karajan-code 4.48.0 → 4.48.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karajan-code",
-  "version": "4.48.0",
+  "version": "4.48.1",
   "description": "Local multi-agent coding orchestrator with TDD, SonarQube, and code review pipeline",
   "type": "module",
   "license": "AGPL-3.0",

package/src/commands/harden.js

@@ -186,7 +186,7 @@ export async function hardenCommand({
   const cfg = withConfig ? installConfigsForRoots({ projectDir, roots, dryRun }) : null;
   const withCi = ci && profile !== "minimal";
   const wf = withCi
-    ? installWorkflows({ projectDir, language: roots[0]?.language ?? null, profile, mutation, dryRun })
+    ? installWorkflows({ projectDir, language: roots[0]?.language ?? null, root: roots[0]?.dir ?? ".", profile, mutation, dryRun })
     : null;
   const withGuidelines = guidelines && profile !== "minimal";
   // KJC-BUG-0199 (issue #1773): the same detected language the workflows and

package/src/config/defaults.js

@@ -254,7 +254,8 @@ const DEFAULTS = {
     // delta re-index before every `kj run`; `onCommit` is consulted by
     // `kj rag install-hooks` to decide whether to install the post-merge
     // hook. Both default ON; flip to false to opt out without uninstalling.
-    autoUpdate: { onCommit: true, onRun: true },
+    // maxFiles (KJC-BUG-0304): past this drift the pre-query refresh answers from the index as it is.
+    autoUpdate: { onCommit: true, onRun: true, maxFiles: 25 },
     // KJC-TSK-0682 — sensitivity of the indexed code. Cloud embedders
     // (openai/voyage/cohere/mistral) require an explicit "public"; the
     // safe default blocks them (local ollama/onnx always allowed).

package/src/harden/sentinel-hooks.js

@@ -1049,7 +1049,11 @@ process.stdin.on("end", () => {
         // above rules on it) and the ledger only holds in-repo paths.
         // KJC-BUG-0190: with nothing indexed, no query can cover anything —
         // the gate asks for kj rag index instead of denying the impossible.
-        const covered = rel.startsWith("..") || hits.includes(rel) || hits.some((h) => dirOf(h) === dirOf(rel)) || ((rs.rag_queries || []).length > 0 && fresh()) || rs.rag_index_empty === true;
+        // KJC-BUG-0308: a barrel only re-exports its folder, so the RAG answers with
+        // what it re-exports and never with the barrel: a hit in its own subtree covers it.
+        const BARRELS = ["index.js", "index.ts", "index.mjs", "index.cjs", "index.jsx", "index.tsx", "__init__.py", "mod.rs"];
+        const barrelCovered = dirOf(rel) !== "" && BARRELS.includes(rel.slice(rel.lastIndexOf("/") + 1)) && hits.some((h) => h.startsWith(dirOf(rel) + "/"));
+        const covered = rel.startsWith("..") || hits.includes(rel) || hits.some((h) => dirOf(h) === dirOf(rel)) || barrelCovered || ((rs.rag_queries || []).length > 0 && fresh()) || rs.rag_index_empty === true;
         // ADR 0015 (KJC-TSK-0925): no escape. The cases it covered (new file, empty
         // index, not indexable) are decided by the gate itself.
         if (!covered) {

package/src/harden/workflow-engine.js

@@ -73,10 +73,14 @@ export function installWorkflows({
   mutation = false,
   dryRun = false,
   kjVersion = null,
+  root = ".",
 } = {}) {
   const dir = join(projectDir, WORKFLOWS_DIR);
   const pm = detectPackageManager(projectDir);
-  const quality = qualityWorkflowFor(language, pm, hasLintScript(projectDir));
+  // KJC-BUG-0309: the Quality workflow reads the package manager and the lint
+  // script where the language root is, and runs its steps there.
+  const appDir = join(projectDir, root);
+  const quality = qualityWorkflowFor(language, detectPackageManager(appDir), hasLintScript(appDir), root);
   const extras = extraWorkflowsFor({ profile, publishable: isPublishableNpm(projectDir), pm });
   const mut = mutation ? mutationWorkflowFor(language, pm) : null;
   // PL-C: el tier C solo existe donde el proyecto DECLARA policy. Versión a

package/src/harden/workflow-templates.js

@@ -166,13 +166,21 @@ const QUALITY_BY_LANGUAGE = {
  * `lint:false` drops the JS lint step entirely (project has no lint script,
  * KJC-BUG-0137) — mirroring the local hook, which also omits it.
  */
-export function qualityWorkflowFor(language, pm = "npm", lint = true) {
+export function qualityWorkflowFor(language, pm = "npm", lint = true, root = ".") {
   const c = PM_COMMANDS[pm] || PM_COMMANDS.npm;
   const body =
     language === "javascript" || language === "typescript"
       ? header([...nodeSetupSteps(pm), ...(lint ? [`      - run: ${c.lint}`] : []), `      - run: ${c.test}`])
       : QUALITY_BY_LANGUAGE[language];
-  return body ? { file: "kj-quality.yml", blockId: "wf-quality", body } : null;
+  return body ? { file: "kj-quality.yml", blockId: "wf-quality", body: inRoot(body, root) } : null;
+}
+
+// KJC-BUG-0309 (#2023): a repo whose app lives in a subdirectory runs every step
+// there. The root goes into YAML, so it is a plain relative path or nothing.
+function inRoot(body, root) {
+  if (root === "." || root === "") return body;
+  if (!/^[\w.-]+(\/[\w.-]+)*$/.test(root) || root.split("/").includes("..")) throw new Error(`kj harden: "${root}" is not a safe directory for the Quality workflow`);
+  return body.replace("    runs-on: ubuntu-latest\n", `    runs-on: ubuntu-latest\n    defaults:\n      run:\n        working-directory: ${root}\n`);
 }
 
 // Caps the net LOC delta of a PR (strict profile only — it is opinionated).

package/src/rag/auto-update.js

@@ -12,6 +12,8 @@ import { ragExclude } from "./indexable.js";
 import { makeGovernedEmbedder } from "./governed-embedder.js";
 import { openProjectStore } from "./project-store.js";
 
+// The pre-query refresh reindexes at most this many changed files (config.rag.autoUpdate.maxFiles).
+export const DEFAULT_MAX_DRIFT_FILES = 25;
 const HOOK_SRC = resolve(fileURLToPath(import.meta.url), "../../../scripts/git-hooks/post-merge");
 
 export async function maybeAutoUpdate({ projectDir, config, logger = console, flags = {} } = {}) {
@@ -26,6 +28,16 @@ export async function maybeAutoUpdate({ projectDir, config, logger = console, fl
   try {
     const since = getLastIndexedCommit(db, slug);
     if (!since || since === head) return { skipped: true, head };
+    // KJC-BUG-0304: a drift of hundreds of files (an index weeks old) reindexed the
+    // repo for half an hour before the query answered. Past the bound the query
+    // answers from the index as it is, and says how to bring it up to date.
+    const maxFiles = config?.rag?.autoUpdate?.maxFiles ?? DEFAULT_MAX_DRIFT_FILES;
+    const { stdout } = await execa("git", ["-C", projectDir, "diff", "--name-only", since, "HEAD"]);
+    const changed = stdout.split("\n").filter(Boolean).length;
+    if (changed > maxFiles) {
+      logger.warn?.(`[rag] ${changed} file(s) changed since the last index (more than ${maxFiles}): answering from the index as it is; bring it up to date with kj rag index --since auto`);
+      return { skipped: true, reason: "drift-too-large", changed, head };
+    }
     logger.info?.(`[rag] drift detected (${since.slice(0, 7)} → ${head.slice(0, 7)}); running delta update`);
     const totals = await indexProjectDelta(projectDir, { db, embedder: makeGovernedEmbedder(config), since, logger, exclude: ragExclude(config) });
     if (totals.head) setLastIndexedCommit(db, slug, totals.head);