crewforth 3.2.0-rc.7 → 3.2.0-rc.8

package/CHANGELOG.md

@@ -220,6 +220,11 @@ versioning follows [SemVer](https://semver.org/).
 
 ### Fixed
 
+- **Crew Map reads a `fetch` call's method from its own options only.** The method was taken from the next four
+  lines, so in a file of one-line calls a `{ method: 'POST' }` on a later call was given to the earlier ones, and the
+  map reported `POST /api/products is called but no endpoint in this repo provides it` (endpoint-missing) for a
+  plain `fetch('/api/products')`. The scan now reads the call's arguments up to its own closing parenthesis, over
+  strings and nested brackets; a method on a later line of the same call is still read.
 - **A push approval covers a tag on the approved commit.** `git push <remote> <tag>` had no way to be approved: the
   click and `/crew-approve push` both record a push of the branch, and the tag push of a release was refused after
   either, so the session handed the user the command to run. It now passes when the tag points at the commit the

package/VERSION

@@ -1 +1 @@
-3.2.0-rc.7
+3.2.0-rc.8

package/kit/eval/lib/crew-map/surface.mjs

@@ -270,6 +270,24 @@ function firstArg(L, i, from) {
   }
   return null;
 }
+// The arguments of a call whose `(` ends at `from` on line i, up to its own `)`, across at most four lines: strings
+// and nested brackets are stepped over, so `method:` is read from this call's options and never from the next call's.
+function callArgs(L, i, from) {
+  let out = ''; let depth = 0; let q = null;
+  for (let j = i; j < Math.min(L.length, i + 4); j++) {
+    const s = j === i ? L[i].slice(from) : L[j];
+    for (let k = 0; k < s.length; k++) {
+      const c = s[k];
+      if (q) { if (c === '\\') { out += c + (s[k + 1] ?? ''); k += 1; continue; } if (c === q) q = null; }
+      else if (c === '"' || c === "'" || c === '`') q = c;
+      else if (c === '(' || c === '[' || c === '{') depth += 1;
+      else if (c === ')' || c === ']' || c === '}') { if (depth === 0) return out; depth -= 1; }
+      out += c;
+    }
+    out += ' ';
+  }
+  return out;
+}
 // The names a module calls HTTP through: axios, and every `x = axios.create(…)` in any of its files (a client made
 // in lib/api.ts is called from every component). A name a file itself makes a server of is not one there.
 function httpClients(pj, m) {
@@ -358,8 +376,7 @@ export function endpoints(pj, st, out) {
           if (nm && nest !== null) add(provides, m, nm[1] === 'All' ? '*' : nm[1], join(nest, nm[2] || ''), f, i, `@${nm[1]}`);
           const fe = /\bfetch\(\s*(['"`])([^'"`]+)\1/.exec(l);
           if (fe && !/^https?:/.test(fe[2])) {
-            const win = L.slice(i, i + 4).join(' ');
-            const mt = /method\s*:\s*['"](\w+)['"]/.exec(win);
+            const mt = /method\s*:\s*['"](\w+)['"]/.exec(callArgs(L, i, fe.index + l.slice(fe.index).indexOf('(') + 1));
             add(consumes, m, mt ? mt[1] : 'GET', fe[2], f, i, fe[2]);
           }
           // `api.get<User[]>("/x")` and a call whose path is on the next line read alike.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "crewforth",
-  "version": "3.2.0-rc.7",
+  "version": "3.2.0-rc.8",
   "description": "Crewforth — your engineering crew for Claude Code: agents, skills and tool-level gates, in any stack.",
   "bin": {
     "crewforth": "bin/cli.js"