codekin 0.3.7 → 0.4.0

package/server/dist/commit-event-handler.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Commit-review event dispatcher.
+ *
+ * Receives commit events from git post-commit hooks and dispatches
+ * commit-review workflow runs after passing a multi-layer filter chain
+ * for cycle prevention and deduplication.
+ *
+ * Filter chain (defense in depth):
+ *   1. Branch filter — reject if `codekin/reports`
+ *   2. Message filter — reject if message starts with any workflow commitMessage prefix
+ *   3. Config lookup — reject if no enabled `commit-review` workflow for this repo
+ *   4. Commit hash dedup — in-memory Map with 1h TTL, reject duplicates
+ *   5. Concurrency cap — max 1 running commit-review per repo
+ */
+export interface CommitEvent {
+    repoPath: string;
+    branch: string;
+    commitHash: string;
+    commitMessage: string;
+    author: string;
+}
+export interface CommitEventResult {
+    accepted: boolean;
+    reason?: string;
+    runId?: string;
+}
+export declare class CommitEventHandler {
+    /** commitHash → timestamp of when it was recorded. */
+    private seenCommits;
+    private cleanupTimer;
+    constructor();
+    /**
+     * Process a commit event through the filter chain.
+     * Returns accepted=true if a workflow run was dispatched.
+     */
+    handle(event: CommitEvent): Promise<CommitEventResult>;
+    /** Remove dedup entries older than the TTL. */
+    private pruneExpired;
+    /** Clean up resources. */
+    shutdown(): void;
+}

package/server/dist/commit-event-handler.js

@@ -0,0 +1,99 @@
+/**
+ * Commit-review event dispatcher.
+ *
+ * Receives commit events from git post-commit hooks and dispatches
+ * commit-review workflow runs after passing a multi-layer filter chain
+ * for cycle prevention and deduplication.
+ *
+ * Filter chain (defense in depth):
+ *   1. Branch filter — reject if `codekin/reports`
+ *   2. Message filter — reject if message starts with any workflow commitMessage prefix
+ *   3. Config lookup — reject if no enabled `commit-review` workflow for this repo
+ *   4. Commit hash dedup — in-memory Map with 1h TTL, reject duplicates
+ *   5. Concurrency cap — max 1 running commit-review per repo
+ */
+import { getWorkflowEngine } from './workflow-engine.js';
+import { loadWorkflowConfig } from './workflow-config.js';
+import { getWorkflowCommitPrefixes } from './workflow-loader.js';
+// ---------------------------------------------------------------------------
+// CommitEventHandler
+// ---------------------------------------------------------------------------
+/** TTL for commit hash deduplication entries (1 hour). */
+const DEDUP_TTL_MS = 60 * 60 * 1000;
+/** Interval for cleaning up expired dedup entries (10 minutes). */
+const DEDUP_CLEANUP_INTERVAL_MS = 10 * 60 * 1000;
+export class CommitEventHandler {
+    /** commitHash → timestamp of when it was recorded. */
+    seenCommits = new Map();
+    cleanupTimer;
+    constructor() {
+        // Periodically prune expired dedup entries
+        this.cleanupTimer = setInterval(() => this.pruneExpired(), DEDUP_CLEANUP_INTERVAL_MS);
+    }
+    /**
+     * Process a commit event through the filter chain.
+     * Returns accepted=true if a workflow run was dispatched.
+     */
+    async handle(event) {
+        // Layer 1: Branch filter
+        if (event.branch === 'codekin/reports') {
+            return { accepted: false, reason: 'Rejected: reports branch' };
+        }
+        // Layer 2: Message filter — reject if message starts with any workflow commit prefix
+        const prefixes = getWorkflowCommitPrefixes();
+        for (const prefix of prefixes) {
+            if (event.commitMessage.startsWith(prefix)) {
+                return { accepted: false, reason: `Rejected: workflow commit message (${prefix})` };
+            }
+        }
+        // Layer 3: Config lookup — find an enabled commit-review workflow for this repo
+        const config = loadWorkflowConfig();
+        const repoConfig = config.reviewRepos.find(r => r.repoPath === event.repoPath && r.enabled && r.kind === 'commit-review');
+        if (!repoConfig) {
+            return { accepted: false, reason: 'Rejected: no enabled commit-review config for this repo' };
+        }
+        // Layer 4: Commit hash dedup
+        if (this.seenCommits.has(event.commitHash)) {
+            return { accepted: false, reason: 'Rejected: duplicate commit hash' };
+        }
+        this.seenCommits.set(event.commitHash, Date.now());
+        // Layer 5: Concurrency cap — max 1 running commit-review per repo
+        const engine = getWorkflowEngine();
+        const activeRuns = engine.listRuns({ kind: 'commit-review', status: 'running', limit: 100 });
+        const hasActiveRun = activeRuns.some(run => run.input.repoPath === event.repoPath);
+        if (hasActiveRun) {
+            return { accepted: false, reason: 'Rejected: commit-review already running for this repo' };
+        }
+        // All filters passed — dispatch the workflow
+        try {
+            const run = await engine.startRun('commit-review', {
+                repoPath: event.repoPath,
+                repoName: repoConfig.name,
+                commitHash: event.commitHash,
+                customPrompt: repoConfig.customPrompt,
+                model: repoConfig.model,
+            });
+            console.log(`[commit-event] Dispatched commit-review run ${run.id} for ${event.repoPath} (${event.commitHash.slice(0, 8)})`);
+            return { accepted: true, runId: run.id };
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(`[commit-event] Failed to start run for ${event.repoPath}:`, msg);
+            return { accepted: false, reason: `Failed to start run: ${msg}` };
+        }
+    }
+    /** Remove dedup entries older than the TTL. */
+    pruneExpired() {
+        const cutoff = Date.now() - DEDUP_TTL_MS;
+        for (const [hash, ts] of this.seenCommits) {
+            if (ts < cutoff)
+                this.seenCommits.delete(hash);
+        }
+    }
+    /** Clean up resources. */
+    shutdown() {
+        clearInterval(this.cleanupTimer);
+        this.seenCommits.clear();
+    }
+}
+//# sourceMappingURL=commit-event-handler.js.map

package/server/dist/commit-event-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit-event-handler.js","sourceRoot":"","sources":["../commit-event-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAA;AAoBhE,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,0DAA0D;AAC1D,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEnC,mEAAmE;AACnE,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEhD,MAAM,OAAO,kBAAkB;IAC7B,sDAAsD;IAC9C,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,YAAY,CAAgC;IAEpD;QACE,2CAA2C;QAC3C,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,yBAAyB,CAAC,CAAA;IACvF,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,KAAkB;QAC7B,yBAAyB;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;YACvC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAA;QAChE,CAAC;QAED,qFAAqF;QACrF,MAAM,QAAQ,GAAG,yBAAyB,EAAE,CAAA;QAC5C,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,MAAM,GAAG,EAAE,CAAA;YACrF,CAAC;QACH,CAAC;QAED,gFAAgF;QAChF,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAA;QACnC,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,CAC9E,CAAA;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,yDAAyD,EAAE,CAAA;QAC/F,CAAC;QAED,6BAA6B;QAC7B,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAA;QACvE,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QAElD,kEAAkE;QAClE,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAA;QAClC,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5F,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAClC,GAAG,CAAC,EAAE,CAAE,GAAG,CAAC,KAAiC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAC1E,CAAA;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,uDAAuD,EAAE,CAAA;QAC7F,CAAC;QAED,6CAA6C;QAC7C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE;gBACjD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,QAAQ,EAAE,UAAU,CAAC,IAAI;gBACzB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,YAAY,EAAE,UAAU,CAAC,YAAY;gBACrC,KAAK,EAAE,UAAU,CAAC,KAAK;aACxB,CAAC,CAAA;YAEF,OAAO,CAAC,GAAG,CAAC,+CAA+C,GAAG,CAAC,EAAE,QAAQ,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;YAC5H,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAA;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC5D,OAAO,CAAC,KAAK,CAAC,0CAA0C,KAAK,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAA;YAC/E,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,GAAG,EAAE,EAAE,CAAA;QACnE,CAAC;IACH,CAAC;IAED,+CAA+C;IACvC,YAAY;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAA;QACxC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,EAAE,GAAG,MAAM;gBAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAChD,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,QAAQ;QACN,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAChC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAA;IAC1B,CAAC;CACF"}

package/server/dist/commit-event-hooks.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Git hook installation manager for commit-review event dispatching.
+ *
+ * Manages the codekin section inside each repo's post-commit hook.
+ * The hook script is inserted between BEGIN/END markers so it can
+ * coexist with other hooks and be cleanly removed.
+ *
+ * Also manages ~/.codekin/hook-config.json which provides the server
+ * URL and auth token to the shell hook script.
+ */
+export interface HookConfig {
+    serverUrl: string;
+    authToken: string;
+}
+/**
+ * Write ~/.codekin/hook-config.json with the server URL and auth token.
+ * File permissions are set to 0600 (owner read/write only) since it contains a secret.
+ */
+export declare function ensureHookConfig(authToken: string, serverUrl: string): void;
+/**
+ * Install the codekin post-commit hook section into a repo.
+ * If the hook file already exists, the codekin section is appended (or replaced).
+ * If not, a new file is created with a shebang + the section.
+ */
+export declare function installCommitHook(repoPath: string): boolean;
+/**
+ * Remove the codekin section from a repo's post-commit hook.
+ * If the file only contains the codekin section (+ shebang), removes the file entirely.
+ */
+export declare function uninstallCommitHook(repoPath: string): boolean;
+/**
+ * Sync commit hooks with the current workflow config.
+ * Installs hooks for enabled commit-review repos, uninstalls for disabled/removed ones.
+ */
+export declare function syncCommitHooks(): void;

package/server/dist/commit-event-hooks.js

@@ -0,0 +1,177 @@
+/**
+ * Git hook installation manager for commit-review event dispatching.
+ *
+ * Manages the codekin section inside each repo's post-commit hook.
+ * The hook script is inserted between BEGIN/END markers so it can
+ * coexist with other hooks and be cleanly removed.
+ *
+ * Also manages ~/.codekin/hook-config.json which provides the server
+ * URL and auth token to the shell hook script.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync, chmodSync, unlinkSync } from 'fs';
+import { execFileSync } from 'child_process';
+import { homedir } from 'os';
+import { dirname, join } from 'path';
+import { loadWorkflowConfig } from './workflow-config.js';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const BEGIN_MARKER = '# BEGIN CODEKIN COMMIT HOOK';
+const END_MARKER = '# END CODEKIN COMMIT HOOK';
+const HOOK_CONFIG_PATH = join(homedir(), '.codekin', 'hook-config.json');
+// Resolve the hook script path relative to this file.
+// In compiled mode (dist/), the shell script is at ../server/commit-event-hook.sh
+// In source mode, it's a sibling file.
+import { fileURLToPath } from 'url';
+const __ownDir = dirname(fileURLToPath(import.meta.url));
+const HOOK_SCRIPT_SOURCE = existsSync(join(__ownDir, 'commit-event-hook.sh'))
+    ? join(__ownDir, 'commit-event-hook.sh')
+    : join(__ownDir, '..', 'server', 'commit-event-hook.sh');
+/**
+ * Write ~/.codekin/hook-config.json with the server URL and auth token.
+ * File permissions are set to 0600 (owner read/write only) since it contains a secret.
+ */
+export function ensureHookConfig(authToken, serverUrl) {
+    const dir = dirname(HOOK_CONFIG_PATH);
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    const config = { serverUrl, authToken };
+    writeFileSync(HOOK_CONFIG_PATH, JSON.stringify(config, null, 2), { encoding: 'utf-8', mode: 0o600 });
+    console.log(`[commit-hooks] Hook config written to ${HOOK_CONFIG_PATH}`);
+}
+// ---------------------------------------------------------------------------
+// Hook installation
+// ---------------------------------------------------------------------------
+/**
+ * Resolve the hooks directory for a given repo.
+ * Respects `core.hooksPath` if configured, otherwise uses `.git/hooks/`.
+ */
+function getHooksDir(repoPath) {
+    try {
+        const customPath = execFileSync('git', ['config', '--get', 'core.hooksPath'], { cwd: repoPath, timeout: 5000, stdio: ['pipe', 'pipe', 'pipe'] }).toString().trim();
+        if (customPath)
+            return customPath;
+    }
+    catch {
+        // Not set — use default
+    }
+    return join(repoPath, '.git', 'hooks');
+}
+/**
+ * Generate the codekin hook section that will be inserted into post-commit.
+ * Sources the shared hook script so updates to the script are picked up
+ * without reinstalling hooks.
+ */
+function generateHookSection() {
+    return [
+        BEGIN_MARKER,
+        `# Installed by Codekin — do not edit this section manually`,
+        `if [ -f "${HOOK_SCRIPT_SOURCE}" ]; then`,
+        `  . "${HOOK_SCRIPT_SOURCE}"`,
+        `fi`,
+        END_MARKER,
+    ].join('\n');
+}
+/**
+ * Install the codekin post-commit hook section into a repo.
+ * If the hook file already exists, the codekin section is appended (or replaced).
+ * If not, a new file is created with a shebang + the section.
+ */
+export function installCommitHook(repoPath) {
+    const hooksDir = getHooksDir(repoPath);
+    const hookPath = join(hooksDir, 'post-commit');
+    if (!existsSync(hooksDir)) {
+        mkdirSync(hooksDir, { recursive: true });
+    }
+    const section = generateHookSection();
+    let content;
+    if (existsSync(hookPath)) {
+        const existing = readFileSync(hookPath, 'utf-8');
+        // Already installed — replace existing section
+        if (existing.includes(BEGIN_MARKER)) {
+            const re = new RegExp(`${escapeRegex(BEGIN_MARKER)}[\\s\\S]*?${escapeRegex(END_MARKER)}`);
+            content = existing.replace(re, section);
+        }
+        else {
+            // Append to existing hook
+            content = existing.trimEnd() + '\n\n' + section + '\n';
+        }
+    }
+    else {
+        // New file
+        content = `#!/bin/sh\n\n${section}\n`;
+    }
+    writeFileSync(hookPath, content, 'utf-8');
+    chmodSync(hookPath, 0o755);
+    console.log(`[commit-hooks] Installed post-commit hook at ${hookPath}`);
+    return true;
+}
+/**
+ * Remove the codekin section from a repo's post-commit hook.
+ * If the file only contains the codekin section (+ shebang), removes the file entirely.
+ */
+export function uninstallCommitHook(repoPath) {
+    const hooksDir = getHooksDir(repoPath);
+    const hookPath = join(hooksDir, 'post-commit');
+    if (!existsSync(hookPath))
+        return false;
+    const existing = readFileSync(hookPath, 'utf-8');
+    if (!existing.includes(BEGIN_MARKER))
+        return false;
+    const re = new RegExp(`\\n?${escapeRegex(BEGIN_MARKER)}[\\s\\S]*?${escapeRegex(END_MARKER)}\\n?`);
+    const cleaned = existing.replace(re, '\n').trim();
+    // If only the shebang remains, the hook is effectively empty
+    if (!cleaned || cleaned === '#!/bin/sh' || cleaned === '#!/bin/bash') {
+        // Remove the now-empty hook file
+        unlinkSync(hookPath);
+        console.log(`[commit-hooks] Removed empty post-commit hook at ${hookPath}`);
+    }
+    else {
+        writeFileSync(hookPath, cleaned + '\n', 'utf-8');
+        console.log(`[commit-hooks] Removed codekin section from ${hookPath}`);
+    }
+    return true;
+}
+// ---------------------------------------------------------------------------
+// Sync: install/uninstall hooks based on current config
+// ---------------------------------------------------------------------------
+/**
+ * Sync commit hooks with the current workflow config.
+ * Installs hooks for enabled commit-review repos, uninstalls for disabled/removed ones.
+ */
+export function syncCommitHooks() {
+    const config = loadWorkflowConfig();
+    const commitReviewRepos = new Set();
+    // Install hooks for enabled commit-review repos
+    for (const repo of config.reviewRepos) {
+        if (repo.kind === 'commit-review' && repo.enabled) {
+            commitReviewRepos.add(repo.repoPath);
+            try {
+                if (existsSync(join(repo.repoPath, '.git'))) {
+                    installCommitHook(repo.repoPath);
+                }
+            }
+            catch (err) {
+                console.warn(`[commit-hooks] Failed to install hook for ${repo.repoPath}:`, err);
+            }
+        }
+    }
+    // Uninstall hooks for repos that are no longer configured for commit-review
+    for (const repo of config.reviewRepos) {
+        if (!commitReviewRepos.has(repo.repoPath)) {
+            try {
+                uninstallCommitHook(repo.repoPath);
+            }
+            catch {
+                // Silently ignore — hook may not exist
+            }
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function escapeRegex(str) {
+    return str.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+//# sourceMappingURL=commit-event-hooks.js.map

package/server/dist/commit-event-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit-event-hooks.js","sourceRoot":"","sources":["../commit-event-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,IAAI,CAAA;AAC9F,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAA;AAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAEzD,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,YAAY,GAAG,6BAA6B,CAAA;AAClD,MAAM,UAAU,GAAG,2BAA2B,CAAA;AAE9C,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAA;AAExE,sDAAsD;AACtD,kFAAkF;AAClF,uCAAuC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAA;AACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AACxD,MAAM,kBAAkB,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAC3E,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC;IACxC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,sBAAsB,CAAC,CAAA;AAW1D;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,SAAiB;IACnE,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEzD,MAAM,MAAM,GAAe,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;IACnD,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACpG,OAAO,CAAC,GAAG,CAAC,yCAAyC,gBAAgB,EAAE,CAAC,CAAA;AAC1E,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,WAAW,CAAC,QAAgB;IACnC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,YAAY,CAC7B,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAC5C,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAClE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAA;QACnB,IAAI,UAAU;YAAE,OAAO,UAAU,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;AACxC,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB;IAC1B,OAAO;QACL,YAAY;QACZ,4DAA4D;QAC5D,YAAY,kBAAkB,WAAW;QACzC,QAAQ,kBAAkB,GAAG;QAC7B,IAAI;QACJ,UAAU;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IAE9C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAA;IACrC,IAAI,OAAe,CAAA;IAEnB,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAEhD,+CAA+C;QAC/C,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACpC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG,WAAW,CAAC,YAAY,CAAC,aAAa,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;YACzF,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;QACzC,CAAC;aAAM,CAAC;YACN,0BAA0B;YAC1B,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAA;QACxD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,WAAW;QACX,OAAO,GAAG,gBAAgB,OAAO,IAAI,CAAA;IACvC,CAAC;IAED,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IACzC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC1B,OAAO,CAAC,GAAG,CAAC,gDAAgD,QAAQ,EAAE,CAAC,CAAA;IACvE,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IAE9C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAA;IAEvC,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IAChD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAA;IAElD,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,WAAW,CAAC,YAAY,CAAC,aAAa,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IACjG,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;IAEjD,6DAA6D;IAC7D,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QACrE,iCAAiC;QACjC,UAAU,CAAC,QAAQ,CAAC,CAAA;QACpB,OAAO,CAAC,GAAG,CAAC,oDAAoD,QAAQ,EAAE,CAAC,CAAA;IAC7E,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;QAChD,OAAO,CAAC,GAAG,CAAC,+CAA+C,QAAQ,EAAE,CAAC,CAAA;IACxE,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAA;IACnC,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAA;IAE3C,gDAAgD;IAChD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClD,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACpC,IAAI,CAAC;gBACH,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;oBAC5C,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBAClC,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,6CAA6C,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAA;YAClF,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;AACnD,CAAC"}

package/server/dist/crypto-utils.js

@@ -9,11 +9,16 @@ import crypto from 'crypto';
  * URL-embedded passwords, and common API key formats.
  */
 const SECRET_PATTERNS = [
-    [/Bearer\s+\S+/gi, 'Bearer [REDACTED]'],
-    [/Authorization:\s*\S+/gi, 'Authorization: [REDACTED]'],
-    [/(https?:\/\/[^:]+):([^@]+)@/gi, '$1:[REDACTED]@'],
-    [/\b(sk-|pk-|api[_-]?key[=:]\s*)\S+/gi, '$1[REDACTED]'],
-    [/(password|passwd|pwd|secret|token)[=:]\s*\S+/gi, '$1=[REDACTED]'],
+    // Bearer tokens — match across whitespace/special chars until end-of-line or quote
+    [/Bearer\s+[^\s"']+/gi, 'Bearer [REDACTED]'],
+    // Authorization header values (Basic, Bearer, Token, etc.)
+    [/Authorization:\s*[^\s"'\r\n]+/gi, 'Authorization: [REDACTED]'],
+    // URL-embedded credentials — handle percent-encoded and special chars in password
+    [/(https?:\/\/[^:@\s]+):([^@\s]+)@/gi, '$1:[REDACTED]@'],
+    // Common API key prefixes (Stripe sk_live_, GitHub ghp_/gho_/ghs_, etc.)
+    [/\b(sk-|pk-|sk_live_|sk_test_|ghp_|gho_|ghs_|glpat-|xox[bpsa]-|api[_-]?key[=:]\s*)\S+/gi, '$1[REDACTED]'],
+    // Key-value secrets in configs/logs
+    [/(password|passwd|pwd|secret|token|credential|auth_token|access_key|private_key)[=:]\s*\S+/gi, '$1=[REDACTED]'],
 ];
 export function redactSecrets(input) {
     let result = input;

package/server/dist/crypto-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto-utils.js","sourceRoot":"","sources":["../crypto-utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAA;AAE3B;;;;GAIG;AACH,MAAM,eAAe,GAA4B;IAC/C,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;IACvC,CAAC,wBAAwB,EAAE,2BAA2B,CAAC;IACvD,CAAC,+BAA+B,EAAE,gBAAgB,CAAC;IACnD,CAAC,qCAAqC,EAAE,cAAc,CAAC;IACvD,CAAC,gDAAgD,EAAE,eAAe,CAAC;CACpE,CAAA;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,eAAe,EAAE,CAAC;QACrD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,SAAiB,EAAE,MAAc;IACpF,MAAM,QAAQ,GAAG,SAAS,GAAG,MAAM;SAChC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC,KAAK,CAAC,CAAA;IAEhB,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACtD,OAAO,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,SAAiB;IACvE,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC;SACjC,MAAM,CAAC,WAAW,SAAS,EAAE,CAAC;SAC9B,MAAM,CAAC,KAAK,CAAC,CAAA;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,SAAiB,EAAE,cAAsB;IAC/F,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;IAC3D,IAAI,cAAc,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAC3D,OAAO,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;AACnF,CAAC"}
+{"version":3,"file":"crypto-utils.js","sourceRoot":"","sources":["../crypto-utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAA;AAE3B;;;;GAIG;AACH,MAAM,eAAe,GAA4B;IAC/C,mFAAmF;IACnF,CAAC,qBAAqB,EAAE,mBAAmB,CAAC;IAC5C,2DAA2D;IAC3D,CAAC,iCAAiC,EAAE,2BAA2B,CAAC;IAChE,kFAAkF;IAClF,CAAC,oCAAoC,EAAE,gBAAgB,CAAC;IACxD,yEAAyE;IACzE,CAAC,wFAAwF,EAAE,cAAc,CAAC;IAC1G,oCAAoC;IACpC,CAAC,6FAA6F,EAAE,eAAe,CAAC;CACjH,CAAA;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,eAAe,EAAE,CAAC;QACrD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,SAAiB,EAAE,MAAc;IACpF,MAAM,QAAQ,GAAG,SAAS,GAAG,MAAM;SAChC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC,KAAK,CAAC,CAAA;IAEhB,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACtD,OAAO,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,SAAiB;IACvE,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC;SACjC,MAAM,CAAC,WAAW,SAAS,EAAE,CAAC;SAC9B,MAAM,CAAC,KAAK,CAAC,CAAA;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,SAAiB,EAAE,cAAsB;IAC/F,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;IAC3D,IAAI,cAAc,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAC3D,OAAO,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;AACnF,CAAC"}

package/server/dist/diff-parser.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Parses raw `git diff` output into structured DiffFile[] objects.
+ *
+ * Handles unified diff format with rename detection, binary files,
+ * and optional size-based truncation.
+ */
+import type { DiffFile } from './types.js';
+export interface ParseDiffResult {
+    files: DiffFile[];
+    truncated: boolean;
+    truncationReason?: string;
+}
+/**
+ * Parse raw unified diff output into structured file/hunk/line objects.
+ * If `maxBytes` is provided and the input exceeds it, parsing stops early
+ * and `truncated` is set to true.
+ */
+export declare function parseDiff(raw: string, maxBytes?: number): ParseDiffResult;
+/**
+ * Generate a synthetic diff for an untracked file, treating it as fully added.
+ * Reads the file content and produces a single hunk with all lines as additions.
+ */
+export declare function createUntrackedFileDiff(relativePath: string, content: string): DiffFile;

package/server/dist/diff-parser.js

@@ -0,0 +1,236 @@
+/**
+ * Parses raw `git diff` output into structured DiffFile[] objects.
+ *
+ * Handles unified diff format with rename detection, binary files,
+ * and optional size-based truncation.
+ */
+/** 2 MB default cap on raw diff output before truncation. */
+const DEFAULT_MAX_BYTES = 2 * 1024 * 1024;
+/**
+ * Parse raw unified diff output into structured file/hunk/line objects.
+ * If `maxBytes` is provided and the input exceeds it, parsing stops early
+ * and `truncated` is set to true.
+ */
+export function parseDiff(raw, maxBytes = DEFAULT_MAX_BYTES) {
+    let truncated = false;
+    let truncationReason;
+    let input = raw;
+    if (Buffer.byteLength(raw, 'utf-8') > maxBytes) {
+        truncated = true;
+        truncationReason = `Diff output exceeded ${Math.round(maxBytes / (1024 * 1024))} MB limit`;
+        // Truncate to roughly maxBytes — cut at last newline before limit
+        const buf = Buffer.from(raw, 'utf-8');
+        const sliced = buf.subarray(0, maxBytes).toString('utf-8');
+        const lastNewline = sliced.lastIndexOf('\n');
+        input = lastNewline > 0 ? sliced.slice(0, lastNewline) : sliced;
+    }
+    const files = [];
+    // Split on diff headers: "diff --git a/... b/..."
+    const fileSections = input.split(/^diff --git /m);
+    for (let i = 1; i < fileSections.length; i++) {
+        const section = fileSections[i];
+        const file = parseFileSection(section);
+        if (file)
+            files.push(file);
+    }
+    return { files, truncated, truncationReason };
+}
+function parseFileSection(section) {
+    const lines = section.split('\n');
+    if (lines.length === 0)
+        return null;
+    // First line: "a/path b/path"
+    const headerLine = lines[0];
+    const pathMatch = headerLine.match(/^a\/(.+?) b\/(.+?)$/);
+    if (!pathMatch)
+        return null;
+    const bPath = pathMatch[2];
+    let status = 'modified';
+    let oldPath;
+    let isBinary = false;
+    const hunks = [];
+    let additions = 0;
+    let deletions = 0;
+    let lineIdx = 1;
+    // Parse extended header lines (new file, deleted file, rename, binary, etc.)
+    while (lineIdx < lines.length) {
+        const line = lines[lineIdx];
+        if (line.startsWith('new file mode')) {
+            status = 'added';
+        }
+        else if (line.startsWith('deleted file mode')) {
+            status = 'deleted';
+        }
+        else if (line.startsWith('rename from ')) {
+            status = 'renamed';
+            oldPath = line.slice('rename from '.length);
+        }
+        else if (line.startsWith('similarity index') || line.startsWith('dissimilarity index')) {
+            // part of rename/copy header, skip
+        }
+        else if (line.startsWith('rename to ')) {
+            // already captured via bPath
+        }
+        else if (line.startsWith('index ')) {
+            // index line, skip
+        }
+        else if (line === 'GIT binary patch' || line.startsWith('Binary files ')) {
+            isBinary = true;
+        }
+        else if (line.startsWith('--- ') || line.startsWith('+++ ')) {
+            // file marker lines — skip but keep going for hunks
+        }
+        else if (line.startsWith('@@')) {
+            // Start of hunks — break out to hunk parsing
+            break;
+        }
+        else if (line.startsWith('old mode') || line.startsWith('new mode')) {
+            // mode change, skip
+        }
+        else {
+            // Unknown header line or empty — if we hit content, stop
+            if (!line.startsWith('\\') && line !== '') {
+                break;
+            }
+        }
+        lineIdx++;
+    }
+    // Parse hunks
+    if (!isBinary) {
+        while (lineIdx < lines.length) {
+            const line = lines[lineIdx];
+            if (line.startsWith('@@')) {
+                const hunkResult = parseHunk(lines, lineIdx);
+                if (hunkResult) {
+                    hunks.push(hunkResult.hunk);
+                    additions += hunkResult.additions;
+                    deletions += hunkResult.deletions;
+                    lineIdx = hunkResult.nextIdx;
+                }
+                else {
+                    lineIdx++;
+                }
+            }
+            else {
+                lineIdx++;
+            }
+        }
+    }
+    return {
+        path: bPath,
+        status,
+        oldPath: status === 'renamed' ? oldPath : undefined,
+        isBinary,
+        additions,
+        deletions,
+        hunks,
+    };
+}
+function parseHunk(lines, startIdx) {
+    const headerLine = lines[startIdx];
+    // Parse "@@ -10,7 +10,8 @@ optional context"
+    const hunkMatch = headerLine.match(/^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@(.*)$/);
+    if (!hunkMatch)
+        return null;
+    const oldStart = parseInt(hunkMatch[1], 10);
+    const oldLines = hunkMatch[2] !== undefined ? parseInt(hunkMatch[2], 10) : 1;
+    const newStart = parseInt(hunkMatch[3], 10);
+    const newLines = hunkMatch[4] !== undefined ? parseInt(hunkMatch[4], 10) : 1;
+    const diffLines = [];
+    let additions = 0;
+    let deletions = 0;
+    let oldLineNo = oldStart;
+    let newLineNo = newStart;
+    let idx = startIdx + 1;
+    while (idx < lines.length) {
+        const line = lines[idx];
+        // Next hunk or next file
+        if (line.startsWith('@@') || line.startsWith('diff --git '))
+            break;
+        if (line.startsWith('+')) {
+            diffLines.push({
+                type: 'add',
+                content: line.slice(1),
+                newLineNo: newLineNo,
+            });
+            additions++;
+            newLineNo++;
+        }
+        else if (line.startsWith('-')) {
+            diffLines.push({
+                type: 'delete',
+                content: line.slice(1),
+                oldLineNo: oldLineNo,
+            });
+            deletions++;
+            oldLineNo++;
+        }
+        else if (line.startsWith(' ')) {
+            diffLines.push({
+                type: 'context',
+                content: line.slice(1),
+                oldLineNo: oldLineNo,
+                newLineNo: newLineNo,
+            });
+            oldLineNo++;
+            newLineNo++;
+        }
+        else if (line.startsWith('\\')) {
+            // "" — skip
+        }
+        else if (line === '') {
+            // Unified diff always prefixes lines with ' ', '+', or '-'.
+            // An empty string means end-of-section (from split at file boundaries).
+            break;
+        }
+        else {
+            break;
+        }
+        idx++;
+    }
+    return {
+        hunk: {
+            header: headerLine,
+            oldStart,
+            oldLines,
+            newStart,
+            newLines,
+            lines: diffLines,
+        },
+        additions,
+        deletions,
+        nextIdx: idx,
+    };
+}
+/**
+ * Generate a synthetic diff for an untracked file, treating it as fully added.
+ * Reads the file content and produces a single hunk with all lines as additions.
+ */
+export function createUntrackedFileDiff(relativePath, content) {
+    const fileLines = content.split('\n');
+    // Remove trailing empty line from split if file ends with newline
+    if (fileLines.length > 0 && fileLines[fileLines.length - 1] === '') {
+        fileLines.pop();
+    }
+    const diffLines = fileLines.map((line, i) => ({
+        type: 'add',
+        content: line,
+        newLineNo: i + 1,
+    }));
+    return {
+        path: relativePath,
+        status: 'added',
+        isBinary: false,
+        additions: fileLines.length,
+        deletions: 0,
+        hunks: fileLines.length > 0 ? [{
+                header: `@@ -0,0 +1,${fileLines.length} @@`,
+                oldStart: 0,
+                oldLines: 0,
+                newStart: 1,
+                newLines: fileLines.length,
+                lines: diffLines,
+            }] : [],
+    };
+}
+//# sourceMappingURL=diff-parser.js.map