edsger 0.51.0 → 0.52.0

package/dist/phases/pr-splitting/__tests__/import-dep-validator.test.js

@@ -1,331 +0,0 @@
-import assert from 'node:assert';
-import { describe, it } from 'node:test';
-import { autoFixPROrdering, getTransitiveDependencies, parseImportSpecifiers, resolveImportToChangedFile, } from '../import-dep-validator.js';
-// ============================================================
-// parseImportSpecifiers
-// ============================================================
-void describe('parseImportSpecifiers', () => {
-    void it('parses named imports', () => {
-        const result = parseImportSpecifiers(`import { foo } from './utils'`);
-        assert.deepStrictEqual(result, ['./utils']);
-    });
-    void it('parses default imports', () => {
-        const result = parseImportSpecifiers(`import foo from './utils'`);
-        assert.deepStrictEqual(result, ['./utils']);
-    });
-    void it('parses namespace imports', () => {
-        const result = parseImportSpecifiers(`import * as foo from './utils'`);
-        assert.deepStrictEqual(result, ['./utils']);
-    });
-    void it('parses side-effect imports', () => {
-        const result = parseImportSpecifiers(`import './polyfill'`);
-        assert.deepStrictEqual(result, ['./polyfill']);
-    });
-    void it('parses type-only imports', () => {
-        const result = parseImportSpecifiers(`import type { Foo } from './types'`);
-        assert.deepStrictEqual(result, ['./types']);
-    });
-    void it('parses re-exports', () => {
-        const result = parseImportSpecifiers(`export { foo } from './utils'`);
-        assert.deepStrictEqual(result, ['./utils']);
-    });
-    void it('parses star re-exports', () => {
-        const result = parseImportSpecifiers(`export * from './utils'`);
-        assert.deepStrictEqual(result, ['./utils']);
-    });
-    void it('parses dynamic imports', () => {
-        const result = parseImportSpecifiers(`const m = import('./lazy')`);
-        assert.deepStrictEqual(result, ['./lazy']);
-    });
-    void it('parses multiple imports', () => {
-        const source = `
-import { foo } from './utils'
-import Bar from '../components/Bar'
-import type { Baz } from './types'
-`;
-        const result = parseImportSpecifiers(source);
-        assert.deepStrictEqual(result, ['./utils', '../components/Bar', './types']);
-    });
-    void it('filters out non-relative imports', () => {
-        const source = `
-import { X } from 'lodash'
-import React from 'react'
-import { Y } from './local'
-import { Z } from '@scope/package'
-`;
-        const result = parseImportSpecifiers(source);
-        assert.deepStrictEqual(result, ['./local']);
-    });
-    void it('parses multiline imports', () => {
-        const source = `import {
-  foo,
-  bar,
-  baz
-} from './utils'`;
-        const result = parseImportSpecifiers(source);
-        assert.deepStrictEqual(result, ['./utils']);
-    });
-    void it('deduplicates specifiers', () => {
-        const source = `
-import { foo } from './utils'
-import { bar } from './utils'
-`;
-        const result = parseImportSpecifiers(source);
-        assert.deepStrictEqual(result, ['./utils']);
-    });
-    void it('handles .js extension in specifier', () => {
-        const result = parseImportSpecifiers(`import { X } from './utils.js'`);
-        assert.deepStrictEqual(result, ['./utils.js']);
-    });
-    void it('returns empty for empty source', () => {
-        assert.deepStrictEqual(parseImportSpecifiers(''), []);
-    });
-    void it('returns empty for non-relative only', () => {
-        const source = `import express from 'express'`;
-        assert.deepStrictEqual(parseImportSpecifiers(source), []);
-    });
-    void it('parses export default from', () => {
-        const result = parseImportSpecifiers(`export { default as X } from './module'`);
-        assert.deepStrictEqual(result, ['./module']);
-    });
-});
-// ============================================================
-// resolveImportToChangedFile
-// ============================================================
-void describe('resolveImportToChangedFile', () => {
-    void it('resolves exact match with extension', () => {
-        const changed = new Set(['src/utils.ts']);
-        const result = resolveImportToChangedFile('./utils.ts', 'src/app.ts', changed);
-        assert.strictEqual(result, 'src/utils.ts');
-    });
-    void it('infers .ts extension', () => {
-        const changed = new Set(['src/utils.ts']);
-        const result = resolveImportToChangedFile('./utils', 'src/app.ts', changed);
-        assert.strictEqual(result, 'src/utils.ts');
-    });
-    void it('infers .tsx extension', () => {
-        const changed = new Set(['src/Component.tsx']);
-        const result = resolveImportToChangedFile('./Component', 'src/app.ts', changed);
-        assert.strictEqual(result, 'src/Component.tsx');
-    });
-    void it('resolves index file', () => {
-        const changed = new Set(['src/types/index.ts']);
-        const result = resolveImportToChangedFile('./types', 'src/app.ts', changed);
-        assert.strictEqual(result, 'src/types/index.ts');
-    });
-    void it('resolves .js to .ts (ESM convention)', () => {
-        const changed = new Set(['src/utils.ts']);
-        const result = resolveImportToChangedFile('./utils.js', 'src/app.ts', changed);
-        assert.strictEqual(result, 'src/utils.ts');
-    });
-    void it('resolves parent directory traversal', () => {
-        const changed = new Set(['src/shared/helpers.ts']);
-        const result = resolveImportToChangedFile('../shared/helpers', 'src/components/Button.ts', changed);
-        assert.strictEqual(result, 'src/shared/helpers.ts');
-    });
-    void it('resolves double parent traversal', () => {
-        const changed = new Set(['src/utils.ts']);
-        const result = resolveImportToChangedFile('../../utils', 'src/features/explore/App.ts', changed);
-        assert.strictEqual(result, 'src/utils.ts');
-    });
-    void it('returns null for non-changed file', () => {
-        const changed = new Set(['src/other.ts']);
-        const result = resolveImportToChangedFile('./utils', 'src/app.ts', changed);
-        assert.strictEqual(result, null);
-    });
-    void it('returns null for external package import path', () => {
-        // This shouldn't happen since parseImportSpecifiers filters these,
-        // but test defensive behavior
-        const changed = new Set(['src/utils.ts']);
-        const result = resolveImportToChangedFile('./nonexistent', 'src/app.ts', changed);
-        assert.strictEqual(result, null);
-    });
-    void it('prefers .ts over .tsx when both exist', () => {
-        const changed = new Set(['src/utils.ts', 'src/utils.tsx']);
-        const result = resolveImportToChangedFile('./utils', 'src/app.ts', changed);
-        assert.strictEqual(result, 'src/utils.ts');
-    });
-});
-// ============================================================
-// getTransitiveDependencies
-// ============================================================
-void describe('getTransitiveDependencies', () => {
-    void it('returns direct dependency', () => {
-        const graph = new Map([
-            ['A', new Set(['B'])],
-            ['B', new Set()],
-        ]);
-        const result = getTransitiveDependencies('A', graph);
-        assert.deepStrictEqual(result, new Set(['B']));
-    });
-    void it('returns transitive dependencies', () => {
-        const graph = new Map([
-            ['A', new Set(['B'])],
-            ['B', new Set(['C'])],
-            ['C', new Set()],
-        ]);
-        const result = getTransitiveDependencies('A', graph);
-        assert.deepStrictEqual(result, new Set(['B', 'C']));
-    });
-    void it('handles diamond dependency', () => {
-        const graph = new Map([
-            ['A', new Set(['B', 'C'])],
-            ['B', new Set(['D'])],
-            ['C', new Set(['D'])],
-            ['D', new Set()],
-        ]);
-        const result = getTransitiveDependencies('A', graph);
-        assert.deepStrictEqual(result, new Set(['B', 'C', 'D']));
-    });
-    void it('handles cycles without infinite loop', () => {
-        const graph = new Map([
-            ['A', new Set(['B'])],
-            ['B', new Set(['A'])],
-        ]);
-        const result = getTransitiveDependencies('A', graph);
-        assert.deepStrictEqual(result, new Set(['B', 'A']));
-    });
-    void it('returns empty set for no dependencies', () => {
-        const graph = new Map([['A', new Set()]]);
-        const result = getTransitiveDependencies('A', graph);
-        assert.deepStrictEqual(result, new Set());
-    });
-    void it('returns empty set for unknown file', () => {
-        const graph = new Map();
-        const result = getTransitiveDependencies('unknown', graph);
-        assert.deepStrictEqual(result, new Set());
-    });
-});
-// ============================================================
-// autoFixPROrdering
-// ============================================================
-function makePR(sequence, name, files, dependsOn) {
-    return {
-        sequence,
-        name,
-        description: name,
-        branch_name: `pr/feat/${sequence}-${name.toLowerCase().replace(/\s/g, '-')}`,
-        depends_on_branch_name: dependsOn ?? null,
-        files: files.map((f) => ({ path: f, change_type: 'modified' })),
-    };
-}
-void describe('autoFixPROrdering', () => {
-    void it('returns unchanged when no violations', () => {
-        const prs = [
-            makePR(1, 'Foundation', ['src/utils.ts']),
-            makePR(2, 'Components', ['src/app.ts'], 'pr/feat/1-foundation'),
-        ];
-        // app.ts depends on utils.ts, and utils.ts is in PR 1 (earlier) — OK
-        const graph = new Map([
-            ['src/app.ts', new Set(['src/utils.ts'])],
-            ['src/utils.ts', new Set()],
-        ]);
-        const result = autoFixPROrdering(prs, graph);
-        assert.strictEqual(result.movedFiles.length, 0);
-        assert.strictEqual(result.pullRequests[0].files?.length, 1);
-        assert.strictEqual(result.pullRequests[1].files?.length, 1);
-    });
-    void it('moves dependency from later PR to earlier PR', () => {
-        const prs = [
-            makePR(1, 'Components', ['src/app.ts']),
-            makePR(2, 'Utils', ['src/utils.ts'], 'pr/feat/1-components'),
-        ];
-        // app.ts (PR 1) depends on utils.ts (PR 2) — violation!
-        const graph = new Map([
-            ['src/app.ts', new Set(['src/utils.ts'])],
-            ['src/utils.ts', new Set()],
-        ]);
-        const result = autoFixPROrdering(prs, graph);
-        assert.strictEqual(result.movedFiles.length, 1);
-        assert.strictEqual(result.movedFiles[0].file, 'src/utils.ts');
-        // utils.ts should now be in PR 1
-        const pr1Files = result.pullRequests[0].files?.map((f) => f.path) ?? [];
-        assert.ok(pr1Files.includes('src/utils.ts'));
-        assert.ok(pr1Files.includes('src/app.ts'));
-        // PR 2 should be empty
-        assert.strictEqual(result.pullRequests[1].files?.length, 0);
-    });
-    void it('handles transitive dependency moves', () => {
-        const prs = [
-            makePR(1, 'App', ['src/app.ts']),
-            makePR(2, 'Service', ['src/service.ts'], 'pr/feat/1-app'),
-            makePR(3, 'Utils', ['src/utils.ts'], 'pr/feat/2-service'),
-        ];
-        // app.ts → service.ts → utils.ts (chain across 3 PRs)
-        const graph = new Map([
-            ['src/app.ts', new Set(['src/service.ts'])],
-            ['src/service.ts', new Set(['src/utils.ts'])],
-            ['src/utils.ts', new Set()],
-        ]);
-        const result = autoFixPROrdering(prs, graph);
-        // Both service.ts and utils.ts should move to PR 1
-        const pr1Files = result.pullRequests[0].files?.map((f) => f.path) ?? [];
-        assert.ok(pr1Files.includes('src/app.ts'));
-        assert.ok(pr1Files.includes('src/service.ts'));
-        assert.ok(pr1Files.includes('src/utils.ts'));
-    });
-    void it('moves dep to earliest PR that needs it', () => {
-        const prs = [
-            makePR(1, 'PR1', ['src/a.ts']),
-            makePR(2, 'PR2', ['src/b.ts'], 'pr/feat/1-pr1'),
-            makePR(3, 'PR3', ['src/utils.ts'], 'pr/feat/2-pr2'),
-        ];
-        // Both a.ts (PR 1) and b.ts (PR 2) import utils.ts (PR 3)
-        const graph = new Map([
-            ['src/a.ts', new Set(['src/utils.ts'])],
-            ['src/b.ts', new Set(['src/utils.ts'])],
-            ['src/utils.ts', new Set()],
-        ]);
-        const result = autoFixPROrdering(prs, graph);
-        // utils.ts should move to PR 1 (earliest needer)
-        const pr1Files = result.pullRequests[0].files?.map((f) => f.path) ?? [];
-        assert.ok(pr1Files.includes('src/utils.ts'));
-    });
-    void it('handles no dependencies at all', () => {
-        const prs = [
-            makePR(1, 'PR1', ['src/a.ts']),
-            makePR(2, 'PR2', ['src/b.ts'], 'pr/feat/1-pr1'),
-        ];
-        const graph = new Map([
-            ['src/a.ts', new Set()],
-            ['src/b.ts', new Set()],
-        ]);
-        const result = autoFixPROrdering(prs, graph);
-        assert.strictEqual(result.movedFiles.length, 0);
-    });
-    void it('handles single PR with all files', () => {
-        const prs = [makePR(1, 'Everything', ['src/a.ts', 'src/b.ts', 'src/c.ts'])];
-        const graph = new Map([
-            ['src/a.ts', new Set(['src/b.ts'])],
-            ['src/b.ts', new Set(['src/c.ts'])],
-            ['src/c.ts', new Set()],
-        ]);
-        const result = autoFixPROrdering(prs, graph);
-        assert.strictEqual(result.movedFiles.length, 0);
-    });
-    void it('does not mutate original PR files arrays', () => {
-        const originalFiles = [{ path: 'src/app.ts', change_type: 'modified' }];
-        const prs = [
-            {
-                sequence: 1,
-                name: 'PR1',
-                description: 'PR1',
-                files: originalFiles,
-            },
-            {
-                sequence: 2,
-                name: 'PR2',
-                description: 'PR2',
-                files: [{ path: 'src/utils.ts', change_type: 'modified' }],
-            },
-        ];
-        const graph = new Map([
-            ['src/app.ts', new Set(['src/utils.ts'])],
-            ['src/utils.ts', new Set()],
-        ]);
-        autoFixPROrdering(prs, graph);
-        // Original files array should not be modified
-        assert.strictEqual(originalFiles.length, 1);
-        assert.strictEqual(originalFiles[0].path, 'src/app.ts');
-    });
-});

package/dist/phases/run-sheet/render.d.ts

@@ -1,60 +0,0 @@
-/**
- * Pure template-rendering logic for run sheets.
- *
- * The CLI is the sole authoritative renderer today — if the web app
- * ever grows its own run-sheet generation path, it should call into
- * this module (or a published copy of it) rather than forking.
- */
-export declare const MAX_FILE_INCLUDE_BYTES: number;
-export declare const MAX_TOTAL_FILE_BYTES: number;
-export interface TemplateProduct {
-    name: string;
-    github_repository_full_name: string | null;
-}
-export interface TemplateRelease {
-    tag: string;
-    name: string | null;
-    body: string | null;
-    url: string | null;
-    published_at: string | null;
-    previous_tag: string | null;
-    previous_published_at: string | null;
-    diff_summary: string | null;
-    diff_stats: Record<string, unknown>;
-}
-export declare function isSafeGitRef(ref: string): boolean;
-export interface FileReadResult {
-    content: string | null;
-    bytes: number;
-    reason?: string;
-}
-export declare function safeReadRepoFile(repoDir: string, relPath: string, remainingBudget: number): Promise<FileReadResult>;
-export interface RenderResult {
-    rendered: string;
-    missing: string[];
-    filesRead: {
-        path: string;
-        bytes: number;
-    }[];
-}
-export interface TemplateCommit {
-    sha: string;
-    short_sha: string;
-    summary: string;
-    message: string;
-    author: string;
-    url: string;
-}
-/**
- * Strip Markdown-style backslash escapes inside `{{ ... }}` spans so the
- * Rich-text editor roundtrip doesn't break placeholder matching.
- */
-export declare function normalizeTemplate(template: string): string;
-/**
- * Escape CommonMark-significant characters so untrusted strings
- * (commit messages, author names, release bodies) can be safely
- * dropped into a markdown run sheet without injecting headings,
- * blockquotes, links, images, or HTML.
- */
-export declare function escapeMarkdown(raw: string): string;
-export declare function renderTemplate(template: string, product: TemplateProduct, release: TemplateRelease, repoDir: string | null, commits: string, draftNotice?: string, commitsList?: TemplateCommit[]): Promise<RenderResult>;

package/dist/phases/run-sheet/render.js

@@ -1,297 +0,0 @@
-/**
- * Pure template-rendering logic for run sheets.
- *
- * The CLI is the sole authoritative renderer today — if the web app
- * ever grows its own run-sheet generation path, it should call into
- * this module (or a published copy of it) rather than forking.
- */
-import { lstatSync, realpathSync, statSync } from 'fs';
-import { readFile } from 'fs/promises';
-import { join, resolve } from 'path';
-export const MAX_FILE_INCLUDE_BYTES = 256 * 1024;
-export const MAX_TOTAL_FILE_BYTES = 1024 * 1024;
-export function isSafeGitRef(ref) {
-    if (typeof ref !== 'string' || ref.length === 0 || ref.length > 200) {
-        return false;
-    }
-    if (/\s/.test(ref) || /^[-.]/.test(ref)) {
-        return false;
-    }
-    if (ref.includes('..') || ref.includes('@{')) {
-        return false;
-    }
-    return /^[A-Za-z0-9._\-+/@]+$/.test(ref);
-}
-export async function safeReadRepoFile(repoDir, relPath, remainingBudget) {
-    if (!relPath || relPath.startsWith('/') || relPath.includes('\0')) {
-        return { content: null, bytes: 0, reason: 'invalid path' };
-    }
-    const repoDirResolved = resolve(repoDir);
-    const abs = resolve(join(repoDirResolved, relPath));
-    if (abs !== repoDirResolved && !abs.startsWith(`${repoDirResolved}/`)) {
-        return { content: null, bytes: 0, reason: 'path escape' };
-    }
-    // Refuse symlinks at the leaf. `resolve()` only collapses `..`; it does
-    // not follow symlinks, so a symlink *inside* the repo pointing at
-    // `/etc/passwd` would otherwise be readable.
-    try {
-        if (lstatSync(abs).isSymbolicLink()) {
-            return { content: null, bytes: 0, reason: 'symlink refused' };
-        }
-    }
-    catch {
-        return { content: null, bytes: 0, reason: 'not found' };
-    }
-    // Also verify the fully-resolved real path still lives inside the repo
-    // root — catches symlinked parent directories.
-    try {
-        const realAbs = realpathSync(abs);
-        const realRoot = realpathSync(repoDirResolved);
-        if (realAbs !== realRoot && !realAbs.startsWith(`${realRoot}/`)) {
-            return { content: null, bytes: 0, reason: 'symlink escapes repo' };
-        }
-    }
-    catch {
-        return { content: null, bytes: 0, reason: 'not found' };
-    }
-    let size;
-    try {
-        const stat = statSync(abs);
-        if (!stat.isFile()) {
-            return { content: null, bytes: 0, reason: 'not a file' };
-        }
-        ;
-        ({ size } = stat);
-    }
-    catch {
-        return { content: null, bytes: 0, reason: 'not found' };
-    }
-    if (size > MAX_FILE_INCLUDE_BYTES) {
-        return {
-            content: null,
-            bytes: 0,
-            reason: `too large (${size} > ${MAX_FILE_INCLUDE_BYTES} bytes)`,
-        };
-    }
-    if (size > remainingBudget) {
-        return {
-            content: null,
-            bytes: 0,
-            reason: 'total file-inclusion budget exhausted',
-        };
-    }
-    try {
-        const content = await readFile(abs, 'utf-8');
-        return { content, bytes: size };
-    }
-    catch {
-        return { content: null, bytes: 0, reason: 'read failed' };
-    }
-}
-/**
- * Strip Markdown-style backslash escapes inside `{{ ... }}` spans so the
- * Rich-text editor roundtrip doesn't break placeholder matching.
- */
-export function normalizeTemplate(template) {
-    return template.replace(/\{\{([^}]*)\}\}/g, (_match, inner) => `{{${inner.replace(/\\([_.\-\\/])/g, '$1')}}}`);
-}
-function isTruthy(value) {
-    if (!value) {
-        return false;
-    }
-    const v = value.trim();
-    return v !== '' && v !== 'false' && v !== '0';
-}
-/**
- * Split a block body on a top-level `{{else}}` so `{{#if}}A{{else}}B{{/if}}`
- * resolves. Because we don't support nested same-keyword blocks, a naive
- * first-occurrence split is safe enough.
- */
-function splitOnElse(body) {
-    const m = body.match(/\{\{\s*else\s*\}\}/);
-    if (!m || m.index === undefined) {
-        return { main: body, alt: '' };
-    }
-    return {
-        main: body.slice(0, m.index),
-        alt: body.slice(m.index + m[0].length),
-    };
-}
-/**
- * Replace `{{#if key}}...{{else}}...{{/if}}` and
- * `{{#unless key}}...{{else}}...{{/unless}}` blocks. Runs repeatedly
- * until a fixed point so two sibling (non-nested) blocks both resolve.
- * Nested blocks of the *same* keyword aren't supported; that's an
- * intentional simplicity/safety choice.
- */
-function substituteConditionals(template, ctx) {
-    const IF_RE = /\{\{\s*#if\s+([a-zA-Z_][a-zA-Z0-9_]*)\s*\}\}([\s\S]*?)\{\{\s*\/if\s*\}\}/g;
-    const UNLESS_RE = /\{\{\s*#unless\s+([a-zA-Z_][a-zA-Z0-9_]*)\s*\}\}([\s\S]*?)\{\{\s*\/unless\s*\}\}/g;
-    let out = template;
-    for (let i = 0; i < 5; i++) {
-        const before = out;
-        out = out.replace(IF_RE, (_, key, body) => {
-            const { main, alt } = splitOnElse(body);
-            return isTruthy(ctx[key] ?? '') ? main : alt;
-        });
-        out = out.replace(UNLESS_RE, (_, key, body) => {
-            const { main, alt } = splitOnElse(body);
-            return isTruthy(ctx[key] ?? '') ? alt : main;
-        });
-        if (out === before) {
-            break;
-        }
-    }
-    return out;
-}
-/**
- * Expand `{{#each commits}}...{{/each}}`. Each iteration renders the body
- * with a merged ctx of (outer vars + commit fields), running the full
- * conditional + variable substitution on the body so `{{#if url}}` /
- * `{{formatDate ...}}` / outer vars all work per-commit.
- */
-function substituteEachCommits(template, commits, outerCtx) {
-    const EACH_RE = /\{\{\s*#each\s+commits\s*\}\}([\s\S]*?)\{\{\s*\/each\s*\}\}/g;
-    return template.replace(EACH_RE, (_match, body) => commits
-        .map((c) => {
-        const localCtx = {
-            ...outerCtx,
-            sha: c.sha,
-            short_sha: c.short_sha,
-            summary: c.summary,
-            message: c.message,
-            author: c.author,
-            url: c.url,
-        };
-        let rendered = substituteConditionals(body, localCtx);
-        rendered = substituteDateHelper(rendered, localCtx);
-        rendered = substituteEscapeHelper(rendered, localCtx);
-        rendered = rendered.replace(/\{\{\s*([a-zA-Z_][a-zA-Z0-9_]*)\s*\}\}/g, (match, key) => (key in localCtx ? localCtx[key] : match));
-        return rendered;
-    })
-        .join(''));
-}
-/**
- * Escape CommonMark-significant characters so untrusted strings
- * (commit messages, author names, release bodies) can be safely
- * dropped into a markdown run sheet without injecting headings,
- * blockquotes, links, images, or HTML.
- */
-export function escapeMarkdown(raw) {
-    if (!raw) {
-        return '';
-    }
-    // Backslash-escape every CommonMark-significant punctuation character.
-    // This also neutralises line-start markers (`#`, `>`, `-`, `+`, `*`,
-    // `1.`) because their first char always ends up escaped.
-    return raw.replace(/([\\`*_{}\[\]()#+\-.!|<>~])/g, '\\$1');
-}
-function substituteEscapeHelper(template, ctx) {
-    const RE = /\{\{\s*escape\s+([a-zA-Z_][a-zA-Z0-9_]*)\s*\}\}/g;
-    return template.replace(RE, (_match, key) => escapeMarkdown(ctx[key] ?? ''));
-}
-/**
- * `{{formatDate key 'YYYY-MM-DD HH:mm'}}` — resolves `key` from ctx (must
- * be a parseable date), formats with a tiny token set. Invalid dates or
- * empty values render as empty string (matches the "degrade gracefully"
- * convention the rest of the template follows).
- */
-function substituteDateHelper(template, ctx) {
-    const RE = /\{\{\s*formatDate\s+([a-zA-Z_][a-zA-Z0-9_]*)\s+['"]([^'"]+)['"]\s*\}\}/g;
-    return template.replace(RE, (_match, key, format) => {
-        const raw = ctx[key];
-        if (!raw) {
-            return '';
-        }
-        const d = new Date(raw);
-        if (Number.isNaN(d.getTime())) {
-            return '';
-        }
-        const pad = (n) => n.toString().padStart(2, '0');
-        return format
-            .replace(/YYYY/g, String(d.getUTCFullYear()))
-            .replace(/MM/g, pad(d.getUTCMonth() + 1))
-            .replace(/DD/g, pad(d.getUTCDate()))
-            .replace(/HH/g, pad(d.getUTCHours()))
-            .replace(/mm/g, pad(d.getUTCMinutes()))
-            .replace(/ss/g, pad(d.getUTCSeconds()));
-    });
-}
-async function expandFileIncludes(template, repoDir) {
-    const missing = [];
-    const filesRead = [];
-    const fileRegex = /\{\{\s*file:([^}]+?)\s*\}\}/g;
-    const fileMatches = [];
-    for (const m of template.matchAll(fileRegex)) {
-        fileMatches.push({ match: m[0], path: m[1].trim() });
-    }
-    let remainingBudget = MAX_TOTAL_FILE_BYTES;
-    const fileResults = new Map();
-    for (const { match, path } of fileMatches) {
-        if (fileResults.has(match)) {
-            continue;
-        }
-        if (!repoDir) {
-            missing.push(`file:${path} (no repo)`);
-            fileResults.set(match, `<!-- file ${path} unavailable: repo not cloned -->`);
-            continue;
-        }
-        const res = await safeReadRepoFile(repoDir, path, remainingBudget);
-        if (res.content === null) {
-            missing.push(`file:${path} (${res.reason ?? 'unavailable'})`);
-            fileResults.set(match, `<!-- file ${path} unavailable: ${res.reason ?? 'unknown'} -->`);
-        }
-        else {
-            remainingBudget -= res.bytes;
-            filesRead.push({ path, bytes: res.bytes });
-            fileResults.set(match, res.content);
-        }
-    }
-    const rendered = template.replace(fileRegex, (match) => fileResults.get(match) ?? match);
-    return { rendered, missing, filesRead };
-}
-function buildSimpleVars(product, release, commits, draftNotice) {
-    const stats = release.diff_stats ?? {};
-    return {
-        product_name: product.name,
-        release_tag: release.tag,
-        release_name: release.name ?? release.tag,
-        release_body: release.body ?? '',
-        release_url: release.url ?? '',
-        previous_tag: release.previous_tag ?? '',
-        published_at: release.published_at ?? '',
-        previous_published_at: release.previous_published_at ?? '',
-        diff_summary: release.diff_summary ?? '',
-        files_changed: String(stats.files_changed ?? ''),
-        additions: String(stats.additions ?? ''),
-        deletions: String(stats.deletions ?? ''),
-        commits_count: String(stats.commits_count ?? stats.total_commits ?? ''),
-        repository: product.github_repository_full_name ?? '',
-        generated_at: new Date().toISOString(),
-        commits,
-        draft_notice: draftNotice,
-    };
-}
-export async function renderTemplate(template, product, release, repoDir, commits, draftNotice = '', commitsList = []) {
-    const missing = [];
-    const simpleVars = buildSimpleVars(product, release, commits, draftNotice);
-    // Pipeline: normalize → file includes → #each (self-contained, renders
-    // its body with per-commit ctx) → outer #if/#unless → date helper →
-    // variable substitution. Running `#each` first lets it fully resolve
-    // per-commit `{{#if url}}` without bleeding into outer-scope `{{#if}}`.
-    const normalized = normalizeTemplate(template);
-    const fileExpansion = await expandFileIncludes(normalized, repoDir);
-    missing.push(...fileExpansion.missing);
-    let rendered = substituteEachCommits(fileExpansion.rendered, commitsList, simpleVars);
-    rendered = substituteConditionals(rendered, simpleVars);
-    rendered = substituteDateHelper(rendered, simpleVars);
-    rendered = substituteEscapeHelper(rendered, simpleVars);
-    rendered = rendered.replace(/\{\{\s*([a-zA-Z_][a-zA-Z0-9_]*)\s*\}\}/g, (match, key) => {
-        if (key in simpleVars) {
-            return simpleVars[key];
-        }
-        missing.push(key);
-        return match;
-    });
-    return { rendered, missing, filesRead: fileExpansion.filesRead };
-}