sdd-mcp-server 5.3.0 → 5.5.0

package/dist/application/services/JevAdvisoryService.js

@@ -0,0 +1,310 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { createHash } from 'node:crypto';
+import path from 'node:path';
+import { inject, injectable } from 'inversify';
+import { TYPES } from '../../infrastructure/di/types.js';
+import { isWellFormedBaseRef } from './JevBaseRef.js';
+import { buildRangeManifest, buildReviewManifest } from './JevChangeManifest.js';
+import { JevCommitLookup } from './JevCommitLookup.js';
+import { JevExchange } from './JevExchange.js';
+import { QUESTION_SET_VERSION } from './JevQuestionCatalog.js';
+import { flagDesign, flagRed, flagRequirements, flagTestcases, renderJevLine } from './JevReport.js';
+import { inputHash, JevReviewCheck } from './JevReviewCheck.js';
+import { skippedResult, unavailableResult } from './JevResults.js';
+import { classifyRedEvidence } from './RedEvidenceClassifier.js';
+import { buildDesignExchange, buildRedExchange, buildRequirementsExchange } from './JevSpecState.js';
+import { buildTestcaseExchange } from './JevTestcaseState.js';
+import { JevSidecarStore } from './JevSidecarStore.js';
+import { readProjectJevSetting, resolveJevSettings } from './JevSettings.js';
+import { validateFeatureName } from './SpecPathResolver.js';
+const FEATURE_REQUIRED = new Set(['requirements', 'design', 'testcases', 'red']);
+const sha256 = (value) => createHash('sha256').update(value).digest('hex');
+let JevAdvisoryService = class JevAdvisoryService {
+    http;
+    git;
+    engine;
+    fileSystem;
+    logger;
+    env;
+    store;
+    exchange;
+    review;
+    commit;
+    constructor(http, git, engine, fileSystem, logger, env) {
+        this.http = http;
+        this.git = git;
+        this.engine = engine;
+        this.fileSystem = fileSystem;
+        this.logger = logger;
+        this.env = env;
+        this.store = new JevSidecarStore(fileSystem, logger);
+        this.exchange = new JevExchange(http, this.store, logger);
+        this.review = new JevReviewCheck(this.exchange);
+        this.commit = new JevCommitLookup(fileSystem, git, this.store);
+    }
+    /** Never rejects: every failure becomes a result value. */
+    async check(request) {
+        try {
+            return await this.run(request);
+        }
+        catch (error) {
+            this.logger.warn('JEV check failed locally', { check: request.check, errorName: error instanceof Error ? error.name : 'Error' });
+            return skippedResult(request.check, 'not-ready');
+        }
+    }
+    async run(request) {
+        // Gates 1-2 return before any path resolution, lock, git call, or write.
+        const settings = await this.resolveSettings(request.projectRoot);
+        if (!settings.enabled) {
+            return request.check === 'commit' ? skippedResult('commit', 'disabled') : unavailableResult(request.check, 'disabled');
+        }
+        if (request.check === 'commit')
+            return this.commitLookup(request);
+        if (!settings.hasKey)
+            return unavailableResult(request.check, 'no-key');
+        if (!this.baseRefAcceptable(request))
+            return skippedResult(request.check, 'invalid-base-ref');
+        if (!(await this.featureInScope(request)))
+            return skippedResult(request.check, 'feature-not-found');
+        if ((request.check === 'security' || request.check === 'principles') && !settings.allowCode) {
+            return this.codeDisabled(request);
+        }
+        return this.dispatch(request, { projectRoot: request.projectRoot, featureName: request.featureName, settings });
+    }
+    dispatch(request, context) {
+        if (request.check === 'requirements' || request.check === 'design')
+            return this.specCheck(request, context);
+        if (request.check === 'testcases')
+            return this.testcasesCheck(request, context);
+        if (request.check === 'red')
+            return this.redCheck(request, context);
+        if (request.check === 'security' || request.check === 'principles')
+            return this.review.run(request, context, () => this.manifestFor(request));
+        return skippedResult(request.check, 'not-ready');
+    }
+    /** The commit lookup matches staged diffs only, so a base ref has no meaning there. */
+    commitLookup(request) {
+        return request.baseRef === undefined ? this.commit.run(request.projectRoot) : skippedResult('commit', 'invalid-base-ref');
+    }
+    /** No base ref is always fine; one is meaningful only for the code reviews, and only when well formed. */
+    baseRefAcceptable(request) {
+        if (request.baseRef === undefined)
+            return true;
+        return (request.check === 'security' || request.check === 'principles') && isWellFormedBaseRef(request.baseRef);
+    }
+    /** A snapshot of a phase that passed validation and still matches what was recorded; else undefined. */
+    async readySnapshot(request, phase) {
+        const snapshot = await this.engine.readAdvisorySnapshot({ projectRoot: request.projectRoot, featureName: request.featureName ?? '', phase });
+        const ready = snapshot.validationStatus === 'passed'
+            && snapshot.recordedSha256 !== undefined && snapshot.recordedSha256 === snapshot.observedSha256;
+        return ready ? snapshot : undefined;
+    }
+    /** A2: classify RED evidence locally; only ambiguous evidence is sent. Never affects record-red. */
+    async redCheck(request, context) {
+        const { taskNumber, testName, evidence } = request;
+        if (!taskNumber || !testName || !evidence || evidence.exitCode === 0)
+            return skippedResult('red', 'not-ready');
+        const snapshot = await this.engine.readAdvisorySnapshot({ projectRoot: request.projectRoot, featureName: request.featureName ?? '', phase: 'tasks' });
+        const task = snapshot.implementation?.tasks[taskNumber];
+        if (!task || task.status !== 'in-progress' || !task.tddRequired)
+            return skippedResult('red', 'not-ready');
+        const binding = {
+            questionSetVersion: QUESTION_SET_VERSION,
+            evidenceSha256: sha256(JSON.stringify([taskNumber, testName, evidence.command, evidence.summary])),
+        };
+        const local = classifyRedEvidence(evidence.command, evidence.summary);
+        if (local.classification !== 'ambiguous')
+            return this.localRed(request, context, binding, local);
+        const built = buildRedExchange(taskNumber, testName, evidence, task.acceptanceCriteria);
+        if (!built)
+            return skippedResult('red', 'not-ready');
+        const plan = {
+            check: 'red',
+            kind: 'red',
+            taskNumber,
+            binding,
+            state: built.state,
+            questions: built.questions,
+            omittedIds: built.omittedIds,
+            truncated: built.truncated,
+            redactions: built.redactions,
+            interpret: (answers) => {
+                const flagged = flagRed(answers).length > 0 ? [taskNumber] : [];
+                return { flagged, details: [{ id: taskNumber, flagged: flagged.length > 0 }], extras: { classification: 'ambiguous' } };
+            },
+        };
+        return this.exchange.run(plan, context);
+    }
+    /** A decisive local result costs nothing: no key use, no request. */
+    async localRed(request, context, binding, local) {
+        const taskNumber = request.taskNumber ?? '';
+        const sidecar = {
+            schema: 1,
+            kind: 'red',
+            createdAt: new Date().toISOString(),
+            binding,
+            status: 'answered',
+            source: 'local',
+            meta: { classification: local.classification, ...(local.matchedPattern && { matchedPattern: local.matchedPattern }) },
+            truncated: false,
+            omittedIds: [],
+            droppedFindingIds: [],
+            redactions: 0,
+        };
+        const written = await this.store.write(context.projectRoot, context.featureName, sidecar, taskNumber);
+        const flagged = local.classification === 'setup' ? [taskNumber] : [];
+        return {
+            check: 'red',
+            status: 'answered',
+            line: renderJevLine({ status: 'answered', flagged }),
+            flagged,
+            details: [{ id: taskNumber, flagged: flagged.length > 0, note: local.matchedPattern }],
+            persisted: written.persisted,
+            sidecar: written.path,
+            truncated: false,
+            redactions: 0,
+            classification: local.classification,
+            matchedPattern: local.matchedPattern,
+        };
+    }
+    /**
+     * A1: judge the planned test cases. The skill first calls without cases to learn whether JEV is active.
+     * With no TDD-required task, only the not-applicable reasons are judged, so no cases are needed.
+     */
+    async testcasesCheck(request, context) {
+        const cases = request.cases ?? [];
+        const snapshot = await this.readySnapshot(request, 'tasks');
+        const built = snapshot && buildTestcaseExchange(snapshot, cases);
+        if (!snapshot || !built)
+            return skippedResult('testcases', 'not-ready');
+        // Without a single case for an existing TDD-required task, every task would be judged on `cases: []`.
+        if (built.tddTaskCount > 0 && built.matchedCases === 0)
+            return skippedResult('testcases', 'cases-required');
+        const plan = {
+            check: 'testcases',
+            kind: 'testcases',
+            binding: {
+                questionSetVersion: QUESTION_SET_VERSION,
+                revision: snapshot.revision,
+                artifactSha256: snapshot.recordedSha256,
+                caseListSha256: built.caseListSha256,
+            },
+            state: built.state,
+            questions: built.questions,
+            omittedIds: built.omittedIds,
+            truncated: built.truncated,
+            redactions: built.redactions,
+            interpret: (answers) => {
+                const flagged = flagTestcases(answers, built.tasks);
+                const flaggedFirst = [...flagged, ...built.itemIds.filter((id) => !flagged.includes(id))];
+                return {
+                    flagged,
+                    details: flaggedFirst.map((id) => ({ id, flagged: flagged.includes(id) })),
+                    extras: {
+                        ...(built.unknownTasks.length > 0 && { unknownTasks: built.unknownTasks }),
+                        ...(built.truncatedTasks.length > 0 && { truncatedTasks: built.truncatedTasks }),
+                    },
+                };
+            },
+        };
+        return this.exchange.run(plan, context);
+    }
+    /** Requirements and design: one advisory check on a passed, unchanged artifact. */
+    async specCheck(request, context) {
+        const phase = request.check === 'design' ? 'design' : 'requirements';
+        const snapshot = await this.readySnapshot(request, phase);
+        const built = snapshot && (phase === 'design' ? buildDesignExchange(snapshot) : buildRequirementsExchange(snapshot));
+        if (!snapshot || !built)
+            return skippedResult(request.check, 'not-ready');
+        const plan = {
+            check: request.check,
+            kind: phase,
+            binding: { questionSetVersion: QUESTION_SET_VERSION, revision: snapshot.revision, artifactSha256: snapshot.recordedSha256 },
+            state: built.state,
+            questions: built.questions,
+            omittedIds: built.omittedIds,
+            truncated: built.truncated,
+            redactions: built.redactions,
+            interpret: (answers) => {
+                const flagged = phase === 'design'
+                    ? flagDesign(answers, built.itemIds, built.secondaryIds)
+                    : flagRequirements(answers, built.itemIds);
+                return { flagged, details: flagged.map((id) => ({ id, flagged: true })) };
+            },
+        };
+        return this.exchange.run(plan, context);
+    }
+    async resolveSettings(projectRoot) {
+        const envDecides = (this.env.SDD_JEV_ENABLED ?? '').trim() !== '';
+        const project = envDecides ? undefined : await readProjectJevSetting(projectRoot, this.fileSystem);
+        return resolveJevSettings(this.env, project);
+    }
+    /** Read-only existence check; never creates the feature directory (unlike the lock helper). */
+    async featureInScope(request) {
+        const { featureName } = request;
+        if (featureName === undefined)
+            return !FEATURE_REQUIRED.has(request.check);
+        try {
+            validateFeatureName(featureName);
+        }
+        catch {
+            return false;
+        }
+        return this.fileSystem.exists(path.join(path.resolve(request.projectRoot), '.spec', 'specs', featureName, 'spec.json'));
+    }
+    /** The change set to judge: the working tree alone, or the working tree against merge-base(baseRef, HEAD). */
+    manifestFor(request) {
+        return request.baseRef === undefined
+            ? buildReviewManifest(this.git, request.projectRoot)
+            : buildRangeManifest(this.git, request.projectRoot, request.baseRef);
+    }
+    /** Reported whatever the working tree holds (FR-14); a sidecar needs a manifest to bind to. */
+    async codeDisabled(request) {
+        const result = unavailableResult(request.check, 'code-disabled');
+        const manifest = await this.manifestFor(request);
+        if (manifest.status === 'invalid-base-ref')
+            return skippedResult(request.check, 'invalid-base-ref');
+        if (manifest.status !== 'ok')
+            return result;
+        const kind = request.check === 'principles' ? 'principles' : 'security';
+        const sidecar = {
+            schema: 1,
+            kind,
+            createdAt: new Date().toISOString(),
+            binding: { questionSetVersion: QUESTION_SET_VERSION, diffSha256: manifest.diffSha256, inputSha256: inputHash(request), ...manifest.range },
+            status: 'unavailable',
+            reason: 'code-disabled',
+            source: 'jev',
+            baseCommit: manifest.baseCommit,
+            truncated: false,
+            omittedIds: [],
+            droppedFindingIds: [],
+            redactions: 0,
+        };
+        const written = await this.store.write(request.projectRoot, request.featureName, sidecar);
+        return { ...result, persisted: written.persisted, sidecar: written.path };
+    }
+};
+JevAdvisoryService = __decorate([
+    injectable(),
+    __param(0, inject(TYPES.JevHttpPort)),
+    __param(1, inject(TYPES.GitPort)),
+    __param(2, inject(TYPES.WorkflowEngineService)),
+    __param(3, inject(TYPES.FileSystemPort)),
+    __param(4, inject(TYPES.LoggerPort)),
+    __param(5, inject(TYPES.JevEnvironment)),
+    __metadata("design:paramtypes", [Object, Object, Object, Object, Object, Object])
+], JevAdvisoryService);
+export { JevAdvisoryService };
+//# sourceMappingURL=JevAdvisoryService.js.map

package/dist/application/services/JevAdvisoryService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JevAdvisoryService.js","sourceRoot":"","sources":["../../../src/application/services/JevAdvisoryService.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,kCAAkC,CAAC;AAGzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAsB,MAAM,wBAAwB,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,WAAW,EAA2C,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACrG,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAgC,MAAM,4BAA4B,CAAC;AAC/F,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AACrG,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAmB,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAoB,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAc5D,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;AAEjF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAGpF,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAOiB;IACJ;IACc;IACP;IACJ;IACI;IAXhC,KAAK,CAAkB;IACvB,QAAQ,CAAc;IACtB,MAAM,CAAiB;IACvB,MAAM,CAAkB;IAEzC,YAC8C,IAAiB,EACrB,GAAY,EACE,MAAsB,EAC7B,UAA0B,EAC9B,MAAkB,EACd,GAAmB;QALtB,SAAI,GAAJ,IAAI,CAAa;QACrB,QAAG,GAAH,GAAG,CAAS;QACE,WAAM,GAAN,MAAM,CAAgB;QAC7B,eAAU,GAAV,UAAU,CAAgB;QAC9B,WAAM,GAAN,MAAM,CAAY;QACd,QAAG,GAAH,GAAG,CAAgB;QAElE,IAAI,CAAC,KAAK,GAAG,IAAI,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,eAAe,CAAC,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,KAAK,CAAC,OAAwB;QAClC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACjI,OAAO,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,OAAwB;QACxC,yEAAyE;QACzE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACzH,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;YAAE,OAAO,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QAC9F,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;QACpG,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC5F,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClH,CAAC;IAEO,QAAQ,CAAC,OAAwB,EAAE,OAAwB;QACjE,IAAI,OAAO,CAAC,KAAK,KAAK,cAAc,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5G,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChF,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9I,OAAO,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC;IAED,uFAAuF;IAC/E,YAAY,CAAC,OAAwB;QAC3C,OAAO,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC5H,CAAC;IAED,0GAA0G;IAClG,iBAAiB,CAAC,OAAwB;QAChD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClH,CAAC;IAED,wGAAwG;IAChG,KAAK,CAAC,aAAa,CAAC,OAAwB,EAAE,KAA0C;QAC9F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7I,MAAM,KAAK,GAAG,QAAQ,CAAC,gBAAgB,KAAK,QAAQ;eAC/C,QAAQ,CAAC,cAAc,KAAK,SAAS,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc,CAAC;QAClG,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACtC,CAAC;IAED,oGAAoG;IAC5F,KAAK,CAAC,QAAQ,CAAC,OAAwB,EAAE,OAAwB;QACvE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QACnD,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC/G,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACtJ,MAAM,IAAI,GAAG,QAAQ,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAE1G,MAAM,OAAO,GAAG;YACd,kBAAkB,EAAE,oBAAoB;YACxC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;SACnG,CAAC;QACF,MAAM,KAAK,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtE,IAAI,KAAK,CAAC,cAAc,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAEjG,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACxF,IAAI,CAAC,KAAK;YAAE,OAAO,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACrD,MAAM,IAAI,GAAiB;YACzB,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,KAAK;YACX,UAAU;YACV,OAAO;YACP,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;gBACrB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,CAAC;YAC1H,CAAC;SACF,CAAC;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,qEAAqE;IAC7D,KAAK,CAAC,QAAQ,CACpB,OAAwB,EACxB,OAAwB,EACxB,OAA+D,EAC/D,KAA8B;QAE9B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAe;YAC1B,MAAM,EAAE,CAAC;YACT,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO;YACP,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,EAAE;YACrH,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,EAAE;YACd,iBAAiB,EAAE,EAAE;YACrB,UAAU,EAAE,CAAC;SACd,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACtG,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;YACpD,OAAO;YACP,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;YACtF,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,CAAC;YACb,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,cAAc,CAAC,OAAwB,EAAE,OAAwB;QAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,QAAQ,IAAI,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK;YAAE,OAAO,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACxE,sGAAsG;QACtG,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC;YAAE,OAAO,aAAa,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC5G,MAAM,IAAI,GAAiB;YACzB,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE;gBACP,kBAAkB,EAAE,oBAAoB;gBACxC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC;YACD,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;gBACrB,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBACpD,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC1F,OAAO;oBACL,OAAO;oBACP,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;oBAC1E,MAAM,EAAE;wBACN,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;wBAC1E,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;qBACjF;iBACF,CAAC;YACJ,CAAC;SACF,CAAC;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,mFAAmF;IAC3E,KAAK,CAAC,SAAS,CAAC,OAAwB,EAAE,OAAwB;QACxE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,QAAQ,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrH,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK;YAAE,OAAO,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAiB;YACzB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE;YAC3H,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;gBACrB,MAAM,OAAO,GAAG,KAAK,KAAK,QAAQ;oBAChC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC;oBACxD,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC7C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YAC5E,CAAC;SACF,CAAC;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,WAAmB;QAC/C,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QAClE,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACnG,OAAO,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,+FAA+F;IACvF,KAAK,CAAC,cAAc,CAAC,OAAwB;QACnD,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;QAChC,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3E,IAAI,CAAC;YACH,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1H,CAAC;IAED,8GAA8G;IACtG,WAAW,CAAC,OAAwB;QAC1C,OAAO,OAAO,CAAC,OAAO,KAAK,SAAS;YAClC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC;YACpD,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,CAAC;IAED,+FAA+F;IACvF,KAAK,CAAC,YAAY,CAAC,OAAwB;QACjD,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,MAAM,KAAK,kBAAkB;YAAE,OAAO,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QACpG,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;QACxE,MAAM,OAAO,GAAe;YAC1B,MAAM,EAAE,CAAC;YACT,IAAI;YACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE;YAC1I,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,eAAe;YACvB,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,EAAE;YACd,iBAAiB,EAAE,EAAE;YACrB,UAAU,EAAE,CAAC;SACd,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC1F,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5E,CAAC;CACF,CAAA;AArQY,kBAAkB;IAD9B,UAAU,EAAE;IAQR,WAAA,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IACzB,WAAA,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACrB,WAAA,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAA;IACnC,WAAA,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IAC5B,WAAA,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACxB,WAAA,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;;GAZpB,kBAAkB,CAqQ9B"}

package/dist/application/services/JevBaseRef.d.ts

@@ -0,0 +1,21 @@
+import type { GitPort } from '../../domain/ports.js';
+export declare const MAX_BASE_REF_LENGTH = 256;
+/**
+ * Strict shape check for a caller-supplied base ref. It runs before any git command, so a value
+ * that could be read as an option (leading `-`) or that carries whitespace or control characters
+ * never reaches git.
+ */
+export declare function isWellFormedBaseRef(value: string): boolean;
+export type ResolvedRange = {
+    ok: true;
+    rangeBaseCommit: string;
+    headCommit: string;
+} | {
+    ok: false;
+};
+/**
+ * Resolves a well-formed `baseRef` to the merge base with HEAD. The caller's ref appears in exactly
+ * one argument vector, after `--end-of-options`; every later command receives only object ids that
+ * git itself printed and that matched the object-id shape.
+ */
+export declare function resolveRange(git: GitPort, root: string, baseRef: string): Promise<ResolvedRange>;

package/dist/application/services/JevBaseRef.js

@@ -0,0 +1,46 @@
+export const MAX_BASE_REF_LENGTH = 256;
+const DEL = 0x7f;
+const LAST_C0_CONTROL = 0x1f;
+const hasControlCharacter = (value) => [...value].some((char) => {
+    const code = char.codePointAt(0) ?? 0;
+    return code <= LAST_C0_CONTROL || code === DEL;
+});
+/**
+ * Strict shape check for a caller-supplied base ref. It runs before any git command, so a value
+ * that could be read as an option (leading `-`) or that carries whitespace or control characters
+ * never reaches git.
+ */
+export function isWellFormedBaseRef(value) {
+    return value.length > 0
+        && value.length <= MAX_BASE_REF_LENGTH
+        && !value.startsWith('-')
+        && !/\s/u.test(value)
+        && !hasControlCharacter(value);
+}
+/** SHA-1 or SHA-256 object id, as git prints it. */
+const OBJECT_ID = /^[0-9a-f]{40}(?:[0-9a-f]{24})?$/;
+const FAILED = { ok: false };
+/** One read-only git command whose whole output must be a single object id. */
+async function objectId(git, root, args) {
+    const result = await git.run(args, root);
+    if (!result.ok)
+        return undefined;
+    const id = result.stdout.toString('utf8').trim();
+    return OBJECT_ID.test(id) ? id : undefined;
+}
+/**
+ * Resolves a well-formed `baseRef` to the merge base with HEAD. The caller's ref appears in exactly
+ * one argument vector, after `--end-of-options`; every later command receives only object ids that
+ * git itself printed and that matched the object-id shape.
+ */
+export async function resolveRange(git, root, baseRef) {
+    const base = await objectId(git, root, ['rev-parse', '--verify', '--quiet', '--end-of-options', `${baseRef}^{commit}`]);
+    if (!base)
+        return FAILED;
+    const head = await objectId(git, root, ['rev-parse', '--verify', '--quiet', 'HEAD']);
+    if (!head)
+        return FAILED;
+    const rangeBaseCommit = await objectId(git, root, ['merge-base', base, head]);
+    return rangeBaseCommit ? { ok: true, rangeBaseCommit, headCommit: head } : FAILED;
+}
+//# sourceMappingURL=JevBaseRef.js.map

package/dist/application/services/JevBaseRef.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JevBaseRef.js","sourceRoot":"","sources":["../../../src/application/services/JevBaseRef.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEvC,MAAM,GAAG,GAAG,IAAI,CAAC;AACjB,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAW,EAAE,CACrD,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;IACvB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,IAAI,IAAI,eAAe,IAAI,IAAI,KAAK,GAAG,CAAC;AACjD,CAAC,CAAC,CAAC;AAEL;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC;WAClB,KAAK,CAAC,MAAM,IAAI,mBAAmB;WACnC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;WACtB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;WAClB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAMD,oDAAoD;AACpD,MAAM,SAAS,GAAG,iCAAiC,CAAC;AACpD,MAAM,MAAM,GAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AAE5C,+EAA+E;AAC/E,KAAK,UAAU,QAAQ,CAAC,GAAY,EAAE,IAAY,EAAE,IAAuB;IACzE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAY,EAAE,IAAY,EAAE,OAAe;IAC5E,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,kBAAkB,EAAE,GAAG,OAAO,WAAW,CAAC,CAAC,CAAC;IACxH,IAAI,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC;IACzB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACrF,IAAI,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC;IACzB,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9E,OAAO,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AACpF,CAAC"}

package/dist/application/services/JevChangeManifest.d.ts

@@ -0,0 +1,33 @@
+import type { GitPort } from '../../domain/ports.js';
+export interface ManifestEntry {
+    path: string;
+    token: string;
+}
+export interface RangeIdentity {
+    rangeBaseCommit: string;
+    headCommit: string;
+}
+export type ChangeManifest = {
+    status: 'ok';
+    diffSha256: string;
+    baseCommit: string | null;
+    entries: ManifestEntry[];
+    range?: RangeIdentity;
+} | {
+    status: 'empty';
+} | {
+    status: 'unavailable';
+};
+export type RangeManifest = ChangeManifest | {
+    status: 'invalid-base-ref';
+};
+/** Working-tree changes plus untracked files; compares equal to a full stage of the same content. */
+export declare function buildReviewManifest(git: GitPort, projectRoot: string): Promise<ChangeManifest>;
+/** Staged changes only, hashed with the same definition as the review manifest. */
+export declare function buildStagedManifest(git: GitPort, projectRoot: string): Promise<ChangeManifest>;
+/**
+ * Everything that differs between merge-base(baseRef, HEAD) and the working tree: committed,
+ * staged, unstaged, and untracked changes, tokenized exactly like the review manifest. `baseRef`
+ * must already be well formed; an unresolvable one yields `invalid-base-ref`.
+ */
+export declare function buildRangeManifest(git: GitPort, projectRoot: string, baseRef: string): Promise<RangeManifest>;

package/dist/application/services/JevChangeManifest.js

@@ -0,0 +1,208 @@
+import { createHash } from 'node:crypto';
+import { lstat, readlink } from 'node:fs/promises';
+import path from 'node:path';
+import { resolveRange } from './JevBaseRef.js';
+const MAX_PATHS = 2000;
+const HASH_CHUNK = 200;
+const DELETED = 'deleted';
+const UNAVAILABLE = { status: 'unavailable' };
+/** JEV's own sidecars must not influence the hash that binds them. */
+const SIDECAR_PATH = /^\.spec\/(?:reviews\/|specs\/[^/]+\/review\/)/;
+const text = (stdout) => stdout.toString('utf8').split('\0').filter((part) => part.length > 0);
+async function kindOf(root, file) {
+    try {
+        const info = await lstat(path.join(root, file));
+        if (info.isFile())
+            return 'file';
+        if (info.isSymbolicLink())
+            return 'symlink';
+        return info.isDirectory() ? 'directory' : 'other';
+    }
+    catch {
+        return 'deleted';
+    }
+}
+async function baseCommit(git, root) {
+    const result = await git.run(['rev-parse', '--verify', '--quiet', 'HEAD'], root);
+    return result.ok ? result.stdout.toString('utf8').trim() || null : null;
+}
+/** The 120000 blob `git add` stores for a symlink: the hash of its link text, not of its target. */
+async function symlinkBlob(git, root, file) {
+    const target = await readlink(path.join(root, file), { encoding: 'buffer' });
+    const result = await git.run(['hash-object', '--no-filters', '--stdin'], root, target);
+    return result.ok ? result.stdout.toString('utf8').trim() || undefined : undefined;
+}
+/**
+ * The 160000 gitlink `git add` stores for a submodule or embedded repository: its HEAD commit.
+ * Undefined when the directory is not its own repository, has no commit, or its commit is
+ * unchanged from the one recorded in `recordedIn` (only its own working tree is dirty, which
+ * `git add` cannot stage).
+ */
+async function gitlinkCommit(git, root, dir, recordedIn) {
+    try {
+        await lstat(path.join(root, dir, '.git'));
+    }
+    catch {
+        return undefined;
+    }
+    const head = await git.run(['rev-parse', '--verify', '--quiet', 'HEAD'], path.join(root, dir));
+    const commit = head.ok ? head.stdout.toString('utf8').trim() : '';
+    if (!commit)
+        return undefined;
+    const recorded = await git.run(['ls-tree', '-z', recordedIn, '--', dir], root);
+    const match = recorded.ok ? /^160000 commit ([0-9a-f]+)\t/.exec(recorded.stdout.toString('utf8')) : null;
+    return match?.[1] === commit ? undefined : commit;
+}
+/** Blob ids for regular working-tree files, exactly as `git add` would store them. */
+async function workingTreeBlobs(git, root, files) {
+    const blobs = new Map();
+    for (let start = 0; start < files.length; start += HASH_CHUNK) {
+        const chunk = files.slice(start, start + HASH_CHUNK);
+        const result = await git.run(['hash-object', '--', ...chunk], root);
+        if (!result.ok)
+            return undefined;
+        const ids = result.stdout.toString('utf8').split('\n').filter((line) => line.length > 0);
+        if (ids.length !== chunk.length)
+            return undefined;
+        chunk.forEach((file, index) => blobs.set(file, ids[index]));
+    }
+    return blobs;
+}
+function finish(entries, base) {
+    const kept = entries.filter((entry) => !SIDECAR_PATH.test(entry.path)).sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+    if (kept.length === 0)
+        return { status: 'empty' };
+    if (kept.length > MAX_PATHS)
+        return UNAVAILABLE;
+    const manifest = kept.map((entry) => `${entry.path}\0${entry.token}\n`).join('');
+    return { status: 'ok', diffSha256: createHash('sha256').update(manifest).digest('hex'), baseCommit: base, entries: kept };
+}
+/**
+ * One token per changed path, as `git add` would store it. `recordedIn` is the commit a nested
+ * repository's gitlink is compared with: HEAD for working-tree reviews, the merge base for ranges.
+ */
+async function tokenEntries(git, root, paths, recordedIn) {
+    const present = [];
+    const entries = [];
+    for (const file of paths) {
+        const kind = await kindOf(root, file);
+        if (kind === 'file')
+            present.push(file);
+        else if (kind === 'deleted')
+            entries.push({ path: file, token: DELETED });
+        else if (kind === 'symlink') {
+            const blob = await symlinkBlob(git, root, file);
+            if (!blob)
+                return undefined;
+            entries.push({ path: file, token: blob });
+        }
+        else if (kind === 'directory') {
+            const commit = await gitlinkCommit(git, root, file, recordedIn);
+            if (commit)
+                entries.push({ path: file, token: commit });
+        }
+        // Other entry types (sockets, FIFOs) cannot be staged and are skipped.
+    }
+    const blobs = await workingTreeBlobs(git, root, present);
+    if (!blobs)
+        return undefined;
+    for (const [file, blob] of blobs)
+        entries.push({ path: file, token: blob });
+    return entries;
+}
+const STATUS_ARGS = ['-c', 'status.renames=false', 'status', '--porcelain=v1', '-z', '--untracked-files=all'];
+// An untracked embedded repository is listed with a trailing slash; `git add` records it without one.
+const statusPath = (record) => record.slice(3).replace(/\/$/, '');
+async function reviewEntries(git, root) {
+    const status = await git.run(STATUS_ARGS, root);
+    if (!status.ok)
+        return undefined;
+    return tokenEntries(git, root, text(status.stdout).map(statusPath), 'HEAD');
+}
+/** Every path that differs between the merge base and the working tree, plus untracked files. */
+async function rangeEntries(git, root, range) {
+    const diff = await git.run(['diff', '--name-status', '--no-renames', '--no-ext-diff', '-z', range.rangeBaseCommit, '--'], root);
+    const status = await git.run(STATUS_ARGS, root);
+    if (!diff.ok || !status.ok)
+        return undefined;
+    const paths = new Set(text(status.stdout).filter((record) => record.startsWith('?? ')).map(statusPath));
+    const removed = new Set();
+    const parts = text(diff.stdout);
+    for (let index = 0; index + 1 < parts.length; index += 2) {
+        const file = parts[index + 1];
+        // A path the commit tracked and the tree no longer holds is deleted, even if a directory now sits there.
+        if (parts[index] === 'D' && !paths.has(file))
+            removed.add(file);
+        else
+            paths.add(file);
+    }
+    const entries = await tokenEntries(git, root, [...paths], range.rangeBaseCommit);
+    return entries && [...[...removed].map((file) => ({ path: file, token: DELETED })), ...entries];
+}
+async function stagedEntries(git, root) {
+    const diff = await git.run(['diff', '--cached', '--name-status', '--no-renames', '-z'], root);
+    if (!diff.ok)
+        return undefined;
+    const parts = text(diff.stdout);
+    const entries = [];
+    const live = [];
+    for (let index = 0; index + 1 < parts.length; index += 2) {
+        const file = parts[index + 1];
+        if (parts[index] === 'D')
+            entries.push({ path: file, token: DELETED });
+        else
+            live.push(file);
+    }
+    if (live.length > 0) {
+        const listing = await git.run(['ls-files', '-s', '-z', '--', ...live], root);
+        if (!listing.ok)
+            return undefined;
+        for (const record of text(listing.stdout)) {
+            const match = /^\d+ ([0-9a-f]+) \d\t(.*)$/s.exec(record);
+            if (match)
+                entries.push({ path: match[2], token: match[1] });
+        }
+    }
+    return entries;
+}
+async function build(git, root, entriesOf) {
+    try {
+        const entries = await entriesOf(git, root);
+        if (!entries)
+            return UNAVAILABLE;
+        return finish(entries, await baseCommit(git, root));
+    }
+    catch {
+        return UNAVAILABLE;
+    }
+}
+/** Working-tree changes plus untracked files; compares equal to a full stage of the same content. */
+export function buildReviewManifest(git, projectRoot) {
+    return build(git, projectRoot, reviewEntries);
+}
+/** Staged changes only, hashed with the same definition as the review manifest. */
+export function buildStagedManifest(git, projectRoot) {
+    return build(git, projectRoot, stagedEntries);
+}
+/**
+ * Everything that differs between merge-base(baseRef, HEAD) and the working tree: committed,
+ * staged, unstaged, and untracked changes, tokenized exactly like the review manifest. `baseRef`
+ * must already be well formed; an unresolvable one yields `invalid-base-ref`.
+ */
+export async function buildRangeManifest(git, projectRoot, baseRef) {
+    try {
+        const resolved = await resolveRange(git, projectRoot, baseRef);
+        if (!resolved.ok)
+            return { status: 'invalid-base-ref' };
+        const range = { rangeBaseCommit: resolved.rangeBaseCommit, headCommit: resolved.headCommit };
+        const entries = await rangeEntries(git, projectRoot, range);
+        if (!entries)
+            return UNAVAILABLE;
+        const manifest = finish(entries, range.headCommit);
+        return manifest.status === 'ok' ? { ...manifest, range } : manifest;
+    }
+    catch {
+        return UNAVAILABLE;
+    }
+}
+//# sourceMappingURL=JevChangeManifest.js.map