oc-pilot 0.5.1 → 0.88.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (481) hide show
  1. package/CHANGELOG.md +683 -0
  2. package/CONTRIBUTING.md +4 -2
  3. package/README.md +588 -20
  4. package/README.ru.md +572 -10
  5. package/dist/cli.js +185 -1
  6. package/dist/cli.js.map +1 -1
  7. package/dist/cli.test.js +1211 -1
  8. package/dist/cli.test.js.map +1 -1
  9. package/dist/commands/anti-regression.js +97 -0
  10. package/dist/commands/anti-regression.js.map +1 -0
  11. package/dist/commands/arch-diff.js +80 -0
  12. package/dist/commands/arch-diff.js.map +1 -0
  13. package/dist/commands/authz.js +167 -0
  14. package/dist/commands/authz.js.map +1 -0
  15. package/dist/commands/autopsy.js +64 -0
  16. package/dist/commands/autopsy.js.map +1 -0
  17. package/dist/commands/bankruptcy.js +60 -0
  18. package/dist/commands/bankruptcy.js.map +1 -0
  19. package/dist/commands/battle.js +119 -0
  20. package/dist/commands/battle.js.map +1 -0
  21. package/dist/commands/boundaries.js +114 -0
  22. package/dist/commands/boundaries.js.map +1 -0
  23. package/dist/commands/bounty.js +56 -0
  24. package/dist/commands/bounty.js.map +1 -0
  25. package/dist/commands/brag.js +62 -0
  26. package/dist/commands/brag.js.map +1 -0
  27. package/dist/commands/cache.js +62 -0
  28. package/dist/commands/cache.js.map +1 -0
  29. package/dist/commands/cinema.js +61 -0
  30. package/dist/commands/cinema.js.map +1 -0
  31. package/dist/commands/cleanup.js +110 -0
  32. package/dist/commands/cleanup.js.map +1 -0
  33. package/dist/commands/commit.js +177 -0
  34. package/dist/commands/commit.js.map +1 -0
  35. package/dist/commands/commit.test.js +160 -0
  36. package/dist/commands/commit.test.js.map +1 -0
  37. package/dist/commands/compliance.js +121 -0
  38. package/dist/commands/compliance.js.map +1 -0
  39. package/dist/commands/contract-drift.js +97 -0
  40. package/dist/commands/contract-drift.js.map +1 -0
  41. package/dist/commands/coverage.js +137 -0
  42. package/dist/commands/coverage.js.map +1 -0
  43. package/dist/commands/day.js +116 -0
  44. package/dist/commands/day.js.map +1 -0
  45. package/dist/commands/day.test.js +45 -0
  46. package/dist/commands/day.test.js.map +1 -0
  47. package/dist/commands/deps.js +245 -0
  48. package/dist/commands/deps.js.map +1 -0
  49. package/dist/commands/docgen.js +4 -2
  50. package/dist/commands/docgen.js.map +1 -1
  51. package/dist/commands/doctor.js +146 -2
  52. package/dist/commands/doctor.js.map +1 -1
  53. package/dist/commands/doctor.test.js +69 -0
  54. package/dist/commands/doctor.test.js.map +1 -0
  55. package/dist/commands/echo.js +78 -0
  56. package/dist/commands/echo.js.map +1 -0
  57. package/dist/commands/ecosystem-verify.js +113 -0
  58. package/dist/commands/ecosystem-verify.js.map +1 -0
  59. package/dist/commands/env-sync.js +102 -0
  60. package/dist/commands/env-sync.js.map +1 -0
  61. package/dist/commands/explain.js +115 -0
  62. package/dist/commands/explain.js.map +1 -0
  63. package/dist/commands/fix.js +145 -3
  64. package/dist/commands/fix.js.map +1 -1
  65. package/dist/commands/flaky.js +111 -0
  66. package/dist/commands/flaky.js.map +1 -0
  67. package/dist/commands/fuzz.js +119 -0
  68. package/dist/commands/fuzz.js.map +1 -0
  69. package/dist/commands/hivemind.js +124 -0
  70. package/dist/commands/hivemind.js.map +1 -0
  71. package/dist/commands/impact.js +73 -0
  72. package/dist/commands/impact.js.map +1 -0
  73. package/dist/commands/init.js +73 -11
  74. package/dist/commands/init.js.map +1 -1
  75. package/dist/commands/init.test.js +138 -0
  76. package/dist/commands/init.test.js.map +1 -0
  77. package/dist/commands/install-hook.js +161 -0
  78. package/dist/commands/install-hook.js.map +1 -0
  79. package/dist/commands/install-hook.test.js +100 -0
  80. package/dist/commands/install-hook.test.js.map +1 -0
  81. package/dist/commands/invariants.js +103 -0
  82. package/dist/commands/invariants.js.map +1 -0
  83. package/dist/commands/mock-leak.js +97 -0
  84. package/dist/commands/mock-leak.js.map +1 -0
  85. package/dist/commands/mutate.js +99 -0
  86. package/dist/commands/mutate.js.map +1 -0
  87. package/dist/commands/pack.js +144 -0
  88. package/dist/commands/pack.js.map +1 -0
  89. package/dist/commands/preflight.js +137 -0
  90. package/dist/commands/preflight.js.map +1 -0
  91. package/dist/commands/query.js +57 -0
  92. package/dist/commands/query.js.map +1 -0
  93. package/dist/commands/ready.js +152 -0
  94. package/dist/commands/ready.js.map +1 -0
  95. package/dist/commands/receipt.js +289 -0
  96. package/dist/commands/receipt.js.map +1 -0
  97. package/dist/commands/replay.js +112 -0
  98. package/dist/commands/replay.js.map +1 -0
  99. package/dist/commands/replay.test.js +125 -0
  100. package/dist/commands/replay.test.js.map +1 -0
  101. package/dist/commands/restore.js +54 -0
  102. package/dist/commands/restore.js.map +1 -0
  103. package/dist/commands/review.js +263 -4
  104. package/dist/commands/review.js.map +1 -1
  105. package/dist/commands/review.test.js +160 -0
  106. package/dist/commands/review.test.js.map +1 -0
  107. package/dist/commands/reviewers.js +86 -0
  108. package/dist/commands/reviewers.js.map +1 -0
  109. package/dist/commands/roast.js +102 -0
  110. package/dist/commands/roast.js.map +1 -0
  111. package/dist/commands/sandbox.js +82 -0
  112. package/dist/commands/sandbox.js.map +1 -0
  113. package/dist/commands/sast.js +162 -0
  114. package/dist/commands/sast.js.map +1 -0
  115. package/dist/commands/scan.js +47 -12
  116. package/dist/commands/scan.js.map +1 -1
  117. package/dist/commands/slop.js +145 -0
  118. package/dist/commands/slop.js.map +1 -0
  119. package/dist/commands/slop.test.js +135 -0
  120. package/dist/commands/slop.test.js.map +1 -0
  121. package/dist/commands/stats.js +61 -0
  122. package/dist/commands/stats.js.map +1 -0
  123. package/dist/commands/test-gen.js +372 -0
  124. package/dist/commands/test-gen.js.map +1 -0
  125. package/dist/commands/test-guard.js +89 -0
  126. package/dist/commands/test-guard.js.map +1 -0
  127. package/dist/commands/test-plan.js +133 -0
  128. package/dist/commands/test-plan.js.map +1 -0
  129. package/dist/commands/zoom-symbol.js +52 -0
  130. package/dist/commands/zoom-symbol.js.map +1 -0
  131. package/dist/core/agent-rules.js +35 -0
  132. package/dist/core/agent-rules.js.map +1 -0
  133. package/dist/core/anthropic.test.js +116 -0
  134. package/dist/core/anthropic.test.js.map +1 -0
  135. package/dist/core/anti-regression.js +161 -0
  136. package/dist/core/anti-regression.js.map +1 -0
  137. package/dist/core/anti-regression.test.js +154 -0
  138. package/dist/core/anti-regression.test.js.map +1 -0
  139. package/dist/core/aql.js +220 -0
  140. package/dist/core/aql.js.map +1 -0
  141. package/dist/core/aql.test.js +64 -0
  142. package/dist/core/aql.test.js.map +1 -0
  143. package/dist/core/arch-diff.js +122 -0
  144. package/dist/core/arch-diff.js.map +1 -0
  145. package/dist/core/arch-diff.test.js +93 -0
  146. package/dist/core/arch-diff.test.js.map +1 -0
  147. package/dist/core/authz.js +292 -0
  148. package/dist/core/authz.js.map +1 -0
  149. package/dist/core/authz.test.js +115 -0
  150. package/dist/core/authz.test.js.map +1 -0
  151. package/dist/core/autopsy.js +230 -0
  152. package/dist/core/autopsy.js.map +1 -0
  153. package/dist/core/autopsy.test.js +106 -0
  154. package/dist/core/autopsy.test.js.map +1 -0
  155. package/dist/core/bankruptcy.js +232 -0
  156. package/dist/core/bankruptcy.js.map +1 -0
  157. package/dist/core/bankruptcy.test.js +91 -0
  158. package/dist/core/bankruptcy.test.js.map +1 -0
  159. package/dist/core/baseline.js +131 -0
  160. package/dist/core/baseline.js.map +1 -0
  161. package/dist/core/baseline.test.js +91 -0
  162. package/dist/core/baseline.test.js.map +1 -0
  163. package/dist/core/battle.js +213 -0
  164. package/dist/core/battle.js.map +1 -0
  165. package/dist/core/battle.test.js +116 -0
  166. package/dist/core/battle.test.js.map +1 -0
  167. package/dist/core/boundaries.js +200 -0
  168. package/dist/core/boundaries.js.map +1 -0
  169. package/dist/core/boundaries.test.js +62 -0
  170. package/dist/core/boundaries.test.js.map +1 -0
  171. package/dist/core/bounty.js +128 -0
  172. package/dist/core/bounty.js.map +1 -0
  173. package/dist/core/bounty.test.js +82 -0
  174. package/dist/core/bounty.test.js.map +1 -0
  175. package/dist/core/brag.js +174 -0
  176. package/dist/core/brag.js.map +1 -0
  177. package/dist/core/brag.test.js +43 -0
  178. package/dist/core/brag.test.js.map +1 -0
  179. package/dist/core/cache.js +189 -0
  180. package/dist/core/cache.js.map +1 -0
  181. package/dist/core/cache.test.js +159 -0
  182. package/dist/core/cache.test.js.map +1 -0
  183. package/dist/core/cinema.js +242 -0
  184. package/dist/core/cinema.js.map +1 -0
  185. package/dist/core/cinema.test.js +73 -0
  186. package/dist/core/cinema.test.js.map +1 -0
  187. package/dist/core/cleanup.js +107 -0
  188. package/dist/core/cleanup.js.map +1 -0
  189. package/dist/core/compliance.js +193 -0
  190. package/dist/core/compliance.js.map +1 -0
  191. package/dist/core/compliance.test.js +123 -0
  192. package/dist/core/compliance.test.js.map +1 -0
  193. package/dist/core/config.js +78 -0
  194. package/dist/core/config.js.map +1 -1
  195. package/dist/core/config.test.js +66 -0
  196. package/dist/core/config.test.js.map +1 -1
  197. package/dist/core/contract-drift.js +296 -0
  198. package/dist/core/contract-drift.js.map +1 -0
  199. package/dist/core/contract-drift.test.js +166 -0
  200. package/dist/core/contract-drift.test.js.map +1 -0
  201. package/dist/core/cost.test.js +103 -0
  202. package/dist/core/cost.test.js.map +1 -0
  203. package/dist/core/coverage.js +335 -0
  204. package/dist/core/coverage.js.map +1 -0
  205. package/dist/core/coverage.test.js +190 -0
  206. package/dist/core/coverage.test.js.map +1 -0
  207. package/dist/core/deps-fix.js +169 -0
  208. package/dist/core/deps-fix.js.map +1 -0
  209. package/dist/core/deps-fix.test.js +176 -0
  210. package/dist/core/deps-fix.test.js.map +1 -0
  211. package/dist/core/deps-health.js +353 -0
  212. package/dist/core/deps-health.js.map +1 -0
  213. package/dist/core/deps-health.test.js +230 -0
  214. package/dist/core/deps-health.test.js.map +1 -0
  215. package/dist/core/deps-why.js +260 -0
  216. package/dist/core/deps-why.js.map +1 -0
  217. package/dist/core/deps-why.test.js +175 -0
  218. package/dist/core/deps-why.test.js.map +1 -0
  219. package/dist/core/deps.js +179 -0
  220. package/dist/core/deps.js.map +1 -0
  221. package/dist/core/deps.test.js +88 -0
  222. package/dist/core/deps.test.js.map +1 -0
  223. package/dist/core/diff-source.js +4 -2
  224. package/dist/core/diff-source.js.map +1 -1
  225. package/dist/core/echo.js +151 -0
  226. package/dist/core/echo.js.map +1 -0
  227. package/dist/core/echo.test.js +90 -0
  228. package/dist/core/echo.test.js.map +1 -0
  229. package/dist/core/ecosystem-verify.js +331 -0
  230. package/dist/core/ecosystem-verify.js.map +1 -0
  231. package/dist/core/ecosystem-verify.test.js +158 -0
  232. package/dist/core/ecosystem-verify.test.js.map +1 -0
  233. package/dist/core/engine-preset.test.js +60 -0
  234. package/dist/core/engine-preset.test.js.map +1 -0
  235. package/dist/core/engine.js +278 -32
  236. package/dist/core/engine.js.map +1 -1
  237. package/dist/core/engine.test.js +63 -0
  238. package/dist/core/engine.test.js.map +1 -1
  239. package/dist/core/env-sync.js +122 -0
  240. package/dist/core/env-sync.js.map +1 -0
  241. package/dist/core/env-sync.test.js +99 -0
  242. package/dist/core/env-sync.test.js.map +1 -0
  243. package/dist/core/file-context.js +4 -2
  244. package/dist/core/file-context.js.map +1 -1
  245. package/dist/core/findings-baseline.js +60 -0
  246. package/dist/core/findings-baseline.js.map +1 -0
  247. package/dist/core/findings-baseline.test.js +77 -0
  248. package/dist/core/findings-baseline.test.js.map +1 -0
  249. package/dist/core/findings.js +68 -21
  250. package/dist/core/findings.js.map +1 -1
  251. package/dist/core/flaky.js +137 -0
  252. package/dist/core/flaky.js.map +1 -0
  253. package/dist/core/flaky.test.js +97 -0
  254. package/dist/core/flaky.test.js.map +1 -0
  255. package/dist/core/format.js +5 -3
  256. package/dist/core/format.js.map +1 -1
  257. package/dist/core/fuzz.js +306 -0
  258. package/dist/core/fuzz.js.map +1 -0
  259. package/dist/core/fuzz.test.js +121 -0
  260. package/dist/core/fuzz.test.js.map +1 -0
  261. package/dist/core/git.js +22 -0
  262. package/dist/core/git.js.map +1 -1
  263. package/dist/core/gitlab.js +176 -0
  264. package/dist/core/gitlab.js.map +1 -0
  265. package/dist/core/gitlab.test.js +199 -0
  266. package/dist/core/gitlab.test.js.map +1 -0
  267. package/dist/core/hivemind.js +250 -0
  268. package/dist/core/hivemind.js.map +1 -0
  269. package/dist/core/hivemind.test.js +79 -0
  270. package/dist/core/hivemind.test.js.map +1 -0
  271. package/dist/core/hologram.js +463 -0
  272. package/dist/core/hologram.js.map +1 -0
  273. package/dist/core/hologram.test.js +124 -0
  274. package/dist/core/hologram.test.js.map +1 -0
  275. package/dist/core/impact.js +240 -0
  276. package/dist/core/impact.js.map +1 -0
  277. package/dist/core/impact.test.js +105 -0
  278. package/dist/core/impact.test.js.map +1 -0
  279. package/dist/core/import-graph.js +170 -0
  280. package/dist/core/import-graph.js.map +1 -0
  281. package/dist/core/import-graph.test.js +52 -0
  282. package/dist/core/import-graph.test.js.map +1 -0
  283. package/dist/core/injection.js +55 -0
  284. package/dist/core/injection.js.map +1 -0
  285. package/dist/core/injection.test.js +45 -0
  286. package/dist/core/injection.test.js.map +1 -0
  287. package/dist/core/invariants.js +286 -0
  288. package/dist/core/invariants.js.map +1 -0
  289. package/dist/core/invariants.test.js +87 -0
  290. package/dist/core/invariants.test.js.map +1 -0
  291. package/dist/core/last-review.js +92 -0
  292. package/dist/core/last-review.js.map +1 -0
  293. package/dist/core/last-review.test.js +97 -0
  294. package/dist/core/last-review.test.js.map +1 -0
  295. package/dist/core/lockfile-support.test.js +112 -0
  296. package/dist/core/lockfile-support.test.js.map +1 -0
  297. package/dist/core/lockfile.js +284 -0
  298. package/dist/core/lockfile.js.map +1 -0
  299. package/dist/core/lockfile.test.js +203 -0
  300. package/dist/core/lockfile.test.js.map +1 -0
  301. package/dist/core/mock-leak.js +120 -0
  302. package/dist/core/mock-leak.js.map +1 -0
  303. package/dist/core/mock-leak.test.js +79 -0
  304. package/dist/core/mock-leak.test.js.map +1 -0
  305. package/dist/core/mutation.js +206 -0
  306. package/dist/core/mutation.js.map +1 -0
  307. package/dist/core/mutation.test.js +104 -0
  308. package/dist/core/mutation.test.js.map +1 -0
  309. package/dist/core/opencode.js +15 -2
  310. package/dist/core/opencode.js.map +1 -1
  311. package/dist/core/opencode.test.js +10 -1
  312. package/dist/core/opencode.test.js.map +1 -1
  313. package/dist/core/options.js +51 -3
  314. package/dist/core/options.js.map +1 -1
  315. package/dist/core/osv.js +202 -0
  316. package/dist/core/osv.js.map +1 -0
  317. package/dist/core/osv.test.js +173 -0
  318. package/dist/core/osv.test.js.map +1 -0
  319. package/dist/core/output-format.test.js +102 -0
  320. package/dist/core/output-format.test.js.map +1 -0
  321. package/dist/core/pack.js +212 -0
  322. package/dist/core/pack.js.map +1 -0
  323. package/dist/core/pack.test.js +129 -0
  324. package/dist/core/pack.test.js.map +1 -0
  325. package/dist/core/phantom.js +155 -0
  326. package/dist/core/phantom.js.map +1 -0
  327. package/dist/core/phantom.test.js +58 -0
  328. package/dist/core/phantom.test.js.map +1 -0
  329. package/dist/core/pr-comment.js +116 -0
  330. package/dist/core/pr-comment.js.map +1 -0
  331. package/dist/core/pr-comment.test.js +53 -0
  332. package/dist/core/pr-comment.test.js.map +1 -0
  333. package/dist/core/pr-review.js +160 -0
  334. package/dist/core/pr-review.js.map +1 -0
  335. package/dist/core/pr-review.test.js +62 -0
  336. package/dist/core/pr-review.test.js.map +1 -0
  337. package/dist/core/preflight-run.js +106 -0
  338. package/dist/core/preflight-run.js.map +1 -0
  339. package/dist/core/preflight.js +173 -0
  340. package/dist/core/preflight.js.map +1 -0
  341. package/dist/core/preflight.test.js +187 -0
  342. package/dist/core/preflight.test.js.map +1 -0
  343. package/dist/core/presets.js +408 -0
  344. package/dist/core/presets.js.map +1 -0
  345. package/dist/core/presets.test.js +79 -0
  346. package/dist/core/presets.test.js.map +1 -0
  347. package/dist/core/prompt.golden.test.js +74 -0
  348. package/dist/core/prompt.golden.test.js.map +1 -0
  349. package/dist/core/prompt.js +43 -4
  350. package/dist/core/prompt.js.map +1 -1
  351. package/dist/core/prompt.test.js +16 -0
  352. package/dist/core/prompt.test.js.map +1 -1
  353. package/dist/core/readiness-fix.js +111 -0
  354. package/dist/core/readiness-fix.js.map +1 -0
  355. package/dist/core/readiness-fix.test.js +99 -0
  356. package/dist/core/readiness-fix.test.js.map +1 -0
  357. package/dist/core/readiness.js +189 -0
  358. package/dist/core/readiness.js.map +1 -0
  359. package/dist/core/readiness.test.js +199 -0
  360. package/dist/core/readiness.test.js.map +1 -0
  361. package/dist/core/receipt.js +193 -0
  362. package/dist/core/receipt.js.map +1 -0
  363. package/dist/core/receipt.test.js +193 -0
  364. package/dist/core/receipt.test.js.map +1 -0
  365. package/dist/core/reviewers.js +179 -0
  366. package/dist/core/reviewers.js.map +1 -0
  367. package/dist/core/reviewers.test.js +105 -0
  368. package/dist/core/reviewers.test.js.map +1 -0
  369. package/dist/core/roast.js +27 -0
  370. package/dist/core/roast.js.map +1 -0
  371. package/dist/core/roast.test.js +19 -0
  372. package/dist/core/roast.test.js.map +1 -0
  373. package/dist/core/router.js +8 -0
  374. package/dist/core/router.js.map +1 -0
  375. package/dist/core/router.test.js +157 -0
  376. package/dist/core/router.test.js.map +1 -0
  377. package/dist/core/rules.js +2 -2
  378. package/dist/core/rules.js.map +1 -1
  379. package/dist/core/run.js +322 -20
  380. package/dist/core/run.js.map +1 -1
  381. package/dist/core/sarif.js +125 -0
  382. package/dist/core/sarif.js.map +1 -0
  383. package/dist/core/sarif.test.js +60 -0
  384. package/dist/core/sarif.test.js.map +1 -0
  385. package/dist/core/sast.js +324 -0
  386. package/dist/core/sast.js.map +1 -0
  387. package/dist/core/sast.test.js +105 -0
  388. package/dist/core/sast.test.js.map +1 -0
  389. package/dist/core/sbom.js +121 -0
  390. package/dist/core/sbom.js.map +1 -0
  391. package/dist/core/sbom.test.js +81 -0
  392. package/dist/core/sbom.test.js.map +1 -0
  393. package/dist/core/second-opinion.js +88 -0
  394. package/dist/core/second-opinion.js.map +1 -0
  395. package/dist/core/second-opinion.test.js +89 -0
  396. package/dist/core/second-opinion.test.js.map +1 -0
  397. package/dist/core/secrets.js +120 -5
  398. package/dist/core/secrets.js.map +1 -1
  399. package/dist/core/secrets.test.js +74 -1
  400. package/dist/core/secrets.test.js.map +1 -1
  401. package/dist/core/shadow.js +94 -0
  402. package/dist/core/shadow.js.map +1 -0
  403. package/dist/core/shadow.test.js +50 -0
  404. package/dist/core/shadow.test.js.map +1 -0
  405. package/dist/core/slicing.js +110 -0
  406. package/dist/core/slicing.js.map +1 -0
  407. package/dist/core/slicing.test.js +287 -0
  408. package/dist/core/slicing.test.js.map +1 -0
  409. package/dist/core/slop/churn.js +49 -0
  410. package/dist/core/slop/churn.js.map +1 -0
  411. package/dist/core/slop/collect.js +186 -0
  412. package/dist/core/slop/collect.js.map +1 -0
  413. package/dist/core/slop/dead-exports.js +101 -0
  414. package/dist/core/slop/dead-exports.js.map +1 -0
  415. package/dist/core/slop/duplicates.js +155 -0
  416. package/dist/core/slop/duplicates.js.map +1 -0
  417. package/dist/core/slop/index.js +72 -0
  418. package/dist/core/slop/index.js.map +1 -0
  419. package/dist/core/slop/model.js +2 -0
  420. package/dist/core/slop/model.js.map +1 -0
  421. package/dist/core/slop/score.js +185 -0
  422. package/dist/core/slop/score.js.map +1 -0
  423. package/dist/core/slop/slop.test.js +160 -0
  424. package/dist/core/slop/slop.test.js.map +1 -0
  425. package/dist/core/slop/source.js +129 -0
  426. package/dist/core/slop/source.js.map +1 -0
  427. package/dist/core/slop/test-debt.js +178 -0
  428. package/dist/core/slop/test-debt.js.map +1 -0
  429. package/dist/core/slop/test-debt.test.js +114 -0
  430. package/dist/core/slop/test-debt.test.js.map +1 -0
  431. package/dist/core/slop/todos.js +117 -0
  432. package/dist/core/slop/todos.js.map +1 -0
  433. package/dist/core/snapshot.js +214 -0
  434. package/dist/core/snapshot.js.map +1 -0
  435. package/dist/core/snapshot.test.js +101 -0
  436. package/dist/core/snapshot.test.js.map +1 -0
  437. package/dist/core/stats.js +119 -0
  438. package/dist/core/stats.js.map +1 -0
  439. package/dist/core/stats.test.js +86 -0
  440. package/dist/core/stats.test.js.map +1 -0
  441. package/dist/core/suppressions.js +96 -0
  442. package/dist/core/suppressions.js.map +1 -0
  443. package/dist/core/suppressions.test.js +90 -0
  444. package/dist/core/suppressions.test.js.map +1 -0
  445. package/dist/core/test-delta.js +53 -0
  446. package/dist/core/test-delta.js.map +1 -0
  447. package/dist/core/test-delta.test.js +41 -0
  448. package/dist/core/test-delta.test.js.map +1 -0
  449. package/dist/core/test-plan.js +212 -0
  450. package/dist/core/test-plan.js.map +1 -0
  451. package/dist/core/test-plan.test.js +94 -0
  452. package/dist/core/test-plan.test.js.map +1 -0
  453. package/dist/core/test-weakening.js +191 -0
  454. package/dist/core/test-weakening.js.map +1 -0
  455. package/dist/core/test-weakening.test.js +114 -0
  456. package/dist/core/test-weakening.test.js.map +1 -0
  457. package/dist/core/tree-scan.js +77 -0
  458. package/dist/core/tree-scan.js.map +1 -0
  459. package/dist/core/tree-scan.test.js +58 -0
  460. package/dist/core/tree-scan.test.js.map +1 -0
  461. package/dist/mcp-prompts.test.js +133 -0
  462. package/dist/mcp-prompts.test.js.map +1 -0
  463. package/dist/mcp.js +3303 -240
  464. package/dist/mcp.js.map +1 -1
  465. package/dist/mcp.test.js +1739 -1
  466. package/dist/mcp.test.js.map +1 -1
  467. package/dist/skills.test.js +221 -0
  468. package/dist/skills.test.js.map +1 -0
  469. package/dist/version.js +1 -1
  470. package/dist/version.js.map +1 -1
  471. package/docs/integrations.md +151 -7
  472. package/package.json +2 -1
  473. package/prompts/oc-pilot.en.md +8 -1
  474. package/prompts/oc-pilot.ru.md +8 -1
  475. package/server.json +2 -2
  476. package/skills/agent-self-review/SKILL.md +87 -0
  477. package/skills/commit-discipline/SKILL.md +86 -0
  478. package/skills/oc-pilot/SKILL.md +86 -0
  479. package/skills/secure-diff-gate/SKILL.md +101 -0
  480. package/skills/stack-review-packs/SKILL.md +76 -0
  481. package/skills/test-failure-triage/SKILL.md +88 -0
@@ -0,0 +1,242 @@
1
+ import { existsSync } from "node:fs";
2
+ import { runGit } from "./git.js";
3
+ import { loadLastReview } from "./last-review.js";
4
+ import { readReceipt, receiptPath, verifyReceipt } from "./receipt.js";
5
+ import { readStats } from "./stats.js";
6
+ const DEFAULT_TITLE = "oc-pilot session cinema";
7
+ const DAY_MS = 86_400_000;
8
+ function escapeHtml(value) {
9
+ return value
10
+ .replaceAll("&", "&")
11
+ .replaceAll("<", "&lt;")
12
+ .replaceAll(">", "&gt;")
13
+ .replaceAll('"', "&quot;")
14
+ .replaceAll("'", "&#39;");
15
+ }
16
+ function isoAt(ts) {
17
+ return new Date(ts).toISOString();
18
+ }
19
+ function shortAt(at) {
20
+ const date = new Date(at);
21
+ return Number.isNaN(date.getTime()) ? at : date.toISOString().replace("T", " ").slice(0, 16);
22
+ }
23
+ function gitFrames(cwd, sinceMs, noPaths) {
24
+ const result = runGit(["log", `--since=${new Date(sinceMs).toISOString()}`, "--pretty=format:%h%x1f%aI%x1f%s"], cwd);
25
+ if (result.status !== 0)
26
+ return [];
27
+ const frames = [];
28
+ for (const line of result.stdout.split(/\r?\n/)) {
29
+ if (!line.trim())
30
+ continue;
31
+ const [hash, at, ...subjectParts] = line.split("\u001f");
32
+ if (!hash || !at)
33
+ continue;
34
+ const subject = subjectParts.join("\u001f").trim();
35
+ frames.push({
36
+ at,
37
+ kind: "commit",
38
+ text: `${hash} ${noPaths ? "(path hidden)" : subject || "commit"}`,
39
+ });
40
+ }
41
+ // git log prints newest first; keep oldest first so a stable sort leaves
42
+ // the newest commit last when timestamps share a second.
43
+ return frames.reverse();
44
+ }
45
+ function statsFrames(cwd, sinceMs) {
46
+ const records = readStats(cwd);
47
+ const frames = [];
48
+ for (const run of records.runs) {
49
+ if (run.ts < sinceMs)
50
+ continue;
51
+ const findings = run.findings.critical + run.findings.warning + run.findings.style;
52
+ frames.push({
53
+ at: isoAt(run.ts),
54
+ kind: "run",
55
+ text: `${run.recipe} exited ${String(run.exitCode)}${findings > 0 ? `, ${String(findings)} finding(s)` : ""}`,
56
+ });
57
+ }
58
+ const apiByDay = new Map();
59
+ for (const call of records.apiCalls) {
60
+ if (call.ts < sinceMs)
61
+ continue;
62
+ const day = isoAt(call.ts).slice(0, 10);
63
+ const entry = apiByDay.get(day) ?? { calls: 0, cached: 0 };
64
+ entry.calls += 1;
65
+ if (call.cached)
66
+ entry.cached += 1;
67
+ apiByDay.set(day, entry);
68
+ }
69
+ for (const [day, entry] of apiByDay) {
70
+ frames.push({
71
+ at: `${day}T12:00:00.000Z`,
72
+ kind: "api",
73
+ text: `API: ${String(entry.calls)} call(s), ${String(entry.cached)} cached`,
74
+ });
75
+ }
76
+ return frames;
77
+ }
78
+ function reviewFrame(cwd, sinceMs, noPaths) {
79
+ const review = loadLastReview(cwd);
80
+ if (!review)
81
+ return [];
82
+ const at = new Date(review.createdAt);
83
+ if (Number.isNaN(at.getTime()) || at.getTime() < sinceMs)
84
+ return [];
85
+ const first = review.findings[0];
86
+ const location = first ? (noPaths ? "(path hidden)" : (first.location ?? "unknown")) : "";
87
+ return [
88
+ {
89
+ at: at.toISOString(),
90
+ kind: "review",
91
+ text: `review: ${String(review.findings.length)} finding(s)${location ? `, first at ${location}` : ""}`,
92
+ },
93
+ ];
94
+ }
95
+ function receiptFrame(cwd, sinceMs) {
96
+ const path = receiptPath(cwd);
97
+ if (!path || !existsSync(path))
98
+ return [];
99
+ const receipt = readReceipt(path);
100
+ const at = new Date(receipt.createdAt);
101
+ if (Number.isNaN(at.getTime()) || at.getTime() < sinceMs)
102
+ return [];
103
+ const verification = verifyReceipt(cwd, receipt);
104
+ const tests = receipt.tests ? (receipt.tests.passed ? "tests passed" : "tests failed") : "tests not run";
105
+ return [
106
+ {
107
+ at: at.toISOString(),
108
+ kind: "receipt",
109
+ text: `receipt ${receipt.commit?.slice(0, 7) ?? "no commit"}: ${tests}, ${verification.ok ? "verified" : "not verified"}`,
110
+ },
111
+ ];
112
+ }
113
+ function renderHtml(title, frames, sinceDays) {
114
+ const payload = JSON.stringify(frames).replaceAll("<", "\\u003c");
115
+ return `<!doctype html>
116
+ <html lang="en">
117
+ <head>
118
+ <meta charset="utf-8">
119
+ <meta name="viewport" content="width=device-width, initial-scale=1">
120
+ <title>${escapeHtml(title)}</title>
121
+ <style>
122
+ :root { color-scheme: dark; }
123
+ body { margin: 0; background: #0b0f14; color: #c9d1d9; font: 15px/1.5 "Cascadia Mono", "SFMono-Regular", Consolas, monospace; }
124
+ main { max-width: 900px; margin: 0 auto; padding: 32px 20px 64px; }
125
+ h1 { margin: 0 0 4px; color: #58a6ff; font-size: 20px; }
126
+ .meta { margin: 0 0 24px; color: #8b949e; }
127
+ #screen { min-height: 320px; padding: 20px; border: 1px solid #30363d; border-radius: 8px; background: #010409; white-space: pre-wrap; }
128
+ .frame { margin: 0 0 10px; }
129
+ .at { color: #8b949e; }
130
+ .kind { color: #d2a8ff; }
131
+ .controls { display: flex; gap: 8px; align-items: center; margin-top: 16px; }
132
+ button, select { background: #21262d; color: #c9d1d9; border: 1px solid #30363d; border-radius: 6px; padding: 6px 12px; font: inherit; }
133
+ button:hover { border-color: #58a6ff; }
134
+ #counter { color: #8b949e; margin-left: auto; }
135
+ </style>
136
+ </head>
137
+ <body>
138
+ <main>
139
+ <h1>${escapeHtml(title)}</h1>
140
+ <p class="meta">${String(frames.length)} frames over ${String(sinceDays)} day(s). Generated by oc-pilot.</p>
141
+ <div id="screen"></div>
142
+ <div class="controls">
143
+ <button id="play">Pause</button>
144
+ <select id="speed"><option value="1500">0.5x</option><option value="800" selected>1x</option><option value="400">2x</option><option value="150">5x</option></select>
145
+ <span id="counter"></span>
146
+ </div>
147
+ </main>
148
+ <script>
149
+ const frames = ${payload};
150
+ const screen = document.getElementById("screen");
151
+ const play = document.getElementById("play");
152
+ const speed = document.getElementById("speed");
153
+ const counter = document.getElementById("counter");
154
+ let index = 0;
155
+ let timer = null;
156
+ function draw() {
157
+ if (frames.length === 0) {
158
+ screen.textContent = "No activity in this window.";
159
+ counter.textContent = "0 / 0";
160
+ return;
161
+ }
162
+ const frame = frames[Math.min(index, frames.length - 1)];
163
+ const row = document.createElement("p");
164
+ row.className = "frame";
165
+ const at = document.createElement("span");
166
+ at.className = "at";
167
+ at.textContent = "[" + frame.at.replace("T", " ").slice(0, 16) + "] ";
168
+ const kind = document.createElement("span");
169
+ kind.className = "kind";
170
+ kind.textContent = frame.kind + " ";
171
+ const text = document.createElement("span");
172
+ text.textContent = frame.text;
173
+ row.append(at, kind, text);
174
+ screen.append(row);
175
+ screen.scrollTop = screen.scrollHeight;
176
+ counter.textContent = (index + 1) + " / " + frames.length;
177
+ }
178
+ function tick() {
179
+ if (index >= frames.length - 1) {
180
+ stop();
181
+ return;
182
+ }
183
+ index += 1;
184
+ draw();
185
+ }
186
+ function start() {
187
+ if (frames.length === 0 || timer !== null) return;
188
+ play.textContent = "Pause";
189
+ timer = setInterval(tick, Number(speed.value));
190
+ }
191
+ function stop() {
192
+ if (timer !== null) clearInterval(timer);
193
+ timer = null;
194
+ play.textContent = "Play";
195
+ }
196
+ play.addEventListener("click", () => { if (timer === null) start(); else stop(); });
197
+ speed.addEventListener("change", () => { if (timer !== null) { stop(); start(); } });
198
+ draw();
199
+ start();
200
+ </script>
201
+ </body>
202
+ </html>
203
+ `;
204
+ }
205
+ function renderCast(frames) {
206
+ const header = JSON.stringify({ version: 2, width: 100, height: 30, timestamp: Math.floor(Date.now() / 1000) });
207
+ const lines = frames.map((frame, index) => {
208
+ const time = index * 0.6;
209
+ const output = `[${shortAt(frame.at)}] ${frame.kind} ${frame.text}\r\n`;
210
+ return JSON.stringify([Number(time.toFixed(2)), "o", output]);
211
+ });
212
+ return `${[header, ...lines].join("\n")}\n`;
213
+ }
214
+ export function buildCinema(cwd, options = {}) {
215
+ const sinceDays = Math.max(1, Math.min(365, Math.round(options.sinceDays ?? 7)));
216
+ const maxFrames = Math.max(1, Math.min(500, Math.round(options.maxFrames ?? 120)));
217
+ const sinceMs = Date.now() - sinceDays * DAY_MS;
218
+ const title = options.title?.trim() || DEFAULT_TITLE;
219
+ const noPaths = options.noPaths === true;
220
+ const frames = [
221
+ ...gitFrames(cwd, sinceMs, noPaths),
222
+ ...statsFrames(cwd, sinceMs),
223
+ ...reviewFrame(cwd, sinceMs, noPaths),
224
+ ...receiptFrame(cwd, sinceMs),
225
+ ]
226
+ .sort((left, right) => left.at.localeCompare(right.at))
227
+ .slice(-maxFrames);
228
+ const format = options.cast ? "cast" : "html";
229
+ return {
230
+ title,
231
+ generatedAt: new Date().toISOString(),
232
+ sinceDays,
233
+ format,
234
+ frames,
235
+ content: format === "cast" ? renderCast(frames) : renderHtml(title, frames, sinceDays),
236
+ };
237
+ }
238
+ export function describeCinema(report) {
239
+ const format = report.format === "cast" ? "asciinema cast" : "HTML";
240
+ return `${String(report.frames.length)} кадров за ${String(report.sinceDays)} дн. (${format})`;
241
+ }
242
+ //# sourceMappingURL=cinema.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cinema.js","sourceRoot":"","sources":["../../src/core/cinema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AA4BvC,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,MAAM,GAAG,UAAU,CAAC;AAE1B,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;SACzB,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,OAAO,CAAC,EAAU;IACzB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,OAAe,EAAE,OAAgB;IAC/D,MAAM,MAAM,GAAG,MAAM,CACnB,CAAC,KAAK,EAAE,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,iCAAiC,CAAC,EACxF,GAAG,CACJ,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE;YAAE,SAAS;QAC3B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC;YACV,EAAE;YACF,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,IAAI,QAAQ,EAAE;SACnE,CAAC,CAAC;IACL,CAAC;IACD,yEAAyE;IACzE,yDAAyD;IACzD,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,OAAe;IAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,EAAE,GAAG,OAAO;YAAE,SAAS;QAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;QACnF,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACjB,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,WAAW,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE;SAC9G,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6C,CAAC;IACtE,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,EAAE,GAAG,OAAO;YAAE,SAAS;QAChC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC3D,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;QACjB,IAAI,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QACnC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,GAAG,GAAG,gBAAgB;YAC1B,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,QAAQ,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS;SAC5E,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,OAAe,EAAE,OAAgB;IACjE,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,OAAO;QAAE,OAAO,EAAE,CAAC;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,OAAO;QACL;YACE,EAAE,EAAE,EAAE,CAAC,WAAW,EAAE;YACpB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,WAAW,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,QAAQ,CAAC,CAAC,CAAC,cAAc,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;SACxG;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,OAAe;IAChD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,OAAO;QAAE,OAAO,EAAE,CAAC;IACpE,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;IACzG,OAAO;QACL;YACE,EAAE,EAAE,EAAE,CAAC,WAAW,EAAE;YACpB,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,WAAW,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,WAAW,KAAK,KAAK,KAAK,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE;SAC1H;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,MAAqB,EAAE,SAAiB;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAClE,OAAO;;;;;SAKA,UAAU,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;MAmBpB,UAAU,CAAC,KAAK,CAAC;kBACL,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,MAAM,CAAC,SAAS,CAAC;;;;;;;;;iBASvD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsDvB,CAAC;AACF,CAAC;AAED,SAAS,UAAU,CAAC,MAAqB;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IAChH,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,KAAK,GAAG,GAAG,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC;QACxE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,UAAyB,EAAE;IAClE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,MAAM,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,aAAa,CAAC;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC;IACzC,MAAM,MAAM,GAAG;QACb,GAAG,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC;QACnC,GAAG,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC;QAC5B,GAAG,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC;QACrC,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC;KAC9B;SACE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;SACtD,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;IACrB,MAAM,MAAM,GAAiB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5D,OAAO;QACL,KAAK;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,SAAS;QACT,MAAM;QACN,MAAM;QACN,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;KACvF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAoB;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC;IACpE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,MAAM,GAAG,CAAC;AACjG,CAAC"}
@@ -0,0 +1,73 @@
1
+ import assert from "node:assert/strict";
2
+ import { spawnSync } from "node:child_process";
3
+ import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
4
+ import { tmpdir } from "node:os";
5
+ import { join } from "node:path";
6
+ import test from "node:test";
7
+ import { buildCinema, describeCinema } from "./cinema.js";
8
+ function git(args, cwd) {
9
+ const result = spawnSync("git", args, { cwd, encoding: "utf8" });
10
+ if (result.status !== 0) {
11
+ throw new Error(`git ${args.join(" ")} failed: ${result.stderr}`);
12
+ }
13
+ return result.stdout;
14
+ }
15
+ function makeRepo() {
16
+ const dir = mkdtempSync(join(tmpdir(), "oc-pilot-cinema-"));
17
+ git(["init", "-q"], dir);
18
+ git(["config", "user.email", "test@example.com"], dir);
19
+ git(["config", "user.name", "Test"], dir);
20
+ git(["config", "core.autocrlf", "false"], dir);
21
+ writeFileSync(join(dir, "app.ts"), "export const value = 1;\n", "utf8");
22
+ git(["add", "."], dir);
23
+ git(["commit", "-m", "add the first value"], dir);
24
+ return dir;
25
+ }
26
+ test("buildCinema renders a self-contained HTML player", () => {
27
+ const dir = makeRepo();
28
+ try {
29
+ const report = buildCinema(dir, { title: "session", sinceDays: 30 });
30
+ assert.equal(report.format, "html");
31
+ assert.ok(report.frames.length >= 1);
32
+ assert.match(report.content, /<!doctype html>/i);
33
+ assert.match(report.content, /<title>session<\/title>/);
34
+ assert.match(report.content, /play/i);
35
+ assert.ok(report.content.includes("add the first value"));
36
+ assert.ok(!/<script src=/.test(report.content));
37
+ assert.ok(!/<link[^>]+href=/.test(report.content));
38
+ assert.match(describeCinema(report), /кадров за 30 дн\. \(HTML\)/);
39
+ }
40
+ finally {
41
+ rmSync(dir, { recursive: true, force: true });
42
+ }
43
+ });
44
+ test("buildCinema emits an asciinema cast and hides paths", () => {
45
+ const dir = makeRepo();
46
+ try {
47
+ const report = buildCinema(dir, { sinceDays: 30, noPaths: true, cast: true });
48
+ assert.equal(report.format, "cast");
49
+ assert.match(report.content, /"version":2/);
50
+ assert.match(report.content, /"o"/);
51
+ assert.ok(!report.content.includes("add the first value"));
52
+ assert.ok(report.content.includes("(path hidden)"));
53
+ assert.match(describeCinema(report), /asciinema cast/);
54
+ }
55
+ finally {
56
+ rmSync(dir, { recursive: true, force: true });
57
+ }
58
+ });
59
+ test("buildCinema keeps only the newest frames", () => {
60
+ const dir = makeRepo();
61
+ try {
62
+ writeFileSync(join(dir, "app.ts"), "export const value = 2;\n", "utf8");
63
+ git(["add", "."], dir);
64
+ git(["commit", "-m", "bump the value"], dir);
65
+ const report = buildCinema(dir, { sinceDays: 30, maxFrames: 1 });
66
+ assert.equal(report.frames.length, 1);
67
+ assert.ok(report.frames[0]?.text.includes("bump the value"));
68
+ }
69
+ finally {
70
+ rmSync(dir, { recursive: true, force: true });
71
+ }
72
+ });
73
+ //# sourceMappingURL=cinema.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cinema.test.js","sourceRoot":"","sources":["../../src/core/cinema.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE1D,SAAS,GAAG,CAAC,IAAc,EAAE,GAAW;IACtC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC5D,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACzB,GAAG,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,kBAAkB,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1C,GAAG,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/C,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,2BAA2B,EAAE,MAAM,CAAC,CAAC;IACxE,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACvB,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,qBAAqB,CAAC,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAC5D,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACrE,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qDAAqD,EAAE,GAAG,EAAE;IAC/D,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACzD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACpD,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,2BAA2B,EAAE,MAAM,CAAC,CAAC;QACxE,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACvB,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC/D,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC"}
@@ -0,0 +1,107 @@
1
+ import { applyDependencyFixPlan, planDependencyFixes } from "./deps-fix.js";
2
+ import { auditDependencies } from "./deps-health.js";
3
+ import { analyzeEnvSync } from "./env-sync.js";
4
+ import { analyzeRepository } from "./slop/index.js";
5
+ import { analyzeTestWeakness } from "./test-weakening.js";
6
+ const RANK = { low: 1, medium: 2, high: 3 };
7
+ function count(tasks) {
8
+ return {
9
+ total: tasks.length,
10
+ high: tasks.filter((task) => task.severity === "high").length,
11
+ medium: tasks.filter((task) => task.severity === "medium").length,
12
+ low: tasks.filter((task) => task.severity === "low").length,
13
+ };
14
+ }
15
+ /** Builds a prioritized offline cleanup plan from existing analyzers. */
16
+ export function buildCleanupPlan(cwd, diff) {
17
+ const tasks = [];
18
+ try {
19
+ const audit = auditDependencies(cwd);
20
+ for (const issue of audit.issues) {
21
+ const severity = issue.severity === "high" ? "high" : issue.severity === "medium" ? "medium" : "low";
22
+ tasks.push({
23
+ id: `deps:${issue.kind}:${issue.name}`,
24
+ kind: "deps",
25
+ severity,
26
+ summary: `${issue.name}: ${issue.message}`,
27
+ });
28
+ }
29
+ const fixPlan = planDependencyFixes(cwd, audit);
30
+ for (const fix of fixPlan.fixes) {
31
+ tasks.push({
32
+ id: `deps-fix:${fix.name}:${fix.action}`,
33
+ kind: "deps-fix",
34
+ severity: "low",
35
+ summary: `${fix.action}: ${fix.name}${fix.to ? ` -> ${fix.to}` : ""}`,
36
+ });
37
+ }
38
+ }
39
+ catch {
40
+ // A repository without a package manager has no dependency tasks.
41
+ }
42
+ try {
43
+ const slop = analyzeRepository(cwd, { blame: false });
44
+ if (slop.index >= 40) {
45
+ tasks.push({
46
+ id: "slop:index",
47
+ kind: "slop",
48
+ severity: slop.index >= 70 ? "high" : "medium",
49
+ summary: `Slop Index ${String(slop.index)}/100 (${slop.grade})`,
50
+ });
51
+ }
52
+ }
53
+ catch {
54
+ // Slop needs git; skip it outside a repository.
55
+ }
56
+ try {
57
+ const env = analyzeEnvSync(cwd, diff);
58
+ for (const name of env.missing) {
59
+ tasks.push({ id: `env:missing:${name}`, kind: "env", severity: "high", summary: `добавить ${name} в .env` });
60
+ }
61
+ for (const name of env.undocumented) {
62
+ tasks.push({
63
+ id: `env:undocumented:${name}`,
64
+ kind: "env",
65
+ severity: "medium",
66
+ summary: `задокументировать ${name} в .env.example`,
67
+ });
68
+ }
69
+ }
70
+ catch {
71
+ // Env parsing never throws in practice, but a cleanup plan must survive it.
72
+ }
73
+ for (const finding of analyzeTestWeakness(diff)) {
74
+ tasks.push({
75
+ id: `tests:${finding.kind}:${finding.file}:${String(finding.line)}`,
76
+ kind: "tests",
77
+ severity: "high",
78
+ summary: `${finding.file}:${String(finding.line)} ${finding.kind}: ${finding.detail}`,
79
+ file: finding.file,
80
+ });
81
+ }
82
+ tasks.sort((left, right) => RANK[right.severity] - RANK[left.severity] || left.id.localeCompare(right.id));
83
+ const counts = count(tasks);
84
+ const status = counts.high > 0 ? "fail" : counts.total > 0 ? "warn" : "pass";
85
+ return { tasks, counts, status };
86
+ }
87
+ /** Applies only the dependency fixes that are safe to write offline. */
88
+ export function applyCleanupPlan(cwd) {
89
+ const audit = auditDependencies(cwd);
90
+ const plan = planDependencyFixes(cwd, audit);
91
+ if (plan.fixes.length === 0)
92
+ return { applied: false, fixed: 0 };
93
+ const applied = applyDependencyFixPlan(cwd, plan);
94
+ return { applied, fixed: applied ? plan.fixes.length : 0 };
95
+ }
96
+ export function cleanupFailsGate(tasks, threshold) {
97
+ return tasks.some((task) => RANK[task.severity] >= RANK[threshold]);
98
+ }
99
+ export function describeCleanup(plan) {
100
+ if (plan.tasks.length === 0)
101
+ return "Задач для уборки не найдено.";
102
+ const lines = plan.tasks.slice(0, 20).map((task) => `- [${task.severity}] ${task.summary}`);
103
+ if (plan.tasks.length > 20)
104
+ lines.push(`- …и ещё ${String(plan.tasks.length - 20)}`);
105
+ return lines.join("\n");
106
+ }
107
+ //# sourceMappingURL=cleanup.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cleanup.js","sourceRoot":"","sources":["../../src/core/cleanup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAmB1D,MAAM,IAAI,GAAoC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAE7E,SAAS,KAAK,CAAC,KAAoB;IACjC,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;QAC7D,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;QACjE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM;KAC5D,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,IAAY;IACxD,MAAM,KAAK,GAAkB,EAAE,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;YACtF,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,QAAQ,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE;gBACtC,IAAI,EAAE,MAAM;gBACZ,QAAQ;gBACR,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,YAAY,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE;gBACxC,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;aACtE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBAC9C,OAAO,EAAE,cAAc,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,GAAG;aAChE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,eAAe,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,IAAI,SAAS,EAAE,CAAC,CAAC;QAC/G,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,oBAAoB,IAAI,EAAE;gBAC9B,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,qBAAqB,IAAI,iBAAiB;aACpD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;IAC9E,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,SAAS,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YACnE,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE;YACrF,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CACR,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAC/F,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7E,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAoB,EAAE,SAA0B;IAC/E,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAiB;IAC/C,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,8BAA8B,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5F,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
@@ -0,0 +1,193 @@
1
+ import { createHash, createPrivateKey, createPublicKey, sign, verify } from "node:crypto";
2
+ import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
3
+ import { join, resolve, dirname } from "node:path";
4
+ import { PilotError } from "./errors.js";
5
+ import { runGit } from "./git.js";
6
+ import { readReceipt, receiptPath, verifyReceipt } from "./receipt.js";
7
+ const MANIFEST_VERSION = 1;
8
+ export function complianceDir(cwd) {
9
+ return join(cwd, ".oc-pilot", "compliance");
10
+ }
11
+ export function latestManifestPath(cwd) {
12
+ return join(complianceDir(cwd), "latest.json");
13
+ }
14
+ function stable(value) {
15
+ if (value === null || typeof value !== "object")
16
+ return JSON.stringify(value);
17
+ if (Array.isArray(value))
18
+ return `[${value.map(stable).join(",")}]`;
19
+ const entries = Object.entries(value)
20
+ .filter(([, item]) => item !== undefined)
21
+ .sort(([left], [right]) => left.localeCompare(right));
22
+ return `{${entries.map(([key, item]) => `${JSON.stringify(key)}:${stable(item)}`).join(",")}}`;
23
+ }
24
+ export function sha256(text) {
25
+ return createHash("sha256").update(text, "utf8").digest("hex");
26
+ }
27
+ export function manifestBody(manifest) {
28
+ const { hash: _hash, signature: _signature, ...body } = manifest;
29
+ return body;
30
+ }
31
+ export function manifestHash(manifest) {
32
+ return sha256(stable(manifestBody(manifest)));
33
+ }
34
+ export function buildComplianceManifest(cwd, options = {}) {
35
+ const head = runGit(["rev-parse", "HEAD"], cwd);
36
+ const commit = head.status === 0 ? head.stdout.trim() : null;
37
+ const branchResult = runGit(["rev-parse", "--abbrev-ref", "HEAD"], cwd);
38
+ const branch = branchResult.status === 0 ? branchResult.stdout.trim() : null;
39
+ const status = runGit(["status", "--porcelain"], cwd);
40
+ const dirty = status.status === 0 && status.stdout.trim().length > 0;
41
+ const receiptFile = options.receiptPath ? resolve(cwd, options.receiptPath) : receiptPath(cwd);
42
+ let receipt = null;
43
+ let receiptSummary = null;
44
+ let checks = [];
45
+ let tests = null;
46
+ if (receiptFile && existsSync(receiptFile)) {
47
+ receipt = readReceipt(receiptFile);
48
+ const verification = verifyReceipt(cwd, receipt);
49
+ receiptSummary = {
50
+ path: receiptFile,
51
+ hash: receipt.hash,
52
+ ok: verification.ok,
53
+ signature: verification.signature,
54
+ };
55
+ checks = receipt.preflight.checks.map((check) => ({
56
+ id: check.id,
57
+ status: check.status,
58
+ summary: check.summary,
59
+ }));
60
+ tests = receipt.tests
61
+ ? { command: receipt.tests.command, passed: receipt.tests.passed, exitCode: receipt.tests.exitCode }
62
+ : null;
63
+ }
64
+ let sbom = null;
65
+ if (options.sbomPath) {
66
+ const sbomPath = resolve(cwd, options.sbomPath);
67
+ if (!existsSync(sbomPath)) {
68
+ throw new PilotError(`SBOM не найден: ${options.sbomPath}`, { exitCode: 2 });
69
+ }
70
+ sbom = { path: sbomPath, hash: sha256(readFileSync(sbomPath, "utf8")) };
71
+ }
72
+ const previous = options.previous !== undefined ? options.previous : loadLatestManifest(cwd);
73
+ const body = {
74
+ version: MANIFEST_VERSION,
75
+ tool: "oc-pilot",
76
+ createdAt: new Date().toISOString(),
77
+ commit,
78
+ branch,
79
+ dirty,
80
+ previous: previous?.hash ?? null,
81
+ receipt: receiptSummary,
82
+ checks,
83
+ tests,
84
+ sbom,
85
+ model: options.model ?? null,
86
+ };
87
+ const manifest = { ...body, hash: sha256(stable(body)) };
88
+ return manifest;
89
+ }
90
+ export function signComplianceManifest(manifest, privateKeyPem) {
91
+ const key = createPrivateKey(privateKeyPem);
92
+ const signature = sign(null, Buffer.from(stable(manifestBody(manifest)), "utf8"), key).toString("base64");
93
+ return { ...manifest, signature };
94
+ }
95
+ export function verifyComplianceManifest(cwd, manifest, options = {}) {
96
+ const hashOk = manifestHash(manifest) === manifest.hash;
97
+ const headResult = runGit(["rev-parse", "HEAD"], cwd);
98
+ const head = headResult.status === 0 ? headResult.stdout.trim() : null;
99
+ const commitOk = manifest.commit === null || manifest.commit === head;
100
+ let chainOk = manifest.previous === null;
101
+ if (manifest.previous !== null) {
102
+ chainOk = findManifestByHash(cwd, manifest.previous) !== undefined;
103
+ }
104
+ let signature = "unchecked";
105
+ if (manifest.signature === undefined) {
106
+ signature = "missing";
107
+ }
108
+ else if (options.publicKeyPem) {
109
+ try {
110
+ const key = createPublicKey(options.publicKeyPem);
111
+ const valid = verify(null, Buffer.from(stable(manifestBody(manifest)), "utf8"), key, Buffer.from(manifest.signature, "base64"));
112
+ signature = valid ? "valid" : "invalid";
113
+ }
114
+ catch {
115
+ signature = "invalid";
116
+ }
117
+ }
118
+ const ok = hashOk && commitOk && chainOk && signature !== "invalid";
119
+ const reason = !hashOk
120
+ ? "хеш манифеста не совпадает"
121
+ : !commitOk
122
+ ? "манифест относится к другому коммиту"
123
+ : !chainOk
124
+ ? "предыдущий манифест не найден в цепочке"
125
+ : signature === "invalid"
126
+ ? "подпись недействительна"
127
+ : undefined;
128
+ return { ok, hashOk, chainOk, commitOk, signature, commit: manifest.commit, head, ...(reason ? { reason } : {}) };
129
+ }
130
+ export function findManifestByHash(cwd, hash) {
131
+ const dir = complianceDir(cwd);
132
+ if (!existsSync(dir))
133
+ return undefined;
134
+ for (const entry of readdirSync(dir)) {
135
+ if (!entry.endsWith(".json"))
136
+ continue;
137
+ try {
138
+ const manifest = JSON.parse(readFileSync(join(dir, entry), "utf8"));
139
+ if (manifest.hash === hash)
140
+ return manifest;
141
+ }
142
+ catch {
143
+ // Ignore unreadable manifests; verification reports the broken chain.
144
+ }
145
+ }
146
+ return undefined;
147
+ }
148
+ export function loadLatestManifest(cwd) {
149
+ const path = latestManifestPath(cwd);
150
+ if (!existsSync(path))
151
+ return null;
152
+ try {
153
+ return JSON.parse(readFileSync(path, "utf8"));
154
+ }
155
+ catch {
156
+ return null;
157
+ }
158
+ }
159
+ export function saveComplianceManifest(cwd, manifest, output) {
160
+ const target = output ? resolve(cwd, output) : join(complianceDir(cwd), `manifest-${manifest.hash.slice(0, 12)}.json`);
161
+ mkdirSync(dirname(target), { recursive: true });
162
+ writeFileSync(target, `${JSON.stringify(manifest, null, 2)}\n`, "utf8");
163
+ if (!output) {
164
+ writeFileSync(latestManifestPath(cwd), `${JSON.stringify(manifest, null, 2)}\n`, "utf8");
165
+ }
166
+ return target;
167
+ }
168
+ export function readComplianceManifest(path) {
169
+ try {
170
+ return JSON.parse(readFileSync(path, "utf8"));
171
+ }
172
+ catch (error) {
173
+ throw new PilotError(`Не удалось прочитать манифест: ${path}`, {
174
+ hint: error instanceof Error ? error.message : undefined,
175
+ exitCode: 2,
176
+ });
177
+ }
178
+ }
179
+ export function describeCompliance(manifest) {
180
+ const failed = manifest.checks.filter((check) => check.status === "fail");
181
+ const lines = [
182
+ `Коммит: ${manifest.commit ?? "нет"} (${manifest.branch ?? "detached"})${manifest.dirty ? ", дерево изменено" : ""}.`,
183
+ `Проверок: ${String(manifest.checks.length)}, провалено: ${String(failed.length)}.`,
184
+ `Тесты: ${manifest.tests ? (manifest.tests.passed ? "пройдены" : "провалены") : "нет данных"}.`,
185
+ `Квитанция: ${manifest.receipt ? (manifest.receipt.ok ? "действительна" : "недействительна") : "нет"}.`,
186
+ `SBOM: ${manifest.sbom ? "приложен" : "нет"}.`,
187
+ `Хеш: ${manifest.hash}.`,
188
+ ];
189
+ if (manifest.previous)
190
+ lines.push(`Предыдущий манифест: ${manifest.previous}.`);
191
+ return `${lines.join("\n")}\n`;
192
+ }
193
+ //# sourceMappingURL=compliance.js.map