@planu/cli 1.0.11 → 1.1.0

package/dist/config/domain-bundles.json

@@ -0,0 +1,134 @@
+{
+  "bundles": [
+    {
+      "id": "stripe-payments",
+      "name": "Stripe Payments",
+      "description": "Spec templates for checkout/webhooks/refunds + Stripe validation skill",
+      "tags": ["payments", "stripe", "backend"],
+      "components": {
+        "skills": [
+          {
+            "name": "stripe-validation",
+            "content": "# Stripe Validation Skill\nAlways verify idempotency keys. Check webhook signatures. Validate amount in cents."
+          }
+        ],
+        "rules": [
+          {
+            "filename": "stripe-payments.md",
+            "content": "# Stripe Rules\n- Always use idempotency keys\n- Verify webhook signatures with Stripe-Signature header\n- Store amounts in cents (integer)"
+          }
+        ],
+        "specTemplates": [
+          {
+            "name": "checkout-flow",
+            "description": "Stripe checkout session spec template"
+          }
+        ]
+      }
+    },
+    {
+      "id": "auth-supabase",
+      "name": "Supabase Auth",
+      "description": "Login/signup/RBAC spec templates + RLS rules + security review skill",
+      "tags": ["auth", "supabase", "security"],
+      "components": {
+        "skills": [
+          {
+            "name": "supabase-security",
+            "content": "# Supabase Security\nAlways enable RLS. Never use service_role key client-side. Validate ownership in Server Actions."
+          }
+        ],
+        "rules": [
+          {
+            "filename": "auth-supabase.md",
+            "content": "# Supabase Auth Rules\n- Enable RLS on every table\n- Use anon key client-side only\n- Validate user ownership in every mutation"
+          }
+        ],
+        "specTemplates": [
+          {
+            "name": "user-auth",
+            "description": "Login/signup/session spec template"
+          }
+        ]
+      }
+    },
+    {
+      "id": "rest-api",
+      "name": "REST API",
+      "description": "CRUD endpoint spec templates + OpenAPI validation skill",
+      "tags": ["api", "rest", "backend"],
+      "components": {
+        "skills": [
+          {
+            "name": "api-validation",
+            "content": "# API Validation\nAll endpoints must return correct HTTP status codes. Validate inputs with Zod. Document with OpenAPI."
+          }
+        ],
+        "rules": [
+          {
+            "filename": "rest-api.md",
+            "content": "# REST API Rules\n- 201 for POST creates, 200 for updates, 204 for deletes\n- Always validate request body with Zod\n- Return consistent error format: { error, code, details }"
+          }
+        ],
+        "specTemplates": [
+          {
+            "name": "crud-endpoint",
+            "description": "CRUD REST endpoint spec template"
+          }
+        ]
+      }
+    },
+    {
+      "id": "nextjs-fullstack",
+      "name": "Next.js Fullstack",
+      "description": "Server Actions/RSC spec templates + performance skill",
+      "tags": ["nextjs", "fullstack", "react"],
+      "components": {
+        "skills": [
+          {
+            "name": "nextjs-performance",
+            "content": "# Next.js Performance\nPrefer RSC over client components. Use revalidatePath after mutations. Lazy load heavy components."
+          }
+        ],
+        "rules": [
+          {
+            "filename": "nextjs-fullstack.md",
+            "content": "# Next.js Rules\n- Server Actions for all mutations\n- revalidatePath after every data mutation\n- Never use useEffect for data fetching"
+          }
+        ],
+        "specTemplates": [
+          {
+            "name": "server-action",
+            "description": "Next.js Server Action spec template"
+          }
+        ]
+      }
+    },
+    {
+      "id": "react-native",
+      "name": "React Native Mobile",
+      "description": "Screens/navigation spec templates + mobile CI/CD hooks",
+      "tags": ["mobile", "react-native", "ios", "android"],
+      "components": {
+        "skills": [
+          {
+            "name": "rn-best-practices",
+            "content": "# React Native Best Practices\nUse FlatList for lists. Avoid inline styles. Test on both iOS and Android."
+          }
+        ],
+        "rules": [
+          {
+            "filename": "react-native.md",
+            "content": "# React Native Rules\n- FlatList for all scrollable lists (never ScrollView with map)\n- Memoize expensive components with React.memo\n- Use platform-specific extensions (.ios.ts, .android.ts) for platform code"
+          }
+        ],
+        "specTemplates": [
+          {
+            "name": "screen-component",
+            "description": "React Native screen spec template"
+          }
+        ]
+      }
+    }
+  ]
+}

package/dist/config/license-plans.json

@@ -286,7 +286,13 @@
     "velocity_trend",
     "version_spec",
     "workload_distribution",
-    "security_scan_pro"
+    "security_scan_pro",
+    "assess_merge_risk",
+    "expose_spec_as_prompt",
+    "list_spec_prompts",
+    "telemetry_health",
+    "apply_domain_bundle",
+    "list_domain_bundles"
   ],
   "alwaysAllowed": [
     "activate_license",

package/dist/engine/bundle-installer.d.ts

@@ -0,0 +1,24 @@
+import type { DomainBundle, BundleInstallResult } from '../types/index.js';
+/**
+ * Returns all available domain bundles (synchronous after first load).
+ * Loads config lazily on first call.
+ */
+export declare function listBundlesAsync(): Promise<DomainBundle[]>;
+/**
+ * Returns all available domain bundles from the config file.
+ * Exported for use in tool handlers — call after ensuring config is loaded.
+ */
+export declare function listBundles(bundles: DomainBundle[]): DomainBundle[];
+/**
+ * Installs a domain bundle into the given project path.
+ *
+ * - Skills → {projectPath}/.claude/skills/{name}
+ * - Rules → {projectPath}/.claude/rules/{filename}
+ * - Spec templates → {projectPath}/planu/templates/{name}.md
+ *
+ * If a file already exists and overwrite is false, it is added to skipped.
+ */
+export declare function installBundle(bundleId: string, projectPath: string, options: {
+    overwrite?: boolean;
+}): Promise<BundleInstallResult>;
+//# sourceMappingURL=bundle-installer.d.ts.map

package/dist/engine/bundle-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-installer.d.ts","sourceRoot":"","sources":["../../src/engine/bundle-installer.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAiB,MAAM,mBAAmB,CAAC;AAwB1F;;;GAGG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAEhE;AAED;;;GAGG;AAEH,wBAAgB,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAEnE;AAuBD;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAC/B,OAAO,CAAC,mBAAmB,CAAC,CAkE9B"}

package/dist/engine/bundle-installer.js

@@ -0,0 +1,131 @@
+// Planu — bundle-installer.ts
+// Installs domain bundle components (skills, rules, spec templates) into a project.
+import { readFile, writeFile, mkdir, access } from 'node:fs/promises';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+// ---------------------------------------------------------------------------
+// Config loading
+// ---------------------------------------------------------------------------
+const CONFIG_PATH = join(dirname(fileURLToPath(import.meta.url)), '../config/domain-bundles.json');
+let cachedBundles = null;
+async function loadBundles() {
+    if (cachedBundles !== null) {
+        return cachedBundles;
+    }
+    const raw = await readFile(CONFIG_PATH, 'utf-8');
+    const config = JSON.parse(raw);
+    cachedBundles = config.bundles;
+    return cachedBundles;
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Returns all available domain bundles (synchronous after first load).
+ * Loads config lazily on first call.
+ */
+export async function listBundlesAsync() {
+    return loadBundles();
+}
+/**
+ * Returns all available domain bundles from the config file.
+ * Exported for use in tool handlers — call after ensuring config is loaded.
+ */
+/* v8 ignore start */
+export function listBundles(bundles) {
+    return bundles;
+}
+/* v8 ignore stop */
+/**
+ * Checks if a file exists at the given path.
+ */
+async function fileExists(filePath) {
+    try {
+        await access(filePath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Writes a file, creating parent directories as needed.
+ */
+async function writeFileWithDirs(filePath, content) {
+    await mkdir(dirname(filePath), { recursive: true });
+    await writeFile(filePath, content, 'utf-8');
+}
+/**
+ * Installs a domain bundle into the given project path.
+ *
+ * - Skills → {projectPath}/.claude/skills/{name}
+ * - Rules → {projectPath}/.claude/rules/{filename}
+ * - Spec templates → {projectPath}/planu/templates/{name}.md
+ *
+ * If a file already exists and overwrite is false, it is added to skipped.
+ */
+export async function installBundle(bundleId, projectPath, options) {
+    const overwrite = options.overwrite ?? false;
+    const result = {
+        bundleId,
+        installed: [],
+        skipped: [],
+        errors: [],
+    };
+    const bundles = await loadBundles();
+    const bundle = bundles.find((b) => b.id === bundleId);
+    if (!bundle) {
+        result.errors.push(`Bundle "${bundleId}" not found`);
+        return result;
+    }
+    // Install skills
+    for (const skill of bundle.components.skills) {
+        const skillPath = join(projectPath, '.claude', 'skills', skill.name);
+        try {
+            if (!overwrite && (await fileExists(skillPath))) {
+                result.skipped.push(skillPath);
+                continue;
+            }
+            await writeFileWithDirs(skillPath, skill.content);
+            result.installed.push(skillPath);
+        }
+        catch (err) {
+            result.errors.push(`Failed to install skill "${skill.name}": ${String(err)}`);
+        }
+    }
+    // Install rules
+    for (const rule of bundle.components.rules) {
+        const rulePath = join(projectPath, '.claude', 'rules', rule.filename);
+        try {
+            if (!overwrite && (await fileExists(rulePath))) {
+                result.skipped.push(rulePath);
+                continue;
+            }
+            await writeFileWithDirs(rulePath, rule.content);
+            result.installed.push(rulePath);
+            /* v8 ignore next 3 */
+        }
+        catch (err) {
+            result.errors.push(`Failed to install rule "${rule.filename}": ${String(err)}`);
+        }
+    }
+    // Install spec templates
+    for (const template of bundle.components.specTemplates) {
+        const templatePath = join(projectPath, 'planu', 'templates', `${template.name}.md`);
+        try {
+            if (!overwrite && (await fileExists(templatePath))) {
+                result.skipped.push(templatePath);
+                continue;
+            }
+            const content = `# ${template.description}\n`;
+            await writeFileWithDirs(templatePath, content);
+            result.installed.push(templatePath);
+            /* v8 ignore next 3 */
+        }
+        catch (err) {
+            result.errors.push(`Failed to install template "${template.name}": ${String(err)}`);
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=bundle-installer.js.map

package/dist/engine/bundle-installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-installer.js","sourceRoot":"","sources":["../../src/engine/bundle-installer.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,oFAAoF;AACpF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,+BAA+B,CAAC,CAAC;AAEnG,IAAI,aAAa,GAA0B,IAAI,CAAC;AAEhD,KAAK,UAAU,WAAW;IACxB,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;IAChD,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,OAAO,WAAW,EAAE,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,qBAAqB;AACrB,MAAM,UAAU,WAAW,CAAC,OAAuB;IACjD,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,oBAAoB;AAEpB;;GAEG;AACH,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,OAAe;IAChE,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,WAAmB,EACnB,OAAgC;IAEhC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,MAAM,GAAwB;QAClC,QAAQ;QACR,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IAEtD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,QAAQ,aAAa,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iBAAiB;IACjB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;gBAChD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,MAAM,iBAAiB,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,KAAK,CAAC,IAAI,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAC/C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9B,SAAS;YACX,CAAC;YACD,MAAM,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChC,sBAAsB;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,IAAI,CAAC,QAAQ,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;QACvD,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC;QACpF,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;gBACnD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAClC,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,QAAQ,CAAC,WAAW,IAAI,CAAC;YAC9C,MAAM,iBAAiB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACpC,sBAAsB;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,QAAQ,CAAC,IAAI,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/engine/git-hook-injector.d.ts

@@ -0,0 +1,5 @@
+import type { HookSystem, PlanuAutoStageResult } from '../types/index.js';
+export type { HookSystem, PlanuAutoStageResult };
+export declare function detectHookSystem(projectPath: string): Promise<HookSystem>;
+export declare function injectPlanuAutoStage(projectPath: string): Promise<PlanuAutoStageResult>;
+//# sourceMappingURL=git-hook-injector.d.ts.map

package/dist/engine/git-hook-injector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-hook-injector.d.ts","sourceRoot":"","sources":["../../src/engine/git-hook-injector.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE1E,YAAY,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC;AA6BjD,wBAAsB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAiB/E;AAoBD,wBAAsB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA6B7F"}

package/dist/engine/git-hook-injector.js

@@ -0,0 +1,86 @@
+// engine/git-hook-injector.ts — Inject planu auto-stage snippet into project git pre-commit hook
+// SPEC-347: auto-stage planu HTML files so they are never left out of commits
+import { readFile, writeFile, access, constants } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+const PLANU_SNIPPET = `\n# Planu: auto-stage generated HTML reports\ngit add planu/ 2>/dev/null || true\n`;
+const PLANU_MARKER = 'git add planu/';
+async function fileExists(filePath) {
+    try {
+        await access(filePath, constants.F_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function packageJsonHasDep(projectPath, depName) {
+    try {
+        const pkgPath = join(projectPath, 'package.json');
+        const raw = await readFile(pkgPath, 'utf-8');
+        const pkg = JSON.parse(raw);
+        const deps = {
+            ...pkg.dependencies,
+            ...pkg.devDependencies,
+        };
+        return depName in deps;
+    }
+    catch {
+        return false;
+    }
+}
+export async function detectHookSystem(projectPath) {
+    if (await fileExists(join(projectPath, '.husky'))) {
+        return 'husky';
+    }
+    if ((await fileExists(join(projectPath, 'lefthook.yml'))) ||
+        (await fileExists(join(projectPath, 'lefthook.yaml')))) {
+        return 'lefthook';
+    }
+    if (await packageJsonHasDep(projectPath, 'simple-git-hooks')) {
+        return 'simple-git-hooks';
+    }
+    if (await fileExists(join(projectPath, '.git', 'hooks', 'pre-commit'))) {
+        return 'native';
+    }
+    return 'none';
+}
+async function injectIntoFile(hookFile) {
+    let content;
+    try {
+        content = await readFile(hookFile, 'utf-8');
+    }
+    catch {
+        content = '#!/bin/sh\n';
+    }
+    if (content.includes(PLANU_MARKER)) {
+        return { injected: false, alreadyPresent: true };
+    }
+    await writeFile(hookFile, content + PLANU_SNIPPET, 'utf-8');
+    return { injected: true, alreadyPresent: false };
+}
+export async function injectPlanuAutoStage(projectPath) {
+    const hookSystem = await detectHookSystem(projectPath);
+    const absPath = resolve(projectPath);
+    if (hookSystem === 'husky') {
+        const hookFile = join(absPath, '.husky', 'pre-commit');
+        const { injected, alreadyPresent } = await injectIntoFile(hookFile);
+        return { injected, hookSystem, hookFile, alreadyPresent };
+    }
+    if (hookSystem === 'native') {
+        const hookFile = join(absPath, '.git', 'hooks', 'pre-commit');
+        const { injected, alreadyPresent } = await injectIntoFile(hookFile);
+        return { injected, hookSystem, hookFile, alreadyPresent };
+    }
+    // lefthook / simple-git-hooks: cannot auto-inject, return manual instructions
+    const manualInstructions = hookSystem === 'lefthook'
+        ? `Add to lefthook.yml under pre-commit commands:\n  - run: git add planu/ 2>/dev/null || true`
+        : `Add to package.json "simple-git-hooks"."pre-commit":\n  "git add planu/ 2>/dev/null || true"`;
+    return {
+        injected: false,
+        hookSystem,
+        hookFile: '',
+        alreadyPresent: false,
+        manualInstructions,
+    };
+}
+//# sourceMappingURL=git-hook-injector.js.map

package/dist/engine/git-hook-injector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-hook-injector.js","sourceRoot":"","sources":["../../src/engine/git-hook-injector.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,8EAA8E;AAE9E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAK1C,MAAM,aAAa,GAAG,oFAAoF,CAAC;AAC3G,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAEtC,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,WAAmB,EAAE,OAAe;IACnE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QACvD,MAAM,IAAI,GAAG;YACX,GAAI,GAAG,CAAC,YAAoD;YAC5D,GAAI,GAAG,CAAC,eAAuD;SAChE,CAAC;QACF,OAAO,OAAO,IAAI,IAAI,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,WAAmB;IACxD,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAClD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IACE,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;QACrD,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,EACtD,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,MAAM,iBAAiB,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC7D,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,QAAgB;IAEhB,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,aAAa,CAAC;IAC1B,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IACnD,CAAC;IAED,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,GAAG,aAAa,EAAE,OAAO,CAAC,CAAC;IAC5D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB;IAC5D,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAErC,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACvD,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;QACpE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QAC9D,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;QACpE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC5D,CAAC;IAED,8EAA8E;IAC9E,MAAM,kBAAkB,GACtB,UAAU,KAAK,UAAU;QACvB,CAAC,CAAC,6FAA6F;QAC/F,CAAC,CAAC,8FAA8F,CAAC;IAErG,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,UAAU;QACV,QAAQ,EAAE,EAAE;QACZ,cAAc,EAAE,KAAK;QACrB,kBAAkB;KACnB,CAAC;AACJ,CAAC"}

package/dist/engine/merge-risk-assessor/analyzers.d.ts

@@ -0,0 +1,22 @@
+import type { AnalyzerResult } from '../../types/index.js';
+/**
+ * 30% weight — detects security-sensitive patterns in diff and file paths.
+ */
+export declare function analyzeSecuritySurface(files: string[], diff: string): AnalyzerResult;
+/**
+ * 25% weight — checks if tests accompany code changes.
+ */
+export declare function analyzeCoverageDelta(linesAdded: number, files: string[]): AnalyzerResult;
+/**
+ * 20% weight — estimates blast radius by file count and core file changes.
+ */
+export declare function analyzeBlastRadius(filesChanged: number, files: string[]): AnalyzerResult;
+/**
+ * 15% weight — detects schema migrations and irreversible changes.
+ */
+export declare function analyzeReversibility(files: string[], diff: string): AnalyzerResult;
+/**
+ * 10% weight — checks spec compliance via context.
+ */
+export declare function analyzeSpecCompliance(files: string[], context?: string): AnalyzerResult;
+//# sourceMappingURL=analyzers.d.ts.map

package/dist/engine/merge-risk-assessor/analyzers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyzers.d.ts","sourceRoot":"","sources":["../../../src/engine/merge-risk-assessor/analyzers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAa3D;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,CAoCpF;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,cAAc,CAiCxF;AAID;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,cAAc,CA6BxF;AAMD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,CAwBlF;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,cAAc,CAsBvF"}

package/dist/engine/merge-risk-assessor/analyzers.js

@@ -0,0 +1,150 @@
+const SECURITY_PATTERNS = [
+    /password/i,
+    /token/i,
+    /secret/i,
+    /apiKey/i,
+    /api_key/i,
+    /process\.env/,
+];
+const SECURITY_PATHS = ['auth/', 'middleware/', 'oauth/', 'jwt/', 'permissions/'];
+/**
+ * 30% weight — detects security-sensitive patterns in diff and file paths.
+ */
+export function analyzeSecuritySurface(files, diff) {
+    const sensitiveFiles = files.filter((f) => SECURITY_PATHS.some((p) => f.includes(p)));
+    const patternMatches = SECURITY_PATTERNS.filter((p) => p.test(diff));
+    if (sensitiveFiles.length > 0 && patternMatches.length > 0) {
+        return {
+            score: 90,
+            reason: `Security-sensitive files modified (${sensitiveFiles[0]}) with credential patterns detected`,
+        };
+    }
+    if (sensitiveFiles.length > 0) {
+        return {
+            score: 70,
+            reason: `Security-sensitive paths modified: ${sensitiveFiles.slice(0, 2).join(', ')}`,
+        };
+    }
+    if (patternMatches.length >= 3) {
+        return {
+            score: 60,
+            reason: `Multiple credential patterns in diff (password, token, secret, etc.)`,
+        };
+    }
+    if (patternMatches.length > 0) {
+        return {
+            score: 35,
+            reason: `Credential-related patterns detected in diff`,
+        };
+    }
+    return { score: 10, reason: 'No security-sensitive patterns detected' };
+}
+/**
+ * 25% weight — checks if tests accompany code changes.
+ */
+export function analyzeCoverageDelta(linesAdded, files) {
+    const hasTests = files.some((f) => f.includes('.test.ts') ||
+        f.includes('.spec.ts') ||
+        f.includes('.test.js') ||
+        f.includes('tests/') ||
+        f.includes('__tests__/'));
+    if (linesAdded === 0) {
+        return { score: 10, reason: 'No new lines added — deletion/refactor only' };
+    }
+    if (hasTests) {
+        const codeFiles = files.filter((f) => !f.includes('.test.') && !f.includes('.spec.') && !f.includes('__tests__/'));
+        if (codeFiles.length === 0) {
+            return { score: 5, reason: 'Test-only changes' };
+        }
+        return { score: 20, reason: 'Test files included in the changeset' };
+    }
+    if (linesAdded > 200) {
+        return { score: 85, reason: `Large addition (${linesAdded} lines) with no test coverage` };
+    }
+    if (linesAdded > 50) {
+        return { score: 65, reason: `Significant addition (${linesAdded} lines) without tests` };
+    }
+    return { score: 45, reason: 'No test files in changeset' };
+}
+const CORE_FILES = ['index.ts', 'types/index.ts', 'base-store.ts'];
+/**
+ * 20% weight — estimates blast radius by file count and core file changes.
+ */
+export function analyzeBlastRadius(filesChanged, files) {
+    const touchesCoreFiles = files.some((f) => CORE_FILES.some((c) => f.endsWith(c)));
+    let baseScore;
+    let reason;
+    if (filesChanged > 20) {
+        baseScore = 80;
+        reason = `Very large changeset: ${filesChanged} files modified`;
+    }
+    else if (filesChanged > 10) {
+        baseScore = 50;
+        reason = `Large changeset: ${filesChanged} files modified`;
+    }
+    else if (filesChanged > 5) {
+        baseScore = 30;
+        reason = `Moderate changeset: ${filesChanged} files modified`;
+    }
+    else {
+        baseScore = 10;
+        reason = `Small changeset: ${filesChanged} files modified`;
+    }
+    if (touchesCoreFiles) {
+        const capped = Math.min(100, Math.round(baseScore * 1.5));
+        return {
+            score: capped,
+            reason: `${reason} — includes core files (index.ts, types/index.ts, or base-store.ts)`,
+        };
+    }
+    return { score: baseScore, reason };
+}
+const MIGRATION_PATTERNS = [/migration/i, /ALTER\s+TABLE/i, /DROP\s+TABLE/i, /DROP\s+COLUMN/i];
+const SCHEMA_FILES = ['schema.ts', 'schema.js', 'migrations/', 'migrate/'];
+/**
+ * 15% weight — detects schema migrations and irreversible changes.
+ */
+export function analyzeReversibility(files, diff) {
+    const hasMigrationFile = files.some((f) => SCHEMA_FILES.some((s) => f.includes(s)));
+    const hasDestructivePatterns = MIGRATION_PATTERNS.filter((p) => p.test(diff));
+    if (hasMigrationFile && hasDestructivePatterns.length > 0) {
+        return {
+            score: 95,
+            reason: 'Migration files with destructive SQL patterns (ALTER/DROP) detected',
+        };
+    }
+    if (hasMigrationFile) {
+        return { score: 70, reason: 'Database migration files in changeset' };
+    }
+    if (hasDestructivePatterns.length > 0) {
+        return {
+            score: 60,
+            reason: 'Destructive schema patterns detected in diff',
+        };
+    }
+    return { score: 10, reason: 'No migration or schema changes detected' };
+}
+/**
+ * 10% weight — checks spec compliance via context.
+ */
+export function analyzeSpecCompliance(files, context) {
+    // Unused but kept for API consistency
+    void files;
+    if (context && /SPEC-\d+/i.test(context)) {
+        return {
+            score: 20,
+            reason: 'Spec ID found in context — changes appear spec-driven',
+        };
+    }
+    if (context && context.trim().length > 10) {
+        return {
+            score: 35,
+            reason: 'Context provided but no spec ID — partially compliant',
+        };
+    }
+    return {
+        score: 50,
+        reason: 'No spec context provided — cannot verify spec-driven development',
+    };
+}
+//# sourceMappingURL=analyzers.js.map

package/dist/engine/merge-risk-assessor/analyzers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyzers.js","sourceRoot":"","sources":["../../../src/engine/merge-risk-assessor/analyzers.ts"],"names":[],"mappings":"AAGA,MAAM,iBAAiB,GAAG;IACxB,WAAW;IACX,QAAQ;IACR,SAAS;IACT,SAAS;IACT,UAAU;IACV,cAAc;CACf,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;AAElF;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAe,EAAE,IAAY;IAClE,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACxC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAC1C,CAAC;IAEF,MAAM,cAAc,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAErE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3D,OAAO;YACL,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,sCAAsC,cAAc,CAAC,CAAC,CAAC,qCAAqC;SACrG,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,sCAAsC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACtF,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,sEAAsE;SAC/E,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,8CAA8C;SACvD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;AAC1E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,KAAe;IACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CACzB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QACtB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QACtB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QACtB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACpB,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAC3B,CAAC;IAEF,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;IAC9E,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CACnF,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACnD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IACvE,CAAC;IAED,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;QACrB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,mBAAmB,UAAU,+BAA+B,EAAE,CAAC;IAC7F,CAAC;IAED,IAAI,UAAU,GAAG,EAAE,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,yBAAyB,UAAU,uBAAuB,EAAE,CAAC;IAC3F,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,UAAU,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC;AAEnE;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,YAAoB,EAAE,KAAe;IACtE,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAElF,IAAI,SAAiB,CAAC;IACtB,IAAI,MAAc,CAAC;IAEnB,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;QACtB,SAAS,GAAG,EAAE,CAAC;QACf,MAAM,GAAG,yBAAyB,YAAY,iBAAiB,CAAC;IAClE,CAAC;SAAM,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;QAC7B,SAAS,GAAG,EAAE,CAAC;QACf,MAAM,GAAG,oBAAoB,YAAY,iBAAiB,CAAC;IAC7D,CAAC;SAAM,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QAC5B,SAAS,GAAG,EAAE,CAAC;QACf,MAAM,GAAG,uBAAuB,YAAY,iBAAiB,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,EAAE,CAAC;QACf,MAAM,GAAG,oBAAoB,YAAY,iBAAiB,CAAC;IAC7D,CAAC;IAED,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC;QAC1D,OAAO;YACL,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,GAAG,MAAM,qEAAqE;SACvF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;AAE/F,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;AAE3E;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAe,EAAE,IAAY;IAChE,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpF,MAAM,sBAAsB,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE9E,IAAI,gBAAgB,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO;YACL,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,qEAAqE;SAC9E,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IACxE,CAAC;IAED,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,8CAA8C;SACvD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;AAC1E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAe,EAAE,OAAgB;IACrE,sCAAsC;IACtC,KAAK,KAAK,CAAC;IAEX,IAAI,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,uDAAuD;SAChE,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC1C,OAAO;YACL,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,uDAAuD;SAChE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,kEAAkE;KAC3E,CAAC;AACJ,CAAC"}

package/dist/engine/merge-risk-assessor/git-diff-parser.d.ts

@@ -0,0 +1,16 @@
+import type { DiffStats } from '../../types/index.js';
+export type { DiffStats };
+/**
+ * Runs `git diff --stat {baseBranch}...{branch}` and parses the output.
+ * Uses execFile (not exec) to prevent shell injection.
+ */
+export declare function getDiffStats(projectPath: string, branch: string, baseBranch: string): Promise<DiffStats>;
+/**
+ * Parses the output of `git diff --stat` into structured stats.
+ * Example output:
+ *   src/foo.ts | 10 +++--
+ *   src/bar.ts |  4 +
+ *   2 files changed, 11 insertions(+), 4 deletions(-)
+ */
+export declare function parseDiffStatOutput(output: string): DiffStats;
+//# sourceMappingURL=git-diff-parser.d.ts.map

package/dist/engine/merge-risk-assessor/git-diff-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-diff-parser.d.ts","sourceRoot":"","sources":["../../../src/engine/merge-risk-assessor/git-diff-parser.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtD,YAAY,EAAE,SAAS,EAAE,CAAC;AAI1B;;;GAGG;AACH,wBAAsB,YAAY,CAChC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,SAAS,CAAC,CAQpB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAiC7D"}