readonly baseRef: string;
+    readonly target: PushTarget;
+    readonly commits: readonly CommitClassification[];
+    readonly foreignWorktrees: readonly ForeignWorktreeFinding[];
+    /** Commits that are unexpected (not current-slice-match) and NOT acked. */
+    readonly unexpectedUnacked: readonly string[];
+    /** True iff the guard refuses the push. */
+    readonly refused: boolean;
+    /** Highest severity across all findings. */
+    readonly maxSeverity: Severity;
+}
+/**
+ * Classify the outgoing range. Pure, deterministic, side-effect-free.
+ */
+export declare function classifyRange(input: ClassifyRangeInput): PushRangeReport;
+//# sourceMappingURL=classify-range.d.ts.map

package/dist/shell/push-range/classify-range.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-range.d.ts","sourceRoot":"","sources":["../../../src/shell/push-range/classify-range.ts"],"names":[],"mappings":"AA0BA,wDAAwD;AACxD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,mEAAmE;IACnE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mDAAmD;IACnD,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,uDAAuD;AACvD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC;uEACmE;IACnE,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C;+CAC2C;IAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,4DAA4D;IAC5D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IACvD,mEAAmE;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC;qCACiC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;4DACwD;IACxD,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,gBAAgB,GACxB,YAAY,GACZ,gBAAgB,GAChB,2BAA2B,GAC3B,MAAM,CAAC;AAEX,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,yEAAyE;IACzE,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,oDAAoD;IACpD,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C;gDAC4C;IAC5C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAEjD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAClD,QAAQ,CAAC,gBAAgB,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC7D,2EAA2E;IAC3E,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,2CAA2C;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,4CAA4C;IAC5C,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC;CAChC;AA4GD;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,eAAe,CA8CxE"}

package/dist/shell/push-range/classify-range.js

@@ -0,0 +1,155 @@
+"use strict";
+// push-range classifier — MULTI-AGENT-PUSH-RANGE-GUARD-001
+//
+// A pure classifier over the outgoing commit range. Given the outgoing
+// commits (each with its touched files), the active/recently-closed specs
+// and their scope.in, the worktree registry, the current session's active
+// spec, and the set of acknowledged SHAs, it produces a structured report
+// and a refuse/proceed decision.
+//
+// DIAGNOSE/DECIDE ONLY. This module never invokes git, never mutates repo
+// state, never pushes. The caller supplies the already-collected git facts
+// (the thin command does the git reads); the classifier is a deterministic
+// function of its inputs so it is trivially testable against fixtures and
+// produces byte-identical reports for identical input (A9 / non_functional
+// reliability).
+//
+// Provenance (ADR 0001 Q1): a commit is attributed to EVERY active/
+// recently-closed spec whose scope.in prefix-matches any file the commit
+// touches (multi-match reported, never collapsed). Commit-subject SPEC-ID
+// matching is additive — it can add an inferred spec, never remove a
+// file-touch match. current_slice_match is true iff the current session's
+// active spec is in the commit's match set. A commit matching no spec by
+// file-touch AND naming no known spec in its subject is provenance:
+// 'ambiguous'.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.classifyRange = classifyRange;
+const scope_match_1 = require("./scope-match");
+const SPEC_ID_IN_SUBJECT = /\b([A-Z][A-Z0-9]*(?:-[A-Z0-9]+)*-\d+[a-z]*)\b/g;
+function severityRank(s) {
+    return s === 'ERROR' ? 2 : s === 'WARN' ? 1 : 0;
+}
+/**
+ * Classify one commit's spec provenance. Pure.
+ */
+function classifyCommit(commit, specs, currentSpecId, ackedShas) {
+    const considered = specs.filter((s) => s.lifecycleState === 'active' || s.lifecycleState === 'closed');
+    // (a) file-touch matches — every spec whose scope.in admits any touched file.
+    const fileTouchMatches = new Set();
+    for (const spec of considered) {
+        const hit = commit.touchedFiles.some((f) => spec.scopeIn.some((entry) => (0, scope_match_1.scopeEntryMatches)(entry, f)));
+        if (hit)
+            fileTouchMatches.add(spec.specId);
+    }
+    // (b) commit-subject SPEC-ID matches — additive, only for KNOWN specs.
+    const knownIds = new Set(considered.map((s) => s.specId));
+    const subjectMatches = new Set();
+    for (const m of commit.subject.matchAll(SPEC_ID_IN_SUBJECT)) {
+        const id = m[1];
+        if (knownIds.has(id))
+            subjectMatches.add(id);
+    }
+    const inferred = new Set([...fileTouchMatches, ...subjectMatches]);
+    const inferredSpecIds = [...inferred].sort();
+    let provenanceSource;
+    if (fileTouchMatches.size > 0 && subjectMatches.size > 0) {
+        provenanceSource = 'file_touch+commit_subject';
+    }
+    else if (fileTouchMatches.size > 0) {
+        provenanceSource = 'file_touch';
+    }
+    else if (subjectMatches.size > 0) {
+        provenanceSource = 'commit_subject';
+    }
+    else {
+        provenanceSource = 'none';
+    }
+    const ambiguous = inferred.size === 0;
+    const currentSliceMatch = currentSpecId !== undefined && inferred.has(currentSpecId);
+    return {
+        sha: commit.sha,
+        subject: commit.subject,
+        touchedFiles: commit.touchedFiles,
+        inferredSpecIds,
+        currentSliceMatch,
+        provenanceSource,
+        ambiguous,
+        ...(commit.originWorktree !== undefined
+            ? { originWorktree: commit.originWorktree }
+            : {}),
+        acknowledged: ackedShas.has(commit.sha),
+    };
+}
+/**
+ * Classify a foreign worktree's severity (ADR Q4 — OR of three ERROR
+ * conditions; WARN otherwise during an active slice; INFO when not on the
+ * full-posture target).
+ */
+function classifyForeignWorktree(wt, commits, fullPosture) {
+    const reasons = [];
+    if (wt.unmerged)
+        reasons.push('unmerged branch');
+    if (wt.unregistered)
+        reasons.push('branch not in worktrees.json');
+    const originatesCommit = commits.some((c) => c.originWorktree === wt.name);
+    if (originatesCommit) {
+        reasons.push('commits in the outgoing range originate from it');
+    }
+    let severity;
+    if (!fullPosture) {
+        // Feature-branch / non-origin-main: weakened — report, don't ERROR.
+        severity = reasons.length > 0 ? 'WARN' : 'INFO';
+    }
+    else if (reasons.length > 0) {
+        severity = 'ERROR'; // OR: any one condition escalates on origin main.
+    }
+    else {
+        severity = 'WARN'; // present during an active slice, no hard condition.
+    }
+    return {
+        name: wt.name,
+        path: wt.path,
+        ...(wt.branch !== undefined ? { branch: wt.branch } : {}),
+        severity,
+        reasons,
+    };
+}
+/**
+ * Classify the outgoing range. Pure, deterministic, side-effect-free.
+ */
+function classifyRange(input) {
+    const acked = new Set(input.ackedShas ?? []);
+    const fullPosture = input.target.remote === 'origin' && input.target.branch === 'main';
+    const commits = input.commits.map((c) => classifyCommit(c, input.specs, input.currentSpecId, acked));
+    const foreignWorktrees = (input.foreignWorktrees ?? []).map((wt) => classifyForeignWorktree(wt, input.commits, fullPosture));
+    // Unexpected = not current-slice-match (includes ambiguous), and NOT acked.
+    const unexpectedUnacked = commits
+        .filter((c) => !c.currentSliceMatch && !c.acknowledged)
+        .map((c) => c.sha);
+    // Max severity across foreign-worktree findings + the unexpected-commit
+    // condition (an unexpected unacked commit is an ERROR-equivalent refusal).
+    let maxSeverity = 'INFO';
+    for (const f of foreignWorktrees) {
+        if (severityRank(f.severity) > severityRank(maxSeverity)) {
+            maxSeverity = f.severity;
+        }
+    }
+    if (unexpectedUnacked.length > 0 && severityRank('ERROR') > severityRank(maxSeverity)) {
+        maxSeverity = 'ERROR';
+    }
+    // Refuse iff there is any unexpected unacked commit, OR any ERROR-severity
+    // foreign worktree finding. WARN-only findings do not refuse (they ride in
+    // the report). This is the diagnose/decide contract: refuse is mechanical.
+    const refused = unexpectedUnacked.length > 0 ||
+        foreignWorktrees.some((f) => f.severity === 'ERROR');
+    return {
+        baseRef: input.baseRef,
+        target: input.target,
+        commits,
+        foreignWorktrees,
+        unexpectedUnacked,
+        refused,
+        maxSeverity,
+    };
+}
+//# sourceMappingURL=classify-range.js.map

package/dist/shell/push-range/classify-range.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-range.js","sourceRoot":"","sources":["../../../src/shell/push-range/classify-range.ts"],"names":[],"mappings":";AAAA,2DAA2D;AAC3D,EAAE;AACF,uEAAuE;AACvE,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,iCAAiC;AACjC,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,gBAAgB;AAChB,EAAE;AACF,oEAAoE;AACpE,yEAAyE;AACzE,0EAA0E;AAC1E,qEAAqE;AACrE,0EAA0E;AAC1E,yEAAyE;AACzE,oEAAoE;AACpE,eAAe;;AA6Nf,sCA8CC;AAzQD,+CAAkD;AA8GlD,MAAM,kBAAkB,GAAG,gDAAgD,CAAC;AAE5E,SAAS,YAAY,CAAC,CAAW;IAC/B,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CACrB,MAAsB,EACtB,KAAgC,EAChC,aAAiC,EACjC,SAA8B;IAE9B,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,KAAK,QAAQ,CACtE,CAAC;IAEF,8EAA8E;IAC9E,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACzC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,+BAAiB,EAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAC1D,CAAC;QACF,IAAI,GAAG;YAAE,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,uEAAuE;IACvE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC5D,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACjB,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,gBAAgB,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAE7C,IAAI,gBAAkC,CAAC;IACvC,IAAI,gBAAgB,CAAC,IAAI,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACzD,gBAAgB,GAAG,2BAA2B,CAAC;IACjD,CAAC;SAAM,IAAI,gBAAgB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACrC,gBAAgB,GAAG,YAAY,CAAC;IAClC,CAAC;SAAM,IAAI,cAAc,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACnC,gBAAgB,GAAG,gBAAgB,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,gBAAgB,GAAG,MAAM,CAAC;IAC5B,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC;IACtC,MAAM,iBAAiB,GACrB,aAAa,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAE7D,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,eAAe;QACf,iBAAiB;QACjB,gBAAgB;QAChB,SAAS;QACT,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS;YACrC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC;QACP,YAAY,EAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;KACxC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAC9B,EAAmB,EACnB,OAAkC,EAClC,WAAoB;IAEpB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,EAAE,CAAC,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjD,IAAI,EAAE,CAAC,YAAY;QAAE,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3E,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,oEAAoE;QACpE,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAClD,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,QAAQ,GAAG,OAAO,CAAC,CAAC,kDAAkD;IACxE,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,MAAM,CAAC,CAAC,qDAAqD;IAC1E,CAAC;IAED,OAAO;QACL,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,QAAQ;QACR,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa,CAAC,KAAyB;IACrD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,WAAW,GACf,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC;IAErE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,cAAc,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAC3D,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACjE,uBAAuB,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CACxD,CAAC;IAEF,4EAA4E;IAC5E,MAAM,iBAAiB,GAAG,OAAO;SAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;SACtD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAErB,wEAAwE;IACxE,2EAA2E;IAC3E,IAAI,WAAW,GAAa,MAAM,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;QACjC,IAAI,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;YACzD,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;QACtF,WAAW,GAAG,OAAO,CAAC;IACxB,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,OAAO,GACX,iBAAiB,CAAC,MAAM,GAAG,CAAC;QAC5B,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAEvD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO;QACP,gBAAgB;QAChB,iBAAiB;QACjB,OAAO;QACP,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/shell/push-range/scope-match.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Normalize a repo-root-relative path to POSIX separators with no leading
+ * "./" or trailing slash, for stable matching against scope.in entries.
+ */
+export declare function normalizeRel(p: string): string;
+/**
+ * Anchored glob match supporting `*` and `?`. A bare directory entry (no
+ * glob meta) matches the entry itself OR any descendant (prefix match on a
+ * path boundary) — mirroring how scope.in directory entries admit files
+ * beneath them. No dependency on minimatch.
+ */
+export declare function scopeEntryMatches(entry: string, target: string): boolean;
+//# sourceMappingURL=scope-match.d.ts.map

package/dist/shell/push-range/scope-match.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-match.d.ts","sourceRoot":"","sources":["../../../src/shell/push-range/scope-match.ts"],"names":[],"mappings":"AAgBA;;;GAGG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAgBxE"}

package/dist/shell/push-range/scope-match.js

@@ -0,0 +1,53 @@
+"use strict";
+// scope-match — path-vs-scope.in matching for the push-range classifier.
+//
+// These two pure functions are intentionally duplicated from
+// `../binding/resolve-binding.ts` (where `scopeEntryMatches`/`normalizeRel`
+// are module-private). The push-range classifier needs the identical
+// matching semantics to attribute a commit's touched files to a spec's
+// scope.in, but resolve-binding does not export them and is owned by a
+// separate (now-closed) slice. Keeping a small local copy avoids widening
+// this slice's scope into the binding subsystem for a 20-line helper.
+//
+// INVARIANT: this must stay semantically identical to resolve-binding's
+// copy. Both implement the same scope.in admission rule (exact match, or
+// directory-prefix on a path boundary, or anchored `*`/`?` glob). If the
+// canonical copy changes its matching rule, update this one to match.
+// (MULTI-AGENT-PUSH-RANGE-GUARD-001)
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeRel = normalizeRel;
+exports.scopeEntryMatches = scopeEntryMatches;
+/**
+ * Normalize a repo-root-relative path to POSIX separators with no leading
+ * "./" or trailing slash, for stable matching against scope.in entries.
+ */
+function normalizeRel(p) {
+    return p.replace(/\\/g, '/').replace(/^\.\//, '').replace(/\/+$/, '');
+}
+/**
+ * Anchored glob match supporting `*` and `?`. A bare directory entry (no
+ * glob meta) matches the entry itself OR any descendant (prefix match on a
+ * path boundary) — mirroring how scope.in directory entries admit files
+ * beneath them. No dependency on minimatch.
+ */
+function scopeEntryMatches(entry, target) {
+    const e = normalizeRel(entry);
+    const t = normalizeRel(target);
+    if (e === t)
+        return true;
+    if (!/[*?]/.test(e)) {
+        return t.startsWith(e + '/');
+    }
+    const rx = e
+        .split('')
+        .map((ch) => {
+        if (ch === '*')
+            return '.*';
+        if (ch === '?')
+            return '.';
+        return ch.replace(/[.+^${}()|[\]\\]/g, '\\$&');
+    })
+        .join('');
+    return new RegExp(`^${rx}$`).test(t);
+}
+//# sourceMappingURL=scope-match.js.map

package/dist/shell/push-range/scope-match.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-match.js","sourceRoot":"","sources":["../../../src/shell/push-range/scope-match.ts"],"names":[],"mappings":";AAAA,yEAAyE;AACzE,EAAE;AACF,6DAA6D;AAC7D,4EAA4E;AAC5E,qEAAqE;AACrE,uEAAuE;AACvE,uEAAuE;AACvE,0EAA0E;AAC1E,sEAAsE;AACtE,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,sEAAsE;AACtE,qCAAqC;;AAMrC,oCAEC;AAQD,8CAgBC;AA9BD;;;GAGG;AACH,SAAgB,YAAY,CAAC,CAAS;IACpC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,KAAa,EAAE,MAAc;IAC7D,MAAM,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACpB,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,EAAE,GAAG,CAAC;SACT,KAAK,CAAC,EAAE,CAAC;SACT,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QACV,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC5B,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,GAAG,CAAC;QAC3B,OAAO,EAAE,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC"}

package/dist/shell/register.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../src/shell/register.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA2BzC,MAAM,WAAW,4BAA4B;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC;AAyBD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,OAAO,EAChB,OAAO,GAAE,4BAAiC,GACzC,IAAI,CAimBN"}
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../src/shell/register.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+DzC,MAAM,WAAW,4BAA4B;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC;AAqID,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,OAAO,EAChB,OAAO,GAAE,4BAAiC,GACzC,IAAI,CAutBN"}