paqad-ai 1.75.1 → 1.75.2

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # paqad-ai
 
+## 1.75.2
+
+### Patch Changes
+
+- 36bcf08: fix(#450): `loadChangeEvidence` now reconciles the session change-artifact
+  (`.paqad/session/changed-files.json`) against git before trusting it. A stale
+  artifact left over from an already-delivered change (its files committed and
+  clean in the working tree) is no longer attributed to a later, unrelated
+  session — which previously forced the full feature-development stage gate and a
+  `paqad-ai checks run` onto out-of-scope turns (e.g. a docs-only session). An
+  artifact entry is now kept only when git still considers it part of the current
+  change: dirty in the working tree, or committed on this branch since the
+  merge-base with the base branch. When every entry is stale, evidence falls
+  through to `git status`; when git cannot be read or has no base branch,
+  behavior is unchanged (the artifact is trusted). The fix is at the shared
+  `loadChangeEvidence` chokepoint, so every consumer (completion backstop, checks,
+  RAG, duplication, rule-scripts) is corrected at once.
+
 ## 1.75.1
 
 ### Patch Changes

package/dist/cli/index.js

@@ -26051,6 +26051,7 @@ ${lines.join("\n")}
 // src/pipeline/change-evidence.ts
 init_esm_shims();
 init_paths();
+init_git_state();
 import { existsSync as existsSync45 } from "fs";
 import { readFile as readFile39 } from "fs/promises";
 import { join as join99 } from "path";
@@ -26058,7 +26059,10 @@ import { execa as execa3 } from "execa";
 async function loadChangeEvidence(projectRoot) {
   const tracked = await readTrackedFiles(projectRoot);
   if (tracked.length > 0) {
-    return { files: tracked, source: "session-artifact" };
+    const reconciled = await reconcileTrackedWithGit(projectRoot, tracked);
+    if (reconciled.length > 0) {
+      return { files: reconciled, source: "session-artifact" };
+    }
   }
   const gitFiles = await readGitStatusFiles(projectRoot);
   if (gitFiles.length > 0) {
@@ -26066,6 +26070,40 @@ async function loadChangeEvidence(projectRoot) {
   }
   return { files: [], source: "none" };
 }
+async function reconcileTrackedWithGit(projectRoot, tracked) {
+  const changed = await gitChangedSet(projectRoot);
+  if (changed === null) {
+    return tracked;
+  }
+  return tracked.filter((filePath) => changed.has(filePath));
+}
+async function gitChangedSet(projectRoot) {
+  const gitState = readGitState(projectRoot);
+  if (!gitState.head_commit || !gitState.base_commit) {
+    return null;
+  }
+  const [statusFiles, committedFiles] = await Promise.all([
+    readGitStatusFiles(projectRoot),
+    readCommittedSinceBase(projectRoot, gitState.base_commit)
+  ]);
+  return /* @__PURE__ */ new Set([...statusFiles, ...committedFiles]);
+}
+async function readCommittedSinceBase(projectRoot, baseCommit) {
+  try {
+    const result = await execa3("git", ["diff", "--name-only", `${baseCommit}..HEAD`], {
+      cwd: projectRoot,
+      reject: false
+    });
+    if (result.exitCode !== 0) {
+      return [];
+    }
+    return normalizePaths(
+      result.stdout.split("\n").map((line) => line.trim()).filter(Boolean)
+    );
+  } catch {
+    return [];
+  }
+}
 async function readTrackedFiles(projectRoot) {
   const target = join99(projectRoot, PATHS.CHANGED_FILES);
   if (!existsSync45(target)) {
@@ -35055,7 +35093,7 @@ init_cancelled_error();
 init_events();
 
 // src/index.ts
-var VERSION = "1.75.1";
+var VERSION = "1.75.2";
 
 // src/cli/commands/audit.ts
 init_esm_shims();