faf-taf-git 2.4.1 → 2.4.3

package/CHANGELOG.md

@@ -1,5 +1,5 @@
 <!-- faf: faf-taf-git | TypeScript | cli | A Test Receipt Printer for git -->
-<!-- faf: doc=changelog | latest=v2.4.1 | canonical=project.faf | family=TAF -->
+<!-- faf: doc=changelog | latest=v2.4.3 | canonical=project.faf | family=TAF -->
 
 # Changelog
 
@@ -8,6 +8,29 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+## [2.4.3] - 2026-10-31
+
+A receipt that loses a push race is retried instead of lost, and skipped Go tests count as skipped, not passed.
+
+### Fixed
+- **A receipt that lost a push race is no longer lost.** Two runs finishing close together both commit on the same `taf-receipts` tip, and the second push was rejected with a warning. The Action now fetches the branch again, adds its receipt on top of the winner's, and pushes, up to 5 tries. Only with `target-branch`: that branch holds nothing but `.taf`. Nothing is force-pushed; the branch only grows. Pushing to the current branch is unchanged
+- **Skipped tests in a JUnit report no longer count as passed** when the report leaves `skipped` out of its counts. gotestsum (Go) writes `tests` and `failures` on its root and nothing else, so 1 pass, 1 fail and 1 skip read as 2 passed. The `<skipped>` testcases are counted instead
+
+### Changed
+- **The README recipe no longer has a `concurrency` group.** GitHub cancels a waiting run when a newer one joins the group, so a run could end with no tests and no receipt. Runs that race for the push are retried instead (above)
+
+## [2.4.2] - 2026-10-30
+
+undici 6.29.1 in the Action bundle (security), and the npm package ships only the CLI: 34 kB instead of 1.0 MB.
+
+### Security
+- **undici 6.28.1 → 6.29.1** in the lockfile and the rebuilt Action bundle (`dist/index.js`). Clears 5 Dependabot alerts (TLS certificate check bypass, denial of service). undici comes in through `@actions/core`; faf-taf-git makes no HTTP requests itself, so the risk was low, but the bundle no longer carries a known-vulnerable copy.
+
+### Changed
+- **The npm package ships only the CLI:** a `files` list in package.json. 1.0 MB → 34 kB packed, 94 → 48 files. Out: `src/`, `tests/`, `.github/`, dev configs, and the GitHub Action bundle (`dist/index.js`), which workflows run from the git tag, never from npm. The Action itself is unchanged.
+
 ## [2.4.1] - 2026-10-30
 
 `faf-taf-git --version` answers, and the descriptions say tamper-evident, not "cannot be gamed".

package/README.md

@@ -51,9 +51,6 @@ on:
   pull_request:
   workflow_dispatch:
 
-concurrency:
-  group: tests-${{ github.ref }}   # one run at a time per branch, so receipts never collide
-
 jobs:
   test:
     runs-on: ubuntu-latest
@@ -76,7 +73,7 @@ jobs:
 
       - name: Print the receipt
         if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request'
-        uses: Wolfe-Jam/faf-taf-git@v2.4.1
+        uses: Wolfe-Jam/faf-taf-git@v2.4.3
         with:
           test-output-file: test-output.txt
           target-branch: taf-receipts

package/dist/parsers/junit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"junit.d.ts","sourceRoot":"","sources":["file:///Users/wolfejam/FAF/faf-taf-git/src/parsers/junit.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAyCrC;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAgDnE"}
+{"version":3,"file":"junit.d.ts","sourceRoot":"","sources":["file:///Users/wolfejam/FAF/faf-taf-git/src/parsers/junit.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAyCrC;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAuDnE"}

package/dist/parsers/junit.js

@@ -92,6 +92,12 @@ function parseJunitOutput(output) {
     }
     if (counts.tests === 0)
         return null;
+    // Some writers leave `skipped` off their counts (gotestsum's <testsuites> root
+    // has tests and failures only), which would count every skip as a pass. The
+    // <skipped> testcases are the truth then.
+    if (counts.skipped === 0) {
+        counts.skipped = Math.min(countsFromTestcases(xml).skipped, counts.tests - counts.failed);
+    }
     const passed = Math.max(0, counts.tests - counts.failed - counts.skipped);
     return {
         total: counts.tests,

package/dist/parsers/junit.js.map

@@ -1 +1 @@
-{"version":3,"file":"junit.js","sourceRoot":"","sources":["../../src/parsers/junit.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAuDH,4CAgDC;AAnGD,MAAM,SAAS,GAAG,kCAAkC,CAAC;AAErD,0EAA0E;AAC1E,SAAS,IAAI,CAAC,KAAa,EAAE,IAAY;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,yBAAyB,CAAC,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAQD,iGAAiG;AACjG,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO;QACL,KAAK;QACL,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrE,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,MAAM,GAAW,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC3D,MAAM,QAAQ,GAAG,mDAAmD,CAAC;IACrE,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,MAAM,EAAE,CAAC;aAChD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,gBAAgB,CAAC,MAAc;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7C,IAAI,MAAM,GAAkB,IAAI,CAAC;IAEjC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAChD,IAAI,IAAI;QAAE,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,oFAAoF;QACpF,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,GAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAChE,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,KAA6B,CAAC;QAClC,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC;QACxB,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,GAAG,KAAK,CAAC;YAC9C,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,EAAE,CAAC;gBACR,SAAS;YACX,CAAC;YACD,IAAI,KAAK,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;gBAC1B,IAAI,EAAE,CAAC;gBACP,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;gBACrC,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;oBAC5B,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;oBAC9B,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,IAAI,CAAC;gBAChB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,WAAW;gBAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1E,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACxD,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;KAChD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"junit.js","sourceRoot":"","sources":["../../src/parsers/junit.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAuDH,4CAuDC;AA1GD,MAAM,SAAS,GAAG,kCAAkC,CAAC;AAErD,0EAA0E;AAC1E,SAAS,IAAI,CAAC,KAAa,EAAE,IAAY;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,yBAAyB,CAAC,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAQD,iGAAiG;AACjG,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO;QACL,KAAK;QACL,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrE,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,MAAM,GAAW,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC3D,MAAM,QAAQ,GAAG,mDAAmD,CAAC;IACrE,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,MAAM,EAAE,CAAC;aAChD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,gBAAgB,CAAC,MAAc;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7C,IAAI,MAAM,GAAkB,IAAI,CAAC;IAEjC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAChD,IAAI,IAAI;QAAE,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,oFAAoF;QACpF,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,GAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAChE,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,KAA6B,CAAC;QAClC,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC;QACxB,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,GAAG,KAAK,CAAC;YAC9C,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,EAAE,CAAC;gBACR,SAAS;YACX,CAAC;YACD,IAAI,KAAK,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;gBAC1B,IAAI,EAAE,CAAC;gBACP,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;gBACrC,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;oBAC5B,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;oBAC9B,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,IAAI,CAAC;gBAChB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,WAAW;gBAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,+EAA+E;IAC/E,4EAA4E;IAC5E,0CAA0C;IAC1C,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1E,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACxD,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;KAChD,CAAC;AACJ,CAAC"}

package/dist/receipt-push.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Push a receipt to the receipts branch, and try again when another run got
+ * there first.
+ *
+ * Two runs that finish close together both commit a receipt on top of the
+ * same branch tip; the second push is rejected (non-fast-forward). Before
+ * 2.4.3 that was a warning and the receipt was lost. Now the run fetches the
+ * branch again, resets to it, adds its receipt to the fresh .taf, and pushes,
+ * up to `attempts` times.
+ *
+ * Only for a dedicated receipts branch (`target-branch`): it holds nothing
+ * but .taf, so resetting to the remote throws away only this run's own
+ * rejected commit. Pushing to the current branch never resets.
+ */
+/** Runs git with these args in the repo; resolves to the exit code. */
+export type Git = (args: string[]) => Promise<number>;
+export interface PushResult {
+    pushed: boolean;
+    attempts: number;
+}
+export declare function pushReceipt(git: Git, targetBranch: string, message: string, addReceipt: () => boolean, attempts?: number): Promise<PushResult>;

package/dist/receipt-push.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"","sourceRoot":"","sources":["file:///Users/wolfejam/FAF/faf-taf-git/src/receipt-push.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,uEAAuE;AACvE,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEtD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,GAAG,EACR,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,OAAO,EACzB,QAAQ,SAAI,GACX,OAAO,CAAC,UAAU,CAAC,CAarB"}

package/dist/receipt-push.js

@@ -0,0 +1,44 @@
+"use strict";
+/**
+ * Push a receipt to the receipts branch, and try again when another run got
+ * there first.
+ *
+ * Two runs that finish close together both commit a receipt on top of the
+ * same branch tip; the second push is rejected (non-fast-forward). Before
+ * 2.4.3 that was a warning and the receipt was lost. Now the run fetches the
+ * branch again, resets to it, adds its receipt to the fresh .taf, and pushes,
+ * up to `attempts` times.
+ *
+ * Only for a dedicated receipts branch (`target-branch`): it holds nothing
+ * but .taf, so resetting to the remote throws away only this run's own
+ * rejected commit. Pushing to the current branch never resets.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pushReceipt = pushReceipt;
+async function pushReceipt(git, targetBranch, message, addReceipt, attempts = 5) {
+    for (let attempt = 1; attempt <= attempts; attempt++) {
+        if (attempt > 1) {
+            // Another run pushed first: start again from its receipts.
+            if ((await git(['fetch', 'origin', targetBranch])) !== 0) {
+                break;
+            }
+            if ((await git(['reset', '--hard', `origin/${targetBranch}`])) !== 0) {
+                break;
+            }
+            if (!addReceipt()) {
+                break;
+            }
+        }
+        if ((await git(['add', '.taf'])) !== 0) {
+            break;
+        }
+        if ((await git(['commit', '-m', message])) !== 0) {
+            break;
+        }
+        if ((await git(['push', 'origin', targetBranch])) === 0) {
+            return { pushed: true, attempts: attempt };
+        }
+    }
+    return { pushed: false, attempts };
+}
+//# sourceMappingURL=receipt-push.js.map

package/dist/receipt-push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-push.js","sourceRoot":"","sources":["../src/receipt-push.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;AAUH,kCAmBC;AAnBM,KAAK,UAAU,WAAW,CAC/B,GAAQ,EACR,YAAoB,EACpB,OAAe,EACf,UAAyB,EACzB,QAAQ,GAAG,CAAC;IAEZ,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;QACrD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,2DAA2D;YAC3D,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAA,MAAM;YAAA,CAAC;YAClE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,YAAY,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAA,MAAM;YAAA,CAAC;YAC9E,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;gBAAA,MAAM;YAAA,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAAA,MAAM;QAAA,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAAA,MAAM;QAAA,CAAC;QAC1D,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAAA,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAAA,CAAC;IACxG,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC"}

package/package.json

@@ -1,11 +1,24 @@
 {
   "name": "faf-taf-git",
-  "version": "2.4.1",
+  "version": "2.4.3",
   "description": "A Test Receipt Printer for git. Every CI run prints a receipt to .taf — append-only, timestamped, kept in git. Proof over time.",
   "main": "dist/cli.js",
   "bin": {
     "faf-taf-git": "dist/cli.js"
   },
+  "files": [
+    "dist/**/*",
+    "!dist/index.js",
+    "!dist/index.js.map",
+    "!dist/bundle",
+    "!dist/sourcemap-register.js",
+    "!dist/licenses.txt",
+    "README.md",
+    "RECEIPT-FORMAT.md",
+    "CHANGELOG.md",
+    "LICENSE",
+    "project.faf"
+  ],
   "scripts": {
     "build": "tsc && ncc build src/index.ts -o dist --source-map --license licenses.txt",
     "test": "jest"

package/project.faf

@@ -29,8 +29,8 @@ human_context:
   what: "A Test Receipt Printer for git. Every CI run prints a receipt to .taf: append-only, timestamped, kept in git. Proof over time."
   why: Test results vanish when CI logs expire. Receipts stay in git, so anyone can look back and check whether main was green before a release.
   where: https://github.com/Wolfe-Jam/faf-taf-git
-  when: v2.4.1 (2026-10-30), --version fix; v2.4.0 (2026-10-29) JUnit XML parser; live since v1.0.0 (2025-10-27)
-  how: "Run tests, save the output (or a JUnit XML report), then `uses: Wolfe-Jam/faf-taf-git@v2.4.1` with `target-branch: taf-receipts`. Anywhere else: `npx faf-taf-git --file test-output.txt --commit`. The taf-receipts branch only grows: never rewrite it."
+  when: v2.4.3 (2026-10-31), push-race retry + JUnit skipped count; v2.4.2 undici security fix + CLI-only npm package; v2.4.1 --version fix; v2.4.0 (2026-10-29) JUnit XML parser; live since v1.0.0 (2025-10-27)
+  how: "Run tests, save the output (or a JUnit XML report), then `uses: Wolfe-Jam/faf-taf-git@v2.4.3` with `target-branch: taf-receipts`. Anywhere else: `npx faf-taf-git --file test-output.txt --commit`. The taf-receipts branch only grows: never rewrite it."
 monorepo:
   packages_count: slotignored
   build_orchestrator: slotignored

package/.faf-dna

@@ -1,95 +0,0 @@
-{
-  "birthCertificate": {
-    "born": "2025-10-28T01:26:05.692Z",
-    "birthDNA": 22,
-    "birthDNASource": "CLAUDE.md",
-    "projectDNA": "1785d1ac1c20876b",
-    "authenticated": false,
-    "certificate": "FAF-2025-FAFTAFAC-TMZU"
-  },
-  "versions": [
-    {
-      "version": "v1.0.0",
-      "timestamp": "2025-10-28T01:26:05.693Z",
-      "score": 22,
-      "changes": [
-        "Initial context from CLAUDE.md"
-      ],
-      "approved": false,
-      "growth": 0,
-      "growthRate": 0
-    },
-    {
-      "version": "v1.0.1",
-      "timestamp": "2025-10-28T01:26:05.721Z",
-      "score": 50,
-      "changes": [
-        "Initial .faf generation from project"
-      ],
-      "approved": false,
-      "growth": 28,
-      "growthRate": 28
-    }
-  ],
-  "current": {
-    "version": "v1.0.1",
-    "score": 50,
-    "approved": false,
-    "lastSync": "2025-10-28T01:26:05.721Z"
-  },
-  "recovery": {
-    "claudeMD": "/Users/wolfejam/FAF/faf-taf-action/CLAUDE.md",
-    "lastBackup": "2025-10-28T01:26:05.693Z",
-    "syncStatus": "active",
-    "autoRecover": true
-  },
-  "growth": {
-    "totalGrowth": 28,
-    "daysActive": 0,
-    "averageDailyGrowth": 28,
-    "bestDay": {
-      "date": "2025-10-28T01:26:05.721Z",
-      "growth": 28
-    },
-    "bestWeek": {
-      "start": "2025-10-28T01:26:05.693Z",
-      "growth": 0
-    },
-    "milestones": [
-      {
-        "type": "birth",
-        "score": 22,
-        "date": "2025-10-28T01:26:05.693Z",
-        "version": "v1.0.0",
-        "label": "Birth",
-        "emoji": "🐣"
-      },
-      {
-        "type": "doubled",
-        "score": 50,
-        "date": "2025-10-28T01:26:05.721Z",
-        "version": "v1.0.1",
-        "label": "Doubled",
-        "emoji": "2️⃣"
-      },
-      {
-        "type": "peak",
-        "score": 50,
-        "date": "2025-10-28T01:26:05.721Z",
-        "version": "v1.0.1",
-        "label": "Peak",
-        "emoji": "🏔️"
-      },
-      {
-        "type": "current",
-        "score": 50,
-        "date": "2025-10-28T01:26:05.721Z",
-        "version": "v1.0.1",
-        "label": "Current",
-        "emoji": "📍"
-      }
-    ]
-  },
-  "lastModified": "2025-10-28T01:26:05.721Z",
-  "format": "faf-dna-v1"
-}

package/.fafignore

@@ -1,41 +0,0 @@
-# .fafignore - Exclude files/directories from .faf context
-# Similar to .gitignore syntax
-# Lines starting with # are comments
-
-# Dependencies and build outputs
-node_modules/
-dist/
-build/
-coverage/
-
-# Python environments
-__pycache__/
-venv/
-.venv/
-
-# IDE and system files
-.vscode/
-.idea/
-.DS_Store
-
-# Sensitive files
-.env
-.env.*
-*.key
-*.pem
-
-# Logs and temporary files
-*.log
-logs/
-tmp/
-temp/
-
-# Large media files
-*.jpg
-*.png
-*.mp4
-*.pdf
-
-# Custom exclusions (add your own below)
-# example: my-large-data-folder/
-# example: *.generated.ts

package/.github/dependabot.yml

@@ -1,10 +0,0 @@
-version: 2
-updates:
-  # Keeps workflow `uses:` pins current (e.g. Wolfe-Jam/faf-taf-git) so they
-  # don't drift behind new releases. Security alerts don't need this file.
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "monthly"
-    commit-message:
-      prefix: "ci"

package/.github/workflows/ci.yml

@@ -1,53 +0,0 @@
-name: CAR Pipeline
-
-on:
-  push:
-    branches: [main]
-  pull_request:
-    branches: [main]
-  workflow_dispatch:
-
-jobs:
-  car:
-    name: Claim → Audit → Receipt
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-
-    steps:
-      - uses: actions/checkout@v7
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v7
-        with:
-          node-version: '24.x'
-
-      - name: Install dependencies
-        run: npm ci
-
-      # ── C: CLAIM ──────────────────────────────────
-      - name: 'C: Validate project.faf (Claim)'
-        run: |
-          if [ ! -f project.faf ]; then
-            echo "::error::No project.faf found. Run 'faf init' to create one."
-            exit 1
-          fi
-          node -e "require('yaml').parse(require('fs').readFileSync('project.faf','utf-8')); console.log('project.faf: valid YAML')"
-          echo "Claim validated"
-
-      # ── A: AUDIT ──────────────────────────────────
-      - name: Build
-        run: npm run build
-
-      - name: 'A: Run tests (Audit)'
-        run: npm test 2>&1 | tee test-output.txt
-
-      # ── R: RECEIPT ────────────────────────────────
-      - name: 'R: Generate TAF Receipt'
-        if: (github.event_name == 'push' || github.event_name == 'workflow_dispatch') && github.ref == 'refs/heads/main'
-        uses: Wolfe-Jam/faf-taf-git@v2.3.1
-        with:
-          test-output-file: test-output.txt
-          auto-commit: 'true'
-          commit-message: 'chore(taf): update receipt [skip ci]'
-          target-branch: taf-receipts

package/.github/workflows/claude-code-review.yml

@@ -1,36 +0,0 @@
-name: Claude Code Review
-
-on:
-  pull_request:
-    types: [opened, synchronize, ready_for_review, reopened]
-
-jobs:
-  claude-review:
-    # A Dependabot PR cannot read this repo's Actions secrets — GitHub withholds
-    # them from bot-authored runs — so the action fails its own env validation
-    # and the PR carries a red that says nothing about the change it proposes.
-    # Receipt (faf-cli, 2026-09-23): the last 8 human PRs all passed this
-    # workflow and both Dependabot PRs failed on that error alone. A dependency
-    # bump is Dependabot's diff to justify, not Claude's.
-    if: github.actor != 'dependabot[bot]'
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pull-requests: write
-      issues: read
-      id-token: write
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v7
-        with:
-          fetch-depth: 1
-
-      - name: Run Claude Code Review
-        id: claude-review
-        uses: anthropics/claude-code-action@v1
-        with:
-          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
-          plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
-          plugins: 'code-review@claude-code-plugins'
-          prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'

package/.github/workflows/claude.yml

@@ -1,39 +0,0 @@
-name: Claude Code
-
-on:
-  issue_comment:
-    types: [created]
-  pull_request_review_comment:
-    types: [created]
-  issues:
-    types: [opened, assigned]
-  pull_request_review:
-    types: [submitted]
-
-jobs:
-  claude:
-    if: |
-      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
-      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
-      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
-      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      pull-requests: write
-      issues: write
-      id-token: write
-      actions: read
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v7
-        with:
-          fetch-depth: 1
-
-      - name: Run Claude Code
-        id: claude
-        uses: anthropics/claude-code-action@v1
-        with:
-          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
-          additional_permissions: |
-            actions: read

package/.github/workflows/homebrew.yml

@@ -1,19 +0,0 @@
-name: Update Homebrew
-on:
-  push:
-    tags: ["v*"]
-
-jobs:
-  homebrew:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Update Homebrew formula
-        run: |
-          VERSION="${GITHUB_REF#refs/tags/v}"
-          gh workflow run update-formula.yml \
-            -R Wolfe-Jam/homebrew-faf \
-            -f formula=faf-taf-git \
-            -f version=$VERSION \
-            -f npm_package=faf-taf-git
-        env:
-          GH_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}

package/.taf

@@ -1,98 +0,0 @@
-format_version: 1.0.0
-project: faf-taf-git
-created: 2025-10-28T01:26:12.944Z
-last_updated: 2026-02-19T05:56:11.741Z
-faf_associated: true
-faf_location: project.faf
-faf_score: 65
-test_history:
-  - timestamp: 2025-10-28T01:28:38.600Z
-    result: PASSED
-    tests:
-      total: 7
-      passed: 7
-      failed: 0
-  - timestamp: 2025-10-28T01:40:23.935Z
-    result: PASSED
-    tests:
-      total: 7
-      passed: 7
-      failed: 0
-    trigger: github-actions
-  - timestamp: 2026-02-18T02:24:34.363Z
-    result: PASSED
-    tests:
-      total: 38
-      passed: 38
-      failed: 0
-    trigger: github-actions
-  - timestamp: 2026-02-18T02:45:42.500Z
-    result: PASSED
-    tests:
-      total: 55
-      passed: 55
-      failed: 0
-    trigger: github-actions
-  - timestamp: 2026-02-18T03:07:37.867Z
-    result: PASSED
-    tests:
-      total: 55
-      passed: 55
-      failed: 0
-    trigger: github-actions
-  - timestamp: 2026-02-18T03:11:02.179Z
-    result: PASSED
-    tests:
-      total: 55
-      passed: 55
-      failed: 0
-    trigger: github-actions
-  - timestamp: 2026-02-18T03:24:05.159Z
-    result: PASSED
-    tests:
-      total: 55
-      passed: 55
-      failed: 0
-    trigger: github-actions
-  - timestamp: 2026-02-18T03:28:51.125Z
-    result: PASSED
-    tests:
-      total: 55
-      passed: 55
-      failed: 0
-    trigger: github-actions
-  - timestamp: 2026-02-18T05:59:46.851Z
-    result: PASSED
-    tests:
-      total: 55
-      passed: 55
-      failed: 0
-    trigger: github-actions
-  - timestamp: 2026-02-18T06:24:51.475Z
-    result: PASSED
-    tests:
-      total: 55
-      passed: 55
-      failed: 0
-    trigger: github-actions
-  - timestamp: 2026-02-18T06:37:15.943Z
-    result: PASSED
-    tests:
-      total: 55
-      passed: 55
-      failed: 0
-    trigger: github-actions
-  - timestamp: 2026-02-18T20:33:40.820Z
-    result: PASSED
-    tests:
-      total: 55
-      passed: 55
-      failed: 0
-    trigger: github-actions
-  - timestamp: 2026-02-19T05:56:11.741Z
-    result: PASSED
-    tests:
-      total: 55
-      passed: 55
-      failed: 0
-    trigger: github-actions

package/CLAUDE.md

@@ -1,30 +0,0 @@
-<!-- faf:start -->
-<!-- faf: faf-taf-git | TypeScript | cli | A Test Receipt Printer for git. Every CI run prints a receipt to .taf: append-only, timestamped, kept in git. Proof over time. -->
-<!-- faf: claim=project.faf | family=FAF -->
-
-# CLAUDE.md — faf-taf-git
-
-## What This Is
-
-A Test Receipt Printer for git. Every CI run prints a receipt to .taf: append-only, timestamped, kept in git. Proof over time.
-
-## Stack
-
-- **Language:** TypeScript
-- **Hosting:** npm registry + GitHub Actions Marketplace
-- **Build:** TypeScript (tsc)
-- **CI/CD:** GitHub Actions
-
-## Context
-
-- **Who:** Maintainers and teams who want proof their tests kept passing on main, and the reviewers, auditors and AI agents who check it
-- **What:** A Test Receipt Printer for git. Every CI run prints a receipt to .taf: append-only, timestamped, kept in git. Proof over time.
-- **Why:** Test results vanish when CI logs expire. Receipts stay in git, so anyone can look back and check whether main was green before a release.
-- **Where:** https://github.com/Wolfe-Jam/faf-taf-git
-- **When:** v2.4.1 (2026-10-30), --version fix; v2.4.0 (2026-10-29) JUnit XML parser; live since v1.0.0 (2025-10-27)
-- **How:** Run tests, save the output (or a JUnit XML report), then `uses: Wolfe-Jam/faf-taf-git@v2.4.1` with `target-branch: taf-receipts`. Anywhere else: `npx faf-taf-git --file test-output.txt --commit`. The taf-receipts branch only grows: never rewrite it.
-
----
-
-*STATUS: SYNC ACTIVE — 2026-10-30T04:26:00.762Z*
-<!-- faf:end -->

package/CODE_OF_CONDUCT.md

@@ -1,21 +0,0 @@
-# Code of Conduct
-
-This project adopts the [Contributor Covenant, v2.1](https://www.contributor-covenant.org/version/2/1/code_of_conduct/) as its code of conduct. The full text of that covenant governs behavior in this project and its community spaces.
-
-## Summary
-
-- We commit to maintaining a respectful, harassment-free environment for everyone who participates, regardless of background.
-- Participation includes contributing code, opening issues, reviewing pull requests, and interacting in any official channel.
-- The Contributor Covenant defines the full scope, expected conduct, and enforcement guidelines. See the link above for the complete text.
-
-## Reporting
-
-If you observe conduct that violates this Code of Conduct, please email **team@faf.one**. Reports are handled confidentially. Maintainers will review, respond, and take appropriate action consistent with the Contributor Covenant's enforcement guidelines.
-
-## Scope
-
-This Code of Conduct applies to all project spaces — the repository, issues, pull requests, discussions, and any public communication channels operated by the project. It also applies when representing the project in other forums.
-
-## Attribution
-
-This Code of Conduct adopts the [Contributor Covenant, version 2.1](https://www.contributor-covenant.org/version/2/1/code_of_conduct/), available under the CC BY 4.0 license.